txxx.tube/videos/16709419/enough-to-make-my-son-s-bully-stop
172.67.217.162301 Moved Permanently 0 B URL HTTP/1.1 txxx.tube/videos/16709419/enough-to-make-my-son-s-bully-stop
IP 172.67.217.162:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /videos/16709419/enough-to-make-my-son-s-bully-stop HTTP/1.1
Host: txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 16 Dec 2022 23:46:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 17 Dec 2022 00:46:27 GMT
Location: https://txxx.tube/videos/16709419/enough-to-make-my-son-s-bully-stop
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LlHeQJyhaxgEvmN%2Bbo0CUy21f6DmFTWd0lx%2B4HDF3v0h5YW3upYl5kMAleegUPygg%2B%2FohKFA8qxbQMpP0M6XhdHiDviDIgGU9XsNYGkFoZ%2BiLMvTrtV63UogucE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77ab4c6bcc06b4fd-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ae86164fd9297dfdc05d67d69284d70e
5e5f27e3fd492f715baa6820f05c0fafde4040b3
be20f6ae6a51d20611cb4d350b52a5d0a339af6722fe9b2482ef58826c1e9de0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE20F6AE6A51D20611CB4D350B52A5D0A339AF6722FE9B2482EF58826C1E9DE0"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6749
Expires: Sat, 17 Dec 2022 01:38:56 GMT
Date: Fri, 16 Dec 2022 23:46:27 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 96367f956a4177aec7e7e80221539d58
8dcad10fde96c139d1ef212388cb6755fe3fe077
f4f9bdb5180359dfd734cef1e6f1b54bc9d8f72cae557366eb74f22100b94dc4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F4F9BDB5180359DFD734CEF1E6F1B54BC9D8F72CAE557366EB74F22100B94DC4"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10247
Expires: Sat, 17 Dec 2022 02:37:14 GMT
Date: Fri, 16 Dec 2022 23:46:27 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b44c4b5daa307a355e7bab1c83c1ca82
dbd14cd873f1dd4502f277b3f51cb7bc8da0c080
fd4604461cfa002c8a261bb14eb8dda56817db231b9012b2eb38d6dbc2674df5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Alert, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 16 Dec 2022 23:45:13 GMT
content-type: application/json
age: 75
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 555fc6e99ad3bf077d1c4b9b805e428d
4e800fc8e809a950288df0e94992084647762561
fac00cada519279717e2a13528cb202d292fc92ed5eb42782c41f8e7b9509eaf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAC00CADA519279717E2A13528CB202D292FC92ED5EB42782C41F8E7B9509EAF"
Last-Modified: Fri, 16 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9357
Expires: Sat, 17 Dec 2022 02:22:25 GMT
Date: Fri, 16 Dec 2022 23:46:28 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: R/S64J4jy7ZjKR1slJLIoeFDdshdl0V9rGMdFufPkm8W/yLGrxmQ7hsxtKzW8x9kxnE34O6Gmk0=
x-amz-request-id: 2Z1P1R455R4DTG2F
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 16 Dec 2022 22:51:32 GMT
age: 3296
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 16 Dec 2022 23:46:28 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 130 kB IP 142.250.74.131:0
Size 130 kB (129632 bytes)
Hash e0bc64a5e438b85945a2456bca86f3eb
3474c6b3fbc685689be66f4204e59327d4ae0292
ccc262501b579adb956ae676a0ec3ceaceacd6ebfdb2824c4f2dce21ee532aec
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 23:46:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 8cffeaa037aa43ee5dd38d9bf940f0ec
385130d35323155499a61e73e16a9d9e7a6448b5
2938e838bf98de278488e22b736756400136c887e31b44fc608c4da2a07e6ae4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 23:46:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 8cffeaa037aa43ee5dd38d9bf940f0ec
385130d35323155499a61e73e16a9d9e7a6448b5
2938e838bf98de278488e22b736756400136c887e31b44fc608c4da2a07e6ae4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 23:46:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-MDKJT8
172.217.21.168200 OK 41 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MDKJT8
IP 172.217.21.168:0
File type ASCII text, with very long lines (1921)
Hash 2550a099d803d87ad362681bb444f75d
98a1bbbeba7c6786aca588f8a50e14441e84dc06
abd63e9298229c9233215edfe151d54091659fb57455764463735ad873068db7
GET /gtm.js?id=GTM-MDKJT8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 16 Dec 2022 23:46:28 GMT
expires: Fri, 16 Dec 2022 23:46:28 GMT
cache-control: private, max-age=900
last-modified: Fri, 16 Dec 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 40598
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 385bad1390edf4dc694548a3f7b16281
57536fa694ef8306c436a37dbfc2f82af2344120
e6ad8e17f7b82dc9b46e5e99a73b59fa284fa72cf737dada269da9cf856b7736
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 23:46:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 8cffeaa037aa43ee5dd38d9bf940f0ec
385130d35323155499a61e73e16a9d9e7a6448b5
2938e838bf98de278488e22b736756400136c887e31b44fc608c4da2a07e6ae4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 23:46:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 16 Dec 2022 23:33:23 GMT
age: 785
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 142400be99b933ea5e0c68ea6a6b3e89
80e94132940e5ebe69dd0a03396764127b8fda49
20e8cde3c6907a3c5d97fe9fbcf6a44035e1f7482f7e166adb2c38a30a9084ea
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 226
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 23:46:28 GMT
Last-Modified: Fri, 16 Dec 2022 23:42:43 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash adcdbcc032f763fb6df3452d06cec25f
92a7bf8209930989013619971c6abf39b5c639d4
25ac98be2316dd7238a2ef038b27642270be777b7425bbfcdb1ca09f8bedcb5f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 23:46:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash adcdbcc032f763fb6df3452d06cec25f
92a7bf8209930989013619971c6abf39b5c639d4
25ac98be2316dd7238a2ef038b27642270be777b7425bbfcdb1ca09f8bedcb5f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 23:46:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
216.58.207.227200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 13036, version 1.0\012- data
Hash 0ad032b3d07aaf33b160ac4799dda40f
06b931e0d0bf37f5037d9e66d6feedfddd21c0ba
c124c88ca4fcb4336e97617647ef0d32441329371120c8eabaea0fea226560b0
GET /s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://txxx.tube
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13036
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Dec 2022 19:28:49 GMT
expires: Thu, 14 Dec 2023 19:28:49 GMT
cache-control: public, max-age=31536000
age: 188259
last-modified: Wed, 27 Apr 2022 16:04:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2
216.58.207.227200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 13052, version 1.0\012- data
Hash 7cf79fbd1df848510d7352274efc2401
5540b5a26cc7dfe25294c4eabe011e2c6cd60143
bc9a16cd945457ad9463cdaed95129b01c589466978dfee3d019d9c604b2171a
GET /s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://txxx.tube
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13052
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Dec 2022 19:38:22 GMT
expires: Thu, 14 Dec 2023 19:38:22 GMT
cache-control: public, max-age=31536000
age: 187686
last-modified: Wed, 27 Apr 2022 16:09:03 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash adcdbcc032f763fb6df3452d06cec25f
92a7bf8209930989013619971c6abf39b5c639d4
25ac98be2316dd7238a2ef038b27642270be777b7425bbfcdb1ca09f8bedcb5f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 23:46:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
syndication.realsrv.com/ads-iframe-display.php?idzone=693925&output=noscript&type=300x250
95.211.229.245200 OK 66 kB URL HTTP/1.1 syndication.realsrv.com/ads-iframe-display.php?idzone=693925&output=noscript&type=300x250
IP 95.211.229.245:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash 1ccfebadfcb785ef5710f53c3cfa6e54
54c36de8a870b5d226eb0a6f1a9b4bae40901f44
65c6275899d50379fd3c5af3f03260613a28677deacff21b7fd27b01b15d7192
GET /ads-iframe-display.php?idzone=693925&output=noscript&type=300x250 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Dec 2022 23:46:28 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22639d0354b77df5.847800173469971550%22%3B%7D; expires=Sun, 15 Dec 2024 23:46:28 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
impressions=cmmsxrbonxgxamxeasxoxgeicmmsxaeenxgxamebscormgeimacslbecnxgxaaabssxamgeislsaroornxgxamxxameabgeicxbmsbxcnxgxamxeeslemgeioslmrxlrnxgxamemllesegeiccmmlmlcnxgxamxxxxxsegeialbsereanxgxamemlblaageioslmrxbrnxgxamxxallxageicxbmsbcenxgxamxxrsorogeioslmrxlsnxgxamxelrroegeicxbmsbocnxgxamxxameabgeicxbmsboenxgxamxxmslsmgeiclsmarcanxgxaaallsxlcgeiclsmrrmanxgxaaallsxlcgeirbabxabbnxgxamxxallxageiccmmlleanxgxamemxemcbgeimcrxsbcenxgxaameollsmgeimreaoboenxgxaameollsmgeimcclosscnxgxaalccxmexgeimacslbeenxgxaaboslelageioslmroemnxgxamxxcmsxlgeioslmrxbmnxgxamxxcombmgeicaxsscmbnxgxamexrbcemgeicaormlxonxgxaamealeoegeicaormbmcnxgxaamealeoegeimcclsxscnxgxaamsmxlcageimccloscanxgxaallmalxmgeimreaomxenxgxaamelbbsbgeimreaobscnxgxaamelbbsbgeimcclosconxgxaallsbmbbgeimcclsoeonxgxaamxaacblgeimacslbeonxgxaaloesaslgeimcclsxsanxgxaamsmxlcageimcclsxlbnxgxaamssmcolgeimaecseaonxgxaamssmcolgeimaecsxeonxgxaamssmcolgeimaecseronxgxaamssmcolgeimrblelrenxgxaamssmcolgeiccmmllebnxgxamemlblaageimcclsxlonxgxaamcsebsxgeimcclsoeenxgxaamcrclalgeimcclsxsbnxgxaamcrclalgeimcclossbnxgxaalbexcrageimcclsxlcnxgxaamrscxmxgeimaecseranxgxaabrlemaegeimcclosccnxgxaamrscxmxgeicaormlxcnxgxaalbxrlcegeicaormbmbnxgxaalrexasogeiclsmrbsenxgxaamaxcsxcgeialbserebnxgxamexsrmoogeimcclsxconxgxamxxcmsxlgeimcclsxmenxgxamxeasxoxgeialbserxonxgxaalbcxbsageimccloscenxgxaalmlsmmcgeimcclsxxonxgxamxxallxageimcclsxbcnxgxamebscormgeicaormlxanxgxaammacmrxgeimcclsxaonxgxamebscormgeimrblxxxbnxgxaambboecmgeimrblxelcnxgxaambboecmgeimrblxxrbnxgxaambboecmgeialbserxenxgxamexmlmxxgeimacslbeanxgxaablxaelxgeialbserecnxgxameoxbrrrgeiccmmllecnxgxamexsrmoogeisaeeasslnxgxaabrbeccogeimcclossanxgxaabrlemaegeimcclsxronxgxamxxallxageimaecseabnxgxaabrlemaegeimrblelrcnxgxaabrlemaegeimrblxemonxgxaabrlemaegeimcclsxcanxgxamxeeslemgeimaecsxoonxgxaabmalbxxgeircsxcxscnxgxaabbxeomsgeicaormbbenxgxaalexxbcxgeiabeocmconxgxaablxrcmmgeimcclsxxcnxgxamebscormgeimrblxeeanxgxaablsaloageimaecsemanxgxaalmmeabageimaecselonxgxaaloaroaageimcclsxacnxgxamxxallxageimcclselenxgxamebscormgeimaecsxronxgxaalxmmoorgeimaecsxsenxgxaalxmmoorgeimaecsercnxgxaalxmmoorgeimaecsembnxgxaalxmmoorgeimaecselenxgxaalxmmoorgeimaecobobnxgxaalsmleergeimaecomoanxgxaalsbbboageimrblxxoenxgxaalsbmacmgeimaecobsbnxgxamxxallxageimrblxosonxgxaalsbbboageimcclsxmanxgxamxeasxoxgeimaecsxccnxgxaalmeeamageimrblxeecnxgxaalmeeamageimrblelronxgxaalmeeamageimrblelmonxgxaalmeeamageimaecseacnxgxaalmmeabageimaecsxxcnxgxaalmmeabageicaormbmanxgxaalbxrlcegeimaecsxocnxgxaalbrxssogeicaormlobnxgxaallcccaogeimaecomrenxgxameexxllcgeimrblxxxanxgxameexxllrgeimrblxosbnxgxameexxllrgeimaecomlonxgxameexxllrgeimcclselanxgxamxeasxoxgeimrblxoxenxgxameexmllsgeimaecomconxgxameexmllsgeiclsmrrrenxgxamexlcmeageiclsmarocnxgxamexlcmeageiclsmrbecnxgxamexlcmeageiclsmarcbnxgxamexlcmeageimmccrbeanxgxamxebslxageimmccrlacnxgxamxebslxageimrblxeoenxgxamecrasabgeimmccrlaonxgxamxxallxageimmccrbxenxgxamxxallxageimmccrlaenxgxamemsxoscgeimmccrbebnxgxamxxxxxsegeiclsmrrmenxgxameaeoremgeiclsmarronxgxameaeoremgeimrblelxanxgxameacaclmgeicaormbabnxgxamemsarmegeicaormlsanxgxamemsarmegeicaormbconxgxamemsarmegeicaormblonxgxamemsarmegeimaecomcbnxgxamebscormgeimrblxoebnxgxamebscormgeimrblxoconxgxamxeasxoxgeimaecobebnxgxamxeasxoxgeimaecomrcnxgxamxeasxoxgeicaormlrenxgxamxxxmscageicaormbaanxgxamxxxmscageicaormblanxgxamxxxmscageimxlbalscnogxamxxrocebgxcceimxeoxsbensgxamxxrocebgxcceimmosssconsgxamxxrsorogxcceimxxrecsancgxamxxrsorsgxcceialrexexbnogxamxxrsorsgxcceimrexbcobnsgxamxxrsorsgxcceimmrbcrbbnogxamxxrsorsgxcceimrmaobxanogxamxxrsorsgxcceialcaercenxgxamxxrsaeogxcceimxeemlxcnagxamxxrsaeogxcceimrlxebacnxgxamxxrsaeogxcceimrbxracbnogxamxxrsaeogxcceimrmcxbranxgxamxxrsaeogxcceimaslbmccnxgxamxxrraelgxcceialbbbllcnxgxamxxrraelgxcceialbbbllanxgxamxxrraelgxcceialbbblmanxgxamxxrraelgxcceialbbblbcnxgxamxxramcsgxcceiarmcbbbbnxgxamxxrbrmmgxcceimrmoxooonxgxamxxrbrmbgxcceimxlbalcenogxamxxaexsmgxcceimmooobronxgxamxxaesoagxcceimmooobranxgxamxxaesoagxcceimmsoxrlenxgxamxxaesomgxcceimaslbmconxgxamxxaessagxcceimaslbmcanxgxamxxasxclgxcceimaooloranxgxamxxassxbgxcceimmrbcrbcnxgxamxxarraagxcceimxeemblenrgxamxxarrabgxcceimxeemblbnsgxamxxarrabgxcceimclsaoxbnrgxamxxarrabgxcceimrxccosancgxamxxarrabgxcceicmarxbboncgxamxxarrabgxcceicloaxxacnogxamxxarrabgxcceimrxccosonrgxamxxarrabgxcceicloaxxmenogxamxxarralgxcceimaoobrbcnsgxamxxaaxmmgxcceimcoaxmxcncgxamxxaboeegxcceiraclralcnxgxamxxaboeogxcceislmbecesnogxamxxallxagxoaeimrblxxaonxgxamxxallxageimrblxxbcnxgxamxxallxageimaecobxbnxgxamxxallxageioabsmorbnxgxamxxallxagxcceimmooobrbnogxamxxmobexgxcceialrexeoonxgxamxxmolblgxcceimxreaomcnxgxamxxmsscsgxcceimrcscrsanxgxamxxmsscsgxcceimaoobrbansgxamxxmsmmsgxcceialbbebsanxgxamxxmslsmgxcceimxlbmxlcnxgxamxxmslsmgxcceimcssmlronsgxamxxmslsmgxcceimeembecenxgxamxxmcesegxcceimmsxrlabnxgxamxxmcesegxcceimraemsoanxgxamxxmacxogxcceicloaxxmonxgxamxxmarmmgxcceicloaxxabnxgxamxxmarmmgxcceimxlbmosanogxamxxmarmmgxcceimexexabbnxgxamxxmarmmgxcceixaoossalnxgxamxxbelxcgxcceimeembescnxgxamxxbelxrgxcceimmrbraransgxamxxbelxrgxcceimrcscrsonxgxamxxbxxeogxcceimmsoxrlcnxgxamxxbxxesgxcceimrbleaxonxgxamxxboaoxgxcceimxeemleonxgxamxxbsaomgxcceimsacexoonxgxamxxbsaobgxcceimxlbmoobnsgxamxxbbomagxcceimxlbmoconcgxamxxbbomagxcceimxlbmomcnxgxamxxbbcxrgxcceiocmlslsrnxgxamxoecaocgxcceimrbasxronxgxamxoerollgxcceimraeelsanxgxamxoercsagxcceimaoolcoonxgxamxooslergxcceimxlbmoscnogxamxoolsllgxcceimraeelaanxgxamxoseerlgxcceimcoaxmxonxgxamxoseerlgxcceimxlbmosonxgxamxoseeasgxcceimeelaclanxgxamxoscsbbgae; expires=Sat, 17 Dec 2022 23:46:28 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/ads-iframe-display.php?idzone=693913&output=noscript&type=300x250
95.211.229.245200 OK 692 B URL HTTP/1.1 syndication.realsrv.com/ads-iframe-display.php?idzone=693913&output=noscript&type=300x250
IP 95.211.229.245:0
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (894), with no line terminators
Hash 357590959322d074df5fe2297dd998d0
edbbd9a8767f31e4912ed1b9519206d81e8f9eb1
b510eedebf59f84d86f39027ac8af1dfc33bc2b97a177e218544872911b1853f
GET /ads-iframe-display.php?idzone=693913&output=noscript&type=300x250 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Dec 2022 23:46:28 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22639d0354b6b360.231572013327772052%22%3B%7D; expires=Sun, 15 Dec 2024 23:46:28 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
impressions=cmmsxrbonxgxamxeasxoxgeicmmsxaeenxgxamebscormgeimacslbecnxgxaaabssxamgeislsaroornxgxamxxameabgeicxbmsbxcnxgxamxeeslemgeioslmrxlrnxgxamemllesegeiccmmlmlcnxgxamxxxxxsegeialbsereanxgxamemlblaageioslmrxbrnxgxamxxallxageicxbmsbcenxgxamxxrsorogeioslmrxlsnxgxamxelrroegeicxbmsbocnxgxamxxameabgeicxbmsboenxgxamxxmslsmgeiclsmarcanxgxaaallsxlcgeiclsmrrmanxgxaaallsxlcgeirbabxabbnxgxamxxallxageiccmmlleanxgxamemxemcbgeimcrxsbcenxgxaameollsmgeimreaoboenxgxaameollsmgeimcclosscnxgxaalccxmexgeimacslbeenxgxaaboslelageioslmroemnxgxamxxcmsxlgeioslmrxbmnxgxamxxcombmgeicaxsscmbnxgxamexrbcemgeicaormlxonxgxaamealeoegeicaormbmcnxgxaamealeoegeimcclsxscnxgxaamsmxlcageimccloscanxgxaallmalxmgeimreaomxenxgxaamelbbsbgeimreaobscnxgxaamelbbsbgeimcclosconxgxaallsbmbbgeimcclsoeonxgxaamxaacblgeimacslbeonxgxaaloesaslgeimcclsxsanxgxaamsmxlcageimcclsxlbnxgxaamssmcolgeimaecseaonxgxaamssmcolgeimaecsxeonxgxaamssmcolgeimaecseronxgxaamssmcolgeimrblelrenxgxaamssmcolgeiccmmllebnxgxamemlblaageimcclsxlonxgxaamcsebsxgeimcclsoeenxgxaamcrclalgeimcclsxsbnxgxaamcrclalgeimcclossbnxgxaalbexcrageimcclsxlcnxgxaamrscxmxgeimaecseranxgxaabrlemaegeimcclosccnxgxaamrscxmxgeicaormlxcnxgxaalbxrlcegeicaormbmbnxgxaalrexasogeiclsmrbsenxgxaamaxcsxcgeialbserebnxgxamexsrmoogeimcclsxconxgxamxxcmsxlgeimcclsxmenxgxamxeasxoxgeialbserxonxgxaalbcxbsageimccloscenxgxaalmlsmmcgeimcclsxxonxgxamxxallxageimcclsxbcnxgxamebscormgeicaormlxanxgxaammacmrxgeimcclsxaonxgxamebscormgeimrblxxxbnxgxaambboecmgeimrblxelcnxgxaambboecmgeimrblxxrbnxgxaambboecmgeialbserxenxgxamexmlmxxgeimacslbeanxgxaablxaelxgeialbserecnxgxameoxbrrrgeiccmmllecnxgxamexsrmoogeisaeeasslnxgxaabrbeccogeimcclossanxgxaabrlemaegeimcclsxronxgxamxxallxageimaecseabnxgxaabrlemaegeimrblelrcnxgxaabrlemaegeimrblxemonxgxaabrlemaegeimcclsxcanxgxamxeeslemgeimaecsxoonxgxaabmalbxxgeircsxcxscnxgxaabbxeomsgeicaormbbenxgxaalexxbcxgeiabeocmconxgxaablxrcmmgeimcclsxxcnxgxamebscormgeimrblxeeanxgxaablsaloageimaecsemanxgxaalmmeabageimaecselonxgxaaloaroaageimcclsxacnxgxamxxallxageimcclselenxgxamebscormgeimaecsxronxgxaalxmmoorgeimaecsxsenxgxaalxmmoorgeimaecsercnxgxaalxmmoorgeimaecsembnxgxaalxmmoorgeimaecselenxgxaalxmmoorgeimaecobobnxgxaalsmleergeimaecomoanxgxaalsbbboageimrblxxoenxgxaalsbmacmgeimaecobsbnxgxamxxallxageimrblxosonxgxaalsbbboageimcclsxmanxgxamxeasxoxgeimaecsxccnxgxaalmeeamageimrblxeecnxgxaalmeeamageimrblelronxgxaalmeeamageimrblelmonxgxaalmeeamageimaecseacnxgxaalmmeabageimaecsxxcnxgxaalmmeabageicaormbmanxgxaalbxrlcegeimaecsxocnxgxaalbrxssogeicaormlobnxgxaallcccaogeimaecomrenxgxameexxllcgeimrblxxxanxgxameexxllrgeimrblxosbnxgxameexxllrgeimaecomlonxgxameexxllrgeimcclselanxgxamxeasxoxgeimrblxoxenxgxameexmllsgeimaecomconxgxameexmllsgeiclsmrrrenxgxamexlcmeageiclsmarocnxgxamexlcmeageiclsmrbecnxgxamexlcmeageiclsmarcbnxgxamexlcmeageimmccrbeanxgxamxebslxageimmccrlacnxgxamxebslxageimrblxeoenxgxamecrasabgeimmccrlaonxgxamxxallxageimmccrbxenxgxamxxallxageimmccrlaenxgxamemsxoscgeimmccrbebnxgxamxxxxxsegeiclsmrrmenxgxameaeoremgeiclsmarronxgxameaeoremgeimrblelxanxgxameacaclmgeicaormbabnxgxamemsarmegeicaormlsanxgxamemsarmegeicaormbconxgxamemsarmegeicaormblonxgxamemsarmegeimaecomcbnxgxamebscormgeimrblxoebnxgxamebscormgeimrblxoconxgxamxeasxoxgeimaecobebnxgxamxeasxoxgeimaecomrcnxgxamxeasxoxgeicaormlrenxgxamxxxmscageicaormbaanxgxamxxxmscageicaormblanxgxamxxxmscageimxlbalscnogxamxxrocebgxcceimxeoxsbensgxamxxrocebgxcceimmosssconsgxamxxrsorogxcceimxxrecsancgxamxxrsorsgxcceialrexexbnogxamxxrsorsgxcceimrexbcobnsgxamxxrsorsgxcceimmrbcrbbnogxamxxrsorsgxcceimrmaobxanogxamxxrsorsgxcceialcaercenxgxamxxrsaeogxcceimxeemlxcnagxamxxrsaeogxcceimrlxebacnxgxamxxrsaeogxcceimrbxracbnogxamxxrsaeogxcceimrmcxbranxgxamxxrsaeogxcceimaslbmccnxgxamxxrraelgxcceialbbbllcnxgxamxxrraelgxcceialbbbllanxgxamxxrraelgxcceialbbblmanxgxamxxrraelgxcceialbbblbcnxgxamxxramcsgxcceiarmcbbbbnxgxamxxrbrmmgxcceimrmoxooonxgxamxxrbrmbgxcceimxlbalcenogxamxxaexsmgxcceimmooobronxgxamxxaesoagxcceimmooobranxgxamxxaesoagxcceimmsoxrlenxgxamxxaesomgxcceimaslbmconxgxamxxaessagxcceimaslbmcanxgxamxxasxclgxcceimaooloranxgxamxxassxbgxcceimmrbcrbcnxgxamxxarraagxcceimxeemblenrgxamxxarrabgxcceimxeemblbnsgxamxxarrabgxcceimclsaoxbnrgxamxxarrabgxcceimrxccosancgxamxxarrabgxcceicmarxbboncgxamxxarrabgxcceicloaxxacnogxamxxarrabgxcceimrxccosonrgxamxxarrabgxcceicloaxxmenogxamxxarralgxcceimaoobrbcnsgxamxxaaxmmgxcceimcoaxmxcncgxamxxaboeegxcceiraclralcnxgxamxxaboeogxcceislmbecesnogxamxxallxagxoaeimrblxxaonxgxamxxallxageimrblxxbcnxgxamxxallxageimaecobxbnxgxamxxallxageioabsmorbnxgxamxxallxagxcceimmooobrbnogxamxxmobexgxcceialrexeoonxgxamxxmolblgxcceimxreaomcnxgxamxxmsscsgxcceimrcscrsanxgxamxxmsscsgxcceimaoobrbansgxamxxmsmmsgxcceialbbebsanxgxamxxmslsmgxcceimxlbmxlcnxgxamxxmslsmgxcceimcssmlronsgxamxxmslsmgxcceimeembecenxgxamxxmcesegxcceimmsxrlabnxgxamxxmcesegxcceimraemsoanxgxamxxmacxogxcceicloaxxmonxgxamxxmarmmgxcceicloaxxabnxgxamxxmarmmgxcceimxlbmosanogxamxxmarmmgxcceimexexabbnxgxamxxmarmmgxcceixaoossalnxgxamxxbelxcgxcceimeembescnxgxamxxbelxrgxcceimmrbraransgxamxxbelxrgxcceimrcscrsonxgxamxxbxxeogxcceimmsoxrlcnxgxamxxbxxesgxcceimrbleaxonxgxamxxboaoxgxcceimxeemleonxgxamxxbsaomgxcceimsacexoonxgxamxxbsaobgxcceimxlbmoobnsgxamxxbbomagxcceimxlbmoconcgxamxxbbomagxcceimxlbmomcnxgxamxxbbcxrgxcceiocmlslsrnxgxamxoecaocgxcceimrbasxronxgxamxoerollgxcceimraeelsanxgxamxoercsagxcceimaoolcoonxgxamxooslergxcceimxlbmoscnogxamxoolsllgxcceimraeelaanxgxamxoseerlgxcceimcoaxmxonxgxamxoseerlgxcceimxlbmosonxgxamxoseeasgxcceimeelaclcnxgxamxoscsbbgae; expires=Sat, 17 Dec 2022 23:46:28 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/ads-iframe-display.php?idzone=693921&output=noscript&type=300x250
95.211.229.245200 OK 13 kB URL HTTP/1.1 syndication.realsrv.com/ads-iframe-display.php?idzone=693921&output=noscript&type=300x250
IP 95.211.229.245:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash 44a6cdfb1cb0b977b3a900d776b6628a
5a1bcbb1b9bfbdcedfbf0b76fda779fff7bba612
9c55dc86cbddd82bd6407b3562c8ca5ada4ba5cd7b9b081501db31befc4090ec
GET /ads-iframe-display.php?idzone=693921&output=noscript&type=300x250 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Dec 2022 23:46:28 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22639d0354bb1297.155261652023187594%22%3B%7D; expires=Sun, 15 Dec 2024 23:46:28 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
impressions=cmmsxrbonxgxamxeasxoxgeicmmsxaeenxgxamebscormgeimacslbecnxgxaaabssxamgeislsaroornxgxamxxameabgeicxbmsbxcnxgxamxeeslemgeioslmrxlrnxgxamemllesegeiccmmlmlcnxgxamxxxxxsegeialbsereanxgxamemlblaageioslmrxbrnxgxamxxallxageicxbmsbcenxgxamxxrsorogeioslmrxlsnxgxamxelrroegeicxbmsbocnxgxamxxameabgeicxbmsboenxgxamxxmslsmgeiclsmarcanxgxaaallsxlcgeiclsmrrmanxgxaaallsxlcgeirbabxabbnxgxamxxallxageiccmmlleanxgxamemxemcbgeimcrxsbcenxgxaameollsmgeimreaoboenxgxaameollsmgeimcclosscnxgxaalccxmexgeimacslbeenxgxaaboslelageioslmroemnxgxamxxcmsxlgeioslmrxbmnxgxamxxcombmgeicaxsscmbnxgxamexrbcemgeicaormlxonxgxaamealeoegeicaormbmcnxgxaamealeoegeimcclsxscnxgxaamsmxlcageimccloscanxgxaallmalxmgeimreaomxenxgxaamelbbsbgeimreaobscnxgxaamelbbsbgeimcclosconxgxaallsbmbbgeimcclsoeonxgxaamxaacblgeimacslbeonxgxaaloesaslgeimcclsxsanxgxaamsmxlcageimcclsxlbnxgxaamssmcolgeimaecseaonxgxaamssmcolgeimaecsxeonxgxaamssmcolgeimaecseronxgxaamssmcolgeimrblelrenxgxaamssmcolgeiccmmllebnxgxamemlblaageimcclsxlonxgxaamcsebsxgeimcclsoeenxgxaamcrclalgeimcclsxsbnxgxaamcrclalgeimcclossbnxgxaalbexcrageimcclsxlcnxgxaamrscxmxgeimaecseranxgxaabrlemaegeimcclosccnxgxaamrscxmxgeicaormlxcnxgxaalbxrlcegeicaormbmbnxgxaalrexasogeiclsmrbsenxgxaamaxcsxcgeialbserebnxgxamexsrmoogeimcclsxconxgxamxxcmsxlgeimcclsxmenxgxamxeasxoxgeialbserxonxgxaalbcxbsageimccloscenxgxaalmlsmmcgeimcclsxxonxgxamxxallxageimcclsxbcnxgxamebscormgeicaormlxanxgxaammacmrxgeimcclsxaonxgxamebscormgeimrblxxxbnxgxaambboecmgeimrblxelcnxgxaambboecmgeimrblxxrbnxgxaambboecmgeialbserxenxgxamexmlmxxgeimacslbeanxgxaablxaelxgeialbserecnxgxameoxbrrrgeiccmmllecnxgxamexsrmoogeisaeeasslnxgxaabrbeccogeimcclossanxgxaabrlemaegeimcclsxronxgxamxxallxageimaecseabnxgxaabrlemaegeimrblelrcnxgxaabrlemaegeimrblxemonxgxaabrlemaegeimcclsxcanxgxamxeeslemgeimaecsxoonxgxaabmalbxxgeircsxcxscnxgxaabbxeomsgeicaormbbenxgxaalexxbcxgeiabeocmconxgxaablxrcmmgeimcclsxxcnxgxamebscormgeimrblxeeanxgxaablsaloageimaecsemanxgxaalmmeabageimaecselonxgxaaloaroaageimcclsxacnxgxamxxallxageimcclselenxgxamebscormgeimaecsxronxgxaalxmmoorgeimaecsxsenxgxaalxmmoorgeimaecsercnxgxaalxmmoorgeimaecsembnxgxaalxmmoorgeimaecselenxgxaalxmmoorgeimaecobobnxgxaalsmleergeimaecomoanxgxaalsbbboageimrblxxoenxgxaalsbmacmgeimaecobsbnxgxamxxallxageimrblxosonxgxaalsbbboageimcclsxmanxgxamxeasxoxgeimaecsxccnxgxaalmeeamageimrblxeecnxgxaalmeeamageimrblelronxgxaalmeeamageimrblelmonxgxaalmeeamageimaecseacnxgxaalmmeabageimaecsxxcnxgxaalmmeabageicaormbmanxgxaalbxrlcegeimaecsxocnxgxaalbrxssogeicaormlobnxgxaallcccaogeimaecomrenxgxameexxllcgeimrblxxxanxgxameexxllrgeimrblxosbnxgxameexxllrgeimaecomlonxgxameexxllrgeimcclselanxgxamxeasxoxgeimrblxoxenxgxameexmllsgeimaecomconxgxameexmllsgeiclsmrrrenxgxamexlcmeageiclsmarocnxgxamexlcmeageiclsmrbecnxgxamexlcmeageiclsmarcbnxgxamexlcmeageimmccrbeanxgxamxebslxageimmccrlacnxgxamxebslxageimrblxeoenxgxamecrasabgeimmccrlaonxgxamxxallxageimmccrbxenxgxamxxallxageimmccrlaenxgxamemsxoscgeimmccrbebnxgxamxxxxxsegeiclsmrrmenxgxameaeoremgeiclsmarronxgxameaeoremgeimrblelxanxgxameacaclmgeicaormbabnxgxamemsarmegeicaormlsanxgxamemsarmegeicaormbconxgxamemsarmegeicaormblonxgxamemsarmegeimaecomcbnxgxamebscormgeimrblxoebnxgxamebscormgeimrblxoconxgxamxeasxoxgeimaecobebnxgxamxeasxoxgeimaecomrcnxgxamxeasxoxgeicaormlrenxgxamxxxmscageicaormbaanxgxamxxxmscageicaormblanxgxamxxxmscageimxlbalscnogxamxxrocebgxcceimxeoxsbensgxamxxrocebgxcceimmosssconsgxamxxrsorogxcceimxxrecsancgxamxxrsorsgxcceialrexexbnogxamxxrsorsgxcceimrexbcobnsgxamxxrsorsgxcceimmrbcrbbnogxamxxrsorsgxcceimrmaobxanogxamxxrsorsgxcceialcaercenxgxamxxrsaeogxcceimxeemlxcnagxamxxrsaeogxcceimrlxebacnxgxamxxrsaeogxcceimrbxracbnogxamxxrsaeogxcceimrmcxbranxgxamxxrsaeogxcceimaslbmccnxgxamxxrraelgxcceialbbbllcnxgxamxxrraelgxcceialbbbllanxgxamxxrraelgxcceialbbblmanxgxamxxrraelgxcceialbbblbcnxgxamxxramcsgxcceiarmcbbbbnxgxamxxrbrmmgxcceimrmoxooonxgxamxxrbrmbgxcceimxlbalcenogxamxxaexsmgxcceimmooobronxgxamxxaesoagxcceimmooobranxgxamxxaesoagxcceimmsoxrlenxgxamxxaesomgxcceimaslbmconxgxamxxaessagxcceimaslbmcanxgxamxxasxclgxcceimaooloranxgxamxxassxbgxcceimmrbcrbcnxgxamxxarraagxcceimxeemblenrgxamxxarrabgxcceimxeemblbnsgxamxxarrabgxcceimclsaoxbnrgxamxxarrabgxcceimrxccosancgxamxxarrabgxcceicmarxbboncgxamxxarrabgxcceicloaxxacnogxamxxarrabgxcceimrxccosonrgxamxxarrabgxcceicloaxxmenogxamxxarralgxcceimaoobrbcnsgxamxxaaxmmgxcceimcoaxmxcncgxamxxaboeegxcceiraclralcnxgxamxxaboeogxcceislmbecesnogxamxxallxagxoaeimrblxxaonxgxamxxallxageimrblxxbcnxgxamxxallxageimaecobxbnxgxamxxallxageioabsmorbnxgxamxxallxagxcceimmooobrbnogxamxxmobexgxcceialrexeoonxgxamxxmolblgxcceimxreaomcnxgxamxxmsscsgxcceimrcscrsanxgxamxxmsscsgxcceimaoobrbansgxamxxmsmmsgxcceialbbebsanxgxamxxmslsmgxcceimxlbmxlcnxgxamxxmslsmgxcceimcssmlronsgxamxxmslsmgxcceimeembecenxgxamxxmcesegxcceimmsxrlabnxgxamxxmcesegxcceimraemsoanxgxamxxmacxogxcceicloaxxmonxgxamxxmarmmgxcceicloaxxabnxgxamxxmarmmgxcceimxlbmosanogxamxxmarmmgxcceimexexabbnxgxamxxmarmmgxcceixaoossalnxgxamxxbelxcgxcceimeembescnxgxamxxbelxrgxcceimmrbraransgxamxxbelxrgxcceimrcscrsonxgxamxxbxxeogxcceimmsoxrlcnxgxamxxbxxesgxcceimrbleaxonxgxamxxboaoxgxcceimxeemleonxgxamxxbsaomgxcceimsacexoonxgxamxxbsaobgxcceimxlbmoobnsgxamxxbbomagxcceimxlbmoconcgxamxxbbomagxcceimxlbmomcnxgxamxxbbcxrgxcceiocmlslsrnxgxamxoecaocgxcceimrbasxronxgxamxoerollgxcceimraeelsanxgxamxoercsagxcceimaoolcoonxgxamxooslergxcceimxlbmoscnogxamxoolsllgxcceimraeelaanxgxamxoseerlgxcceimcoaxmxonxgxamxoseerlgxcceimxlbmosonxgxamxoseeasgxcceimeelaclonxgxamxoscsbbgae; expires=Sat, 17 Dec 2022 23:46:28 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
ocsp.globalsign.com/gseccovsslca2018
104.18.20.226200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.20.226:0
Hash df06884a2dbfa0317422e55d87ae00ff
b584c904d7ccc817840a0b47c984e934a4c313dd
829a1e171ef88d3973b00c4a29c63e23fcfcdad0f84e55bbcd91401c7944f8d4
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 16 Dec 2022 23:46:28 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Tue, 20 Dec 2022 21:36:22 GMT
ETag: "b584c904d7ccc817840a0b47c984e934a4c313dd"
Last-Modified: Fri, 16 Dec 2022 21:36:23 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3291
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77ab4c729f5b0b39-OSL
s3t3d2y8.afcdn.net/library/428515/ede74c7bceaa7703fd30a60d5d9f04ca5eac5716.mp4
185.76.9.19206 Partial Content 33 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/428515/ede74c7bceaa7703fd30a60d5d9f04ca5eac5716.mp4
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 1413cd1c8cc4a6653851bdfc54fdb32f
ede74c7bceaa7703fd30a60d5d9f04ca5eac5716
41f006ad3d3978487383e7cdf609bbd8041bb1fd2af17b81874d80eaad003235
GET /library/428515/ede74c7bceaa7703fd30a60d5d9f04ca5eac5716.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://syndication.realsrv.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 206 Partial Content
date: Fri, 16 Dec 2022 23:46:28 GMT
content-type: video/mp4
content-length: 33263
last-modified: Fri, 31 Dec 2021 10:19:17 GMT
etag: "61ced925-81ef"
expires: Fri, 30 Jun 2023 11:26:36 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195204
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ1RHiD/UGbeAA
x-77-nzt-ray: c0a4cc28433f256a54039d639d5d033a
x-cache: HIT
x-age: 14575184
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-33262/33263
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/428515/b67b7634d6bf1fbca848b3fcaef75d1a80bb6bac.jpg
185.76.9.19200 OK 28 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/428515/b67b7634d6bf1fbca848b3fcaef75d1a80bb6bac.jpg
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x250, components 3\012- data
Hash 144ba67cf814d9d3a7caea125cf22d1d
b67b7634d6bf1fbca848b3fcaef75d1a80bb6bac
c3b28149251d3e50c3567df1c0c1d372fa1e0734df3532926d653263deef921a
GET /library/428515/b67b7634d6bf1fbca848b3fcaef75d1a80bb6bac.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.realsrv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:28 GMT
content-type: image/jpeg
content-length: 28017
last-modified: Fri, 31 Dec 2021 10:19:16 GMT
etag: "61ced924-6d71"
expires: Fri, 30 Jun 2023 11:19:10 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195340
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ08M4T/yGXeAA
x-77-nzt-ray: c0a4cc28433f256a54039d63dab3133a
x-cache: HIT
x-age: 14575048
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/428515/42b3129e9f87ab020bdb58b17b454c794c7f0f59.jpg
185.76.9.19200 OK 26 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/428515/42b3129e9f87ab020bdb58b17b454c794c7f0f59.jpg
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x250, components 3\012- data
Hash f99745fe423daccd45b179c149c9fc77
42b3129e9f87ab020bdb58b17b454c794c7f0f59
156d2502c365b3182c9d90a45767e29629bd534be8d07b9024b4464173275865
GET /library/428515/42b3129e9f87ab020bdb58b17b454c794c7f0f59.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.realsrv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:28 GMT
content-type: image/jpeg
content-length: 26516
last-modified: Fri, 31 Dec 2021 10:19:16 GMT
etag: "61ced924-6794"
expires: Fri, 30 Jun 2023 11:27:13 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195276
