| |  38.247.64.197 | 301 Moved Permanently | 13 kB |
IP38.247.64.197:443
CertificateIssuerLet's Encrypt Subjectwww.vidoy.pro Fingerprint9A:93:89:3B:1B:90:D0:56:9C:A9:11:88:0C:85:FA:B7:9F:EE:B4:2C ValidityFri, 23 May 2025 09:25:36 GMT - Thu, 21 Aug 2025 09:25:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /e/b3xocoheonom HTTP/1.1
Host: vidoy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
content-type: text/html
date: Sun, 01 Jun 2025 19:00:19 GMT
server: LiteSpeed
location: https://poopstream.cloud/e/b3xocoheonom
content-encoding: gzip
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js |  104.17.25.14 | 200 OK | 90 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js IP104.17.25.14:443
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77 ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://poopstream.cloud
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 01 Jun 2025 19:00:19 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 9490f4089bd7b4f4-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 234805
expires: Fri, 22 May 2026 19:00:19 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RzpQxs0swstZ6KRQPeLrFCt4m%2BPxPhnEnekvg%2B49Q8QH%2BGezWDUmqoaPObZjgkW28gs1nqXRIdrdmQSMwRLjdGKb%2BKiaPwqciH037iGORbbViSZ4MFc6fN%2BIQF2HAEUDcfjctMtw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.video-src.com/play.svg | 104.18.4.49 | 200 OK | 633 B |
URL GET cdn.video-src.com/play.svg IP104.18.4.49:443
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerGoogle Trust Services Subjectvideo-src.com Fingerprint5D:8C:83:69:73:6A:1A:E8:22:5A:3E:8A:9C:3A:2A:9F:1F:0D:5B:A3 ValiditySat, 03 May 2025 19:57:46 GMT - Fri, 01 Aug 2025 20:57:17 GMT
File typeSVG Scalable Vector Graphics image Hash85f08506e5a64050719e7e18a26cd9c4 cda07433539f1346406e7dde1a92ea6346d593d7 b6280b025f54d1e117f8515da139cc3d7c64955a5342fd81498431578336dd08
GET /play.svg HTTP/1.1
Host: cdn.video-src.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 01 Jun 2025 19:00:20 GMT
content-type: image/svg+xml
last-modified: Sat, 15 Mar 2025 16:23:37 GMT
etag: W/"67d5a989-279"
cf-cache-status: HIT
age: 1315
expires: Sun, 01 Jun 2025 19:05:20 GMT
cache-control: public, max-age=300
vary: Accept-Encoding
server: cloudflare
cf-ray: 9490f40989131c0a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| storage.multstorage.com/log/count.html | 104.21.30.242 | 200 OK | 882 B |
URL GET storage.multstorage.com/log/count.html IP104.21.30.242:443
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerGoogle Trust Services Subjectmultstorage.com FingerprintAB:89:C2:3D:3B:E4:DD:0A:32:44:EC:41:65:9E:53:44:11:61:AB:F3 ValiditySun, 04 May 2025 05:28:22 GMT - Sat, 02 Aug 2025 06:26:59 GMT
File typeHTML document, ASCII text, with very long lines (700) Hashb728ca9cd183d1b7c3f72116b19b22a3 c1fd73f6b02cf00b8bc60b09cc99495e8494b739 8a7b1ca4bbf273b32ea865d4785a1944d1b2b133678d9b5fe7ee0406f6fd64b2
GET /log/count.html HTTP/1.1
Host: storage.multstorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 01 Jun 2025 19:00:21 GMT
content-type: text/html
server: cloudflare
last-modified: Mon, 18 Sep 2023 14:39:06 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ymRIDBZ01bSHJj8vxxJ2kYWMUSEKd4VdR7VMaTtWRdVCawAYUyxFidkmb24l4xIOrxzdgEQRlCrcdzHhzeTNQwKl1slXlPv7i5DhActTNOhreZiwe3BG"}]}
vary: Accept-Encoding
x-request-id: 8ed66bc06b7c0a0feec26d332e8fd348
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 9490f40f892f5392-AMS
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 8752d657fd.a3a706a0ae.com/dd6c1244e1680420f0109dc4951c00cf.js | 45.133.44.52 | 200 OK | 116 kB |
URL GET 8752d657fd.a3a706a0ae.com/dd6c1244e1680420f0109dc4951c00cf.js IP45.133.44.52:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subject8752d657fd.a3a706a0ae.com FingerprintD1:74:F1:97:31:52:84:CB:96:EF:C9:EE:83:F4:F5:1A:BF:AC:7A:2D ValidityThu, 29 May 2025 02:15:13 GMT - Wed, 27 Aug 2025 02:15:12 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size116 kB (115600 bytes) Hashf441f854b935e01a870cfbbc91971d53 4ae516dfde2bdb6f418a5770892f48d5c9f7b891 e5fa93530c7d923eaeeb83054acff062ccc00dc6a97a5ff97e1890f61e8e4c89
GET /dd6c1244e1680420f0109dc4951c00cf.js HTTP/1.1
Host: 8752d657fd.a3a706a0ae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 01 Jun 2025 19:00:21 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 21 May 2025 14:30:50 GMT
etag: W/"682de39a-1c390"
content-encoding: gzip
expires: Sun, 01 Jun 2025 19:05:21 GMT
cache-control: max-age=300
x-cdn-host-id: ah1747
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| 8309b4c5f6.602e6a55fb.com/in/multy |  168.119.25.102 | 204 No Content | 0 B |
URL OPTIONS 8309b4c5f6.602e6a55fb.com/in/multy IP168.119.25.102:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subject602e6a55fb.com FingerprintB2:C4:E9:FD:D6:BD:E7:5F:E3:D4:1B:D7:07:7A:59:CB:C8:BB:ED:FF ValidityWed, 28 May 2025 14:04:24 GMT - Tue, 26 Aug 2025 14:04:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /in/multy HTTP/1.1
Host: 8309b4c5f6.602e6a55fb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://poopstream.cloud/
Origin: https://poopstream.cloud
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.18.0
date: Sun, 01 Jun 2025 19:00:26 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| 8309b4c5f6.602e6a55fb.com/in/multy | 168.119.25.102 | 200 OK | 48 kB |
URL POST 8309b4c5f6.602e6a55fb.com/in/multy IP168.119.25.102:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subject602e6a55fb.com FingerprintB2:C4:E9:FD:D6:BD:E7:5F:E3:D4:1B:D7:07:7A:59:CB:C8:BB:ED:FF ValidityWed, 28 May 2025 14:04:24 GMT - Tue, 26 Aug 2025 14:04:23 GMT
Hashbdf0369a3edce1022b18c42ac975b935 ecba0a0d9511fd5dac9e111751f71f114c21c245 3e67a95ef763c251797269ae434f10a3a0a5b50d950c940c08bbafbae2a265be
POST /in/multy HTTP/1.1
Host: 8309b4c5f6.602e6a55fb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1988
Origin: https://poopstream.cloud
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 01 Jun 2025 19:00:26 GMT
content-type: application/json
content-length: 4918
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tracking.eu.flamtyr.com/rtb/feedimpression?uuid=06dd32e9-e487-4b30-b36b-1e4312aaf17a&s=101&d=254&feedid=e703&rt=1748804426401&sb=0.0027027027&db=0.005&subid=311451789&tokid=null&url=J44XHDROF354SQSK6H3P6EMFWAHPU2R6GIAQ2WT2SFROO2FWR7WG2UR23MNEVJCZHY6YRELGMJFOYIU2ZUHGWSWMDICU3J76A7YYGTY%3D&i=88d0bd&u=125ff5&g=NO&ad=1058532&sp=&spv=&sm= |  138.68.123.32 | 302 Found | 37 kB |
URL GET tracking.eu.flamtyr.com/rtb/feedimpression?uuid=06dd32e9-e487-4b30-b36b-1e4312aaf17a&s=101&d=254&feedid=e703&rt=1748804426401&sb=0.0027027027&db=0.005&subid=311451789&tokid=null&url=J44XHDROF354SQSK6H3P6EMFWAHPU2R6GIAQ2WT2SFROO2FWR7WG2UR23MNEVJCZHY6YRELGMJFOYIU2ZUHGWSWMDICU3J76A7YYGTY%3D&i=88d0bd&u=125ff5&g=NO&ad=1058532&sp=&spv=&sm= IP138.68.123.32:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subject*.eu.aneorwd.com Fingerprint07:E6:88:5E:3C:D6:6C:5A:C6:06:99:E9:07:3C:DA:B1:CA:49:BE:07 ValidityWed, 07 May 2025 16:07:35 GMT - Tue, 05 Aug 2025 16:07:34 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/feedimpression?uuid=06dd32e9-e487-4b30-b36b-1e4312aaf17a&s=101&d=254&feedid=e703&rt=1748804426401&sb=0.0027027027&db=0.005&subid=311451789&tokid=null&url=J44XHDROF354SQSK6H3P6EMFWAHPU2R6GIAQ2WT2SFROO2FWR7WG2UR23MNEVJCZHY6YRELGMJFOYIU2ZUHGWSWMDICU3J76A7YYGTY%3D&i=88d0bd&u=125ff5&g=NO&ad=1058532&sp=&spv=&sm= HTTP/1.1
Host: tracking.eu.flamtyr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
referrer-policy: no-referrer
location: https://x1.giriucon.com/8d04ffe9e8f556fe192.jpeg
content-length: 0
date: Sun, 01 Jun 2025 19:00:27 GMT
|
|
| cdn.video-src.com/img/android-icon-192x192.png | 104.18.4.49 | 200 OK | 7.3 kB |
URL GET cdn.video-src.com/img/android-icon-192x192.png IP104.18.4.49:443
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerGoogle Trust Services Subjectvideo-src.com Fingerprint5D:8C:83:69:73:6A:1A:E8:22:5A:3E:8A:9C:3A:2A:9F:1F:0D:5B:A3 ValiditySat, 03 May 2025 19:57:46 GMT - Fri, 01 Aug 2025 20:57:17 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hashc9fa28b7946530524da329524bd13820 46d7c6417ba37b7e6d0fc55cb1c1ebdc8742aba5 c32b291eda44253d25a01fb4216e266128c40603bf5cde82196886da9889e23e
GET /img/android-icon-192x192.png HTTP/1.1
Host: cdn.video-src.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 01 Jun 2025 19:00:20 GMT
