shemalepower.xyz/
172.67.155.11301 Moved Permanently 0 B IP 172.67.155.11:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: shemalepower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 01 Dec 2022 02:25:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 01 Dec 2022 03:25:06 GMT
Location: https://shemalepower.xyz/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qc7jF3o9w8qfMsyoEpB2Bn5AliOfM78tfA6Vs9k%2BznXXJaN%2FY%2B7txI2UTwufifmAMcLSFRIcgt26K4gxVBNUK2sQuNPqNxfXqq8BQnfbw3Q9fBYGOuF1E0uOsiMfBxd0bmXP"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 77285eccac45b4fd-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash a5daf4dc99951793ae2315d4795e8146
4427507ca4d3a5632cc8f598afbc85e2195d00bd
94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10955
Expires: Thu, 01 Dec 2022 05:27:41 GMT
Date: Thu, 01 Dec 2022 02:25:06 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash f3cf023c797da81728c0ac84c8759331
fa07c5e39e4b0741ea484101cccb2202acea9d9c
5206a0bac8bf78d6b84322519271a1ece2c1039a0090e583de6d6192d88873d0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 184
Cache-Control: max-age=115757
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 02:25:06 GMT
Etag: "638730f7-1d7"
Expires: Fri, 02 Dec 2022 10:34:23 GMT
Last-Modified: Wed, 30 Nov 2022 10:31:19 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 6d9d34c96b9a826ae5676640c966469c
8052a16d41a637e420478b7de1ff5a2dc951fccd
f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15923
Expires: Thu, 01 Dec 2022 06:50:29 GMT
Date: Thu, 01 Dec 2022 02:25:06 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 01 Dec 2022 02:19:45 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 321
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: V2c7esFlxOR8LGp5Cbw1cQtufRVTXXyEtGGpzQiijrTx/hBXjHYAcqw/Xi8HvfAvJWTQdt1xxq4=
x-amz-request-id: 9WZD72E5G04RGXTX
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 01 Dec 2022 01:46:05 GMT
age: 2341
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 3fe1bdf6a6b1ef989baaf4671bf1673a
cce8bc2f63e9eff855ab2fe67933a6e91d637ad6
97be5a78e121ffb2aebae36b279593874c318907e5325837cb654581f5724ff7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=103325
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 02:25:06 GMT
Etag: "6387011f-117"
Expires: Fri, 02 Dec 2022 07:07:11 GMT
Last-Modified: Wed, 30 Nov 2022 07:07:11 GMT
Server: nginx
Content-Length: 279
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 02:25:06 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 3fe1bdf6a6b1ef989baaf4671bf1673a
cce8bc2f63e9eff855ab2fe67933a6e91d637ad6
97be5a78e121ffb2aebae36b279593874c318907e5325837cb654581f5724ff7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=103325
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 02:25:06 GMT
Etag: "6387011f-117"
Expires: Fri, 02 Dec 2022 07:07:11 GMT
Last-Modified: Wed, 30 Nov 2022 07:07:11 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 8f58cd30443a495eed3ec0d9827550c1
fd0f53d2acc63ae015b7b42155136ade5841ebc7
333a3cae36081ea37371e32dc9587faacfda5970daa476b3b36cd6f587ce1594
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 02:25:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?hl=en-GB&ver=5.1.1
142.250.74.132200 OK 556 B URL HTTP/2 www.google.com/recaptcha/api.js?hl=en-GB&ver=5.1.1
IP 142.250.74.132:0
File type ASCII text, with very long lines (853), with no line terminators
Hash a88ab3fd325fddbeca4d9220e3248ea0
2241ce299540c60d4bf8a68c4f3bbb1ac53c2ff6
8d0ec7f7c09772765222dc4197f2e83c384e83ce25bbfde9725a9243001215dc
GET /recaptcha/api.js?hl=en-GB&ver=5.1.1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Thu, 01 Dec 2022 02:25:06 GMT
date: Thu, 01 Dec 2022 02:25:06 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 556
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 705 B IP 142.250.74.131:0
Hash 4009ea2f92760c3f536c735c9fd66e0c
50efc282894eb541fe69229b9d091e8b2f5d28c3
9013a33e25146e7a0104c774932df6cbfa87b58077d79de07e286a9df028fb6b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 02:25:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 354efa309103f6ea79ab84ca84bf1f34
af3c05efc02fc231e3b84f170facffd9ce5ebdb6
f570fa93a4bcac5e44ee2da4c4d63f5620fbeb6666f29623d8b4c2e01c8ba306
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 02:25:06 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2022 05:07:56 GMT
Expires: Tue, 06 Dec 2022 05:07:55 GMT
Etag: "af3c05efc02fc231e3b84f170facffd9ce5ebdb6"
Cache-Control: max-age=441168,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77285ed08fbfb4f9-OSL
a.shukriya90.com/api/spots/300603?s1=%25subid1%25
135.181.208.216200 OK 9.9 kB URL HTTP/2 a.shukriya90.com/api/spots/300603?s1=%25subid1%25
IP 135.181.208.216:0
ASN #24940 Hetzner Online GmbH
Hash 643ec4d60f983b818ef8ac3102139f3e
19f08ffd0cfc505cb8d64eefe09083142c2a6f78
a691f8dbc2bf30716deb3677459c4cb150ddfe40ee9f5a04f3494afee5a0b662
GET /api/spots/300603?s1=%25subid1%25 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Cookie: nauid=HMdHP3zQyvaPNaKzZyb1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 02:25:06 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 02:25:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en_gb.js
142.250.74.35200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en_gb.js
IP 142.250.74.35:0
File type ASCII text, with very long lines (730)
Size 163 kB (163055 bytes)
Hash 91206fe174ff3241c55990b30c208898
68136216b4020994abc0964cce6bb081cf0b9cb6
869cd44f4894ed86629fcebb7cdc8d337a9079bbd6cfe17319b16972fa7f8805
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en_gb.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Origin: https://shemalepower.xyz
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 163055
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 02:26:26 GMT
expires: Wed, 29 Nov 2023 02:26:26 GMT
cache-control: public, max-age=31536000
age: 172721
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 02:25:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a.shukriya90.com/api/spots/297835?p=1&s1=%subid1%&kw=shemale
135.181.208.216200 OK 3.9 kB URL HTTP/2 a.shukriya90.com/api/spots/297835?p=1&s1=%subid1%&kw=shemale
IP 135.181.208.216:0
ASN #24940 Hetzner Online GmbH
Hash 89395d11e4ae785631632b96b038a481
6da524a2e0a1aa186f0678d16b89fc042ab395c3
e5ed3d0c94339492ab6a788afff1cc1ddc8d650120d604103508d4d7c3dae2a1
GET /api/spots/297835?p=1&s1=%subid1%&kw=shemale HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 02:25:06 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: nauid=kukErLzfKvdhPprcllkx; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
a.shukriya90.com/api/click/15263291603661789095?c=90
135.181.208.216200 OK 0 B URL HTTP/2 a.shukriya90.com/api/click/15263291603661789095?c=90
IP 135.181.208.216:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/15263291603661789095?c=90 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.shukriya90.com/api/spots/295449?p=1&s1=%subid1%&kw=shemale
Cookie: nauid=HMdHP3zQyvaPNaKzZyb1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 02:25:07 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: private
X-Firefox-Spdy: h2
a.shukriya90.com/api/click/13142400261472008095?c=90
135.181.208.216200 OK 0 B URL HTTP/2 a.shukriya90.com/api/click/13142400261472008095?c=90
IP 135.181.208.216:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/13142400261472008095?c=90 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.shukriya90.com/api/spots/295448?p=1&s1=%subid1%&kw=shemale
Cookie: nauid=HMdHP3zQyvaPNaKzZyb1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 02:25:07 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: private
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 01 Dec 2022 02:11:15 GMT
cache-control: public,max-age=3600
age: 832
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash cfdd00e67ee6ca21712b867eb5288ab6
b61d5d6ec3b7ad71619e13e32c87f2d01871b88a
f740cac6dfedc1bf0f82efb10dac4f6ffb22f9bb5d4a9b68a4cd971dd2f65793
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 200
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 02:25:07 GMT
Last-Modified: Thu, 01 Dec 2022 02:21:47 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 8cbac8e6331179dc98788f65f4443ef8
904db7a575287ed9fd58c1a24eb85ee98ad3e9c8
126fc1eb6cba405d1069ffaea27626964b5e758e60de9c127530f277310ac64c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "126FC1EB6CBA405D1069FFAEA27626964B5E758E60DE9C127530F277310AC64C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14285
Expires: Thu, 01 Dec 2022 06:23:12 GMT
Date: Thu, 01 Dec 2022 02:25:07 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash acf84cd3051ed67703b1a37f6ded0b94
4ee416ac8696a3e89b72447f0153915b0c0bf3e1
37fcff1ff464fb7ae2d990c96cde3ea172f50fdad3ef9563dbad46524fdebce5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "37FCFF1FF464FB7AE2D990C96CDE3EA172F50FDAD3EF9563DBAD46524FDEBCE5"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8774
Expires: Thu, 01 Dec 2022 04:51:21 GMT
Date: Thu, 01 Dec 2022 02:25:07 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash acf84cd3051ed67703b1a37f6ded0b94
4ee416ac8696a3e89b72447f0153915b0c0bf3e1
37fcff1ff464fb7ae2d990c96cde3ea172f50fdad3ef9563dbad46524fdebce5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "37FCFF1FF464FB7AE2D990C96CDE3EA172F50FDAD3EF9563DBAD46524FDEBCE5"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19146
Expires: Thu, 01 Dec 2022 07:44:13 GMT
Date: Thu, 01 Dec 2022 02:25:07 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash acf84cd3051ed67703b1a37f6ded0b94
4ee416ac8696a3e89b72447f0153915b0c0bf3e1
37fcff1ff464fb7ae2d990c96cde3ea172f50fdad3ef9563dbad46524fdebce5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "37FCFF1FF464FB7AE2D990C96CDE3EA172F50FDAD3EF9563DBAD46524FDEBCE5"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11474
Expires: Thu, 01 Dec 2022 05:36:21 GMT
Date: Thu, 01 Dec 2022 02:25:07 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 8cbac8e6331179dc98788f65f4443ef8
904db7a575287ed9fd58c1a24eb85ee98ad3e9c8
126fc1eb6cba405d1069ffaea27626964b5e758e60de9c127530f277310ac64c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "126FC1EB6CBA405D1069FFAEA27626964B5E758E60DE9C127530F277310AC64C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11158
Expires: Thu, 01 Dec 2022 05:31:05 GMT
Date: Thu, 01 Dec 2022 02:25:07 GMT
Connection: keep-alive
t2.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://anyxxx.tv&size=16
142.250.74.36200 OK 239 B URL HTTP/2 t2.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://anyxxx.tv&size=16
IP 142.250.74.36:0
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash cde8fdf8fde40716549d2933804709a8
ad4183499e9608046dc9e01808e6f815f9125df8
a48d941fdd18a8a0fbd797121e1edb17e5dd110d54b3cc26ad9afd45c813ab11
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://anyxxx.tv&size=16 HTTP/1.1
Host: t2.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://anyxxx.tv/i/favicon/apple-icon-57x57.png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 239
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 19:59:17 GMT
expires: Tue, 06 Dec 2022 19:59:17 GMT
cache-control: public, max-age=604800
age: 109550
last-modified: Sun, 17 Nov 2019 05:28:33 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 83d1238aaf86ae79a31dcf0a5bca7516
3017e2ad15dd6d42b3f71c6ac3ac1da6e8c606aa
b47d1596d25d8fc12203870b694286c9b9ade5ca8b8f25257c9559d222c01113
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B47D1596D25D8FC12203870B694286C9B9ADE5CA8B8F25257C9559D222C01113"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5324
Expires: Thu, 01 Dec 2022 03:53:51 GMT
Date: Thu, 01 Dec 2022 02:25:07 GMT
Connection: keep-alive
t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://bestpornstars.tv&size=16
142.250.74.36200 OK 248 B URL HTTP/2 t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://bestpornstars.tv&size=16
IP 142.250.74.36:0
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 6e7c3f4079c910492b371b4a68e59cee
461e6251468c765dc931bfcafcb6030341415a44
14ddbc85c1e92ce8c99b7cfaa3dd88bd0ca84f143c9a697c8fff3bb246ac1ac2
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://bestpornstars.tv&size=16 HTTP/1.1
Host: t3.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://bestpornstars.tv/i/favicon/apple-icon-57x57.png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 248
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 22:46:10 GMT
expires: Thu, 01 Dec 2022 22:46:10 GMT
cache-control: public, max-age=604800
age: 531537
last-modified: Mon, 14 Dec 2020 04:04:38 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://fap18.tv&size=16
172.217.21.164200 OK 248 B URL HTTP/2 t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://fap18.tv&size=16
IP 172.217.21.164:0
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 8e6ba5af4906e0f7e0278ffeb02bdedc
907b0b3dd605218b7f84c0eb8cc16edceb0ebe20
000bb8316fbe3758f43c20aa99c67cb869cfe42de916afdcdcb71d4f72449c6c
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://fap18.tv&size=16 HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://fap18.tv/i/favicon/apple-icon-57x57.png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 248
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 17:52:31 GMT
expires: Thu, 01 Dec 2022 17:52:31 GMT
cache-control: public, max-age=604800
age: 549156
last-modified: Tue, 07 Dec 2021 12:56:04 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.tubecorp.com/b/loader.js?v=3
45.133.44.24200 OK 831 B URL HTTP/2 cdn.tubecorp.com/b/loader.js?v=3
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (1745), with no line terminators
Hash 8143f2c692706afd858455911eb34152
0e9051df8fcf7a51281db01a28185679f5c32c81
03959f368154cb76dbd9d598d9a7efde0005a1f5fb62d5cd60d6e874bbb7abce
GET /b/loader.js?v=3 HTTP/1.1
Host: cdn.tubecorp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.shukriya90.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 02:25:07 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.20.1
last-modified: Wed, 14 Oct 2020 08:55:58 GMT
etag: W/"5f86bd1e-6d1"
cache-control: max-age=3600
x-request-id: c0e6e05964784853ea736c38cff5dcf6
content-encoding: gzip
expires: Thu, 01 Dec 2022 03:25:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
push.services.mozilla.com/
35.162.142.194101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.162.142.194:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: VYRGbc+xadNrlK70dMmNXg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 2CpaKuDJy4FT1eCDxMhCUbh4YsM=
a.shukriya90.com/api/spots/329740?host=shemalepower.xyz&ev=197&wh=939&ww=1280&uuid=&s1=%25subid1%25
135.181.208.216200 OK 0 B URL HTTP/2 a.shukriya90.com/api/spots/329740?host=shemalepower.xyz&ev=197&wh=939&ww=1280&uuid=&s1=%25subid1%25
IP 135.181.208.216:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/spots/329740?host=shemalepower.xyz&ev=197&wh=939&ww=1280&uuid=&s1=%25subid1%25 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Cookie: nauid=HMdHP3zQyvaPNaKzZyb1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 02:25:07 GMT
content-length: 0
cache-control: private
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 167a74d212c60500592219d9cb47a105
821be5f83b2dfc678131290d58d398b38bf5d49d
96aaa035489311b9ab89496a9ff468ce682e0d2da37b4607a14d7972fde86d7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96AAA035489311B9AB89496A9FF468CE682E0D2DA37B4607A14D7972FDE86D7E"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2169
Expires: Thu, 01 Dec 2022 03:01:17 GMT
Date: Thu, 01 Dec 2022 02:25:08 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 167a74d212c60500592219d9cb47a105
821be5f83b2dfc678131290d58d398b38bf5d49d
96aaa035489311b9ab89496a9ff468ce682e0d2da37b4607a14d7972fde86d7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96AAA035489311B9AB89496A9FF468CE682E0D2DA37B4607A14D7972FDE86D7E"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2169
Expires: Thu, 01 Dec 2022 03:01:17 GMT
Date: Thu, 01 Dec 2022 02:25:08 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 167a74d212c60500592219d9cb47a105
821be5f83b2dfc678131290d58d398b38bf5d49d
96aaa035489311b9ab89496a9ff468ce682e0d2da37b4607a14d7972fde86d7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96AAA035489311B9AB89496A9FF468CE682E0D2DA37B4607A14D7972FDE86D7E"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2169
Expires: Thu, 01 Dec 2022 03:01:17 GMT
Date: Thu, 01 Dec 2022 02:25:08 GMT
Connection: keep-alive
fp.metricswpsh.com/fp?tag_id=6181
157.90.84.242204 No Content 0 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=6181
IP 157.90.84.242:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=6181 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://shemalepower.xyz/
Origin: https://shemalepower.xyz
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Thu, 01 Dec 2022 02:25:08 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://shemalepower.xyz
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
rtbbnr.com/get/?go=1&data=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
162.55.139.130200 OK 998 B URL HTTP/2 rtbbnr.com/get/?go=1&data=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
IP 162.55.139.130:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1356)
Hash 7bc6163516ff1de695aea697be6ce315
4c7a5051febca24c6138185ac734758e79822966
398524d3ce33f8f58ec00f6cad332b4060550bb4103e111332e2aaff3989b116
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbbnr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.shukriya90.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.16.0
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
notification.tubecup.net/tags?tag_id=6181&timezone_olson=UTC&version_name=c