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ1lCjn/CGbeAA
x-77-nzt-ray: c0a4cc28433f256a54039d634318293a
x-cache: HIT
x-age: 14575112
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/watch.js
87.250.250.119200 OK 58 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP 87.250.250.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (557)
Hash 96d4ff6dd2a358e09bf250b879c9438b
da347cfc2a1e08d6af72d62ec0bd4e92150b24ff
ccf4e3ae690a495bd7a1f4bf6c1ce8d71f50771f8f03932fd6af1f941f67da54
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 58117
date: Fri, 16 Dec 2022 23:46:28 GMT
access-control-allow-origin: *
etag: "639bee03-e305"
expires: Sat, 17 Dec 2022 00:46:28 GMT
last-modified: Fri, 16 Dec 2022 07:03:15 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
87.250.250.119200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP 87.250.250.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash b604b44a44140d3e443d1c1c9da02d8d
05407447253dbbd694e67456c6b25b5112bd359d
0dcc105aceee70b68e812bdb6033ab465720efe541259c35f19aa09fadc88bf8
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 73737
date: Fri, 16 Dec 2022 23:46:28 GMT
access-control-allow-origin: *
etag: "639bee03-12009"
expires: Sat, 17 Dec 2022 00:46:28 GMT
last-modified: Fri, 16 Dec 2022 07:03:15 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
push.services.mozilla.com/
35.155.171.116101 Switching Protocols 27 kB URL HTTP/1.1 push.services.mozilla.com/
IP 35.155.171.116:0
Hash ef5c62a710e5cc3be45707a6e7c38897
7295c9c8974cc2ab8d4c61a078e84a1f2cd05990
0b1c2c4a0ea8e32a7a197d7f2aa9821a8d4cdcbfa7c21ace44f1bad7948b7649
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: nGXkVKQjwowdPAb+8w0T3Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ek8TfklgFvcCiDDY6yZU+IWtvHg=
syndication.realsrv.com/ads-iframe-display.php?idzone=3069158&output=img&type=728x90
95.211.229.245302 Found 4.5 kB URL HTTP/1.1 syndication.realsrv.com/ads-iframe-display.php?idzone=3069158&output=img&type=728x90
IP 95.211.229.245:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash 418e80efe9ad646d1f6d1a303582c105
0d41e96e62d64a3a60a84a04a39c764073e4c0af
3be54fe5e0d2001d3c031bc83fd0ed54cab65017b1d534baf1e286bed0791104
GET /ads-iframe-display.php?idzone=3069158&output=img&type=728x90 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22639d0354bb1297.155261652023187594%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 16 Dec 2022 23:46:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22639d0354bb1297.155261652023187594%22%3B%7D; expires=Sun, 15 Dec 2024 23:46:29 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
img_click_3069158=https%3A%2F%2Fsyndication.realsrv.com%2Fclick.php%3Fdata%3DH4sIAAAAAAAAA0WRy27sIAyGnybLiQCb27JHVTdncR5hRAiZRj0TKsKkM5UfvjC5VGbx25_9Y4HkGg1HYi3j9J7z59zASyPeysltWE5L7FsfryXlg1AmdP3JKC9PaIIqSuMJnEJrnGTSdQ28eXf9HPsGXhv9p2o3XqZzKejXRqjFpZ1V6fIYf.Ecb8mHlc7Jn9_jnCd3DSv9CI.vmLbhPXmS7C7zWn6q1WvMYb.p6uOS7zgdoOoD.LLMsXYOl5gevyzeppweG92SJxliurq8gk1vE_NWdT7f3P_zs7CvuxtNS0hzeYL5nJPzH.N0KS1EjLjSXACCsZTv93v9AbK8taxF0XKJpFGAVVYRMGW5NCSZIUJOQMiohhbmbotTCVJgewYSu44Lq4uBFIorKZgAbrS0SEICIpVeRrTOr0kN4AgCxaFKX13R7J018OhWq8kC9O8veWsVSDaE3llUmgWJg.9EN0ivjfbiB4AqQMZ.AgAA; expires=Sat, 17 Dec 2022 00:01:29 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
Location: https://s3t3d2y8.afcdn.net/library/802424/37f351dcba12644206e5619b14d813aa0ea393a6.jpg
X-Robots-Tag: noindex, follow
s3t3d2y8.afcdn.net/library/802424/37f351dcba12644206e5619b14d813aa0ea393a6.jpg
185.76.9.19200 OK 20 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/802424/37f351dcba12644206e5619b14d813aa0ea393a6.jpg
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 728x90, components 3\012- data
Hash 726bfb778f8072bcfd5c17a637fa449b
37f351dcba12644206e5619b14d813aa0ea393a6
7573118f5900b3f082e04f60af9e65de8c0c8fe2bdaae3fed2b23351ca175384
GET /library/802424/37f351dcba12644206e5619b14d813aa0ea393a6.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://txxx.tube/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:29 GMT
content-type: image/jpeg
content-length: 19528
last-modified: Wed, 06 Jul 2022 07:25:02 GMT
etag: "62c538ce-4c48"
expires: Thu, 13 Jul 2023 16:26:54 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1689345888
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ2DEcD/ddfMAA
x-77-nzt-ray: c0a4cc28433f256a55039d63d2713214
x-cache: HIT
x-age: 13424501
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
syndication.realsrv.com/ads-iframe-display.php?idzone=693979&output=noscript&type=300x250
95.211.229.245200 OK 4.9 kB URL HTTP/1.1 syndication.realsrv.com/ads-iframe-display.php?idzone=693979&output=noscript&type=300x250
IP 95.211.229.245:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash 15c6749005af78c72d2de56824e14b4f
34e7e91cdf51494f76f87dd37822b175b1438547
0393effb69b483ab93716b4ab47c566b2e0fe64fe5fa89fbe836ded617645070
GET /ads-iframe-display.php?idzone=693979&output=noscript&type=300x250 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22639d0354bb1297.155261652023187594%22%3B%7D; img_click_3069158=https%3A%2F%2Fsyndication.realsrv.com%2Fclick.php%3Fdata%3DH4sIAAAAAAAAA0WRy27sIAyGnybLiQCb27JHVTdncR5hRAiZRj0TKsKkM5UfvjC5VGbx25_9Y4HkGg1HYi3j9J7z59zASyPeysltWE5L7FsfryXlg1AmdP3JKC9PaIIqSuMJnEJrnGTSdQ28eXf9HPsGXhv9p2o3XqZzKejXRqjFpZ1V6fIYf.Ecb8mHlc7Jn9_jnCd3DSv9CI.vmLbhPXmS7C7zWn6q1WvMYb.p6uOS7zgdoOoD.LLMsXYOl5gevyzeppweG92SJxliurq8gk1vE_NWdT7f3P_zs7CvuxtNS0hzeYL5nJPzH.N0KS1EjLjSXACCsZTv93v9AbK8taxF0XKJpFGAVVYRMGW5NCSZIUJOQMiohhbmbotTCVJgewYSu44Lq4uBFIorKZgAbrS0SEICIpVeRrTOr0kN4AgCxaFKX13R7J018OhWq8kC9O8veWsVSDaE3llUmgWJg.9EN0ivjfbiB4AqQMZ.AgAA
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Dec 2022 23:46:29 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22639d0354bb1297.155261652023187594%22%3B%7D; expires=Sun, 15 Dec 2024 23:46:29 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
impressions=cmmsxrbonxgxamxeasxoxgeicmmsxaeenxgxamebscormgeimacslbecnxgxaaabssxamgeislsaroornxgxamxxameabgeicxbmsbxcnxgxamxeeslemgeioslmrxlrnxgxamemllesegeiccmmlmlcnxgxamxxxxxsegeialbsereanxgxamemlblaageioslmrxbrnxgxamxxallxageicxbmsbcenxgxamxxrsorogeioslmrxlsnxgxamxelrroegeicxbmsbocnxgxamxxameabgeicxbmsboenxgxamxxmslsmgeiclsmarcanxgxaaallsxlcgeiclsmrrmanxgxaaallsxlcgeirbabxabbnxgxamxxallxageiccmmlleanxgxamemxemcbgeimcrxsbcenxgxaameollsmgeimreaoboenxgxaameollsmgeimcclosscnxgxaalccxmexgeimacslbeenxgxaaboslelageioslmroemnxgxamxxcmsxlgeioslmrxbmnxgxamxxcombmgeicaxsscmbnxgxamexrbcemgeicaormlxonxgxaamealeoegeicaormbmcnxgxaamealeoegeimcclsxscnxgxaamsmxlcageimccloscanxgxaallmalxmgeimreaomxenxgxaamelbbsbgeimreaobscnxgxaamelbbsbgeimcclosconxgxaallsbmbbgeimcclsoeonxgxaamxaacblgeimacslbeonxgxaaloesaslgeimcclsxsanxgxaamsmxlcageimcclsxlbnxgxaamssmcolgeimaecseaonxgxaamssmcolgeimaecsxeonxgxaamssmcolgeimaecseronxgxaamssmcolgeimrblelrenxgxaamssmcolgeiccmmllebnxgxamemlblaageimcclsxlonxgxaamcsebsxgeimcclsoeenxgxaamcrclalgeimcclsxsbnxgxaamcrclalgeimcclossbnxgxaalbexcrageimcclsxlcnxgxaamrscxmxgeimaecseranxgxaabrlemaegeimcclosccnxgxaamrscxmxgeicaormlxcnxgxaalbxrlcegeicaormbmbnxgxaalrexasogeiclsmrbsenxgxaamaxcsxcgeialbserebnxgxamexsrmoogeimcclsxconxgxamxxcmsxlgeimcclsxmenxgxamxeasxoxgeialbserxonxgxaalbcxbsageimccloscenxgxaalmlsmmcgeimcclsxxonxgxamxxallxageimcclsxbcnxgxamebscormgeicaormlxanxgxaammacmrxgeimcclsxaonxgxamebscormgeimrblxxxbnxgxaambboecmgeimrblxelcnxgxaambboecmgeimrblxxrbnxgxaambboecmgeialbserxenxgxamexmlmxxgeimacslbeanxgxaablxaelxgeialbserecnxgxameoxbrrrgeiccmmllecnxgxamexsrmoogeisaeeasslnxgxaabrbeccogeimcclossanxgxaabrlemaegeimcclsxronxgxamxxallxageimaecseabnxgxaabrlemaegeimrblelrcnxgxaabrlemaegeimrblxemonxgxaabrlemaegeimcclsxcanxgxamxeeslemgeimaecsxoonxgxaabmalbxxgeircsxcxscnxgxaabbxeomsgeicaormbbenxgxaalexxbcxgeiabeocmconxgxaablxrcmmgeimcclsxxcnxgxamebscormgeimrblxeeanxgxaablsaloageimaecsemanxgxaalmmeabageimaecselonxgxaaloaroaageimcclsxacnxgxamxxallxageimcclselenxgxamebscormgeimaecsxronxgxaalxmmoorgeimaecsxsenxgxaalxmmoorgeimaecsercnxgxaalxmmoorgeimaecsembnxgxaalxmmoorgeimaecselenxgxaalxmmoorgeimaecobobnxgxaalsmleergeimaecomoanxgxaalsbbboageimrblxxoenxgxaalsbmacmgeimaecobsbnxgxamxxallxageimrblxosonxgxaalsbbboageimcclsxmanxgxamxeasxoxgeimaecsxccnxgxaalmeeamageimrblxeecnxgxaalmeeamageimrblelronxgxaalmeeamageimrblelmonxgxaalmeeamageimaecseacnxgxaalmmeabageimaecsxxcnxgxaalmmeabageicaormbmanxgxaalbxrlcegeimaecsxocnxgxaalbrxssogeicaormlobnxgxaallcccaogeimaecomrenxgxameexxllcgeimrblxxxanxgxameexxllrgeimrblxosbnxgxameexxllrgeimaecomlonxgxameexxllrgeimcclselanxgxamxeasxoxgeimrblxoxenxgxameexmllsgeimaecomconxgxameexmllsgeiclsmrrrenxgxamexlcmeageiclsmarocnxgxamexlcmeageiclsmrbecnxgxamexlcmeageiclsmarcbnxgxamexlcmeageimmccrbeanxgxamxebslxageimmccrlacnxgxamxebslxageimrblxeoenxgxamecrasabgeimmccrlaonxgxamxxallxageimmccrbxenxgxamxxallxageimmccrlaenxgxamemsxoscgeimmccrbebnxgxamxxxxxsegeiclsmrrmenxgxameaeoremgeiclsmarronxgxameaeoremgeimrblelxanxgxameacaclmgeicaormbabnxgxamemsarmegeicaormlsanxgxamemsarmegeicaormbconxgxamemsarmegeicaormblonxgxamemsarmegeimaecomcbnxgxamebscormgeimrblxoebnxgxamebscormgeimrblxoconxgxamxeasxoxgeimaecobebnxgxamxeasxoxgeimaecomrcnxgxamxeasxoxgeicaormlrenxgxamxxxmscageicaormbaanxgxamxxxmscageicaormblanxgxamxxxmscageimxlbalscnogxamxxrocebgxcceimxeoxsbensgxamxxrocebgxcceimmosssconsgxamxxrsorogxcceimxxrecsancgxamxxrsorsgxcceialrexexbnogxamxxrsorsgxcceimrexbcobnsgxamxxrsorsgxcceimmrbcrbbnogxamxxrsorsgxcceimrmaobxanogxamxxrsorsgxcceialcaercenxgxamxxrsaeogxcceimxeemlxcnagxamxxrsaeogxcceimrlxebacnxgxamxxrsaeogxcceimrbxracbnogxamxxrsaeogxcceimrmcxbranxgxamxxrsaeogxcceimaslbmccnxgxamxxrraelgxcceialbbbllcnxgxamxxrraelgxcceialbbbllanxgxamxxrraelgxcceialbbblmanxgxamxxrraelgxcceialbbblbcnxgxamxxramcsgxcceiarmcbbbbnxgxamxxrbrmmgxcceimrmoxooonxgxamxxrbrmbgxcceimxlbalcenogxamxxaexsmgxcceimmooobronxgxamxxaesoagxcceimmooobranxgxamxxaesoagxcceimmsoxrlenxgxamxxaesomgxcceimaslbmconxgxamxxaessagxcceimaslbmcanxgxamxxasxclgxcceimaooloranxgxamxxassxbgxcceimmrbcrbcnxgxamxxarraagxcceimxeemblenrgxamxxarrabgxcceimxeemblbnsgxamxxarrabgxcceimclsaoxbnrgxamxxarrabgxcceimrxccosancgxamxxarrabgxcceicmarxbboncgxamxxarrabgxcceicloaxxacnogxamxxarrabgxcceimrxccosonrgxamxxarrabgxcceicloaxxmenogxamxxarralgxcceimaoobrbcnsgxamxxaaxmmgxcceimcoaxmxcncgxamxxaboeegxcceiraclralcnxgxamxxaboeogxcceislmbecesnogxamxxallxagxoaeimrblxxaonxgxamxxallxageimrblxxbcnxgxamxxallxageimaecobxbnxgxamxxallxageioabsmorbnxgxamxxallxagxcceimmooobrbnogxamxxmobexgxcceialrexeoonxgxamxxmolblgxcceimxreaomcnxgxamxxmsscsgxcceimrcscrsanxgxamxxmsscsgxcceimaoobrbansgxamxxmsmmsgxcceialbbebsanxgxamxxmslsmgxcceimxlbmxlcnxgxamxxmslsmgxcceimcssmlronsgxamxxmslsmgxcceimeembecenxgxamxxmcesegxcceimmsxrlabnxgxamxxmcesegxcceimraemsoanxgxamxxmacxogxcceicloaxxmonxgxamxxmarmmgxcceicloaxxabnxgxamxxmarmmgxcceimxlbmosanogxamxxmarmmgxcceimexexabbnxgxamxxmarmmgxcceixaoossalnxgxamxxbelxcgxcceimeembescnxgxamxxbelxrgxcceimmrbraransgxamxxbelxrgxcceimrcscrsonxgxamxxbxxeogxcceimmsoxrlcnxgxamxxbxxesgxcceimrbleaxonxgxamxxboaoxgxcceimxeemleonxgxamxxbsaomgxcceimsacexoonxgxamxxbsaobgxcceimxlbmoobnsgxamxxbbomagxcceimxlbmoconcgxamxxbbomagxcceimxlbmomcnxgxamxxbbcxrgxcceiocmlslsrnxgxamxoecaocgxcceimrbasxronxgxamxoerollgxcceimraeelsanxgxamxoercsagxcceimaoolcoonxgxamxooslergxcceimxlbmoscnogxamxoolsllgxcceimraeelaanxgxamxoseerlgxcceimcoaxmxonxgxamxoseerlgxcceimxlbmosonxgxamxoseeasgxcceimeelaclonxgxamxoscsbbgaeimraeelabnxgxamxoscsblgxcce; expires=Sat, 17 Dec 2022 23:46:29 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
mc.yandex.ru/metrika/advert.gif
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 16 Dec 2022 23:46:29 GMT
access-control-allow-origin: *
etag: "639bee03-2b"
expires: Sat, 17 Dec 2022 00:46:29 GMT
accept-ranges: bytes
last-modified: Fri, 16 Dec 2022 07:03:15 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ads.exoclick.com/ads.js
205.185.216.42200 OK 1.1 kB IP 205.185.216.42:0
Hash d560e2a25b4c57396161646565ab9ca6
0d44ec715462b487fcf8eb40bc01ad6d42280120
b12e6b4cd96f39762ae63b1eb46a9fc6bdf541818a7c4ac31b000bc0d3643c82
GET /ads.js HTTP/1.1
Host: ads.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 16 Dec 2022 23:46:29 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 974
Content-Type: application/javascript
Accept-Ranges: bytes
Cache-Control: max-age=10800
Server: nginx
etag: W/"8f3c7314efe500b41baba9f571b"
X-HW: 1671234389.dop213.sk1.t,1671234389.cds003.sk1.shn,1671234389.cds003.sk1.c
Access-Control-Allow-Origin: *, *
mc.yandex.ru/watch/23578849/1?wmode=7&page-url=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afp%3A958%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1038826089270%3Ahid%3A443528817%3Az%3A0%3Ai%3A20221216234626%3Aet%3A1671234386%3Ac%3A1%3Arn%3A260652732%3Arqn%3A1%3Au%3A1671234386467321775%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C64%2C0%2C373%2C0%2C%2C463%2C3%2C%2C%2C%2C960%3Aco%3A0%3Ans%3A1671234384636%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671234386%3At%3Aenough%20to%20make%20my%20son%27s%20bully%20stop%20-%20Porn%20video%20%7C%20TXXX.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
87.250.250.119200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/23578849/1?wmode=7&page-url=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afp%3A958%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1038826089270%3Ahid%3A443528817%3Az%3A0%3Ai%3A20221216234626%3Aet%3A1671234386%3Ac%3A1%3Arn%3A260652732%3Arqn%3A1%3Au%3A1671234386467321775%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C64%2C0%2C373%2C0%2C%2C463%2C3%2C%2C%2C%2C960%3Aco%3A0%3Ans%3A1671234384636%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671234386%3At%3Aenough%20to%20make%20my%20son%27s%20bully%20stop%20-%20Porn%20video%20%7C%20TXXX.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP 87.250.250.119:0
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 5a48c5ee6a339a69a06ccde5c462df88
259b871f46527745034bc92bbef548813bada1b9
e3b8fc64f97d6182fd523c51c1e96cd8a3cc85a666b0188125d79d5fec314391
GET /watch/23578849/1?wmode=7&page-url=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afp%3A958%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1038826089270%3Ahid%3A443528817%3Az%3A0%3Ai%3A20221216234626%3Aet%3A1671234386%3Ac%3A1%3Arn%3A260652732%3Arqn%3A1%3Au%3A1671234386467321775%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C64%2C0%2C373%2C0%2C%2C463%2C3%2C%2C%2C%2C960%3Aco%3A0%3Ans%3A1671234384636%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671234386%3At%3Aenough%20to%20make%20my%20son%27s%20bully%20stop%20-%20Porn%20video%20%7C%20TXXX.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://txxx.tube
Referer: https://txxx.tube/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Fri, 16 Dec 2022 23:46:29 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://txxx.tube
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 16-Dec-2022 23:46:29 GMT
last-modified: Fri, 16-Dec-2022 23:46:29 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/49315045?wmode=7&page-url=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A958%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A2%3Adp%3A0%3Als%3A684981698692%3Ahid%3A443528817%3Az%3A0%3Ai%3A20221216234626%3Aet%3A1671234386%3Ac%3A1%3Arn%3A335282198%3Arqn%3A1%3Au%3A1671234386467321775%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C64%2C0%2C373%2C0%2C%2C463%2C3%2C%2C%2C%2C960%3Aco%3A0%3Ans%3A1671234384636%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671234386%3At%3Aenough%20to%20make%20my%20son%27s%20bully%20stop%20-%20Porn%20video%20%7C%20TXXX.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
87.250.250.119302 Found 419 B URL HTTP/2 mc.yandex.ru/watch/49315045?wmode=7&page-url=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A958%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A2%3Adp%3A0%3Als%3A684981698692%3Ahid%3A443528817%3Az%3A0%3Ai%3A20221216234626%3Aet%3A1671234386%3Ac%3A1%3Arn%3A335282198%3Arqn%3A1%3Au%3A1671234386467321775%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C64%2C0%2C373%2C0%2C%2C463%2C3%2C%2C%2C%2C960%3Aco%3A0%3Ans%3A1671234384636%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671234386%3At%3Aenough%20to%20make%20my%20son%27s%20bully%20stop%20-%20Porn%20video%20%7C%20TXXX.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP 87.250.250.119:0
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash 42386c87d5b630098e2f3e495fb4b1bc
6b60db828716c4e55441425c96739397ad5fe463
eacba0ca3c107574b410a413f5eecb89adb08866adbd17a7b35003d9429de69f
GET /watch/49315045?wmode=7&page-url=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A958%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A2%3Adp%3A0%3Als%3A684981698692%3Ahid%3A443528817%3Az%3A0%3Ai%3A20221216234626%3Aet%3A1671234386%3Ac%3A1%3Arn%3A335282198%3Arqn%3A1%3Au%3A1671234386467321775%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C64%2C0%2C373%2C0%2C%2C463%2C3%2C%2C%2C%2C960%3Aco%3A0%3Ans%3A1671234384636%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671234386%3At%3Aenough%20to%20make%20my%20son%27s%20bully%20stop%20-%20Porn%20video%20%7C%20TXXX.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://txxx.tube
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/49315045/1?wmode=7&page-url=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A958%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A2%3Adp%3A0%3Als%3A684981698692%3Ahid%3A443528817%3Az%3A0%3Ai%3A20221216234626%3Aet%3A1671234386%3Ac%3A1%3Arn%3A335282198%3Arqn%3A1%3Au%3A1671234386467321775%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C64%2C0%2C373%2C0%2C%2C463%2C3%2C%2C%2C%2C960%3Aco%3A0%3Ans%3A1671234384636%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671234386%3At%3Aenough%20to%20make%20my%20son%27s%20bully%20stop%20-%20Porn%20video%20%7C%20TXXX.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Fri, 16 Dec 2022 23:46:29 GMT
access-control-allow-origin: https://txxx.tube
set-cookie: yabs-sid=1352285621671234389; Path=/; SameSite=None; Secure
i=ReHshVHE/PMOMJYFW+rxQ11LXruA87+K/Q79vP0X3yE9rii5ypWNuV7J6E9CXc3jis4Ijspw8yGU3wPNefSdZjyS/l8=; Expires=Mon, 13-Dec-2032 23:46:26 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=2980596701671234389; Expires=Sat, 16-Dec-2023 23:46:29 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=2980596701671234389; Expires=Sat, 16-Dec-2023 23:46:29 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1702770389.yc.1671234389#1702770389.yrts.1671234389#1702770389.yrtsi.1671234389; Expires=Sat, 16-Dec-2023 23:46:29 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 16-Dec-2022 23:46:29 GMT
last-modified: Fri, 16-Dec-2022 23:46:29 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3fc45bd796bd780f9c57021592a0ec9b
105deb0c253345a3236fa5b80177dde6ce6ad95f
3b7029c6c9d98d15042e4c0ae70bf84be5b6c7a34c99c65a66f0b794ab7d8bb7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3B7029C6C9D98D15042E4C0AE70BF84BE5B6C7A34C99C65A66F0B794AB7D8BB7"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10242
Expires: Sat, 17 Dec 2022 02:37:11 GMT
Date: Fri, 16 Dec 2022 23:46:29 GMT
Connection: keep-alive
js.wpadmngr.com/npc/sdk/wp-banners.js
45.133.44.24200 OK 0 B URL HTTP/2 js.wpadmngr.com/npc/sdk/wp-banners.js
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npc/sdk/wp-banners.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 20 Aug 2021 15:14:31 GMT
etag: "611fc6d7-0"
expires: Fri, 16 Dec 2022 23:51:29 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 49 kB IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 51ac3d0b666aceb9d6f727b923a6ba89
0beaec6dde7448014fef5cf126fb099b382ca2ba
03e08fcea20646b2fc09f50a654cb69df4543472ac8b79f3ea52c253391cb933
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "520584EB653ABB721DEB9CCF2202199A598D177183749B382D50B292ECBA06E3"
Last-Modified: Thu, 15 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10279
Expires: Sat, 17 Dec 2022 02:37:48 GMT
Date: Fri, 16 Dec 2022 23:46:29 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 82d8cacebaeaeed6e368a654582d55ff
2e7dbf904421f16c198a37eed9302c6537dc2917
968fe7e62a1fd6e8a5516738d5c8ab23b202bd361c8144cf685d349ce9c8f84e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "968FE7E62A1FD6E8A5516738D5C8AB23B202BD361C8144CF685D349CE9C8F84E"
Last-Modified: Thu, 15 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6107
Expires: Sat, 17 Dec 2022 01:28:16 GMT
Date: Fri, 16 Dec 2022 23:46:29 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash a8819e446031616a5e06a2aebacfed72
c15419bce74e49999ca347c58056d9635d244de5
26a6e7beb5b8e50fa393917de6b25bf3f4a82df0b0496465c787775c2795be07
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "26A6E7BEB5B8E50FA393917DE6B25BF3F4A82DF0B0496465C787775C2795BE07"
Last-Modified: Thu, 15 Dec 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9105
Expires: Sat, 17 Dec 2022 02:18:14 GMT
Date: Fri, 16 Dec 2022 23:46:29 GMT
Connection: keep-alive
vast.yomeno.xyz/prepare
109.206.163.116204 No Content 0 B IP 109.206.163.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://txxx.tube/
Origin: https://txxx.tube
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.20.1
date: Fri, 16 Dec 2022 23:46:29 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://txxx.tube
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
content-type: text/plain; charset=utf-8
content-length: 0
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 19466c1c4dfd266b660d6c9c82ab2954
7f0178452fff617a9939156aee24bee393b6e177
464ccec5f8e6b7afbcfe414164e2d5fcd62183462332f35d513ae9fcece5a66f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "464CCEC5F8E6B7AFBCFE414164E2D5FCD62183462332F35D513AE9FCECE5A66F"
Last-Modified: Thu, 15 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5503
Expires: Sat, 17 Dec 2022 01:18:12 GMT
Date: Fri, 16 Dec 2022 23:46:29 GMT
Connection: keep-alive
c889acd2c1.79e91bbc52.com/in/track?data=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
45.133.44.24200 OK 0 B URL HTTP/2 c889acd2c1.79e91bbc52.com/in/track?data=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
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/track?data=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 HTTP/1.1
Host: c889acd2c1.79e91bbc52.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://txxx.tube
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:29 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
vast.yomeno.xyz/prepare
109.206.163.116204 No Content 0 B IP 109.206.163.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1039
Origin: https://txxx.tube
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.20.1
date: Fri, 16 Dec 2022 23:46:29 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://txxx.tube
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 92362f3c045e1ffc0e9380b4e119e554
edf1165102ca8d2e6216c64d864fbaca031510e5
dd3d77b71a5ecfea28faea366fad57b04c2f368d09ffdb01bd59f37a11de25b3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DD3D77B71A5ECFEA28FAEA366FAD57B04C2F368D09FFDB01BD59F37A11DE25B3"
Last-Modified: Thu, 15 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11536
Expires: Sat, 17 Dec 2022 02:58:45 GMT
Date: Fri, 16 Dec 2022 23:46:29 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.76.226200 OK 346 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b83ae2c051c175ced892c172a735bcff
2121bbfeaab242b5f0d7f00fba6241367eea4de0
7e7be7287a107ea79259039471aa61b32ca5ea89552af2b6b3fadeb399d816ce
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "7E7BE7287A107EA79259039471AA61B32CA5EA89552AF2B6B3FADEB399D816CE"
Last-Modified: Thu, 15 Dec 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4874
Expires: Sat, 17 Dec 2022 01:07:43 GMT
Date: Fri, 16 Dec 2022 23:46:29 GMT
Connection: keep-alive
js.wpshsdk.com/npc/sdk/wp-banners.js
45.133.44.24200 OK 0 B URL HTTP/2 js.wpshsdk.com/npc/sdk/wp-banners.js
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npc/sdk/wp-banners.js HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 20 Aug 2021 15:14:31 GMT
etag: "611fc6d7-0"
expires: Fri, 16 Dec 2022 23:51:29 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 9cf25426de116bd5fbc8ebcfdf692136
1086cb55219cf15dafcf07ae1260222d537403a7
de97debd3be1f326c68d96a5eea4ea653488eaf6ff8b1b81b21117dd4553e505
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DE97DEBD3BE1F326C68D96A5EEA4EA653488EAF6FF8B1B81B21117DD4553E505"
Last-Modified: Thu, 15 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4162
Expires: Sat, 17 Dec 2022 00:55:52 GMT
Date: Fri, 16 Dec 2022 23:46:30 GMT
Connection: keep-alive
fp.metricswpsh.com/fp?tag_id=755
157.90.84.242204 No Content 0 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=755
IP 157.90.84.242:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=755 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://txxx.tube/
Origin: https://txxx.tube
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Fri, 16 Dec 2022 23:46:30 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://txxx.tube
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
12112336.pix-cdn.org/dli/whatshot.svg
45.133.44.25200 OK 1.1 kB URL HTTP/2 12112336.pix-cdn.org/dli/whatshot.svg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (652), with CRLF line terminators
Hash 92d4b3c9db72fefd9d6d927ec40be29b
efb550da28d7b18d7e2beb7698577415fde2b24f
7ad9fcb297f4600edf827b026deca9e0ed695be37ab46ac2d9fee35040611130
GET /dli/whatshot.svg HTTP/1.1
Host: 12112336.pix-cdn.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: image/svg+xml
content-length: 1064
server: nginx/1.12.2
last-modified: Tue, 16 Jun 2020 16:25:10 GMT
etag: "5ee8f266-428"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=8194614071468316224&pid=0&site=31083&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-9&site_id=0&spot_id=31083&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.002222&placement_type_id=&skin_test=&verify_hash=&score=97.11604212858471&ml=&tag_ab=&ttl=&space_id=31083&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31083%26source%3D0%26idzone%3D693941%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31083%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D31083%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D97.11604212858471%26bf%3D0.002222&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756
159.69.163.6302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=8194614071468316224&pid=0&site=31083&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-9&site_id=0&spot_id=31083&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.002222&placement_type_id=&skin_test=&verify_hash=&score=97.11604212858471&ml=&tag_ab=&ttl=&space_id=31083&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31083%26source%3D0%26idzone%3D693941%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31083%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D31083%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D97.11604212858471%26bf%3D0.002222&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756
IP 159.69.163.6:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=8194614071468316224&pid=0&site=31083&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-9&site_id=0&spot_id=31083&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.002222&placement_type_id=&skin_test=&verify_hash=&score=97.11604212858471&ml=&tag_ab=&ttl=&space_id=31083&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31083%26source%3D0%26idzone%3D693941%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31083%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D31083%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D97.11604212858471%26bf%3D0.002222&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:30 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=31083&source=0&idzone=693941&w=300&h=250&mo=&ve=&site_id=31083&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=31083&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=97.11604212858471&bf=0.002222
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxNDk2LCJzcGFjZWlkIjozMTA4MywidHlwZSI6InBvcCIsImlkem9uZSI6NjkzOTQxLCJhZF90YWdzIjoiU3RyYWlnaHQlMkNCaWclMjBBc3MlMkNCaWclMjBUaXRzJTJDQ3Vtc2hvdCUyQ0hEJTJDSGFuZGpvYiUyQ01JTEYlMkNTdG9ja2luZ3MlMkNTaGF2ZWQiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6MzEwODMsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjgsInN0cmF0YWdlbSI6bnVsbCwiZ3lyIjowLCJhY2NlbCI6MCwic3NwIjozNzU2fSwiYmFubmVyIjp7InciOjMwMCwiaCI6MjUwfX1dLCJzaXRlIjp7ImlkIjoiMzEwODMiLCJjYXQiOlsiSUFCMjUiXSwicGFnZSI6Imh0dHBzOi8vdHh4eC50dWJlL3ZpZGVvcy8xNjcwOTQxOS9lbm91Z2gtdG8tbWFrZS1teS1zb24tcy1idWxseS1zdG9wLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI5ZTQ5NDdmMzU3NTE0NjU0MTFmZDFhNGY1YzM1OGM3OCJ9LCJleHQiOnsiZHQiOjE2NzEyMzQzODY2OTJ9fQ==
159.69.163.6200 OK 148 kB URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP 159.69.163.6:0
ASN #24940 Hetzner Online GmbH
Size 148 kB (147858 bytes)
Hash 43e71d36b6455fa97552b10a08107c23
524a0152ff50c628daa0a57f589ce7dce15979b9
b56c23e5222d07cf6c5e687512c7ad283d5f1277244e113f973e52ba70cdf1cd
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/623611/ed0885e8288645e4cca003a57f3a486611122606.jpg
185.76.9.19200 OK 29 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/623611/ed0885e8288645e4cca003a57f3a486611122606.jpg
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash de65c02764f5d04b7ac0a815d366c969
ed0885e8288645e4cca003a57f3a486611122606
05e417d7c0294dfb542e9de1f1f8c763d8bbfe3f08316fd1b0c78ebb1c22e7f9
GET /library/623611/ed0885e8288645e4cca003a57f3a486611122606.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: image/jpeg
content-length: 28796
last-modified: Mon, 25 May 2020 13:58:36 GMT
etag: "5ecbcf0c-707c"