content-type: image/png
cache-control: public, max-age=2592000
cf-bgj: h2pri,csam-hash
etag: W/"67d5a06f-1c79"
expires: Tue, 01 Jul 2025 19:00:20 GMT
last-modified: Sat, 15 Mar 2025 15:44:47 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 302232
server: cloudflare
cf-ray: 9490f40d3ee91c0a-OSL
X-Firefox-Spdy: h2
|
|
| fp.metricswpsh.com/fp?tag_id=335785 | 157.90.84.242 | 204 No Content | 0 B |
URL OPTIONS fp.metricswpsh.com/fp?tag_id=335785 IP157.90.84.242:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subjectnotification.tubecup.net Fingerprint6A:AF:05:21:7E:87:22:9C:BB:20:DB:34:F6:0A:88:06:79:E3:A0:78 ValidityThu, 17 Apr 2025 02:58:33 GMT - Wed, 16 Jul 2025 02:58:32 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=335785 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://poopstream.cloud/
Origin: https://poopstream.cloud
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Sun, 01 Jun 2025 19:00:21 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://poopstream.cloud
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
|
|
| 8309b4c5f6.602e6a55fb.com/in/show/?tag_ab=b&site_id=311451790&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=mq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fpoopstream.cloud%2Fe%2Fb3xocoheonom&refdom=poopstream.cloud&auction_time=1748804426&subid=2101559281&sid=506843734&tcid=0&ver=8.227.0&ver_c=&spot_id=1451790&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-06-01&iabcat=IAB25-3&user_fp=16840880353512051555&score=0&kubik_score=0&kaminari_bot_ip=1&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D2101559281%26spot_id%3D1451790%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoopstream.cloud%252Fe%252Fb3xocoheonom%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=&crtid=631f6a4368a6966d573dcdb0b6c37f8d&url=https%3A%2F%2Fmgcrs.ereiow.com%3Ffeedid%3De703%26subid%3D311451790%26uuid%3D6e85b214-7bb2-4b1d-8c43-9360fb80949d%26ep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icons=YNIVy-jLepo9aJ36SopKcQ9gvmvz6TfcE7rSQB2J9TcqnzwAFqcXlNo7_vcOxt3yhbWZo3JJhjgEbD5cTk8HFDTG34rK6hG4IDHJcXiaw8emBvmerSfMRgiD9NvjexNiXSuhkRxKXP7Pk_7KDsR4RK0kcqoiil3qARew9bdDhw5mU-d9WeELtCVJM3dwL7qDExSKT_Rtwp0wtUONKEAH0UEG4vuxu8NQuLtXSTqmS95644ogP6rWzBukm65dr0wXgCzwIIuDRY4Pr30970uM5lZu4JueyrduxZJrEYShOqexIdrQcgKVUy942UDuSNBsBm9QGRkObvUTLepA8LWQ5ZFnfaDdGlQUYYCH37ZAQ8u7VS2SJMyiUFIAM8Du52iM29QYabL63Kn99YymNnu_Q3DpZMnLV_64ZPyowQc8y3dBzH1ACNmiINESlTHVuU2SrAPXV_jMutvAepd6DWFyIri8oqREhuxSwCpNAPxqtiKw65e7luEbyQTXgDP-igU&ext_cid=0&px_id=311451790&min_cpm=0.015476601685193957&out_id=0&campaign_type=mq&aid=3412&cid=12971&uniq=&mid=3781992273840956803&skin_id=71&vertical_id=5&skin_test=0&from_cache=0&ecpm=0.03592404851038014&cpm=0.04728715084487467&verify_hash=e9746b0b8ce4759f3c8fe5afb58574e2&verify_hash_v2=c085a5c09909e9813fa46ea3b6196bffcebdf3975915dd26081144c1f0b55426&is_native=1&real_bid=0.0020532432419632434&original_bid_usd=0.0027027027&original_bid=0.0027027027&show_type=0&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=101,4,129,148,5&need_redirect_show=0&applied_features=coef_090,main-skins-settings&show_count=1&expiration_timestamp=0&image_url=null&site=native-push-adult&price=0.0027027027&hostname=auc-inpage-hz-13-a&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.0000027027027000000005&ext_campaign_id_str=&is_webview=0&client_price=0&direct_client_price=0&priority=0&client_payment_model=&is_in_app=0&auc_domain_type=hash&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=teens&is_iframe=0&traffic_category=adult&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=gamblingBlueMessage-view-b_r-body&st=0.11&cpa=695adcda-ce62-42a5-9bcc-a10a7a09a49e&prev_step_diff=890 | 168.119.25.102 | 200 OK | 0 B |
URL GET 8309b4c5f6.602e6a55fb.com/in/show/?tag_ab=b&site_id=311451790&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=mq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fpoopstream.cloud%2Fe%2Fb3xocoheonom&refdom=poopstream.cloud&auction_time=1748804426&subid=2101559281&sid=506843734&tcid=0&ver=8.227.0&ver_c=&spot_id=1451790&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-06-01&iabcat=IAB25-3&user_fp=16840880353512051555&score=0&kubik_score=0&kaminari_bot_ip=1&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D2101559281%26spot_id%3D1451790%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoopstream.cloud%252Fe%252Fb3xocoheonom%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=&crtid=631f6a4368a6966d573dcdb0b6c37f8d&url=https%3A%2F%2Fmgcrs.ereiow.com%3Ffeedid%3De703%26subid%3D311451790%26uuid%3D6e85b214-7bb2-4b1d-8c43-9360fb80949d%26ep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icons=YNIVy-jLepo9aJ36SopKcQ9gvmvz6TfcE7rSQB2J9TcqnzwAFqcXlNo7_vcOxt3yhbWZo3JJhjgEbD5cTk8HFDTG34rK6hG4IDHJcXiaw8emBvmerSfMRgiD9NvjexNiXSuhkRxKXP7Pk_7KDsR4RK0kcqoiil3qARew9bdDhw5mU-d9WeELtCVJM3dwL7qDExSKT_Rtwp0wtUONKEAH0UEG4vuxu8NQuLtXSTqmS95644ogP6rWzBukm65dr0wXgCzwIIuDRY4Pr30970uM5lZu4JueyrduxZJrEYShOqexIdrQcgKVUy942UDuSNBsBm9QGRkObvUTLepA8LWQ5ZFnfaDdGlQUYYCH37ZAQ8u7VS2SJMyiUFIAM8Du52iM29QYabL63Kn99YymNnu_Q3DpZMnLV_64ZPyowQc8y3dBzH1ACNmiINESlTHVuU2SrAPXV_jMutvAepd6DWFyIri8oqREhuxSwCpNAPxqtiKw65e7luEbyQTXgDP-igU&ext_cid=0&px_id=311451790&min_cpm=0.015476601685193957&out_id=0&campaign_type=mq&aid=3412&cid=12971&uniq=&mid=3781992273840956803&skin_id=71&vertical_id=5&skin_test=0&from_cache=0&ecpm=0.03592404851038014&cpm=0.04728715084487467&verify_hash=e9746b0b8ce4759f3c8fe5afb58574e2&verify_hash_v2=c085a5c09909e9813fa46ea3b6196bffcebdf3975915dd26081144c1f0b55426&is_native=1&real_bid=0.0020532432419632434&original_bid_usd=0.0027027027&original_bid=0.0027027027&show_type=0&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=101,4,129,148,5&need_redirect_show=0&applied_features=coef_090,main-skins-settings&show_count=1&expiration_timestamp=0&image_url=null&site=native-push-adult&price=0.0027027027&hostname=auc-inpage-hz-13-a&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.0000027027027000000005&ext_campaign_id_str=&is_webview=0&client_price=0&direct_client_price=0&priority=0&client_payment_model=&is_in_app=0&auc_domain_type=hash&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=teens&is_iframe=0&traffic_category=adult&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=gamblingBlueMessage-view-b_r-body&st=0.11&cpa=695adcda-ce62-42a5-9bcc-a10a7a09a49e&prev_step_diff=890 IP168.119.25.102:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subject602e6a55fb.com FingerprintB2:C4:E9:FD:D6:BD:E7:5F:E3:D4:1B:D7:07:7A:59:CB:C8:BB:ED:FF ValidityWed, 28 May 2025 14:04:24 GMT - Tue, 26 Aug 2025 14:04:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?tag_ab=b&site_id=311451790&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=mq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fpoopstream.cloud%2Fe%2Fb3xocoheonom&refdom=poopstream.cloud&auction_time=1748804426&subid=2101559281&sid=506843734&tcid=0&ver=8.227.0&ver_c=&spot_id=1451790&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-06-01&iabcat=IAB25-3&user_fp=16840880353512051555&score=0&kubik_score=0&kaminari_bot_ip=1&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D2101559281%26spot_id%3D1451790%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoopstream.cloud%252Fe%252Fb3xocoheonom%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=&crtid=631f6a4368a6966d573dcdb0b6c37f8d&url=https%3A%2F%2Fmgcrs.ereiow.com%3Ffeedid%3De703%26subid%3D311451790%26uuid%3D6e85b214-7bb2-4b1d-8c43-9360fb80949d%26ep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icons=YNIVy-jLepo9aJ36SopKcQ9gvmvz6TfcE7rSQB2J9TcqnzwAFqcXlNo7_vcOxt3yhbWZo3JJhjgEbD5cTk8HFDTG34rK6hG4IDHJcXiaw8emBvmerSfMRgiD9NvjexNiXSuhkRxKXP7Pk_7KDsR4RK0kcqoiil3qARew9bdDhw5mU-d9WeELtCVJM3dwL7qDExSKT_Rtwp0wtUONKEAH0UEG4vuxu8NQuLtXSTqmS95644ogP6rWzBukm65dr0wXgCzwIIuDRY4Pr30970uM5lZu4JueyrduxZJrEYShOqexIdrQcgKVUy942UDuSNBsBm9QGRkObvUTLepA8LWQ5ZFnfaDdGlQUYYCH37ZAQ8u7VS2SJMyiUFIAM8Du52iM29QYabL63Kn99YymNnu_Q3DpZMnLV_64ZPyowQc8y3dBzH1ACNmiINESlTHVuU2SrAPXV_jMutvAepd6DWFyIri8oqREhuxSwCpNAPxqtiKw65e7luEbyQTXgDP-igU&ext_cid=0&px_id=311451790&min_cpm=0.015476601685193957&out_id=0&campaign_type=mq&aid=3412&cid=12971&uniq=&mid=3781992273840956803&skin_id=71&vertical_id=5&skin_test=0&from_cache=0&ecpm=0.03592404851038014&cpm=0.04728715084487467&verify_hash=e9746b0b8ce4759f3c8fe5afb58574e2&verify_hash_v2=c085a5c09909e9813fa46ea3b6196bffcebdf3975915dd26081144c1f0b55426&is_native=1&real_bid=0.0020532432419632434&original_bid_usd=0.0027027027&original_bid=0.0027027027&show_type=0&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=101,4,129,148,5&need_redirect_show=0&applied_features=coef_090,main-skins-settings&show_count=1&expiration_timestamp=0&image_url=null&site=native-push-adult&price=0.0027027027&hostname=auc-inpage-hz-13-a&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.0000027027027000000005&ext_campaign_id_str=&is_webview=0&client_price=0&direct_client_price=0&priority=0&client_payment_model=&is_in_app=0&auc_domain_type=hash&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=teens&is_iframe=0&traffic_category=adult&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=gamblingBlueMessage-view-b_r-body&st=0.11&cpa=695adcda-ce62-42a5-9bcc-a10a7a09a49e&prev_step_diff=890 HTTP/1.1