78.47.199.210200 OK 7.0 kB URL HTTP/2 notification.tubecup.net/tags?tag_id=6181&timezone_olson=UTC&version_name=c
IP 78.47.199.210:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with very long lines (7044), with no line terminators
Hash 10c9e8c7a1a5c37924e7890a4192c9f4
5136110274b227c5398eb385cf720809f6101000
eb352f2999a55184e6beae2eb015241169db535141d8d9d52d06289db17dce80
GET /tags?tag_id=6181&timezone_olson=UTC&version_name=c HTTP/1.1
Host: notification.tubecup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Origin: https://shemalepower.xyz
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: application/json
content-length: 7044
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
rtbbnr.com/get/?go=1&data=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
162.55.139.130200 OK 2.8 kB URL HTTP/2 rtbbnr.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InNwb3QiOjUyMTYsImlkIjo4NTksImxhYmVscyI6IiIsInNpdGVfaWQiOjUyMTYsInR5cGUiOiJiYW5uZXIiLCJzcGFjZWlkIjo4NTksInNwb3RfaWQiOjAsImlkem9uZSI6MzgzMDgxOSwiem9uZSI6InRjX3BhYl8zMDB4MjUwIiwiYWRfdGFncyI6InNoZW1hbGUiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMTM0NDM1MjczMiIsInV0bTEiOiJ0Y2Jhbl9pIiwidXRtMiI6IjUyMTYiLCJ1dG0zIjoiMTU3MTQiLCJ1dG00IjoiIn0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH19XSwic2l0ZSI6eyJpZCI6IjUyMTYiLCJwYWdlIjoiaHR0cHM6Ly9zaGVtYWxlcG93ZXIueHl6LyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiJiNzM0N2UxZjJhZmE0NjllYzIzYTc4Y2I1ZTMyMzMyYSJ9LCJleHQiOnsiZHQiOjE2Njk4NjE1MDY1NDF9fQ==
IP 162.55.139.130:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3602)
Hash ad03a19df81e31a7db5be80125260be3
eecb853b31ca26dbc57c3cf0744260d18a8e1017
14947b7934cfbf9a5116d3742c67b465dd534ab1d5a7f7e68e6f8a184d942705
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbbnr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.shukriya90.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.16.0
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
rtbbnr.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InNwb3QiOjUyMTYsImlkIjo4NTksImxhYmVscyI6IiIsInNpdGVfaWQiOjUyMTYsInR5cGUiOiJiYW5uZXIiLCJzcGFjZWlkIjo4NTksInNwb3RfaWQiOjAsImlkem9uZSI6MzgzMDgxOSwiem9uZSI6InRjX3BhYl8zMDB4MjUwIiwiYWRfdGFncyI6InNoZW1hbGUiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMTM0NDM1MjczMiIsInV0bTEiOiJ0Y2Jhbl9pIiwidXRtMiI6IjUyMTYiLCJ1dG0zIjoiMTU3MTQiLCJ1dG00IjoiIn0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH19XSwic2l0ZSI6eyJpZCI6IjUyMTYiLCJwYWdlIjoiaHR0cHM6Ly9zaGVtYWxlcG93ZXIueHl6LyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiJmZDliYTEzOGQyOWZiZTU3YTk4MzQ4YWJjYmNmZDMyNiJ9LCJleHQiOnsiZHQiOjE2Njk4NjE1MDY2MDJ9fQ==
162.55.139.130200 OK 2.8 kB URL HTTP/2 rtbbnr.com/get/?go=1&data=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
IP 162.55.139.130:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3572)
Hash 3b54d0145bc55dc26f895728d7d2596b
fa56e1e5a153fdfd1a1f9a897abc84f41d9ecfd8
66f10ce62713ced1fefcae0233e0d94e8f2c897b706af26e042fb86430ba145d
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbbnr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.shukriya90.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.16.0
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
136ffb81df.df253f3b96.com/6344fbdb6edcc7d50564efa2798e8bc6.js
45.133.44.25200 OK 35 kB URL HTTP/2 136ffb81df.df253f3b96.com/6344fbdb6edcc7d50564efa2798e8bc6.js
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash d85c43891c2e2652d1303d8aaa4eb203
e87e9df9c0762e8e37ad1a581338c3627102039a
bbcd8ea9c3dd26c5a96d84c92aafdc1ba23ac237bd04b40aa68d6890bc36d392
Analyzer Verdict Alert quad9 Sinkholed
GET /6344fbdb6edcc7d50564efa2798e8bc6.js HTTP/1.1
Host: 136ffb81df.df253f3b96.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Origin: https://shemalepower.xyz
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 02:25:07 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 30 Nov 2022 13:10:49 GMT
etag: W/"63875659-17718"
content-encoding: gzip
expires: Thu, 01 Dec 2022 02:30:07 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
a.shukriya90.com/api/spots/295448?p=1&s1=%subid1%&kw=shemale
135.181.208.216200 OK 3.4 kB URL HTTP/2 a.shukriya90.com/api/spots/295448?p=1&s1=%subid1%&kw=shemale
IP 135.181.208.216:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (712)
Hash 2245431cbcc0007820894da1d8024599
fd6141e08429017cf9606f215e250a07fd4d16fc
d3944a01205847703de4d9b0787498e87b62546bae240de3f484211a2e1622fd
GET /api/spots/295448?p=1&s1=%subid1%&kw=shemale HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalepower.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 02:25:06 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: nauid=QA2ZYLLWmKDmmmjxRr57; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
rtbbnr.com/get/?go=1&data=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
162.55.139.130200 OK 997 B URL HTTP/2 rtbbnr.com/get/?go=1&data=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
IP 162.55.139.130:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1355)
Hash 8debbf28a7ef3ebaa3651b77187a0bc0
4677464415d636dc3d0ab648a2cfd19d1d19a5e4
7aedd99abbed86f1a6625dbd4ef04c67e4dbbaa3ff1eebcd532446e190dd9e18
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbbnr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.shukriya90.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.16.0
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
136ffb81df.df253f3b96.com/73327f30cabbdb50de6e9b090b1529ab.js
45.133.44.25200 OK 17 kB URL HTTP/2 136ffb81df.df253f3b96.com/73327f30cabbdb50de6e9b090b1529ab.js
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
Hash 228cc44bf6a9941773e4ec3c0a2aa654
6a1d7d5c80bfdf710afef0cfcdc462b240c3b789
8302e0f538b946f13a7d0c96b167b3415420edacf649ffc94042fc17048ba918
Analyzer Verdict Alert quad9 Sinkholed
GET /73327f30cabbdb50de6e9b090b1529ab.js HTTP/1.1
Host: 136ffb81df.df253f3b96.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 29 Nov 2022 15:03:15 GMT
etag: W/"63861f33-adcd"
content-encoding: gzip
expires: Thu, 01 Dec 2022 02:30:08 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 53b357c3d21f685be7c25f8b11e246e6
38467d0f9e000166cf55154cdde6cf42f2e1084d
b0823945a3d6b1c1de56fad93172f9cf4017d746b35f4fb1d5d05ecaddd8f2a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0823945A3D6B1C1DE56FAD93172F9CF4017D746B35F4FB1D5D05ECADDD8F2A3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15699
Expires: Thu, 01 Dec 2022 06:46:47 GMT
Date: Thu, 01 Dec 2022 02:25:08 GMT
Connection: keep-alive
pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImbQIAMDhowaN1rkyEGGRgsaN2yIERnGRpgWNmSQmWFGzJgcLseIEeFwjpg0ZBTq2CJCRgwYNXLIkEHjqIguDse4EVrjqMMwdcZgzBEjB46PNGrQGPlxRo0aMnLQ4CniJxmMaeiUafMlBluDdhbaCOsQTp2dOmqYlXEVDpyJMWaY7QlHoo4ZNtSireGwDB46X-Y0xmhQzxs3Zb7gSMp2TJvDOmjQmLE0x1UyZiY6FOPGzUIZOGzkpkFYRBs3F1PTgPG17-_gMW50tOGwjhw2C2ckRjuyuQyMaOjQgTNHx4sXcyznaVOmDJ063F28kXMG_BwXcNDA-UGkjJ00Y8r0qD9nDZ03cHBRR0cy2DBEGKeFkcYZbiRBRA-qsZaWgATaMMUbzuXXQxFYUOiRDUKEURtCPcTgYYFO4EfQfmHQkQZwJ9pARRjsmVfiF5BJ9lGMQZBhxHpttNhDiCPKEeMQb8xBRw8wxAiFHPi9eEYTbxzERg9DQNFEjEQwweSRn1GRBxz6BcEEE2DW4QYdcuTRgxNPxEiFHBCtQWIMNbBFxhttYDQHQUGyUQYcb9yBkAt45KFHaS0utIUNUIkAhxxa6RBDGS0gNVtsOsDgQkeUiTAGHHRNWqmnHY3mkBx2oIZnZaP22emnFIlQRx1pYAQDW2mgJgJXLuTgKW8u4LlWc2FgRKUeabDBRhgv1PApCChc8eKed8wBghNUgHDUpzuAYK0be4WLR7kgsGopUp-mAMIRZYyxxhsvyADDUffeC4IRachRhhlv4PHCUdLuGlWlIsDJ1npfjIGwwg6xgXARTuhp3xf-QmcpSDfgABkOHa3K4G014NCQCAfZ8YUYciyEAw4OpfxFG1XellutZMjxRnQOJbkQDX3pnOjPq_6LnXbceQceoGEISqihciCq6AtszcEqRjrT0eJ6LagZVwsyzOACGWPcoCfCB31BttkVyRqDDZHdXANxbV9nKdxe2YAncTHEAPRDZGBchmZfNHp33HrPDbMIFzeNEB1CbWFWpGGI4RjK_2LFhkR9SbwQDFEFB0MfCgQE&r=1&s=0493fbda2040aeeda594ac18edb1ae3c9b9039d508d76f9bd9150e688f4b35e11669861508&w=t
94.130.164.161200 OK 35 B URL HTTP/2 pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImbQIAMDhowaN1rkyEGGRgsaN2yIERnGRpgWNmSQmWFGzJgcLseIEeFwjpg0ZBTq2CJCRgwYNXLIkEHjqIguDse4EVrjqMMwdcZgzBEjB46PNGrQGPlxRo0aMnLQ4CniJxmMaeiUafMlBluDdhbaCOsQTp2dOmqYlXEVDpyJMWaY7QlHoo4ZNtSireGwDB46X-Y0xmhQzxs3Zb7gSMp2TJvDOmjQmLE0x1UyZiY6FOPGzUIZOGzkpkFYRBs3F1PTgPG17-_gMW50tOGwjhw2C2ckRjuyuQyMaOjQgTNHx4sXcyznaVOmDJ063F28kXMG_BwXcNDA-UGkjJ00Y8r0qD9nDZ03cHBRR0cy2DBEGKeFkcYZbiRBRA-qsZaWgATaMMUbzuXXQxFYUOiRDUKEURtCPcTgYYFO4EfQfmHQkQZwJ9pARRjsmVfiF5BJ9lGMQZBhxHpttNhDiCPKEeMQb8xBRw8wxAiFHPi9eEYTbxzERg9DQNFEjEQwweSRn1GRBxz6BcEEE2DW4QYdcuTRgxNPxEiFHBCtQWIMNbBFxhttYDQHQUGyUQYcb9yBkAt45KFHaS0utIUNUIkAhxxa6RBDGS0gNVtsOsDgQkeUiTAGHHRNWqmnHY3mkBx2oIZnZaP22emnFIlQRx1pYAQDW2mgJgJXLuTgKW8u4LlWc2FgRKUeabDBRhgv1PApCChc8eKed8wBghNUgHDUpzuAYK0be4WLR7kgsGopUp-mAMIRZYyxxhsvyADDUffeC4IRachRhhlv4PHCUdLuGlWlIsDJ1npfjIGwwg6xgXARTuhp3xf-QmcpSDfgABkOHa3K4G014NCQCAfZ8YUYciyEAw4OpfxFG1XellutZMjxRnQOJbkQDX3pnOjPq_6LnXbceQceoGEISqihciCq6AtszcEqRjrT0eJ6LagZVwsyzOACGWPcoCfCB31BttkVyRqDDZHdXANxbV9nKdxe2YAncTHEAPRDZGBchmZfNHp33HrPDbMIFzeNEB1CbWFWpGGI4RjK_2LFhkR9SbwQDFEFB0MfCgQE&r=1&s=0493fbda2040aeeda594ac18edb1ae3c9b9039d508d76f9bd9150e688f4b35e11669861508&w=t
IP 94.130.164.161:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /api/v1/p/p.gif?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImbQIAMDhowaN1rkyEGGRgsaN2yIERnGRpgWNmSQmWFGzJgcLseIEeFwjpg0ZBTq2CJCRgwYNXLIkEHjqIguDse4EVrjqMMwdcZgzBEjB46PNGrQGPlxRo0aMnLQ4CniJxmMaeiUafMlBluDdhbaCOsQTp2dOmqYlXEVDpyJMWaY7QlHoo4ZNtSireGwDB46X-Y0xmhQzxs3Zb7gSMp2TJvDOmjQmLE0x1UyZiY6FOPGzUIZOGzkpkFYRBs3F1PTgPG17-_gMW50tOGwjhw2C2ckRjuyuQyMaOjQgTNHx4sXcyznaVOmDJ063F28kXMG_BwXcNDA-UGkjJ00Y8r0qD9nDZ03cHBRR0cy2DBEGKeFkcYZbiRBRA-qsZaWgATaMMUbzuXXQxFYUOiRDUKEURtCPcTgYYFO4EfQfmHQkQZwJ9pARRjsmVfiF5BJ9lGMQZBhxHpttNhDiCPKEeMQb8xBRw8wxAiFHPi9eEYTbxzERg9DQNFEjEQwweSRn1GRBxz6BcEEE2DW4QYdcuTRgxNPxEiFHBCtQWIMNbBFxhttYDQHQUGyUQYcb9yBkAt45KFHaS0utIUNUIkAhxxa6RBDGS0gNVtsOsDgQkeUiTAGHHRNWqmnHY3mkBx2oIZnZaP22emnFIlQRx1pYAQDW2mgJgJXLuTgKW8u4LlWc2FgRKUeabDBRhgv1PApCChc8eKed8wBghNUgHDUpzuAYK0be4WLR7kgsGopUp-mAMIRZYyxxhsvyADDUffeC4IRachRhhlv4PHCUdLuGlWlIsDJ1npfjIGwwg6xgXARTuhp3xf-QmcpSDfgABkOHa3K4G014NCQCAfZ8YUYciyEAw4OpfxFG1XellutZMjxRnQOJbkQDX3pnOjPq_6LnXbceQceoGEISqihciCq6AtszcEqRjrT0eJ6LagZVwsyzOACGWPcoCfCB31BttkVyRqDDZHdXANxbV9nKdxe2YAncTHEAPRDZGBchmZfNHp33HrPDbMIFzeNEB1CbWFWpGGI4RjK_2LFhkR9SbwQDFEFB0MfCgQE&r=1&s=0493fbda2040aeeda594ac18edb1ae3c9b9039d508d76f9bd9150e688f4b35e11669861508&w=t HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbbnr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: text/plain; charset=utf-8
content-length: 35
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 0086f68c61baa1834d344ee629a39e56
1a5a38b1b59b07eb8ecacda39b5baac27ff53d64
60deced136baa68df490c1eb528849052e753c470b308078847e9e799d18b73a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60DECED136BAA68DF490C1EB528849052E753C470B308078847E9E799D18B73A"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=737
Expires: Thu, 01 Dec 2022 02:37:25 GMT
Date: Thu, 01 Dec 2022 02:25:08 GMT
Connection: keep-alive
rtbbnr.com/get/?go=1&data=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
162.55.139.130200 OK 1.0 kB URL HTTP/2 rtbbnr.com/get/?go=1&data=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
IP 162.55.139.130:0
ASN #24940 Hetzner Online GmbH
Hash bab9c972bb3118bb604d3e71977ec2b2
b9786ad255792488b9a8f6739a7db61db1881e23
14de03028b6f29ce2d34ecbb79e4cec91ceaddd57f4e487eeab6522b83d03f3c
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbbnr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.shukriya90.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.16.0
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImbUiBEDB40yMFqEoTEmJA0aZmSItDGjTAsZBmHcsBHjZA4aM0Q4nCMmDRmFOraIiDHjpEYZN2bIENHF4Rg3QDfCcBimzhiMNHDksHEjRw0bMmPYkBEjBwytMHSK6EkGYxo6Zdp8iaHWoJ2FNmjUcAinjpiFNY5ShQNnIlGNO-FI1DHDxs0aMvaKKIOHzpc5ijEa1PPGTZkvOGrkUDumTWEdRmXIyEGVjJmJDsW4cbNQBg4bt2nIcNjGzUXUNM7uFgGn9-8YN2DAsOGwjhw2C2cQhZyDtYg6S3UMpEMHzhwdL17MoZynTZkydOp4d_FGzhnxc1zAQQPnB5EydtKMKdPj_pw1dLwBBxd1KCeDDUOEYVoYaZzhRhJE9JDaagQaaMMUbzi3Xw9FYFEhDAcKEcZsCPUQw4cHOqEfQf2FQUcavqFoAxVhuIeeiV809lhkMgZBhhHtteFiDyKSKIeMQ7wxBx09wCAjFHLoB-MZTbxxEBs9DAFFEzISwUSTSHZGRR5w8BcEE0yEWYcbdMiRRw9OPCEjFXJAtEaJMdSgFhlvtIHRHAQJyUYZcLxxB0Iu4JGHHqS5uNAWNjRFnBxX6RCDSzBIJsZrOsDggnKSjVHcF3BQupCnyoXmkBx2nJanQ2WI6menn1J0XR1pYJSWQ2mcJkIOMbhglgu6uZAnDWrVEQZGVeqRBhtshPFCDZ-CgMIVMPJ5xxwgOEEFCDGgugMI2LqR17h4nAsCq5Zm-mkKIBwR6xpvvCADDOHiiy8IRqQhRxlmvIHHC-FSu6sIY1QqQpxqtfdFwhgx7BAbChfhxJ74ffEvdJbWcMMNODSGg3KrOlhbDTg0JMJBdnwhhhwL4YCDQyx_0YaVtd1mKxlyvBGdQ0ouRANfPSsq9KoAY4QGd96BJ16gYQxa6KFyJLroC2rNwSpGPdPhYnstrPlWCzZQS8YYN-yp8EFfnJ12RbOK5ZjONZwFd3Zy50D3WTEc2JrGZWD2haOW2jA3TXXPPFnLUSNEB1BbaCRpGGIstjLAVbEhEV8Un-rUbzD0oUBA&r=1&s=f9c23292e6dc16e95ac78b4cba7645128805647e19fd96fae18da060406db6751669861508&w=t
94.130.164.161200 OK 35 B URL HTTP/2 pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImbUiBEDB40yMFqEoTEmJA0aZmSItDGjTAsZBmHcsBHjZA4aM0Q4nCMmDRmFOraIiDHjpEYZN2bIENHF4Rg3QDfCcBimzhiMNHDksHEjRw0bMmPYkBEjBwytMHSK6EkGYxo6Zdp8iaHWoJ2FNmjUcAinjpiFNY5ShQNnIlGNO-FI1DHDxs0aMvaKKIOHzpc5ijEa1PPGTZkvOGrkUDumTWEdRmXIyEGVjJmJDsW4cbNQBg4bt2nIcNjGzUXUNM7uFgGn9-8YN2DAsOGwjhw2C2cQhZyDtYg6S3UMpEMHzhwdL17MoZynTZkydOp4d_FGzhnxc1zAQQPnB5EydtKMKdPj_pw1dLwBBxd1KCeDDUOEYVoYaZzhRhJE9JDaagQaaMMUbzi3Xw9FYFEhDAcKEcZsCPUQw4cHOqEfQf2FQUcavqFoAxVhuIeeiV809lhkMgZBhhHtteFiDyKSKIeMQ7wxBx09wCAjFHLoB-MZTbxxEBs9DAFFEzISwUSTSHZGRR5w8BcEE0yEWYcbdMiRRw9OPCEjFXJAtEaJMdSgFhlvtIHRHAQJyUYZcLxxB0Iu4JGHHqS5uNAWNjRFnBxX6RCDSzBIJsZrOsDggnKSjVHcF3BQupCnyoXmkBx2nJanQ2WI6menn1J0XR1pYJSWQ2mcJkIOMbhglgu6uZAnDWrVEQZGVeqRBhtshPFCDZ-CgMIVMPJ5xxwgOEEFCDGgugMI2LqR17h4nAsCq5Zm-mkKIBwR6xpvvCADDOHiiy8IRqQhRxlmvIHHC-FSu6sIY1QqQpxqtfdFwhgx7BAbChfhxJ74ffEvdJbWcMMNODSGg3KrOlhbDTg0JMJBdnwhhhwL4YCDQyx_0YaVtd1mKxlyvBGdQ0ouRANfPSsq9KoAY4QGd96BJ16gYQxa6KFyJLroC2rNwSpGPdPhYnstrPlWCzZQS8YYN-yp8EFfnJ12RbOK5ZjONZwFd3Zy50D3WTEc2JrGZWD2haOW2jA3TXXPPFnLUSNEB1BbaCRpGGIstjLAVbEhEV8Un-rUbzD0oUBA&r=1&s=f9c23292e6dc16e95ac78b4cba7645128805647e19fd96fae18da060406db6751669861508&w=t
IP 94.130.164.161:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /api/v1/p/p.gif?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImbUiBEDB40yMFqEoTEmJA0aZmSItDGjTAsZBmHcsBHjZA4aM0Q4nCMmDRmFOraIiDHjpEYZN2bIENHF4Rg3QDfCcBimzhiMNHDksHEjRw0bMmPYkBEjBwytMHSK6EkGYxo6Zdp8iaHWoJ2FNmjUcAinjpiFNY5ShQNnIlGNO-FI1DHDxs0aMvaKKIOHzpc5ijEa1PPGTZkvOGrkUDumTWEdRmXIyEGVjJmJDsW4cbNQBg4bt2nIcNjGzUXUNM7uFgGn9-8YN2DAsOGwjhw2C2cQhZyDtYg6S3UMpEMHzhwdL17MoZynTZkydOp4d_FGzhnxc1zAQQPnB5EydtKMKdPj_pw1dLwBBxd1KCeDDUOEYVoYaZzhRhJE9JDaagQaaMMUbzi3Xw9FYFEhDAcKEcZsCPUQw4cHOqEfQf2FQUcavqFoAxVhuIeeiV809lhkMgZBhhHtteFiDyKSKIeMQ7wxBx09wCAjFHLoB-MZTbxxEBs9DAFFEzISwUSTSHZGRR5w8BcEE0yEWYcbdMiRRw9OPCEjFXJAtEaJMdSgFhlvtIHRHAQJyUYZcLxxB0Iu4JGHHqS5uNAWNjRFnBxX6RCDSzBIJsZrOsDggnKSjVHcF3BQupCnyoXmkBx2nJanQ2WI6menn1J0XR1pYJSWQ2mcJkIOMbhglgu6uZAnDWrVEQZGVeqRBhtshPFCDZ-CgMIVMPJ5xxwgOEEFCDGgugMI2LqR17h4nAsCq5Zm-mkKIBwR6xpvvCADDOHiiy8IRqQhRxlmvIHHC-FSu6sIY1QqQpxqtfdFwhgx7BAbChfhxJ74ffEvdJbWcMMNODSGg3KrOlhbDTg0JMJBdnwhhhwL4YCDQyx_0YaVtd1mKxlyvBGdQ0ouRANfPSsq9KoAY4QGd96BJ16gYQxa6KFyJLroC2rNwSpGPdPhYnstrPlWCzZQS8YYN-yp8EFfnJ12RbOK5ZjONZwFd3Zy50D3WTEc2JrGZWD2haOW2jA3TXXPPFnLUSNEB1BbaCRpGGIstjLAVbEhEV8Un-rUbzD0oUBA&r=1&s=f9c23292e6dc16e95ac78b4cba7645128805647e19fd96fae18da060406db6751669861508&w=t HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbbnr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: text/plain; charset=utf-8
content-length: 35
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=0&source=1978492486&idzone=3830823&w=300&h=100&mo=&ve=&site_id=3302&utm1=tcban_i&utm2=3302&utm3=15714&utm4=&ad_tags=shemale&spot_id=0&p=https%3A%2F%2Fshemalepower.xyz%2F&katds_labels=&btype=0&score=1&bf=0.0001
109.206.175.85302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=0&source=1978492486&idzone=3830823&w=300&h=100&mo=&ve=&site_id=3302&utm1=tcban_i&utm2=3302&utm3=15714&utm4=&ad_tags=shemale&spot_id=0&p=https%3A%2F%2Fshemalepower.xyz%2F&katds_labels=&btype=0&score=1&bf=0.0001
IP 109.206.175.85:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=0&source=1978492486&idzone=3830823&w=300&h=100&mo=&ve=&site_id=3302&utm1=tcban_i&utm2=3302&utm3=15714&utm4=&ad_tags=shemale&spot_id=0&p=https%3A%2F%2Fshemalepower.xyz%2F&katds_labels=&btype=0&score=1&bf=0.0001 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbbnr.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.20.1
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://tsyndicate.com/iframes2/ecaaabf53036409d9c39b44bec79a69d.html?subid=1978492486&categories=shemale
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 912.0=1; expires=Fri, 02 Dec 2022 02:25:08 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
136ffb81df.df253f3b96.com/7e585fc69b6211d91e6b0ff2ed823070.js
45.133.44.25200 OK 73 kB URL HTTP/2 136ffb81df.df253f3b96.com/7e585fc69b6211d91e6b0ff2ed823070.js
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
Hash e73dadb5117b59de91b5dc8635c4d512
8bb3896094c76cfe32f640bc368e24f11ccdf703
bcc1e9d06b3f9fc3a2851aceae309c1257e4b01b5472b208264181cb3d8979fa
Analyzer Verdict Alert quad9 Sinkholed
GET /7e585fc69b6211d91e6b0ff2ed823070.js HTTP/1.1
Host: 136ffb81df.df253f3b96.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 22 Nov 2022 16:27:58 GMT
etag: W/"637cf88e-48777"
content-encoding: gzip
expires: Thu, 01 Dec 2022 02:30:08 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=0&source=1892058555&idzone=3830821&w=728&h=90&mo=&ve=&site_id=3304&utm1=tcban_i&utm2=3304&utm3=15714&utm4=&ad_tags=shemale&spot_id=0&p=https%3A%2F%2Fshemalepower.xyz%2F&katds_labels=&btype=0&score=1&bf=0.0001
109.206.175.85302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=0&source=1892058555&idzone=3830821&w=728&h=90&mo=&ve=&site_id=3304&utm1=tcban_i&utm2=3304&utm3=15714&utm4=&ad_tags=shemale&spot_id=0&p=https%3A%2F%2Fshemalepower.xyz%2F&katds_labels=&btype=0&score=1&bf=0.0001