expires: Wed, 25 Oct 2023 01:40:56 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
x-accel-expires: @1702383622
server: CDN77-Turbo
x-77-nzt: AblMCQ2de23/0OYFAA
x-77-nzt-ray: c0a4cc28433f256a56039d63f93a9108
x-cache: HIT
x-age: 386768
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=670487385883997923&pid=0&site=31075&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10914&price=0&is_cpm=1&cpm=0.001516&ecpm=0.00130670745268&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-5&site_id=0&spot_id=31075&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=native&iabcat=IAB25-3&min_cpm=0.00093393513406314&placement_type_id=8&skin_test=&verify_hash=&score=99.9070721334494&ml=&tag_ab=&ttl=&space_id=31075&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fs3t3d2y8.afcdn.net%2Flibrary%2F623611%2F149fb0f87041aabe2ff8dab2e20b4d61023420a1.jpg&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756
159.69.163.6302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=670487385883997923&pid=0&site=31075&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10914&price=0&is_cpm=1&cpm=0.001516&ecpm=0.00130670745268&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-5&site_id=0&spot_id=31075&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=native&iabcat=IAB25-3&min_cpm=0.00093393513406314&placement_type_id=8&skin_test=&verify_hash=&score=99.9070721334494&ml=&tag_ab=&ttl=&space_id=31075&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fs3t3d2y8.afcdn.net%2Flibrary%2F623611%2F149fb0f87041aabe2ff8dab2e20b4d61023420a1.jpg&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756
IP 159.69.163.6:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=670487385883997923&pid=0&site=31075&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10914&price=0&is_cpm=1&cpm=0.001516&ecpm=0.00130670745268&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-5&site_id=0&spot_id=31075&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=native&iabcat=IAB25-3&min_cpm=0.00093393513406314&placement_type_id=8&skin_test=&verify_hash=&score=99.9070721334494&ml=&tag_ab=&ttl=&space_id=31075&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fs3t3d2y8.afcdn.net%2Flibrary%2F623611%2F149fb0f87041aabe2ff8dab2e20b4d61023420a1.jpg&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/get/?go=1&data=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
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:30 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://s3t3d2y8.afcdn.net/library/623611/149fb0f87041aabe2ff8dab2e20b4d61023420a1.jpg
X-Firefox-Spdy: h2
nereserv.com/in/dip?site=native-push&wl=1&event_id=ca8dc51b-def3-40e0-9e88-3a3075b18fec&subid=1406986554&sid=2836966628&spot_id=360&created_at=2022-12-16&timezone=0&ver=8.10.0&is_native=1
157.90.84.246200 OK 0 B URL HTTP/2 nereserv.com/in/dip?site=native-push&wl=1&event_id=ca8dc51b-def3-40e0-9e88-3a3075b18fec&subid=1406986554&sid=2836966628&spot_id=360&created_at=2022-12-16&timezone=0&ver=8.10.0&is_native=1
IP 157.90.84.246:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?site=native-push&wl=1&event_id=ca8dc51b-def3-40e0-9e88-3a3075b18fec&subid=1406986554&sid=2836966628&spot_id=360&created_at=2022-12-16&timezone=0&ver=8.10.0&is_native=1 HTTP/1.1
Host: nereserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://txxx.tube
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 16 Dec 2022 23:46:30 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/623611/149fb0f87041aabe2ff8dab2e20b4d61023420a1.jpg
185.76.9.19200 OK 11 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/623611/149fb0f87041aabe2ff8dab2e20b4d61023420a1.jpg
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "Resized on https://ezgif.com/resize", baseline, precision 8, 300x300, components 3\012- data
Hash 30fc1bea5bc68388706ef924d7513aee
149fb0f87041aabe2ff8dab2e20b4d61023420a1
de9c0ed48ef00244aa5cd5384c12f61a24f0dd2d1027b7e19e1e4cfd0c414320
GET /library/623611/149fb0f87041aabe2ff8dab2e20b4d61023420a1.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: image/jpeg
content-length: 11427
last-modified: Mon, 25 May 2020 13:34:44 GMT
etag: "5ecbc974-2ca3"
expires: Tue, 24 Oct 2023 16:35:06 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
x-accel-expires: @1702150580
server: CDN77-Turbo
x-77-nzt: AblMCQ0Rh+X/InUJAA
x-77-nzt-ray: c0a4cc28433f256a56039d6321c75e0a
x-cache: HIT
x-age: 619810
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 0e5a8cf5962c05bf28a3b45f5c8745e2
9c5d7e8aeab26f9fd2e753ab4dc65d6fa8ea955f
f614642045fcd0ee373ed6cabe67514f4bb54c7fb4f1181b52eaec12d7e0479e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F614642045FCD0EE373ED6CABE67514F4BB54C7FB4F1181B52EAEC12D7E0479E"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4762
Expires: Sat, 17 Dec 2022 01:05:52 GMT
Date: Fri, 16 Dec 2022 23:46:30 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 0e5a8cf5962c05bf28a3b45f5c8745e2
9c5d7e8aeab26f9fd2e753ab4dc65d6fa8ea955f
f614642045fcd0ee373ed6cabe67514f4bb54c7fb4f1181b52eaec12d7e0479e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F614642045FCD0EE373ED6CABE67514F4BB54C7FB4F1181B52EAEC12D7E0479E"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4762
Expires: Sat, 17 Dec 2022 01:05:52 GMT
Date: Fri, 16 Dec 2022 23:46:30 GMT
Connection: keep-alive
btds.zog.link/in/912/?sid=31083&source=0&idzone=693941&w=300&h=250&mo=&ve=&site_id=31083&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=31083&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=97.11604212858471&bf=0.002222
109.206.161.16302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=31083&source=0&idzone=693941&w=300&h=250&mo=&ve=&site_id=31083&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=31083&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=97.11604212858471&bf=0.002222
IP 109.206.161.16:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=31083&source=0&idzone=693941&w=300&h=250&mo=&ve=&site_id=31083&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=31083&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=97.11604212858471&bf=0.002222 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.20.1
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://12007250.pix-cdn.org/a/pjexo.html?idzone=693941&w=300&h=250&ad_sub=0
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 912.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
1624.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
1625.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
1629.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
159.69.163.6200 OK 5.1 kB URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP 159.69.163.6:0
ASN #24940 Hetzner Online GmbH
Hash 355f6ea4c730ed6c3d066cff6c1fa831
9a829db145c1959097e88b8fef6861219515b8ea
625202f6729af7b877bcd98e7c75195d0f016095275883f3a0328a170ad45646
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
s.optnx.com/cimp.php?data=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-
95.211.229.245302 Found 0 B URL HTTP/1.1 s.optnx.com/cimp.php?data=TVRZM01USXpORE01TUh3MU9HTTBZMlZqWW1Rd05qVTVPR05sWXpRek9EZ3hNamN3TWpJM1pqZzBOdy0tfC9saWJyYXJ5LzYyMzYxMS8xNDlmYjBmODcwNDFhYWJlMmZmOGRhYjJlMjBiNGQ2MTAyMzQyMGExLmpwZ3xodHRwc3w5MS45MC40Mi4xNTR8Tk9SfDQxfHR4eHguY29tfDYyMzYxMXw2NjYxNzN8OTE0NjU0fDQyNzg1NjZ8NTA4fDM5MTU5Njh8NDE4NzM4NDB8NDB8M3wwfDB8MjUzNDR8MHwwLjJ8ODB8RVVSfFVTRHwwLjk0NzV8MXwzNHx8MXxOT1J8fDIwfDR8MXx8OWU0OTQ3ZjM1NzUxNDY1NDExZmQxYTRmNWMzNThjNzh8MDZhNjYzYWU4ZjA1NTkyNjRhMDI0MTA2ZTIwNDMzZTR8MXwwfHR4eHgudHViZXwwfDB8MHwwLjA2fDF8MHxleGNoYW5nZV9uYXRpdmVfYWR8MHwwfDMxNDMyNDJ8LTF8MHwzMTQzMjQ0fHx8MHwwfHwwfDB8MHwwfDB8MHwxfDB8fDh8MXxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMHx8T0t8OGVkMTc3ODEwYThhMDhmMjg3ZGMyOGZjMjI0OWI4Y2I-
IP 95.211.229.245:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cimp.php?data=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- HTTP/1.1
Host: s.optnx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 16 Dec 2022 23:46:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22639d03562f4f28.324446993163500925%22%3B%7D; expires=Sun, 15 Dec 2024 23:46:30 GMT; path=; domain=.optnx.com; Secure; SameSite=none
Location: https://s3t3d2y8.afcdn.net/library/623611/149fb0f87041aabe2ff8dab2e20b4d61023420a1.jpg
X-Robots-Tag: noindex, follow
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5b78c3c-24c2-48f2-958f-cdfa78f1e1ea.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5b78c3c-24c2-48f2-958f-cdfa78f1e1ea.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6f8fe2f78bb86d228cf165eb31101fd4
0ac6629b0ffb8a8027df8a70b2a8fe704e7d16b2
4ce9bc42db1dd638919faadfc32802e2b6289de61d1427dd8fd43f4d00e6eac0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5b78c3c-24c2-48f2-958f-cdfa78f1e1ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7506
x-amzn-requestid: 7f47b055-78b2-4323-b1b8-026c463ab255
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dOKjKFKcIAMF_hQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639bf147-66522f1e3abeb31450af768f;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 04:17:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: nvXhZneb6zc0nczspwnytmWMFDmrfqKk9eOwQVES912ftd_AkUvJ0g==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 17:40:45 GMT
age: 21945
etag: "0ac6629b0ffb8a8027df8a70b2a8fe704e7d16b2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F340d7003-71e4-4f8e-a457-d067d05e0525.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F340d7003-71e4-4f8e-a457-d067d05e0525.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dce7a87ac0852f838007018af2e83cb5
379f7844a18284958ec0250cc45f2c91ac1ddfcf
31a5191700b9d5c2e471c0e6db15d43f1804b61c6a0867340e8001c32a0dabb5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F340d7003-71e4-4f8e-a457-d067d05e0525.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11667
x-amzn-requestid: f8f1832c-4269-4c4b-83c0-4c2d8c2fdd8f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjC7GLSIAMFd4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce545-4c54f9704a32da245a90ab0d;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:38:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: CrmrekFQeOTjAkIBgbGSNGN66ysdrtGK1uuzJV-b6nB1WFrOrtf1OA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 21:40:19 GMT
etag: "379f7844a18284958ec0250cc45f2c91ac1ddfcf"
content-type: image/jpeg
age: 7571
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b78709f-467b-4047-896c-309ff91c15a3.jpeg
34.120.237.76200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b78709f-467b-4047-896c-309ff91c15a3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 09028c98b40519661edef458438205f9
0e05448c127660266cdcda59aa4ffeb0232b9451
f5587c8519f78b95108fb5246b14b8c5920f039f2789a73526a3543bad6de8e1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b78709f-467b-4047-896c-309ff91c15a3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6002
x-amzn-requestid: fb816096-b12a-4024-a7ab-0bc162022ba5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dEHqYFCfoAMFR-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6397eca8-7b855af154aaf1464bf71418;Sampled=0
x-amzn-remapped-date: Tue, 13 Dec 2022 03:08:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cpsW3BhW1a2_mUFtDlsNSKP7eTBxCT3-4bffoRl3FPVQINyO3Wkjdg==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 06:59:29 GMT
age: 60421
etag: "0e05448c127660266cdcda59aa4ffeb0232b9451"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65c9cdbb-21b2-465b-8f75-329260ada5cc.webp
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65c9cdbb-21b2-465b-8f75-329260ada5cc.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 86be9c16e4a62785e7f3a0cc8a956143
6cac191c918ff47d3e66e327e8c8a9c0fec9a88b
81dfec15eb1dc19acae5071663b9deaa9fa11f00378e36871c5b31a548a0626b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65c9cdbb-21b2-465b-8f75-329260ada5cc.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8002
x-amzn-requestid: bcaeff23-947f-441a-8aea-1e0d54f2cc3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjD7GjdoAMFVIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce54c-5fb0d9d76945c4f63d210806;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:38:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: iWxLKwjIxP-hiy4A3yvosYlQAzRu0STuwy4K9LuqK77WphLXQH9m6A==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 21:40:19 GMT
age: 7571
etag: "6cac191c918ff47d3e66e327e8c8a9c0fec9a88b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F716d5374-26a4-47e3-9c6a-62120a177040.jpeg
34.120.237.76200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F716d5374-26a4-47e3-9c6a-62120a177040.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2fae5a52ce167de2a060dc814a744e98
4b108a79a4ad796a34f4b2b8950df907137680e3
61e1fe4a8c074a031e0628ca393449e42d70dcf3411481936c26c1fad7a5451b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F716d5374-26a4-47e3-9c6a-62120a177040.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9837
x-amzn-requestid: 7c104466-a4d8-4e03-94e6-79a18bd3bf54
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjWiEMlIAMFaaQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce5c3-4b0e776f4f0edd533795a6ee;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:40:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: BoDm_UMgTvGhUoJOaM2x6-YXgFOFuLanBV4hjgsPNTFxn_9CQjELUQ==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 21:40:19 GMT
etag: "4b108a79a4ad796a34f4b2b8950df907137680e3"
content-type: image/jpeg
age: 7571
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfe9d995-0778-4444-81cd-99e5198ac11e.jpeg
34.120.237.76200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfe9d995-0778-4444-81cd-99e5198ac11e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0cfd12f93a2a0efcbdc0aadfc18263e8
93ece0b291bd44a399612b832d8c7e9767ba3ce9
d40ab574038fb1642b0d64b430339552761496a0d0b99e238bb4d4f87e822484
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfe9d995-0778-4444-81cd-99e5198ac11e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3953
x-amzn-requestid: e528941a-b54c-4275-bce0-91f4c9dd7f2e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c0NMpGvxoAMFmRg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63918f1d-573aec4e11da97b91c9cd289;Sampled=0
x-amzn-remapped-date: Thu, 08 Dec 2022 07:15:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8H9zkAEl6c6vZZhcsH0jTo3p4eTI14wNwpRSnhBLATJ52UIGJBClRg==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 06:17:21 GMT
age: 62949
etag: "93ece0b291bd44a399612b832d8c7e9767ba3ce9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 0c42f8f6a5196379871de494459bce08
9417109c519ecc0117e65981d6955ef13962d56b
027f3bf648b6351e515f2a032bf3c13abbd499ab4af33c00c4bab573632f9680
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "027F3BF648B6351E515F2A032BF3C13ABBD499AB4AF33C00C4BAB573632F9680"
Last-Modified: Thu, 15 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9903
Expires: Sat, 17 Dec 2022 02:31:33 GMT
Date: Fri, 16 Dec 2022 23:46:30 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 0c42f8f6a5196379871de494459bce08
9417109c519ecc0117e65981d6955ef13962d56b
027f3bf648b6351e515f2a032bf3c13abbd499ab4af33c00c4bab573632f9680
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "027F3BF648B6351E515F2A032BF3C13ABBD499AB4AF33C00C4BAB573632F9680"
Last-Modified: Thu, 15 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9903
Expires: Sat, 17 Dec 2022 02:31:33 GMT
Date: Fri, 16 Dec 2022 23:46:30 GMT
Connection: keep-alive
rtbrennab.com/banner/in/show/?mid=1537559119369212592&pid=0&site=31089&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-7&site_id=0&spot_id=31089&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.000452&placement_type_id=&skin_test=&verify_hash=&score=99.88680582761224&ml=&tag_ab=&ttl=&space_id=31089&banner_width=728&banner_height=90&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31089%26source%3D0%26idzone%3D3069158%26w%3D728%26h%3D90%26mo%3D%26ve%3D%26site_id%3D31089%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D31089%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D99.88680582761224%26bf%3D0.000452&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756
159.69.163.6302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=1537559119369212592&pid=0&site=31089&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-7&site_id=0&spot_id=31089&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.000452&placement_type_id=&skin_test=&verify_hash=&score=99.88680582761224&ml=&tag_ab=&ttl=&space_id=31089&banner_width=728&banner_height=90&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31089%26source%3D0%26idzone%3D3069158%26w%3D728%26h%3D90%26mo%3D%26ve%3D%26site_id%3D31089%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D31089%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D99.88680582761224%26bf%3D0.000452&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756
IP 159.69.163.6:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=1537559119369212592&pid=0&site=31089&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-7&site_id=0&spot_id=31089&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.000452&placement_type_id=&skin_test=&verify_hash=&score=99.88680582761224&ml=&tag_ab=&ttl=&space_id=31089&banner_width=728&banner_height=90&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31089%26source%3D0%26idzone%3D3069158%26w%3D728%26h%3D90%26mo%3D%26ve%3D%26site_id%3D31089%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D31089%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D99.88680582761224%26bf%3D0.000452&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:30 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=31089&source=0&idzone=3069158&w=728&h=90&mo=&ve=&site_id=31089&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=31089&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.88680582761224&bf=0.000452
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=4849456365665747459&pid=0&site=38541&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-0&site_id=0&spot_id=38541&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.001578&placement_type_id=&skin_test=&verify_hash=&score=99.89087947898167&ml=&tag_ab=&ttl=&space_id=38541&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D38541%26source%3D0%26idzone%3D693979%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D38541%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D38541%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D99.89087947898167%26bf%3D0.001578&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756
159.69.163.6302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=4849456365665747459&pid=0&site=38541&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-0&site_id=0&spot_id=38541&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.001578&placement_type_id=&skin_test=&verify_hash=&score=99.89087947898167&ml=&tag_ab=&ttl=&space_id=38541&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D38541%26source%3D0%26idzone%3D693979%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D38541%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D38541%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D99.89087947898167%26bf%3D0.001578&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756
IP 159.69.163.6:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=4849456365665747459&pid=0&site=38541&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-0&site_id=0&spot_id=38541&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.001578&placement_type_id=&skin_test=&verify_hash=&score=99.89087947898167&ml=&tag_ab=&ttl=&space_id=38541&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D38541%26source%3D0%26idzone%3D693979%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D38541%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D38541%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D99.89087947898167%26bf%3D0.001578&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxNDk2LCJzcGFjZWlkIjozODU0MSwidHlwZSI6InBvcCIsImlkem9uZSI6NjkzOTc5LCJhZF90YWdzIjoiU3RyYWlnaHQlMkNCaWclMjBBc3MlMkNCaWclMjBUaXRzJTJDQ3Vtc2hvdCUyQ0hEJTJDSGFuZGpvYiUyQ01JTEYlMkNTdG9ja2luZ3MlMkNTaGF2ZWQiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6Mzg1NDEsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjMsInN0cmF0YWdlbSI6bnVsbCwiZ3lyIjowLCJhY2NlbCI6MCwic3NwIjozNzU2fSwiYmFubmVyIjp7InciOjMwMCwiaCI6MjUwfX1dLCJzaXRlIjp7ImlkIjoiMzg1NDEiLCJjYXQiOlsiSUFCMjUiXSwicGFnZSI6Imh0dHBzOi8vdHh4eC50dWJlL3ZpZGVvcy8xNjcwOTQxOS9lbm91Z2gtdG8tbWFrZS1teS1zb24tcy1idWxseS1zdG9wLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI5ZTQ5NDdmMzU3NTE0NjU0MTFmZDFhNGY1YzM1OGM3OCJ9LCJleHQiOnsiZHQiOjE2NzEyMzQzODY2OTR9fQ==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:30 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=38541&source=0&idzone=693979&w=300&h=250&mo=&ve=&site_id=38541&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=38541&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.89087947898167&bf=0.001578
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=4747409489235302337&pid=0&site=31084&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-2&site_id=0&spot_id=31084&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.002131&placement_type_id=&skin_test=&verify_hash=&score=99.88155364623063&ml=&tag_ab=&ttl=&space_id=31084&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31084%26source%3D0%26idzone%3D693913%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31084%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D31084%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D99.88155364623063%26bf%3D0.002131&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756
159.69.163.6302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=4747409489235302337&pid=0&site=31084&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-2&site_id=0&spot_id=31084&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.002131&placement_type_id=&skin_test=&verify_hash=&score=99.88155364623063&ml=&tag_ab=&ttl=&space_id=31084&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31084%26source%3D0%26idzone%3D693913%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31084%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D31084%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D99.88155364623063%26bf%3D0.002131&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756
IP 159.69.163.6:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=4747409489235302337&pid=0&site=31084&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-2&site_id=0&spot_id=31084&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.002131&placement_type_id=&skin_test=&verify_hash=&score=99.88155364623063&ml=&tag_ab=&ttl=&space_id=31084&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31084%26source%3D0%26idzone%3D693913%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31084%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D31084%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D99.88155364623063%26bf%3D0.002131&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:30 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=31084&source=0&idzone=693913&w=300&h=250&mo=&ve=&site_id=31084&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=31084&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.88155364623063&bf=0.002131
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=4581477739153263168&pid=0&site=31085&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-8&site_id=0&spot_id=31085&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.001887&placement_type_id=&skin_test=&verify_hash=&score=99.88366704528313&ml=&tag_ab=&ttl=&space_id=31085&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31085%26source%3D0%26idzone%3D693921%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31085%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D31085%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D99.88366704528313%26bf%3D0.001887&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756
159.69.163.6302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=4581477739153263168&pid=0&site=31085&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-8&site_id=0&spot_id=31085&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.001887&placement_type_id=&skin_test=&verify_hash=&score=99.88366704528313&ml=&tag_ab=&ttl=&space_id=31085&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31085%26source%3D0%26idzone%3D693921%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31085%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D31085%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D99.88366704528313%26bf%3D0.001887&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756
IP 159.69.163.6:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=4581477739153263168&pid=0&site=31085&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-8&site_id=0&spot_id=31085&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.001887&placement_type_id=&skin_test=&verify_hash=&score=99.88366704528313&ml=&tag_ab=&ttl=&space_id=31085&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31085%26source%3D0%26idzone%3D693921%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31085%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D31085%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D99.88366704528313%26bf%3D0.001887&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:30 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=31085&source=0&idzone=693921&w=300&h=250&mo=&ve=&site_id=31085&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=31085&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.88366704528313&bf=0.001887
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=38541&source=0&idzone=693979&w=300&h=250&mo=&ve=&site_id=38541&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=38541&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.89087947898167&bf=0.001578
109.206.161.16302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=38541&source=0&idzone=693979&w=300&h=250&mo=&ve=&site_id=38541&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=38541&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.89087947898167&bf=0.001578
IP 109.206.161.16:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=38541&source=0&idzone=693979&w=300&h=250&mo=&ve=&site_id=38541&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=38541&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.89087947898167&bf=0.001578 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Cookie: 912.0=1; 1624.0=1; 1625.0=1; 1629.0=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://tsyndicate.com/iframes2/d29c4735e6804e5898198d8f6af3fc82.html?subid=0
vary: *
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
set-cookie: 912.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
1624.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
1625.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
1629.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
btds.zog.link/in/dl_show/?spot_id=84641&out_name=73385|12302|cpm|0.0001|$%200.0001&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84641&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F
109.206.161.16200 OK 2 B URL HTTP/2 btds.zog.link/in/dl_show/?spot_id=84641&out_name=73385|12302|cpm|0.0001|$%200.0001&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84641&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F
IP 109.206.161.16:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /in/dl_show/?spot_id=84641&out_name=73385|12302|cpm|0.0001|$%200.0001&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84641&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Cookie: 912.0=1; 1624.0=1; 1625.0=1; 1629.0=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: application/json
content-length: 2
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
set-cookie: 952.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=2268746562864397984&pid=0&site=31086&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10280&price=0&is_cpm=1&cpm=0.0153&ecpm=0.01217727&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-2&site_id=0&spot_id=31086&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.0034300791556728227&placement_type_id=5&skin_test=&verify_hash=&score=99.88743591125643&ml=&tag_ab=&ttl=&space_id=31086&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInDIqBGDDI4cY1rAsBHDRgsaYmDgaIGj5IwWMnKYKSNGBkQzMMqUEeFwjpg0ZBTq2CIChoguDse4EToDRg2HYeqMwShDhg0cN2jYqGFDBg4bNGbkuJEDBw2eIn6SwZiGTpk2X2KgNWhnIo0bMXA4hFNHzMIaM2rIgAoHzsIbWweLmANHog4aMRDD2OiwDB46Xxg7fkhGzxs3Zb7MiKHSBtoxbQw_vnHDrF7OZiY6FOPGzcKmM27MoEHDYRs3F3XEmFEVxt7fwSPDGOmwjlwdA-nQgTNHx4sXZ964wMNdTWoXY960eTGnTRg509_AeQFjd1i8NprKYB2DBgwyNMrYKGM2d1cxZJiRA1j4hVHGDWKYEVhkeA0YQw051GAGgPqNYRMZYcQQww91zIFQEmT0QAZpMJhxQ4AxiDEDDoLdMAaEZtgEQwxj6FcDDmQkKAYOYtgwYA40gBSDDGPU52NJNJhhX0s2nEhDhmOEwUUdy1k1xxt1yFEjiD3c1RoNOExZpQ1tvCXGhyEKoUYTSjTxIBJRuBGDFjc8occdSMhxBA5mRCGdG3iIcQUSc4iURx43aPEEHThgYQcTUKBhBBxZJFEEGmwUIcMaR-iRxRJlgLTEEky4oQcMb4wBRRh3JGEDGU-IcQMSX1yxIh004JEEEVncUEQOWuhRRQtBUOGGFi204EQMVyRxBxtP2JDEF2dUsasUVaQh5mQ2wBFDl5HZMFkNaJEhHkZ0cIeHC3T0tVNSYTi2BUV6kcbCkPc25BVSIsCh5UQu4FCGSE-lFZsOMLgwY1JwwOXvVAgr_OAMDslhh2oPVjZGwwslPONrddSRBkY5lBHkXQrWcANHWtUAWQxmjBhGkjWMERgOY7SGVhqqiZBDDC7kkDANMrjw4FnNhYFRE2_okQYbbITxQg0Kg4DCFWm4Ye4dc4DgBBUgkKbwDiBg7QZYZOOBNggWC-eUwimAcEQZY6zxxgsyzLgcaTGAYEQacpRhxht4vEAa1UYlBbEITjyB1htyfDHG4o2jxcbiRThRbhl2fBE4GxOp3NoMVy1X8Rm26bARVg4d1LkYciyEw2uuf9HGG2up_hVFIpAhxxu3OfSGUL31-zseeSxUPBl5pE6HHHWUUbHgGKEhHXXWvZAud-y6-4IdQJUxvOFNwgBkDDm8UIYbWJ6BRgt0vNGCeWsM3EYeLVzpRv4tiFEH1PibQ_zWg5Y5WAwjv6NDvCDXgjq4oS0tGI0LyJCzci3uIF-g4A3QQoc2TKRJQ9rNinJQkTbI4IN4kYEIPxIhEnLGc2VgzBfihcIQhuUjlelcGNiAEDoIZQuByRe_wiCGzRzEDFFhg0T2crmOJSU4MOiDAgIC%26s%3D47bc6dd40018b99c30b54d89d2b0fe3f6edec320b7c59f3f76bc38dc1ff44ed61671234389&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756