Host: 8309b4c5f6.602e6a55fb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 01 Jun 2025 19:00:27 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| poopstream.cloud/e/null | 172.67.199.205 | 301 Moved Permanently | 8.2 kB |
IP172.67.199.205:443
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerGoogle Trust Services Subjectpoopstream.cloud Fingerprint91:F9:F6:B3:A7:88:7A:1F:B0:21:B5:95:23:F5:3B:C9:E8:A8:54:A8 ValiditySun, 01 Jun 2025 13:05:38 GMT - Sat, 30 Aug 2025 14:05:34 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /e/null HTTP/1.1
Host: poopstream.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: _ga_RRBBHD087X=GS2.1.s1748804420$o1$g0$t1748804420$j60$l0$h0; _ga=GA1.1.2128681749.1748804420
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 301 Moved Permanently
date: Sun, 01 Jun 2025 19:00:27 GMT
content-length: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ju%2Fwkl6CSHikEo%2FgsO4vrWzeCpELz0H23xv9txRvxsjGbY23v8NtR8Ub9DUSf94If8mOV8yI4sYTcp%2BhsClMyZV4e1Sv3ay5FIU8Md6ktWXgcMmG4GVXszEUkJ6vtAyu3vYH"}],"group":"cf-nel","max_age":604800}
location: https://poopstream.cloud/404
cf-ray: 9490f4359da8b660-AMS
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=24231&min_rtt=19978&rtt_var=6195&sent=29&recv=25&lost=0&retrans=0&sent_bytes=8460&recv_bytes=3023&delivery_rate=167624&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=18f7628030e5257a&ts=7490&x=80"
|
|
| x1.giriucon.com/8d04ffe9e8f556fe192.jpeg | 172.67.128.173 | 200 OK | 37 kB |
URL GET x1.giriucon.com/8d04ffe9e8f556fe192.jpeg IP172.67.128.173:443
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerGoogle Trust Services Subjectgiriucon.com FingerprintE4:1C:26:92:2A:3E:B1:A0:73:B0:3A:28:0A:5B:16:F3:68:A7:45:E9 ValidityWed, 23 Apr 2025 16:35:21 GMT - Tue, 22 Jul 2025 17:33:43 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3 Hash1490935efa167f9f0ef89929d4056ad3 52c64e563610d58304bb9771bece829b9849059f 7b51bb145896f492fcadd3c4a0d70959c0849ff6760332593d7aa69382b37f8b
GET /8d04ffe9e8f556fe192.jpeg HTTP/1.1
Host: x1.giriucon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 01 Jun 2025 19:00:27 GMT
content-type: image/jpeg
content-length: 37387
server: cloudflare
last-modified: Sat, 03 May 2025 12:51:40 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: "6816115c-920b"
expires: Mon, 02 Jun 2025 13:45:49 GMT
cache-control: max-age=2592000, public
accept-ranges: bytes
age: 2524477
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2FCO3e74dFPzWsA9V13jDNGoSQnvGq14EiBwJFh2cSQmCI1h6sfdeMgnVfGFDc87IqDP6%2FIWC20lSB2aqE5rKDfPRvahSBanlE8%2Fu%2FEAa5w%3D%3D"}]}
cf-ray: 9490f436da0c4547-AMS
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js | 104.17.25.14 | 200 OK | 90 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js IP104.17.25.14:443
Requested byhttps://poopstream.cloud/xxxsdn?id=6d6f6e6f65686f636f783362 CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77 ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://poopstream.cloud
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 01 Jun 2025 19:00:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 9490f409edfcb4f4-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 234806
expires: Fri, 22 May 2026 19:00:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uKaycsVF%2BNKbKbPb5K%2B2MUfnZYQUpPsVrhE5yVRDC%2BONRuBiBsrFGyjda0gyKX5WtsSNwY9k3YVhoitJgJyGyLHiEfJjc5nLTwM2QEa62WbJ1fkzRBOmcIdcL%2FLZLnDFyTWOSIXN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiPRQH1wfnf2oP8F8S6Ey2gfaFCDDl_Oij_nZzU-psMTop-ojgYpv4pmcQ1ElTTnTW7vpzhjJA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1409220666%3A1748804426439301 | 142.250.147.84 | 403 Forbidden | 0 B |
URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiPRQH1wfnf2oP8F8S6Ey2gfaFCDDl_Oij_nZzU-psMTop-ojgYpv4pmcQ1ElTTnTW7vpzhjJA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1409220666%3A1748804426439301 IP142.250.147.84:443
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint7B:D2:02:FC:58:D9:E6:6C:DB:4E:0A:85:10:91:65:A5:9A:9C:5D:12 ValidityMon, 12 May 2025 08:42:58 GMT - Mon, 04 Aug 2025 08:42:57 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiPRQH1wfnf2oP8F8S6Ey2gfaFCDDl_Oij_nZzU-psMTop-ojgYpv4pmcQ1ElTTnTW7vpzhjJA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1409220666%3A1748804426439301 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 01 Jun 2025 19:00:26 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-a_DSdc2NHGrQSb8Xtan9vg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4AFqKlLDbhI.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/js?id=G-RRBBHD087X | 142.250.74.168 | 200 OK | 387 kB |
URL GET www.googletagmanager.com/gtag/js?id=G-RRBBHD087X IP142.250.74.168:443
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint10:76:57:2F:C3:21:F2:5F:71:E4:85:A5:DB:F7:65:3F:51:03:55:07 ValidityMon, 12 May 2025 08:42:57 GMT - Mon, 04 Aug 2025 08:42:56 GMT
File typeJavaScript source, ASCII text, with very long lines (6125) Size387 kB (387204 bytes) Hash5ee377d04e2f70b9f06dd2369bd57f63 5a2af9f62c377afa93989c81efea079632ffb788 0786294191e5094c02dab76d1c45d210e2b997b36e019a775700cd4153afeeaf
GET /gtag/js?id=G-RRBBHD087X HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 01 Jun 2025 19:00:20 GMT
expires: Sun, 01 Jun 2025 19:00:20 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 129312
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| js.capndr.com/advertising.js | 45.133.44.52 | 200 OK | 0 B |
URL GET js.capndr.com/advertising.js IP45.133.44.52:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subjectjs.capndr.com Fingerprint36:80:C9:74:A8:03:5E:A6:42:15:13:F1:12:1D:CE:69:66:FD:BF:09 ValidityWed, 16 Apr 2025 02:32:06 GMT - Tue, 15 Jul 2025 02:32:05 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertising.js HTTP/1.1
Host: js.capndr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 01 Jun 2025 19:00:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 14 Jul 2023 08:23:25 GMT
etag: "64b105fd-0"
expires: Sun, 01 Jun 2025 19:05:20 GMT
cache-control: max-age=300
x-cdn-host-id: ah1747
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 8752d657fd.a3a706a0ae.com/0da9a086638cec6ae818f6e6c1c5fc2d.js | 45.133.44.52 | 200 OK | 206 kB |
URL GET 8752d657fd.a3a706a0ae.com/0da9a086638cec6ae818f6e6c1c5fc2d.js IP45.133.44.52:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subject8752d657fd.a3a706a0ae.com FingerprintD1:74:F1:97:31:52:84:CB:96:EF:C9:EE:83:F4:F5:1A:BF:AC:7A:2D ValidityThu, 29 May 2025 02:15:13 GMT - Wed, 27 Aug 2025 02:15:12 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size206 kB (206356 bytes) Hash8c754b746e092cbee11a7efd9f8732be ef80995d1f70c7d8b1d7fdcf3da236fd6132421b 76c73c63808284d82d44ec3bda4cec2992958abd3ca48659a44124a2e372b0a7
GET /0da9a086638cec6ae818f6e6c1c5fc2d.js HTTP/1.1
Host: 8752d657fd.a3a706a0ae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 01 Jun 2025 19:00:21 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 27 May 2025 10:04:57 GMT
etag: W/"68358e49-32614"
content-encoding: gzip
expires: Sun, 01 Jun 2025 19:05:21 GMT
cache-control: max-age=300
x-cdn-host-id: ah1747
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube | 142.250.147.84 | 302 Found | 0 B |
URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube IP142.250.147.84:443