IP 109.206.175.85:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=0&source=1892058555&idzone=3830821&w=728&h=90&mo=&ve=&site_id=3304&utm1=tcban_i&utm2=3304&utm3=15714&utm4=&ad_tags=shemale&spot_id=0&p=https%3A%2F%2Fshemalepower.xyz%2F&katds_labels=&btype=0&score=1&bf=0.0001 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbbnr.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.20.1
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://12007250.pix-cdn.org/a/pjexo.html?idzone=3830821&w=728&h=90&ad_sub=&ad_tags=shemale
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: *
set-cookie: 912.0=1; expires=Fri, 02 Dec 2022 02:25:08 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash a73ddb6f413f7263baed5ab3f2476e29
44ae9e333e7d9eb83374fe020412a1cb429886e1
88aab5ab343673a5c0deae54df8b54b505878559af7d4eb916901d13e29f796e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 02:25:08 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 03:56:20 GMT
Expires: Wed, 07 Dec 2022 03:56:19 GMT
Etag: "44ae9e333e7d9eb83374fe020412a1cb429886e1"
Cache-Control: max-age=523270,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77285edb0babb4f9-OSL
rtbbnr.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InNwb3QiOjUyMjUsImlkIjo4NTksImxhYmVscyI6IiIsInNpdGVfaWQiOjUyMjUsInR5cGUiOiJiYW5uZXIiLCJzcGFjZWlkIjo4NTksInNwb3RfaWQiOjAsImlkem9uZSI6MzgzMDgxOSwiem9uZSI6InRjX3BhYl8zMDB4MjUwIiwiYWRfdGFncyI6InNoZW1hbGUiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMjEwNTkyMjQxMCIsInV0bTEiOiJ0Y2Jhbl9pIiwidXRtMiI6IjUyMjUiLCJ1dG0zIjoiMTU3MTQiLCJ1dG00IjoiIn0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH19XSwic2l0ZSI6eyJpZCI6IjUyMjUiLCJwYWdlIjoiaHR0cHM6Ly9zaGVtYWxlcG93ZXIueHl6LyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiJkYjliY2I0ZmM3ZGVkNzlmMmRjYzdhZmU5Y2U1MDE1MSJ9LCJleHQiOnsiZHQiOjE2Njk4NjE1MDY1NjZ9fQ==
162.55.139.130200 OK 21 kB URL HTTP/2 rtbbnr.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InNwb3QiOjUyMjUsImlkIjo4NTksImxhYmVscyI6IiIsInNpdGVfaWQiOjUyMjUsInR5cGUiOiJiYW5uZXIiLCJzcGFjZWlkIjo4NTksInNwb3RfaWQiOjAsImlkem9uZSI6MzgzMDgxOSwiem9uZSI6InRjX3BhYl8zMDB4MjUwIiwiYWRfdGFncyI6InNoZW1hbGUiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMjEwNTkyMjQxMCIsInV0bTEiOiJ0Y2Jhbl9pIiwidXRtMiI6IjUyMjUiLCJ1dG0zIjoiMTU3MTQiLCJ1dG00IjoiIn0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH19XSwic2l0ZSI6eyJpZCI6IjUyMjUiLCJwYWdlIjoiaHR0cHM6Ly9zaGVtYWxlcG93ZXIueHl6LyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiJkYjliY2I0ZmM3ZGVkNzlmMmRjYzdhZmU5Y2U1MDE1MSJ9LCJleHQiOnsiZHQiOjE2Njk4NjE1MDY1NjZ9fQ==
IP 162.55.139.130:0
ASN #24940 Hetzner Online GmbH
Hash 0cdc7a157722e7007bd9767d1b366993
970b99b892d0e9127214b925f82864add1777136
4769c3e4a5cb78cdb652ed6db9a1927c4f88e1afec44bc8a0c9c18d4b6ee6418
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbbnr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.shukriya90.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.16.0
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=0&source=1978492486&idzone=3830823&w=300&h=100&mo=&ve=&site_id=3302&utm1=tcban_i&utm2=3302&utm3=15714&utm4=&ad_tags=shemale&spot_id=0&p=https%3A%2F%2Fshemalepower.xyz%2F&katds_labels=&btype=0&score=1&bf=0.0001
109.206.175.85302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=0&source=1978492486&idzone=3830823&w=300&h=100&mo=&ve=&site_id=3302&utm1=tcban_i&utm2=3302&utm3=15714&utm4=&ad_tags=shemale&spot_id=0&p=https%3A%2F%2Fshemalepower.xyz%2F&katds_labels=&btype=0&score=1&bf=0.0001
IP 109.206.175.85:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=0&source=1978492486&idzone=3830823&w=300&h=100&mo=&ve=&site_id=3302&utm1=tcban_i&utm2=3302&utm3=15714&utm4=&ad_tags=shemale&spot_id=0&p=https%3A%2F%2Fshemalepower.xyz%2F&katds_labels=&btype=0&score=1&bf=0.0001 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbbnr.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://tsyndicate.com/iframes2/ecaaabf53036409d9c39b44bec79a69d.html?subid=1978492486&categories=shemale
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 912.0=1; expires=Fri, 02 Dec 2022 02:25:08 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
preroll.hostave3.net/notifications/zeropixel.png
104.21.235.4200 OK 42 B URL HTTP/2 preroll.hostave3.net/notifications/zeropixel.png
IP 104.21.235.4:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /notifications/zeropixel.png HTTP/1.1
Host: preroll.hostave3.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbbnr.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: image/png
content-length: 42
last-modified: Tue, 11 Sep 2018 08:40:52 GMT
etag: "5b977f94-2a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 103093
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LNL827QY2iBQhL%2BsaiijxRQZWucRw%2F8bBPhYZfQAWz3s0v53Y3paZRcTAVlpJb4ojvIykMDp%2Blg0lOBKnRaMnlhqo50Ybm7VSH%2FIoshzYBs1siGVj46OfDKHv7MinIRAMSNB%2FhFwrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 77285edb5dffdd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=6181
157.90.84.242200 OK 28 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=6181
IP 157.90.84.242:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text
Hash e3af49472d683a217237a6ebaf79bcb7
378db4d7e6171a2676ee15c80b4475d7f5ec9742
7714898d715fb8b1ce7a1de73e0e7c9f6394acc8a08cf1a3b342a7829d4de84a
POST /fp?tag_id=6181 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Content-Type: application/json;charset=utf-8
Content-Length: 22286
Origin: https://shemalepower.xyz
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Thu, 01 Dec 2022 02:25:08 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 28
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://shemalepower.xyz
Set-Cookie: id=5243531735326434542; Expires=Fri, 01 Dec 2023 02:25:08 GMT; Secure; SameSite=None
Vary: Origin
js.wpshsdk.com/npc/sdk/wp-banners.js
45.133.44.24200 OK 0 B URL HTTP/2 js.wpshsdk.com/npc/sdk/wp-banners.js
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npc/sdk/wp-banners.js HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 20 Aug 2021 15:14:31 GMT
etag: "611fc6d7-0"
expires: Thu, 01 Dec 2022 02:30:08 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 0a73a19d8f08bd17bd0b011ac7f15d6e
8ba53663d0127879fa0f45846467e19545d80468
1c569310901fd0ba5c824668abcca80b3f246a6115bc799377063e0af6e359d0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5541
Cache-Control: max-age=96971
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 02:25:08 GMT
Etag: "6386d2aa-117"
Expires: Fri, 02 Dec 2022 05:21:19 GMT
Last-Modified: Wed, 30 Nov 2022 03:48:58 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 6fb3a76ac3d68d6b8195982cacd16fee
eb04c82eb2125fa88de3ad81891e0c209aa47962
ceacedde2e5f37f4ca4216cbcf542afea8031e909a294fb4ab9298b4b30b3ce2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEACEDDE2E5F37F4CA4216CBCF542AFEA8031E909A294FB4AB9298B4B30B3CE2"
Last-Modified: Mon, 28 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9187
Expires: Thu, 01 Dec 2022 04:58:15 GMT
Date: Thu, 01 Dec 2022 02:25:08 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash bdf5933824aa784c4afb0afe61b828ca
7e618bdfe3516704e9daeb2e77920ebc8666989e
5f2c265da9229f312ae800ff148b0173dcc8109c4c310aee228960c5a9015007
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5F2C265DA9229F312AE800FF148B0173DCC8109C4C310AEE228960C5A9015007"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11622
Expires: Thu, 01 Dec 2022 05:38:50 GMT
Date: Thu, 01 Dec 2022 02:25:08 GMT
Connection: keep-alive
82f7858b81.bac23cfb5b.com/in/track?data=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
45.133.44.24200 OK 0 B URL HTTP/2 82f7858b81.bac23cfb5b.com/in/track?data=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
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/track?data=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 HTTP/1.1
Host: 82f7858b81.bac23cfb5b.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Origin: https://shemalepower.xyz
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 02:25:08 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 2d2602144287f1786e520e775309f12b
db0e67d0a2c9787fb5796a3492c67c6df09b1c39
bc22c9a283c1dfe2b155df39c0fe4538cbb615d5187822c2ee77a3aaf0275d50
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BC22C9A283C1DFE2B155DF39C0FE4538CBB615D5187822C2EE77A3AAF0275D50"
Last-Modified: Mon, 28 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1569
Expires: Thu, 01 Dec 2022 02:51:17 GMT
Date: Thu, 01 Dec 2022 02:25:08 GMT
Connection: keep-alive
nereserv.com/in/dip?site=native-push&wl=1&event_id=1599477c-fd7e-4324-9b4f-5b143785baa0&subid=689091694&sid=1817819908&spot_id=5990&created_at=2022-12-01&timezone=0&ver=8.5.1&is_native=1
157.90.84.246200 OK 0 B URL HTTP/2 nereserv.com/in/dip?site=native-push&wl=1&event_id=1599477c-fd7e-4324-9b4f-5b143785baa0&subid=689091694&sid=1817819908&spot_id=5990&created_at=2022-12-01&timezone=0&ver=8.5.1&is_native=1
IP 157.90.84.246:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?site=native-push&wl=1&event_id=1599477c-fd7e-4324-9b4f-5b143785baa0&subid=689091694&sid=1817819908&spot_id=5990&created_at=2022-12-01&timezone=0&ver=8.5.1&is_native=1 HTTP/1.1
Host: nereserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Origin: https://shemalepower.xyz
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 01 Dec 2022 02:25:08 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
8.247.218.249200 OK 2.8 kB URL HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP 8.247.218.249:0
File type ASCII text, with very long lines (2590)
Hash 01c3ce239d639853ba1e41661c115938
704741ca41e890a26eef6190c2d61131ff294f56
9aabcddb7b91826c4b8bf721d77fa448ceba501616a38c6fe0d6c4f11091ed47
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=d0b93111-8bed-4791-98c1-e388fab09262; bfq=APeIECNCxxYZN2zQUHijCwsRYwpuieFQRBmJMWzYyJGDxo0cMHB06aMg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: application/javascript
content-length: 2808
last-modified: Tue, 22 Feb 2022 13:07:15 GMT
server: nginx
x-robots-tag: noindex, nofollow
content-encoding: gzip
vary: Accept-Encoding
etag: W/"6214e003-1eb1"
age: 23127245
accept-ranges: bytes
X-Firefox-Spdy: h2
02f3427bf4.bac23cfb5b.com/in/multy
157.90.84.246204 No Content 0 B URL HTTP/2 02f3427bf4.bac23cfb5b.com/in/multy
IP 157.90.84.246:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /in/multy HTTP/1.1
Host: 02f3427bf4.bac23cfb5b.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://shemalepower.xyz/
Origin: https://shemalepower.xyz
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.20.1
date: Thu, 01 Dec 2022 02:25:08 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
8.247.218.249304 Not Modified 0 B URL HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP 8.247.218.249:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=abf4e925-1631-43a8-b32f-5e14177868a2; bfq=APeIECNCxxYZN2zQUHijCwsRYwpuieFQRBmJMWzYyJGDxo0cMHB06aMg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
If-Modified-Since: Tue, 22 Feb 2022 13:07:15 GMT
If-None-Match: W/"6214e003-1eb1"
TE: trailers
HTTP/2 304 Not Modified
date: Thu, 01 Dec 2022 02:25:08 GMT
last-modified: Tue, 22 Feb 2022 13:07:15 GMT
server: nginx
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6214e003-1eb1"
age: 23127245
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 312 B IP 93.184.220.29:0
Hash d4aa277253ea077cf3b0d5dd1f8b0a98
33668eeb9f91990c406b9f4b6220f8dea655fcdd
96e73d8098f4e9e1525d06c53072ee02a6a0a7be7d7307323e1318aa1bd84b9b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6492
Cache-Control: max-age=145448
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 02:25:08 GMT
Etag: "63878c51-138"
Expires: Fri, 02 Dec 2022 18:49:16 GMT
Last-Modified: Wed, 30 Nov 2022 17:01:05 GMT
Server: ECS (amb/6BA5)
X-Cache: HIT
Content-Length: 312
syndication.realsrv.com/ads-iframe-display.php?idzone=3830821&type=728x90&p=https%3A//rtbbnr.com/&dt=1669861507271&sub=&tags=shemale&cookieconsent=true&screen_resolution=1280x1024&el=%22
95.211.229.246200 OK 52 B URL HTTP/1.1 syndication.realsrv.com/ads-iframe-display.php?idzone=3830821&type=728x90&p=https%3A//rtbbnr.com/&dt=1669861507271&sub=&tags=shemale&cookieconsent=true&screen_resolution=1280x1024&el=%22
IP 95.211.229.246:0
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document, ASCII text, with no line terminators
Hash c3743cf5e9e53705dc66056f1a34f6ec
740253d7fe753ab9b7d71e1832fd1af41c0677c1
c184a4ce5928e23f286176d3c76a8d5c12c67a8957554c92fb144b1cdd2fb17c
GET /ads-iframe-display.php?idzone=3830821&type=728x90&p=https%3A//rtbbnr.com/&dt=1669861507271&sub=&tags=shemale&cookieconsent=true&screen_resolution=1280x1024&el=%22 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://12007250.pix-cdn.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:25:08 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%2263881084a5a721.85114434868002154%22%3B%7D; expires=Sat, 30 Nov 2024 02:25:08 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
tsyndicate.com/iframes2/ecaaabf53036409d9c39b44bec79a69d.html?subid=1978492486&categories=shemale
136.243.83.47200 OK 19 kB URL HTTP/2 tsyndicate.com/iframes2/ecaaabf53036409d9c39b44bec79a69d.html?subid=1978492486&categories=shemale
IP 136.243.83.47:0
ASN #24940 Hetzner Online GmbH
Hash afa26c0f9378fb8bce47cd0195e2ca3b
6ee2853f23cd7a6c9624873f3997537d8d301b56
a81afa9818c4a21ebfa844662c3a11a2e13c84d4d6649ab0d2244e40636197ae
GET /iframes2/ecaaabf53036409d9c39b44bec79a69d.html?subid=1978492486&categories=shemale HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbbnr.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: 57dbd9e05bc09c5a
set-cookie: ts_uid=d0b93111-8bed-4791-98c1-e388fab09262; expires=Thu, 01 Jun 2023 02:25:08 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCxxYZN2zQUHijCwsRYwpuieFQRBmJMWzYyJGDxo0cMHB06aMg; expires=Fri, 02 Dec 2022 02:25:08 GMT; domain=.tsyndicate.com; path=/; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
hw-cdn2.ang-content.com/delivery/vortex/vortex-simple-1.0.0.js
205.185.208.20200 OK 5.0 kB URL HTTP/1.1 hw-cdn2.ang-content.com/delivery/vortex/vortex-simple-1.0.0.js
IP 205.185.208.20:0
File type ASCII text, with very long lines (5027), with no line terminators
Hash 5e5817bcf4c82c7c85d1d88636d221ce
b5c32cc6c931c33c1297884016e13d3b9a5bf261
6f0e50ac39121175ca0427c4e87cdfa2520b526c8497e23cffbca726eb6ca42c
GET /delivery/vortex/vortex-simple-1.0.0.js HTTP/1.1
Host: hw-cdn2.ang-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.adtng.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 02:25:08 GMT
Connection: Keep-Alive
ETag: "1541168231"
Content-Length: 5027
Content-Type: application/javascript
Last-Modified: Fri, 02 Nov 2018 14:17:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10684204
X-HW: 1669861508.dop014.sk1.t,1669861508.cds259.sk1.shn,1669861508.dop014.sk1.t,1669861508.cds068.sk1.c
Access-Control-Allow-Origin: *
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10577
Expires: Thu, 01 Dec 2022 05:21:25 GMT
Date: Thu, 01 Dec 2022 02:25:08 GMT
Connection: keep-alive
a.adtng.com/get/10006719?time=1592491732319&atc=416774&apb=QYU5QnAcpIY5TcSif8Ik7FCc0cfsJdTSNXXShtrCxPE35eWRLnpYDCxKOybLQ9Ua2zBialnx6MtdhcxWeRv8JwP8aHGzzgIe1TRK4lbu-n12_gUIDRUi
66.254.114.171200 OK 9.4 kB URL HTTP/2 a.adtng.com/get/10006719?time=1592491732319&atc=416774&apb=QYU5QnAcpIY5TcSif8Ik7FCc0cfsJdTSNXXShtrCxPE35eWRLnpYDCxKOybLQ9Ua2zBialnx6MtdhcxWeRv8JwP8aHGzzgIe1TRK4lbu-n12_gUIDRUi
IP 66.254.114.171:0
Hash eba40b2a65636d81b4de82d5f99cd1ac
138b11e2c8459fb4294ef7206c060d56aaf75202
9869ea9c004eec97d154a8d821b0e88bfe6e6769e3f462432a3cbbf0057a912e
GET /get/10006719?time=1592491732319&atc=416774&apb=QYU5QnAcpIY5TcSif8Ik7FCc0cfsJdTSNXXShtrCxPE35eWRLnpYDCxKOybLQ9Ua2zBialnx6MtdhcxWeRv8JwP8aHGzzgIe1TRK4lbu-n12_gUIDRUi HTTP/1.1
Host: a.adtng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: text/html
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
content-encoding: gzip
set-cookie: adtool_guid=Ch5KAmOIEIS/xRBq93J5Ag==; expires=Thu, 31-Dec-37 23:55:55 GMT; path=/; Secure; HTTPOnly; SameSite=None;
RNLBSERVERID=ded6973; path=/; HttpOnly; Secure; SameSite=None
x-request-id: 63881084-42FE72AB01BBAC01-E29F99
X-Firefox-Spdy: h2
hw-cdn2.ang-content.com/a7/creatives/57/604/813999/1024255/1024255_logo.png
205.185.208.20200 OK 4.1 kB URL HTTP/1.1 hw-cdn2.ang-content.com/a7/creatives/57/604/813999/1024255/1024255_logo.png
IP 205.185.208.20:0
File type PNG image data, 300 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash c466c80aae818c940065da55ca1504ba
e8e9bda853cb3df618af33029a9ef838040131af
30df810b6641fde312569c78244d3add404ed604236d6ec8e622e6765c8f80bc
GET /a7/creatives/57/604/813999/1024255/1024255_logo.png HTTP/1.1
Host: hw-cdn2.ang-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.adtng.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 02:25:08 GMT
Connection: Keep-Alive
ETag: "1645108050"
Content-Length: 4147
Content-Type: image/png
Last-Modified: Thu, 17 Feb 2022 14:27:30 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10679573
X-HW: 1669861508.dop213.sk1.t,1669861508.cds009.sk1.shn,1669861508.dop213.sk1.t,1669861508.cds248.sk1.c
Access-Control-Allow-Origin: *
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10577
Expires: Thu, 01 Dec 2022 05:21:25 GMT
Date: Thu, 01 Dec 2022 02:25:08 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10577
Expires: Thu, 01 Dec 2022 05:21:25 GMT
Date: Thu, 01 Dec 2022 02:25:08 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10577
Expires: Thu, 01 Dec 2022 05:21:25 GMT
Date: Thu, 01 Dec 2022 02:25:08 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg
34.120.237.76200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e1e6b6ba4f82221b41c3d9129008c76d