159.69.163.6302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=2268746562864397984&pid=0&site=31086&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10280&price=0&is_cpm=1&cpm=0.0153&ecpm=0.01217727&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-2&site_id=0&spot_id=31086&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.0034300791556728227&placement_type_id=5&skin_test=&verify_hash=&score=99.88743591125643&ml=&tag_ab=&ttl=&space_id=31086&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInDIqBGDDI4cY1rAsBHDRgsaYmDgaIGj5IwWMnKYKSNGBkQzMMqUEeFwjpg0ZBTq2CIChoguDse4EToDRg2HYeqMwShDhg0cN2jYqGFDBg4bNGbkuJEDBw2eIn6SwZiGTpk2X2KgNWhnIo0bMXA4hFNHzMIaM2rIgAoHzsIbWweLmANHog4aMRDD2OiwDB46Xxg7fkhGzxs3Zb7MiKHSBtoxbQw_vnHDrF7OZiY6FOPGzcKmM27MoEHDYRs3F3XEmFEVxt7fwSPDGOmwjlwdA-nQgTNHx4sXZ964wMNdTWoXY960eTGnTRg509_AeQFjd1i8NprKYB2DBgwyNMrYKGM2d1cxZJiRA1j4hVHGDWKYEVhkeA0YQw051GAGgPqNYRMZYcQQww91zIFQEmT0QAZpMJhxQ4AxiDEDDoLdMAaEZtgEQwxj6FcDDmQkKAYOYtgwYA40gBSDDGPU52NJNJhhX0s2nEhDhmOEwUUdy1k1xxt1yFEjiD3c1RoNOExZpQ1tvCXGhyEKoUYTSjTxIBJRuBGDFjc8occdSMhxBA5mRCGdG3iIcQUSc4iURx43aPEEHThgYQcTUKBhBBxZJFEEGmwUIcMaR-iRxRJlgLTEEky4oQcMb4wBRRh3JGEDGU-IcQMSX1yxIh004JEEEVncUEQOWuhRRQtBUOGGFi204EQMVyRxBxtP2JDEF2dUsasUVaQh5mQ2wBFDl5HZMFkNaJEhHkZ0cIeHC3T0tVNSYTi2BUV6kcbCkPc25BVSIsCh5UQu4FCGSE-lFZsOMLgwY1JwwOXvVAgr_OAMDslhh2oPVjZGwwslPONrddSRBkY5lBHkXQrWcANHWtUAWQxmjBhGkjWMERgOY7SGVhqqiZBDDC7kkDANMrjw4FnNhYFRE2_okQYbbITxQg0Kg4DCFWm4Ye4dc4DgBBUgkKbwDiBg7QZYZOOBNggWC-eUwimAcEQZY6zxxgsyzLgcaTGAYEQacpRhxht4vEAa1UYlBbEITjyB1htyfDHG4o2jxcbiRThRbhl2fBE4GxOp3NoMVy1X8Rm26bARVg4d1LkYciyEw2uuf9HGG2up_hVFIpAhxxu3OfSGUL31-zseeSxUPBl5pE6HHHWUUbHgGKEhHXXWvZAud-y6-4IdQJUxvOFNwgBkDDm8UIYbWJ6BRgt0vNGCeWsM3EYeLVzpRv4tiFEH1PibQ_zWg5Y5WAwjv6NDvCDXgjq4oS0tGI0LyJCzci3uIF-g4A3QQoc2TKRJQ9rNinJQkTbI4IN4kYEIPxIhEnLGc2VgzBfihcIQhuUjlelcGNiAEDoIZQuByRe_wiCGzRzEDFFhg0T2crmOJSU4MOiDAgIC%26s%3D47bc6dd40018b99c30b54d89d2b0fe3f6edec320b7c59f3f76bc38dc1ff44ed61671234389&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756
IP 159.69.163.6:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=2268746562864397984&pid=0&site=31086&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10280&price=0&is_cpm=1&cpm=0.0153&ecpm=0.01217727&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-2&site_id=0&spot_id=31086&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.0034300791556728227&placement_type_id=5&skin_test=&verify_hash=&score=99.88743591125643&ml=&tag_ab=&ttl=&space_id=31086&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInDIqBGDDI4cY1rAsBHDRgsaYmDgaIGj5IwWMnKYKSNGBkQzMMqUEeFwjpg0ZBTq2CIChoguDse4EToDRg2HYeqMwShDhg0cN2jYqGFDBg4bNGbkuJEDBw2eIn6SwZiGTpk2X2KgNWhnIo0bMXA4hFNHzMIaM2rIgAoHzsIbWweLmANHog4aMRDD2OiwDB46Xxg7fkhGzxs3Zb7MiKHSBtoxbQw_vnHDrF7OZiY6FOPGzcKmM27MoEHDYRs3F3XEmFEVxt7fwSPDGOmwjlwdA-nQgTNHx4sXZ964wMNdTWoXY960eTGnTRg509_AeQFjd1i8NprKYB2DBgwyNMrYKGM2d1cxZJiRA1j4hVHGDWKYEVhkeA0YQw051GAGgPqNYRMZYcQQww91zIFQEmT0QAZpMJhxQ4AxiDEDDoLdMAaEZtgEQwxj6FcDDmQkKAYOYtgwYA40gBSDDGPU52NJNJhhX0s2nEhDhmOEwUUdy1k1xxt1yFEjiD3c1RoNOExZpQ1tvCXGhyEKoUYTSjTxIBJRuBGDFjc8occdSMhxBA5mRCGdG3iIcQUSc4iURx43aPEEHThgYQcTUKBhBBxZJFEEGmwUIcMaR-iRxRJlgLTEEky4oQcMb4wBRRh3JGEDGU-IcQMSX1yxIh004JEEEVncUEQOWuhRRQtBUOGGFi204EQMVyRxBxtP2JDEF2dUsasUVaQh5mQ2wBFDl5HZMFkNaJEhHkZ0cIeHC3T0tVNSYTi2BUV6kcbCkPc25BVSIsCh5UQu4FCGSE-lFZsOMLgwY1JwwOXvVAgr_OAMDslhh2oPVjZGwwslPONrddSRBkY5lBHkXQrWcANHWtUAWQxmjBhGkjWMERgOY7SGVhqqiZBDDC7kkDANMrjw4FnNhYFRE2_okQYbbITxQg0Kg4DCFWm4Ye4dc4DgBBUgkKbwDiBg7QZYZOOBNggWC-eUwimAcEQZY6zxxgsyzLgcaTGAYEQacpRhxht4vEAa1UYlBbEITjyB1htyfDHG4o2jxcbiRThRbhl2fBE4GxOp3NoMVy1X8Rm26bARVg4d1LkYciyEw2uuf9HGG2up_hVFIpAhxxu3OfSGUL31-zseeSxUPBl5pE6HHHWUUbHgGKEhHXXWvZAud-y6-4IdQJUxvOFNwgBkDDm8UIYbWJ6BRgt0vNGCeWsM3EYeLVzpRv4tiFEH1PibQ_zWg5Y5WAwjv6NDvCDXgjq4oS0tGI0LyJCzci3uIF-g4A3QQoc2TKRJQ9rNinJQkTbI4IN4kYEIPxIhEnLGc2VgzBfihcIQhuUjlelcGNiAEDoIZQuByRe_wiCGzRzEDFFhg0T2crmOJSU4MOiDAgIC%26s%3D47bc6dd40018b99c30b54d89d2b0fe3f6edec320b7c59f3f76bc38dc1ff44ed61671234389&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:30 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: //r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInDIqBGDDI4cY1rAsBHDRgsaYmDgaIGj5IwWMnKYKSNGBkQzMMqUEeFwjpg0ZBTq2CIChoguDse4EToDRg2HYeqMwShDhg0cN2jYqGFDBg4bNGbkuJEDBw2eIn6SwZiGTpk2X2KgNWhnIo0bMXA4hFNHzMIaM2rIgAoHzsIbWweLmANHog4aMRDD2OiwDB46Xxg7fkhGzxs3Zb7MiKHSBtoxbQw_vnHDrF7OZiY6FOPGzcKmM27MoEHDYRs3F3XEmFEVxt7fwSPDGOmwjlwdA-nQgTNHx4sXZ964wMNdTWoXY960eTGnTRg509_AeQFjd1i8NprKYB2DBgwyNMrYKGM2d1cxZJiRA1j4hVHGDWKYEVhkeA0YQw051GAGgPqNYRMZYcQQww91zIFQEmT0QAZpMJhxQ4AxiDEDDoLdMAaEZtgEQwxj6FcDDmQkKAYOYtgwYA40gBSDDGPU52NJNJhhX0s2nEhDhmOEwUUdy1k1xxt1yFEjiD3c1RoNOExZpQ1tvCXGhyEKoUYTSjTxIBJRuBGDFjc8occdSMhxBA5mRCGdG3iIcQUSc4iURx43aPEEHThgYQcTUKBhBBxZJFEEGmwUIcMaR-iRxRJlgLTEEky4oQcMb4wBRRh3JGEDGU-IcQMSX1yxIh004JEEEVncUEQOWuhRRQtBUOGGFi204EQMVyRxBxtP2JDEF2dUsasUVaQh5mQ2wBFDl5HZMFkNaJEhHkZ0cIeHC3T0tVNSYTi2BUV6kcbCkPc25BVSIsCh5UQu4FCGSE-lFZsOMLgwY1JwwOXvVAgr_OAMDslhh2oPVjZGwwslPONrddSRBkY5lBHkXQrWcANHWtUAWQxmjBhGkjWMERgOY7SGVhqqiZBDDC7kkDANMrjw4FnNhYFRE2_okQYbbITxQg0Kg4DCFWm4Ye4dc4DgBBUgkKbwDiBg7QZYZOOBNggWC-eUwimAcEQZY6zxxgsyzLgcaTGAYEQacpRhxht4vEAa1UYlBbEITjyB1htyfDHG4o2jxcbiRThRbhl2fBE4GxOp3NoMVy1X8Rm26bARVg4d1LkYciyEw2uuf9HGG2up_hVFIpAhxxu3OfSGUL31-zseeSxUPBl5pE6HHHWUUbHgGKEhHXXWvZAud-y6-4IdQJUxvOFNwgBkDDm8UIYbWJ6BRgt0vNGCeWsM3EYeLVzpRv4tiFEH1PibQ_zWg5Y5WAwjv6NDvCDXgjq4oS0tGI0LyJCzci3uIF-g4A3QQoc2TKRJQ9rNinJQkTbI4IN4kYEIPxIhEnLGc2VgzBfihcIQhuUjlelcGNiAEDoIZQuByRe_wiCGzRzEDFFhg0T2crmOJSU4MOiDAgIC&s=47bc6dd40018b99c30b54d89d2b0fe3f6edec320b7c59f3f76bc38dc1ff44ed61671234389
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=31089&source=0&idzone=3069158&w=728&h=90&mo=&ve=&site_id=31089&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=31089&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.88680582761224&bf=0.000452
109.206.161.16302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=31089&source=0&idzone=3069158&w=728&h=90&mo=&ve=&site_id=31089&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=31089&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.88680582761224&bf=0.000452
IP 109.206.161.16:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=31089&source=0&idzone=3069158&w=728&h=90&mo=&ve=&site_id=31089&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=31089&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.88680582761224&bf=0.000452 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Cookie: 912.0=1; 1624.0=1; 1625.0=1; 1629.0=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://tsyndicate.com/iframes2/03035f472880499cb28858d7b8d87284.html?subid=0
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 912.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
1624.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
1625.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
1629.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=31084&source=0&idzone=693913&w=300&h=250&mo=&ve=&site_id=31084&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=31084&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.88155364623063&bf=0.002131
109.206.161.16302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=31084&source=0&idzone=693913&w=300&h=250&mo=&ve=&site_id=31084&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=31084&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.88155364623063&bf=0.002131
IP 109.206.161.16:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=31084&source=0&idzone=693913&w=300&h=250&mo=&ve=&site_id=31084&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=31084&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.88155364623063&bf=0.002131 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Cookie: 912.0=1; 1624.0=1; 1625.0=1; 1629.0=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://twinrdack.com/link.engine?z=56355&guid=f9a4a8aa-e28f-4a28-8a65-ff4d0e6e54c5&kw=Straight,Big Ass,Big Tits,Cumshot,HD,Handjob,MILF,Stockings,Shaved&tid=0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: *
set-cookie: 912.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
1624.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
1625.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
1629.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
62b00ced28.39373b8701.com/in/multy
168.119.25.22204 No Content 0 B URL HTTP/2 62b00ced28.39373b8701.com/in/multy
IP 168.119.25.22:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /in/multy HTTP/1.1
Host: 62b00ced28.39373b8701.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://txxx.tube/
Origin: https://txxx.tube
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:30 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=1941516609207850525&pid=0&site=31074&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-9&site_id=0&spot_id=31074&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.001775&placement_type_id=&skin_test=&verify_hash=&score=99.90709412293407&ml=&tag_ab=&ttl=&space_id=31074&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31074%26source%3D0%26idzone%3D693935%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31074%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D31074%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D99.90709412293407%26bf%3D0.001775&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756
159.69.163.6302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=1941516609207850525&pid=0&site=31074&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-9&site_id=0&spot_id=31074&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.001775&placement_type_id=&skin_test=&verify_hash=&score=99.90709412293407&ml=&tag_ab=&ttl=&space_id=31074&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31074%26source%3D0%26idzone%3D693935%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31074%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D31074%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D99.90709412293407%26bf%3D0.001775&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756
IP 159.69.163.6:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=1941516609207850525&pid=0&site=31074&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-9&site_id=0&spot_id=31074&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.001775&placement_type_id=&skin_test=&verify_hash=&score=99.90709412293407&ml=&tag_ab=&ttl=&space_id=31074&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31074%26source%3D0%26idzone%3D693935%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31074%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D31074%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D99.90709412293407%26bf%3D0.001775&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:30 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=31074&source=0&idzone=693935&w=300&h=250&mo=&ve=&site_id=31074&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=31074&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.90709412293407&bf=0.001775
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=31085&source=0&idzone=693921&w=300&h=250&mo=&ve=&site_id=31085&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=31085&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.88366704528313&bf=0.001887
109.206.161.16302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=31085&source=0&idzone=693921&w=300&h=250&mo=&ve=&site_id=31085&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=31085&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.88366704528313&bf=0.001887
IP 109.206.161.16:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=31085&source=0&idzone=693921&w=300&h=250&mo=&ve=&site_id=31085&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=31085&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.88366704528313&bf=0.001887 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Cookie: 912.0=1; 1624.0=1; 1625.0=1; 1629.0=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://twinrdack.com/link.engine?z=56733&guid=f9a4a8aa-e28f-4a28-8a65-ff4d0e6e54c5&tid=0&kw=Straight,Big Ass,Big Tits,Cumshot,HD,Handjob,MILF,Stockings,Shaved
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: *
set-cookie: 912.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
1624.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
1625.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
1629.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 653c035e32d3fc0da4af3ec4afce03c0
a0eb6bc2a5332c8f26f7bd5660acad29a075e85b
86b080590392e18772a5bf3098c4ccaa345001370105836b562b69460731fbf1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4101
Cache-Control: max-age=140670
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 23:46:30 GMT
Etag: "639c75cf-118"
Expires: Sun, 18 Dec 2022 14:51:00 GMT
Last-Modified: Fri, 16 Dec 2022 13:42:39 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 280
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b102f55f36b96c77e8bc3b6909e4fb9c
b97b45faa73669f6bcdbaf25c18dbe930b32e60d
117cd8df9dd188997a4391edbd08c215006f48d24eb837c557338184eac2d5eb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "117CD8DF9DD188997A4391EDBD08C215006F48D24EB837C557338184EAC2D5EB"
Last-Modified: Thu, 15 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11299
Expires: Sat, 17 Dec 2022 02:54:49 GMT
Date: Fri, 16 Dec 2022 23:46:30 GMT
Connection: keep-alive
btds.zog.link/in/912/?sid=31074&source=0&idzone=693935&w=300&h=250&mo=&ve=&site_id=31074&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=31074&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.90709412293407&bf=0.001775
109.206.161.16302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=31074&source=0&idzone=693935&w=300&h=250&mo=&ve=&site_id=31074&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=31074&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.90709412293407&bf=0.001775
IP 109.206.161.16:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=31074&source=0&idzone=693935&w=300&h=250&mo=&ve=&site_id=31074&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=31074&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.90709412293407&bf=0.001775 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Cookie: 912.0=1; 1624.0=1; 1625.0=1; 1629.0=1; 952.0=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://12007250.pix-cdn.org/a/pjexo.html?idzone=693935&w=300&h=250&ad_sub=0
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 912.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
1624.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
1625.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
1629.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 653c035e32d3fc0da4af3ec4afce03c0
a0eb6bc2a5332c8f26f7bd5660acad29a075e85b
86b080590392e18772a5bf3098c4ccaa345001370105836b562b69460731fbf1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4101
Cache-Control: max-age=140670
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 23:46:30 GMT
Etag: "639c75cf-118"
Expires: Sun, 18 Dec 2022 14:51:00 GMT
Last-Modified: Fri, 16 Dec 2022 13:42:39 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 280
e8b1dd6199.afaafaaaba.com/in/multy?spot_size=5&spot_id=18641&subid=718272788&label=1&session_id=13611596-0b8f-431c-8986-b0c9c19b729d&cpa=ea32ac68-b24f-4fb0-9f76-ce8ab00def3d&ver=6.13.0&adblock=0&ad_type=native&iw=229&ih=229&iframe=0&mm=0&pr=&user_keywords=enough%2Cto%2Cmake%2Cmy%2Cson%27s%2Cbully%2Cstop%2CPorn%2Cvideo%2CTXXX.com%2Ctxxx.com%2Cporn%2Ctube%2Cxxx%2Ctube%2Cfree%2Cporn%2Cvideos%2Cfree%2Cporn%2Cxxx%2Cmovies%2Cxxx%2Ctube%2Cvideo%2Cfree%2Cxxx%2Cvidio%2Cclips%2Cxxxtube%2CWatch%2Cfree%2C%22enough%2Cto%2Cmake%2Cmy%2Cson%27s%2Cbully%2Cstop%22%2Cporn%2Cvideo%2Ccategory%2Con%2CTxxx.com%2CHomemade%2Cfuck%2Cvideos%2CFree%2Camateur%2Cporn%2Con%2CTxxx.com&tag_ab=b&user_fp=0&v2=0&utm_source=&utm_medium=&utm_campaign=&utm_content=&campaign=
172.64.111.20200 OK 25 kB URL HTTP/2 e8b1dd6199.afaafaaaba.com/in/multy?spot_size=5&spot_id=18641&subid=718272788&label=1&session_id=13611596-0b8f-431c-8986-b0c9c19b729d&cpa=ea32ac68-b24f-4fb0-9f76-ce8ab00def3d&ver=6.13.0&adblock=0&ad_type=native&iw=229&ih=229&iframe=0&mm=0&pr=&user_keywords=enough%2Cto%2Cmake%2Cmy%2Cson%27s%2Cbully%2Cstop%2CPorn%2Cvideo%2CTXXX.com%2Ctxxx.com%2Cporn%2Ctube%2Cxxx%2Ctube%2Cfree%2Cporn%2Cvideos%2Cfree%2Cporn%2Cxxx%2Cmovies%2Cxxx%2Ctube%2Cvideo%2Cfree%2Cxxx%2Cvidio%2Cclips%2Cxxxtube%2CWatch%2Cfree%2C%22enough%2Cto%2Cmake%2Cmy%2Cson%27s%2Cbully%2Cstop%22%2Cporn%2Cvideo%2Ccategory%2Con%2CTxxx.com%2CHomemade%2Cfuck%2Cvideos%2CFree%2Camateur%2Cporn%2Con%2CTxxx.com&tag_ab=b&user_fp=0&v2=0&utm_source=&utm_medium=&utm_campaign=&utm_content=&campaign=
IP 172.64.111.20:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (24933)
Hash c2c8ab07df0b9489145c4b34fba469cc
201bdea78b8a0935b84256856ed7e022e24afbc6
b618c3e695f47cc620a2121d939dc4f8fafc781d9f9ace9c8eabd014499acc98
GET /in/multy?spot_size=5&spot_id=18641&subid=718272788&label=1&session_id=13611596-0b8f-431c-8986-b0c9c19b729d&cpa=ea32ac68-b24f-4fb0-9f76-ce8ab00def3d&ver=6.13.0&adblock=0&ad_type=native&iw=229&ih=229&iframe=0&mm=0&pr=&user_keywords=enough%2Cto%2Cmake%2Cmy%2Cson%27s%2Cbully%2Cstop%2CPorn%2Cvideo%2CTXXX.com%2Ctxxx.com%2Cporn%2Ctube%2Cxxx%2Ctube%2Cfree%2Cporn%2Cvideos%2Cfree%2Cporn%2Cxxx%2Cmovies%2Cxxx%2Ctube%2Cvideo%2Cfree%2Cxxx%2Cvidio%2Cclips%2Cxxxtube%2CWatch%2Cfree%2C%22enough%2Cto%2Cmake%2Cmy%2Cson%27s%2Cbully%2Cstop%22%2Cporn%2Cvideo%2Ccategory%2Con%2CTxxx.com%2CHomemade%2Cfuck%2Cvideos%2CFree%2Camateur%2Cporn%2Con%2CTxxx.com&tag_ab=b&user_fp=0&v2=0&utm_source=&utm_medium=&utm_campaign=&utm_content=&campaign= HTTP/1.1
Host: e8b1dd6199.afaafaaaba.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://txxx.tube
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: application/json; charset=utf-8
content-length: 24941
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yWCwUIs8GPDpD5lvG6ONE%2FEYzREkhpYEBmGgVt5jjquKAaIuw9CPgUpeYB3XgEqj34ugJr%2F%2Bp94qUMamzU0p2BaxZktU9a3sx0YEkN1WHdVVykKTKwv5RU4wF7zHozyVz1RMeaO4uUvDYKAR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77ab4c798af18e21-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=755
157.90.84.242200 OK 28 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=755
IP 157.90.84.242:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text
Hash e3af49472d683a217237a6ebaf79bcb7
378db4d7e6171a2676ee15c80b4475d7f5ec9742
7714898d715fb8b1ce7a1de73e0e7c9f6394acc8a08cf1a3b342a7829d4de84a
POST /fp?tag_id=755 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 22286
Origin: https://txxx.tube
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 16 Dec 2022 23:46:30 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 28
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://txxx.tube
Set-Cookie: id=2095358032924156089; Expires=Sat, 16 Dec 2023 23:46:30 GMT; Secure; SameSite=None
Vary: Origin
s3t3d2y8.afcdn.net/library/676799/8725271eb9aff2c0246cdfee4b4a54b346da148b.jpg
185.76.9.19200 OK 59 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/676799/8725271eb9aff2c0246cdfee4b4a54b346da148b.jpg
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
Hash 64f43b9280e557d3cb66377ef7ae0487
f4ea56a34e9e33aade709b0048e27982d256b936
e6908562297aafde53e7a3b7c33641a0898d1fde7a77bd4a44dcdaf127a893ac
GET /library/676799/8725271eb9aff2c0246cdfee4b4a54b346da148b.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: image/jpeg
content-length: 24460
last-modified: Wed, 10 Nov 2021 17:06:19 GMT
etag: "618bfc0b-5f8c"
expires: Fri, 30 Jun 2023 15:11:52 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195334
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ3R8dr/0GXeAA
x-77-nzt-ray: c0a4cc28433f256a56039d631bf99f19
x-cache: HIT
x-age: 14575056
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 56202bb66243d35cf602908327e52c93
3e523a6b44f210e0215a89d73d74dd27482ef2d7
50e7596b690e82310f30999003ad7f0650a3049405e6c8a7b8fecc531287ba43
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50E7596B690E82310F30999003AD7F0650A3049405E6C8A7B8FECC531287BA43"
Last-Modified: Thu, 15 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10865
Expires: Sat, 17 Dec 2022 02:47:35 GMT
Date: Fri, 16 Dec 2022 23:46:30 GMT
Connection: keep-alive
s.optnx.com/cimp.php?data=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-
95.211.229.245302 Found 0 B URL HTTP/1.1 s.optnx.com/cimp.php?data=TVRZM01USXpORE01TUh3MU9HTTBZMlZqWW1Rd05qVTVPR05sWXpRek9EZ3hNamN3TWpJM1pqZzBOdy0tfC9saWJyYXJ5LzY3Njc5OS84NzI1MjcxZWI5YWZmMmMwMjQ2Y2RmZWU0YjRhNTRiMzQ2ZGExNDhiLmpwZ3xodHRwc3w5MS45MC40Mi4xNTR8Tk9SfDQxfHR4eHguY29tfDY3Njc5OXw1OTk5MTh8ODY5MjcxfDM5MzY4NTl8NTA4fDUwMjc2ODh8NzE5ODcxOTB8NDB8M3wwfDB8MjUzNDR8MHwxfDcwfFVTRHxVU0R8MXwxfDM0fHwxfE5PUnx8MjB8NHwxfHwxMjc1MzIwMjE1fDAyZjA1OGJkNTI1YjJhODViNWIzYTlhM2Y1MzAyYWFmfDF8MHx0eHh4LmNvbXwwfDUyNjMwfDEwMDY0NHwwLjAyfDF8MHxleGNoYW5nZV9uYXRpdmVfYWR8MHwwfDMxNDMyNDJ8LTF8MHwzMTQzMjQ0fHx8MnwxNDQwfHwwfDB8MHwwfDB8MHwxfDB8fDh8MXxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMHx8T0t8ZmY3ZTYxNWU4YmZkNTU1YTFiNzAwMWEwYTU1YThmY2Q-
IP 95.211.229.245:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cimp.php?data=TVRZM01USXpORE01TUh3MU9HTTBZMlZqWW1Rd05qVTVPR05sWXpRek9EZ3hNamN3TWpJM1pqZzBOdy0tfC9saWJyYXJ5LzY3Njc5OS84NzI1MjcxZWI5YWZmMmMwMjQ2Y2RmZWU0YjRhNTRiMzQ2ZGExNDhiLmpwZ3xodHRwc3w5MS45MC40Mi4xNTR8Tk9SfDQxfHR4eHguY29tfDY3Njc5OXw1OTk5MTh8ODY5MjcxfDM5MzY4NTl8NTA4fDUwMjc2ODh8NzE5ODcxOTB8NDB8M3wwfDB8MjUzNDR8MHwxfDcwfFVTRHxVU0R8MXwxfDM0fHwxfE5PUnx8MjB8NHwxfHwxMjc1MzIwMjE1fDAyZjA1OGJkNTI1YjJhODViNWIzYTlhM2Y1MzAyYWFmfDF8MHx0eHh4LmNvbXwwfDUyNjMwfDEwMDY0NHwwLjAyfDF8MHxleGNoYW5nZV9uYXRpdmVfYWR8MHwwfDMxNDMyNDJ8LTF8MHwzMTQzMjQ0fHx8MnwxNDQwfHwwfDB8MHwwfDB8MHwxfDB8fDh8MXxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMHx8T0t8ZmY3ZTYxNWU4YmZkNTU1YTFiNzAwMWEwYTU1YThmY2Q- HTTP/1.1
Host: s.optnx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22639d03562f4f28.324446993163500925%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 16 Dec 2022 23:46:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22639d03562f4f28.324446993163500925%22%3B%7D; expires=Sun, 15 Dec 2024 23:46:30 GMT; path=; domain=.optnx.com; Secure; SameSite=none
Location: https://s3t3d2y8.afcdn.net/library/676799/8725271eb9aff2c0246cdfee4b4a54b346da148b.jpg
X-Robots-Tag: noindex, follow
e1.o.lencr.org/
23.36.76.226200 OK 346 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b83ae2c051c175ced892c172a735bcff
2121bbfeaab242b5f0d7f00fba6241367eea4de0
7e7be7287a107ea79259039471aa61b32ca5ea89552af2b6b3fadeb399d816ce
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "7E7BE7287A107EA79259039471AA61B32CA5EA89552AF2B6B3FADEB399D816CE"
Last-Modified: Thu, 15 Dec 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4873
Expires: Sat, 17 Dec 2022 01:07:43 GMT
Date: Fri, 16 Dec 2022 23:46:30 GMT
Connection: keep-alive
12007250.pix-cdn.org/a/pjexo.html?idzone=693941&w=300&h=250&ad_sub=0
45.133.44.25200 OK 391 B URL HTTP/2 12007250.pix-cdn.org/a/pjexo.html?idzone=693941&w=300&h=250&ad_sub=0
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 18be7c35751aead7e793103f27bc4ccd
32d328e67b94fe85dd2c2d2ec0b27784337f2efb
7a82fde7afb24b945f8fa1272cf0bd901b6490c3587992f851d0130b42fbfaa4
GET /a/pjexo.html?idzone=693941&w=300&h=250&ad_sub=0 HTTP/1.1
Host: 12007250.pix-cdn.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html; charset=UTF-8
last-modified: Wed, 20 May 2020 13:08:32 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fj2x9OXZfcjPiZV8AMOzkti06EnmYlmttcPdRsZ73aLc4m6SG3x2a%2Br3%2BYFCMLkEc%2FGV9sstuYCVS4IeFwm0frnBgdbYg8NfzCsaGn5pl7V8AAaue8NPaOKwkchA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 75235637dc749001-FRA
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
expires: Sat, 17 Dec 2022 00:46:30 GMT
cache-control: max-age=3600
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/344676/951823a27e0ab24420b7e942639ac2d484359704.gif
185.76.9.19200 OK 88 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/344676/951823a27e0ab24420b7e942639ac2d484359704.gif
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
File type GIF image data, version 89a, 300 x 250\012- data
Hash ff3a3ae9d720b540588c131c4273f435
951823a27e0ab24420b7e942639ac2d484359704
4d4ba2d85a944d75f1ee56bab2eb1ae9a6b927a502280e3464608c11a447dd85
GET /library/344676/951823a27e0ab24420b7e942639ac2d484359704.gif HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://txxx.tube/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: image/gif
content-length: 87767
last-modified: Thu, 20 Jan 2022 15:19:55 GMT
etag: "61e97d9b-156d7"
expires: Fri, 30 Jun 2023 11:17:44 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195672
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ0mMTj/fmTeAA
x-77-nzt-ray: c0a4cc28433f256a56039d63f52dd71b
x-cache: HIT
x-age: 14574718
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInDIqBGDDI4cY1rAsBHDRgsaYmDgaIGj5IwWMnKYKSNGBkQzMMqUEeFwjpg0ZBTq2CIChoguDse4EToDRg2HYeqMwShDhg0cN2jYqGFDBg4bNGbkuJEDBw2eIn6SwZiGTpk2X2KgNWhnIo0bMXA4hFNHzMIaM2rIgAoHzsIbWweLmANHog4aMRDD2OiwDB46Xxg7fkhGzxs3Zb7MiKHSBtoxbQw_vnHDrF7OZiY6FOPGzcKmM27MoEHDYRs3F3XEmFEVxt7fwSPDGOmwjlwdA-nQgTNHx4sXZ964wMNdTWoXY960eTGnTRg509_AeQFjd1i8NprKYB2DBgwyNMrYKGM2d1cxZJiRA1j4hVHGDWKYEVhkeA0YQw051GAGgPqNYRMZYcQQww91zIFQEmT0QAZpMJhxQ4AxiDEDDoLdMAaEZtgEQwxj6FcDDmQkKAYOYtgwYA40gBSDDGPU52NJNJhhX0s2nEhDhmOEwUUdy1k1xxt1yFEjiD3c1RoNOExZpQ1tvCXGhyEKoUYTSjTxIBJRuBGDFjc8occdSMhxBA5mRCGdG3iIcQUSc4iURx43aPEEHThgYQcTUKBhBBxZJFEEGmwUIcMaR-iRxRJlgLTEEky4oQcMb4wBRRh3JGEDGU-IcQMSX1yxIh004JEEEVncUEQOWuhRRQtBUOGGFi204EQMVyRxBxtP2JDEF2dUsasUVaQh5mQ2wBFDl5HZMFkNaJEhHkZ0cIeHC3T0tVNSYTi2BUV6kcbCkPc25BVSIsCh5UQu4FCGSE-lFZsOMLgwY1JwwOXvVAgr_OAMDslhh2oPVjZGwwslPONrddSRBkY5lBHkXQrWcANHWtUAWQxmjBhGkjWMERgOY7SGVhqqiZBDDC7kkDANMrjw4FnNhYFRE2_okQYbbITxQg0Kg4DCFWm4Ye4dc4DgBBUgkKbwDiBg7QZYZOOBNggWC-eUwimAcEQZY6zxxgsyzLgcaTGAYEQacpRhxht4vEAa1UYlBbEITjyB1htyfDHG4o2jxcbiRThRbhl2fBE4GxOp3NoMVy1X8Rm26bARVg4d1LkYciyEw2uuf9HGG2up_hVFIpAhxxu3OfSGUL31-zseeSxUPBl5pE6HHHWUUbHgGKEhHXXWvZAud-y6-4IdQJUxvOFNwgBkDDm8UIYbWJ6BRgt0vNGCeWsM3EYeLVzpRv4tiFEH1PibQ_zWg5Y5WAwjv6NDvCDXgjq4oS0tGI0LyJCzci3uIF-g4A3QQoc2TKRJQ9rNinJQkTbI4IN4kYEIPxIhEnLGc2VgzBfihcIQhuUjlelcGNiAEDoIZQuByRe_wiCGzRzEDFFhg0T2crmOJSU4MOiDAgIC&s=47bc6dd40018b99c30b54d89d2b0fe3f6edec320b7c59f3f76bc38dc1ff44ed61671234389
46.4.79.105200 OK 2.9 kB URL HTTP/2 r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInDIqBGDDI4cY1rAsBHDRgsaYmDgaIGj5IwWMnKYKSNGBkQzMMqUEeFwjpg0ZBTq2CIChoguDse4EToDRg2HYeqMwShDhg0cN2jYqGFDBg4bNGbkuJEDBw2eIn6SwZiGTpk2X2KgNWhnIo0bMXA4hFNHzMIaM2rIgAoHzsIbWweLmANHog4aMRDD2OiwDB46Xxg7fkhGzxs3Zb7MiKHSBtoxbQw_vnHDrF7OZiY6FOPGzcKmM27MoEHDYRs3F3XEmFEVxt7fwSPDGOmwjlwdA-nQgTNHx4sXZ964wMNdTWoXY960eTGnTRg509_AeQFjd1i8NprKYB2DBgwyNMrYKGM2d1cxZJiRA1j4hVHGDWKYEVhkeA0YQw051GAGgPqNYRMZYcQQww91zIFQEmT0QAZpMJhxQ4AxiDEDDoLdMAaEZtgEQwxj6FcDDmQkKAYOYtgwYA40gBSDDGPU52NJNJhhX0s2nEhDhmOEwUUdy1k1xxt1yFEjiD3c1RoNOExZpQ1tvCXGhyEKoUYTSjTxIBJRuBGDFjc8occdSMhxBA5mRCGdG3iIcQUSc4iURx43aPEEHThgYQcTUKBhBBxZJFEEGmwUIcMaR-iRxRJlgLTEEky4oQcMb4wBRRh3JGEDGU-IcQMSX1yxIh004JEEEVncUEQOWuhRRQtBUOGGFi204EQMVyRxBxtP2JDEF2dUsasUVaQh5mQ2wBFDl5HZMFkNaJEhHkZ0cIeHC3T0tVNSYTi2BUV6kcbCkPc25BVSIsCh5UQu4FCGSE-lFZsOMLgwY1JwwOXvVAgr_OAMDslhh2oPVjZGwwslPONrddSRBkY5lBHkXQrWcANHWtUAWQxmjBhGkjWMERgOY7SGVhqqiZBDDC7kkDANMrjw4FnNhYFRE2_okQYbbITxQg0Kg4DCFWm4Ye4dc4DgBBUgkKbwDiBg7QZYZOOBNggWC-eUwimAcEQZY6zxxgsyzLgcaTGAYEQacpRhxht4vEAa1UYlBbEITjyB1htyfDHG4o2jxcbiRThRbhl2fBE4GxOp3NoMVy1X8Rm26bARVg4d1LkYciyEw2uuf9HGG2up_hVFIpAhxxu3OfSGUL31-zseeSxUPBl5pE6HHHWUUbHgGKEhHXXWvZAud-y6-4IdQJUxvOFNwgBkDDm8UIYbWJ6BRgt0vNGCeWsM3EYeLVzpRv4tiFEH1PibQ_zWg5Y5WAwjv6NDvCDXgjq4oS0tGI0LyJCzci3uIF-g4A3QQoc2TKRJQ9rNinJQkTbI4IN4kYEIPxIhEnLGc2VgzBfihcIQhuUjlelcGNiAEDoIZQuByRe_wiCGzRzEDFFhg0T2crmOJSU4MOiDAgIC&s=47bc6dd40018b99c30b54d89d2b0fe3f6edec320b7c59f3f76bc38dc1ff44ed61671234389
IP 46.4.79.105:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4688)
Hash 415a5d4fe84f902819a7f1cb45ffb19e
a1e1f096bc77ccdf783a3fd95f8c56c340ea2d84
0899cf29fbc2cd670cda94c533029a78187137db243f7f573841da5279822607
GET /api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInDIqBGDDI4cY1rAsBHDRgsaYmDgaIGj5IwWMnKYKSNGBkQzMMqUEeFwjpg0ZBTq2CIChoguDse4EToDRg2HYeqMwShDhg0cN2jYqGFDBg4bNGbkuJEDBw2eIn6SwZiGTpk2X2KgNWhnIo0bMXA4hFNHzMIaM2rIgAoHzsIbWweLmANHog4aMRDD2OiwDB46Xxg7fkhGzxs3Zb7MiKHSBtoxbQw_vnHDrF7OZiY6FOPGzcKmM27MoEHDYRs3F3XEmFEVxt7fwSPDGOmwjlwdA-nQgTNHx4sXZ964wMNdTWoXY960eTGnTRg509_AeQFjd1i8NprKYB2DBgwyNMrYKGM2d1cxZJiRA1j4hVHGDWKYEVhkeA0YQw051GAGgPqNYRMZYcQQww91zIFQEmT0QAZpMJhxQ4AxiDEDDoLdMAaEZtgEQwxj6FcDDmQkKAYOYtgwYA40gBSDDGPU52NJNJhhX0s2nEhDhmOEwUUdy1k1xxt1yFEjiD3c1RoNOExZpQ1tvCXGhyEKoUYTSjTxIBJRuBGDFjc8occdSMhxBA5mRCGdG3iIcQUSc4iURx43aPEEHThgYQcTUKBhBBxZJFEEGmwUIcMaR-iRxRJlgLTEEky4oQcMb4wBRRh3JGEDGU-IcQMSX1yxIh004JEEEVncUEQOWuhRRQtBUOGGFi204EQMVyRxBxtP2JDEF2dUsasUVaQh5mQ2wBFDl5HZMFkNaJEhHkZ0cIeHC3T0tVNSYTi2BUV6kcbCkPc25BVSIsCh5UQu4FCGSE-lFZsOMLgwY1JwwOXvVAgr_OAMDslhh2oPVjZGwwslPONrddSRBkY5lBHkXQrWcANHWtUAWQxmjBhGkjWMERgOY7SGVhqqiZBDDC7kkDANMrjw4FnNhYFRE2_okQYbbITxQg0Kg4DCFWm4Ye4dc4DgBBUgkKbwDiBg7QZYZOOBNggWC-eUwimAcEQZY6zxxgsyzLgcaTGAYEQacpRhxht4vEAa1UYlBbEITjyB1htyfDHG4o2jxcbiRThRbhl2fBE4GxOp3NoMVy1X8Rm26bARVg4d1LkYciyEw2uuf9HGG2up_hVFIpAhxxu3OfSGUL31-zseeSxUPBl5pE6HHHWUUbHgGKEhHXXWvZAud-y6-4IdQJUxvOFNwgBkDDm8UIYbWJ6BRgt0vNGCeWsM3EYeLVzpRv4tiFEH1PibQ_zWg5Y5WAwjv6NDvCDXgjq4oS0tGI0LyJCzci3uIF-g4A3QQoc2TKRJQ9rNinJQkTbI4IN4kYEIPxIhEnLGc2VgzBfihcIQhuUjlelcGNiAEDoIZQuByRe_wiCGzRzEDFFhg0T2crmOJSU4MOiDAgIC&s=47bc6dd40018b99c30b54d89d2b0fe3f6edec320b7c59f3f76bc38dc1ff44ed61671234389 HTTP/1.1