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerGoogle Trust Services Subjectaccounts.google.com FingerprintB1:06:D8:49:F1:03:BE:43:D7:79:D9:25:25:FE:92:54:6C:93:0B:54 ValidityMon, 12 May 2025 08:44:47 GMT - Mon, 04 Aug 2025 08:44:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:Uj-13Y5sa-Su_DnUHjS3V2PvVgrk7Q:pGIEH_vRiIVflvVG; Expires=Tue, 01-Jun-2027 19:00:21 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 01 Jun 2025 19:00:21 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiNoQrDe9YJJuLK7Q9LBuFQGUSwT1i0KRRxQrQalV5-cDP8ahzYFs0Zw0_FZ4e7jBRZ8wKhCqw
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-9TUE2qGc9zWZomBZqBh2gQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube | 142.250.147.84 | 302 Found | 0 B |
URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube IP142.250.147.84:443
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint7B:D2:02:FC:58:D9:E6:6C:DB:4E:0A:85:10:91:65:A5:9A:9C:5D:12 ValidityMon, 12 May 2025 08:42:58 GMT - Mon, 04 Aug 2025 08:42:57 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:oX3uqZo1ZxU1ZN8spUw2TaBNbOSEsw:Nxi_gyn2yjStW9Pz; Expires=Tue, 01-Jun-2027 19:00:26 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 01 Jun 2025 19:00:26 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiP0KuPL9LiUudmfxDq-ZeNKC5Mm1ugYX19OXrgPHrX5kiCy0xprYG3YEw8N5aWTDmhtManm
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-D56ZO-Uy93eXlt7mduTwIg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 8309b4c5f6.602e6a55fb.com/in/show/?tag_ab=b&site_id=311451790&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=mq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fpoopstream.cloud%2Fe%2Fb3xocoheonom&refdom=poopstream.cloud&auction_time=1748804426&subid=2101559281&sid=506843734&tcid=0&ver=8.227.0&ver_c=&spot_id=1451790&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-06-01&iabcat=IAB25-3&user_fp=16840880353512051555&score=0&kubik_score=0&kaminari_bot_ip=1&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D2101559281%26spot_id%3D1451790%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoopstream.cloud%252Fe%252Fb3xocoheonom%26idzone%3D0%26sid%3D1886&is_cpm=1&resp_type=&crid=&crtid=b0681ff5c1739e7f8bdbb8527f77d810&url=https%3A%2F%2Fmohawe.top%2F33%2F1%2Fpgo%2F1-15103%2Farfkgpdi3go6aacoj4aaaaaask7csau2fjnfwip7hiaaaaiaaaaaaaaaaaaa&icons=y8FvOO6yVknYSclUNeUx-SjmMOBw6wXAN9F5vVn84Wnp6nL3lak2HrqT5i7yS4N8I4qV85goqT4Aa7s9polgXYfiJKo2VYX6qYUXRBAKnU920CzFwv76bVXKyWljuq3y3Q5DEaiAL2eIZIqgbLhk8rtnuanAXe2TPGskx81cntTAKYxDaw&ext_cid=0&pop_price=0.00071&pop_ecpm=0.011502058667653796&px_id=1451790&min_cpm=0.01961409595323731&out_id=1&campaign_type=lq-pop-ext&aid=258&cid=19126&uniq=&mid=3781992273840956803&skin_id=71&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.518725999593738&cpm=0.71&verify_hash=545f7d306930280d8a2d6a301c364217&verify_hash_v2=6cb6ae5b10340e0d7b6c3051a19f4a1a997920e7c25f368cae97ec6dc46a9667&is_native=3&real_bid=0.518725999593738&pop_real_cpm=0.71&pop_real_bid=0.000518725999593738&original_bid_usd=0.71&original_bid=0.71&show_type=0&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=81,20,27,150,108,0,31,4&need_redirect_show=0&applied_features=coef_090,main-skins-settings&show_count=1&expiration_timestamp=1748977226&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp&site=native-push-adult&price=0&hostname=auc-inpage-hz-13-a&auc_type=1&pop_type=1&is_pop_cpc=0&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.00071&ext_campaign_id_str=&is_webview=0&client_price=0&direct_client_price=0&priority=0&client_payment_model=&is_in_app=0&auc_domain_type=hash&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=teens&is_iframe=0&traffic_category=adult&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=gamblingBlueMessage-view-b_r-body&mlf=1&mlc=1&st=0.11&cpa=0d44d159-15b1-4461-8b24-8a7d182586d6&prev_step_diff=890 | 168.119.25.102 | 200 OK | 0 B |
URL GET 8309b4c5f6.602e6a55fb.com/in/show/?tag_ab=b&site_id=311451790&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=mq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fpoopstream.cloud%2Fe%2Fb3xocoheonom&refdom=poopstream.cloud&auction_time=1748804426&subid=2101559281&sid=506843734&tcid=0&ver=8.227.0&ver_c=&spot_id=1451790&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-06-01&iabcat=IAB25-3&user_fp=16840880353512051555&score=0&kubik_score=0&kaminari_bot_ip=1&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D2101559281%26spot_id%3D1451790%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoopstream.cloud%252Fe%252Fb3xocoheonom%26idzone%3D0%26sid%3D1886&is_cpm=1&resp_type=&crid=&crtid=b0681ff5c1739e7f8bdbb8527f77d810&url=https%3A%2F%2Fmohawe.top%2F33%2F1%2Fpgo%2F1-15103%2Farfkgpdi3go6aacoj4aaaaaask7csau2fjnfwip7hiaaaaiaaaaaaaaaaaaa&icons=y8FvOO6yVknYSclUNeUx-SjmMOBw6wXAN9F5vVn84Wnp6nL3lak2HrqT5i7yS4N8I4qV85goqT4Aa7s9polgXYfiJKo2VYX6qYUXRBAKnU920CzFwv76bVXKyWljuq3y3Q5DEaiAL2eIZIqgbLhk8rtnuanAXe2TPGskx81cntTAKYxDaw&ext_cid=0&pop_price=0.00071&pop_ecpm=0.011502058667653796&px_id=1451790&min_cpm=0.01961409595323731&out_id=1&campaign_type=lq-pop-ext&aid=258&cid=19126&uniq=&mid=3781992273840956803&skin_id=71&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.518725999593738&cpm=0.71&verify_hash=545f7d306930280d8a2d6a301c364217&verify_hash_v2=6cb6ae5b10340e0d7b6c3051a19f4a1a997920e7c25f368cae97ec6dc46a9667&is_native=3&real_bid=0.518725999593738&pop_real_cpm=0.71&pop_real_bid=0.000518725999593738&original_bid_usd=0.71&original_bid=0.71&show_type=0&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=81,20,27,150,108,0,31,4&need_redirect_show=0&applied_features=coef_090,main-skins-settings&show_count=1&expiration_timestamp=1748977226&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp&site=native-push-adult&price=0&hostname=auc-inpage-hz-13-a&auc_type=1&pop_type=1&is_pop_cpc=0&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.00071&ext_campaign_id_str=&is_webview=0&client_price=0&direct_client_price=0&priority=0&client_payment_model=&is_in_app=0&auc_domain_type=hash&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=teens&is_iframe=0&traffic_category=adult&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=gamblingBlueMessage-view-b_r-body&mlf=1&mlc=1&st=0.11&cpa=0d44d159-15b1-4461-8b24-8a7d182586d6&prev_step_diff=890 IP168.119.25.102:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subject602e6a55fb.com FingerprintB2:C4:E9:FD:D6:BD:E7:5F:E3:D4:1B:D7:07:7A:59:CB:C8:BB:ED:FF ValidityWed, 28 May 2025 14:04:24 GMT - Tue, 26 Aug 2025 14:04:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?tag_ab=b&site_id=311451790&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=mq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fpoopstream.cloud%2Fe%2Fb3xocoheonom&refdom=poopstream.cloud&auction_time=1748804426&subid=2101559281&sid=506843734&tcid=0&ver=8.227.0&ver_c=&spot_id=1451790&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-06-01&iabcat=IAB25-3&user_fp=16840880353512051555&score=0&kubik_score=0&kaminari_bot_ip=1&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D2101559281%26spot_id%3D1451790%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoopstream.cloud%252Fe%252Fb3xocoheonom%26idzone%3D0%26sid%3D1886&is_cpm=1&resp_type=&crid=&crtid=b0681ff5c1739e7f8bdbb8527f77d810&url=https%3A%2F%2Fmohawe.top%2F33%2F1%2Fpgo%2F1-15103%2Farfkgpdi3go6aacoj4aaaaaask7csau2fjnfwip7hiaaaaiaaaaaaaaaaaaa&icons=y8FvOO6yVknYSclUNeUx-SjmMOBw6wXAN9F5vVn84Wnp6nL3lak2HrqT5i7yS4N8I4qV85goqT4Aa7s9polgXYfiJKo2VYX6qYUXRBAKnU920CzFwv76bVXKyWljuq3y3Q5DEaiAL2eIZIqgbLhk8rtnuanAXe2TPGskx81cntTAKYxDaw&ext_cid=0&pop_price=0.00071&pop_ecpm=0.011502058667653796&px_id=1451790&min_cpm=0.01961409595323731&out_id=1&campaign_type=lq-pop-ext&aid=258&cid=19126&uniq=&mid=3781992273840956803&skin_id=71&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.518725999593738&cpm=0.71&verify_hash=545f7d306930280d8a2d6a301c364217&verify_hash_v2=6cb6ae5b10340e0d7b6c3051a19f4a1a997920e7c25f368cae97ec6dc46a9667&is_native=3&real_bid=0.518725999593738&pop_real_cpm=0.71&pop_real_bid=0.000518725999593738&original_bid_usd=0.71&original_bid=0.71&show_type=0&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=81,20,27,150,108,0,31,4&need_redirect_show=0&applied_features=coef_090,main-skins-settings&show_count=1&expiration_timestamp=1748977226&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp&site=native-push-adult&price=0&hostname=auc-inpage-hz-13-a&auc_type=1&pop_type=1&is_pop_cpc=0&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.00071&ext_campaign_id_str=&is_webview=0&client_price=0&direct_client_price=0&priority=0&client_payment_model=&is_in_app=0&auc_domain_type=hash&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=teens&is_iframe=0&traffic_category=adult&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=gamblingBlueMessage-view-b_r-body&mlf=1&mlc=1&st=0.11&cpa=0d44d159-15b1-4461-8b24-8a7d182586d6&prev_step_diff=890 HTTP/1.1