2f9532d698b4c28df23e18bbb66399ec776d5b9f
218c6f41a16e6087c611d4db5784a7cc1d027084d0bf2bd6dc3843ee5dfd560f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9459
x-amzn-requestid: 9e243a73-18ff-4abf-9b9c-442719960125
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMpppFXjoAMFehg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bca3-47620f39181264772d2fb52d;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:13:40 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: _v5hatZyEWVRB4Tebygbb-QfE02oaFxE8CRfQsUY7I_ektxE3YeIpw==
via: 1.1 deaaf0548506de20925615eb51a7ea7e.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 17:08:01 GMT
age: 33427
etag: "2f9532d698b4c28df23e18bbb66399ec776d5b9f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 26d6dffbf400da4803a2e76e2a8ef2f8
2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8
04c6e31623fe48cbe83dc91635bfa47b337590f18919995b08d5bde27e929e03
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8740
x-amzn-requestid: c6c3e3dc-c9a2-4fda-a83b-cdd6ae81166b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7uyE9CoAMF6Xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830cc4-2c8940405044071a082ee678;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qykE_oaoqqPTgqGnfUo74mH29IOS97b5sZb_3VmB9yW7KUiJ1a7dnA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 18:58:06 GMT
age: 26822
etag: "2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
a.adtng.com/get/10006719?time=1592491732319&atc=416774&apb=BjFIQrtkZTs2SLPQ8pLsM_7Ogol_NKzsCJWPOLzmwPyBAo8FtcsKXCvlUdJbQyi6FKyaMh4JaLQukR4UmzFbwJmIALG9xiMu61l8758biA0H_gUIDRUi
66.254.114.171200 OK 13 kB URL HTTP/2 a.adtng.com/get/10006719?time=1592491732319&atc=416774&apb=BjFIQrtkZTs2SLPQ8pLsM_7Ogol_NKzsCJWPOLzmwPyBAo8FtcsKXCvlUdJbQyi6FKyaMh4JaLQukR4UmzFbwJmIALG9xiMu61l8758biA0H_gUIDRUi
IP 66.254.114.171:0
Hash 775cf0f023a0c0ee632572d7ba71ec39
d16d211a7d91753ca10d8910aea8aa000b6a5bb7
e0e88e4da518069c46f1b88fea9a5ae64bca78696c0fcb43fabcb801d07dc9ca
GET /get/10006719?time=1592491732319&atc=416774&apb=BjFIQrtkZTs2SLPQ8pLsM_7Ogol_NKzsCJWPOLzmwPyBAo8FtcsKXCvlUdJbQyi6FKyaMh4JaLQukR4UmzFbwJmIALG9xiMu61l8758biA0H_gUIDRUi HTTP/1.1
Host: a.adtng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: text/html
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
content-encoding: gzip
set-cookie: adtool_guid=Ch5KHmOIEISfxytgrxnnAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; path=/; Secure; HTTPOnly; SameSite=None;
RNLBSERVERID=ded7078; path=/; HttpOnly; Secure; SameSite=None
x-request-id: 63881084-42FE72AB01BBAC01-E29F9A
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc551f651-39d0-4021-90ed-915a79168ea0.jpeg
34.120.237.76200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc551f651-39d0-4021-90ed-915a79168ea0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b8802d5080eb35e4052ef31cf7658650
1e78566f2e69268c5f753fb49112ab07aae3eccf
9c96906ee1dea353198c9069fa7e42b100e4fa766e5be8e4d8db036033961086
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc551f651-39d0-4021-90ed-915a79168ea0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4409
x-amzn-requestid: cb422842-e955-4749-8b2a-3c028a09c20f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbz7XEE2IAMFY3A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cd15-3c4d1a6d4d542e81179ea8ba;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:37:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: zYLCQ4DUQtMklG-T-ATot22PDIUMjnN1wpVkoHBh4Oa3TAyNzTv86g==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:49:45 GMT
age: 16524
etag: "1e78566f2e69268c5f753fb49112ab07aae3eccf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg
34.120.237.76200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ffd12f9c423ffc627d9e3b3145944fe4
5cf9a7a784952e1bb0cbe499104f1774b1269d08
a25f1b752d9af599aefd73073c105853130f1759905269de3d582d2eb35fe167
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16038
x-amzn-requestid: 925134ee-dd35-45ed-8da7-d60c9c484993
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbz80EHboAMFtmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cd1e-48de287757e82632291365ee;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:37:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: I8qQQUMSVzFmXqjWM1n_F1XEE-ZQcpEF81OwJgf9i3Q5M8XiFAa8Zg==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:52:00 GMT
age: 16389
etag: "5cf9a7a784952e1bb0cbe499104f1774b1269d08"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac125ad4-8001-4f7b-a27e-5f3c4f979358.png
34.120.237.76200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac125ad4-8001-4f7b-a27e-5f3c4f979358.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 83e8a8c500dbcb636ad4a57a10de8adf
4593bb86a0a61eccab43063cb3c0c797abea5b46
fd9bc5cfa9db9999ceba780a3c801663ae3a9d115fc968f633800da2a680d49c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac125ad4-8001-4f7b-a27e-5f3c4f979358.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6036
x-amzn-requestid: ad1d9f29-4a4b-4b5f-b29f-d2e5849b5c1e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbzMQGoSoAMFUnQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cbe7-40e8de13537ad17b3b28e1c1;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:32:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7EqSYILMuuXaZkdkEPxROiSw3HU1zfjqpXDU4TqBGLdNSWyj4Ioezw==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:46:29 GMT
age: 16720
etag: "4593bb86a0a61eccab43063cb3c0c797abea5b46"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
hw-cdn2.ang-content.com/a7/creatives/57/604/813999/1024255/1024255_video.mp4
205.185.208.20206 Partial Content 384 kB URL HTTP/1.1 hw-cdn2.ang-content.com/a7/creatives/57/604/813999/1024255/1024255_video.mp4
IP 205.185.208.20:0
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 384 kB (383730 bytes)
Hash be365035366931bfbd05467dfbd93ab5
07f9e9853c0030a3b56b69dc1d6be094194ba444
8c939047e39e0bf8f537b81ab1933624d3cf67e6b496ce77c20af8fa35b50431
GET /a7/creatives/57/604/813999/1024255/1024255_video.mp4 HTTP/1.1
Host: hw-cdn2.ang-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://a.adtng.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 206 Partial Content
Date: Thu, 01 Dec 2022 02:25:09 GMT
Connection: Keep-Alive
ETag: "1645108173"
Content-Length: 383730
Content-Range: bytes 0-383729/383730
Content-Type: video/mp4
Last-Modified: Thu, 17 Feb 2022 14:29:33 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10679573
X-HW: 1669861508.dop014.sk1.t,1669861508.cds259.sk1.shn,1669861509.dop014.sk1.t,1669861509.cds217.sk1.c
Access-Control-Allow-Origin: *
hw-cdn2.ang-content.com/a7/creatives/57/604/813999/1024255/1024255_video.mp4
205.185.208.20206 Partial Content 384 kB URL HTTP/1.1 hw-cdn2.ang-content.com/a7/creatives/57/604/813999/1024255/1024255_video.mp4
IP 205.185.208.20:0
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 384 kB (383730 bytes)
Hash be365035366931bfbd05467dfbd93ab5
07f9e9853c0030a3b56b69dc1d6be094194ba444
8c939047e39e0bf8f537b81ab1933624d3cf67e6b496ce77c20af8fa35b50431
GET /a7/creatives/57/604/813999/1024255/1024255_video.mp4 HTTP/1.1
Host: hw-cdn2.ang-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://a.adtng.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 206 Partial Content
Date: Thu, 01 Dec 2022 02:25:09 GMT
Connection: Keep-Alive
ETag: "1645108173"
Content-Length: 383730
Content-Range: bytes 0-383729/383730
Content-Type: video/mp4
Last-Modified: Thu, 17 Feb 2022 14:29:33 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10679573
X-HW: 1669861508.dop213.sk1.t,1669861508.cds009.sk1.shn,1669861509.dop213.sk1.t,1669861509.cds217.sk1.c
Access-Control-Allow-Origin: *
pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WIiXGjho0yMci0oCEGR5mRYmSEaREGh5kaI2mUEWODxpgbIcPAEPFwjpg0ZBTq2CIiRo4bOGjkkEEDhw0RXR6GqTMm48cZNsLkMEOjxRgxN2yMNJNDTIscY2y2gIGzRgwbOVrmsFGDJ0QydhbCtSHjIZw6YijKOCoVDhyKRnPM6Alnoo4ZYWNArihiTJvDOmi8vXGDhlQyZhbKuPFQjBs3osPSqElaRBs3GHWMxprD7-vYMTTHwPGwToyMaOjQgTNHx4sXYVwYpAPbxZg3bV6cKUPnRQwY2G3gzPGDTpo2ZXo0XKqU4wwZM4xyqYNdRlY6Y3po1t55ffuscMT0qENkCpQoOMTxhAxkQMGEDUk0gcQTZGQhlhxhaOEGDEgYMUQYROSwhh1lPOEEE3Tg8AUcZNwQhRlCKFFFEnQccUQdZczwRhRuaJFFEUW4sUQSTHzRAh5D2JCGGkPEgYQZYXxhgxFjGBHEGDKY8cQXc1nhhBxOHAHDHWuMAYVOXwTVxhdnrEiEFFWkYRccbVD00BtsuikCGdBlJAcdYpgmh3N1PjRGGI5tYUNUIsAhR1U6wOACdpSJEVqii8LgkAhy2IHZbr3VoaYOc8IghmIxhNoCDmKUIRINN-QQw1k4jLFqjDi4FIYYMCzFl11pYCaCqi7koCgNMrjQEA12yfFFrhnx6qsLwApbA7G9hZFRE2_okQYbbITxQg2LgoDCFWm4Qecdc4DgBBUgXLfoDiCA60ZN7OIBLwiVMiTpoimAcEQZY6zxxgsywHCdwAKDYEQacpRhxht4WHfvTn4iKoITT9j1hrFjSEyxXWxIXIQTdh1kxxcJs0FRDZzhgBUO2D0kxxmoyVYDDq2J_IUYciwU60M2t_EGGaI5RRkZcryx0GIivCGUZ4UWjUceCzGd8KMDCUeccS_cmacbez4XnV1zVGrnG3QAenELdbiRBh0t1BAsGa7KELLEB4UZt110tMmQDXAJXQMMvImQt9x7921DQ4C7RZlBJJcxBxxfAEoR3zn4DfhDZYwcBhsI0SHUFjPQQOisjs2p8FRsTORXxwvB4GdsMPShQEA%3D&s=edffa41bba6a6c7d155b549ee3cc611275538834318fd149c9a0ee405b9092b91669861508&w=t&r=1&d=517&priv=false
94.130.164.161200 OK 24 B URL HTTP/2 pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WIiXGjho0yMci0oCEGR5mRYmSEaREGh5kaI2mUEWODxpgbIcPAEPFwjpg0ZBTq2CIiRo4bOGjkkEEDhw0RXR6GqTMm48cZNsLkMEOjxRgxN2yMNJNDTIscY2y2gIGzRgwbOVrmsFGDJ0QydhbCtSHjIZw6YijKOCoVDhyKRnPM6Alnoo4ZYWNArihiTJvDOmi8vXGDhlQyZhbKuPFQjBs3osPSqElaRBs3GHWMxprD7-vYMTTHwPGwToyMaOjQgTNHx4sXYVwYpAPbxZg3bV6cKUPnRQwY2G3gzPGDTpo2ZXo0XKqU4wwZM4xyqYNdRlY6Y3po1t55ffuscMT0qENkCpQoOMTxhAxkQMGEDUk0gcQTZGQhlhxhaOEGDEgYMUQYROSwhh1lPOEEE3Tg8AUcZNwQhRlCKFFFEnQccUQdZczwRhRuaJFFEUW4sUQSTHzRAh5D2JCGGkPEgYQZYXxhgxFjGBHEGDKY8cQXc1nhhBxOHAHDHWuMAYVOXwTVxhdnrEiEFFWkYRccbVD00BtsuikCGdBlJAcdYpgmh3N1PjRGGI5tYUNUIsAhR1U6wOACdpSJEVqii8LgkAhy2IHZbr3VoaYOc8IghmIxhNoCDmKUIRINN-QQw1k4jLFqjDi4FIYYMCzFl11pYCaCqi7koCgNMrjQEA12yfFFrhnx6qsLwApbA7G9hZFRE2_okQYbbITxQg2LgoDCFWm4Qecdc4DgBBUgXLfoDiCA60ZN7OIBLwiVMiTpoimAcEQZY6zxxgsywHCdwAKDYEQacpRhxht4WHfvTn4iKoITT9j1hrFjSEyxXWxIXIQTdh1kxxcJs0FRDZzhgBUO2D0kxxmoyVYDDq2J_IUYciwU60M2t_EGGaI5RRkZcryx0GIivCGUZ4UWjUceCzGd8KMDCUeccS_cmacbez4XnV1zVGrnG3QAenELdbiRBh0t1BAsGa7KELLEB4UZt110tMmQDXAJXQMMvImQt9x7921DQ4C7RZlBJJcxBxxfAEoR3zn4DfhDZYwcBhsI0SHUFjPQQOisjs2p8FRsTORXxwvB4GdsMPShQEA%3D&s=edffa41bba6a6c7d155b549ee3cc611275538834318fd149c9a0ee405b9092b91669861508&w=t&r=1&d=517&priv=false
IP 94.130.164.161:0
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0959ba36d476b6dc1994ba3c678b07c4
d30b94da72daa02766965206a85b7e0356375f5e
897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WIiXGjho0yMci0oCEGR5mRYmSEaREGh5kaI2mUEWODxpgbIcPAEPFwjpg0ZBTq2CIiRo4bOGjkkEEDhw0RXR6GqTMm48cZNsLkMEOjxRgxN2yMNJNDTIscY2y2gIGzRgwbOVrmsFGDJ0QydhbCtSHjIZw6YijKOCoVDhyKRnPM6Alnoo4ZYWNArihiTJvDOmi8vXGDhlQyZhbKuPFQjBs3osPSqElaRBs3GHWMxprD7-vYMTTHwPGwToyMaOjQgTNHx4sXYVwYpAPbxZg3bV6cKUPnRQwY2G3gzPGDTpo2ZXo0XKqU4wwZM4xyqYNdRlY6Y3po1t55ffuscMT0qENkCpQoOMTxhAxkQMGEDUk0gcQTZGQhlhxhaOEGDEgYMUQYROSwhh1lPOEEE3Tg8AUcZNwQhRlCKFFFEnQccUQdZczwRhRuaJFFEUW4sUQSTHzRAh5D2JCGGkPEgYQZYXxhgxFjGBHEGDKY8cQXc1nhhBxOHAHDHWuMAYVOXwTVxhdnrEiEFFWkYRccbVD00BtsuikCGdBlJAcdYpgmh3N1PjRGGI5tYUNUIsAhR1U6wOACdpSJEVqii8LgkAhy2IHZbr3VoaYOc8IghmIxhNoCDmKUIRINN-QQw1k4jLFqjDi4FIYYMCzFl11pYCaCqi7koCgNMrjQEA12yfFFrhnx6qsLwApbA7G9hZFRE2_okQYbbITxQg2LgoDCFWm4Qecdc4DgBBUgXLfoDiCA60ZN7OIBLwiVMiTpoimAcEQZY6zxxgsywHCdwAKDYEQacpRhxht4WHfvTn4iKoITT9j1hrFjSEyxXWxIXIQTdh1kxxcJs0FRDZzhgBUO2D0kxxmoyVYDDq2J_IUYciwU60M2t_EGGaI5RRkZcryx0GIivCGUZ4UWjUceCzGd8KMDCUeccS_cmacbez4XnV1zVGrnG3QAenELdbiRBh0t1BAsGa7KELLEB4UZt110tMmQDXAJXQMMvImQt9x7921DQ4C7RZlBJJcxBxxfAEoR3zn4DfhDZYwcBhsI0SHUFjPQQOisjs2p8FRsTORXxwvB4GdsMPShQEA%3D&s=edffa41bba6a6c7d155b549ee3cc611275538834318fd149c9a0ee405b9092b91669861508&w=t&r=1&d=517&priv=false HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=abf4e925-1631-43a8-b32f-5e14177868a2; bfq=APeIECNCxxYZN2zQUHijCwsRYwpuieFQRBmJMWzYyJGDxo0cMHB06aMg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 02:25:09 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XECJPjRg4cY2q0qGGmBo0WNGiIKdMiDI0bMFqMsTEDx8cZNjbmMCPi4Rwxacgo1LFFY0ccNHLIoIHDhoguD8PUGZORxpgZMHDMCIlSTEOUY26wxGGGRswwNWo0tIEjDIySTqOSsbPQRg4bMh7CqSOGooyOUeHAoRgjR44ZPuFM1DHjRs7GFUWMaTNYB40YNm7coCGXpw4ZNx6KceNmIWgbNFCHFtHGDcbPN3Dm0Nv6dYzLMXA8rBMjIxo6dODM0fHiRRgXBum4djHmTZsXZ8rQeREDhvXMhX_QSdOmTI-GSpPGiC1jRmEudazLsBGGzpgelzNvRq-ePRwxPXIUiULjCpMiZFRRgxVuUPGFEXRUkUUUZ2gxBhF66HHGDXDEcYcWQywBRQtIZCHFEl_QEYMMZejhxBFFzIGDG2nJkAUeSWBxwxVyOJHFDHNgQccMabXlRh12kHHEHHlk8YUVY8ihVg5J2BHEE1q0kEUVUxCRwxFNWMEEDTM80QYOa3xxRhVJECFFFWn0JAIcbVD00BtsuikCGc5lJAcdYowmB3N1PjRGewttYQNUa8pBlQ4wuGBdZGJ4lqh1Dokghx2V5bZbHWnqAFGjNJShlEiYmYfSDGHg0IIYM8hgxkhl3DbeDU21JYOaaVQmQg4xuJBDojTI4EJDNKgpxxe1ZoSrrrz6CqyadYSRURNv6JEGG2yE8UINioKAwhVpuEHnHXOA4AQVIFSn6A4gcOsGaujiwS4IkzIEA7YwpADCEWWMscYbL8gAQ3X__guCEWnIUYYZb-BB3byKqjnGoSI48YSabwz7cEYSq8kGxEU4oeZBdnxhMBsU1aCZVmxZ95AcZ5T2WQ04rAbyF2LIsRAOus1ZRshtvEGGaU1FRoYcbyyEmAhvDMVZoQnnsdDSBns2EHDCEffCnXm6sWdzz6k5x6R2vkFHexW3UIcbadDRAk4ukDHGiB9DfNAXbsNtUZsM2WBX0DVkdfesee-dU984wBypQSKXMQccXwAa-EeD-y3Czo2zgRAdQ20xAw2EhiHGYjqbIRUbE-m18UIw-PkaDH0oEBA%3D&s=94bd01c9c17fd83483157063b5567605c4ec7dfde82095c4ca6b20e46f114a9b1669861508&w=t&r=1&d=460&priv=false
94.130.164.161200 OK 24 B URL HTTP/2 pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XECJPjRg4cY2q0qGGmBo0WNGiIKdMiDI0bMFqMsTEDx8cZNjbmMCPi4Rwxacgo1LFFY0ccNHLIoIHDhoguD8PUGZORxpgZMHDMCIlSTEOUY26wxGGGRswwNWo0tIEjDIySTqOSsbPQRg4bMh7CqSOGooyOUeHAoRgjR44ZPuFM1DHjRs7GFUWMaTNYB40YNm7coCGXpw4ZNx6KceNmIWgbNFCHFtHGDcbPN3Dm0Nv6dYzLMXA8rBMjIxo6dODM0fHiRRgXBum4djHmTZsXZ8rQeREDhvXMhX_QSdOmTI-GSpPGiC1jRmEudazLsBGGzpgelzNvRq-ePRwxPXIUiULjCpMiZFRRgxVuUPGFEXRUkUUUZ2gxBhF66HHGDXDEcYcWQywBRQtIZCHFEl_QEYMMZejhxBFFzIGDG2nJkAUeSWBxwxVyOJHFDHNgQccMabXlRh12kHHEHHlk8YUVY8ihVg5J2BHEE1q0kEUVUxCRwxFNWMEEDTM80QYOa3xxRhVJECFFFWn0JAIcbVD00BtsuikCGc5lJAcdYowmB3N1PjRGewttYQNUa8pBlQ4wuGBdZGJ4lqh1Dokghx2V5bZbHWnqAFGjNJShlEiYmYfSDGHg0IIYM8hgxkhl3DbeDU21JYOaaVQmQg4xuJBDojTI4EJDNKgpxxe1ZoSrrrz6CqyadYSRURNv6JEGG2yE8UINioKAwhVpuEHnHXOA4AQVIFSn6A4gcOsGaujiwS4IkzIEA7YwpADCEWWMscYbL8gAQ3X__guCEWnIUYYZb-BB3byKqjnGoSI48YSabwz7cEYSq8kGxEU4oeZBdnxhMBsU1aCZVmxZ95AcZ5T2WQ04rAbyF2LIsRAOus1ZRshtvEGGaU1FRoYcbyyEmAhvDMVZoQnnsdDSBns2EHDCEffCnXm6sWdzz6k5x6R2vkFHexW3UIcbadDRAk4ukDHGiB9DfNAXbsNtUZsM2WBX0DVkdfesee-dU984wBypQSKXMQccXwAa-EeD-y3Czo2zgRAdQ20xAw2EhiHGYjqbIRUbE-m18UIw-PkaDH0oEBA%3D&s=94bd01c9c17fd83483157063b5567605c4ec7dfde82095c4ca6b20e46f114a9b1669861508&w=t&r=1&d=460&priv=false
IP 94.130.164.161:0
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0959ba36d476b6dc1994ba3c678b07c4
d30b94da72daa02766965206a85b7e0356375f5e
897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XECJPjRg4cY2q0qGGmBo0WNGiIKdMiDI0bMFqMsTEDx8cZNjbmMCPi4Rwxacgo1LFFY0ccNHLIoIHDhoguD8PUGZORxpgZMHDMCIlSTEOUY26wxGGGRswwNWo0tIEjDIySTqOSsbPQRg4bMh7CqSOGooyOUeHAoRgjR44ZPuFM1DHjRs7GFUWMaTNYB40YNm7coCGXpw4ZNx6KceNmIWgbNFCHFtHGDcbPN3Dm0Nv6dYzLMXA8rBMjIxo6dODM0fHiRRgXBum4djHmTZsXZ8rQeREDhvXMhX_QSdOmTI-GSpPGiC1jRmEudazLsBGGzpgelzNvRq-ePRwxPXIUiULjCpMiZFRRgxVuUPGFEXRUkUUUZ2gxBhF66HHGDXDEcYcWQywBRQtIZCHFEl_QEYMMZejhxBFFzIGDG2nJkAUeSWBxwxVyOJHFDHNgQccMabXlRh12kHHEHHlk8YUVY8ihVg5J2BHEE1q0kEUVUxCRwxFNWMEEDTM80QYOa3xxRhVJECFFFWn0JAIcbVD00BtsuikCGc5lJAcdYowmB3N1PjRGewttYQNUa8pBlQ4wuGBdZGJ4lqh1Dokghx2V5bZbHWnqAFGjNJShlEiYmYfSDGHg0IIYM8hgxkhl3DbeDU21JYOaaVQmQg4xuJBDojTI4EJDNKgpxxe1ZoSrrrz6CqyadYSRURNv6JEGG2yE8UINioKAwhVpuEHnHXOA4AQVIFSn6A4gcOsGaujiwS4IkzIEA7YwpADCEWWMscYbL8gAQ3X__guCEWnIUYYZb-BB3byKqjnGoSI48YSabwz7cEYSq8kGxEU4oeZBdnxhMBsU1aCZVmxZ95AcZ5T2WQ04rAbyF2LIsRAOus1ZRshtvEGGaU1FRoYcbyyEmAhvDMVZoQnnsdDSBns2EHDCEffCnXm6sWdzz6k5x6R2vkFHexW3UIcbadDRAk4ukDHGiB9DfNAXbsNtUZsM2WBX0DVkdfesee-dU984wBypQSKXMQccXwAa-EeD-y3Czo2zgRAdQ20xAw2EhiHGYjqbIRUbE-m18UIw-PkaDH0oEBA%3D&s=94bd01c9c17fd83483157063b5567605c4ec7dfde82095c4ca6b20e46f114a9b1669861508&w=t&r=1&d=460&priv=false HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=abf4e925-1631-43a8-b32f-5e14177868a2; bfq=APeIECNCxxYZN2zQUHijCwsRYwpuieFQRBmJMWzYyJGDxo0cMHB06aMg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 02:25:09 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 220289d84f5c69b69a98ebf1262ee973
549c77a2bc9e012d7f61d1950c729064973a6ae3
6539b6217a38fa15acf28b504a2490e5e414163159573141e9300919ad6242fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6539B6217A38FA15ACF28B504A2490E5E414163159573141E9300919AD6242FD"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1290
Expires: Thu, 01 Dec 2022 02:46:39 GMT
Date: Thu, 01 Dec 2022 02:25:09 GMT
Connection: keep-alive
d.pssy.xyz/t.php
23.235.244.224200 OK 20 B IP 23.235.244.224:0
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /t.php HTTP/1.1
Host: d.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:25:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: guid=1ed91f40-ca1b-47c0-80c8-44cacadb2d90; expires=Fri, 01-Dec-2023 02:25:09 GMT; Max-Age=31536000; path=/; domain=pssy.xyz; secure; SameSite=None
Access-Control-Allow-Origin: *
Content-Encoding: gzip
ads.realsrv.com/ads.js
185.76.9.14200 OK 13 kB IP 185.76.9.14:0
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (2475), with no line terminators
Hash df5116b01b7835eafda30a47347c4d50
038395305863e453acba191237a3b110196364d8
ce9bff1fb74b10fcc373024a3c50fa130e96241b6b4686502dc2a78cce9ea0d7
GET /ads.js HTTP/1.1
Host: ads.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://12007250.pix-cdn.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: application/javascript
etag: W/"f4fddb85b686269b678e3caf766"
expires: Tue, 29 Nov 2022 13:18:12 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1669868348
server: CDN77-Turbo
x-77-nzt: AblMCQ03Da7/eA8AAA
x-77-nzt-ray: c0a4cc2854e3d40584108863558c9823
x-cache: HIT
x-age: 3960
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