Host: r-eu.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html; charset=utf-8
content-length: 2876
vary: *
content-encoding: gzip
pragma: no-cache
expires: 0
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: c6a6b896c93f5d13
set-cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78; expires=Fri, 16 Jun 2023 23:46:30 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b289b59fe6a44505a38ffa42a7c0b126
7a28a8e7c54d309f1df4e406862880230e34c823
bf0cf7679a8ac01342b369ca0d3db25ffbffe82b4bd00c7d67b2965f3aedc415
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BF0CF7679A8AC01342B369CA0D3DB25FFBFFE82B4BD00C7D67B2965F3AEDC415"
Last-Modified: Thu, 15 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10627
Expires: Sat, 17 Dec 2022 02:43:37 GMT
Date: Fri, 16 Dec 2022 23:46:30 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 653c035e32d3fc0da4af3ec4afce03c0
a0eb6bc2a5332c8f26f7bd5660acad29a075e85b
86b080590392e18772a5bf3098c4ccaa345001370105836b562b69460731fbf1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4101
Cache-Control: max-age=140670
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 23:46:30 GMT
Etag: "639c75cf-118"
Expires: Sun, 18 Dec 2022 14:51:00 GMT
Last-Modified: Fri, 16 Dec 2022 13:42:39 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 280
ads.realsrv.com/ads.js
185.76.9.19200 OK 1.8 kB IP 185.76.9.19:0
ASN #60068 Datacamp Limited
File type HTML document text\012- HTML document, ASCII text, with very long lines (4243), with no line terminators
Hash b6f9091a8c72e507509d1471026f0a92
d9015a1aad2f71464d0d4ca928a60a68865a3362
ffe10926b8d593c702dd7d869cbb25c2728c9b0c402f22939ca2190959af4186
GET /ads.js HTTP/1.1
Host: ads.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://12007250.pix-cdn.org/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22639d0354bb1297.155261652023187594%22%3B%7D; img_click_3069158=https%3A%2F%2Fsyndication.realsrv.com%2Fclick.php%3Fdata%3DH4sIAAAAAAAAA0WRy27sIAyGnybLiQCb27JHVTdncR5hRAiZRj0TKsKkM5UfvjC5VGbx25_9Y4HkGg1HYi3j9J7z59zASyPeysltWE5L7FsfryXlg1AmdP3JKC9PaIIqSuMJnEJrnGTSdQ28eXf9HPsGXhv9p2o3XqZzKejXRqjFpZ1V6fIYf.Ecb8mHlc7Jn9_jnCd3DSv9CI.vmLbhPXmS7C7zWn6q1WvMYb.p6uOS7zgdoOoD.LLMsXYOl5gevyzeppweG92SJxliurq8gk1vE_NWdT7f3P_zs7CvuxtNS0hzeYL5nJPzH.N0KS1EjLjSXACCsZTv93v9AbK8taxF0XKJpFGAVVYRMGW5NCSZIUJOQMiohhbmbotTCVJgewYSu44Lq4uBFIorKZgAbrS0SEICIpVeRrTOr0kN4AgCxaFKX13R7J018OhWq8kC9O8veWsVSDaE3llUmgWJg.9EN0ivjfbiB4AqQMZ.AgAA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: application/javascript
etag: W/"f4fddb85b686269b678e3caf766"
expires: Tue, 13 Dec 2022 13:52:50 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1671242113
server: CDN77-Turbo
x-77-nzt: AblMCQ1aDIb/BQwAAA
x-77-nzt-ray: c0a4cc287642ce6856039d6313fc981e
x-cache: HIT
x-age: 3077
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/5139000/5139701/360x240/1.jpg
45.133.44.25200 OK 17 kB URL HTTP/2 tn.upornia.com/contents/videos_screenshots/5139000/5139701/360x240/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash 8be8af36ee850631ebc3762ed4f159d4
3516fc1ef3d022b80f6e04a3c046b2c16fa94528
a436262619413dc5b46f7027d054fbd2a80acf9931f162b1feead19f4d8f96c6
GET /contents/videos_screenshots/5139000/5139701/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: image/jpeg
content-length: 17187
server: nginx/1.19.6
last-modified: Mon, 07 Nov 2022 09:50:37 GMT
etag: "6368d4ed-4323"
cache-control: max-age=15552000
expires: Wed, 14 Jun 2023 23:46:30 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
syndication.realsrv.com/ads-iframe-display.php?idzone=693935&type=300x250&p=https%3A//rtbrennab.com/&dt=1671234387417&sub=0&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
95.211.229.245200 OK 860 B URL HTTP/1.1 syndication.realsrv.com/ads-iframe-display.php?idzone=693935&type=300x250&p=https%3A//rtbrennab.com/&dt=1671234387417&sub=0&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
IP 95.211.229.245:0
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (1768), with no line terminators
Hash bb93376da56790141821df4d1c73a1ea
afa5c6f6ff816e952979fad6c87288cc9e530389
3de0bc130bbd46ed4cfb96dc39a54f18e4537e73c38a3b6a4fa7fb9c0c9ed743
GET /ads-iframe-display.php?idzone=693935&type=300x250&p=https%3A//rtbrennab.com/&dt=1671234387417&sub=0&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://12007250.pix-cdn.org/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22639d0354bb1297.155261652023187594%22%3B%7D; img_click_3069158=https%3A%2F%2Fsyndication.realsrv.com%2Fclick.php%3Fdata%3DH4sIAAAAAAAAA0WRy27sIAyGnybLiQCb27JHVTdncR5hRAiZRj0TKsKkM5UfvjC5VGbx25_9Y4HkGg1HYi3j9J7z59zASyPeysltWE5L7FsfryXlg1AmdP3JKC9PaIIqSuMJnEJrnGTSdQ28eXf9HPsGXhv9p2o3XqZzKejXRqjFpZ1V6fIYf.Ecb8mHlc7Jn9_jnCd3DSv9CI.vmLbhPXmS7C7zWn6q1WvMYb.p6uOS7zgdoOoD.LLMsXYOl5gevyzeppweG92SJxliurq8gk1vE_NWdT7f3P_zs7CvuxtNS0hzeYL5nJPzH.N0KS1EjLjSXACCsZTv93v9AbK8taxF0XKJpFGAVVYRMGW5NCSZIUJOQMiohhbmbotTCVJgewYSu44Lq4uBFIorKZgAbrS0SEICIpVeRrTOr0kN4AgCxaFKX13R7J018OhWq8kC9O8veWsVSDaE3llUmgWJg.9EN0ivjfbiB4AqQMZ.AgAA
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Dec 2022 23:46:30 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22639d0354bb1297.155261652023187594%22%3B%7D; expires=Sun, 15 Dec 2024 23:46:30 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
impressions=cmmsxrbonxgxamxeasxoxgeicmmsxaeenxgxamebscormgeimacslbecnxgxaaabssxamgeislsaroornxgxamxxameabgeicxbmsbxcnxgxamxeeslemgeioslmrxlrnxgxamemllesegeiccmmlmlcnxgxamxxxxxsegeialbsereanxgxamemlblaageioslmrxbrnxgxamxxallxageicxbmsbcenxgxamxxrsorogeioslmrxlsnxgxamxelrroegeicxbmsbocnxgxamxxameabgeicxbmsboenxgxamxxmslsmgeiclsmarcanxgxaaallsxlcgeiclsmrrmanxgxaaallsxlcgeirbabxabbnxgxamxxallxageiccmmlleanxgxamemxemcbgeimcrxsbcenxgxaameollsmgeimreaoboenxgxaameollsmgeimcclosscnxgxaalccxmexgeimacslbeenxgxaaboslelageioslmroemnxgxamxxcmsxlgeioslmrxbmnxgxamxxcombmgeicaxsscmbnxgxamexrbcemgeicaormlxonxgxaamealeoegeicaormbmcnxgxaamealeoegeimcclsxscnxgxaamsmxlcageimccloscanxgxaallmalxmgeimreaomxenxgxaamelbbsbgeimreaobscnxgxaamelbbsbgeimcclosconxgxaallsbmbbgeimcclsoeonxgxaamxaacblgeimacslbeonxgxaaloesaslgeimcclsxsanxgxaamsmxlcageimcclsxlbnxgxaamssmcolgeimaecseaonxgxaamssmcolgeimaecsxeonxgxaamssmcolgeimaecseronxgxaamssmcolgeimrblelrenxgxaamssmcolgeiccmmllebnxgxamemlblaageimcclsxlonxgxaamcsebsxgeimcclsoeenxgxaamcrclalgeimcclsxsbnxgxaamcrclalgeimcclossbnxgxaalbexcrageimcclsxlcnxgxaamrscxmxgeimaecseranxgxaabrlemaegeimcclosccnxgxaamrscxmxgeicaormlxcnxgxaalbxrlcegeicaormbmbnxgxaalrexasogeiclsmrbsenxgxaamaxcsxcgeialbserebnxgxamexsrmoogeimcclsxconxgxamxxcmsxlgeimcclsxmenxgxamxeasxoxgeialbserxonxgxaalbcxbsageimccloscenxgxaalmlsmmcgeimcclsxxonxgxamxxallxageimcclsxbcnxgxamebscormgeicaormlxanxgxaammacmrxgeimcclsxaonxgxamebscormgeimrblxxxbnxgxaambboecmgeimrblxelcnxgxaambboecmgeimrblxxrbnxgxaambboecmgeialbserxenxgxamexmlmxxgeimacslbeanxgxaablxaelxgeialbserecnxgxameoxbrrrgeiccmmllecnxgxamexsrmoogeisaeeasslnxgxaabrbeccogeimcclossanxgxaabrlemaegeimcclsxronxgxamxxallxageimaecseabnxgxaabrlemaegeimrblelrcnxgxaabrlemaegeimrblxemonxgxaabrlemaegeimcclsxcanxgxamxeeslemgeimaecsxoonxgxaabmalbxxgeircsxcxscnxgxaabbxeomsgeicaormbbenxgxaalexxbcxgeiabeocmconxgxaablxrcmmgeimcclsxxcnxgxamebscormgeimrblxeeanxgxaablsaloageimaecsemanxgxaalmmeabageimaecselonxgxaaloaroaageimcclsxacnxgxamxxallxageimcclselenxgxamebscormgeimaecsxronxgxaalxmmoorgeimaecsxsenxgxaalxmmoorgeimaecsercnxgxaalxmmoorgeimaecsembnxgxaalxmmoorgeimaecselenxgxaalxmmoorgeimaecobobnxgxaalsmleergeimaecomoanxgxaalsbbboageimrblxxoenxgxaalsbmacmgeimaecobsbnxgxamxxallxageimrblxosonxgxaalsbbboageimcclsxmanxgxamxeasxoxgeimaecsxccnxgxaalmeeamageimrblxeecnxgxaalmeeamageimrblelronxgxaalmeeamageimrblelmonxgxaalmeeamageimaecseacnxgxaalmmeabageimaecsxxcnxgxaalmmeabageicaormbmanxgxaalbxrlcegeimaecsxocnxgxaalbrxssogeicaormlobnxgxaallcccaogeimaecomrenxgxameexxllcgeimrblxxxanxgxameexxllrgeimrblxosbnxgxameexxllrgeimaecomlonxgxameexxllrgeimcclselanxgxamxeasxoxgeimrblxoxenxgxameexmllsgeimaecomconxgxameexmllsgeiclsmrrrenxgxamexlcmeageiclsmarocnxgxamexlcmeageiclsmrbecnxgxamexlcmeageiclsmarcbnxgxamexlcmeageimmccrbeanxgxamxebslxageimmccrlacnxgxamxebslxageimrblxeoenxgxamecrasabgeimmccrlaonxgxamxxallxageimmccrbxenxgxamxxallxageimmccrlaenxgxamemsxoscgeimmccrbebnxgxamxxxxxsegeiclsmrrmenxgxameaeoremgeiclsmarronxgxameaeoremgeimrblelxanxgxameacaclmgeicaormbabnxgxamemsarmegeicaormlsanxgxamemsarmegeicaormbconxgxamemsarmegeicaormblonxgxamemsarmegeimaecomcbnxgxamebscormgeimrblxoebnxgxamebscormgeimrblxoconxgxamxeasxoxgeimaecobebnxgxamxeasxoxgeimaecomrcnxgxamxeasxoxgeicaormlrenxgxamxxxmscageicaormbaanxgxamxxxmscageicaormblanxgxamxxxmscageimxlbalscnogxamxxrocebgxcceimxeoxsbensgxamxxrocebgxcceimmosssconsgxamxxrsorogxcceimxxrecsancgxamxxrsorsgxcceialrexexbnogxamxxrsorsgxcceimrexbcobnsgxamxxrsorsgxcceimmrbcrbbnogxamxxrsorsgxcceimrmaobxanogxamxxrsorsgxcceialcaercenxgxamxxrsaeogxcceimxeemlxcnagxamxxrsaeogxcceimrlxebacnxgxamxxrsaeogxcceimrbxracbnogxamxxrsaeogxcceimrmcxbranxgxamxxrsaeogxcceimaslbmccnxgxamxxrraelgxcceialbbbllcnxgxamxxrraelgxcceialbbbllanxgxamxxrraelgxcceialbbblmanxgxamxxrraelgxcceialbbblbcnxgxamxxramcsgxcceiarmcbbbbnxgxamxxrbrmmgxcceimrmoxooonxgxamxxrbrmbgxcceimxlbalcenogxamxxaexsmgxcceimmooobronxgxamxxaesoagxcceimmooobranxgxamxxaesoagxcceimmsoxrlenxgxamxxaesomgxcceimaslbmconxgxamxxaessagxcceimaslbmcanxgxamxxasxclgxcceimaooloranxgxamxxassxbgxcceimmrbcrbcnxgxamxxarraagxcceimxeemblenrgxamxxarrabgxcceimxeemblbnsgxamxxarrabgxcceimclsaoxbnrgxamxxarrabgxcceimrxccosancgxamxxarrabgxcceicmarxbboncgxamxxarrabgxcceicloaxxacnogxamxxarrabgxcceimrxccosonrgxamxxarrabgxcceicloaxxmenogxamxxarralgxcceimaoobrbcnsgxamxxaaxmmgxcceimcoaxmxcncgxamxxaboeegxcceiraclralcnxgxamxxaboeogxcceislmbecesnogxamxxallxagxoaeimrblxxaonxgxamxxallxageimrblxxbcnxgxamxxallxageimaecobxbnxgxamxxallxageioabsmorbnxgxamxxallxagxcceimmooobrbnogxamxxmobexgxcceialrexeoonxgxamxxmolblgxcceimxreaomcnxgxamxxmsscsgxcceimrcscrsanxgxamxxmsscsgxcceimaoobrbansgxamxxmsmmsgxcceialbbebsanxgxamxxmslsmgxcceimxlbmxlcnxgxamxxmslsmgxcceimcssmlronsgxamxxmslsmgxcceimeembecenxgxamxxmcesegxcceimmsxrlabnxgxamxxmcesegxcceimraemsoanxgxamxxmacxogxcceicloaxxmonxgxamxxmarmmgxcceicloaxxabnxgxamxxmarmmgxcceimxlbmosanogxamxxmarmmgxcceimexexabbnxgxamxxmarmmgxcceixaoossalnxgxamxxbelxcgxcceimeembescnxgxamxxbelxrgxcceimmrbraransgxamxxbelxrgxcceimrcscrsonxgxamxxbxxeogxcceimmsoxrlcnxgxamxxbxxesgxcceimrbleaxonxgxamxxboaoxgxcceimxeemleonxgxamxxbsaomgxcceimsacexoonxgxamxxbsaobgxcceimxlbmoobnsgxamxxbbomagxcceimxlbmoconcgxamxxbbomagxcceimxlbmomcnxgxamxxbbcxrgxcceiocmlslsrnxgxamxoecaocgxcceimrbasxronxgxamxoerollgxcceimraeelsanxgxamxoercsagxcceimaoolcoonxgxamxooslergxcceimxlbmoscnogxamxoolsllgxcceimraeelaanxgxamxoseerlgxcceimcoaxmxonxgxamxoseerlgxcceimxlbmosonxgxamxoseeasgxcceimeelaclonogxamxoscsbbgae; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash cb6bd57fecc16fd94554757e0c0e24e0
0c0c10aaa16103cfc4161784752d1137502e09f0
c540106e6c4a7bf9e4ffe1c16a426e3754aa0159a3db3e4e3abbb971d02a0521
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 16 Dec 2022 23:46:30 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 14 Dec 2022 03:56:17 GMT
Expires: Wed, 21 Dec 2022 03:56:16 GMT
Etag: "0c0c10aaa16103cfc4161784752d1137502e09f0"
Cache-Control: max-age=359985,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77ab4c7d1bf8b50b-OSL
s3t3d2y8.afcdn.net/library/428515/afaf6b58a8d6050615369f81598d4bd126bd021e.webp
185.76.9.19200 OK 13 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/428515/afaf6b58a8d6050615369f81598d4bd126bd021e.webp
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8da76954e810412b8ec5378d8480ab45
afaf6b58a8d6050615369f81598d4bd126bd021e
4f186cbdc1268f6ab21f0e5bc6dfa6dce0c52fb60dec007a79e2c41d41bc4293
GET /library/428515/afaf6b58a8d6050615369f81598d4bd126bd021e.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.realsrv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: image/webp
content-length: 13180
last-modified: Fri, 31 Dec 2021 10:19:16 GMT
etag: "61ced924-337c"
expires: Fri, 30 Jun 2023 11:26:51 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195238
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ0NLpH/MGbeAA
x-77-nzt-ray: c0a4cc28433f256a56039d6355d8db25
x-cache: HIT
x-age: 14575152
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
8.247.218.249200 OK 2.8 kB URL HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP 8.247.218.249:0
File type ASCII text, with very long lines (2590)
Hash 01c3ce239d639853ba1e41661c115938
704741ca41e890a26eef6190c2d61131ff294f56
9aabcddb7b91826c4b8bf721d77fa448ceba501616a38c6fe0d6c4f11091ed47
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r-eu.tsyndicate.com/
Cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: application/javascript
content-length: 2808
last-modified: Tue, 22 Feb 2022 13:07:15 GMT
server: nginx
x-robots-tag: noindex, nofollow
content-encoding: gzip
vary: Accept-Encoding
etag: W/"6214e003-1eb1"
age: 24500127
accept-ranges: bytes
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
8.247.218.249304 Not Modified 0 B URL HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP 8.247.218.249:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=27427883-91ca-4332-a4b7-33e5fca5f88d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
If-Modified-Since: Tue, 22 Feb 2022 13:07:15 GMT
If-None-Match: W/"6214e003-1eb1"
TE: trailers
HTTP/2 304 Not Modified
date: Fri, 16 Dec 2022 23:46:30 GMT
last-modified: Tue, 22 Feb 2022 13:07:15 GMT
server: nginx
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6214e003-1eb1"
age: 24500127
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
8.247.218.249304 Not Modified 0 B URL HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP 8.247.218.249:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=0c047d9e-298f-4823-b5a3-3501d500854a; bfq=APeIECNCx5YYNmzAsHEjRhcWIsYUPPhQRJmJCBvOkAHjRg4YXfoo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
If-Modified-Since: Tue, 22 Feb 2022 13:07:15 GMT
If-None-Match: W/"6214e003-1eb1"
TE: trailers
HTTP/2 304 Not Modified
date: Fri, 16 Dec 2022 23:46:30 GMT
last-modified: Tue, 22 Feb 2022 13:07:15 GMT
server: nginx
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6214e003-1eb1"
age: 24500127
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/428515/5ceded664676db96d2b3b5382cb17da5e728eefc.webp
185.76.9.19200 OK 12 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/428515/5ceded664676db96d2b3b5382cb17da5e728eefc.webp
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f873befbe3e52bba71c605062b1ff845
5ceded664676db96d2b3b5382cb17da5e728eefc
480a21117ecb1dac929af83d77cf4e57cb2342a2d424c5b798edf6379d472a41
GET /library/428515/5ceded664676db96d2b3b5382cb17da5e728eefc.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.realsrv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: image/webp
content-length: 12098
last-modified: Fri, 31 Dec 2021 10:19:16 GMT
etag: "61ced924-2f42"
expires: Fri, 30 Jun 2023 11:13:27 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195274
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ0+pJ7/DGbeAA
x-77-nzt-ray: c0a4cc28433f256a56039d63c9db6426
x-cache: HIT
x-age: 14575116
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
js.wpshsdk.com/npc/sdk/common/config.js
45.133.44.24200 OK 19 B URL HTTP/2 js.wpshsdk.com/npc/sdk/common/config.js
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash 98de4c9e96a5461d8ee75fbb7fb2c022
31be0d1e25d4eca4155ad36c52b2898e3af8f93f
f395225946a26e0d9ec42c561f8bf033be2d23f015286e5b369306f6961139d6
GET /npc/sdk/common/config.js HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://txxx.tube/
Origin: https://txxx.tube
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 19
server: nginx/1.18.0
last-modified: Thu, 15 Dec 2022 10:15:40 GMT
etag: "639af3cc-13"
expires: Fri, 16 Dec 2022 23:51:30 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 68bc75ff3351e8d9603a418be74965f3
758585c303facd626fbb733adae21a8c6ec222e7
75fd36b9ce92c66fbffdd797ef5b218926a5d37d9ca9f804f11107570ccdcf2b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5172
Cache-Control: max-age=131327
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 23:46:30 GMT
Etag: "639c4d22-117"
Expires: Sun, 18 Dec 2022 12:15:17 GMT
Last-Modified: Fri, 16 Dec 2022 10:49:06 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
js.wpshsdk.com/npc/sdk/common/core.js
45.133.44.24200 OK 35 kB URL HTTP/2 js.wpshsdk.com/npc/sdk/common/core.js
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 001bf6ce4fb64dc236e729ddc90cc393
c095f1e39f16f8b8918a328350f51c6856f5d281
284d70998194fe1f18768548229aaffe21cdefcf0661817a00677fd3c6c10046
GET /npc/sdk/common/core.js HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://txxx.tube/
Origin: https://txxx.tube
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 15 Dec 2022 10:15:40 GMT
etag: W/"639af3cc-18792"
content-encoding: gzip
expires: Fri, 16 Dec 2022 23:51:30 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
159.69.163.6200 OK 20 kB URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP 159.69.163.6:0
ASN #24940 Hetzner Online GmbH
Hash c12835a9e838ce0177565f04410d6126
5bfb852e9de2052e5375b22ba4bf9412b41fb148
beb2be7e462cb5dd0202ce79c7f5cf0def112b4d39dfd85edb3bb156dbb82211
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
twinrdack.com/Redirect.eng?MediaSegmentId=40566&dcid=3_ctx_d1fe9802-674a-4ab4-9ab7-a2127e49a5b6&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=&v=Uin3p9YT25SMCLEKHoy_2myoIbBdcFLX9GN2e8ZGGbq202IZfRT-_55X09dArRNxjYLhGdS_Hs05TJUtEUHgU3F6mSE55t5-6SWcjCgJRo_u7kxpsxrd0PqyySXFSKkFmNBsb_htvwAJrDMlVBAdbD-70hrqXol72JqlMqhN7-2Fh2xHvmkQqG2frnRoDwsUPaeQpbrP1-WeOBEGI9HkpAc5Fh1oPi-B01AJeszJrvSJkvUXiIhFI0ieTjvW4_F6QOW1f4c5GlheovURSe__doCAYnP11AXgcvKPJpeOoMJiaDqI1L52F_amco6nKvOQv2GmnT8WZ4eF9tJTDPN5GK1CchabAK2gjEC-nokfVjxyAVRFG4TCdS50tYDYpn60vGHqPcie3lNLbEZZBn1TK_u7PSkmgU5SZY2DfphYoJcBFCGlYWsQy8mXYn8ieiDX0whpV-8Bh-2dOchS4l21lK62EARi89Za0nC2Er47rlSAZ4ZYYyRl-DjnXLM155GZFG-uXMg7BfN9bA4C01padYCzOqGU7BuyYD4Bn4XoUImu4KL0rGlGi81QNUFWbqY4MqXnLWiK9mnyZR0ndKy_GsVDJoA9dStpZYDvkz1Qrxuj9ppMPqS3VILCuxyRlqYhxGyOKmjxqmhGUMSVLrXyxlZtLfmnVRntM5j3HsYRrqkR-zOMAM9_9PEtN458jqMY-YMK4gGcVwarqMnhx-DWQeXofCYhHP4h6vIcUT3xspG4sqnOUGx0kNycbEBBGtwl7KYv0Ot_JWTmfSK4yqbk68Bf_Yh9nXL7kbBuYD5J6hbK6uhf4du-E4i9vgMIexpxzdkDJLwsgocybGlITS98-X1dBLguNxdqtl05sHuIimLRQm8kGm0HdQZxidKZmV5JDyH-ZipPG_MkpIBrtZYYAg2&kw=Straight%2cBig+Ass%2cBig+Tits%2cCumshot%2cHD%2cHandjob%2cMILF%2cStockings%2cShaved&mw=300&mh=250
172.66.43.134302 Found 502 B URL HTTP/2 twinrdack.com/Redirect.eng?MediaSegmentId=40566&dcid=3_ctx_d1fe9802-674a-4ab4-9ab7-a2127e49a5b6&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=&v=Uin3p9YT25SMCLEKHoy_2myoIbBdcFLX9GN2e8ZGGbq202IZfRT-_55X09dArRNxjYLhGdS_Hs05TJUtEUHgU3F6mSE55t5-6SWcjCgJRo_u7kxpsxrd0PqyySXFSKkFmNBsb_htvwAJrDMlVBAdbD-70hrqXol72JqlMqhN7-2Fh2xHvmkQqG2frnRoDwsUPaeQpbrP1-WeOBEGI9HkpAc5Fh1oPi-B01AJeszJrvSJkvUXiIhFI0ieTjvW4_F6QOW1f4c5GlheovURSe__doCAYnP11AXgcvKPJpeOoMJiaDqI1L52F_amco6nKvOQv2GmnT8WZ4eF9tJTDPN5GK1CchabAK2gjEC-nokfVjxyAVRFG4TCdS50tYDYpn60vGHqPcie3lNLbEZZBn1TK_u7PSkmgU5SZY2DfphYoJcBFCGlYWsQy8mXYn8ieiDX0whpV-8Bh-2dOchS4l21lK62EARi89Za0nC2Er47rlSAZ4ZYYyRl-DjnXLM155GZFG-uXMg7BfN9bA4C01padYCzOqGU7BuyYD4Bn4XoUImu4KL0rGlGi81QNUFWbqY4MqXnLWiK9mnyZR0ndKy_GsVDJoA9dStpZYDvkz1Qrxuj9ppMPqS3VILCuxyRlqYhxGyOKmjxqmhGUMSVLrXyxlZtLfmnVRntM5j3HsYRrqkR-zOMAM9_9PEtN458jqMY-YMK4gGcVwarqMnhx-DWQeXofCYhHP4h6vIcUT3xspG4sqnOUGx0kNycbEBBGtwl7KYv0Ot_JWTmfSK4yqbk68Bf_Yh9nXL7kbBuYD5J6hbK6uhf4du-E4i9vgMIexpxzdkDJLwsgocybGlITS98-X1dBLguNxdqtl05sHuIimLRQm8kGm0HdQZxidKZmV5JDyH-ZipPG_MkpIBrtZYYAg2&kw=Straight%2cBig+Ass%2cBig+Tits%2cCumshot%2cHD%2cHandjob%2cMILF%2cStockings%2cShaved&mw=300&mh=250
IP 172.66.43.134:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (430), with CRLF line terminators
Hash d8206640a0ed9330d928fa56f145992a
a4b1817debb3f751de2f27ed4f42228e01f33121
2d87f001725fb311f5241c3df555769c8dae480f7107c9d1e7e85327a59f5734
GET /Redirect.eng?MediaSegmentId=40566&dcid=3_ctx_d1fe9802-674a-4ab4-9ab7-a2127e49a5b6&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=&v=Uin3p9YT25SMCLEKHoy_2myoIbBdcFLX9GN2e8ZGGbq202IZfRT-_55X09dArRNxjYLhGdS_Hs05TJUtEUHgU3F6mSE55t5-6SWcjCgJRo_u7kxpsxrd0PqyySXFSKkFmNBsb_htvwAJrDMlVBAdbD-70hrqXol72JqlMqhN7-2Fh2xHvmkQqG2frnRoDwsUPaeQpbrP1-WeOBEGI9HkpAc5Fh1oPi-B01AJeszJrvSJkvUXiIhFI0ieTjvW4_F6QOW1f4c5GlheovURSe__doCAYnP11AXgcvKPJpeOoMJiaDqI1L52F_amco6nKvOQv2GmnT8WZ4eF9tJTDPN5GK1CchabAK2gjEC-nokfVjxyAVRFG4TCdS50tYDYpn60vGHqPcie3lNLbEZZBn1TK_u7PSkmgU5SZY2DfphYoJcBFCGlYWsQy8mXYn8ieiDX0whpV-8Bh-2dOchS4l21lK62EARi89Za0nC2Er47rlSAZ4ZYYyRl-DjnXLM155GZFG-uXMg7BfN9bA4C01padYCzOqGU7BuyYD4Bn4XoUImu4KL0rGlGi81QNUFWbqY4MqXnLWiK9mnyZR0ndKy_GsVDJoA9dStpZYDvkz1Qrxuj9ppMPqS3VILCuxyRlqYhxGyOKmjxqmhGUMSVLrXyxlZtLfmnVRntM5j3HsYRrqkR-zOMAM9_9PEtN458jqMY-YMK4gGcVwarqMnhx-DWQeXofCYhHP4h6vIcUT3xspG4sqnOUGx0kNycbEBBGtwl7KYv0Ot_JWTmfSK4yqbk68Bf_Yh9nXL7kbBuYD5J6hbK6uhf4du-E4i9vgMIexpxzdkDJLwsgocybGlITS98-X1dBLguNxdqtl05sHuIimLRQm8kGm0HdQZxidKZmV5JDyH-ZipPG_MkpIBrtZYYAg2&kw=Straight%2cBig+Ass%2cBig+Tits%2cCumshot%2cHD%2cHandjob%2cMILF%2cStockings%2cShaved&mw=300&mh=250 HTTP/1.1
Host: twinrdack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Cookie: IKSR={}; INF_DFL8=false; IUID=baef1a9c-c564-4516-bcfb-286d0b149c47; ISSH=67FD32; VMI=; IPLH=#{}; IPLH_Q=#[]; CHN=#[]; MSSH=#{}; MSRH=#{}; ILP=null; ILPLU=#1/1/0001 12:00:00 AM; ILEALC=#1/1/0001 12:00:00 AM; ILMPF=#False; IPMPLU=#; IPMUID=#; BSWUID=#; IBL=#[]; IPLSH=#{}; IPLSH_Q=#[]; IZH=#{}; IZH_Q=#[]; IMCH=#{}; IMCH_Q=#[]; IMH=#{}; IMH_Q=#[]; ISH=#{"14167":[{"SId":"67FD32","D":"22/12/16T15:46:30"}]}; ISH_Q=#[14167]; ISPH=#{}; ISPH_Q=#[]; ICH=#{}; ICH_Q=#[]
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html; charset=utf-8
content-length: 502
location: https://twinrdack.com/mediahosting.engine?MediaId=71381&AId=11491&CId=29583&PId=52095&SiteId=14167&ZoneId=56733&VolumeMetricId=d278dceb-cd58-467a-a886-5043b63c7a50&PassBackUrl=&res=&dcid=3_ctx_d1fe9802-674a-4ab4-9ab7-a2127e49a5b6&cu=&kw=Straight%2cBig+Ass%2cBig+Tits%2cCumshot%2cHD%2cHandjob%2cMILF%2cStockings%2cShaved&mw=300&mh=250
cache-control: private, no-transform
access-control-allow-origin: *
p3p: CP="CAO PSA OUR IND"
set-cookie: IKSR={}; path=/; SameSite=None; secure
INF_DFL8=false; path=/; SameSite=None; secure
IUID=baef1a9c-c564-4516-bcfb-286d0b149c47; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure
ISSH=67FD32; path=/; SameSite=None; secure
VMI=d278dceb-cd58-467a-a886-5043b63c7a50; path=/; SameSite=None; secure
IPLH=#{"52095":[{"SId":"67FD32","D":"22/12/16T15:46:30"}]}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IPLH_Q=#[52095]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
CHN=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
MSSH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
MSRH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ILP=null; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure
ILPLU=#1/1/0001 12:00:00 AM; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ILEALC=#1/1/0001 12:00:00 AM; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ILMPF=#False; expires=Sat, 17-Dec-2022 03:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IPMPLU=#; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IPMUID=#; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
BSWUID=#; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IKSR={}; path=/; SameSite=None; secure
IBL=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH_Q=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IZH=#{"56733":[{"SId":"67FD32","D":"22/12/16T15:46:30"}]}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IZH_Q=#[56733]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH_Q=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IMH=#{"71381":[{"SId":"67FD32","D":"22/12/16T15:46:30"}]}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IMH_Q=#[71381]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ISH=#{"14167":[{"SId":"67FD32","D":"22/12/16T15:46:30"}]}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ISH_Q=#[14167]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH=#{"14167":[{"SId":"67FD32","D":"22/12/16T15:46:30"}]}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH_Q=#[14167]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ICH=#{"29583":[{"SId":"67FD32","D":"22/12/16T15:46:30"}]}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ICH_Q=#[29583]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2y2OG%2BTgZxAgNpfqvMW2H%2F1VdDASGDpW5fmBTWYKcu%2FLE2FzD7yzBHopepmTBnJNVltMwGDCkENzuls8xXVUkdX2CQ0SxWIpt2JdO9IuFVJXnO%2FSgePgVlKJ9P2mpG0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77ab4c7d2f9eb4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 68bc75ff3351e8d9603a418be74965f3
758585c303facd626fbb733adae21a8c6ec222e7
75fd36b9ce92c66fbffdd797ef5b218926a5d37d9ca9f804f11107570ccdcf2b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5172
Cache-Control: max-age=131327
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 23:46:30 GMT
Etag: "639c4d22-117"
Expires: Sun, 18 Dec 2022 12:15:17 GMT
Last-Modified: Fri, 16 Dec 2022 10:49:06 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 7ba7842064ca0da6c1e18f3a87dfd854
70dc0496328a467de9658c262856a2664139d9f3
613b6a6083a6abc13de88de28b1c05e2cceb1958999632a385b8d6f0bcaf5425
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4083
Cache-Control: max-age=150027
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 23:46:30 GMT
Etag: "639c9a6e-117"
Expires: Sun, 18 Dec 2022 17:26:57 GMT
Last-Modified: Fri, 16 Dec 2022 16:18:54 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash cb6bd57fecc16fd94554757e0c0e24e0
0c0c10aaa16103cfc4161784752d1137502e09f0
c540106e6c4a7bf9e4ffe1c16a426e3754aa0159a3db3e4e3abbb971d02a0521
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 16 Dec 2022 23:46:30 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 14 Dec 2022 03:56:17 GMT
Expires: Wed, 21 Dec 2022 03:56:16 GMT
Etag: "0c0c10aaa16103cfc4161784752d1137502e09f0"
Cache-Control: max-age=359985,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77ab4c7d3c0eb50b-OSL
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 7ba7842064ca0da6c1e18f3a87dfd854
70dc0496328a467de9658c262856a2664139d9f3
613b6a6083a6abc13de88de28b1c05e2cceb1958999632a385b8d6f0bcaf5425
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4529
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 23:46:30 GMT
Last-Modified: Fri, 16 Dec 2022 22:31:01 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
btds.zog.link/in/va?spot_id=31084&view=1
109.206.161.16200 OK 2 B URL HTTP/2 btds.zog.link/in/va?spot_id=31084&view=1
IP 109.206.161.16:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /in/va?spot_id=31084&view=1 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://txxx.tube
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: application/json
content-length: 2
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: 1840.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
btds.zog.link/in/va?spot_id=31085&view=1
109.206.161.16200 OK 2 B URL HTTP/2 btds.zog.link/in/va?spot_id=31085&view=1
IP 109.206.161.16:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /in/va?spot_id=31085&view=1 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://txxx.tube
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: application/json
content-length: 2
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 1840.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
btds.zog.link/in/va?spot_id=31086&view=1
109.206.161.16200 OK 2 B URL HTTP/2 btds.zog.link/in/va?spot_id=31086&view=1
IP 109.206.161.16:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /in/va?spot_id=31086&view=1 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://txxx.tube
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: application/json
content-length: 2
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: 1840.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
go.xxxijmp.com/smartpop/c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&sourceId=226437&memberId=pnPz9YMuXQDLzZXX7mPaoQs1Fwr0b4cuMSEhWkDjJYn5pIWM9JNkHeW8gQUDJOgnm2iYEMyDQEfuDqSXLdskxlngoZ2Hy00vnAlWhcxGn8FKH0I_gUIDRUi&p1=4099653&buttonColor=%23930606&liveBadgeColor=%23ff0707
104.18.51.106302 Found 0 B URL HTTP/2 go.xxxijmp.com/smartpop/c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&sourceId=226437&memberId=pnPz9YMuXQDLzZXX7mPaoQs1Fwr0b4cuMSEhWkDjJYn5pIWM9JNkHeW8gQUDJOgnm2iYEMyDQEfuDqSXLdskxlngoZ2Hy00vnAlWhcxGn8FKH0I_gUIDRUi&p1=4099653&buttonColor=%23930606&liveBadgeColor=%23ff0707
IP 104.18.51.106:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smartpop/c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&sourceId=226437&memberId=pnPz9YMuXQDLzZXX7mPaoQs1Fwr0b4cuMSEhWkDjJYn5pIWM9JNkHeW8gQUDJOgnm2iYEMyDQEfuDqSXLdskxlngoZ2Hy00vnAlWhcxGn8FKH0I_gUIDRUi&p1=4099653&buttonColor=%23930606&liveBadgeColor=%23ff0707 HTTP/1.1
Host: go.xxxijmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 16 Dec 2022 23:46:30 GMT
content-length: 0
location: https://creative.xxxvjmp.com/widgets/v4/Universal?buttonColor=%23930606&campaignId=c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88&campaignType=smartpop&creativeId=f7d35c19e8363f8e59e197e6034e23aaac0f22600b273fb0cad1f12ae1c95358&iterationId=383554&liveBadgeColor=%23ff0707&masterSmartpopId=1605&memberId=pnPz9YMuXQDLzZXX7mPaoQs1Fwr0b4cuMSEhWkDjJYn5pIWM9JNkHeW8gQUDJOgnm2iYEMyDQEfuDqSXLdskxlngoZ2Hy00vnAlWhcxGn8FKH0I_gUIDRUi&p1=4099653&quality=optimal&ruleId=3&smartpopId=1547&sourceId=226437&tag=-girls%2Findian&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=30029