Host: 8309b4c5f6.602e6a55fb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 01 Jun 2025 19:00:27 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| poopstream.cloud/e/null | 172.67.199.205 | 301 Moved Permanently | 8.2 kB |
IP172.67.199.205:443
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerGoogle Trust Services Subjectpoopstream.cloud Fingerprint91:F9:F6:B3:A7:88:7A:1F:B0:21:B5:95:23:F5:3B:C9:E8:A8:54:A8 ValiditySun, 01 Jun 2025 13:05:38 GMT - Sat, 30 Aug 2025 14:05:34 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /e/null HTTP/1.1
Host: poopstream.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: _ga_RRBBHD087X=GS2.1.s1748804420$o1$g0$t1748804420$j60$l0$h0; _ga=GA1.1.2128681749.1748804420
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 301 Moved Permanently
date: Sun, 01 Jun 2025 19:00:27 GMT
content-length: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kk1dfeKWFDZl%2BpR4EdMZVzcpn6I8yLKC0sjFsktYK9HZiX7rMCUCA9BVVZppqHBbfW5vAZU6sKpCvJzvlVetE7J3OXLk5hVe%2BqF9vd7jTp8iN8GXFWQmMubzUnxdk4Om6VHm"}],"group":"cf-nel","max_age":604800}
location: https://poopstream.cloud/404
cf-ray: 9490f435adbdb660-AMS
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=24231&min_rtt=19978&rtt_var=6195&sent=30&recv=25&lost=0&retrans=0&sent_bytes=9070&recv_bytes=3023&delivery_rate=167624&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=18f7628030e5257a&ts=7498&x=80"
|
|
| sk.cohibitegos.com/r0H7wyUYcLhfqhwR/121025 | 23.109.170.12 | 200 OK | 5 B |
URL GET sk.cohibitegos.com/r0H7wyUYcLhfqhwR/121025 IP23.109.170.12:443
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subjectsk.cohibitegos.com Fingerprint2C:23:DC:CA:25:5F:49:31:8A:F7:B3:49:14:08:30:A5:63:BC:84:21 ValidityMon, 14 Apr 2025 06:17:01 GMT - Sun, 13 Jul 2025 06:17:00 GMT
File typeASCII text, with no line terminators Hash848667c49f5d3aef59cd65ed276cd7ae bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763 cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /r0H7wyUYcLhfqhwR/121025 HTTP/1.1
Host: sk.cohibitegos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jun 2025 19:00:20 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://poopstream.cloud
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Mon, 02-Jun-2025 19:00:20 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Mon, 02-Jun-2025 19:00:20 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| 8752d657fd.a3a706a0ae.com/b853e86771f94cc67a7dea5f6273330f/335785?version_name=b&domain=poopstream.cloud | 45.133.44.52 | 200 OK | 3.7 kB |
URL GET 8752d657fd.a3a706a0ae.com/b853e86771f94cc67a7dea5f6273330f/335785?version_name=b&domain=poopstream.cloud IP45.133.44.52:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subject8752d657fd.a3a706a0ae.com FingerprintD1:74:F1:97:31:52:84:CB:96:EF:C9:EE:83:F4:F5:1A:BF:AC:7A:2D ValidityThu, 29 May 2025 02:15:13 GMT - Wed, 27 Aug 2025 02:15:12 GMT
Hashc1fa91a45e8fc8204ce0a96ce04e7e51 bcfcc15e8662268cc18c8ce4716e266683684499 917e0c308b575cd137f926b37f3217fa6ec1f0638afaf8a8b1f572adcc532f95
GET /b853e86771f94cc67a7dea5f6273330f/335785?version_name=b&domain=poopstream.cloud HTTP/1.1
Host: 8752d657fd.a3a706a0ae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://poopstream.cloud
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 01 Jun 2025 19:00:20 GMT
content-type: application/json
server: nginx/1.18.0
cache-control: max-age=300
expires: Sun, 01 Jun 2025 19:05:20 GMT
x-cdn-host-id: ah1747
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| x1.giriucon.com/8d04ffe9e8f556fe192.jpeg | 172.67.128.173 | 200 OK | 37 kB |
URL GET x1.giriucon.com/8d04ffe9e8f556fe192.jpeg IP172.67.128.173:443
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerGoogle Trust Services Subjectgiriucon.com FingerprintE4:1C:26:92:2A:3E:B1:A0:73:B0:3A:28:0A:5B:16:F3:68:A7:45:E9 ValidityWed, 23 Apr 2025 16:35:21 GMT - Tue, 22 Jul 2025 17:33:43 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3 Hash1490935efa167f9f0ef89929d4056ad3 52c64e563610d58304bb9771bece829b9849059f 7b51bb145896f492fcadd3c4a0d70959c0849ff6760332593d7aa69382b37f8b
GET /8d04ffe9e8f556fe192.jpeg HTTP/1.1
Host: x1.giriucon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 01 Jun 2025 19:00:27 GMT
content-type: image/jpeg
content-length: 37387
server: cloudflare
last-modified: Sat, 03 May 2025 12:51:40 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: "6816115c-920b"
expires: Mon, 02 Jun 2025 13:45:49 GMT
cache-control: max-age=2592000, public
accept-ranges: bytes
age: 2524477
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=8R%2BO5O18zEZPd%2Be7%2B8JHTGfh3aA%2BE4LQTXcYqK8Gn157IzqrUxTd4obN61%2FzNCqoU0Yv1N6trwVx0ABnEzS%2FV0m9SDFvWOywr85IcdnpGQ%3D%3D"}]}
cf-ray: 9490f436fa5c4547-AMS
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 7db655a464.46a30abd78.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI4NTgxMzQ1NjQzMjcwMTcxMDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM5LjAiLCJ0YWdfaWQiOjMzNTc4NSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjU3LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 | 45.133.44.53 | 200 OK | 0 B |
URL GET 7db655a464.46a30abd78.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI4NTgxMzQ1NjQzMjcwMTcxMDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM5LjAiLCJ0YWdfaWQiOjMzNTc4NSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjU3LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 IP45.133.44.53:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subject7db655a464.46a30abd78.com Fingerprint3D:02:EE:D2:AF:08:50:BF:7B:86:77:AF:2D:2D:42:23:24:3E:34:DE ValidityThu, 29 May 2025 02:48:02 GMT - Wed, 27 Aug 2025 02:48:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI4NTgxMzQ1NjQzMjcwMTcxMDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM5LjAiLCJ0YWdfaWQiOjMzNTc4NSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjU3LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 HTTP/1.1
Host: 7db655a464.46a30abd78.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://poopstream.cloud
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 01 Jun 2025 19:00:21 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
x-cdn-host-id: ds8138
X-Firefox-Spdy: h2
|
|
| nereserv.com/in/dip?site=native-push&wl=1&event_id=46dacc57-c23d-4fb5-8c43-718c52843ff5&subid=1904497813&sid=3684562383&spot_id=1451789&created_at=2025-06-01&timezone=0&ver=8.227.0&is_native=1 | 116.202.249.56 | 200 OK | 0 B |
URL GET nereserv.com/in/dip?site=native-push&wl=1&event_id=46dacc57-c23d-4fb5-8c43-718c52843ff5&subid=1904497813&sid=3684562383&spot_id=1451789&created_at=2025-06-01&timezone=0&ver=8.227.0&is_native=1 IP116.202.249.56:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subjectinpage.infrapu.sh Fingerprint53:32:5A:78:97:D4:AD:CF:41:C6:08:3E:D5:02:8C:C6:22:50:E8:35 ValidityTue, 01 Apr 2025 08:22:50 GMT - Mon, 30 Jun 2025 08:22:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?site=native-push&wl=1&event_id=46dacc57-c23d-4fb5-8c43-718c52843ff5&subid=1904497813&sid=3684562383&spot_id=1451789&created_at=2025-06-01&timezone=0&ver=8.227.0&is_native=1 HTTP/1.1
Host: nereserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://poopstream.cloud
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Sun, 01 Jun 2025 19:00:26 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| poopstream.cloud/404 | 172.67.199.205 | 200 OK | 8.2 kB |
IP172.67.199.205:443
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerGoogle Trust Services Subjectpoopstream.cloud Fingerprint91:F9:F6:B3:A7:88:7A:1F:B0:21:B5:95:23:F5:3B:C9:E8:A8:54:A8 ValiditySun, 01 Jun 2025 13:05:38 GMT - Sat, 30 Aug 2025 14:05:34 GMT