02f3427bf4.bac23cfb5b.com/in/show/?mid=3403697039745720009&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=689091694&sid=1817819908&cid=11868&price=0.018233&is_cpm=0&cpm=0&ecpm=0.47627276673868785&crid=&crtid=797b6e15210af5b5ac8adb7c40138032&tcid=0&out_id=1&ver=8.5.1&ver_c=&refdom=shemalepower.xyz&hostname=auc-inpage-hz-0-c&site_id=315990&spot_id=5990&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2022-12-01&is_native=1&auction_queue=0&burl=hCgp8-MGzMLw4RzxCjkxwHXUjEtTBZ37mjWXu8Ro2TIHpwdHR14xbA&pop_winurl=&ip=91.90.42.154&testab=0&px_id=515990&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=lq&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.013485243537448949&placement_type_id=&skin_test=0&verify_hash=2f5f3a162701cc86e431a156726750c0&score=85.75887051292561&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D689091694%26spot_id%3D5990%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fshemalepower.xyz%252F%26idzone%3D0%26sid%3D1886&ml=&tag_ab=c&original_bid=0.018233&user_fp=0&v2_track=0&url=qw47eQFmeJEJwNWcMZ6RdN3amSsd1aTCnNymMHlg2L5-GMSnygRygkF-iMjWN0f3uZJUsFYFPj_RhLgGRE_qgRiC0zyyjHDM-Py78YKyVR1Oorr9VkDzkoR7tvNslyqcYMltKUn8NIVjZlzXKfhR&image_url=https%3A%2F%2Fclick.pclk.name%2Fthumbnail%3Fadid%3D543315%26i%3D2jAs3X95CY0_0&skin_id=2&vertical_id=15&real_bid=0.014896360999999999&pr=&user_keywords=&auc_type=1&aid=188&ext_cid=0&device_theme=light&keywords=Shemale,Adult&mlc=1&format=default-slide-b_r-body&mlf=1&cpa=b5eccc2b-f063-4356-8b6e-345ad6d60044
157.90.84.246302 Found 0 B URL HTTP/2 02f3427bf4.bac23cfb5b.com/in/show/?mid=3403697039745720009&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=689091694&sid=1817819908&cid=11868&price=0.018233&is_cpm=0&cpm=0&ecpm=0.47627276673868785&crid=&crtid=797b6e15210af5b5ac8adb7c40138032&tcid=0&out_id=1&ver=8.5.1&ver_c=&refdom=shemalepower.xyz&hostname=auc-inpage-hz-0-c&site_id=315990&spot_id=5990&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2022-12-01&is_native=1&auction_queue=0&burl=hCgp8-MGzMLw4RzxCjkxwHXUjEtTBZ37mjWXu8Ro2TIHpwdHR14xbA&pop_winurl=&ip=91.90.42.154&testab=0&px_id=515990&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=lq&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.013485243537448949&placement_type_id=&skin_test=0&verify_hash=2f5f3a162701cc86e431a156726750c0&score=85.75887051292561&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D689091694%26spot_id%3D5990%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fshemalepower.xyz%252F%26idzone%3D0%26sid%3D1886&ml=&tag_ab=c&original_bid=0.018233&user_fp=0&v2_track=0&url=qw47eQFmeJEJwNWcMZ6RdN3amSsd1aTCnNymMHlg2L5-GMSnygRygkF-iMjWN0f3uZJUsFYFPj_RhLgGRE_qgRiC0zyyjHDM-Py78YKyVR1Oorr9VkDzkoR7tvNslyqcYMltKUn8NIVjZlzXKfhR&image_url=https%3A%2F%2Fclick.pclk.name%2Fthumbnail%3Fadid%3D543315%26i%3D2jAs3X95CY0_0&skin_id=2&vertical_id=15&real_bid=0.014896360999999999&pr=&user_keywords=&auc_type=1&aid=188&ext_cid=0&device_theme=light&keywords=Shemale,Adult&mlc=1&format=default-slide-b_r-body&mlf=1&cpa=b5eccc2b-f063-4356-8b6e-345ad6d60044
IP 157.90.84.246:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?mid=3403697039745720009&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=689091694&sid=1817819908&cid=11868&price=0.018233&is_cpm=0&cpm=0&ecpm=0.47627276673868785&crid=&crtid=797b6e15210af5b5ac8adb7c40138032&tcid=0&out_id=1&ver=8.5.1&ver_c=&refdom=shemalepower.xyz&hostname=auc-inpage-hz-0-c&site_id=315990&spot_id=5990&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2022-12-01&is_native=1&auction_queue=0&burl=hCgp8-MGzMLw4RzxCjkxwHXUjEtTBZ37mjWXu8Ro2TIHpwdHR14xbA&pop_winurl=&ip=91.90.42.154&testab=0&px_id=515990&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=lq&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.013485243537448949&placement_type_id=&skin_test=0&verify_hash=2f5f3a162701cc86e431a156726750c0&score=85.75887051292561&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D689091694%26spot_id%3D5990%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fshemalepower.xyz%252F%26idzone%3D0%26sid%3D1886&ml=&tag_ab=c&original_bid=0.018233&user_fp=0&v2_track=0&url=qw47eQFmeJEJwNWcMZ6RdN3amSsd1aTCnNymMHlg2L5-GMSnygRygkF-iMjWN0f3uZJUsFYFPj_RhLgGRE_qgRiC0zyyjHDM-Py78YKyVR1Oorr9VkDzkoR7tvNslyqcYMltKUn8NIVjZlzXKfhR&image_url=https%3A%2F%2Fclick.pclk.name%2Fthumbnail%3Fadid%3D543315%26i%3D2jAs3X95CY0_0&skin_id=2&vertical_id=15&real_bid=0.014896360999999999&pr=&user_keywords=&auc_type=1&aid=188&ext_cid=0&device_theme=light&keywords=Shemale,Adult&mlc=1&format=default-slide-b_r-body&mlf=1&cpa=b5eccc2b-f063-4356-8b6e-345ad6d60044 HTTP/1.1
Host: 02f3427bf4.bac23cfb5b.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Thu, 01 Dec 2022 02:25:09 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://click.pclk.name/thumbnail?adid=543315&i=2jAs3X95CY0_0&imgt=icon
X-Firefox-Spdy: h2
02f3427bf4.bac23cfb5b.com/in/show/?mid=3403697039745720009&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=689091694&sid=1817819908&cid=13515&price=0.018215&is_cpm=0&cpm=0&ecpm=0.1800797402128811&crid=&crtid=17d43f81cc073548090aad9c92420bae&tcid=0&out_id=0&ver=8.5.1&ver_c=&refdom=shemalepower.xyz&hostname=auc-inpage-hz-0-c&site_id=315990&spot_id=5990&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2022-12-01&is_native=1&auction_queue=0&burl=_l3psglTEuGPm1PLpgRxfJWKZaPWHApWEZi32K8XlfSGUqatBv0iNA&pop_winurl=&ip=91.90.42.154&testab=0&px_id=315990&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=mq&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.004169835411149197&placement_type_id=&skin_test=0&verify_hash=b3b53496f0280b3a81387ad727ac886f&score=85.75887051292561&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D689091694%26spot_id%3D5990%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fshemalepower.xyz%252F%26idzone%3D0%26sid%3D1886&ml=&tag_ab=c&original_bid=0.018215&user_fp=0&v2_track=0&url=mtg6Ym2CHutzr0BTC2pcl-hx8qK29Ykx3Llzu6E1St3uygwLK3jhZR_2jPmj285Bqucnf9D-DWAe01Fz1q7v2hYO_wRNz-KXY1Z3pq2eaNAk_vgKOrUBJLeW4zqRtr6x7UU8UbECq3aQG2Sxa6ZM&image_url=https%3A%2F%2Fclick.pclk.name%2Fthumbnail%3Fadid%3D543315%26i%3DmqS-QltP8Ac_0&skin_id=2&vertical_id=15&real_bid=0.018215&pr=&user_keywords=&auc_type=1&aid=188&ext_cid=0&device_theme=light&keywords=Shemale,Adult&format=default-slide-b_r-body&cpa=1c9d7eba-2c4f-45c8-aa4d-69acb2e3bcec
157.90.84.246302 Found 0 B URL HTTP/2 02f3427bf4.bac23cfb5b.com/in/show/?mid=3403697039745720009&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=689091694&sid=1817819908&cid=13515&price=0.018215&is_cpm=0&cpm=0&ecpm=0.1800797402128811&crid=&crtid=17d43f81cc073548090aad9c92420bae&tcid=0&out_id=0&ver=8.5.1&ver_c=&refdom=shemalepower.xyz&hostname=auc-inpage-hz-0-c&site_id=315990&spot_id=5990&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2022-12-01&is_native=1&auction_queue=0&burl=_l3psglTEuGPm1PLpgRxfJWKZaPWHApWEZi32K8XlfSGUqatBv0iNA&pop_winurl=&ip=91.90.42.154&testab=0&px_id=315990&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=mq&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.004169835411149197&placement_type_id=&skin_test=0&verify_hash=b3b53496f0280b3a81387ad727ac886f&score=85.75887051292561&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D689091694%26spot_id%3D5990%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fshemalepower.xyz%252F%26idzone%3D0%26sid%3D1886&ml=&tag_ab=c&original_bid=0.018215&user_fp=0&v2_track=0&url=mtg6Ym2CHutzr0BTC2pcl-hx8qK29Ykx3Llzu6E1St3uygwLK3jhZR_2jPmj285Bqucnf9D-DWAe01Fz1q7v2hYO_wRNz-KXY1Z3pq2eaNAk_vgKOrUBJLeW4zqRtr6x7UU8UbECq3aQG2Sxa6ZM&image_url=https%3A%2F%2Fclick.pclk.name%2Fthumbnail%3Fadid%3D543315%26i%3DmqS-QltP8Ac_0&skin_id=2&vertical_id=15&real_bid=0.018215&pr=&user_keywords=&auc_type=1&aid=188&ext_cid=0&device_theme=light&keywords=Shemale,Adult&format=default-slide-b_r-body&cpa=1c9d7eba-2c4f-45c8-aa4d-69acb2e3bcec
IP 157.90.84.246:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?mid=3403697039745720009&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=689091694&sid=1817819908&cid=13515&price=0.018215&is_cpm=0&cpm=0&ecpm=0.1800797402128811&crid=&crtid=17d43f81cc073548090aad9c92420bae&tcid=0&out_id=0&ver=8.5.1&ver_c=&refdom=shemalepower.xyz&hostname=auc-inpage-hz-0-c&site_id=315990&spot_id=5990&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2022-12-01&is_native=1&auction_queue=0&burl=_l3psglTEuGPm1PLpgRxfJWKZaPWHApWEZi32K8XlfSGUqatBv0iNA&pop_winurl=&ip=91.90.42.154&testab=0&px_id=315990&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=mq&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.004169835411149197&placement_type_id=&skin_test=0&verify_hash=b3b53496f0280b3a81387ad727ac886f&score=85.75887051292561&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D689091694%26spot_id%3D5990%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fshemalepower.xyz%252F%26idzone%3D0%26sid%3D1886&ml=&tag_ab=c&original_bid=0.018215&user_fp=0&v2_track=0&url=mtg6Ym2CHutzr0BTC2pcl-hx8qK29Ykx3Llzu6E1St3uygwLK3jhZR_2jPmj285Bqucnf9D-DWAe01Fz1q7v2hYO_wRNz-KXY1Z3pq2eaNAk_vgKOrUBJLeW4zqRtr6x7UU8UbECq3aQG2Sxa6ZM&image_url=https%3A%2F%2Fclick.pclk.name%2Fthumbnail%3Fadid%3D543315%26i%3DmqS-QltP8Ac_0&skin_id=2&vertical_id=15&real_bid=0.018215&pr=&user_keywords=&auc_type=1&aid=188&ext_cid=0&device_theme=light&keywords=Shemale,Adult&format=default-slide-b_r-body&cpa=1c9d7eba-2c4f-45c8-aa4d-69acb2e3bcec HTTP/1.1
Host: 02f3427bf4.bac23cfb5b.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Thu, 01 Dec 2022 02:25:09 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://click.pclk.name/thumbnail?adid=543315&i=mqS-QltP8Ac_0&imgt=icon
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash e80d52e7ebc1ba8af49cb1a5523a64c0
63ccdceedc5ee9f17b57bbb8c16d9122d4c13838
8889d4d561486513dc685796a40d8f699171d5bd7adbc59ddc7a7890af5a4195
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 02:25:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 28 Nov 2022 04:24:03 GMT
Expires: Mon, 05 Dec 2022 04:24:02 GMT
Etag: "63ccdceedc5ee9f17b57bbb8c16d9122d4c13838"
Cache-Control: max-age=352131,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77285ee78e50b4fd-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash e80d52e7ebc1ba8af49cb1a5523a64c0
63ccdceedc5ee9f17b57bbb8c16d9122d4c13838
8889d4d561486513dc685796a40d8f699171d5bd7adbc59ddc7a7890af5a4195
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 02:25:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 28 Nov 2022 04:24:03 GMT
Expires: Mon, 05 Dec 2022 04:24:02 GMT
Etag: "63ccdceedc5ee9f17b57bbb8c16d9122d4c13838"
Cache-Control: max-age=352131,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77285ee768d9b4f9-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash e80d52e7ebc1ba8af49cb1a5523a64c0
63ccdceedc5ee9f17b57bbb8c16d9122d4c13838
8889d4d561486513dc685796a40d8f699171d5bd7adbc59ddc7a7890af5a4195
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 02:25:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 28 Nov 2022 04:24:03 GMT
Expires: Mon, 05 Dec 2022 04:24:02 GMT
Etag: "63ccdceedc5ee9f17b57bbb8c16d9122d4c13838"
Cache-Control: max-age=352131,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77285ee78eeab511-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash e80d52e7ebc1ba8af49cb1a5523a64c0
63ccdceedc5ee9f17b57bbb8c16d9122d4c13838
8889d4d561486513dc685796a40d8f699171d5bd7adbc59ddc7a7890af5a4195
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 02:25:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 28 Nov 2022 04:24:03 GMT
Expires: Mon, 05 Dec 2022 04:24:02 GMT
Etag: "63ccdceedc5ee9f17b57bbb8c16d9122d4c13838"
Cache-Control: max-age=352131,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77285ee7893d0b49-OSL
click.pclk.name/thumbnail?adid=543315&i=mqS-QltP8Ac_0
173.239.53.24302 Found 0 B URL HTTP/1.1 click.pclk.name/thumbnail?adid=543315&i=mqS-QltP8Ac_0
IP 173.239.53.24:0
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?adid=543315&i=mqS-QltP8Ac_0 HTTP/1.1
Host: click.pclk.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 01 Dec 2022 02:25:10 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Age: 0
Location: https://us.othis.co/metrics/save.img?event=tracked_impressions&bid-id=v2-1669861508769-7-8932-1178228-2420f538-5ef7-5aa5-f284-b4736c551706&price=0&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fim%3Fauth%3Dpz6u78%26c%3DcqoibXp5sUF-y7r8mPwrN8aJUyxsdB3gRi2V6n2TBmqULJI9bzzf16W3RPH19MGpoh73Rcp04GE1sdpxzenwBWZ9-KV0czbrdk5PpMJaOTnLsNyZt1ZAyj37nvxisc7OSPBEqRQV2AYWj6xtT-sxojgZYRzxHZxOhqexVL2hStXPiwKRC0Al48dm27zPVkUCcBaisXP_76Ywe5dzOMG53iWpRDyCFy2-vwXItx6YiPJS3y3Fa-K5IM4Q-agEOAgAj16C-rn-UVoHD3OsC6Jzk9wnRdc52D6JidoxdacODDl0Qg-LOMe1CIgDzdOY2eAS5-QcFS1Ub36v8ZqE8xoDPEFlMznHDgEsHQZOfyYTIOFCakyuZwtNwPNeuVOGRszHy_lR18BSOJFij5iYuhN1SjrDGVhLJfqimjlyku45tI6zxRTjiK8mb8YefYIHXTqrY6MXhqUCYa8RLUMR__cwjHe_cBx5MBtb3RhfQg12nSrVsC8d6I1zySwP4Yq1JaYLBEZIzKxPN71mF2fL6Uty1wfygOvQ80D9IT9-mMsA1CPP5ozK10xO-T5BmIZtX3tMAzpM0E0vB3gmgkPbxLE3ZQtJtun-zDHg-bMkRA
Pragma: no-cache
click.pclk.name/thumbnail?adid=543315&i=mqS-QltP8Ac_0&imgt=icon
173.239.53.24302 Found 0 B URL HTTP/1.1 click.pclk.name/thumbnail?adid=543315&i=mqS-QltP8Ac_0&imgt=icon
IP 173.239.53.24:0
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?adid=543315&i=mqS-QltP8Ac_0&imgt=icon HTTP/1.1
Host: click.pclk.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 01 Dec 2022 02:25:10 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Age: 0
Location: https://us.othis.co/metrics/save.img?event=impressions&bid-id=v2-1669861508769-7-8932-1178228-2420f538-5ef7-5aa5-f284-b4736c551706&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3DYBdkeouKT7VWUuWWSELCqKFmrx35sfh-etpXGowj0aFBDD_mFOKo5MTRRhLZ3g3w9mEIofJK4Qdm2-3sLb1aKtR-kDH6eeLP4aGDZPGs_m2hPLCkgfvwhmgYQv1ZqJaezatNvBcw1eSqK1WLq5pqBGUm2PTWuqfw8_4EMR6UmZc9K1FLu7zqGic8ePirU_dF9sRQ2AYoN0iCQNFfiphG2Y5WsXJ8fjs3kB6j4KZPohKQfysG6PJG-IeUSTsItrXWJ3IIKqC4veJrtXVXeehYiMBG_QbwU3HnG5mT5S28x50SAW1cglus_kYHSnv4jlomjv3cviZRdji-W5oeWeOpHdjD84wptU_S-76-LBrP2tlkseJzhHjJqCUICodsJRJYUeEnkDBHbppV3mDYsUh--CmkbA_8WYkuW_565v9P2mqBx-8zZiWV3bnCJdN-WPIZIF5vRhIkwPdAzJGNkn3P3JXpDpZzEGfNihX-Jp52oSXM66KEsycXD7ckiJjsYsrWjknv86k-gLpvk1IemASWJsT0Cfhs3OpBac9j15b8nnmn08FiF9PUmyjP5QEhjLnQh8aWwRa1A180ZI74kvPq4zMf_olpj2GDfjcmZnCTb5tvNPLy
Pragma: no-cache
click.pclk.name/thumbnail?adid=543315&i=2jAs3X95CY0_0
173.239.53.24302 Found 0 B URL HTTP/1.1 click.pclk.name/thumbnail?adid=543315&i=2jAs3X95CY0_0
IP 173.239.53.24:0
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?adid=543315&i=2jAs3X95CY0_0 HTTP/1.1
Host: click.pclk.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 01 Dec 2022 02:25:10 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Age: 0
Location: https://us.othis.co/metrics/save.img?event=tracked_impressions&bid-id=v2-1669861508753-7-8932-1178228-64371906-91f5-0ae2-280c-c4fcf296333d&price=0&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fim%3Fauth%3Dpz6u78%26c%3DFRNa-hXB1bNjcd0ZZkEWkeGbDgmX8KwOiYMQpDNUi5eND8OI2WZOxCcbH_ag0BUI98iVQwx97KELCSEVaMbcBCkg17FnGJDieoT3NWz8eJyvwPAX-PhPI65FHEqb2TCpSoDeUsbe21Z18TL6m17EIo65m17XvGKNloZIPfvJDjg9T95B91naEoXpPmwgddtOYQaG20tZIEHbXa9q9YPchstJN6UF5Z3WV15W49HePYHTVl3F7nb9rQdHX0gLAdQHtT3DNEGnDSMajb3I09Tl3-w4N7JUmRvxOr5akiGUdpKMvvQ24Lwlh4EFnlyjjAshqMf5ET9-FAfcBU44ey5PgwvnkjLH6DVRXfXsQG9VQ__pb9zsWwERVOXkDbH2qpgMOKSTGqLSrJcWsvstob3oCk9a7hZpvF6kIvcJLKHVHTh4wZuoyQzSG2yDZtZYbx1-fHfS6SnDmICaVSp0XSfTZCT7NiWvpd8pptS_mYMykv2MJLpgK6bGlV3Py1QpgOkZVQFh1HSXo12jDs1pzebBJOg9BEKcTID1ShgThHLq_es5yfUJ-5iE-qxIr8mvf2kuu6yuc6voNczY6PnHILuuaixKKXML4_USeDeHdw
Pragma: no-cache
click.pclk.name/thumbnail?adid=543315&i=2jAs3X95CY0_0&imgt=icon
173.239.53.24302 Found 0 B URL HTTP/1.1 click.pclk.name/thumbnail?adid=543315&i=2jAs3X95CY0_0&imgt=icon
IP 173.239.53.24:0
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?adid=543315&i=2jAs3X95CY0_0&imgt=icon HTTP/1.1
Host: click.pclk.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 01 Dec 2022 02:25:10 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Age: 0
Location: https://us.othis.co/metrics/save.img?event=impressions&bid-id=v2-1669861508753-7-8932-1178228-64371906-91f5-0ae2-280c-c4fcf296333d&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3Dhi-SIBPNmUd2e8vxR5-CI9ts5CETwV4lVtzSx1dVODWtLXEkSC1iKvB9bDTDB4t7p_AhSPZeHl_5Qo4AAuORVSzXs2rIaaJrtW1c8YF1j3xiUxJ93XuhTv1ZlWPLzDfcMDlOFxrYwes6yxr6x2qvHaTwOybs88c6iQMVNERdzQk76VYDuCGbOY05E7L825hJczcOmpzXzrXWIJIWu3ZvylXD9maNHBCneTaF6gtvV9dpvSolBi-Cf9GT1C-2fjTQoqnmhSnzyfMUX_qlRVvss26g5PAjVUskfi0yuXuZRcok4XrsHNpjkqbc2y0wxuYD-aMb11s88Q3hk5X8czLIpB8UC-21brbNby-Vgb1jL3ymY_SC0a8dBPtmP7XEDL4CgRl9itH9ZM4ZXAeUYkkaDQhboeWfpwcO9Zt4y6jFlfvivmODDFM7wVeL5soyUSwCGIYTjPH7pUrSp2wYLrdUxUvuOZs4X07He0gVLM8MsUQ5MU8HX_5RiyTB9tsdFZCPicvgX5zDGibtiLJWMeulIr4hmxGujJrTGlVL4nS-6LJxiQxl-PzI7JoqgzFkjOLaM_GvIVbDTntdzcGl4t_l18Rfb4Ym8CPt7DPG4d86KJ56Th9i
Pragma: no-cache
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 645865f70af7067e72fd73d6a97fc848
733754ef9b4f3790b404455f83b090665e825c9b
4eca6f9af044854240490586c1a737d41342ff92ba2c30151dc0a45d68704909
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4ECA6F9AF044854240490586C1A737D41342FF92BA2C30151DC0A45D68704909"
Last-Modified: Wed, 30 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17642
Expires: Thu, 01 Dec 2022 07:19:12 GMT
Date: Thu, 01 Dec 2022 02:25:10 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 645865f70af7067e72fd73d6a97fc848
733754ef9b4f3790b404455f83b090665e825c9b
4eca6f9af044854240490586c1a737d41342ff92ba2c30151dc0a45d68704909
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4ECA6F9AF044854240490586C1A737D41342FF92BA2C30151DC0A45D68704909"
Last-Modified: Wed, 30 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17447
Expires: Thu, 01 Dec 2022 07:15:58 GMT
Date: Thu, 01 Dec 2022 02:25:11 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 645865f70af7067e72fd73d6a97fc848