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: DYNAMIC
set-cookie: _var=808613.30029; Path=/; HttpOnly; SameSite=Strict
__cflb=02DiuDfsBaY2bRYJiCeScBLPeXxw9eeb9aD9dmBAHk53i; SameSite=None; Secure; path=/; expires=Sat, 17-Dec-22 22:46:30 GMT; HttpOnly
server: cloudflare
cf-ray: 77ab4c7dee88b4fa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
btds.zog.link/in/va?spot_id=31089&view=1
109.206.161.16200 OK 2 B URL HTTP/2 btds.zog.link/in/va?spot_id=31089&view=1
IP 109.206.161.16:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /in/va?spot_id=31089&view=1 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://txxx.tube
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: application/json
content-length: 2
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: 1840.0=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash cb6bd57fecc16fd94554757e0c0e24e0
0c0c10aaa16103cfc4161784752d1137502e09f0
c540106e6c4a7bf9e4ffe1c16a426e3754aa0159a3db3e4e3abbb971d02a0521
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 16 Dec 2022 23:46:30 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 14 Dec 2022 03:56:17 GMT
Expires: Wed, 21 Dec 2022 03:56:16 GMT
Etag: "0c0c10aaa16103cfc4161784752d1137502e09f0"
Cache-Control: max-age=359985,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77ab4c7d3b44b529-OSL
lcdn.tsyndicate.com/images/c/f/853204beb8aee9d452a44307341e2163327633/main.jpg
8.247.218.249200 OK 15 kB URL HTTP/2 lcdn.tsyndicate.com/images/c/f/853204beb8aee9d452a44307341e2163327633/main.jpg
IP 8.247.218.249:0
File type JPEG image data, baseline, precision 8, 300x250, components 3\012- data
Hash 96604c6bc39c95660be46fc6c87e6b9e
c1a026231c6c419b136b542992d1aa65fb78cbce
e93df503d8ee5d1cf055193fc704ad1473db430b8798884650a394cdeafeafaa
GET /images/c/f/853204beb8aee9d452a44307341e2163327633/main.jpg HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=27427883-91ca-4332-a4b7-33e5fca5f88d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: image/jpeg
content-length: 15418
last-modified: Tue, 19 Jul 2022 11:59:39 GMT
server: nginx
x-robots-tag: noindex, nofollow
content-encoding: gzip
vary: Accept-Encoding
etag: W/"62d69cab-3d72"
age: 13002389
accept-ranges: bytes
X-Firefox-Spdy: h2
video.ktkjmp.com/adsbygoogle.js
104.18.51.106200 OK 4.2 kB URL HTTP/2 video.ktkjmp.com/adsbygoogle.js
IP 104.18.51.106:0
Hash 09a7f31f27985420b77e81c2dc6c3eb3
4082488ce21590dfad251bf70fcecd9d66443960
ede2019b6a0073ac7c9ba053444b2944f881821deeeda31e9941b3499bcfb12a
GET /adsbygoogle.js HTTP/1.1
Host: video.ktkjmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Origin: https://creative.xlivrdr.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: application/javascript
content-length: 16
x-amz-id-2: umnGOMVCjminO+qe5UBV06OrSizh/U59KvaEibge5v1gMRbq/UnThpljPBepeh+5w7wEpQIcu/4=
x-amz-request-id: 3YW9SERF7DC7262X
last-modified: Thu, 10 Mar 2022 13:52:07 GMT
etag: "3d7f7a60216d40dea48e495fef6903c9"
x-amz-meta-s3cmd-attrs: atime:1646920284/ctime:1646920283/gid:20/gname:staff/md5:3d7f7a60216d40dea48e495fef6903c9/mode:33188/mtime:1646920283/uid:501/uname:mikhailchubar
x-amz-version-id: eIgLIBoMMcsEXtxOH6UDjWyfAquRpkIG
access-control-allow-origin: https://creative.xlivrdr.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: HIT
age: 5555
expires: Sat, 17 Dec 2022 03:46:30 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ab4c7f7e601c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WYgSHGBo4YY8a0qDHmBo4WNGjMEIkjjIwaLWLkgDGGhgwcZcbUmGFDxMM5YtKQUahjiwgYIro8DFNnTEYbM8xspFkG5RgzMGm0FNMijA0aMFqImSHjRg0xNWTOiOoTIhk7C2XAuEH3IZw6YijKyHFjKRw4FOuKmANnog6wOXLYsJHj4Zg2gA_PpSFzKRkzFB-KceMmLo6vZG08bOMGI0Oycu2SNh2DcgwcD-vIYbNwRgzbMGrQiC0jIxo6dODM0fHihR0yecywOaNmTB48bsy4qOMmzZg3ctzAkSO0TAwZM1xcb_OCjQs4aOD8gNNjjA43O2nowbNGjP3mY76o0ZODSx0YMMhgAxk92FCWDWd9JEYMZRgoA0ifgVfGDWLI4B-AAs7RA2KKMXZhgDaI0cNNoAn4oYBBEQiDCwDGcKINcAjVQxZ6iBEFElagIcYVOVw2xm904CGEEEM4cYMUR6RxBRY2UGFDHlRMMYQNetBQgxktJIEEEVDEUEcZUlCRQx5wGIGFG03AEEYMT5wxBhZRnFHEG1_YYcYbeBhRxBBTKFGFEUEkYYMdT9jQxBpYxKCHG2KcIYUdcyARhBAttDHFEXAoVoYedsgQxhxfnFFFEkRIUUUaLz7GHlg3UNbffyCuUUYed2BH4ItkyNCDi7AKSEYMG04mE64z9AADrjTsSheuNfTgxBO42tBDkHjgId4bbeB6Qw9puGFHd3TCwdQcZeCKw4a45tDDDG2RgW1GctAhhhxlcBaGGNe20dYYYRi2hW1KibCdUwxVBYNoIoiBmQ4rwlCRCGPA0cYXAy_UMIA4yPCQHHZE9tpDOUlsMYsOx1ZHGhmVZZNJOMzQQg4ghYHSWjJ0RYMYN7SwVhlX8nslDjiQ0VYakYkAswszuWCTCw3R0JYcXxCd0dFJL910W3WEkVETb-iRBhtshPFCDSyCgMIV3bp7xxwgOEEFCDE0vAMIaLvx1dx43A0CxwzlxmIKIByR0xpvvCBX3A47DIIRadB7Jx4vxE02Uo4RLMKzbWH3RUgZYf4QG5YX4US7ZdjxBb20MVQDXS17BODGZ3Smw0s49CXCQabPuxDQD-H-RRtvCD37Zw-TIccbtT30BlG7CXw8Hnks1LzjvgEnHHEvxDtvvW7cm-8Lbc3BMbxv0NEvdi1QlwYdI4VHxhjftWv5QV-8H79F-jJkww3fzaDSTPjrjf74B57_5QYGzTPI6cpAmC_0iyL7658BQWa6MLABIXQgyr92E4MbBOxehrldGczAFDZMxC6gs5hjTAODPiggIA%3D%3D&s=62085b2c2d36b7b0449ed8bd0f9b8a7a627001b0e13bef4b4fb325b6c9fa09e41671234390&w=t&r=1&d=17&priv=false
148.251.19.25200 OK 49 kB URL HTTP/2 pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WYgSHGBo4YY8a0qDHmBo4WNGjMEIkjjIwaLWLkgDGGhgwcZcbUmGFDxMM5YtKQUahjiwgYIro8DFNnTEYbM8xspFkG5RgzMGm0FNMijA0aMFqImSHjRg0xNWTOiOoTIhk7C2XAuEH3IZw6YijKyHFjKRw4FOuKmANnog6wOXLYsJHj4Zg2gA_PpSFzKRkzFB-KceMmLo6vZG08bOMGI0Oycu2SNh2DcgwcD-vIYbNwRgzbMGrQiC0jIxo6dODM0fHihR0yecywOaNmTB48bsy4qOMmzZg3ctzAkSO0TAwZM1xcb_OCjQs4aOD8gNNjjA43O2nowbNGjP3mY76o0ZODSx0YMMhgAxk92FCWDWd9JEYMZRgoA0ifgVfGDWLI4B-AAs7RA2KKMXZhgDaI0cNNoAn4oYBBEQiDCwDGcKINcAjVQxZ6iBEFElagIcYVOVw2xm904CGEEEM4cYMUR6RxBRY2UGFDHlRMMYQNetBQgxktJIEEEVDEUEcZUlCRQx5wGIGFG03AEEYMT5wxBhZRnFHEG1_YYcYbeBhRxBBTKFGFEUEkYYMdT9jQxBpYxKCHG2KcIYUdcyARhBAttDHFEXAoVoYedsgQxhxfnFFFEkRIUUUaLz7GHlg3UNbffyCuUUYed2BH4ItkyNCDi7AKSEYMG04mE64z9AADrjTsSheuNfTgxBO42tBDkHjgId4bbeB6Qw9puGFHd3TCwdQcZeCKw4a45tDDDG2RgW1GctAhhhxlcBaGGNe20dYYYRi2hW1KibCdUwxVBYNoIoiBmQ4rwlCRCGPA0cYXAy_UMIA4yPCQHHZE9tpDOUlsMYsOx1ZHGhmVZZNJOMzQQg4ghYHSWjJ0RYMYN7SwVhlX8nslDjiQ0VYakYkAswszuWCTCw3R0JYcXxCd0dFJL910W3WEkVETb-iRBhtshPFCDSyCgMIV3bp7xxwgOEEFCDE0vAMIaLvx1dx43A0CxwzlxmIKIByR0xpvvCBX3A47DIIRadB7Jx4vxE02Uo4RLMKzbWH3RUgZYf4QG5YX4US7ZdjxBb20MVQDXS17BODGZ3Smw0s49CXCQabPuxDQD-H-RRtvCD37Zw-TIccbtT30BlG7CXw8Hnks1LzjvgEnHHEvxDtvvW7cm-8Lbc3BMbxv0NEvdi1QlwYdI4VHxhjftWv5QV-8H79F-jJkww3fzaDSTPjrjf74B57_5QYGzTPI6cpAmC_0iyL7658BQWa6MLABIXQgyr92E4MbBOxehrldGczAFDZMxC6gs5hjTAODPiggIA%3D%3D&s=62085b2c2d36b7b0449ed8bd0f9b8a7a627001b0e13bef4b4fb325b6c9fa09e41671234390&w=t&r=1&d=17&priv=false
IP 148.251.19.25:0
ASN #24940 Hetzner Online GmbH
Hash 48088235e63efb359967463642eebfe1
0d9069c6c7f1742b46484189a35c3d16fa71ff15
65728af9342221067851bb913bc50e5c469f5d73d9d97276e037fe6cd5b4b6af
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WYgSHGBo4YY8a0qDHmBo4WNGjMEIkjjIwaLWLkgDGGhgwcZcbUmGFDxMM5YtKQUahjiwgYIro8DFNnTEYbM8xspFkG5RgzMGm0FNMijA0aMFqImSHjRg0xNWTOiOoTIhk7C2XAuEH3IZw6YijKyHFjKRw4FOuKmANnog6wOXLYsJHj4Zg2gA_PpSFzKRkzFB-KceMmLo6vZG08bOMGI0Oycu2SNh2DcgwcD-vIYbNwRgzbMGrQiC0jIxo6dODM0fHihR0yecywOaNmTB48bsy4qOMmzZg3ctzAkSO0TAwZM1xcb_OCjQs4aOD8gNNjjA43O2nowbNGjP3mY76o0ZODSx0YMMhgAxk92FCWDWd9JEYMZRgoA0ifgVfGDWLI4B-AAs7RA2KKMXZhgDaI0cNNoAn4oYBBEQiDCwDGcKINcAjVQxZ6iBEFElagIcYVOVw2xm904CGEEEM4cYMUR6RxBRY2UGFDHlRMMYQNetBQgxktJIEEEVDEUEcZUlCRQx5wGIGFG03AEEYMT5wxBhZRnFHEG1_YYcYbeBhRxBBTKFGFEUEkYYMdT9jQxBpYxKCHG2KcIYUdcyARhBAttDHFEXAoVoYedsgQxhxfnFFFEkRIUUUaLz7GHlg3UNbffyCuUUYed2BH4ItkyNCDi7AKSEYMG04mE64z9AADrjTsSheuNfTgxBO42tBDkHjgId4bbeB6Qw9puGFHd3TCwdQcZeCKw4a45tDDDG2RgW1GctAhhhxlcBaGGNe20dYYYRi2hW1KibCdUwxVBYNoIoiBmQ4rwlCRCGPA0cYXAy_UMIA4yPCQHHZE9tpDOUlsMYsOx1ZHGhmVZZNJOMzQQg4ghYHSWjJ0RYMYN7SwVhlX8nslDjiQ0VYakYkAswszuWCTCw3R0JYcXxCd0dFJL910W3WEkVETb-iRBhtshPFCDSyCgMIV3bp7xxwgOEEFCDE0vAMIaLvx1dx43A0CxwzlxmIKIByR0xpvvCBX3A47DIIRadB7Jx4vxE02Uo4RLMKzbWH3RUgZYf4QG5YX4US7ZdjxBb20MVQDXS17BODGZ3Smw0s49CXCQabPuxDQD-H-RRtvCD37Zw-TIccbtT30BlG7CXw8Hnks1LzjvgEnHHEvxDtvvW7cm-8Lbc3BMbxv0NEvdi1QlwYdI4VHxhjftWv5QV-8H79F-jJkww3fzaDSTPjrjf74B57_5QYGzTPI6cpAmC_0iyL7658BQWa6MLABIXQgyr92E4MbBOxehrldGczAFDZMxC6gs5hjTAODPiggIA%3D%3D&s=62085b2c2d36b7b0449ed8bd0f9b8a7a627001b0e13bef4b4fb325b6c9fa09e41671234390&w=t&r=1&d=17&priv=false HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=0c047d9e-298f-4823-b5a3-3501d500854a; bfq=APeIECNCx5YYNmzAsHEjRhcWIsYUPPhQRJmJCBvOkAHjRg4YXfoo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInDIqBGDDI4cY1rAsBHDRgsaYmDgaIGj5IwWMnKYKSNGBkQzMMqUEeFwjpg0ZBTq2CIChoguDse4EToDRg2HYeqMwShDhg0cN2jYqGFDBg4bNGbkuJEDBw2eIn6SwZiGTpk2X2KgNWhnIo0bMXA4hFNHzMIaM2rIgAoHzsIbWweLmANHog4aMRDD2OiwDB46Xxg7fkhGzxs3Zb7MiKHSBtoxbQw_vnHDrF7OZiY6FOPGzcKmM27MoEHDYRs3F3XEmFEVxt7fwSPDGOmwjlwdA-nQgTNHx4sXZ964wMNdTWoXY960eTGnTRg509_AeQFjd1i8NprKYB2DBgwyNMrYKGM2d1cxZJiRA1j4hVHGDWKYEVhkeA0YQw051GAGgPqNYRMZYcQQww91zIFQEmT0QAZpMJhxQ4AxiDEDDoLdMAaEZtgEQwxj6FcDDmQkKAYOYtgwYA40gBSDDGPU52NJNJhhX0s2nEhDhmOEwUUdy1k1xxt1yFEjiD3c1RoNOExZpQ1tvCXGhyEywYQbdyThBBVCYPFEFWFE0QYeUEhxxBlu1AHHEUk8gUYdZZCRwxRYkAEHDm7EkEQdZiSxBBZl2EFEGTngQcMUdBARxA1v5IHDHDBggUYTdjihhBNDwKHEFFagoUUYOTCRhWB1XHHHHEzAcMMZS_wZ0xdE3DEEGzhoQYcUTcixRAxIiFGHWV-cUUUSREhRRRpiTmYDHDF0GZkNk9WAFhniYYSeGHKUUVsYYoCXblJhOLYFRXqRxsKQ-zbkFVIiwKHlRC7gUIZIT6UVmw4wuDBjUnDAJfBUDDv84AwOyWGHag9WNkbECzU842t11JEGRjmUEeRdCtZwA0da1QBZDGaMGEaSNYwRGA5jtIZWGqqJkEMMLuTQMA0yuPDgWRl_ATTKRBvtAtJKy4xWHWFg1MQbeqTBBhthvFCDwyCgcEUabqC7KwhvgkCawzuAcLYbYMWNR90gaCycUw6nAMIRZYyxxhsvyDDjcqTFAIIRabRrxht4vEDa2EYlRbEITjyB1htyfDHG5ZmjxcblRThxbqVftMvGRC63NsNVy2XM50IbYeXQQXZ8we5COLyG-xdtvLGWDl6RdLscb9zm0BtC9RYw8njksZDzZORhmw50yEFoxmUsHN101V1HB3d4uEBHX2W8YAdQZTAveZMwABlDDi-4i-UZaLRAxxstmLfGwW3IQwuu5IYBtkBaXxPgHPa3HrTMQWPqegMd6sW5FtTBDW2BCdHI0LNzXe4gX-DgDdBChzZMpElD2s2KclCRNsjghHiRgQo_EiEWciZ1ZWDMF-oFwxSG5SOVyV0Y2IAQOghlC4HpF8DgtZmDmCEqbJDIXkYXsqQEBwZ9UEBAAA%3D%3D&s=a4fade1ef437a3fd776be377293de5c85f99771dc2666a41bc182551512381c71671234390&w=t&r=1&d=267&priv=false
148.251.19.25200 OK 24 B URL HTTP/2 pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInDIqBGDDI4cY1rAsBHDRgsaYmDgaIGj5IwWMnKYKSNGBkQzMMqUEeFwjpg0ZBTq2CIChoguDse4EToDRg2HYeqMwShDhg0cN2jYqGFDBg4bNGbkuJEDBw2eIn6SwZiGTpk2X2KgNWhnIo0bMXA4hFNHzMIaM2rIgAoHzsIbWweLmANHog4aMRDD2OiwDB46Xxg7fkhGzxs3Zb7MiKHSBtoxbQw_vnHDrF7OZiY6FOPGzcKmM27MoEHDYRs3F3XEmFEVxt7fwSPDGOmwjlwdA-nQgTNHx4sXZ964wMNdTWoXY960eTGnTRg509_AeQFjd1i8NprKYB2DBgwyNMrYKGM2d1cxZJiRA1j4hVHGDWKYEVhkeA0YQw051GAGgPqNYRMZYcQQww91zIFQEmT0QAZpMJhxQ4AxiDEDDoLdMAaEZtgEQwxj6FcDDmQkKAYOYtgwYA40gBSDDGPU52NJNJhhX0s2nEhDhmOEwUUdy1k1xxt1yFEjiD3c1RoNOExZpQ1tvCXGhyEywYQbdyThBBVCYPFEFWFE0QYeUEhxxBlu1AHHEUk8gUYdZZCRwxRYkAEHDm7EkEQdZiSxBBZl2EFEGTngQcMUdBARxA1v5IHDHDBggUYTdjihhBNDwKHEFFagoUUYOTCRhWB1XHHHHEzAcMMZS_wZ0xdE3DEEGzhoQYcUTcixRAxIiFGHWV-cUUUSREhRRRpiTmYDHDF0GZkNk9WAFhniYYSeGHKUUVsYYoCXblJhOLYFRXqRxsKQ-zbkFVIiwKHlRC7gUIZIT6UVmw4wuDBjUnDAJfBUDDv84AwOyWGHag9WNkbECzU842t11JEGRjmUEeRdCtZwA0da1QBZDGaMGEaSNYwRGA5jtIZWGqqJkEMMLuTQMA0yuPDgWRl_ATTKRBvtAtJKy4xWHWFg1MQbeqTBBhthvFCDwyCgcEUabqC7KwhvgkCawzuAcLYbYMWNR90gaCycUw6nAMIRZYyxxhsvyDDjcqTFAIIRabRrxht4vEDa2EYlRbEITjyB1htyfDHG5ZmjxcblRThxbqVftMvGRC63NsNVy2XM50IbYeXQQXZ8we5COLyG-xdtvLGWDl6RdLscb9zm0BtC9RYw8njksZDzZORhmw50yEFoxmUsHN101V1HB3d4uEBHX2W8YAdQZTAveZMwABlDDi-4i-UZaLRAxxstmLfGwW3IQwuu5IYBtkBaXxPgHPa3HrTMQWPqegMd6sW5FtTBDW2BCdHI0LNzXe4gX-DgDdBChzZMpElD2s2KclCRNsjghHiRgQo_EiEWciZ1ZWDMF-oFwxSG5SOVyV0Y2IAQOghlC4HpF8DgtZmDmCEqbJDIXkYXsqQEBwZ9UEBAAA%3D%3D&s=a4fade1ef437a3fd776be377293de5c85f99771dc2666a41bc182551512381c71671234390&w=t&r=1&d=267&priv=false
IP 148.251.19.25:0
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0959ba36d476b6dc1994ba3c678b07c4
d30b94da72daa02766965206a85b7e0356375f5e
897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInDIqBGDDI4cY1rAsBHDRgsaYmDgaIGj5IwWMnKYKSNGBkQzMMqUEeFwjpg0ZBTq2CIChoguDse4EToDRg2HYeqMwShDhg0cN2jYqGFDBg4bNGbkuJEDBw2eIn6SwZiGTpk2X2KgNWhnIo0bMXA4hFNHzMIaM2rIgAoHzsIbWweLmANHog4aMRDD2OiwDB46Xxg7fkhGzxs3Zb7MiKHSBtoxbQw_vnHDrF7OZiY6FOPGzcKmM27MoEHDYRs3F3XEmFEVxt7fwSPDGOmwjlwdA-nQgTNHx4sXZ964wMNdTWoXY960eTGnTRg509_AeQFjd1i8NprKYB2DBgwyNMrYKGM2d1cxZJiRA1j4hVHGDWKYEVhkeA0YQw051GAGgPqNYRMZYcQQww91zIFQEmT0QAZpMJhxQ4AxiDEDDoLdMAaEZtgEQwxj6FcDDmQkKAYOYtgwYA40gBSDDGPU52NJNJhhX0s2nEhDhmOEwUUdy1k1xxt1yFEjiD3c1RoNOExZpQ1tvCXGhyEywYQbdyThBBVCYPFEFWFE0QYeUEhxxBlu1AHHEUk8gUYdZZCRwxRYkAEHDm7EkEQdZiSxBBZl2EFEGTngQcMUdBARxA1v5IHDHDBggUYTdjihhBNDwKHEFFagoUUYOTCRhWB1XHHHHEzAcMMZS_wZ0xdE3DEEGzhoQYcUTcixRAxIiFGHWV-cUUUSREhRRRpiTmYDHDF0GZkNk9WAFhniYYSeGHKUUVsYYoCXblJhOLYFRXqRxsKQ-zbkFVIiwKHlRC7gUIZIT6UVmw4wuDBjUnDAJfBUDDv84AwOyWGHag9WNkbECzU842t11JEGRjmUEeRdCtZwA0da1QBZDGaMGEaSNYwRGA5jtIZWGqqJkEMMLuTQMA0yuPDgWRl_ATTKRBvtAtJKy4xWHWFg1MQbeqTBBhthvFCDwyCgcEUabqC7KwhvgkCawzuAcLYbYMWNR90gaCycUw6nAMIRZYyxxhsvyDDjcqTFAIIRabRrxht4vEDa2EYlRbEITjyB1htyfDHG5ZmjxcblRThxbqVftMvGRC63NsNVy2XM50IbYeXQQXZ8we5COLyG-xdtvLGWDl6RdLscb9zm0BtC9RYw8njksZDzZORhmw50yEFoxmUsHN101V1HB3d4uEBHX2W8YAdQZTAveZMwABlDDi-4i-UZaLRAxxstmLfGwW3IQwuu5IYBtkBaXxPgHPa3HrTMQWPqegMd6sW5FtTBDW2BCdHI0LNzXe4gX-DgDdBChzZMpElD2s2KclCRNsjghHiRgQo_EiEWciZ1ZWDMF-oFwxSG5SOVyV0Y2IAQOghlC4HpF8DgtZmDmCEqbJDIXkYXsqQEBwZ9UEBAAA%3D%3D&s=a4fade1ef437a3fd776be377293de5c85f99771dc2666a41bc182551512381c71671234390&w=t&r=1&d=267&priv=false HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r-eu.tsyndicate.com/
Cookie: ts_uid=0c047d9e-298f-4823-b5a3-3501d500854a; bfq=APeIECNCx5YYNmzAsHEjRhcWIsYUPPhQRJmJCBvOkAHjRg4YXfoo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
sw.wpu.sh/npc/sdk/common/service-worker.js
45.133.44.25200 OK 2.3 kB URL HTTP/2 sw.wpu.sh/npc/sdk/common/service-worker.js
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
Hash 72efc517542f19187ecd2670f734f495
8f6384b20588ee749620515bfa44ac2f3f941b85
2feb9a8a8f0e6df59e37073949ab02569c672ad2a3a360360f6fb3eb7e1cf0c3
GET /npc/sdk/common/service-worker.js HTTP/1.1
Host: sw.wpu.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 15 Dec 2022 10:15:40 GMT
etag: W/"639af3cc-158c"
content-encoding: gzip
expires: Fri, 16 Dec 2022 23:51:30 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
go.xlivrdr.com/config?url=https%3A%2F%2Fcreative.xlivrdr.com%2Fwidgets%2Fv4%2FUniversal%3FcampaignId%3D0344371630277140d4e6e843762bdf964d4ae7bf351771961595fbde6c2ada11%26campaignType%3Dsmartpop%26creativeId%3D37acc769fa476626fe6b90aec4a1f923bc4ff59b110ff874761e96a2a9218620%26iterationId%3D379973%26masterSmartpopId%3D1914%26memberId%3DFoZfots4q3TDkK2a7JeJS_cVxCOa6HjX4WCfbB9s3iP4FIkf4jSlVUmI9au_JwR7nGTWWIJyyQ0e5HQV7YdGWauGUWrq_EhHtcxWzX-MzS8Pu7s_gUIDRUi%26p1%3D4176025%26quality%3Doptimal%26ruleId%3D17%26smartpopId%3D1793%26sourceId%3D477848%26tag%3D-girls%252Findian%26userId%3Dd100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca%26variationId%3D30009
104.18.59.150200 OK 2.0 kB URL HTTP/2 go.xlivrdr.com/config?url=https%3A%2F%2Fcreative.xlivrdr.com%2Fwidgets%2Fv4%2FUniversal%3FcampaignId%3D0344371630277140d4e6e843762bdf964d4ae7bf351771961595fbde6c2ada11%26campaignType%3Dsmartpop%26creativeId%3D37acc769fa476626fe6b90aec4a1f923bc4ff59b110ff874761e96a2a9218620%26iterationId%3D379973%26masterSmartpopId%3D1914%26memberId%3DFoZfots4q3TDkK2a7JeJS_cVxCOa6HjX4WCfbB9s3iP4FIkf4jSlVUmI9au_JwR7nGTWWIJyyQ0e5HQV7YdGWauGUWrq_EhHtcxWzX-MzS8Pu7s_gUIDRUi%26p1%3D4176025%26quality%3Doptimal%26ruleId%3D17%26smartpopId%3D1793%26sourceId%3D477848%26tag%3D-girls%252Findian%26userId%3Dd100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca%26variationId%3D30009
IP 104.18.59.150:0
File type JSON data\012- , ASCII text
Hash 4a25e7a973443060f53929e96e445ec1
fb94afbc38728bb613ba9ad699808f3f88b5aaac
3544db1c898679358a7995e920ba51ccf6fdf29aeecfd61c1c7af8d43673ea00
GET /config?url=https%3A%2F%2Fcreative.xlivrdr.com%2Fwidgets%2Fv4%2FUniversal%3FcampaignId%3D0344371630277140d4e6e843762bdf964d4ae7bf351771961595fbde6c2ada11%26campaignType%3Dsmartpop%26creativeId%3D37acc769fa476626fe6b90aec4a1f923bc4ff59b110ff874761e96a2a9218620%26iterationId%3D379973%26masterSmartpopId%3D1914%26memberId%3DFoZfots4q3TDkK2a7JeJS_cVxCOa6HjX4WCfbB9s3iP4FIkf4jSlVUmI9au_JwR7nGTWWIJyyQ0e5HQV7YdGWauGUWrq_EhHtcxWzX-MzS8Pu7s_gUIDRUi%26p1%3D4176025%26quality%3Doptimal%26ruleId%3D17%26smartpopId%3D1793%26sourceId%3D477848%26tag%3D-girls%252Findian%26userId%3Dd100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca%26variationId%3D30009 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Origin: https://creative.xlivrdr.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: application/json
access-control-allow-origin: *
last-modified: Fri, 16 Dec 2022 23:46:30 GMT
cf-cache-status: MISS
set-cookie: __cflb=02DiuDfsBaY2bRYJiCeSF4mw3pyDiW7pxp4Df8HDGk31N; SameSite=None; Secure; path=/; expires=Sat, 17-Dec-22 22:46:30 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ab4c7f7c9bb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mc.yandex.ru/watch/23578849/1?page-url=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&charset=utf-8&hittoken=1671234389_9dfee67219b5b024e83d7ffe7eefe354f902dd15bc7fe50234c63a1bb50f6099&browser-info=pa%3A1%3Aar%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1038826089270%3Ahid%3A443528817%3Az%3A0%3Ai%3A20221216234626%3Aet%3A1671234387%3Ac%3A1%3Arn%3A506969056%3Arqn%3A2%3Au%3A1671234386467321775%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1905%2C1905%2C1%2C%3Aco%3A0%3Ans%3A1671234384636%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1671234387&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(2)
87.250.250.119200 OK 79 kB URL HTTP/2 mc.yandex.ru/watch/23578849/1?page-url=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&charset=utf-8&hittoken=1671234389_9dfee67219b5b024e83d7ffe7eefe354f902dd15bc7fe50234c63a1bb50f6099&browser-info=pa%3A1%3Aar%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1038826089270%3Ahid%3A443528817%3Az%3A0%3Ai%3A20221216234626%3Aet%3A1671234387%3Ac%3A1%3Arn%3A506969056%3Arqn%3A2%3Au%3A1671234386467321775%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1905%2C1905%2C1%2C%3Aco%3A0%3Ans%3A1671234384636%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1671234387&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(2)
IP 87.250.250.119:0
Hash eabbab476a28549acbcddc92578d78ab
1740fcaca3854a571c1c6c03ef27f4d5570501eb
4478045cb0848180f4986e9cad0b5c2cd424d6723c0e249b7ab6673259175d69
POST /watch/23578849/1?page-url=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&charset=utf-8&hittoken=1671234389_9dfee67219b5b024e83d7ffe7eefe354f902dd15bc7fe50234c63a1bb50f6099&browser-info=pa%3A1%3Aar%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1038826089270%3Ahid%3A443528817%3Az%3A0%3Ai%3A20221216234626%3Aet%3A1671234387%3Ac%3A1%3Arn%3A506969056%3Arqn%3A2%3Au%3A1671234386467321775%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1905%2C1905%2C1%2C%3Aco%3A0%3Ans%3A1671234384636%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1671234387&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 35
Origin: https://txxx.tube
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 16 Dec 2022 23:46:31 GMT
access-control-allow-origin: https://txxx.tube
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 16-Dec-2022 23:46:31 GMT
last-modified: Fri, 16-Dec-2022 23:46:31 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
track.trackingtraffo.com/banner/imp?auth=d7j1u1&price=${AUCTION_PRICE}&c=WAzAbzIaPR6qfcG4FsVCLc2Dgq_wuAlKADYNzqMZ93YpSUkOA2DyjdHRXS0f56MLbewm35FOC3mmhtEwDJ1iUqPIvAtdOCamw2Ng34CFr6X1tuzBTAKjGN0lmVm7GYkCEkWO9f0hf-BqwScSlrnxPzpMTEi0D6m3AwySnBjJ5BuwpgwDgKN2pi5GjyEEpq8HVMXIcZ8Z4P_FWsyIfyxGQm8rrSX2oOuKgFQcM4B4Ppzzo9qBg_4kqZabtk56NOEt7bgDS1X2Kd4ENmTHv3qH2Px0nPfV3jdJEM5dIQLeA_FxxnTHkgbBvQ
88.214.206.175200 OK 70 B URL HTTP/1.1 track.trackingtraffo.com/banner/imp?auth=d7j1u1&price=${AUCTION_PRICE}&c=WAzAbzIaPR6qfcG4FsVCLc2Dgq_wuAlKADYNzqMZ93YpSUkOA2DyjdHRXS0f56MLbewm35FOC3mmhtEwDJ1iUqPIvAtdOCamw2Ng34CFr6X1tuzBTAKjGN0lmVm7GYkCEkWO9f0hf-BqwScSlrnxPzpMTEi0D6m3AwySnBjJ5BuwpgwDgKN2pi5GjyEEpq8HVMXIcZ8Z4P_FWsyIfyxGQm8rrSX2oOuKgFQcM4B4Ppzzo9qBg_4kqZabtk56NOEt7bgDS1X2Kd4ENmTHv3qH2Px0nPfV3jdJEM5dIQLeA_FxxnTHkgbBvQ
IP 88.214.206.175:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash b357a19c87624c7c4d131aeeb4ae677f
c7a9c45fd419815a5ab1998503a9f03514c0e229
497790947d4666760ce38f3c00e852c71fdb66cae849bae8e9ede352719e1581
GET /banner/imp?auth=d7j1u1&price=${AUCTION_PRICE}&c=WAzAbzIaPR6qfcG4FsVCLc2Dgq_wuAlKADYNzqMZ93YpSUkOA2DyjdHRXS0f56MLbewm35FOC3mmhtEwDJ1iUqPIvAtdOCamw2Ng34CFr6X1tuzBTAKjGN0lmVm7GYkCEkWO9f0hf-BqwScSlrnxPzpMTEi0D6m3AwySnBjJ5BuwpgwDgKN2pi5GjyEEpq8HVMXIcZ8Z4P_FWsyIfyxGQm8rrSX2oOuKgFQcM4B4Ppzzo9qBg_4kqZabtk56NOEt7bgDS1X2Kd4ENmTHv3qH2Px0nPfV3jdJEM5dIQLeA_FxxnTHkgbBvQ HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 16 Dec 2022 23:46:31 GMT
Content-Type: image/png
Content-Length: 70
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
img.strpst.com/thumbs/1671233521/73697527
104.18.63.132200 OK 23 kB URL HTTP/2 img.strpst.com/thumbs/1671233521/73697527
IP 104.18.63.132:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 270x360, components 3\012- data
Hash 8f9beb1431f5040e3abf977863765a9c
b11ec2455e9c1a3b5f5f2f7b39a03faccf19aa5f
541d2866d06f8fdd184352aac303d21e72d0d15fb293bdd465f6f7380e991ce2
GET /thumbs/1671233521/73697527 HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:31 GMT
content-type: image/jpeg
content-length: 23203
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: PUT, POST, GET, DELETE, OPTIONS
access-control-allow-origin: *
cf-bgj: imgq:100,h2pri
cf-polished: origSize=24189, status=webp_bigger
etag: "729ace4ee0da6dc1e6b09be9448fe66d"
last-modified: Fri, 16 Dec 2022 23:32:03 GMT
cf-cache-status: HIT
age: 809
expires: Fri, 16 Dec 2022 23:47:31 GMT
cache-control: public, max-age=60
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ab4c8048e6b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 7d63076b0b8ef45121d35dd326b3226a
abea278d02128def0bd08ff6aaa003348ba60e2d
9b4ffa2bc2c010857ae8c61316dd9ac0c6227c2e6f9cb9e62a420b097a3195de
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5139
Cache-Control: max-age=114034
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 23:46:31 GMT
Etag: "639c09b6-117"
Expires: Sun, 18 Dec 2022 07:27:05 GMT
Last-Modified: Fri, 16 Dec 2022 06:01:26 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
rtbrennab.com/get/?go=1&data=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
159.69.163.6200 OK 1.6 kB URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP 159.69.163.6:0
ASN #24940 Hetzner Online GmbH
Hash b173ed03b359ce65b34959691d65bc2a
b434cc0f1b7ae5804875c1b9d560ea12fe5bc01c
1a9c11917625ea2b658d85b662131956ff5d1d4a19b91b1ad71d735f33806da9
GET /get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxNDk2LCJzcGFjZWlkIjozMTA3NCwidHlwZSI6InBvcCIsImlkem9uZSI6NjkzOTM1LCJhZF90YWdzIjoiU3RyYWlnaHQlMkNCaWclMjBBc3MlMkNCaWclMjBUaXRzJTJDQ3Vtc2hvdCUyQ0hEJTJDSGFuZGpvYiUyQ01JTEYlMkNTdG9ja2luZ3MlMkNTaGF2ZWQiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6MzEwNzQsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjgsInN0cmF0YWdlbSI6bnVsbCwiZ3lyIjowLCJhY2NlbCI6MCwic3NwIjozNzU2fSwiYmFubmVyIjp7InciOjMwMCwiaCI6MjUwfX1dLCJzaXRlIjp7ImlkIjoiMzEwNzQiLCJjYXQiOlsiSUFCMjUiXSwicGFnZSI6Imh0dHBzOi8vdHh4eC50dWJlL3ZpZGVvcy8xNjcwOTQxOS9lbm91Z2gtdG8tbWFrZS1teS1zb24tcy1idWxseS1zdG9wLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI5ZTQ5NDdmMzU3NTE0NjU0MTFmZDFhNGY1YzM1OGM3OCJ9LCJleHQiOnsiZHQiOjE2NzEyMzQzODY2ODl9fQ== HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XAsFEQBg0yOVqEEUMmTAsaNHLQEGmGxo0WZMTICIMjRw0cNXKUgSHi4Rwxacgo1LFFo4guD8PUGZMxhseNOFKe1DnjZBgzOETamLGSzBgcMmbkMFOGhgwaYnpCJGOHYtQcOB7CqZOWoYwcN5LCgUPxRl4Rc-BM1EEDRo4cNmrMeDimDV8dMmTYoDHjr0EzC8M-FOPGDUUbNjbeqCiijRuMDGdEhiHXNOoYNGLEiCuiToyMaOjQgTNHx4sXZ964wEM8jRrHLsa8afNiTpswcna_gfNizAwzYbjekIEDRo0bOMrkgBFGJ46RMcrY4A5jDIwyM2w0PEumYQyvYsjaECOmhpjt15UhnktjlIEDDj_UMQdCSZDRQxlk0AAfSjnIAMNMKF1FUwwzNATDDeXVN1MMYyAWlgyzhVZWfmOMMVMYMYgxwwwwHoiXGCpyUQcMF9owxxt1yFFggz1ENlllOvIoWRtltCEGgw7KsEQUeuARxAxrtKCHHXcYMYQdVERBQxBIvPEEG3pY0cSFbSgRhxw12JGEHUIMYcMaR-ghBhNfQHGFHTYIIQQVMLyRhxl4xEHEFE_EcccaWTjBhAxG0PAEHV8UgcNpRlAxwxRXEDFHE2-QcYMUYXxZhAw3PAHHGXjQ0YIUQ9zwRRtjiNHCF298cUYVSRAhRRVpJNkjHDH0UNhhic1grGRi1KHbG24M8QYbb8jRQwlh5TDDRhs9awMbadhRhhAGnVGGtdhqy-11Znz4oVpkLJdRdGLIUUZnIyVnL2NhDLZFh0iJkN9CMLgAA2ly2PHYbA_VUUcaGbXn0Q0gldHCXTiYcRJYVfWXXQsz1LAwGSbDgBMNYaiVxmMi5BCDC-O5YJYLDdGglhxfvJyRzDQnfHPOatXRsg4ikKpHGmywEcYLNSgMAgpXpOFGvXfMAYITVIDglMI7gFC1G5OFjUfZIDTMkHcKpwDCEWWMscYbL1jo1MILg2BEGvqa8QYeLzgVNU-MMYW0E0-ole0XLWaEuFpsGC5CEU7QW4YdX-jLBkXfgRdfd6yJIMcZnkF2018HYZ7vQgc-lPqtpWaGg3yuy_HGQouJ8MZQNMhlOx55LNS76GVghnRuu_X2G7768iuGv8ypNUfD975BR8DZtlCHG2nIWgMNLngVgwz0Sn7QF-KTb1Ebn40WFmXjrU8-Qza4z5VY3t0wvEGZlxHYFwFr3_juFz8RXA6AbEAIHYYyMBoUbCSDEcFBsFMHNkxELpFDGGNQA4M-KCAg&s=f25b4a46c2366375f4d0649cb504f999bb12f04475d3f47707cb0ea4d32208371671234390&w=t&r=1&d=450&priv=false
148.251.19.25200 OK 24 B URL HTTP/2 pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XAsFEQBg0yOVqEEUMmTAsaNHLQEGmGxo0WZMTICIMjRw0cNXKUgSHi4Rwxacgo1LFFo4guD8PUGZMxhseNOFKe1DnjZBgzOETamLGSzBgcMmbkMFOGhgwaYnpCJGOHYtQcOB7CqZOWoYwcN5LCgUPxRl4Rc-BM1EEDRo4cNmrMeDimDV8dMmTYoDHjr0EzC8M-FOPGDUUbNjbeqCiijRuMDGdEhiHXNOoYNGLEiCuiToyMaOjQgTNHx4sXZ964wEM8jRrHLsa8afNiTpswcna_gfNizAwzYbjekIEDRo0bOMrkgBFGJ46RMcrY4A5jDIwyM2w0PEumYQyvYsjaECOmhpjt15UhnktjlIEDDj_UMQdCSZDRQxlk0AAfSjnIAMNMKF1FUwwzNATDDeXVN1MMYyAWlgyzhVZWfmOMMVMYMYgxwwwwHoiXGCpyUQcMF9owxxt1yFFggz1ENlllOvIoWRtltCEGgw7KsEQUeuARxAxrtKCHHXcYMYQdVERBQxBIvPEEG3pY0cSFbSgRhxw12JGEHUIMYcMaR-ghBhNfQHGFHTYIIQQVMLyRhxl4xEHEFE_EcccaWTjBhAxG0PAEHV8UgcNpRlAxwxRXEDFHE2-QcYMUYXxZhAw3PAHHGXjQ0YIUQ9zwRRtjiNHCF298cUYVSRAhRRVpJNkjHDH0UNhhic1grGRi1KHbG24M8QYbb8jRQwlh5TDDRhs9awMbadhRhhAGnVGGtdhqy-11Znz4oVpkLJdRdGLIUUZnIyVnL2NhDLZFh0iJkN9CMLgAA2ly2PHYbA_VUUcaGbXn0Q0gldHCXTiYcRJYVfWXXQsz1LAwGSbDgBMNYaiVxmMi5BCDC-O5YJYLDdGglhxfvJyRzDQnfHPOatXRsg4ikKpHGmywEcYLNSgMAgpXpOFGvXfMAYITVIDglMI7gFC1G5OFjUfZIDTMkHcKpwDCEWWMscYbL1jo1MILg2BEGvqa8QYeLzgVNU-MMYW0E0-ole0XLWaEuFpsGC5CEU7QW4YdX-jLBkXfgRdfd6yJIMcZnkF2018HYZ7vQgc-lPqtpWaGg3yuy_HGQouJ8MZQNMhlOx55LNS76GVghnRuu_X2G7768iuGv8ypNUfD975BR8DZtlCHG2nIWgMNLngVgwz0Sn7QF-KTb1Ebn40WFmXjrU8-Qza4z5VY3t0wvEGZlxHYFwFr3_juFz8RXA6AbEAIHYYyMBoUbCSDEcFBsFMHNkxELpFDGGNQA4M-KCAg&s=f25b4a46c2366375f4d0649cb504f999bb12f04475d3f47707cb0ea4d32208371671234390&w=t&r=1&d=450&priv=false
IP 148.251.19.25:0
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0959ba36d476b6dc1994ba3c678b07c4
d30b94da72daa02766965206a85b7e0356375f5e
897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XAsFEQBg0yOVqEEUMmTAsaNHLQEGmGxo0WZMTICIMjRw0cNXKUgSHi4Rwxacgo1LFFo4guD8PUGZMxhseNOFKe1DnjZBgzOETamLGSzBgcMmbkMFOGhgwaYnpCJGOHYtQcOB7CqZOWoYwcN5LCgUPxRl4Rc-BM1EEDRo4cNmrMeDimDV8dMmTYoDHjr0EzC8M-FOPGDUUbNjbeqCiijRuMDGdEhiHXNOoYNGLEiCuiToyMaOjQgTNHx4sXZ964wEM8jRrHLsa8afNiTpswcna_gfNizAwzYbjekIEDRo0bOMrkgBFGJ46RMcrY4A5jDIwyM2w0PEumYQyvYsjaECOmhpjt15UhnktjlIEDDj_UMQdCSZDRQxlk0AAfSjnIAMNMKF1FUwwzNATDDeXVN1MMYyAWlgyzhVZWfmOMMVMYMYgxwwwwHoiXGCpyUQcMF9owxxt1yFFggz1ENlllOvIoWRtltCEGgw7KsEQUeuARxAxrtKCHHXcYMYQdVERBQxBIvPEEG3pY0cSFbSgRhxw12JGEHUIMYcMaR-ghBhNfQHGFHTYIIQQVMLyRhxl4xEHEFE_EcccaWTjBhAxG0PAEHV8UgcNpRlAxwxRXEDFHE2-QcYMUYXxZhAw3PAHHGXjQ0YIUQ9zwRRtjiNHCF298cUYVSRAhRRVpJNkjHDH0UNhhic1grGRi1KHbG24M8QYbb8jRQwlh5TDDRhs9awMbadhRhhAGnVGGtdhqy-11Znz4oVpkLJdRdGLIUUZnIyVnL2NhDLZFh0iJkN9CMLgAA2ly2PHYbA_VUUcaGbXn0Q0gldHCXTiYcRJYVfWXXQsz1LAwGSbDgBMNYaiVxmMi5BCDC-O5YJYLDdGglhxfvJyRzDQnfHPOatXRsg4ikKpHGmywEcYLNSgMAgpXpOFGvXfMAYITVIDglMI7gFC1G5OFjUfZIDTMkHcKpwDCEWWMscYbL1jo1MILg2BEGvqa8QYeLzgVNU-MMYW0E0-ole0XLWaEuFpsGC5CEU7QW4YdX-jLBkXfgRdfd6yJIMcZnkF2018HYZ7vQgc-lPqtpWaGg3yuy_HGQouJ8MZQNMhlOx55LNS76GVghnRuu_X2G7768iuGv8ypNUfD975BR8DZtlCHG2nIWgMNLngVgwz0Sn7QF-KTb1Ebn40WFmXjrU8-Qza4z5VY3t0wvEGZlxHYFwFr3_juFz8RXA6AbEAIHYYyMBoUbCSDEcFBsFMHNkxELpFDGGNQA4M-KCAg&s=f25b4a46c2366375f4d0649cb504f999bb12f04475d3f47707cb0ea4d32208371671234390&w=t&r=1&d=450&priv=false HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=0c047d9e-298f-4823-b5a3-3501d500854a; bfq=APeIECNCx5YYNmzAsHEjRhcWIsYUPPhQRJmJCBvOkAHjRg4YXfoo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Dec 2022 23:46:31 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 348543f4ed2ef772d97c947373de4091
7eb2567abfe483fed95551d0f5e857316bd48c25
7fcbd57ba92e32995b1182f743ce2f499b5c67e8980fa967c89028dbfabe3a13
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7FCBD57BA92E32995B1182F743CE2F499B5C67E8980FA967C89028DBFABE3A13"
Last-Modified: Thu, 15 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7029
Expires: Sat, 17 Dec 2022 01:43:40 GMT
Date: Fri, 16 Dec 2022 23:46:31 GMT
Connection: keep-alive
m3.twinredads.com/b40e2bb1-65eb-49e2-ae52-bd49a77e9503
69.16.175.42200 OK 216 kB URL HTTP/2 m3.twinredads.com/b40e2bb1-65eb-49e2-ae52-bd49a77e9503
IP 69.16.175.42:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 25x25, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 6D Mark II, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Adobe Photoshop 22.4 (Macintosh), datetime=2021:07:07 10:50:39], baseline, precision 8, 1000x563, components 3\012- data
Size 216 kB (216354 bytes)
Hash 030cab8e0063423d19509889d6acfa2e
e8c85f77b689825ce8b9772fde6c7878a865d93f
d0f9f37cdc3cb742f6ed46e31d3363fe3f6cac190f92522a9610055dc3c48858
GET /b40e2bb1-65eb-49e2-ae52-bd49a77e9503 HTTP/1.1
Host: m3.twinredads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://twinrdack.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:31 GMT
etag: "1640095666"
cache-control: max-age=23
content-length: 216354
content-type: image/jpeg
last-modified: Tue, 21 Dec 2021 14:07:46 GMT
accept-ranges: bytes
x-hw: 1671234391.dop066.sk1.t,1671234391.cds257.sk1.hn,1671234391.cds233.sk1.c
X-Firefox-Spdy: h2
m3.twinredads.com/3b824956-709a-4d74-bf49-c93a25c4ac5f
69.16.175.42200 OK 227 kB URL HTTP/2 m3.twinredads.com/3b824956-709a-4d74-bf49-c93a25c4ac5f