File typeHTML document, ASCII text, with very long lines (3141) Hashd473a317864656342f58085b77ac6f5b 346e6f9288a6d5a711f9d3957c17b6b0aa2772f7 51fcac38e476eb1916988a12ff04dbef9fdd6c757ea90ff03b94143f1d84d6e8
GET /404 HTTP/1.1
Host: poopstream.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: _ga_RRBBHD087X=GS2.1.s1748804420$o1$g0$t1748804420$j60$l0$h0; _ga=GA1.1.2128681749.1748804420
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 01 Jun 2025 19:00:27 GMT
content-type: text/html;charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DmX4ujBTaXq3uRZu8tU72mmuUoeKAOh3nVBbyyr0LNe%2BmBxU8BQgw5It6Q%2BMP3OrMvB8wQzIaet9EDQGpdxVXHCyF6MPoO1vgPkg%2B8%2FHcO6%2Bi7jX%2FqUWps6ET%2F%2FQhN6na8mW"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=3600, s-maxage=3600, must-revalidate
x-content-type-options: nosniff
content-encoding: br
cf-ray: 9490f4362decb660-AMS
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=23705&min_rtt=19978&rtt_var=5700&sent=38&recv=28&lost=0&retrans=0&sent_bytes=13040&recv_bytes=3725&delivery_rate=167624&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=18f7628030e5257a&ts=7573&x=80"
|
|
| poopstream.cloud/911 | 172.67.199.205 | 200 OK | 28 B |
IP172.67.199.205:443
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerGoogle Trust Services Subjectpoopstream.cloud Fingerprint91:F9:F6:B3:A7:88:7A:1F:B0:21:B5:95:23:F5:3B:C9:E8:A8:54:A8 ValiditySun, 01 Jun 2025 13:05:38 GMT - Sat, 30 Aug 2025 14:05:34 GMT
Hash0b0acd5a6a1093e1d50f39789c3d2add 1479c833a8380899c36a0e33426edcf76e96f343 1c3861be110683060eee49ecb5a5d76ba4dd4bc0c5a30cd3cc765f5078dfc239
POST /911 HTTP/1.1
Host: poopstream.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 15
Origin: https://poopstream.cloud
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/e/b3xocoheonom
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 01 Jun 2025 19:00:20 GMT
content-type: application/json
content-length: 28
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DVMsAr2ULrNKcTf0DfyDBO2THTr1WUm%2BnhB9M49tuUfotpRVVWK0%2Bfqv0j1wfUGS5WbXfO1%2BjVCg5lsiDVjDzTEQie8jBjHEr4Y%2FzhSDnrz0yfWbGpSPUXyj6wTAJb03C4Q8"}],"group":"cf-nel","max_age":604800}
cf-ray: 9490f4098f96b660-AMS
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=24245&min_rtt=19978&rtt_var=8501&sent=26&recv=21&lost=0&retrans=0&sent_bytes=7790&recv_bytes=2271&delivery_rate=117152&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=18f7628030e5257a&ts=433&x=80"
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOb19RLe2tVOdoY3wCBDVlCj8tnqsN09ahdZkYac4iz2_crzxoanEDdAS8am_i4l1ldHHdC1Q&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S520668373%3A1748804421719820 | 142.250.147.84 | 403 Forbidden | 0 B |
URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOb19RLe2tVOdoY3wCBDVlCj8tnqsN09ahdZkYac4iz2_crzxoanEDdAS8am_i4l1ldHHdC1Q&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S520668373%3A1748804421719820 IP142.250.147.84:443
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerGoogle Trust Services Subjectaccounts.google.com FingerprintB1:06:D8:49:F1:03:BE:43:D7:79:D9:25:25:FE:92:54:6C:93:0B:54 ValidityMon, 12 May 2025 08:44:47 GMT - Mon, 04 Aug 2025 08:44:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOb19RLe2tVOdoY3wCBDVlCj8tnqsN09ahdZkYac4iz2_crzxoanEDdAS8am_i4l1ldHHdC1Q&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S520668373%3A1748804421719820 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 01 Jun 2025 19:00:21 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-eLBtW6lI4f8Yo7ltzZTXWA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4AFqKlLDbhI.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| enrtx.com/get/ | 94.130.197.239 | 200 OK | 5.9 kB |
IP94.130.197.239:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subjectpopunder-base.infrapu.sh FingerprintD1:0E:8E:F9:D2:2D:16:E4:51:52:3C:0F:A6:8D:A3:35:C2:6B:C1:1A ValidityMon, 26 May 2025 07:34:47 GMT - Sun, 24 Aug 2025 07:34:46 GMT
Hash8096221ae126a94ede1d3689b05aac7b c997b97da63b1fe7fb22fc2525a92553f1aedf2a 5269c562d80558f7442c4c33f6569a7544c092e68d0590093d783221c28e0c5a
POST /get/ HTTP/1.1
Host: enrtx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://poopstream.cloud/
Content-Type: text/plain;charset=UTF-8
Content-Length: 1119
Origin: https://poopstream.cloud
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.0
date: Sun, 01 Jun 2025 19:00:22 GMT
content-type: application/json
content-length: 5877
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| 8752d657fd.a3a706a0ae.com/f0adf74ccff98b97a0223d03712fbc3d.js | 45.133.44.52 | 200 OK | 562 kB |
URL GET 8752d657fd.a3a706a0ae.com/f0adf74ccff98b97a0223d03712fbc3d.js IP45.133.44.52:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subject8752d657fd.a3a706a0ae.com FingerprintD1:74:F1:97:31:52:84:CB:96:EF:C9:EE:83:F4:F5:1A:BF:AC:7A:2D ValidityThu, 29 May 2025 02:15:13 GMT - Wed, 27 Aug 2025 02:15:12 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators Size562 kB (562280 bytes) Hashcbe51f472cdba3642214c69ec6688a09 43723fe6cc736d4e73a484b036ba8629b3f8bd0c e62b00d7ec19db7e81f49a3efdd82421ba4200dd8c545c5e3ee76e6f2a7b9c3b
GET /f0adf74ccff98b97a0223d03712fbc3d.js HTTP/1.1
Host: 8752d657fd.a3a706a0ae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 01 Jun 2025 19:00:26 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 27 May 2025 10:04:52 GMT
etag: W/"68358e44-89468"
content-encoding: gzip
expires: Sun, 01 Jun 2025 19:05:26 GMT
cache-control: max-age=300
x-cdn-host-id: ah1747
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| 8309b4c5f6.602e6a55fb.com/in/show/?tag_ab=b&site_id=311451789&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=mq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fpoopstream.cloud%2Fe%2Fb3xocoheonom&refdom=poopstream.cloud&auction_time=1748804426&subid=1904497813&sid=3684562383&tcid=0&ver=8.227.0&ver_c=&spot_id=1451789&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-06-01&iabcat=IAB25-3&user_fp=16840880353512051555&score=0&kubik_score=0&kaminari_bot_ip=1&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1904497813%26spot_id%3D1451789%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoopstream.cloud%252Fe%252Fb3xocoheonom%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=&crtid=631f6a4368a6966d573dcdb0b6c37f8d&url=https%3A%2F%2Fmgcrs.ereiow.com%3Ffeedid%3De703%26subid%3D311451789%26uuid%3D06dd32e9-e487-4b30-b36b-1e4312aaf17a%26ep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icons=dSjWyGILKN-_Ihaz9PIbgdOeH0L0CdCMBtyCqdvJ_oCbh0M0GSI2L-X1QQs0Kxt8z7rftQRRd9CDZmYneCD4diQ3UpS_9Imr_inguV6OGM7QHQrzrfWeKYIN_hTfOe8o-43qFggijRYky10qtSDqlS_5hcz7Hb0yavFIDnpYQdvvyJHTujMPojwROUEW7DUFtzFFNapnlPUHzMSGlEhS7tH-S6kjRd3wl4CEE_5FBlPrqfM51PiJlnb2-vzrbGksdcEATG3x6T0PmtNpvLiGwaUyj3JruvaO09N6OnDkNAhapwptGDrLNvOX5XlYEC6pluxfOI8gM6I83ChQsL50mle-QIijIHfBNq8JEoj3wnS339fymZwoUyWogAAPCzlwUqHRTh-wIertIhUlQVT1y1I1mnj4HgQ5omTNwyhSzAQeZLH_KCHYgCTNFjmdWhb3cA1gIwL--h9ujSl6IeSjsgxq0t1wGCX8lqgEnmeKqmAbbyH8Pe0ryqVNUPSOKPo&ext_cid=0&px_id=311451789&min_cpm=0.012359211387483639&out_id=0&campaign_type=mq&aid=3412&cid=12971&uniq=&mid=3044664877838960257&skin_id=2&vertical_id=5&skin_test=0&from_cache=0&ecpm=0.028688010356870585&cpm=0.037762288200693425&verify_hash=fb3eb5c2a0aa9b7d3d9ab22121968c28&verify_hash_v2=8c23683e439b67dfa0f50646e47a40e488787f3b55ca1a46ef6840ea6d41dbab&is_native=1&real_bid=0.0020532432419632434&original_bid_usd=0.0027027027&original_bid=0.0027027027&show_type=0&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=101,4,129,148,5&need_redirect_show=0&applied_features=main-skins-settings,coef_090&show_count=1&expiration_timestamp=0&image_url=null&site=native-push-adult&price=0.0027027027&hostname=auc-inpage-hz-4-c&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.0000027027027000000005&ext_campaign_id_str=&is_webview=0&client_price=0&direct_client_price=0&priority=0&client_payment_model=&is_in_app=0&auc_domain_type=hash&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=teens&is_iframe=0&traffic_category=adult&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&st=0.11&cpa=ff02d570-237b-40a4-b0d0-a64447a3a92c&prev_step_diff=907 | 168.119.25.102 | 200 OK | 0 B |