733754ef9b4f3790b404455f83b090665e825c9b
4eca6f9af044854240490586c1a737d41342ff92ba2c30151dc0a45d68704909
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4ECA6F9AF044854240490586C1A737D41342FF92BA2C30151DC0A45D68704909"
Last-Modified: Wed, 30 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17573
Expires: Thu, 01 Dec 2022 07:18:04 GMT
Date: Thu, 01 Dec 2022 02:25:11 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 645865f70af7067e72fd73d6a97fc848
733754ef9b4f3790b404455f83b090665e825c9b
4eca6f9af044854240490586c1a737d41342ff92ba2c30151dc0a45d68704909
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4ECA6F9AF044854240490586C1A737D41342FF92BA2C30151DC0A45D68704909"
Last-Modified: Wed, 30 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17597
Expires: Thu, 01 Dec 2022 07:18:28 GMT
Date: Thu, 01 Dec 2022 02:25:11 GMT
Connection: keep-alive
us.othis.co/metrics/save.img?event=impressions&bid-id=v2-1669861508769-7-8932-1178228-2420f538-5ef7-5aa5-f284-b4736c551706&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3DYBdkeouKT7VWUuWWSELCqKFmrx35sfh-etpXGowj0aFBDD_mFOKo5MTRRhLZ3g3w9mEIofJK4Qdm2-3sLb1aKtR-kDH6eeLP4aGDZPGs_m2hPLCkgfvwhmgYQv1ZqJaezatNvBcw1eSqK1WLq5pqBGUm2PTWuqfw8_4EMR6UmZc9K1FLu7zqGic8ePirU_dF9sRQ2AYoN0iCQNFfiphG2Y5WsXJ8fjs3kB6j4KZPohKQfysG6PJG-IeUSTsItrXWJ3IIKqC4veJrtXVXeehYiMBG_QbwU3HnG5mT5S28x50SAW1cglus_kYHSnv4jlomjv3cviZRdji-W5oeWeOpHdjD84wptU_S-76-LBrP2tlkseJzhHjJqCUICodsJRJYUeEnkDBHbppV3mDYsUh--CmkbA_8WYkuW_565v9P2mqBx-8zZiWV3bnCJdN-WPIZIF5vRhIkwPdAzJGNkn3P3JXpDpZzEGfNihX-Jp52oSXM66KEsycXD7ckiJjsYsrWjknv86k-gLpvk1IemASWJsT0Cfhs3OpBac9j15b8nnmn08FiF9PUmyjP5QEhjLnQh8aWwRa1A180ZI74kvPq4zMf_olpj2GDfjcmZnCTb5tvNPLy
38.100.129.10302 Found 0 B URL HTTP/2 us.othis.co/metrics/save.img?event=impressions&bid-id=v2-1669861508769-7-8932-1178228-2420f538-5ef7-5aa5-f284-b4736c551706&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3DYBdkeouKT7VWUuWWSELCqKFmrx35sfh-etpXGowj0aFBDD_mFOKo5MTRRhLZ3g3w9mEIofJK4Qdm2-3sLb1aKtR-kDH6eeLP4aGDZPGs_m2hPLCkgfvwhmgYQv1ZqJaezatNvBcw1eSqK1WLq5pqBGUm2PTWuqfw8_4EMR6UmZc9K1FLu7zqGic8ePirU_dF9sRQ2AYoN0iCQNFfiphG2Y5WsXJ8fjs3kB6j4KZPohKQfysG6PJG-IeUSTsItrXWJ3IIKqC4veJrtXVXeehYiMBG_QbwU3HnG5mT5S28x50SAW1cglus_kYHSnv4jlomjv3cviZRdji-W5oeWeOpHdjD84wptU_S-76-LBrP2tlkseJzhHjJqCUICodsJRJYUeEnkDBHbppV3mDYsUh--CmkbA_8WYkuW_565v9P2mqBx-8zZiWV3bnCJdN-WPIZIF5vRhIkwPdAzJGNkn3P3JXpDpZzEGfNihX-Jp52oSXM66KEsycXD7ckiJjsYsrWjknv86k-gLpvk1IemASWJsT0Cfhs3OpBac9j15b8nnmn08FiF9PUmyjP5QEhjLnQh8aWwRa1A180ZI74kvPq4zMf_olpj2GDfjcmZnCTb5tvNPLy
IP 38.100.129.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrics/save.img?event=impressions&bid-id=v2-1669861508769-7-8932-1178228-2420f538-5ef7-5aa5-f284-b4736c551706&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3DYBdkeouKT7VWUuWWSELCqKFmrx35sfh-etpXGowj0aFBDD_mFOKo5MTRRhLZ3g3w9mEIofJK4Qdm2-3sLb1aKtR-kDH6eeLP4aGDZPGs_m2hPLCkgfvwhmgYQv1ZqJaezatNvBcw1eSqK1WLq5pqBGUm2PTWuqfw8_4EMR6UmZc9K1FLu7zqGic8ePirU_dF9sRQ2AYoN0iCQNFfiphG2Y5WsXJ8fjs3kB6j4KZPohKQfysG6PJG-IeUSTsItrXWJ3IIKqC4veJrtXVXeehYiMBG_QbwU3HnG5mT5S28x50SAW1cglus_kYHSnv4jlomjv3cviZRdji-W5oeWeOpHdjD84wptU_S-76-LBrP2tlkseJzhHjJqCUICodsJRJYUeEnkDBHbppV3mDYsUh--CmkbA_8WYkuW_565v9P2mqBx-8zZiWV3bnCJdN-WPIZIF5vRhIkwPdAzJGNkn3P3JXpDpZzEGfNihX-Jp52oSXM66KEsycXD7ckiJjsYsrWjknv86k-gLpvk1IemASWJsT0Cfhs3OpBac9j15b8nnmn08FiF9PUmyjP5QEhjLnQh8aWwRa1A180ZI74kvPq4zMf_olpj2GDfjcmZnCTb5tvNPLy HTTP/1.1
Host: us.othis.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty/1.15.8.3
date: Thu, 01 Dec 2022 02:25:11 GMT
content-length: 0
location: https://track.trackingtraffo.com/push/ic?auth=pz6u78&c=YBdkeouKT7VWUuWWSELCqKFmrx35sfh-etpXGowj0aFBDD_mFOKo5MTRRhLZ3g3w9mEIofJK4Qdm2-3sLb1aKtR-kDH6eeLP4aGDZPGs_m2hPLCkgfvwhmgYQv1ZqJaezatNvBcw1eSqK1WLq5pqBGUm2PTWuqfw8_4EMR6UmZc9K1FLu7zqGic8ePirU_dF9sRQ2AYoN0iCQNFfiphG2Y5WsXJ8fjs3kB6j4KZPohKQfysG6PJG-IeUSTsItrXWJ3IIKqC4veJrtXVXeehYiMBG_QbwU3HnG5mT5S28x50SAW1cglus_kYHSnv4jlomjv3cviZRdji-W5oeWeOpHdjD84wptU_S-76-LBrP2tlkseJzhHjJqCUICodsJRJYUeEnkDBHbppV3mDYsUh--CmkbA_8WYkuW_565v9P2mqBx-8zZiWV3bnCJdN-WPIZIF5vRhIkwPdAzJGNkn3P3JXpDpZzEGfNihX-Jp52oSXM66KEsycXD7ckiJjsYsrWjknv86k-gLpvk1IemASWJsT0Cfhs3OpBac9j15b8nnmn08FiF9PUmyjP5QEhjLnQh8aWwRa1A180ZI74kvPq4zMf_olpj2GDfjcmZnCTb5tvNPLy
X-Firefox-Spdy: h2
us.othis.co/metrics/save.img?event=tracked_impressions&bid-id=v2-1669861508769-7-8932-1178228-2420f538-5ef7-5aa5-f284-b4736c551706&price=0&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fim%3Fauth%3Dpz6u78%26c%3DcqoibXp5sUF-y7r8mPwrN8aJUyxsdB3gRi2V6n2TBmqULJI9bzzf16W3RPH19MGpoh73Rcp04GE1sdpxzenwBWZ9-KV0czbrdk5PpMJaOTnLsNyZt1ZAyj37nvxisc7OSPBEqRQV2AYWj6xtT-sxojgZYRzxHZxOhqexVL2hStXPiwKRC0Al48dm27zPVkUCcBaisXP_76Ywe5dzOMG53iWpRDyCFy2-vwXItx6YiPJS3y3Fa-K5IM4Q-agEOAgAj16C-rn-UVoHD3OsC6Jzk9wnRdc52D6JidoxdacODDl0Qg-LOMe1CIgDzdOY2eAS5-QcFS1Ub36v8ZqE8xoDPEFlMznHDgEsHQZOfyYTIOFCakyuZwtNwPNeuVOGRszHy_lR18BSOJFij5iYuhN1SjrDGVhLJfqimjlyku45tI6zxRTjiK8mb8YefYIHXTqrY6MXhqUCYa8RLUMR__cwjHe_cBx5MBtb3RhfQg12nSrVsC8d6I1zySwP4Yq1JaYLBEZIzKxPN71mF2fL6Uty1wfygOvQ80D9IT9-mMsA1CPP5ozK10xO-T5BmIZtX3tMAzpM0E0vB3gmgkPbxLE3ZQtJtun-zDHg-bMkRA
38.100.129.10302 Found 0 B URL HTTP/2 us.othis.co/metrics/save.img?event=tracked_impressions&bid-id=v2-1669861508769-7-8932-1178228-2420f538-5ef7-5aa5-f284-b4736c551706&price=0&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fim%3Fauth%3Dpz6u78%26c%3DcqoibXp5sUF-y7r8mPwrN8aJUyxsdB3gRi2V6n2TBmqULJI9bzzf16W3RPH19MGpoh73Rcp04GE1sdpxzenwBWZ9-KV0czbrdk5PpMJaOTnLsNyZt1ZAyj37nvxisc7OSPBEqRQV2AYWj6xtT-sxojgZYRzxHZxOhqexVL2hStXPiwKRC0Al48dm27zPVkUCcBaisXP_76Ywe5dzOMG53iWpRDyCFy2-vwXItx6YiPJS3y3Fa-K5IM4Q-agEOAgAj16C-rn-UVoHD3OsC6Jzk9wnRdc52D6JidoxdacODDl0Qg-LOMe1CIgDzdOY2eAS5-QcFS1Ub36v8ZqE8xoDPEFlMznHDgEsHQZOfyYTIOFCakyuZwtNwPNeuVOGRszHy_lR18BSOJFij5iYuhN1SjrDGVhLJfqimjlyku45tI6zxRTjiK8mb8YefYIHXTqrY6MXhqUCYa8RLUMR__cwjHe_cBx5MBtb3RhfQg12nSrVsC8d6I1zySwP4Yq1JaYLBEZIzKxPN71mF2fL6Uty1wfygOvQ80D9IT9-mMsA1CPP5ozK10xO-T5BmIZtX3tMAzpM0E0vB3gmgkPbxLE3ZQtJtun-zDHg-bMkRA
IP 38.100.129.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrics/save.img?event=tracked_impressions&bid-id=v2-1669861508769-7-8932-1178228-2420f538-5ef7-5aa5-f284-b4736c551706&price=0&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fim%3Fauth%3Dpz6u78%26c%3DcqoibXp5sUF-y7r8mPwrN8aJUyxsdB3gRi2V6n2TBmqULJI9bzzf16W3RPH19MGpoh73Rcp04GE1sdpxzenwBWZ9-KV0czbrdk5PpMJaOTnLsNyZt1ZAyj37nvxisc7OSPBEqRQV2AYWj6xtT-sxojgZYRzxHZxOhqexVL2hStXPiwKRC0Al48dm27zPVkUCcBaisXP_76Ywe5dzOMG53iWpRDyCFy2-vwXItx6YiPJS3y3Fa-K5IM4Q-agEOAgAj16C-rn-UVoHD3OsC6Jzk9wnRdc52D6JidoxdacODDl0Qg-LOMe1CIgDzdOY2eAS5-QcFS1Ub36v8ZqE8xoDPEFlMznHDgEsHQZOfyYTIOFCakyuZwtNwPNeuVOGRszHy_lR18BSOJFij5iYuhN1SjrDGVhLJfqimjlyku45tI6zxRTjiK8mb8YefYIHXTqrY6MXhqUCYa8RLUMR__cwjHe_cBx5MBtb3RhfQg12nSrVsC8d6I1zySwP4Yq1JaYLBEZIzKxPN71mF2fL6Uty1wfygOvQ80D9IT9-mMsA1CPP5ozK10xO-T5BmIZtX3tMAzpM0E0vB3gmgkPbxLE3ZQtJtun-zDHg-bMkRA HTTP/1.1
Host: us.othis.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty/1.15.8.3
date: Thu, 01 Dec 2022 02:25:11 GMT
content-length: 0
set-cookie: user_id=e34f9c8b-0947-9447-b51f-e5c8dbfc12b8
location: https://track.trackingtraffo.com/push/im?auth=pz6u78&c=cqoibXp5sUF-y7r8mPwrN8aJUyxsdB3gRi2V6n2TBmqULJI9bzzf16W3RPH19MGpoh73Rcp04GE1sdpxzenwBWZ9-KV0czbrdk5PpMJaOTnLsNyZt1ZAyj37nvxisc7OSPBEqRQV2AYWj6xtT-sxojgZYRzxHZxOhqexVL2hStXPiwKRC0Al48dm27zPVkUCcBaisXP_76Ywe5dzOMG53iWpRDyCFy2-vwXItx6YiPJS3y3Fa-K5IM4Q-agEOAgAj16C-rn-UVoHD3OsC6Jzk9wnRdc52D6JidoxdacODDl0Qg-LOMe1CIgDzdOY2eAS5-QcFS1Ub36v8ZqE8xoDPEFlMznHDgEsHQZOfyYTIOFCakyuZwtNwPNeuVOGRszHy_lR18BSOJFij5iYuhN1SjrDGVhLJfqimjlyku45tI6zxRTjiK8mb8YefYIHXTqrY6MXhqUCYa8RLUMR__cwjHe_cBx5MBtb3RhfQg12nSrVsC8d6I1zySwP4Yq1JaYLBEZIzKxPN71mF2fL6Uty1wfygOvQ80D9IT9-mMsA1CPP5ozK10xO-T5BmIZtX3tMAzpM0E0vB3gmgkPbxLE3ZQtJtun-zDHg-bMkRA
X-Firefox-Spdy: h2
us.othis.co/metrics/save.img?event=impressions&bid-id=v2-1669861508753-7-8932-1178228-64371906-91f5-0ae2-280c-c4fcf296333d&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3Dhi-SIBPNmUd2e8vxR5-CI9ts5CETwV4lVtzSx1dVODWtLXEkSC1iKvB9bDTDB4t7p_AhSPZeHl_5Qo4AAuORVSzXs2rIaaJrtW1c8YF1j3xiUxJ93XuhTv1ZlWPLzDfcMDlOFxrYwes6yxr6x2qvHaTwOybs88c6iQMVNERdzQk76VYDuCGbOY05E7L825hJczcOmpzXzrXWIJIWu3ZvylXD9maNHBCneTaF6gtvV9dpvSolBi-Cf9GT1C-2fjTQoqnmhSnzyfMUX_qlRVvss26g5PAjVUskfi0yuXuZRcok4XrsHNpjkqbc2y0wxuYD-aMb11s88Q3hk5X8czLIpB8UC-21brbNby-Vgb1jL3ymY_SC0a8dBPtmP7XEDL4CgRl9itH9ZM4ZXAeUYkkaDQhboeWfpwcO9Zt4y6jFlfvivmODDFM7wVeL5soyUSwCGIYTjPH7pUrSp2wYLrdUxUvuOZs4X07He0gVLM8MsUQ5MU8HX_5RiyTB9tsdFZCPicvgX5zDGibtiLJWMeulIr4hmxGujJrTGlVL4nS-6LJxiQxl-PzI7JoqgzFkjOLaM_GvIVbDTntdzcGl4t_l18Rfb4Ym8CPt7DPG4d86KJ56Th9i
38.100.129.10302 Found 0 B URL HTTP/2 us.othis.co/metrics/save.img?event=impressions&bid-id=v2-1669861508753-7-8932-1178228-64371906-91f5-0ae2-280c-c4fcf296333d&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3Dhi-SIBPNmUd2e8vxR5-CI9ts5CETwV4lVtzSx1dVODWtLXEkSC1iKvB9bDTDB4t7p_AhSPZeHl_5Qo4AAuORVSzXs2rIaaJrtW1c8YF1j3xiUxJ93XuhTv1ZlWPLzDfcMDlOFxrYwes6yxr6x2qvHaTwOybs88c6iQMVNERdzQk76VYDuCGbOY05E7L825hJczcOmpzXzrXWIJIWu3ZvylXD9maNHBCneTaF6gtvV9dpvSolBi-Cf9GT1C-2fjTQoqnmhSnzyfMUX_qlRVvss26g5PAjVUskfi0yuXuZRcok4XrsHNpjkqbc2y0wxuYD-aMb11s88Q3hk5X8czLIpB8UC-21brbNby-Vgb1jL3ymY_SC0a8dBPtmP7XEDL4CgRl9itH9ZM4ZXAeUYkkaDQhboeWfpwcO9Zt4y6jFlfvivmODDFM7wVeL5soyUSwCGIYTjPH7pUrSp2wYLrdUxUvuOZs4X07He0gVLM8MsUQ5MU8HX_5RiyTB9tsdFZCPicvgX5zDGibtiLJWMeulIr4hmxGujJrTGlVL4nS-6LJxiQxl-PzI7JoqgzFkjOLaM_GvIVbDTntdzcGl4t_l18Rfb4Ym8CPt7DPG4d86KJ56Th9i
IP 38.100.129.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrics/save.img?event=impressions&bid-id=v2-1669861508753-7-8932-1178228-64371906-91f5-0ae2-280c-c4fcf296333d&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3Dhi-SIBPNmUd2e8vxR5-CI9ts5CETwV4lVtzSx1dVODWtLXEkSC1iKvB9bDTDB4t7p_AhSPZeHl_5Qo4AAuORVSzXs2rIaaJrtW1c8YF1j3xiUxJ93XuhTv1ZlWPLzDfcMDlOFxrYwes6yxr6x2qvHaTwOybs88c6iQMVNERdzQk76VYDuCGbOY05E7L825hJczcOmpzXzrXWIJIWu3ZvylXD9maNHBCneTaF6gtvV9dpvSolBi-Cf9GT1C-2fjTQoqnmhSnzyfMUX_qlRVvss26g5PAjVUskfi0yuXuZRcok4XrsHNpjkqbc2y0wxuYD-aMb11s88Q3hk5X8czLIpB8UC-21brbNby-Vgb1jL3ymY_SC0a8dBPtmP7XEDL4CgRl9itH9ZM4ZXAeUYkkaDQhboeWfpwcO9Zt4y6jFlfvivmODDFM7wVeL5soyUSwCGIYTjPH7pUrSp2wYLrdUxUvuOZs4X07He0gVLM8MsUQ5MU8HX_5RiyTB9tsdFZCPicvgX5zDGibtiLJWMeulIr4hmxGujJrTGlVL4nS-6LJxiQxl-PzI7JoqgzFkjOLaM_GvIVbDTntdzcGl4t_l18Rfb4Ym8CPt7DPG4d86KJ56Th9i HTTP/1.1
Host: us.othis.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty/1.15.8.3
date: Thu, 01 Dec 2022 02:25:11 GMT
content-length: 0
location: https://track.trackingtraffo.com/push/ic?auth=pz6u78&c=hi-SIBPNmUd2e8vxR5-CI9ts5CETwV4lVtzSx1dVODWtLXEkSC1iKvB9bDTDB4t7p_AhSPZeHl_5Qo4AAuORVSzXs2rIaaJrtW1c8YF1j3xiUxJ93XuhTv1ZlWPLzDfcMDlOFxrYwes6yxr6x2qvHaTwOybs88c6iQMVNERdzQk76VYDuCGbOY05E7L825hJczcOmpzXzrXWIJIWu3ZvylXD9maNHBCneTaF6gtvV9dpvSolBi-Cf9GT1C-2fjTQoqnmhSnzyfMUX_qlRVvss26g5PAjVUskfi0yuXuZRcok4XrsHNpjkqbc2y0wxuYD-aMb11s88Q3hk5X8czLIpB8UC-21brbNby-Vgb1jL3ymY_SC0a8dBPtmP7XEDL4CgRl9itH9ZM4ZXAeUYkkaDQhboeWfpwcO9Zt4y6jFlfvivmODDFM7wVeL5soyUSwCGIYTjPH7pUrSp2wYLrdUxUvuOZs4X07He0gVLM8MsUQ5MU8HX_5RiyTB9tsdFZCPicvgX5zDGibtiLJWMeulIr4hmxGujJrTGlVL4nS-6LJxiQxl-PzI7JoqgzFkjOLaM_GvIVbDTntdzcGl4t_l18Rfb4Ym8CPt7DPG4d86KJ56Th9i
X-Firefox-Spdy: h2
us.othis.co/metrics/save.img?event=tracked_impressions&bid-id=v2-1669861508753-7-8932-1178228-64371906-91f5-0ae2-280c-c4fcf296333d&price=0&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fim%3Fauth%3Dpz6u78%26c%3DFRNa-hXB1bNjcd0ZZkEWkeGbDgmX8KwOiYMQpDNUi5eND8OI2WZOxCcbH_ag0BUI98iVQwx97KELCSEVaMbcBCkg17FnGJDieoT3NWz8eJyvwPAX-PhPI65FHEqb2TCpSoDeUsbe21Z18TL6m17EIo65m17XvGKNloZIPfvJDjg9T95B91naEoXpPmwgddtOYQaG20tZIEHbXa9q9YPchstJN6UF5Z3WV15W49HePYHTVl3F7nb9rQdHX0gLAdQHtT3DNEGnDSMajb3I09Tl3-w4N7JUmRvxOr5akiGUdpKMvvQ24Lwlh4EFnlyjjAshqMf5ET9-FAfcBU44ey5PgwvnkjLH6DVRXfXsQG9VQ__pb9zsWwERVOXkDbH2qpgMOKSTGqLSrJcWsvstob3oCk9a7hZpvF6kIvcJLKHVHTh4wZuoyQzSG2yDZtZYbx1-fHfS6SnDmICaVSp0XSfTZCT7NiWvpd8pptS_mYMykv2MJLpgK6bGlV3Py1QpgOkZVQFh1HSXo12jDs1pzebBJOg9BEKcTID1ShgThHLq_es5yfUJ-5iE-qxIr8mvf2kuu6yuc6voNczY6PnHILuuaixKKXML4_USeDeHdw
38.100.129.10302 Found 0 B URL HTTP/2 us.othis.co/metrics/save.img?event=tracked_impressions&bid-id=v2-1669861508753-7-8932-1178228-64371906-91f5-0ae2-280c-c4fcf296333d&price=0&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fim%3Fauth%3Dpz6u78%26c%3DFRNa-hXB1bNjcd0ZZkEWkeGbDgmX8KwOiYMQpDNUi5eND8OI2WZOxCcbH_ag0BUI98iVQwx97KELCSEVaMbcBCkg17FnGJDieoT3NWz8eJyvwPAX-PhPI65FHEqb2TCpSoDeUsbe21Z18TL6m17EIo65m17XvGKNloZIPfvJDjg9T95B91naEoXpPmwgddtOYQaG20tZIEHbXa9q9YPchstJN6UF5Z3WV15W49HePYHTVl3F7nb9rQdHX0gLAdQHtT3DNEGnDSMajb3I09Tl3-w4N7JUmRvxOr5akiGUdpKMvvQ24Lwlh4EFnlyjjAshqMf5ET9-FAfcBU44ey5PgwvnkjLH6DVRXfXsQG9VQ__pb9zsWwERVOXkDbH2qpgMOKSTGqLSrJcWsvstob3oCk9a7hZpvF6kIvcJLKHVHTh4wZuoyQzSG2yDZtZYbx1-fHfS6SnDmICaVSp0XSfTZCT7NiWvpd8pptS_mYMykv2MJLpgK6bGlV3Py1QpgOkZVQFh1HSXo12jDs1pzebBJOg9BEKcTID1ShgThHLq_es5yfUJ-5iE-qxIr8mvf2kuu6yuc6voNczY6PnHILuuaixKKXML4_USeDeHdw
IP 38.100.129.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrics/save.img?event=tracked_impressions&bid-id=v2-1669861508753-7-8932-1178228-64371906-91f5-0ae2-280c-c4fcf296333d&price=0&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fim%3Fauth%3Dpz6u78%26c%3DFRNa-hXB1bNjcd0ZZkEWkeGbDgmX8KwOiYMQpDNUi5eND8OI2WZOxCcbH_ag0BUI98iVQwx97KELCSEVaMbcBCkg17FnGJDieoT3NWz8eJyvwPAX-PhPI65FHEqb2TCpSoDeUsbe21Z18TL6m17EIo65m17XvGKNloZIPfvJDjg9T95B91naEoXpPmwgddtOYQaG20tZIEHbXa9q9YPchstJN6UF5Z3WV15W49HePYHTVl3F7nb9rQdHX0gLAdQHtT3DNEGnDSMajb3I09Tl3-w4N7JUmRvxOr5akiGUdpKMvvQ24Lwlh4EFnlyjjAshqMf5ET9-FAfcBU44ey5PgwvnkjLH6DVRXfXsQG9VQ__pb9zsWwERVOXkDbH2qpgMOKSTGqLSrJcWsvstob3oCk9a7hZpvF6kIvcJLKHVHTh4wZuoyQzSG2yDZtZYbx1-fHfS6SnDmICaVSp0XSfTZCT7NiWvpd8pptS_mYMykv2MJLpgK6bGlV3Py1QpgOkZVQFh1HSXo12jDs1pzebBJOg9BEKcTID1ShgThHLq_es5yfUJ-5iE-qxIr8mvf2kuu6yuc6voNczY6PnHILuuaixKKXML4_USeDeHdw HTTP/1.1
Host: us.othis.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty/1.15.8.3
date: Thu, 01 Dec 2022 02:25:11 GMT
content-length: 0
set-cookie: user_id=940d4260-1cb3-0d75-bf35-49fae06dc996
location: https://track.trackingtraffo.com/push/im?auth=pz6u78&c=FRNa-hXB1bNjcd0ZZkEWkeGbDgmX8KwOiYMQpDNUi5eND8OI2WZOxCcbH_ag0BUI98iVQwx97KELCSEVaMbcBCkg17FnGJDieoT3NWz8eJyvwPAX-PhPI65FHEqb2TCpSoDeUsbe21Z18TL6m17EIo65m17XvGKNloZIPfvJDjg9T95B91naEoXpPmwgddtOYQaG20tZIEHbXa9q9YPchstJN6UF5Z3WV15W49HePYHTVl3F7nb9rQdHX0gLAdQHtT3DNEGnDSMajb3I09Tl3-w4N7JUmRvxOr5akiGUdpKMvvQ24Lwlh4EFnlyjjAshqMf5ET9-FAfcBU44ey5PgwvnkjLH6DVRXfXsQG9VQ__pb9zsWwERVOXkDbH2qpgMOKSTGqLSrJcWsvstob3oCk9a7hZpvF6kIvcJLKHVHTh4wZuoyQzSG2yDZtZYbx1-fHfS6SnDmICaVSp0XSfTZCT7NiWvpd8pptS_mYMykv2MJLpgK6bGlV3Py1QpgOkZVQFh1HSXo12jDs1pzebBJOg9BEKcTID1ShgThHLq_es5yfUJ-5iE-qxIr8mvf2kuu6yuc6voNczY6PnHILuuaixKKXML4_USeDeHdw
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 411f0580e41b8c663276421f11cc67d8
273e570b706320eee29faa7c69498eabb433a82b
ec324f143f05c34d4d3f4a6078bba6cf9d90f8390e092ce64282dbbdff961b39
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 02:25:11 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 00:04:39 GMT
Expires: Thu, 08 Dec 2022 00:04:38 GMT
Etag: "273e570b706320eee29faa7c69498eabb433a82b"
Cache-Control: max-age=595766,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77285eee28acb4fd-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 411f0580e41b8c663276421f11cc67d8
273e570b706320eee29faa7c69498eabb433a82b
ec324f143f05c34d4d3f4a6078bba6cf9d90f8390e092ce64282dbbdff961b39
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 02:25:11 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 00:04:39 GMT
Expires: Thu, 08 Dec 2022 00:04:38 GMT
Etag: "273e570b706320eee29faa7c69498eabb433a82b"
Cache-Control: max-age=595766,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77285eee2b3db4f9-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 411f0580e41b8c663276421f11cc67d8
273e570b706320eee29faa7c69498eabb433a82b
ec324f143f05c34d4d3f4a6078bba6cf9d90f8390e092ce64282dbbdff961b39
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 02:25:11 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 00:04:39 GMT
Expires: Thu, 08 Dec 2022 00:04:38 GMT
Etag: "273e570b706320eee29faa7c69498eabb433a82b"
Cache-Control: max-age=595766,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77285eee39efb511-OSL
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 8e232bffb35643cbbee7bf8c867adcf4
f02afdddf553bd0a95e4779fbfa278bd403efa47
d877b81058855888f854d0df763887e9b0612785947e2d80a9c57def01271934
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D877B81058855888F854D0DF763887E9B0612785947E2D80A9C57DEF01271934"
Last-Modified: Tue, 29 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9394
Expires: Thu, 01 Dec 2022 05:01:45 GMT
Date: Thu, 01 Dec 2022 02:25:11 GMT
Connection: keep-alive
track.trackingtraffo.com/push/ic?auth=pz6u78&c=YBdkeouKT7VWUuWWSELCqKFmrx35sfh-etpXGowj0aFBDD_mFOKo5MTRRhLZ3g3w9mEIofJK4Qdm2-3sLb1aKtR-kDH6eeLP4aGDZPGs_m2hPLCkgfvwhmgYQv1ZqJaezatNvBcw1eSqK1WLq5pqBGUm2PTWuqfw8_4EMR6UmZc9K1FLu7zqGic8ePirU_dF9sRQ2AYoN0iCQNFfiphG2Y5WsXJ8fjs3kB6j4KZPohKQfysG6PJG-IeUSTsItrXWJ3IIKqC4veJrtXVXeehYiMBG_QbwU3HnG5mT5S28x50SAW1cglus_kYHSnv4jlomjv3cviZRdji-W5oeWeOpHdjD84wptU_S-76-LBrP2tlkseJzhHjJqCUICodsJRJYUeEnkDBHbppV3mDYsUh--CmkbA_8WYkuW_565v9P2mqBx-8zZiWV3bnCJdN-WPIZIF5vRhIkwPdAzJGNkn3P3JXpDpZzEGfNihX-Jp52oSXM66KEsycXD7ckiJjsYsrWjknv86k-gLpvk1IemASWJsT0Cfhs3OpBac9j15b8nnmn08FiF9PUmyjP5QEhjLnQh8aWwRa1A180ZI74kvPq4zMf_olpj2GDfjcmZnCTb5tvNPLy
88.214.195.156302 Found 0 B URL HTTP/1.1 track.trackingtraffo.com/push/ic?auth=pz6u78&c=YBdkeouKT7VWUuWWSELCqKFmrx35sfh-etpXGowj0aFBDD_mFOKo5MTRRhLZ3g3w9mEIofJK4Qdm2-3sLb1aKtR-kDH6eeLP4aGDZPGs_m2hPLCkgfvwhmgYQv1ZqJaezatNvBcw1eSqK1WLq5pqBGUm2PTWuqfw8_4EMR6UmZc9K1FLu7zqGic8ePirU_dF9sRQ2AYoN0iCQNFfiphG2Y5WsXJ8fjs3kB6j4KZPohKQfysG6PJG-IeUSTsItrXWJ3IIKqC4veJrtXVXeehYiMBG_QbwU3HnG5mT5S28x50SAW1cglus_kYHSnv4jlomjv3cviZRdji-W5oeWeOpHdjD84wptU_S-76-LBrP2tlkseJzhHjJqCUICodsJRJYUeEnkDBHbppV3mDYsUh--CmkbA_8WYkuW_565v9P2mqBx-8zZiWV3bnCJdN-WPIZIF5vRhIkwPdAzJGNkn3P3JXpDpZzEGfNihX-Jp52oSXM66KEsycXD7ckiJjsYsrWjknv86k-gLpvk1IemASWJsT0Cfhs3OpBac9j15b8nnmn08FiF9PUmyjP5QEhjLnQh8aWwRa1A180ZI74kvPq4zMf_olpj2GDfjcmZnCTb5tvNPLy