IP 69.16.175.42:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 35x35, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 6D Mark II, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Adobe Photoshop 22.4 (Macintosh), datetime=2021:07:07 11:02:40], baseline, precision 8, 1400x788, components 3\012- data
Size 227 kB (226952 bytes)
Hash 9b1f2db179694583bc499d289cfd4370
3334a37fbe6aa001bfa0c245def935dfc3cf82c0
20c7b2cf8a62976d95d5fa6b79a46075f055121307a09cfe6efb0b9fee252ffb
GET /3b824956-709a-4d74-bf49-c93a25c4ac5f HTTP/1.1
Host: m3.twinredads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://twinrdack.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:31 GMT
etag: "1640095666"
cache-control: max-age=826
content-length: 226952
content-type: image/jpeg
last-modified: Tue, 21 Dec 2021 14:07:46 GMT
accept-ranges: bytes
x-sp-metadata: HS256.COei9JwGEocBCiQyMzE0ZTA4ZC05NjFiLTQ4ZDktYjVhOC01NWRkNGI0OGVjZjEQyIK+vKn/+gIaBgjXhvScBiIMOTEuOTAuNDIuMTU0KJWXAzADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GiwIARIkNTdkMTJjYWItYWMyMC00ZWMzLWE1ZTEtZTExZWQzY2I3ZGJlGIjtDSIYCAISFGNkczIyMy5zazEuaHdjZG4ubmV0.cPTHhqLGVnMPAQ4JTm2HOrOVdNb4f0N2bdy+K3KVlBA=
x-hw: 1671234391.dop066.sk1.t,1671234391.cds257.sk1.hn,1671234391.cds223.sk1.c
X-Firefox-Spdy: h2
62b00ced28.39373b8701.com/in/multy
168.119.25.22200 OK 19 kB URL HTTP/2 62b00ced28.39373b8701.com/in/multy
IP 168.119.25.22:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (18580), with no line terminators
Hash 1baf638066a1c6a13f9bf0e1b2e0fd37
def2352074b36971d66d777d39ee023f8dee1997
97944a5df2026d0361133f488e0b8b51f36bd6b3a6dc512735aaa64aeec61d88
Analyzer Verdict Alert quad9 Sinkholed
POST /in/multy HTTP/1.1
Host: 62b00ced28.39373b8701.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1129
Origin: https://txxx.tube
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:31 GMT
content-type: application/json
content-length: 18587
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp
168.119.25.18200 OK 1.8 kB URL HTTP/2 static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp
IP 168.119.25.18:0
ASN #24940 Hetzner Online GmbH
Hash e365215475577304574c9a6b3c3acec2
1be0bc7f15419a8124e14b253817146f96437791
c3ca638fef9acfe778496415be15e02b13f16059b6d0773c74cf190dbc5fad1a
GET /creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:31 GMT
content-type: image/webp
content-length: 590
last-modified: Tue, 24 Nov 2020 14:24:12 GMT
etag: "5fbd178c-24e"
cache-control: public, max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
62b00ced28.39373b8701.com/in/show/?mid=1377730700462791274&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1406986554&sid=2836966628&cid=13433&price=0.0031&is_cpm=0&cpm=0&ecpm=0.10088612520775625&crid=&crtid=8fc5a3949d58ed66158a5da3a7b48b19&tcid=0&out_id=1&ver=8.10.0&ver_c=&refdom=txxx.tube&hostname=auc-inpage-hz-4-c&site_id=31360&spot_id=360&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2022-12-16&is_native=2&auction_queue=0&burl=TvY9xTqKWvpGCgAIFu-91Zm9WTffo_1aJMthE8nT5GlXfXKsMu_V5Q&pop_winurl=&ip=91.90.42.154&testab=0&px_id=53360&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.01820323907368421&placement_type_id=&skin_test=0&verify_hash=9bd4bf9d50a9edaf3d74f64ad29d5b29&score=75.13615237431037&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1406986554%26spot_id%3D360%26is_adult%3D1%26p%3Dhttps%253A%252F%252Ftxxx.tube%252F%26idzone%3D4438146%26sid%3D1886&ml=&tag_ab=b&original_bid=0.0031&user_fp=0&v2_track=0&url=Ip0m-qsPPb7ZETOkRvYyjVc2dc5nhb5q0yxmEZfZzFxN_oOmLsby687j_oy9wOnQcedPHSPGVJq-4GLw6T-WiSngAALVxoDI5mJKnKDo8Jj770-Qna7lojOrRxV2-pn8-_VnrwxRd5ONvk95ceIx3psfh4fCRCdweAOk0q-TAFyw-iPDHA&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp&skin_id=4&vertical_id=0&real_bid=0.00258664&pr=&user_keywords=&auc_type=1&aid=3335&ext_cid=0&device_theme=light&keywords=Adult&label_ids=0,4,83,89&conditions=dch_ip,tz_offset,all&mlf=1&cpa=aa358b66-0276-41a6-a545-d76fc5136465&mlc=1&format=social-scale-b_r-body
168.119.25.22302 Found 0 B URL HTTP/2 62b00ced28.39373b8701.com/in/show/?mid=1377730700462791274&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1406986554&sid=2836966628&cid=13433&price=0.0031&is_cpm=0&cpm=0&ecpm=0.10088612520775625&crid=&crtid=8fc5a3949d58ed66158a5da3a7b48b19&tcid=0&out_id=1&ver=8.10.0&ver_c=&refdom=txxx.tube&hostname=auc-inpage-hz-4-c&site_id=31360&spot_id=360&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2022-12-16&is_native=2&auction_queue=0&burl=TvY9xTqKWvpGCgAIFu-91Zm9WTffo_1aJMthE8nT5GlXfXKsMu_V5Q&pop_winurl=&ip=91.90.42.154&testab=0&px_id=53360&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.01820323907368421&placement_type_id=&skin_test=0&verify_hash=9bd4bf9d50a9edaf3d74f64ad29d5b29&score=75.13615237431037&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1406986554%26spot_id%3D360%26is_adult%3D1%26p%3Dhttps%253A%252F%252Ftxxx.tube%252F%26idzone%3D4438146%26sid%3D1886&ml=&tag_ab=b&original_bid=0.0031&user_fp=0&v2_track=0&url=Ip0m-qsPPb7ZETOkRvYyjVc2dc5nhb5q0yxmEZfZzFxN_oOmLsby687j_oy9wOnQcedPHSPGVJq-4GLw6T-WiSngAALVxoDI5mJKnKDo8Jj770-Qna7lojOrRxV2-pn8-_VnrwxRd5ONvk95ceIx3psfh4fCRCdweAOk0q-TAFyw-iPDHA&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp&skin_id=4&vertical_id=0&real_bid=0.00258664&pr=&user_keywords=&auc_type=1&aid=3335&ext_cid=0&device_theme=light&keywords=Adult&label_ids=0,4,83,89&conditions=dch_ip,tz_offset,all&mlf=1&cpa=aa358b66-0276-41a6-a545-d76fc5136465&mlc=1&format=social-scale-b_r-body
IP 168.119.25.22:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /in/show/?mid=1377730700462791274&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1406986554&sid=2836966628&cid=13433&price=0.0031&is_cpm=0&cpm=0&ecpm=0.10088612520775625&crid=&crtid=8fc5a3949d58ed66158a5da3a7b48b19&tcid=0&out_id=1&ver=8.10.0&ver_c=&refdom=txxx.tube&hostname=auc-inpage-hz-4-c&site_id=31360&spot_id=360&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2022-12-16&is_native=2&auction_queue=0&burl=TvY9xTqKWvpGCgAIFu-91Zm9WTffo_1aJMthE8nT5GlXfXKsMu_V5Q&pop_winurl=&ip=91.90.42.154&testab=0&px_id=53360&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.01820323907368421&placement_type_id=&skin_test=0&verify_hash=9bd4bf9d50a9edaf3d74f64ad29d5b29&score=75.13615237431037&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1406986554%26spot_id%3D360%26is_adult%3D1%26p%3Dhttps%253A%252F%252Ftxxx.tube%252F%26idzone%3D4438146%26sid%3D1886&ml=&tag_ab=b&original_bid=0.0031&user_fp=0&v2_track=0&url=Ip0m-qsPPb7ZETOkRvYyjVc2dc5nhb5q0yxmEZfZzFxN_oOmLsby687j_oy9wOnQcedPHSPGVJq-4GLw6T-WiSngAALVxoDI5mJKnKDo8Jj770-Qna7lojOrRxV2-pn8-_VnrwxRd5ONvk95ceIx3psfh4fCRCdweAOk0q-TAFyw-iPDHA&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp&skin_id=4&vertical_id=0&real_bid=0.00258664&pr=&user_keywords=&auc_type=1&aid=3335&ext_cid=0&device_theme=light&keywords=Adult&label_ids=0,4,83,89&conditions=dch_ip,tz_offset,all&mlf=1&cpa=aa358b66-0276-41a6-a545-d76fc5136465&mlc=1&format=social-scale-b_r-body HTTP/1.1
Host: 62b00ced28.39373b8701.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:31 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp
X-Firefox-Spdy: h2
62b00ced28.39373b8701.com/in/show/?mid=1377730700462791274&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1406986554&sid=2836966628&cid=2703&price=0.014&is_cpm=0&cpm=0&ecpm=0.14552026229088075&crid=49675&crtid=f4bc8cd691515e1eeae62c073e5070e3&tcid=0&out_id=0&ver=8.10.0&ver_c=&refdom=txxx.tube&hostname=auc-inpage-hz-4-c&site_id=31360&spot_id=360&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1671291990&created_at=2022-12-16&is_native=1&auction_queue=0&burl=MIbDUODH0t1ssyYoE1fCVOn2YOTcaBJhHJCv0wKPrXapZTAGFv35jw&pop_winurl=&ip=91.90.42.154&testab=0&px_id=73360&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=hq&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.005251346741865911&placement_type_id=&skin_test=0&verify_hash=a9e331767bb8188c3eaa3f5b62e67005&score=75.13615237431037&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1406986554%26spot_id%3D360%26is_adult%3D1%26p%3Dhttps%253A%252F%252Ftxxx.tube%252F%26idzone%3D4438146%26sid%3D1886&ml=&tag_ab=b&original_bid=0.014&user_fp=0&v2_track=0&url=kqxBImJGvNkx926UacXG0uj7eRlUeKx4SfF-zM2ZsH-P8Qgd8w4vxf804B7MzWeM1BZtFb5AGYB8Yo6XG7xMVJ5xVIwCBGn7mOcps4gxR5BvBHTuo6Os0gJqFYjqhgH5HByLFSXC5izRk-523efinulKaSJu4lVBhy2oJAFJk98EX82bYqtQfK_1nvphEg6UBSD__87MC267mTQCe8cB-AZujPlZFNNe1nNwLbbMGzpMBlM9AWVdiKZgXlfSshlSBMz1mLfpOGQ0ANHgoa1yTuVglnP6or8AUd3wVwWX2V0JbJPDLls0ZQh74mrecw5eFuDN6el93HX3aH6H4m-DHd0gLBcuBDql1AFDJEB2G22_szDGOXDaHF7X8DSU9Tulzb2PX0gOoNLIDDWQMW9Lm_SaVkhpfN3glNgnS4cTrv_mJ_YbhXf5W3OyM4-lXAkGXiJnpw2fJo9LqdcZ8R_moWDzi8Py_fxDL9SeIJtyRgCvFQnfG6zE7OMZRGFOgOmxyC7HU09a5WtiqEdfaVY3DFidSBPO2XEjhFQzT4gbpggiKtHfXRYX7Q1UVqS1zl1b1EXWtfBF76EGxloNOZ9r4eHDM5KosIl2N-xoAko5kBYP02IorViUoP9WQRSu4JEsDJ6_8__wWa3h8aEV8NwxU3LaXpqWRc4tI_W2gsv9&image_url=https%3A%2F%2Fimgdelnw.com%2Fie%3Fv%3D4%26c%3DDVBTX9_dAZf9qNCjh5YZ_e2arM5LtPu92F22_eWk6wxX71C1c1dfUPDKS3x3NK6Ac37I5kUX_koXcUUUgA_bjuIR2JftIEv03rwoIgaZ4_xb27fLmd5w-d8zQvFo5aS3ZS64v8TEbT_h23KRdgx6J81TyBvZmfJdyp3mFN1Dm2pYyvR4YQPKjGFRpHcEq92n0dEo_zzDBVjTCTv-V5bkuUFWGtXtb9muS0n7zRcs9TEYeEdplv1P634oPX4eZ61AAoxtc5EhLs8_52R8OFtAPAyQWSndeyM-BP2IUO2-6wdFtNVkZ3hpkOAYIhS9U45vshIptN4MgY_FA_Ff1VwUARYeXfJpyImrfGTgw9gIc5aS0nDzCicZT2ZXC4FK-cvsteOpCH8xiv1MFEkssHDyfFg_aiMdnYfRRCjGUV9xIQ%3D%3D&skin_id=4&vertical_id=5&real_bid=0.012933199999999999&pr=&user_keywords=&auc_type=1&aid=291&ext_cid=0&device_theme=light&keywords=Adult&label_ids=4,90,5&conditions=dch_ip,tz_offset,all&cpa=306e0680-36db-400a-b5eb-f24e3f8f360f&format=social-scale-b_r-body
168.119.25.22200 OK 0 B URL HTTP/2 62b00ced28.39373b8701.com/in/show/?mid=1377730700462791274&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1406986554&sid=2836966628&cid=2703&price=0.014&is_cpm=0&cpm=0&ecpm=0.14552026229088075&crid=49675&crtid=f4bc8cd691515e1eeae62c073e5070e3&tcid=0&out_id=0&ver=8.10.0&ver_c=&refdom=txxx.tube&hostname=auc-inpage-hz-4-c&site_id=31360&spot_id=360&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1671291990&created_at=2022-12-16&is_native=1&auction_queue=0&burl=MIbDUODH0t1ssyYoE1fCVOn2YOTcaBJhHJCv0wKPrXapZTAGFv35jw&pop_winurl=&ip=91.90.42.154&testab=0&px_id=73360&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=hq&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.005251346741865911&placement_type_id=&skin_test=0&verify_hash=a9e331767bb8188c3eaa3f5b62e67005&score=75.13615237431037&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1406986554%26spot_id%3D360%26is_adult%3D1%26p%3Dhttps%253A%252F%252Ftxxx.tube%252F%26idzone%3D4438146%26sid%3D1886&ml=&tag_ab=b&original_bid=0.014&user_fp=0&v2_track=0&url=kqxBImJGvNkx926UacXG0uj7eRlUeKx4SfF-zM2ZsH-P8Qgd8w4vxf804B7MzWeM1BZtFb5AGYB8Yo6XG7xMVJ5xVIwCBGn7mOcps4gxR5BvBHTuo6Os0gJqFYjqhgH5HByLFSXC5izRk-523efinulKaSJu4lVBhy2oJAFJk98EX82bYqtQfK_1nvphEg6UBSD__87MC267mTQCe8cB-AZujPlZFNNe1nNwLbbMGzpMBlM9AWVdiKZgXlfSshlSBMz1mLfpOGQ0ANHgoa1yTuVglnP6or8AUd3wVwWX2V0JbJPDLls0ZQh74mrecw5eFuDN6el93HX3aH6H4m-DHd0gLBcuBDql1AFDJEB2G22_szDGOXDaHF7X8DSU9Tulzb2PX0gOoNLIDDWQMW9Lm_SaVkhpfN3glNgnS4cTrv_mJ_YbhXf5W3OyM4-lXAkGXiJnpw2fJo9LqdcZ8R_moWDzi8Py_fxDL9SeIJtyRgCvFQnfG6zE7OMZRGFOgOmxyC7HU09a5WtiqEdfaVY3DFidSBPO2XEjhFQzT4gbpggiKtHfXRYX7Q1UVqS1zl1b1EXWtfBF76EGxloNOZ9r4eHDM5KosIl2N-xoAko5kBYP02IorViUoP9WQRSu4JEsDJ6_8__wWa3h8aEV8NwxU3LaXpqWRc4tI_W2gsv9&image_url=https%3A%2F%2Fimgdelnw.com%2Fie%3Fv%3D4%26c%3DDVBTX9_dAZf9qNCjh5YZ_e2arM5LtPu92F22_eWk6wxX71C1c1dfUPDKS3x3NK6Ac37I5kUX_koXcUUUgA_bjuIR2JftIEv03rwoIgaZ4_xb27fLmd5w-d8zQvFo5aS3ZS64v8TEbT_h23KRdgx6J81TyBvZmfJdyp3mFN1Dm2pYyvR4YQPKjGFRpHcEq92n0dEo_zzDBVjTCTv-V5bkuUFWGtXtb9muS0n7zRcs9TEYeEdplv1P634oPX4eZ61AAoxtc5EhLs8_52R8OFtAPAyQWSndeyM-BP2IUO2-6wdFtNVkZ3hpkOAYIhS9U45vshIptN4MgY_FA_Ff1VwUARYeXfJpyImrfGTgw9gIc5aS0nDzCicZT2ZXC4FK-cvsteOpCH8xiv1MFEkssHDyfFg_aiMdnYfRRCjGUV9xIQ%3D%3D&skin_id=4&vertical_id=5&real_bid=0.012933199999999999&pr=&user_keywords=&auc_type=1&aid=291&ext_cid=0&device_theme=light&keywords=Adult&label_ids=4,90,5&conditions=dch_ip,tz_offset,all&cpa=306e0680-36db-400a-b5eb-f24e3f8f360f&format=social-scale-b_r-body
IP 168.119.25.22:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /in/show/?mid=1377730700462791274&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1406986554&sid=2836966628&cid=2703&price=0.014&is_cpm=0&cpm=0&ecpm=0.14552026229088075&crid=49675&crtid=f4bc8cd691515e1eeae62c073e5070e3&tcid=0&out_id=0&ver=8.10.0&ver_c=&refdom=txxx.tube&hostname=auc-inpage-hz-4-c&site_id=31360&spot_id=360&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1671291990&created_at=2022-12-16&is_native=1&auction_queue=0&burl=MIbDUODH0t1ssyYoE1fCVOn2YOTcaBJhHJCv0wKPrXapZTAGFv35jw&pop_winurl=&ip=91.90.42.154&testab=0&px_id=73360&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=hq&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.005251346741865911&placement_type_id=&skin_test=0&verify_hash=a9e331767bb8188c3eaa3f5b62e67005&score=75.13615237431037&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1406986554%26spot_id%3D360%26is_adult%3D1%26p%3Dhttps%253A%252F%252Ftxxx.tube%252F%26idzone%3D4438146%26sid%3D1886&ml=&tag_ab=b&original_bid=0.014&user_fp=0&v2_track=0&url=kqxBImJGvNkx926UacXG0uj7eRlUeKx4SfF-zM2ZsH-P8Qgd8w4vxf804B7MzWeM1BZtFb5AGYB8Yo6XG7xMVJ5xVIwCBGn7mOcps4gxR5BvBHTuo6Os0gJqFYjqhgH5HByLFSXC5izRk-523efinulKaSJu4lVBhy2oJAFJk98EX82bYqtQfK_1nvphEg6UBSD__87MC267mTQCe8cB-AZujPlZFNNe1nNwLbbMGzpMBlM9AWVdiKZgXlfSshlSBMz1mLfpOGQ0ANHgoa1yTuVglnP6or8AUd3wVwWX2V0JbJPDLls0ZQh74mrecw5eFuDN6el93HX3aH6H4m-DHd0gLBcuBDql1AFDJEB2G22_szDGOXDaHF7X8DSU9Tulzb2PX0gOoNLIDDWQMW9Lm_SaVkhpfN3glNgnS4cTrv_mJ_YbhXf5W3OyM4-lXAkGXiJnpw2fJo9LqdcZ8R_moWDzi8Py_fxDL9SeIJtyRgCvFQnfG6zE7OMZRGFOgOmxyC7HU09a5WtiqEdfaVY3DFidSBPO2XEjhFQzT4gbpggiKtHfXRYX7Q1UVqS1zl1b1EXWtfBF76EGxloNOZ9r4eHDM5KosIl2N-xoAko5kBYP02IorViUoP9WQRSu4JEsDJ6_8__wWa3h8aEV8NwxU3LaXpqWRc4tI_W2gsv9&image_url=https%3A%2F%2Fimgdelnw.com%2Fie%3Fv%3D4%26c%3DDVBTX9_dAZf9qNCjh5YZ_e2arM5LtPu92F22_eWk6wxX71C1c1dfUPDKS3x3NK6Ac37I5kUX_koXcUUUgA_bjuIR2JftIEv03rwoIgaZ4_xb27fLmd5w-d8zQvFo5aS3ZS64v8TEbT_h23KRdgx6J81TyBvZmfJdyp3mFN1Dm2pYyvR4YQPKjGFRpHcEq92n0dEo_zzDBVjTCTv-V5bkuUFWGtXtb9muS0n7zRcs9TEYeEdplv1P634oPX4eZ61AAoxtc5EhLs8_52R8OFtAPAyQWSndeyM-BP2IUO2-6wdFtNVkZ3hpkOAYIhS9U45vshIptN4MgY_FA_Ff1VwUARYeXfJpyImrfGTgw9gIc5aS0nDzCicZT2ZXC4FK-cvsteOpCH8xiv1MFEkssHDyfFg_aiMdnYfRRCjGUV9xIQ%3D%3D&skin_id=4&vertical_id=5&real_bid=0.012933199999999999&pr=&user_keywords=&auc_type=1&aid=291&ext_cid=0&device_theme=light&keywords=Adult&label_ids=4,90,5&conditions=dch_ip,tz_offset,all&cpa=306e0680-36db-400a-b5eb-f24e3f8f360f&format=social-scale-b_r-body HTTP/1.1
Host: 62b00ced28.39373b8701.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:31 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 56202bb66243d35cf602908327e52c93
3e523a6b44f210e0215a89d73d74dd27482ef2d7
50e7596b690e82310f30999003ad7f0650a3049405e6c8a7b8fecc531287ba43
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50E7596B690E82310F30999003AD7F0650A3049405E6C8A7B8FECC531287BA43"
Last-Modified: Thu, 15 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10864
Expires: Sat, 17 Dec 2022 02:47:35 GMT
Date: Fri, 16 Dec 2022 23:46:31 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 0ac21c491db081d8216808c625f916ae
8b4a2403a96560cb9584839534cae1597e88cc7a
c4214564107934c69c42030638fb1d6923eea1d092190f417a689cb97fa6e583
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C4214564107934C69C42030638FB1D6923EEA1D092190F417A689CB97FA6E583"
Last-Modified: Thu, 15 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7693
Expires: Sat, 17 Dec 2022 01:54:44 GMT
Date: Fri, 16 Dec 2022 23:46:31 GMT
Connection: keep-alive
data.goasrv.com/data/creatives/1164/35702.mp4
217.22.19.195206 Partial Content 33 kB URL HTTP/2 data.goasrv.com/data/creatives/1164/35702.mp4
IP 217.22.19.195:0
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 754db880c36cf56da9e77b8126c20b45
30bb9a14da70bc1579548fe612f62868a64e6b27
734e29c6bf5ad07fd3e6bce9ff5b741278b45776bba56a0789030497c4374d05
GET /data/creatives/1164/35702.mp4 HTTP/1.1
Host: data.goasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://go.goaserv.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 206 Partial Content
server: nginx
date: Fri, 16 Dec 2022 23:46:31 GMT
content-type: video/mp4
content-length: 867940
last-modified: Thu, 08 Sep 2022 09:11:01 GMT
etag: "6319b1a5-d3e64"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-backend-server: nl2-static-223
content-range: bytes 0-867939/867940
X-Firefox-Spdy: h2
imgdelnw.com/ie?v=4&c=8ILxdwz_FbL0UVAgo5J1ZSrGdNKm2ajN26CDtKAzh7OabB0Sl2kmVs0paSpH3cARpIsiZIGEBOGmM-KxNkwC2eCN1Nq5ZEja0Z-02gPPPY4Cvzh5TfEquH_bPp1U1zjft3R7ihgf00iKYTEhx2ZLuB1B7-u5n8Mb7lkyrVHbvdLc_rpYZQ_rCSIoigdMpi9rMC7LmFGZDIGI6GP6koJlTQEESSlIgaF8tgARrBH8NOLEbAM09iDvT0Ch7UuW3kVllwXdzj6ZsopifUjMzYjqGgoPton_uuQKgoMzs0rX1XZbImqW-7kNEV0iHvEYe9dqfYHZXXrOjm-PIKeZJzR2Z_033rezI86P4DDzDkzwHveO-CHDPvXFDNC_b4iuBZtyRkXLAwlZUR_qSzEecd3w_aoikciZUfvD6D75DbIy&v1=457&v2=49675&cpa=17b721d0-3540-4e19-9e87-0a3fc2ba6195&format=social-scale-b_r-body
213.239.207.252301 Moved Permanently 0 B URL HTTP/1.1 imgdelnw.com/ie?v=4&c=8ILxdwz_FbL0UVAgo5J1ZSrGdNKm2ajN26CDtKAzh7OabB0Sl2kmVs0paSpH3cARpIsiZIGEBOGmM-KxNkwC2eCN1Nq5ZEja0Z-02gPPPY4Cvzh5TfEquH_bPp1U1zjft3R7ihgf00iKYTEhx2ZLuB1B7-u5n8Mb7lkyrVHbvdLc_rpYZQ_rCSIoigdMpi9rMC7LmFGZDIGI6GP6koJlTQEESSlIgaF8tgARrBH8NOLEbAM09iDvT0Ch7UuW3kVllwXdzj6ZsopifUjMzYjqGgoPton_uuQKgoMzs0rX1XZbImqW-7kNEV0iHvEYe9dqfYHZXXrOjm-PIKeZJzR2Z_033rezI86P4DDzDkzwHveO-CHDPvXFDNC_b4iuBZtyRkXLAwlZUR_qSzEecd3w_aoikciZUfvD6D75DbIy&v1=457&v2=49675&cpa=17b721d0-3540-4e19-9e87-0a3fc2ba6195&format=social-scale-b_r-body
IP 213.239.207.252:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ie?v=4&c=8ILxdwz_FbL0UVAgo5J1ZSrGdNKm2ajN26CDtKAzh7OabB0Sl2kmVs0paSpH3cARpIsiZIGEBOGmM-KxNkwC2eCN1Nq5ZEja0Z-02gPPPY4Cvzh5TfEquH_bPp1U1zjft3R7ihgf00iKYTEhx2ZLuB1B7-u5n8Mb7lkyrVHbvdLc_rpYZQ_rCSIoigdMpi9rMC7LmFGZDIGI6GP6koJlTQEESSlIgaF8tgARrBH8NOLEbAM09iDvT0Ch7UuW3kVllwXdzj6ZsopifUjMzYjqGgoPton_uuQKgoMzs0rX1XZbImqW-7kNEV0iHvEYe9dqfYHZXXrOjm-PIKeZJzR2Z_033rezI86P4DDzDkzwHveO-CHDPvXFDNC_b4iuBZtyRkXLAwlZUR_qSzEecd3w_aoikciZUfvD6D75DbIy&v1=457&v2=49675&cpa=17b721d0-3540-4e19-9e87-0a3fc2ba6195&format=social-scale-b_r-body HTTP/1.1
Host: imgdelnw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
server: fasthttp
date: Fri, 16 Dec 2022 23:46:30 GMT
content-length: 0
location: https://img.vmmcdn.com/get/54661559/71049_icon.png
x-app-id: 12
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ef5788cffa07310fa310e461bec80aee
6be72bfa609d324373faeb9d626cc3be89dccec7
5615ff0db05fd932938db1bd8e86e287b041439839d0a5fcc66ae9ab1d05352c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5615FF0DB05FD932938DB1BD8E86E287B041439839D0A5FCC66AE9AB1D05352C"
Last-Modified: Thu, 15 Dec 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4441
Expires: Sat, 17 Dec 2022 01:00:32 GMT
Date: Fri, 16 Dec 2022 23:46:31 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ef5788cffa07310fa310e461bec80aee
6be72bfa609d324373faeb9d626cc3be89dccec7
5615ff0db05fd932938db1bd8e86e287b041439839d0a5fcc66ae9ab1d05352c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5615FF0DB05FD932938DB1BD8E86E287B041439839D0A5FCC66AE9AB1D05352C"
Last-Modified: Thu, 15 Dec 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4441
Expires: Sat, 17 Dec 2022 01:00:32 GMT
Date: Fri, 16 Dec 2022 23:46:31 GMT
Connection: keep-alive
notification.tubecup.net/in/subscription-offers?href=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&tcid=0&spot_id=1012&site=txxx&source_id=0
78.47.181.156200 OK 0 B URL HTTP/2 notification.tubecup.net/in/subscription-offers?href=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&tcid=0&spot_id=1012&site=txxx&source_id=0
IP 78.47.181.156:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/subscription-offers?href=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&tcid=0&spot_id=1012&site=txxx&source_id=0 HTTP/1.1
Host: notification.tubecup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:31 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
img.vmmcdn.com/get/96038712/71049_image.png
138.201.51.142200 OK 50 kB URL HTTP/1.1 img.vmmcdn.com/get/96038712/71049_image.png
IP 138.201.51.142:0
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 720x480, components 3\012- data
Hash 8a623e2c2f5ff57ac200c617f80c2f61
84ee241dd3a6463395147b596772ef9433318dba
07be740dcfd3eabc34ded2b37bbd9cbb761160504c578b172af50242e1ce6a8f
GET /get/96038712/71049_image.png HTTP/1.1
Host: img.vmmcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 16 Dec 2022 23:46:31 GMT
Content-Type: image/png
Content-Length: 50495
Connection: keep-alive
Last-Modified: Sat, 27 Nov 2021 11:12:16 GMT
Cache-Control: public, max-age=604800
ETag: "61a21290-c53f"
X-Proxy-Cache: HIT
Accept-Ranges: bytes
img.vmmcdn.com/get/54661559/71049_icon.png
138.201.51.142200 OK 77 kB URL HTTP/1.1 img.vmmcdn.com/get/54661559/71049_icon.png
IP 138.201.51.142:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash e40bebadddf9f24d3473604087b72b61
9b18cd68b37aa261fd07341fa561f31621451138
b09761af91e52adb991dcaa32c2c407f222f91b2aa188296ae124082a5ea1ef9
GET /get/54661559/71049_icon.png HTTP/1.1
Host: img.vmmcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 16 Dec 2022 23:46:31 GMT
Content-Type: image/png
Content-Length: 77160
Connection: keep-alive
Last-Modified: Sat, 27 Nov 2021 11:12:16 GMT
Cache-Control: public, max-age=604800
ETag: "61a21290-12d68"
X-Proxy-Cache: HIT
Accept-Ranges: bytes
rtbrennab.com/get/?go=1&data=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
159.69.163.6302 Found 0 B URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP 159.69.163.6:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxNjk1LCJzcGFjZWlkIjoyMTY5NCwidHlwZSI6InBvcCIsImlkem9uZSI6MSwiYWRfdGFncyI6IlN0cmFpZ2h0JTJDQmlnJTIwQXNzJTJDQmlnJTIwVGl0cyUyQ0N1bXNob3QlMkNIRCUyQ0hhbmRqb2IlMkNNSUxGJTJDU3RvY2tpbmdzJTJDU2hhdmVkIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMCIsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjIxNjk0LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjowLCJzdHJhdGFnZW0iOm51bGwsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1Nn0sImJhbm5lciI6eyJ3IjoxLCJoIjoxfX1dLCJzaXRlIjp7ImlkIjoiMjE2OTQiLCJjYXQiOlsiSUFCMjUiXSwicGFnZSI6Imh0dHBzOi8vdHh4eC50dWJlL3ZpZGVvcy8xNjcwOTQxOS9lbm91Z2gtdG8tbWFrZS1teS1zb24tcy1idWxseS1zdG9wLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI5ZTQ5NDdmMzU3NTE0NjU0MTFmZDFhNGY1YzM1OGM3OCJ9LCJleHQiOnsiZHQiOjE2NzEyMzQzODk2ODR9fQ== HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:32 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://rtbrennab.com/banner/in/show/?mid=946575865339738806&pid=0&site=21694&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-1&site_id=0&spot_id=21694&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=99.48594707135514&ml=&tag_ab=&ttl=&space_id=21694&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D21694%26source%3D0%26idzone%3D1%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D21694%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D21694%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D99.48594707135514%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=946575865339738806&pid=0&site=21694&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-1&site_id=0&spot_id=21694&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=99.48594707135514&ml=&tag_ab=&ttl=&space_id=21694&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D21694%26source%3D0%26idzone%3D1%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D21694%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D21694%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D99.48594707135514%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756
159.69.163.6302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=946575865339738806&pid=0&site=21694&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-1&site_id=0&spot_id=21694&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=99.48594707135514&ml=&tag_ab=&ttl=&space_id=21694&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D21694%26source%3D0%26idzone%3D1%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D21694%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D21694%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D99.48594707135514%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756
IP 159.69.163.6:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=946575865339738806&pid=0&site=21694&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=txxx.tube&hostname=auc-banner-hz-1&site_id=0&spot_id=21694&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=99.48594707135514&ml=&tag_ab=&ttl=&space_id=21694&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D21694%26source%3D0%26idzone%3D1%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D21694%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%252CBig%2520Ass%252CBig%2520Tits%252CCumshot%252CHD%252CHandjob%252CMILF%252CStockings%252CShaved%26spot_id%3D21694%26p%3Dhttps%253A%252F%252Ftxxx.tube%252Fvideos%252F16709419%252Fenough-to-make-my-son-s-bully-stop%252F%26katds_labels%3D%26btype%3D0%26score%3D99.48594707135514%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://txxx.tube/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:32 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=21694&source=0&idzone=1&w=1&h=1&mo=&ve=&site_id=21694&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=21694&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.48594707135514&bf=0.0001
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=21694&source=0&idzone=1&w=1&h=1&mo=&ve=&site_id=21694&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=21694&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.48594707135514&bf=0.0001
109.206.161.16302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=21694&source=0&idzone=1&w=1&h=1&mo=&ve=&site_id=21694&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=21694&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.48594707135514&bf=0.0001
IP 109.206.161.16:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=21694&source=0&idzone=1&w=1&h=1&mo=&ve=&site_id=21694&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CBig%20Ass%2CBig%20Tits%2CCumshot%2CHD%2CHandjob%2CMILF%2CStockings%2CShaved&spot_id=21694&p=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&katds_labels=&btype=0&score=99.48594707135514&bf=0.0001 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://txxx.tube/
Connection: keep-alive
Cookie: 912.0=1; 1624.0=1; 1625.0=1; 1629.0=1; 952.0=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Fri, 16 Dec 2022 23:46:32 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://cdn.1vag.com/1x1.png
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 912.0=1; expires=Sat, 17 Dec 2022 23:46:33 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash be0f3f8efd168d292d86bc06985ed83d
c9f950b839740dbeea47e5525c8d546e44d17674
9b6c5d2edc17a26b67ce99a71f3b0659f3393ddfd0354cb95a60999f34b45fe8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9B6C5D2EDC17A26B67CE99A71F3B0659F3393DDFD0354CB95A60999F34B45FE8"
Last-Modified: Thu, 15 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12915
Expires: Sat, 17 Dec 2022 03:21:48 GMT
Date: Fri, 16 Dec 2022 23:46:33 GMT
Connection: keep-alive
cdn.1vag.com/1x1.png
45.133.44.25200 OK 68 B IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /1x1.png HTTP/1.1
Host: cdn.1vag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://txxx.tube/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:33 GMT
content-type: image/png
content-length: 68
server: nginx/1.20.1
last-modified: Wed, 15 Apr 2020 13:30:15 GMT
etag: "5e970c67-44"
cache-control: max-age=3600
x-request-id: 28eea0836f6cd5562d41ccabe8fa4a5b
expires: Sat, 17 Dec 2022 00:46:33 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-MVMB4DG
172.217.21.168200 OK 0 B URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MVMB4DG
IP 172.217.21.168:0
GET /gtm.js?id=GTM-MVMB4DG HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 16 Dec 2022 23:46:28 GMT
expires: Fri, 16 Dec 2022 23:46:28 GMT
cache-control: private, max-age=900
last-modified: Fri, 16 Dec 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 39536
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
btds.zog.link/in/dl/?spot_id=84641&screen_resolution=1280x1024&dt=1671234386627&ad_sub=0&mo=&ve=&katds_labels=&p=https%3A//txxx.tube/videos/16709419/enough-to-make-my-son-s-bully-stop/&utm1=&utm2=&utm3=&utm4=&ad_tags=enough%252Cto%252Cmake%252Cmy%252Cson%27s%252Cbully%252Cstop%252CPorn%252Cvideo%252CTXXX.com%252Ctxxx.com%252Cporn%252Ctube%252Cxxx%252Ctube%252Cfree%252Cporn%252Cvideos%252Cfree%252Cporn%252Cxxx%252Cmovies%252Cxxx%252Ctube%252Cvideo%252Cfree%252Cxxx%252Cvidio%252Cclips%252Cxxxtube%252CWatch%252Cfree%252C%2522enough%252Cto%252Cmake%252Cmy%252Cson%27s%252Cbully%252Cstop%2522%252Cporn%252Cvideo%252Ccategory%252Con%252CTxxx.com%252CHomemade%252Cfuck%252Cvideos%252CFree%252Camateur%252Cporn%252Con%252CTxxx.com&title=enough%20to%20make%20my%20son%27s%20bully%20stop%20-%20Porn%20video%20%7C%20TXXX.com&katds_rcc=2
109.206.161.16200 OK 0 B URL HTTP/2 btds.zog.link/in/dl/?spot_id=84641&screen_resolution=1280x1024&dt=1671234386627&ad_sub=0&mo=&ve=&katds_labels=&p=https%3A//txxx.tube/videos/16709419/enough-to-make-my-son-s-bully-stop/&utm1=&utm2=&utm3=&utm4=&ad_tags=enough%252Cto%252Cmake%252Cmy%252Cson%27s%252Cbully%252Cstop%252CPorn%252Cvideo%252CTXXX.com%252Ctxxx.com%252Cporn%252Ctube%252Cxxx%252Ctube%252Cfree%252Cporn%252Cvideos%252Cfree%252Cporn%252Cxxx%252Cmovies%252Cxxx%252Ctube%252Cvideo%252Cfree%252Cxxx%252Cvidio%252Cclips%252Cxxxtube%252CWatch%252Cfree%252C%2522enough%252Cto%252Cmake%252Cmy%252Cson%27s%252Cbully%252Cstop%2522%252Cporn%252Cvideo%252Ccategory%252Con%252CTxxx.com%252CHomemade%252Cfuck%252Cvideos%252CFree%252Camateur%252Cporn%252Con%252CTxxx.com&title=enough%20to%20make%20my%20son%27s%20bully%20stop%20-%20Porn%20video%20%7C%20TXXX.com&katds_rcc=2