IP 88.214.195.156:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /push/ic?auth=pz6u78&c=YBdkeouKT7VWUuWWSELCqKFmrx35sfh-etpXGowj0aFBDD_mFOKo5MTRRhLZ3g3w9mEIofJK4Qdm2-3sLb1aKtR-kDH6eeLP4aGDZPGs_m2hPLCkgfvwhmgYQv1ZqJaezatNvBcw1eSqK1WLq5pqBGUm2PTWuqfw8_4EMR6UmZc9K1FLu7zqGic8ePirU_dF9sRQ2AYoN0iCQNFfiphG2Y5WsXJ8fjs3kB6j4KZPohKQfysG6PJG-IeUSTsItrXWJ3IIKqC4veJrtXVXeehYiMBG_QbwU3HnG5mT5S28x50SAW1cglus_kYHSnv4jlomjv3cviZRdji-W5oeWeOpHdjD84wptU_S-76-LBrP2tlkseJzhHjJqCUICodsJRJYUeEnkDBHbppV3mDYsUh--CmkbA_8WYkuW_565v9P2mqBx-8zZiWV3bnCJdN-WPIZIF5vRhIkwPdAzJGNkn3P3JXpDpZzEGfNihX-Jp52oSXM66KEsycXD7ckiJjsYsrWjknv86k-gLpvk1IemASWJsT0Cfhs3OpBac9j15b8nnmn08FiF9PUmyjP5QEhjLnQh8aWwRa1A180ZI74kvPq4zMf_olpj2GDfjcmZnCTb5tvNPLy HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 02:25:11 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Location: https://ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659514995116-National Casino black.png
track.trackingtraffo.com/push/im?auth=pz6u78&c=cqoibXp5sUF-y7r8mPwrN8aJUyxsdB3gRi2V6n2TBmqULJI9bzzf16W3RPH19MGpoh73Rcp04GE1sdpxzenwBWZ9-KV0czbrdk5PpMJaOTnLsNyZt1ZAyj37nvxisc7OSPBEqRQV2AYWj6xtT-sxojgZYRzxHZxOhqexVL2hStXPiwKRC0Al48dm27zPVkUCcBaisXP_76Ywe5dzOMG53iWpRDyCFy2-vwXItx6YiPJS3y3Fa-K5IM4Q-agEOAgAj16C-rn-UVoHD3OsC6Jzk9wnRdc52D6JidoxdacODDl0Qg-LOMe1CIgDzdOY2eAS5-QcFS1Ub36v8ZqE8xoDPEFlMznHDgEsHQZOfyYTIOFCakyuZwtNwPNeuVOGRszHy_lR18BSOJFij5iYuhN1SjrDGVhLJfqimjlyku45tI6zxRTjiK8mb8YefYIHXTqrY6MXhqUCYa8RLUMR__cwjHe_cBx5MBtb3RhfQg12nSrVsC8d6I1zySwP4Yq1JaYLBEZIzKxPN71mF2fL6Uty1wfygOvQ80D9IT9-mMsA1CPP5ozK10xO-T5BmIZtX3tMAzpM0E0vB3gmgkPbxLE3ZQtJtun-zDHg-bMkRA
88.214.195.156302 Found 0 B URL HTTP/1.1 track.trackingtraffo.com/push/im?auth=pz6u78&c=cqoibXp5sUF-y7r8mPwrN8aJUyxsdB3gRi2V6n2TBmqULJI9bzzf16W3RPH19MGpoh73Rcp04GE1sdpxzenwBWZ9-KV0czbrdk5PpMJaOTnLsNyZt1ZAyj37nvxisc7OSPBEqRQV2AYWj6xtT-sxojgZYRzxHZxOhqexVL2hStXPiwKRC0Al48dm27zPVkUCcBaisXP_76Ywe5dzOMG53iWpRDyCFy2-vwXItx6YiPJS3y3Fa-K5IM4Q-agEOAgAj16C-rn-UVoHD3OsC6Jzk9wnRdc52D6JidoxdacODDl0Qg-LOMe1CIgDzdOY2eAS5-QcFS1Ub36v8ZqE8xoDPEFlMznHDgEsHQZOfyYTIOFCakyuZwtNwPNeuVOGRszHy_lR18BSOJFij5iYuhN1SjrDGVhLJfqimjlyku45tI6zxRTjiK8mb8YefYIHXTqrY6MXhqUCYa8RLUMR__cwjHe_cBx5MBtb3RhfQg12nSrVsC8d6I1zySwP4Yq1JaYLBEZIzKxPN71mF2fL6Uty1wfygOvQ80D9IT9-mMsA1CPP5ozK10xO-T5BmIZtX3tMAzpM0E0vB3gmgkPbxLE3ZQtJtun-zDHg-bMkRA
IP 88.214.195.156:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /push/im?auth=pz6u78&c=cqoibXp5sUF-y7r8mPwrN8aJUyxsdB3gRi2V6n2TBmqULJI9bzzf16W3RPH19MGpoh73Rcp04GE1sdpxzenwBWZ9-KV0czbrdk5PpMJaOTnLsNyZt1ZAyj37nvxisc7OSPBEqRQV2AYWj6xtT-sxojgZYRzxHZxOhqexVL2hStXPiwKRC0Al48dm27zPVkUCcBaisXP_76Ywe5dzOMG53iWpRDyCFy2-vwXItx6YiPJS3y3Fa-K5IM4Q-agEOAgAj16C-rn-UVoHD3OsC6Jzk9wnRdc52D6JidoxdacODDl0Qg-LOMe1CIgDzdOY2eAS5-QcFS1Ub36v8ZqE8xoDPEFlMznHDgEsHQZOfyYTIOFCakyuZwtNwPNeuVOGRszHy_lR18BSOJFij5iYuhN1SjrDGVhLJfqimjlyku45tI6zxRTjiK8mb8YefYIHXTqrY6MXhqUCYa8RLUMR__cwjHe_cBx5MBtb3RhfQg12nSrVsC8d6I1zySwP4Yq1JaYLBEZIzKxPN71mF2fL6Uty1wfygOvQ80D9IT9-mMsA1CPP5ozK10xO-T5BmIZtX3tMAzpM0E0vB3gmgkPbxLE3ZQtJtun-zDHg-bMkRA HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 02:25:11 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Location: https://ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659514995125-national-casino.png
track.trackingtraffo.com/push/ic?auth=pz6u78&c=hi-SIBPNmUd2e8vxR5-CI9ts5CETwV4lVtzSx1dVODWtLXEkSC1iKvB9bDTDB4t7p_AhSPZeHl_5Qo4AAuORVSzXs2rIaaJrtW1c8YF1j3xiUxJ93XuhTv1ZlWPLzDfcMDlOFxrYwes6yxr6x2qvHaTwOybs88c6iQMVNERdzQk76VYDuCGbOY05E7L825hJczcOmpzXzrXWIJIWu3ZvylXD9maNHBCneTaF6gtvV9dpvSolBi-Cf9GT1C-2fjTQoqnmhSnzyfMUX_qlRVvss26g5PAjVUskfi0yuXuZRcok4XrsHNpjkqbc2y0wxuYD-aMb11s88Q3hk5X8czLIpB8UC-21brbNby-Vgb1jL3ymY_SC0a8dBPtmP7XEDL4CgRl9itH9ZM4ZXAeUYkkaDQhboeWfpwcO9Zt4y6jFlfvivmODDFM7wVeL5soyUSwCGIYTjPH7pUrSp2wYLrdUxUvuOZs4X07He0gVLM8MsUQ5MU8HX_5RiyTB9tsdFZCPicvgX5zDGibtiLJWMeulIr4hmxGujJrTGlVL4nS-6LJxiQxl-PzI7JoqgzFkjOLaM_GvIVbDTntdzcGl4t_l18Rfb4Ym8CPt7DPG4d86KJ56Th9i
88.214.195.156302 Found 0 B URL HTTP/1.1 track.trackingtraffo.com/push/ic?auth=pz6u78&c=hi-SIBPNmUd2e8vxR5-CI9ts5CETwV4lVtzSx1dVODWtLXEkSC1iKvB9bDTDB4t7p_AhSPZeHl_5Qo4AAuORVSzXs2rIaaJrtW1c8YF1j3xiUxJ93XuhTv1ZlWPLzDfcMDlOFxrYwes6yxr6x2qvHaTwOybs88c6iQMVNERdzQk76VYDuCGbOY05E7L825hJczcOmpzXzrXWIJIWu3ZvylXD9maNHBCneTaF6gtvV9dpvSolBi-Cf9GT1C-2fjTQoqnmhSnzyfMUX_qlRVvss26g5PAjVUskfi0yuXuZRcok4XrsHNpjkqbc2y0wxuYD-aMb11s88Q3hk5X8czLIpB8UC-21brbNby-Vgb1jL3ymY_SC0a8dBPtmP7XEDL4CgRl9itH9ZM4ZXAeUYkkaDQhboeWfpwcO9Zt4y6jFlfvivmODDFM7wVeL5soyUSwCGIYTjPH7pUrSp2wYLrdUxUvuOZs4X07He0gVLM8MsUQ5MU8HX_5RiyTB9tsdFZCPicvgX5zDGibtiLJWMeulIr4hmxGujJrTGlVL4nS-6LJxiQxl-PzI7JoqgzFkjOLaM_GvIVbDTntdzcGl4t_l18Rfb4Ym8CPt7DPG4d86KJ56Th9i
IP 88.214.195.156:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /push/ic?auth=pz6u78&c=hi-SIBPNmUd2e8vxR5-CI9ts5CETwV4lVtzSx1dVODWtLXEkSC1iKvB9bDTDB4t7p_AhSPZeHl_5Qo4AAuORVSzXs2rIaaJrtW1c8YF1j3xiUxJ93XuhTv1ZlWPLzDfcMDlOFxrYwes6yxr6x2qvHaTwOybs88c6iQMVNERdzQk76VYDuCGbOY05E7L825hJczcOmpzXzrXWIJIWu3ZvylXD9maNHBCneTaF6gtvV9dpvSolBi-Cf9GT1C-2fjTQoqnmhSnzyfMUX_qlRVvss26g5PAjVUskfi0yuXuZRcok4XrsHNpjkqbc2y0wxuYD-aMb11s88Q3hk5X8czLIpB8UC-21brbNby-Vgb1jL3ymY_SC0a8dBPtmP7XEDL4CgRl9itH9ZM4ZXAeUYkkaDQhboeWfpwcO9Zt4y6jFlfvivmODDFM7wVeL5soyUSwCGIYTjPH7pUrSp2wYLrdUxUvuOZs4X07He0gVLM8MsUQ5MU8HX_5RiyTB9tsdFZCPicvgX5zDGibtiLJWMeulIr4hmxGujJrTGlVL4nS-6LJxiQxl-PzI7JoqgzFkjOLaM_GvIVbDTntdzcGl4t_l18Rfb4Ym8CPt7DPG4d86KJ56Th9i HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 02:25:11 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Location: https://ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659515047164-National Casino black.png
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 411f0580e41b8c663276421f11cc67d8
273e570b706320eee29faa7c69498eabb433a82b
ec324f143f05c34d4d3f4a6078bba6cf9d90f8390e092ce64282dbbdff961b39
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 02:25:11 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 00:04:39 GMT
Expires: Thu, 08 Dec 2022 00:04:38 GMT
Etag: "273e570b706320eee29faa7c69498eabb433a82b"
Cache-Control: max-age=595766,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77285eee3ada0b49-OSL
334cb4d684.f1ec7ead22.com/health/
159.69.163.6200 OK 0 B URL HTTP/2 334cb4d684.f1ec7ead22.com/health/
IP 159.69.163.6:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /health/ HTTP/1.1
Host: 334cb4d684.f1ec7ead22.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 01 Dec 2022 02:25:11 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
track.trackingtraffo.com/push/im?auth=pz6u78&c=FRNa-hXB1bNjcd0ZZkEWkeGbDgmX8KwOiYMQpDNUi5eND8OI2WZOxCcbH_ag0BUI98iVQwx97KELCSEVaMbcBCkg17FnGJDieoT3NWz8eJyvwPAX-PhPI65FHEqb2TCpSoDeUsbe21Z18TL6m17EIo65m17XvGKNloZIPfvJDjg9T95B91naEoXpPmwgddtOYQaG20tZIEHbXa9q9YPchstJN6UF5Z3WV15W49HePYHTVl3F7nb9rQdHX0gLAdQHtT3DNEGnDSMajb3I09Tl3-w4N7JUmRvxOr5akiGUdpKMvvQ24Lwlh4EFnlyjjAshqMf5ET9-FAfcBU44ey5PgwvnkjLH6DVRXfXsQG9VQ__pb9zsWwERVOXkDbH2qpgMOKSTGqLSrJcWsvstob3oCk9a7hZpvF6kIvcJLKHVHTh4wZuoyQzSG2yDZtZYbx1-fHfS6SnDmICaVSp0XSfTZCT7NiWvpd8pptS_mYMykv2MJLpgK6bGlV3Py1QpgOkZVQFh1HSXo12jDs1pzebBJOg9BEKcTID1ShgThHLq_es5yfUJ-5iE-qxIr8mvf2kuu6yuc6voNczY6PnHILuuaixKKXML4_USeDeHdw
88.214.195.156302 Found 0 B URL HTTP/1.1 track.trackingtraffo.com/push/im?auth=pz6u78&c=FRNa-hXB1bNjcd0ZZkEWkeGbDgmX8KwOiYMQpDNUi5eND8OI2WZOxCcbH_ag0BUI98iVQwx97KELCSEVaMbcBCkg17FnGJDieoT3NWz8eJyvwPAX-PhPI65FHEqb2TCpSoDeUsbe21Z18TL6m17EIo65m17XvGKNloZIPfvJDjg9T95B91naEoXpPmwgddtOYQaG20tZIEHbXa9q9YPchstJN6UF5Z3WV15W49HePYHTVl3F7nb9rQdHX0gLAdQHtT3DNEGnDSMajb3I09Tl3-w4N7JUmRvxOr5akiGUdpKMvvQ24Lwlh4EFnlyjjAshqMf5ET9-FAfcBU44ey5PgwvnkjLH6DVRXfXsQG9VQ__pb9zsWwERVOXkDbH2qpgMOKSTGqLSrJcWsvstob3oCk9a7hZpvF6kIvcJLKHVHTh4wZuoyQzSG2yDZtZYbx1-fHfS6SnDmICaVSp0XSfTZCT7NiWvpd8pptS_mYMykv2MJLpgK6bGlV3Py1QpgOkZVQFh1HSXo12jDs1pzebBJOg9BEKcTID1ShgThHLq_es5yfUJ-5iE-qxIr8mvf2kuu6yuc6voNczY6PnHILuuaixKKXML4_USeDeHdw
IP 88.214.195.156:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /push/im?auth=pz6u78&c=FRNa-hXB1bNjcd0ZZkEWkeGbDgmX8KwOiYMQpDNUi5eND8OI2WZOxCcbH_ag0BUI98iVQwx97KELCSEVaMbcBCkg17FnGJDieoT3NWz8eJyvwPAX-PhPI65FHEqb2TCpSoDeUsbe21Z18TL6m17EIo65m17XvGKNloZIPfvJDjg9T95B91naEoXpPmwgddtOYQaG20tZIEHbXa9q9YPchstJN6UF5Z3WV15W49HePYHTVl3F7nb9rQdHX0gLAdQHtT3DNEGnDSMajb3I09Tl3-w4N7JUmRvxOr5akiGUdpKMvvQ24Lwlh4EFnlyjjAshqMf5ET9-FAfcBU44ey5PgwvnkjLH6DVRXfXsQG9VQ__pb9zsWwERVOXkDbH2qpgMOKSTGqLSrJcWsvstob3oCk9a7hZpvF6kIvcJLKHVHTh4wZuoyQzSG2yDZtZYbx1-fHfS6SnDmICaVSp0XSfTZCT7NiWvpd8pptS_mYMykv2MJLpgK6bGlV3Py1QpgOkZVQFh1HSXo12jDs1pzebBJOg9BEKcTID1ShgThHLq_es5yfUJ-5iE-qxIr8mvf2kuu6yuc6voNczY6PnHILuuaixKKXML4_USeDeHdw HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 02:25:11 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Location: https://ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659515047166-national-casino.png
334cb4d684.f1ec7ead22.com/get/?go=1&data=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
159.69.163.6302 Found 0 B URL HTTP/2 334cb4d684.f1ec7ead22.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImMiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTY5NSwic3BhY2VpZCI6MTY5NSwidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6IkZyZWUlMkNNb3ZpZXMlMkNTZXglMkNUdWJlJTJDU2hlbWFsZVBvd2VyJTJDRW5qb3klMkNGUkVFJTJDVHJhbnMlMkNWaWRlb3MlMkNzdHJlYW1pbmclMkNhbmQlMkNNb3ZpZXMlMkNoaWdoJTJDcXVhbGl0eSUyQ0hEJTJDdHJhbm55JTJDcG9ybiUyQ2VudGlyZWx5JTJDZnJlZSUyQ25ldyUyQ3ZpZGVvcyUyQ2V2ZXJ5JTJDZGF5JTJDZmluZCUyQ3RoZSUyQ2hvdHRlc3QlMkNwb3JuJTJDdmlkZW9zJTJDYW5kJTJDc2V4JTJDbW92aWVzJTJDYW5kJTJDaG90JTJDcG9ybnN0YXJzLiUyMCIsImxhYmVscyI6IiIsImFsbG93ZWRfbGFiZWxzIjoiIiwidGl0bGUiOiIiLCJzdWJpZCI6IjE3MjM3MjMwOTYiLCJyZWZyZXNoIjoxLCJ1dG0xIjoiIiwidXRtMiI6IiIsInV0bTQiOiIiLCJzcG90X2lkIjoxMjA1OSwibXVsdGlwbGUiOmZhbHNlLCJpc19pZnJhbWUiOmZhbHNlLCJyZWZkb21haW4iOiIiLCJwbCI6MCwic3RyYXRhZ2VtIjoibmxhYmVsLWEiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM5NzIsImJ0eXBlIjowfSwiYmFubmVyIjp7InciOjEsImgiOjF9fV0sInNpdGUiOnsiaWQiOiIxMjA1OSIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9zaGVtYWxlcG93ZXIueHl6LyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI5ZTQ5NDdmMzU3NTE0NjU0MTFmZDFhNGY1YzM1OGM3OCIsImZwIjpudWxsfSwiZXh0Ijp7ImR0IjoxNjY5ODYxNTEwMzIzfX0=
IP 159.69.163.6:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /get/?go=1&data=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 HTTP/1.1
Host: 334cb4d684.f1ec7ead22.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 01 Dec 2022 02:25:11 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://rtbrennab.com/banner/in/show/?mid=1010377287453299284&pid=0&site=12059&sc=NO&usage_type=DCH&subid=1723723096&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=shemalepower.xyz&hostname=auc-banner-hz-5&site_id=0&spot_id=12059&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=100&ml=&tag_ab=c&ttl=&space_id=1695&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D12059%26source%3D1723723096%26idzone%3D0%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D12059%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DFree%252CMovies%252CSex%252CTube%252CShemalePower%252CEnjoy%252CFREE%252CTrans%252CVideos%252Cstreaming%252Cand%252CMovies%252Chigh%252Cquality%252CHD%252Ctranny%252Cporn%252Centirely%252Cfree%252Cnew%252Cvideos%252Cevery%252Cday%252Cfind%252Cthe%252Chottest%252Cporn%252Cvideos%252Cand%252Csex%252Cmovies%252Cand%252Chot%252Cpornstars.%2520%26spot_id%3D12059%26p%3Dhttps%253A%252F%252Fshemalepower.xyz%252F%26katds_labels%3D%26btype%3D0%26score%3D100%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Free%2CMovies%2CSex%2CTube%2CShemalePower%2CEnjoy%2CFREE%2CTrans%2CVideos%2Cstreaming%2Cand%2CMovies%2Chigh%2Cquality%2CHD%2Ctranny%2Cporn%2Centirely%2Cfree%2Cnew%2Cvideos%2Cevery%2Cday%2Cfind%2Cthe%2Chottest%2Cporn%2Cvideos%2Cand%2Csex%2Cmovies%2Cand%2Chot%2Cpornstars.%20&stratagem=nlabel-a&ssp=3972
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=1010377287453299284&pid=0&site=12059&sc=NO&usage_type=DCH&subid=1723723096&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=shemalepower.xyz&hostname=auc-banner-hz-5&site_id=0&spot_id=12059&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=100&ml=&tag_ab=c&ttl=&space_id=1695&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D12059%26source%3D1723723096%26idzone%3D0%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D12059%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DFree%252CMovies%252CSex%252CTube%252CShemalePower%252CEnjoy%252CFREE%252CTrans%252CVideos%252Cstreaming%252Cand%252CMovies%252Chigh%252Cquality%252CHD%252Ctranny%252Cporn%252Centirely%252Cfree%252Cnew%252Cvideos%252Cevery%252Cday%252Cfind%252Cthe%252Chottest%252Cporn%252Cvideos%252Cand%252Csex%252Cmovies%252Cand%252Chot%252Cpornstars.%2520%26spot_id%3D12059%26p%3Dhttps%253A%252F%252Fshemalepower.xyz%252F%26katds_labels%3D%26btype%3D0%26score%3D100%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Free%2CMovies%2CSex%2CTube%2CShemalePower%2CEnjoy%2CFREE%2CTrans%2CVideos%2Cstreaming%2Cand%2CMovies%2Chigh%2Cquality%2CHD%2Ctranny%2Cporn%2Centirely%2Cfree%2Cnew%2Cvideos%2Cevery%2Cday%2Cfind%2Cthe%2Chottest%2Cporn%2Cvideos%2Cand%2Csex%2Cmovies%2Cand%2Chot%2Cpornstars.%20&stratagem=nlabel-a&ssp=3972
162.55.139.130302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=1010377287453299284&pid=0&site=12059&sc=NO&usage_type=DCH&subid=1723723096&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=shemalepower.xyz&hostname=auc-banner-hz-5&site_id=0&spot_id=12059&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=100&ml=&tag_ab=c&ttl=&space_id=1695&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D12059%26source%3D1723723096%26idzone%3D0%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D12059%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DFree%252CMovies%252CSex%252CTube%252CShemalePower%252CEnjoy%252CFREE%252CTrans%252CVideos%252Cstreaming%252Cand%252CMovies%252Chigh%252Cquality%252CHD%252Ctranny%252Cporn%252Centirely%252Cfree%252Cnew%252Cvideos%252Cevery%252Cday%252Cfind%252Cthe%252Chottest%252Cporn%252Cvideos%252Cand%252Csex%252Cmovies%252Cand%252Chot%252Cpornstars.%2520%26spot_id%3D12059%26p%3Dhttps%253A%252F%252Fshemalepower.xyz%252F%26katds_labels%3D%26btype%3D0%26score%3D100%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Free%2CMovies%2CSex%2CTube%2CShemalePower%2CEnjoy%2CFREE%2CTrans%2CVideos%2Cstreaming%2Cand%2CMovies%2Chigh%2Cquality%2CHD%2Ctranny%2Cporn%2Centirely%2Cfree%2Cnew%2Cvideos%2Cevery%2Cday%2Cfind%2Cthe%2Chottest%2Cporn%2Cvideos%2Cand%2Csex%2Cmovies%2Cand%2Chot%2Cpornstars.%20&stratagem=nlabel-a&ssp=3972
IP 162.55.139.130:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=1010377287453299284&pid=0&site=12059&sc=NO&usage_type=DCH&subid=1723723096&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=shemalepower.xyz&hostname=auc-banner-hz-5&site_id=0&spot_id=12059&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=100&ml=&tag_ab=c&ttl=&space_id=1695&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D12059%26source%3D1723723096%26idzone%3D0%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D12059%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DFree%252CMovies%252CSex%252CTube%252CShemalePower%252CEnjoy%252CFREE%252CTrans%252CVideos%252Cstreaming%252Cand%252CMovies%252Chigh%252Cquality%252CHD%252Ctranny%252Cporn%252Centirely%252Cfree%252Cnew%252Cvideos%252Cevery%252Cday%252Cfind%252Cthe%252Chottest%252Cporn%252Cvideos%252Cand%252Csex%252Cmovies%252Cand%252Chot%252Cpornstars.%2520%26spot_id%3D12059%26p%3Dhttps%253A%252F%252Fshemalepower.xyz%252F%26katds_labels%3D%26btype%3D0%26score%3D100%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Free%2CMovies%2CSex%2CTube%2CShemalePower%2CEnjoy%2CFREE%2CTrans%2CVideos%2Cstreaming%2Cand%2CMovies%2Chigh%2Cquality%2CHD%2Ctranny%2Cporn%2Centirely%2Cfree%2Cnew%2Cvideos%2Cevery%2Cday%2Cfind%2Cthe%2Chottest%2Cporn%2Cvideos%2Cand%2Csex%2Cmovies%2Cand%2Chot%2Cpornstars.%20&stratagem=nlabel-a&ssp=3972 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.16.0
date: Thu, 01 Dec 2022 02:25:11 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=12059&source=1723723096&idzone=0&w=1&h=1&mo=&ve=&site_id=12059&utm1=&utm2=&utm3=&utm4=&ad_tags=Free%2CMovies%2CSex%2CTube%2CShemalePower%2CEnjoy%2CFREE%2CTrans%2CVideos%2Cstreaming%2Cand%2CMovies%2Chigh%2Cquality%2CHD%2Ctranny%2Cporn%2Centirely%2Cfree%2Cnew%2Cvideos%2Cevery%2Cday%2Cfind%2Cthe%2Chottest%2Cporn%2Cvideos%2Cand%2Csex%2Cmovies%2Cand%2Chot%2Cpornstars.%20&spot_id=12059&p=https%3A%2F%2Fshemalepower.xyz%2F&katds_labels=&btype=0&score=100&bf=0.0001
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=12059&source=1723723096&idzone=0&w=1&h=1&mo=&ve=&site_id=12059&utm1=&utm2=&utm3=&utm4=&ad_tags=Free%2CMovies%2CSex%2CTube%2CShemalePower%2CEnjoy%2CFREE%2CTrans%2CVideos%2Cstreaming%2Cand%2CMovies%2Chigh%2Cquality%2CHD%2Ctranny%2Cporn%2Centirely%2Cfree%2Cnew%2Cvideos%2Cevery%2Cday%2Cfind%2Cthe%2Chottest%2Cporn%2Cvideos%2Cand%2Csex%2Cmovies%2Cand%2Chot%2Cpornstars.%20&spot_id=12059&p=https%3A%2F%2Fshemalepower.xyz%2F&katds_labels=&btype=0&score=100&bf=0.0001
109.206.175.85302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=12059&source=1723723096&idzone=0&w=1&h=1&mo=&ve=&site_id=12059&utm1=&utm2=&utm3=&utm4=&ad_tags=Free%2CMovies%2CSex%2CTube%2CShemalePower%2CEnjoy%2CFREE%2CTrans%2CVideos%2Cstreaming%2Cand%2CMovies%2Chigh%2Cquality%2CHD%2Ctranny%2Cporn%2Centirely%2Cfree%2Cnew%2Cvideos%2Cevery%2Cday%2Cfind%2Cthe%2Chottest%2Cporn%2Cvideos%2Cand%2Csex%2Cmovies%2Cand%2Chot%2Cpornstars.%20&spot_id=12059&p=https%3A%2F%2Fshemalepower.xyz%2F&katds_labels=&btype=0&score=100&bf=0.0001
IP 109.206.175.85:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=12059&source=1723723096&idzone=0&w=1&h=1&mo=&ve=&site_id=12059&utm1=&utm2=&utm3=&utm4=&ad_tags=Free%2CMovies%2CSex%2CTube%2CShemalePower%2CEnjoy%2CFREE%2CTrans%2CVideos%2Cstreaming%2Cand%2CMovies%2Chigh%2Cquality%2CHD%2Ctranny%2Cporn%2Centirely%2Cfree%2Cnew%2Cvideos%2Cevery%2Cday%2Cfind%2Cthe%2Chottest%2Cporn%2Cvideos%2Cand%2Csex%2Cmovies%2Cand%2Chot%2Cpornstars.%20&spot_id=12059&p=https%3A%2F%2Fshemalepower.xyz%2F&katds_labels=&btype=0&score=100&bf=0.0001 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Cookie: 912.0=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Thu, 01 Dec 2022 02:25:11 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://cdn.1vag.com/1x1.png
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 912.0=1; expires=Fri, 02 Dec 2022 02:25:11 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659514995116-National%20Casino%20black.png
142.132.194.196200 OK 4.5 kB URL HTTP/1.1 ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659514995116-National%20Casino%20black.png
IP 142.132.194.196:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 58be17b22d6e1178a54c92cf862c817e
b821bc2f016751647df49e49863077e927a70322
9cc4f3f40313b08baf54c956685ac7a21ac8a3573908b9763865c6f613ce1b5f
GET /creatives/k1qy286gxmd5g3dpr397nw5v/1659514995116-National%20Casino%20black.png HTTP/1.1
Host: ads.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 02:25:11 GMT
Content-Type: image/png
Content-Length: 4456
Last-Modified: Wed, 03 Aug 2022 08:23:15 GMT
Connection: keep-alive
ETag: "62ea3073-1168"
Accept-Ranges: bytes
ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659514995125-national-casino.png
142.132.194.196200 OK 4.6 kB URL HTTP/1.1 ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659514995125-national-casino.png
IP 142.132.194.196:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 433 x 176, 8-bit colormap, non-interlaced\012- data
Hash edffdc6a4138205965ac7c1440fbfb50
9cff09cdfdc1e054c431e6cbf4c12e4ec681e601
83ff002a01d8c1668fc4a851cc3eb1c24b929c4aced7ff7eb32b9ae3711c7498
GET /creatives/k1qy286gxmd5g3dpr397nw5v/1659514995125-national-casino.png HTTP/1.1
Host: ads.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 02:25:11 GMT
Content-Type: image/png
Content-Length: 4596
Last-Modified: Wed, 03 Aug 2022 08:23:15 GMT
Connection: keep-alive
ETag: "62ea3073-11f4"
Accept-Ranges: bytes
ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659515047164-National%20Casino%20black.png
142.132.194.196200 OK 4.5 kB URL HTTP/1.1 ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659515047164-National%20Casino%20black.png
IP 142.132.194.196:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 58be17b22d6e1178a54c92cf862c817e
b821bc2f016751647df49e49863077e927a70322
9cc4f3f40313b08baf54c956685ac7a21ac8a3573908b9763865c6f613ce1b5f
GET /creatives/k1qy286gxmd5g3dpr397nw5v/1659515047164-National%20Casino%20black.png HTTP/1.1
Host: ads.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 02:25:11 GMT
Content-Type: image/png
Content-Length: 4456
Last-Modified: Wed, 03 Aug 2022 08:24:07 GMT
Connection: keep-alive
ETag: "62ea30a7-1168"
Accept-Ranges: bytes
ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659515047166-national-casino.png
142.132.194.196200 OK 4.6 kB URL HTTP/1.1 ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659515047166-national-casino.png
IP 142.132.194.196:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 433 x 176, 8-bit colormap, non-interlaced\012- data
Hash edffdc6a4138205965ac7c1440fbfb50
9cff09cdfdc1e054c431e6cbf4c12e4ec681e601
83ff002a01d8c1668fc4a851cc3eb1c24b929c4aced7ff7eb32b9ae3711c7498
GET /creatives/k1qy286gxmd5g3dpr397nw5v/1659515047166-national-casino.png HTTP/1.1
Host: ads.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 02:25:11 GMT
Content-Type: image/png
Content-Length: 4596
Last-Modified: Wed, 03 Aug 2022 08:24:07 GMT
Connection: keep-alive
ETag: "62ea30a7-11f4"
Accept-Ranges: bytes
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash cc38388edbe9fc1581700806f0300ebc
4a9640bb3d6f540e02326fa23e0e4bfa9b47c61a
52e7d02844ebe099813921038e49a23e15fe7b2fbac302a587013584fbd28815
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52E7D02844EBE099813921038E49A23E15FE7B2FBAC302A587013584FBD28815"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2125
Expires: Thu, 01 Dec 2022 03:00:36 GMT
Date: Thu, 01 Dec 2022 02:25:11 GMT
Connection: keep-alive
cdnjs.cloudflare.com/ajax/libs/postscribe/2.0.8/postscribe.min.js
104.17.25.14200 OK 5.1 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/postscribe/2.0.8/postscribe.min.js
IP 104.17.25.14:0
File type ASCII text, with very long lines (17660)
Hash abe1df98b6ab4644bd567e6669d0da03
27e3bf22ef08b7ca0090721ed31b4f921d278e7c
cd40ba7dbf63d67511c0fd56b7e5327dbedb43d15c439d79a8aacb6377059540
GET /ajax/libs/postscribe/2.0.8/postscribe.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 02:25:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 5117
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03faa-45f4"
last-modified: Mon, 04 May 2020 16:15:38 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 15143173
expires: Tue, 21 Nov 2023 02:25:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=epDBtRnzks3mJJ0QiwC3Dyo%2FDVydOu6R1RajkEaVLh%2BSguDuJeyvdYhamUpML7g95ouiASXvqfytHuW9xxfueGJNjVbMIg8o1Q2f6NQNdU1zGk4P8WYYc2rLJYUK1BEvZPLwSTbu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77285ef18b631c0a-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.1vag.com/1x1.png
45.133.44.24200 OK 68 B IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /1x1.png HTTP/1.1
Host: cdn.1vag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 02:25:11 GMT
content-type: image/png
content-length: 68
server: nginx/1.20.1
last-modified: Wed, 15 Apr 2020 13:30:15 GMT
etag: "5e970c67-44"
cache-control: max-age=3600
x-request-id: e0cea73041c202c45e6ab3a8b14597f5
expires: Thu, 01 Dec 2022 03:25:11 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
werawhaco.com/c/H.VAzFa/E/5yvBdsGUlmm/e/UlN/vqZYGgUB/ceomj9Pu/ZkUKltklPOTVQFyyNNDAMMw/NSTMQVtSNWDgIw0OMhz/Am1wN/SpZYwkdHXXNsoWWJmk9Mu-ZTUflpkvPQTPQVyYNRD/MCwhN/TxQUtvNtDKI/0NMfzaAo1/NuQV
188.72.219.36200 OK 0 B URL HTTP/2 werawhaco.com/c/H.VAzFa/E/5yvBdsGUlmm/e/UlN/vqZYGgUB/ceomj9Pu/ZkUKltklPOTVQFyyNNDAMMw/NSTMQVtSNWDgIw0OMhz/Am1wN/SpZYwkdHXXNsoWWJmk9Mu-ZTUflpkvPQTPQVyYNRD/MCwhN/TxQUtvNtDKI/0NMfzaAo1/NuQV
IP 188.72.219.36:0
GET /c/H.VAzFa/E/5yvBdsGUlmm/e/UlN/vqZYGgUB/ceomj9Pu/ZkUKltklPOTVQFyyNNDAMMw/NSTMQVtSNWDgIw0OMhz/Am1wN/SpZYwkdHXXNsoWWJmk9Mu-ZTUflpkvPQTPQVyYNRD/MCwhN/TxQUtvNtDKI/0NMfzaAo1/NuQV HTTP/1.1
Host: werawhaco.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 02:25:12 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
a.shukriya90.com/api/spots/295775?host=shemalepower.xyz&ev=197&wh=939&ww=1280&uuid=&s1=%25subid1%25
135.181.208.216200 OK 0 B URL HTTP/2 a.shukriya90.com/api/spots/295775?host=shemalepower.xyz&ev=197&wh=939&ww=1280&uuid=&s1=%25subid1%25
IP 135.181.208.216:0
ASN #24940 Hetzner Online GmbH
GET /api/spots/295775?host=shemalepower.xyz&ev=197&wh=939&ww=1280&uuid=&s1=%25subid1%25 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Cookie: nauid=HMdHP3zQyvaPNaKzZyb1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 02:25:07 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.tubecorp.com/b/tcbanner.js?v=9
45.133.44.24200 OK 0 B URL HTTP/2 cdn.tubecorp.com/b/tcbanner.js?v=9
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
GET /b/tcbanner.js?v=9 HTTP/1.1
Host: cdn.tubecorp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.shukriya90.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 02:25:07 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.20.1
last-modified: Sat, 20 Nov 2021 06:50:35 GMT
etag: W/"61989abb-c604"
cache-control: max-age=3600
x-request-id: eb03ce2295c7cf6145769d1f48d5ab66
content-encoding: gzip
expires: Thu, 01 Dec 2022 03:25:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.tapioni.com/ip-push.js
143.204.55.110200 OK 0 B URL HTTP/2 cdn.tapioni.com/ip-push.js
IP 143.204.55.110:0
GET /ip-push.js HTTP/1.1
Host: cdn.tapioni.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Wed, 26 Oct 2022 08:27:42 GMT
last-modified: Sat, 22 Oct 2022 11:28:35 GMT
etag: W/"6353d3e3-17738"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 7UzfQw7jWLVVHlA99-VprIQwr-ZbKFAxBAP_91F7i3jpQl22LQSypA==
age: 3088644
X-Firefox-Spdy: h2
12007250.pix-cdn.org/a/pjexo.html?idzone=3830821&w=728&h=90&ad_sub=&ad_tags=shemale
45.133.44.25200 OK 0 B URL HTTP/2 12007250.pix-cdn.org/a/pjexo.html?idzone=3830821&w=728&h=90&ad_sub=&ad_tags=shemale
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
GET /a/pjexo.html?idzone=3830821&w=728&h=90&ad_sub=&ad_tags=shemale HTTP/1.1
Host: 12007250.pix-cdn.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbbnr.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: text/html; charset=UTF-8
last-modified: Wed, 20 May 2020 13:08:32 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AWhpqWgs%2FiNAya7jkJv6nkWcnxXWYNR%2BUEyAt0HiKfZxsg3GlU%2BDdoNKA%2FFgttG6DPaCtKk5LaO7nR9%2F8V8WRdabyzXuYgFmXn1wd%2FWCKs2pOhZe%2FMSEXyNYQUIZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 771c5dd72ebd7264-HAM
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
expires: Thu, 01 Dec 2022 03:25:08 GMT
cache-control: max-age=3600
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
136ffb81df.df253f3b96.com/37045ca0347ab2015c7cee6da8efb990/6181?version_name=c
45.133.44.25200 OK 0 B URL HTTP/2 136ffb81df.df253f3b96.com/37045ca0347ab2015c7cee6da8efb990/6181?version_name=c
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
Analyzer Verdict Alert quad9 Sinkholed
GET /37045ca0347ab2015c7cee6da8efb990/6181?version_name=c HTTP/1.1
Host: 136ffb81df.df253f3b96.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Origin: https://shemalepower.xyz
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 02:25:07 GMT
content-type: application/json
server: nginx/1.18.0
cache-control: max-age=300
expires: Thu, 01 Dec 2022 02:30:07 GMT
x-proxy-cache: EXPIRED
access-control-allow-origin: *
X-Firefox-Spdy: h2
shemalepower.xyz/
104.21.13.70200 OK 0 B IP 104.21.13.70:0
GET / HTTP/1.1
Host: shemalepower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Thu, 01 Dec 2022 02:25:06 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33, PleskLin
link: <https://shemalepower.xyz/wp-json/>; rel="https://api.w.org/"
x-wp-cf-super-cache: cache
x-wp-cf-super-cache-active: 1
x-wp-cf-super-cache-cache-control: s-maxage=31536000, max-age=60
x-wp-cf-super-cache-cookies-bypass: swfpc-feature-not-enabled
cache-control: s-maxage=31536000, max-age=60
vary: Accept-Encoding,User-Agent, Accept-Encoding
x-content-type-options: nosniff
x-frame-options: sameorigin
x-cache-status: MISS
strict-transport-security: max-age=15552000; includeSubDomains; preload
last-modified: Wed, 30 Nov 2022 10:34:37 GMT
cf-cache-status: HIT
age: 49362
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JTlQrSwDxMLaX%2B1sRJhzMd%2Bt1Znrb3oOZS%2BhpC%2BAUhJ4d92JlSWW0X%2F0vQdT33OzJNl%2BZFCjJ35xcrGddKXbhyR598uEZc4F8WdxdoRWW3VuV2oLd5BnKsiHj3KSFfwfNnnX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77285ecedaf3b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
136ffb81df.df253f3b96.com/fcd57d307ea6fbb23204b1c51f4041fc.js
45.133.44.25200 OK 0 B URL HTTP/2 136ffb81df.df253f3b96.com/fcd57d307ea6fbb23204b1c51f4041fc.js
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
Analyzer Verdict Alert quad9 Sinkholed
GET /fcd57d307ea6fbb23204b1c51f4041fc.js HTTP/1.1
Host: 136ffb81df.df253f3b96.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 13 Oct 2022 09:19:10 GMT
etag: W/"6347d80e-16007"
content-encoding: gzip
expires: Thu, 01 Dec 2022 02:30:08 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
tsyndicate.com/iframes2/ecaaabf53036409d9c39b44bec79a69d.html?subid=1978492486&categories=shemale
136.243.83.47200 OK 0 B URL HTTP/2 tsyndicate.com/iframes2/ecaaabf53036409d9c39b44bec79a69d.html?subid=1978492486&categories=shemale
IP 136.243.83.47:0
ASN #24940 Hetzner Online GmbH
GET /iframes2/ecaaabf53036409d9c39b44bec79a69d.html?subid=1978492486&categories=shemale HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbbnr.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: 25c4b670c402d0e1
set-cookie: ts_uid=abf4e925-1631-43a8-b32f-5e14177868a2; expires=Thu, 01 Jun 2023 02:25:08 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCxxYZN2zQUHijCwsRYwpuieFQRBmJMWzYyJGDxo0cMHB06aMg; expires=Fri, 02 Dec 2022 02:25:08 GMT; domain=.tsyndicate.com; path=/; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.tapioni.com/asg_embed.js
143.204.55.110200 OK 0 B URL HTTP/2 cdn.tapioni.com/asg_embed.js
IP 143.204.55.110:0
GET /asg_embed.js HTTP/1.1
Host: cdn.tapioni.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Fri, 04 Nov 2022 02:06:59 GMT
last-modified: Tue, 01 Nov 2022 08:26:05 GMT
etag: W/"6360d81d-1d0bc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 5AkJS4Bp_Tw2CQiG4Ob-Ot94daEedVJrreR_Rh-1yeZiNl3rsMwdXw==
age: 2333887
X-Firefox-Spdy: h2
a.shukriya90.com/api/spots/295449?p=1&s1=%subid1%&kw=shemale
135.181.208.216200 OK 0 B URL HTTP/2 a.shukriya90.com/api/spots/295449?p=1&s1=%subid1%&kw=shemale
IP 135.181.208.216:0
ASN #24940 Hetzner Online GmbH
GET /api/spots/295449?p=1&s1=%subid1%&kw=shemale HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalepower.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 02:25:06 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: nauid=Bj2LJbfCZotfA5KjvXth; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
a.shukriya90.com/api/spots/301892?p=1&s1=%subid1%&kw=shemale
135.181.208.216200 OK 0 B URL HTTP/2 a.shukriya90.com/api/spots/301892?p=1&s1=%subid1%&kw=shemale
IP 135.181.208.216:0
ASN #24940 Hetzner Online GmbH
GET /api/spots/301892?p=1&s1=%subid1%&kw=shemale HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 02:25:06 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: nauid=O5fQGBMgrA0olKCitq8c; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
a.shukriya90.com/api/spots/295449?p=1&s1=%subid1%&kw=shemale
135.181.208.216200 OK 0 B URL HTTP/2 a.shukriya90.com/api/spots/295449?p=1&s1=%subid1%&kw=shemale
IP 135.181.208.216:0
ASN #24940 Hetzner Online GmbH
GET /api/spots/295449?p=1&s1=%subid1%&kw=shemale HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalepower.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 02:25:06 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: nauid=YZ6rgGdcgNdaVdLu0hFO; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
a.shukriya90.com/api/spots/295448?p=1&s1=%subid1%&kw=shemale
135.181.208.216200 OK 0 B URL HTTP/2 a.shukriya90.com/api/spots/295448?p=1&s1=%subid1%&kw=shemale
IP 135.181.208.216:0
ASN #24940 Hetzner Online GmbH
GET /api/spots/295448?p=1&s1=%subid1%&kw=shemale HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 02:25:06 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: nauid=HMdHP3zQyvaPNaKzZyb1; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
136ffb81df.df253f3b96.com/bb15a516266480efffa2514cb1b2f3e4.js
45.133.44.25200 OK 0 B URL HTTP/2 136ffb81df.df253f3b96.com/bb15a516266480efffa2514cb1b2f3e4.js
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
Analyzer Verdict Alert quad9 Sinkholed
GET /bb15a516266480efffa2514cb1b2f3e4.js HTTP/1.1
Host: 136ffb81df.df253f3b96.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Mon, 17 Oct 2022 14:33:56 GMT
etag: W/"634d67d4-b2f5"
content-encoding: gzip
expires: Thu, 01 Dec 2022 02:30:08 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
a.adtng.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?unique_view=1
66.254.114.171200 OK 0 B URL HTTP/2 a.adtng.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?unique_view=1
IP 66.254.114.171:0
GET /track/adviews/eyJleHRfemlkIjoiIiwiZXh0X2MiOiIiLCJleHRfYWlkIjoiIiwicGlkIjoiNjA0Iiwic2lkIjoiMTAwMDY3MTkiLCJuaWRzIjoiNDIzMjIiLCJkeW5fZG1uIjoiIiwiY3JpZCI6IjEwMjQyNTUiLCJzdiI6IjY4IiwicmVmX2RtbiI6InRzeW5kaWNhdGUuY29tIiwiZXh0X2NpZCI6IiIsInRzbmFtZSI6IkFGRiIsImNyYyI6IjMiLCJjbiI6IjMwMFgxMDBfVFJBTlNfSlMiLCJuaWQiOiI0MjMyMiIsImV4dF9wdWIiOiIiLCJjcnAiOiI3MCIsInRpZCI6IjIiLCJpdCI6IjAxXC9EZWNcLzIwMjI6MDI6MjU6MDggKzAwMDAiLCJjYyI6IjEiLCJzbmNpZCI6Ijg5NzUxIiwiY2lkIjoiMzQ4OTEiLCJleHRfdWlkIjoiIiwiY3AiOiIxMDAiLCJzbmNjaWQiOiIxODQ2NTAwIiwiaWlkIjoiOTM5YzZhY2NjMWU0YWIwODYyZTc0NmVlM2QzYTI2MTQiLCJleHRfaWlkIjoiIn0=?unique_view=1 HTTP/1.1
Host: a.adtng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.adtng.com/get/10006719?time=1592491732319&atc=416774&apb=QYU5QnAcpIY5TcSif8Ik7FCc0cfsJdTSNXXShtrCxPE35eWRLnpYDCxKOybLQ9Ua2zBialnx6MtdhcxWeRv8JwP8aHGzzgIe1TRK4lbu-n12_gUIDRUi
Cookie: adtool_guid=Ch5KHmOIEISfxytgrxnnAg==; RNLBSERVERID=ded7078
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 01 Dec 2022 02:25:09 GMT
content-type: text/html
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
content-encoding: gzip
x-request-id: 63881084-42FE72AB01BBAC01-E29FBF
X-Firefox-Spdy: h2
js.cabnnr.com/banner-admanager/build.m.js
45.133.44.24200 OK 0 B URL HTTP/2 js.cabnnr.com/banner-admanager/build.m.js
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
GET /banner-admanager/build.m.js HTTP/1.1
Host: js.cabnnr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalepower.xyz/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 02:25:08 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 30 Nov 2022 14:18:35 GMT
etag: W/"6387663b-d063"
content-encoding: gzip
expires: Thu, 01 Dec 2022 02:30:08 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2