IP 109.206.161.16:0
GET /in/dl/?spot_id=84641&screen_resolution=1280x1024&dt=1671234386627&ad_sub=0&mo=&ve=&katds_labels=&p=https%3A//txxx.tube/videos/16709419/enough-to-make-my-son-s-bully-stop/&utm1=&utm2=&utm3=&utm4=&ad_tags=enough%252Cto%252Cmake%252Cmy%252Cson%27s%252Cbully%252Cstop%252CPorn%252Cvideo%252CTXXX.com%252Ctxxx.com%252Cporn%252Ctube%252Cxxx%252Ctube%252Cfree%252Cporn%252Cvideos%252Cfree%252Cporn%252Cxxx%252Cmovies%252Cxxx%252Ctube%252Cvideo%252Cfree%252Cxxx%252Cvidio%252Cclips%252Cxxxtube%252CWatch%252Cfree%252C%2522enough%252Cto%252Cmake%252Cmy%252Cson%27s%252Cbully%252Cstop%2522%252Cporn%252Cvideo%252Ccategory%252Con%252CTxxx.com%252CHomemade%252Cfuck%252Cvideos%252CFree%252Camateur%252Cporn%252Con%252CTxxx.com&title=enough%20to%20make%20my%20son%27s%20bully%20stop%20-%20Porn%20video%20%7C%20TXXX.com&katds_rcc=2 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://txxx.tube/
Origin: https://txxx.tube
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 16 Dec 2022 23:46:29 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
set-cookie: 953.73385=1; expires=Sat, 17 Dec 2022 23:46:30 GMT; path=/; secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/23578849?wmode=7&page-url=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afp%3A958%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1038826089270%3Ahid%3A443528817%3Az%3A0%3Ai%3A20221216234626%3Aet%3A1671234386%3Ac%3A1%3Arn%3A260652732%3Arqn%3A1%3Au%3A1671234386467321775%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C64%2C0%2C373%2C0%2C%2C463%2C3%2C%2C%2C%2C960%3Aco%3A0%3Ans%3A1671234384636%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671234386%3At%3Aenough%20to%20make%20my%20son%27s%20bully%20stop%20-%20Porn%20video%20%7C%20TXXX.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
87.250.250.119302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/23578849?wmode=7&page-url=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afp%3A958%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1038826089270%3Ahid%3A443528817%3Az%3A0%3Ai%3A20221216234626%3Aet%3A1671234386%3Ac%3A1%3Arn%3A260652732%3Arqn%3A1%3Au%3A1671234386467321775%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C64%2C0%2C373%2C0%2C%2C463%2C3%2C%2C%2C%2C960%3Aco%3A0%3Ans%3A1671234384636%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671234386%3At%3Aenough%20to%20make%20my%20son%27s%20bully%20stop%20-%20Porn%20video%20%7C%20TXXX.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP 87.250.250.119:0
GET /watch/23578849?wmode=7&page-url=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afp%3A958%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1038826089270%3Ahid%3A443528817%3Az%3A0%3Ai%3A20221216234626%3Aet%3A1671234386%3Ac%3A1%3Arn%3A260652732%3Arqn%3A1%3Au%3A1671234386467321775%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C64%2C0%2C373%2C0%2C%2C463%2C3%2C%2C%2C%2C960%3Aco%3A0%3Ans%3A1671234384636%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671234386%3At%3Aenough%20to%20make%20my%20son%27s%20bully%20stop%20-%20Porn%20video%20%7C%20TXXX.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://txxx.tube
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/23578849/1?wmode=7&page-url=https%3A%2F%2Ftxxx.tube%2Fvideos%2F16709419%2Fenough-to-make-my-son-s-bully-stop%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afp%3A958%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1038826089270%3Ahid%3A443528817%3Az%3A0%3Ai%3A20221216234626%3Aet%3A1671234386%3Ac%3A1%3Arn%3A260652732%3Arqn%3A1%3Au%3A1671234386467321775%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C64%2C0%2C373%2C0%2C%2C463%2C3%2C%2C%2C%2C960%3Aco%3A0%3Ans%3A1671234384636%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671234386%3At%3Aenough%20to%20make%20my%20son%27s%20bully%20stop%20-%20Porn%20video%20%7C%20TXXX.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Fri, 16 Dec 2022 23:46:29 GMT
access-control-allow-origin: https://txxx.tube
set-cookie: yabs-sid=610669751671234389; Path=/; SameSite=None; Secure
i=kUMclDe+VXRxYKcZ+oHpDO1MLDZGINuaJv/qSxesAs/qIJsHIJYVsdQjnZQbsGhTzhBZQYkVW+83jtyABSL14K+sXg8=; Expires=Mon, 13-Dec-2032 23:46:25 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=195248181671234389; Expires=Sat, 16-Dec-2023 23:46:29 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=195248181671234389; Expires=Sat, 16-Dec-2023 23:46:29 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1702770389.yc.1671234389#1702770389.yrts.1671234389#1702770389.yrtsi.1671234389; Expires=Sat, 16-Dec-2023 23:46:29 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 16-Dec-2022 23:46:29 GMT
last-modified: Fri, 16-Dec-2022 23:46:29 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
tsyndicate.com/iframes2/d29c4735e6804e5898198d8f6af3fc82.html?subid=0
136.243.130.121200 OK 0 B URL HTTP/2 tsyndicate.com/iframes2/d29c4735e6804e5898198d8f6af3fc82.html?subid=0
IP 136.243.130.121:0
ASN #24940 Hetzner Online GmbH
GET /iframes2/d29c4735e6804e5898198d8f6af3fc82.html?subid=0 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: e7040eccb27a5faa
set-cookie: ts_uid=27427883-91ca-4332-a4b7-33e5fca5f88d; expires=Fri, 16 Jun 2023 23:46:30 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
creative.xlivrdr.com/widgets/v4/Universal?campaignId=0344371630277140d4e6e843762bdf964d4ae7bf351771961595fbde6c2ada11&campaignType=smartpop&creativeId=37acc769fa476626fe6b90aec4a1f923bc4ff59b110ff874761e96a2a9218620&iterationId=379973&masterSmartpopId=1914&memberId=FoZfots4q3TDkK2a7JeJS_cVxCOa6HjX4WCfbB9s3iP4FIkf4jSlVUmI9au_JwR7nGTWWIJyyQ0e5HQV7YdGWauGUWrq_EhHtcxWzX-MzS8Pu7s_gUIDRUi&p1=4176025&quality=optimal&ruleId=17&smartpopId=1793&sourceId=477848&tag=-girls%2Findian&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=30009
104.18.51.106200 OK 0 B URL HTTP/2 creative.xlivrdr.com/widgets/v4/Universal?campaignId=0344371630277140d4e6e843762bdf964d4ae7bf351771961595fbde6c2ada11&campaignType=smartpop&creativeId=37acc769fa476626fe6b90aec4a1f923bc4ff59b110ff874761e96a2a9218620&iterationId=379973&masterSmartpopId=1914&memberId=FoZfots4q3TDkK2a7JeJS_cVxCOa6HjX4WCfbB9s3iP4FIkf4jSlVUmI9au_JwR7nGTWWIJyyQ0e5HQV7YdGWauGUWrq_EhHtcxWzX-MzS8Pu7s_gUIDRUi&p1=4176025&quality=optimal&ruleId=17&smartpopId=1793&sourceId=477848&tag=-girls%2Findian&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=30009
IP 104.18.51.106:0
GET /widgets/v4/Universal?campaignId=0344371630277140d4e6e843762bdf964d4ae7bf351771961595fbde6c2ada11&campaignType=smartpop&creativeId=37acc769fa476626fe6b90aec4a1f923bc4ff59b110ff874761e96a2a9218620&iterationId=379973&masterSmartpopId=1914&memberId=FoZfots4q3TDkK2a7JeJS_cVxCOa6HjX4WCfbB9s3iP4FIkf4jSlVUmI9au_JwR7nGTWWIJyyQ0e5HQV7YdGWauGUWrq_EhHtcxWzX-MzS8Pu7s_gUIDRUi&p1=4176025&quality=optimal&ruleId=17&smartpopId=1793&sourceId=477848&tag=-girls%2Findian&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=30009 HTTP/1.1
Host: creative.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://r-eu.tsyndicate.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html
last-modified: Thu, 15 Dec 2022 09:30:14 GMT
expires: Fri, 16 Dec 2022 23:46:35 GMT
cache-control: max-age=10
strict-transport-security: max-age=15768000
pragma: public
report-to: { "endpoints":[{ "url": "https://go.stripchat.com/report" }], "group": "default", "max_age": 1048576 }
cf-cache-status: HIT
age: 1
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ab4c7e6bd8b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
twinrdack.com/link.engine?z=56355&guid=f9a4a8aa-e28f-4a28-8a65-ff4d0e6e54c5&kw=Straight,Big%20Ass,Big%20Tits,Cumshot,HD,Handjob,MILF,Stockings,Shaved&tid=0
172.66.43.134302 Found 0 B URL HTTP/2 twinrdack.com/link.engine?z=56355&guid=f9a4a8aa-e28f-4a28-8a65-ff4d0e6e54c5&kw=Straight,Big%20Ass,Big%20Tits,Cumshot,HD,Handjob,MILF,Stockings,Shaved&tid=0
IP 172.66.43.134:0
GET /link.engine?z=56355&guid=f9a4a8aa-e28f-4a28-8a65-ff4d0e6e54c5&kw=Straight,Big%20Ass,Big%20Tits,Cumshot,HD,Handjob,MILF,Stockings,Shaved&tid=0 HTTP/1.1
Host: twinrdack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html; charset=utf-8
location: https://twinrdack.com/multipane.engine?vms=ulKJrxaAOcqsCUdhvRPKoTE-puKnsnewDd2D-IwmPht1vLBcknsL2UN6cGqnGJ92Ya6b1iVyQf97XQ4TsVfLsTCzejgtwjJelqe4Kji-DuKrq83fdFHGus-z9CfYubXElb7EEgPa2GjZxBp2GxRjRJvLdXCbjKos7MYuVo-QTVtMbRNr9M1lnUE8p0viOGRmgnWpzGbeDxepQFIcOGeHit5ThRdBVMiubrhRcLmkTLgThMAi7OHNCG3jOsd5Bh0Uo0TVXut9hu39T_r8xHW-ZwJaxn0qrXz4bTo-YN4OKhRduqzSNCNjvKq8WbEPaSeI_CZTWqTFiI_Gld3zUpTl7mQSVZMkUoJ8Ji3Yb7xp_LMh3loi9xylwq_r9l71SpEplkd4pQMgHsnGsxLGt2wtQ6FwFTm6-z4A5ynY0cEUquk2YKd_LGGtaHezoDZpA2uO-5MeXBNPHE8i2KGvgrXDiIHhkgff87s6yl0t2U11jZSMYBF1b3J842P7W-2k1ew80TcCzh3cfbQTtely_RHRMWth56XtGsqjVB_RlC5nwzo02atT0-JefcQgfow7U-CyCsvFs5Ok7h9VqfTE1lJXXaaNhSA4Icxoz-dmwC-ESLlb1YE_TErrjUUy1zGyXCqXGshBKPt6dnlpJdstpq_X-Chfi6DuKoSlaU5Dj-03No71MFHuQKlFuDb1Q710g84WVEE-M72GTvgxXY68rnubi4Z1YKdmyELuo9QC3XGGauq0XQM1J1LvaLVNvUlg_VnheQUvgHnGt786abfteYVTt8xztem7lY_APOm_1LFcWWhGPh8zIRr5t2qCkW8u1OXbcBdIaVzaBWY9H_UAlk6TvJCQPAgLtLGQWDa-XpvxN4Ug7EwoTTy2hOy5EC3Gnxg-JyDyDLbOqu_Uh48jUey5bw2&dcid=3_ctx_8b53d893-1638-4103-b6d0-5aa919614967&w=300&h=250&ml=1
vary: Accept-Encoding
cache-control: private, no-transform
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: *
set-cookie: IKSR={}; path=/; SameSite=None; secure
INF_DFL8=false; path=/; SameSite=None; secure
IUID=baef1a9c-c564-4516-bcfb-286d0b149c47; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure
ISSH=67FD32; path=/; SameSite=None; secure
VMI=; path=/; SameSite=None; secure
IPLH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IPLH_Q=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
CHN=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
MSSH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
MSRH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ILP=null; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure
ILPLU=#1/1/0001 12:00:00 AM; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ILEALC=#1/1/0001 12:00:00 AM; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ILMPF=#False; expires=Sat, 17-Dec-2022 03:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IPMPLU=#; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IPMUID=#; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
BSWUID=#; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IKSR={}; path=/; SameSite=None; secure
IBL=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH_Q=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IZH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IZH_Q=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH_Q=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IMH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IMH_Q=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ISH=#{"14167":[{"SId":"67FD32","D":"22/12/16T15:46:30"}]}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ISH_Q=#[14167]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH_Q=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ICH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ICH_Q=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3qff%2BNIsbAfPdXHZMZw2Fgcvx2ZoLO3EGzz3PmtcAyx7qvjElOBxy%2Fuhl8%2BPZd5aPJxHAB5Iuw8DBIjgk8%2FzHO2BLptugyfknRrH%2F3V9ZaXePkpYzaDB5p4F1SxFfuc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77ab4c7bcec7b4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
a.realsrv.com/ads.js
185.76.9.19200 OK 0 B IP 185.76.9.19:0
ASN #60068 Datacamp Limited
GET /ads.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:28 GMT
content-type: application/javascript
etag: W/"f4fddb85b686269b678e3caf766"
expires: Tue, 13 Dec 2022 13:52:50 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1671242113
server: CDN77-Turbo
x-77-nzt: AblMCQ0COUX/AwwAAA
x-77-nzt-ray: c0a4cc287642ce6854039d63a9db1d29
x-cache: HIT
x-age: 3075
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
159.69.163.6200 OK 0 B URL HTTP/2 rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxNDk2LCJzcGFjZWlkIjozMTA3NSwidHlwZSI6InBvcCIsImlkem9uZSI6NjkzOTM3LCJhZF90YWdzIjoiU3RyYWlnaHQlMkNCaWclMjBBc3MlMkNCaWclMjBUaXRzJTJDQ3Vtc2hvdCUyQ0hEJTJDSGFuZGpvYiUyQ01JTEYlMkNTdG9ja2luZ3MlMkNTaGF2ZWQiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6MzEwNzUsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjgsInN0cmF0YWdlbSI6bnVsbCwiZ3lyIjowLCJhY2NlbCI6MCwic3NwIjozNzU2fSwiYmFubmVyIjp7InciOjMwMCwiaCI6MjUwfX1dLCJzaXRlIjp7ImlkIjoiMzEwNzUiLCJjYXQiOlsiSUFCMjUiXSwicGFnZSI6Imh0dHBzOi8vdHh4eC50dWJlL3ZpZGVvcy8xNjcwOTQxOS9lbm91Z2gtdG8tbWFrZS1teS1zb24tcy1idWxseS1zdG9wLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI5ZTQ5NDdmMzU3NTE0NjU0MTFmZDFhNGY1YzM1OGM3OCJ9LCJleHQiOnsiZHQiOjE2NzEyMzQzODY2OTB9fQ==
IP 159.69.163.6:0
ASN #24940 Hetzner Online GmbH
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
159.69.163.6200 OK 0 B URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP 159.69.163.6:0
ASN #24940 Hetzner Online GmbH
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
go.xlivrdr.com/thumbs/view
104.18.59.150200 OK 0 B URL HTTP/2 go.xlivrdr.com/thumbs/view
IP 104.18.59.150:0
POST /thumbs/view HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://creative.xlivrdr.com
Content-Length: 81
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:31 GMT
content-type: application/json
access-control-allow-origin: *
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDfsBaY2bRYJiCfFHYpfgnRfzoh6L5ChTXmpWNCgk; SameSite=None; Secure; path=/; expires=Sat, 17-Dec-22 22:46:31 GMT; HttpOnly
server: cloudflare
cf-ray: 77ab4c80fe01b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
js.wpshsdk.com/npc/sdk/push/styles.css
45.133.44.24200 OK 0 B URL HTTP/2 js.wpshsdk.com/npc/sdk/push/styles.css
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
GET /npc/sdk/push/styles.css HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:31 GMT
content-type: text/css
server: nginx/1.18.0
last-modified: Tue, 30 Aug 2022 09:15:33 GMT
etag: W/"630dd535-10f4"
content-encoding: gzip
expires: Fri, 16 Dec 2022 23:51:31 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
twinrdack.com/link.engine?z=56733&guid=f9a4a8aa-e28f-4a28-8a65-ff4d0e6e54c5&tid=0&kw=Straight,Big%20Ass,Big%20Tits,Cumshot,HD,Handjob,MILF,Stockings,Shaved
172.66.43.134302 Found 0 B URL HTTP/2 twinrdack.com/link.engine?z=56733&guid=f9a4a8aa-e28f-4a28-8a65-ff4d0e6e54c5&tid=0&kw=Straight,Big%20Ass,Big%20Tits,Cumshot,HD,Handjob,MILF,Stockings,Shaved
IP 172.66.43.134:0
GET /link.engine?z=56733&guid=f9a4a8aa-e28f-4a28-8a65-ff4d0e6e54c5&tid=0&kw=Straight,Big%20Ass,Big%20Tits,Cumshot,HD,Handjob,MILF,Stockings,Shaved HTTP/1.1
Host: twinrdack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html; charset=utf-8
location: https://twinrdack.com/Redirect.eng?MediaSegmentId=40566&dcid=3_ctx_d1fe9802-674a-4ab4-9ab7-a2127e49a5b6&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=&v=Uin3p9YT25SMCLEKHoy_2myoIbBdcFLX9GN2e8ZGGbq202IZfRT-_55X09dArRNxjYLhGdS_Hs05TJUtEUHgU3F6mSE55t5-6SWcjCgJRo_u7kxpsxrd0PqyySXFSKkFmNBsb_htvwAJrDMlVBAdbD-70hrqXol72JqlMqhN7-2Fh2xHvmkQqG2frnRoDwsUPaeQpbrP1-WeOBEGI9HkpAc5Fh1oPi-B01AJeszJrvSJkvUXiIhFI0ieTjvW4_F6QOW1f4c5GlheovURSe__doCAYnP11AXgcvKPJpeOoMJiaDqI1L52F_amco6nKvOQv2GmnT8WZ4eF9tJTDPN5GK1CchabAK2gjEC-nokfVjxyAVRFG4TCdS50tYDYpn60vGHqPcie3lNLbEZZBn1TK_u7PSkmgU5SZY2DfphYoJcBFCGlYWsQy8mXYn8ieiDX0whpV-8Bh-2dOchS4l21lK62EARi89Za0nC2Er47rlSAZ4ZYYyRl-DjnXLM155GZFG-uXMg7BfN9bA4C01padYCzOqGU7BuyYD4Bn4XoUImu4KL0rGlGi81QNUFWbqY4MqXnLWiK9mnyZR0ndKy_GsVDJoA9dStpZYDvkz1Qrxuj9ppMPqS3VILCuxyRlqYhxGyOKmjxqmhGUMSVLrXyxlZtLfmnVRntM5j3HsYRrqkR-zOMAM9_9PEtN458jqMY-YMK4gGcVwarqMnhx-DWQeXofCYhHP4h6vIcUT3xspG4sqnOUGx0kNycbEBBGtwl7KYv0Ot_JWTmfSK4yqbk68Bf_Yh9nXL7kbBuYD5J6hbK6uhf4du-E4i9vgMIexpxzdkDJLwsgocybGlITS98-X1dBLguNxdqtl05sHuIimLRQm8kGm0HdQZxidKZmV5JDyH-ZipPG_MkpIBrtZYYAg2&kw=Straight%2cBig+Ass%2cBig+Tits%2cCumshot%2cHD%2cHandjob%2cMILF%2cStockings%2cShaved&mw=300&mh=250
vary: Accept-Encoding
cache-control: private, no-transform
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: *
set-cookie: IKSR={}; path=/; SameSite=None; secure
INF_DFL8=false; path=/; SameSite=None; secure
IUID=16347272-60c6-46d9-8d71-3eb032fff004; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure
ISSH=67FD32; path=/; SameSite=None; secure
VMI=; path=/; SameSite=None; secure
IPLH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IPLH_Q=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
CHN=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
MSSH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
MSRH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ILP=null; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure
ILPLU=#1/1/0001 12:00:00 AM; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ILEALC=#1/1/0001 12:00:00 AM; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ILMPF=#False; expires=Sat, 17-Dec-2022 03:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IPMPLU=#; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IPMUID=#; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
BSWUID=#; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IKSR={}; path=/; SameSite=None; secure
IBL=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH_Q=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IZH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IZH_Q=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH_Q=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IMH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
IMH_Q=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ISH=#{"14167":[{"SId":"67FD32","D":"22/12/16T15:46:30"}]}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ISH_Q=#[14167]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH_Q=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ICH=#{}; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
ICH_Q=#[]; expires=Thu, 16-Dec-2032 23:46:30 GMT; path=/; SameSite=None; secure; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1k7MC85e4de1m6HIOZE5LdCbD6AmmpX2KTS6wYDz%2BnP06ipWFTXHwAVN1%2BVAH8jfX%2BgHTUEDBnjWMkVeGDF7pzOLjewVvD0wo%2FlVuqyOwGy%2BEnJNx4yC3pmhYlMG8wE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77ab4c7bdeccb4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
159.69.163.6200 OK 0 B URL HTTP/2 rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxNDk3LCJzcGFjZWlkIjozMTA4OSwidHlwZSI6InBvcCIsImlkem9uZSI6MzA2OTE1OCwiYWRfdGFncyI6IlN0cmFpZ2h0JTJDQmlnJTIwQXNzJTJDQmlnJTIwVGl0cyUyQ0N1bXNob3QlMkNIRCUyQ0hhbmRqb2IlMkNNSUxGJTJDU3RvY2tpbmdzJTJDU2hhdmVkIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMCIsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjMxMDg5LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjoxMiwic3RyYXRhZ2VtIjpudWxsLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTZ9LCJiYW5uZXIiOnsidyI6NzI4LCJoIjo5MH19XSwic2l0ZSI6eyJpZCI6IjMxMDg5IiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL3R4eHgudHViZS92aWRlb3MvMTY3MDk0MTkvZW5vdWdoLXRvLW1ha2UtbXktc29uLXMtYnVsbHktc3RvcC8ifSwiZGV2aWNlIjp7InciOjEyODAsImgiOjEwMjR9LCJ1c2VyIjp7ImlkIjoiOWU0OTQ3ZjM1NzUxNDY1NDExZmQxYTRmNWMzNThjNzgifSwiZXh0Ijp7ImR0IjoxNjcxMjM0Mzg2NjkzfX0=
IP 159.69.163.6:0
ASN #24940 Hetzner Online GmbH
GET /get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxNDk3LCJzcGFjZWlkIjozMTA4OSwidHlwZSI6InBvcCIsImlkem9uZSI6MzA2OTE1OCwiYWRfdGFncyI6IlN0cmFpZ2h0JTJDQmlnJTIwQXNzJTJDQmlnJTIwVGl0cyUyQ0N1bXNob3QlMkNIRCUyQ0hhbmRqb2IlMkNNSUxGJTJDU3RvY2tpbmdzJTJDU2hhdmVkIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMCIsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjMxMDg5LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjoxMiwic3RyYXRhZ2VtIjpudWxsLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTZ9LCJiYW5uZXIiOnsidyI6NzI4LCJoIjo5MH19XSwic2l0ZSI6eyJpZCI6IjMxMDg5IiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL3R4eHgudHViZS92aWRlb3MvMTY3MDk0MTkvZW5vdWdoLXRvLW1ha2UtbXktc29uLXMtYnVsbHktc3RvcC8ifSwiZGV2aWNlIjp7InciOjEyODAsImgiOjEwMjR9LCJ1c2VyIjp7ImlkIjoiOWU0OTQ3ZjM1NzUxNDY1NDExZmQxYTRmNWMzNThjNzgifSwiZXh0Ijp7ImR0IjoxNjcxMjM0Mzg2NjkzfX0= HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
159.69.163.6200 OK 0 B URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP 159.69.163.6:0
ASN #24940 Hetzner Online GmbH
GET /get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxNDk2LCJzcGFjZWlkIjozMTA4NiwidHlwZSI6InBvcCIsImlkem9uZSI6NjkzOTI1LCJhZF90YWdzIjoiU3RyYWlnaHQlMkNCaWclMjBBc3MlMkNCaWclMjBUaXRzJTJDQ3Vtc2hvdCUyQ0hEJTJDSGFuZGpvYiUyQ01JTEYlMkNTdG9ja2luZ3MlMkNTaGF2ZWQiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6MzEwODYsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjUsInN0cmF0YWdlbSI6bnVsbCwiZ3lyIjowLCJhY2NlbCI6MCwic3NwIjozNzU2fSwiYmFubmVyIjp7InciOjMwMCwiaCI6MjUwfX1dLCJzaXRlIjp7ImlkIjoiMzEwODYiLCJjYXQiOlsiSUFCMjUiXSwicGFnZSI6Imh0dHBzOi8vdHh4eC50dWJlL3ZpZGVvcy8xNjcwOTQxOS9lbm91Z2gtdG8tbWFrZS1teS1zb24tcy1idWxseS1zdG9wLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI5ZTQ5NDdmMzU3NTE0NjU0MTFmZDFhNGY1YzM1OGM3OCJ9LCJleHQiOnsiZHQiOjE2NzEyMzQzODY2ODh9fQ== HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
sw.wpu.sh/npc/sdk/common/service-worker.js
45.133.44.25200 OK 0 B URL HTTP/2 sw.wpu.sh/npc/sdk/common/service-worker.js
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
GET /npc/sdk/common/service-worker.js HTTP/1.1
Host: sw.wpu.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:31 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 15 Dec 2022 10:15:40 GMT
etag: W/"639af3cc-158c"
content-encoding: gzip
expires: Fri, 16 Dec 2022 23:51:31 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
tsyndicate.com/iframes2/03035f472880499cb28858d7b8d87284.html?subid=0
136.243.130.121200 OK 0 B URL HTTP/2 tsyndicate.com/iframes2/03035f472880499cb28858d7b8d87284.html?subid=0
IP 136.243.130.121:0
ASN #24940 Hetzner Online GmbH
GET /iframes2/03035f472880499cb28858d7b8d87284.html?subid=0 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: 4f11c8067aed2bf3
set-cookie: ts_uid=0c047d9e-298f-4823-b5a3-3501d500854a; expires=Fri, 16 Jun 2023 23:46:30 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCx5YYNmzAsHEjRhcWIsYUPPhQRJmJCBvOkAHjRg4YXfoo; expires=Sat, 17 Dec 2022 23:46:30 GMT; domain=.tsyndicate.com; path=/; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
txxx.tube/videos/16709419/enough-to-make-my-son-s-bully-stop
172.67.217.162301 Moved Permanently 0 B URL HTTP/2 txxx.tube/videos/16709419/enough-to-make-my-son-s-bully-stop
IP 172.67.217.162:0
GET /videos/16709419/enough-to-make-my-son-s-bully-stop HTTP/1.1
Host: txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Fri, 16 Dec 2022 23:46:28 GMT
content-type: text/html
location: https://txxx.tube/videos/16709419/enough-to-make-my-son-s-bully-stop/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nOloC8nTqXezq1kIKZEq271fTeVHF1UaJrlPt2QFLWpLXnwGCDDBHLcGhCbW1t1BAQEU8vwTE5PRoUUK74Z3fiYTsEDLdwxjjTbuNKBxmzEuPcrDnpP%2BCPeW5Us%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77ab4c6d5f46b50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Source+Sans+Pro:wght@400;600;700&display=swap
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Source+Sans+Pro:wght@400;600;700&display=swap
IP 142.250.74.106:0
GET /css2?family=Source+Sans+Pro:wght@400;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://txxx.tube/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 16 Dec 2022 23:46:28 GMT
date: Fri, 16 Dec 2022 23:46:28 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
12007250.pix-cdn.org/a/pjexo.html?idzone=693935&w=300&h=250&ad_sub=0
45.133.44.25200 OK 0 B URL HTTP/2 12007250.pix-cdn.org/a/pjexo.html?idzone=693935&w=300&h=250&ad_sub=0
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
GET /a/pjexo.html?idzone=693935&w=300&h=250&ad_sub=0 HTTP/1.1
Host: 12007250.pix-cdn.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html; charset=utf-8
last-modified: Wed, 20 May 2020 13:08:32 GMT
cache-control: max-age=3600
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TZsj8v2NMbRkSb7EeIVXzhzNC2vboRRp1cyS1%2FIMwf%2B46wGDw0k5kMNCYeHltbNOiYLEbCnBssqTdn3%2FolxWIKqNoIy8bKN2vOG3c2oLyRsw2CNWn%2BlFbTRU2mEX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 732483be8bba6d85-MUC
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
expires: Sat, 17 Dec 2022 00:46:30 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
creative.xxxvjmp.com/widgets/v4/Universal?buttonColor=%23930606&campaignId=c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88&campaignType=smartpop&creativeId=f7d35c19e8363f8e59e197e6034e23aaac0f22600b273fb0cad1f12ae1c95358&iterationId=383554&liveBadgeColor=%23ff0707&masterSmartpopId=1605&memberId=pnPz9YMuXQDLzZXX7mPaoQs1Fwr0b4cuMSEhWkDjJYn5pIWM9JNkHeW8gQUDJOgnm2iYEMyDQEfuDqSXLdskxlngoZ2Hy00vnAlWhcxGn8FKH0I_gUIDRUi&p1=4099653&quality=optimal&ruleId=3&smartpopId=1547&sourceId=226437&tag=-girls%2Findian&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=30029
104.18.59.150200 OK 0 B URL HTTP/2 creative.xxxvjmp.com/widgets/v4/Universal?buttonColor=%23930606&campaignId=c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88&campaignType=smartpop&creativeId=f7d35c19e8363f8e59e197e6034e23aaac0f22600b273fb0cad1f12ae1c95358&iterationId=383554&liveBadgeColor=%23ff0707&masterSmartpopId=1605&memberId=pnPz9YMuXQDLzZXX7mPaoQs1Fwr0b4cuMSEhWkDjJYn5pIWM9JNkHeW8gQUDJOgnm2iYEMyDQEfuDqSXLdskxlngoZ2Hy00vnAlWhcxGn8FKH0I_gUIDRUi&p1=4099653&quality=optimal&ruleId=3&smartpopId=1547&sourceId=226437&tag=-girls%2Findian&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=30029
IP 104.18.59.150:0
GET /widgets/v4/Universal?buttonColor=%23930606&campaignId=c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88&campaignType=smartpop&creativeId=f7d35c19e8363f8e59e197e6034e23aaac0f22600b273fb0cad1f12ae1c95358&iterationId=383554&liveBadgeColor=%23ff0707&masterSmartpopId=1605&memberId=pnPz9YMuXQDLzZXX7mPaoQs1Fwr0b4cuMSEhWkDjJYn5pIWM9JNkHeW8gQUDJOgnm2iYEMyDQEfuDqSXLdskxlngoZ2Hy00vnAlWhcxGn8FKH0I_gUIDRUi&p1=4099653&quality=optimal&ruleId=3&smartpopId=1547&sourceId=226437&tag=-girls%2Findian&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=30029 HTTP/1.1
Host: creative.xxxvjmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tsyndicate.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:30 GMT
content-type: text/html
last-modified: Thu, 15 Dec 2022 09:30:14 GMT
expires: Fri, 16 Dec 2022 23:46:27 GMT
cache-control: max-age=10
strict-transport-security: max-age=15768000
pragma: public
report-to: { "endpoints":[{ "url": "https://go.stripchat.com/report" }], "group": "default", "max_age": 1048576 }
cf-cache-status: HIT
age: 7
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ab4c7efd3fb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
go.xxxvjmp.com/config?url=https%3A%2F%2Fcreative.xxxvjmp.com%2Fwidgets%2Fv4%2FUniversal%3FbuttonColor%3D%2523930606%26campaignId%3Dc3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88%26campaignType%3Dsmartpop%26creativeId%3Df7d35c19e8363f8e59e197e6034e23aaac0f22600b273fb0cad1f12ae1c95358%26iterationId%3D383554%26liveBadgeColor%3D%2523ff0707%26masterSmartpopId%3D1605%26memberId%3DpnPz9YMuXQDLzZXX7mPaoQs1Fwr0b4cuMSEhWkDjJYn5pIWM9JNkHeW8gQUDJOgnm2iYEMyDQEfuDqSXLdskxlngoZ2Hy00vnAlWhcxGn8FKH0I_gUIDRUi%26p1%3D4099653%26quality%3Doptimal%26ruleId%3D3%26smartpopId%3D1547%26sourceId%3D226437%26tag%3D-girls%252Findian%26userId%3Ded4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e%26variationId%3D30029
104.18.59.150200 OK 0 B URL HTTP/2 go.xxxvjmp.com/config?url=https%3A%2F%2Fcreative.xxxvjmp.com%2Fwidgets%2Fv4%2FUniversal%3FbuttonColor%3D%2523930606%26campaignId%3Dc3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88%26campaignType%3Dsmartpop%26creativeId%3Df7d35c19e8363f8e59e197e6034e23aaac0f22600b273fb0cad1f12ae1c95358%26iterationId%3D383554%26liveBadgeColor%3D%2523ff0707%26masterSmartpopId%3D1605%26memberId%3DpnPz9YMuXQDLzZXX7mPaoQs1Fwr0b4cuMSEhWkDjJYn5pIWM9JNkHeW8gQUDJOgnm2iYEMyDQEfuDqSXLdskxlngoZ2Hy00vnAlWhcxGn8FKH0I_gUIDRUi%26p1%3D4099653%26quality%3Doptimal%26ruleId%3D3%26smartpopId%3D1547%26sourceId%3D226437%26tag%3D-girls%252Findian%26userId%3Ded4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e%26variationId%3D30029
IP 104.18.59.150:0
GET /config?url=https%3A%2F%2Fcreative.xxxvjmp.com%2Fwidgets%2Fv4%2FUniversal%3FbuttonColor%3D%2523930606%26campaignId%3Dc3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88%26campaignType%3Dsmartpop%26creativeId%3Df7d35c19e8363f8e59e197e6034e23aaac0f22600b273fb0cad1f12ae1c95358%26iterationId%3D383554%26liveBadgeColor%3D%2523ff0707%26masterSmartpopId%3D1605%26memberId%3DpnPz9YMuXQDLzZXX7mPaoQs1Fwr0b4cuMSEhWkDjJYn5pIWM9JNkHeW8gQUDJOgnm2iYEMyDQEfuDqSXLdskxlngoZ2Hy00vnAlWhcxGn8FKH0I_gUIDRUi%26p1%3D4099653%26quality%3Doptimal%26ruleId%3D3%26smartpopId%3D1547%26sourceId%3D226437%26tag%3D-girls%252Findian%26userId%3Ded4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e%26variationId%3D30029 HTTP/1.1
Host: go.xxxvjmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xxxvjmp.com/
Origin: https://creative.xxxvjmp.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Fri, 16 Dec 2022 23:46:31 GMT
content-type: application/json
access-control-allow-origin: *
last-modified: Fri, 16 Dec 2022 23:46:31 GMT
cf-cache-status: MISS
set-cookie: __cflb=0H28uukSkGJRy5UBr1u9iAwwBfboBLE59xvXhmMBCEx; SameSite=None; Secure; path=/; expires=Sat, 17-Dec-22 22:46:31 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ab4c80bdd4b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2