URL GET 8309b4c5f6.602e6a55fb.com/in/show/?tag_ab=b&site_id=311451789&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=mq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fpoopstream.cloud%2Fe%2Fb3xocoheonom&refdom=poopstream.cloud&auction_time=1748804426&subid=1904497813&sid=3684562383&tcid=0&ver=8.227.0&ver_c=&spot_id=1451789&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-06-01&iabcat=IAB25-3&user_fp=16840880353512051555&score=0&kubik_score=0&kaminari_bot_ip=1&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1904497813%26spot_id%3D1451789%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoopstream.cloud%252Fe%252Fb3xocoheonom%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=&crtid=631f6a4368a6966d573dcdb0b6c37f8d&url=https%3A%2F%2Fmgcrs.ereiow.com%3Ffeedid%3De703%26subid%3D311451789%26uuid%3D06dd32e9-e487-4b30-b36b-1e4312aaf17a%26ep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icons=dSjWyGILKN-_Ihaz9PIbgdOeH0L0CdCMBtyCqdvJ_oCbh0M0GSI2L-X1QQs0Kxt8z7rftQRRd9CDZmYneCD4diQ3UpS_9Imr_inguV6OGM7QHQrzrfWeKYIN_hTfOe8o-43qFggijRYky10qtSDqlS_5hcz7Hb0yavFIDnpYQdvvyJHTujMPojwROUEW7DUFtzFFNapnlPUHzMSGlEhS7tH-S6kjRd3wl4CEE_5FBlPrqfM51PiJlnb2-vzrbGksdcEATG3x6T0PmtNpvLiGwaUyj3JruvaO09N6OnDkNAhapwptGDrLNvOX5XlYEC6pluxfOI8gM6I83ChQsL50mle-QIijIHfBNq8JEoj3wnS339fymZwoUyWogAAPCzlwUqHRTh-wIertIhUlQVT1y1I1mnj4HgQ5omTNwyhSzAQeZLH_KCHYgCTNFjmdWhb3cA1gIwL--h9ujSl6IeSjsgxq0t1wGCX8lqgEnmeKqmAbbyH8Pe0ryqVNUPSOKPo&ext_cid=0&px_id=311451789&min_cpm=0.012359211387483639&out_id=0&campaign_type=mq&aid=3412&cid=12971&uniq=&mid=3044664877838960257&skin_id=2&vertical_id=5&skin_test=0&from_cache=0&ecpm=0.028688010356870585&cpm=0.037762288200693425&verify_hash=fb3eb5c2a0aa9b7d3d9ab22121968c28&verify_hash_v2=8c23683e439b67dfa0f50646e47a40e488787f3b55ca1a46ef6840ea6d41dbab&is_native=1&real_bid=0.0020532432419632434&original_bid_usd=0.0027027027&original_bid=0.0027027027&show_type=0&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=101,4,129,148,5&need_redirect_show=0&applied_features=main-skins-settings,coef_090&show_count=1&expiration_timestamp=0&image_url=null&site=native-push-adult&price=0.0027027027&hostname=auc-inpage-hz-4-c&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.0000027027027000000005&ext_campaign_id_str=&is_webview=0&client_price=0&direct_client_price=0&priority=0&client_payment_model=&is_in_app=0&auc_domain_type=hash&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=teens&is_iframe=0&traffic_category=adult&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&st=0.11&cpa=ff02d570-237b-40a4-b0d0-a64447a3a92c&prev_step_diff=907 IP168.119.25.102:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subject602e6a55fb.com FingerprintB2:C4:E9:FD:D6:BD:E7:5F:E3:D4:1B:D7:07:7A:59:CB:C8:BB:ED:FF ValidityWed, 28 May 2025 14:04:24 GMT - Tue, 26 Aug 2025 14:04:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?tag_ab=b&site_id=311451789&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=mq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fpoopstream.cloud%2Fe%2Fb3xocoheonom&refdom=poopstream.cloud&auction_time=1748804426&subid=1904497813&sid=3684562383&tcid=0&ver=8.227.0&ver_c=&spot_id=1451789&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-06-01&iabcat=IAB25-3&user_fp=16840880353512051555&score=0&kubik_score=0&kaminari_bot_ip=1&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1904497813%26spot_id%3D1451789%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoopstream.cloud%252Fe%252Fb3xocoheonom%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=&crtid=631f6a4368a6966d573dcdb0b6c37f8d&url=https%3A%2F%2Fmgcrs.ereiow.com%3Ffeedid%3De703%26subid%3D311451789%26uuid%3D06dd32e9-e487-4b30-b36b-1e4312aaf17a%26ep%3DJ4MHR3B25AJ56Z7ZE4SYTLRDDU3I6JOPFXACWL4VIXQVWUVBHPXYXX7C235JUBB4P2E5GYI5TTB6DSSAMZHWHT4EMRN5QMASF5CUQ7PIKHJGN5FKMIJQQTSACRHVUQ53ZZSENYRMCMQRZ4LOWXRIXNMOSSA7MMGJXLRZMNQPOWXMSCLQMWXY7QR3DY6B6VVIOD7QS5ISVWBM5LL6LA6ECQF4BHEUWZXWYJDLOF464NI3CVCO27S4MXEH72JYJIX6OGP2D744M4YH3KCRBXI35CB3BGVIZHKRP4MAS5J2MDUWQRX7MQ74VKTWVY6FJMCEE7ZLT23CV5UJVA5UECSKM2VRYRBQT6DTVRUQB3HQXYMSWODIESERHSTSWYOIRJL3PIMX4EJAKWHJ3SGRFOI62IHVTDHAUL7JF27ZUNAU6SDAIWKQNCDDTEXHPKKCKMCFHSX3T4A7C5SG4BWKNTSHDOF2P6GA4OG6HTLAAA5ITHFMYPIO33WIRLWDCGYHLJEFDGAZHJTUELUHJ3KGGZ25E6BEEIOVMVVQIJ4AN4FEJNU5UJUJ3FTYL2I4C2LHND2EEDES7KHRL6U3WAFHDJ2CHGM75GHIF46NYW7XLHCTRWNEN5VGUGFEQLEDYJHJJCKFVW24XCPJY4HK6O3F5LWQELJYY5K3E3TIF2BNYVPTYR4WXTITXN6D5CDLCEPWNJ3ZXVIBQSKDAFPZPH7T5NZVQAXZIFDN5QP73F3QJOL2XNQTVGT53XNEYM6B6TCPGDLFII6RTPDIL7CQ7MO2FITRY74UKEL55PDG7J5BS2DREHB54Y4BUDIIV7JLY54IZYSNKA36SFYIQPW22GW5MZKQVLHFZ56UHAETMXW4WPYXGJ3QZUNRBGUCVGNI5QXNTUYOL2J56HXPVE3NOU3NMAJ7EMPBYXPSFVW637A5B4RP5BYTGZK2KL4RY2QG7F4FDS64S7PJ5QCUWMYITZZ2YODQKEIXPSQZOVIFASR5MKOINE3H4JWWKSHTIUR7HALDNXD626PCBZVCMXNP4MCIYLVYCVAQTQ7A5T5VYM476CD452TDTZAHNRGMDN2ZVVN7NMCXWATALUEVTDPXN7HFXAOW4CBIO2K6LPDFHIGEWOQ%253D&icons=dSjWyGILKN-_Ihaz9PIbgdOeH0L0CdCMBtyCqdvJ_oCbh0M0GSI2L-X1QQs0Kxt8z7rftQRRd9CDZmYneCD4diQ3UpS_9Imr_inguV6OGM7QHQrzrfWeKYIN_hTfOe8o-43qFggijRYky10qtSDqlS_5hcz7Hb0yavFIDnpYQdvvyJHTujMPojwROUEW7DUFtzFFNapnlPUHzMSGlEhS7tH-S6kjRd3wl4CEE_5FBlPrqfM51PiJlnb2-vzrbGksdcEATG3x6T0PmtNpvLiGwaUyj3JruvaO09N6OnDkNAhapwptGDrLNvOX5XlYEC6pluxfOI8gM6I83ChQsL50mle-QIijIHfBNq8JEoj3wnS339fymZwoUyWogAAPCzlwUqHRTh-wIertIhUlQVT1y1I1mnj4HgQ5omTNwyhSzAQeZLH_KCHYgCTNFjmdWhb3cA1gIwL--h9ujSl6IeSjsgxq0t1wGCX8lqgEnmeKqmAbbyH8Pe0ryqVNUPSOKPo&ext_cid=0&px_id=311451789&min_cpm=0.012359211387483639&out_id=0&campaign_type=mq&aid=3412&cid=12971&uniq=&mid=3044664877838960257&skin_id=2&vertical_id=5&skin_test=0&from_cache=0&ecpm=0.028688010356870585&cpm=0.037762288200693425&verify_hash=fb3eb5c2a0aa9b7d3d9ab22121968c28&verify_hash_v2=8c23683e439b67dfa0f50646e47a40e488787f3b55ca1a46ef6840ea6d41dbab&is_native=1&real_bid=0.0020532432419632434&original_bid_usd=0.0027027027&original_bid=0.0027027027&show_type=0&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=101,4,129,148,5&need_redirect_show=0&applied_features=main-skins-settings,coef_090&show_count=1&expiration_timestamp=0&image_url=null&site=native-push-adult&price=0.0027027027&hostname=auc-inpage-hz-4-c&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.0000027027027000000005&ext_campaign_id_str=&is_webview=0&client_price=0&direct_client_price=0&priority=0&client_payment_model=&is_in_app=0&auc_domain_type=hash&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=teens&is_iframe=0&traffic_category=adult&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&st=0.11&cpa=ff02d570-237b-40a4-b0d0-a64447a3a92c&prev_step_diff=907 HTTP/1.1
Host: 8309b4c5f6.602e6a55fb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 01 Jun 2025 19:00:27 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| poopstream.cloud/e/b3xocoheonom | 172.67.199.205 | 200 OK | 13 kB |
URL User Request GET poopstream.cloud/e/b3xocoheonom IP172.67.199.205:443
CertificateIssuerGoogle Trust Services Subjectpoopstream.cloud Fingerprint91:F9:F6:B3:A7:88:7A:1F:B0:21:B5:95:23:F5:3B:C9:E8:A8:54:A8 ValiditySun, 01 Jun 2025 13:05:38 GMT - Sat, 30 Aug 2025 14:05:34 GMT
File typeHTML document, ASCII text, with very long lines (6442) Hash68419a37f1ea2d2e5d64609551896f71 060f4590385d4c96ad3dece1209abac773aa2a83 25ed62bad257bf0c3e1f86aade3e5163410f7e805a64fd1f27102241db3e98fb
GET /e/b3xocoheonom HTTP/1.1
Host: poopstream.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 01 Jun 2025 19:00:19 GMT
content-type: text/html;charset=UTF-8
cf-ray: 9490f4068c2329c4-AMS
server: cloudflare
content-encoding: br
cache-control: public, max-age=3600, s-maxage=3600, must-revalidate
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LNEuUigm5agaWU5BEoWNBsnQsArZK7B7%2FBi2Y8BESu%2F8qXR9AAdeao%2FM9tnqc97b7K9eI8ofkqgebzOfJO%2FDZ%2F6BvRqfvdQUqXzoGrCiT4%2BkuePEga4W%2FVxW%2F2IW9%2BusuTif"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=20185&min_rtt=19709&rtt_var=3660&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3219&recv_bytes=1135&delivery_rate=220317&cwnd=77&unsent_bytes=0&cid=446907b5c03e7357&ts=69&x=0"
X-Firefox-Spdy: h2
|
|
| cdn.video-src.com/img/favicon-16x16.png | 104.18.4.49 | 200 OK | 2.7 kB |
URL GET cdn.video-src.com/img/favicon-16x16.png IP104.18.4.49:443
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerGoogle Trust Services Subjectvideo-src.com Fingerprint5D:8C:83:69:73:6A:1A:E8:22:5A:3E:8A:9C:3A:2A:9F:1F:0D:5B:A3 ValiditySat, 03 May 2025 19:57:46 GMT - Fri, 01 Aug 2025 20:57:17 GMT
File typePNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced Hash831d44ebcb9d93decd7263c12f652b07 192752d237aad945d8ab1c83677a4848a2504468 6283b2d2311b62c7f2f79a4837237e58c26d1a9800ee6455ccbc35a0e7b11508
GET /img/favicon-16x16.png HTTP/1.1
Host: cdn.video-src.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 01 Jun 2025 19:00:20 GMT
content-type: image/png
cache-control: public, max-age=2592000
cf-bgj: h2pri,csam-hash
etag: W/"67d5a071-a93"
expires: Tue, 01 Jul 2025 19:00:20 GMT
last-modified: Sat, 15 Mar 2025 15:44:49 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 297475
server: cloudflare
cf-ray: 9490f40d3eec1c0a-OSL
X-Firefox-Spdy: h2
|
|
| 8752d657fd.a3a706a0ae.com/f0adf74ccff98b97a0223d03712fbc3d.js | 45.133.44.52 | 200 OK | 562 kB |
URL GET 8752d657fd.a3a706a0ae.com/f0adf74ccff98b97a0223d03712fbc3d.js IP45.133.44.52:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subject8752d657fd.a3a706a0ae.com FingerprintD1:74:F1:97:31:52:84:CB:96:EF:C9:EE:83:F4:F5:1A:BF:AC:7A:2D ValidityThu, 29 May 2025 02:15:13 GMT - Wed, 27 Aug 2025 02:15:12 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators Size562 kB (562280 bytes) Hashcbe51f472cdba3642214c69ec6688a09 43723fe6cc736d4e73a484b036ba8629b3f8bd0c e62b00d7ec19db7e81f49a3efdd82421ba4200dd8c545c5e3ee76e6f2a7b9c3b
GET /f0adf74ccff98b97a0223d03712fbc3d.js HTTP/1.1
Host: 8752d657fd.a3a706a0ae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 01 Jun 2025 19:00:26 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 27 May 2025 10:04:52 GMT
etag: W/"68358e44-89468"
content-encoding: gzip
expires: Sun, 01 Jun 2025 19:05:26 GMT
cache-control: max-age=300
x-cdn-host-id: ah1747
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| 8309b4c5f6.602e6a55fb.com/in/multy | 168.119.25.102 | 200 OK | 48 kB |
URL POST 8309b4c5f6.602e6a55fb.com/in/multy IP168.119.25.102:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subject602e6a55fb.com FingerprintB2:C4:E9:FD:D6:BD:E7:5F:E3:D4:1B:D7:07:7A:59:CB:C8:BB:ED:FF ValidityWed, 28 May 2025 14:04:24 GMT - Tue, 26 Aug 2025 14:04:23 GMT
Hash8344234a9428142e265ed451e751169e 98e36a4ef3f8cb62d951c93a7cffca3c36d989fd 6bc3dc377b0b70d85b9305b29745ddac41ba920d131f41519102ab15fe8375f6
POST /in/multy HTTP/1.1
Host: 8309b4c5f6.602e6a55fb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1989
Origin: https://poopstream.cloud
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 01 Jun 2025 19:00:26 GMT
content-type: application/json
content-length: 4925
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiP0KuPL9LiUudmfxDq-ZeNKC5Mm1ugYX19OXrgPHrX5kiCy0xprYG3YEw8N5aWTDmhtManm | 142.250.147.84 | 302 Found | 0 B |
URL GET accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiP0KuPL9LiUudmfxDq-ZeNKC5Mm1ugYX19OXrgPHrX5kiCy0xprYG3YEw8N5aWTDmhtManm IP142.250.147.84:443
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint7B:D2:02:FC:58:D9:E6:6C:DB:4E:0A:85:10:91:65:A5:9A:9C:5D:12 ValidityMon, 12 May 2025 08:42:58 GMT - Mon, 04 Aug 2025 08:42:57 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiP0KuPL9LiUudmfxDq-ZeNKC5Mm1ugYX19OXrgPHrX5kiCy0xprYG3YEw8N5aWTDmhtManm HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:O2LifjPmY0qm4CE59OyHQMVCt9Vytg:eJoEMILO3tuAMGlC;Path=/;Expires=Tue, 01-Jun-2027 19:00:26 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 01 Jun 2025 19:00:26 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiPRQH1wfnf2oP8F8S6Ey2gfaFCDDl_Oij_nZzU-psMTop-ojgYpv4pmcQ1ElTTnTW7vpzhjJA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1409220666%3A1748804426439301
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-WgVbjUJWpWDVuYWwJsK45g' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 416
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pagead2.googlesyndication.com/pagead/js/adsbygoogle.js | 142.250.74.34 | 200 OK | 159 kB |
URL GET pagead2.googlesyndication.com/pagead/js/adsbygoogle.js IP142.250.74.34:443
Requested byhttps://poopstream.cloud/xxxsdn?id=6d6f6e6f65686f636f783362 CertificateIssuerGoogle Trust Services Subject*.g.doubleclick.net FingerprintCB:D6:DD:24:49:A1:05:33:C4:D6:0A:04:6A:88:75:11:64:1B:56:6D ValidityMon, 12 May 2025 08:42:57 GMT - Mon, 04 Aug 2025 08:42:56 GMT
File typeJavaScript source, ASCII text, with very long lines (4327) Size159 kB (159033 bytes) Hash4fc19deafb01f18e8ff48b10fbfa60b2 4e64aafc03dd57f9ce5d56f89b04e23d35b016bd 689064594d3cbae6f3ac24b1e6d3f95afd120184965ee989cad9d0cbe8b47e93
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://poopstream.cloud/
Origin: https://poopstream.cloud
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
link: <https://googleads.g.doubleclick.net>; rel="preconnect"; crossorigin
vary: Accept-Encoding
date: Sun, 01 Jun 2025 19:00:20 GMT
expires: Sun, 01 Jun 2025 19:00:20 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 3725364955129830777
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 53207
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fp.metricswpsh.com/fp?tag_id=335785 | 157.90.84.242 | 200 OK | 58 B |
URL POST fp.metricswpsh.com/fp?tag_id=335785 IP157.90.84.242:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subjectnotification.tubecup.net Fingerprint6A:AF:05:21:7E:87:22:9C:BB:20:DB:34:F6:0A:88:06:79:E3:A0:78 ValidityThu, 17 Apr 2025 02:58:33 GMT - Wed, 16 Jul 2025 02:58:32 GMT
Hash84601fdbdfeb51f157864ad487c573b1 bdef834f633a8708f5dc6c2d9535f779477d0494 c9681872b7400de7e2bba48d2c9d6af27ab32218fde6f977b7ed9b36842732ed
POST /fp?tag_id=335785 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1980
Origin: https://poopstream.cloud
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 01 Jun 2025 19:00:21 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 58
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://poopstream.cloud
Set-Cookie: id=6410852214796711967; Expires=Mon, 01 Jun 2026 19:00:21 GMT; Secure; SameSite=None
Vary: Origin
|
|
| 8309b4c5f6.602e6a55fb.com/in/multy | 168.119.25.102 | 204 No Content | 0 B |
URL OPTIONS 8309b4c5f6.602e6a55fb.com/in/multy IP168.119.25.102:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subject602e6a55fb.com FingerprintB2:C4:E9:FD:D6:BD:E7:5F:E3:D4:1B:D7:07:7A:59:CB:C8:BB:ED:FF ValidityWed, 28 May 2025 14:04:24 GMT - Tue, 26 Aug 2025 14:04:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /in/multy HTTP/1.1
Host: 8309b4c5f6.602e6a55fb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://poopstream.cloud/
Origin: https://poopstream.cloud
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.18.0
date: Sun, 01 Jun 2025 19:00:26 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp | 45.133.44.24 | 200 OK | 1.1 kB |
URL GET static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp IP45.133.44.24:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subjectstatic.bookmsg.com Fingerprint81:A4:C6:88:C3:3E:D5:D5:E5:AB:E3:D3:AC:1A:1F:DE:B8:17:28:C6 ValidityFri, 30 May 2025 02:32:38 GMT - Thu, 28 Aug 2025 02:32:37 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 360x240, Scaling: [none]x[none], YUV color, decoders should clamp Hash2a11e13b2bd67bb9a6cb347d7c73df13 b85460a33f9b229f42c08a6a94ae433a4d5c32ab 1d0d6b5176d6a48b3042a107f929bbfcefd4a057273ac488bbb7f7affd909b56
GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 01 Jun 2025 19:00:27 GMT
content-type: image/webp
content-length: 1066
server: nginx/1.24.0
last-modified: Fri, 31 May 2024 10:56:43 GMT
etag: "6659aceb-42a"
expires: Mon, 01 Jun 2026 19:00:27 GMT
cache-control: max-age=31536000
x-cdn-host-id: ds5058
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| poopstream.cloud/xxxsdn?id=6d6f6e6f65686f636f783362 | 172.67.199.205 | 200 OK | 8.2 kB |
URL GET poopstream.cloud/xxxsdn?id=6d6f6e6f65686f636f783362 IP172.67.199.205:443
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerGoogle Trust Services Subjectpoopstream.cloud Fingerprint91:F9:F6:B3:A7:88:7A:1F:B0:21:B5:95:23:F5:3B:C9:E8:A8:54:A8 ValiditySun, 01 Jun 2025 13:05:38 GMT - Sat, 30 Aug 2025 14:05:34 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (2405) Hash3804a339a2d0f6a97d2bf6a395a83453 96a1fbb25a514ab2c88b869e9cee1dee289c552a d5f76e7868f1e7dda575ca51031efb7166194fc5ac349d2a81da48124af944e7
GET /xxxsdn?id=6d6f6e6f65686f636f783362 HTTP/1.1
Host: poopstream.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/e/b3xocoheonom
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 01 Jun 2025 19:00:20 GMT
content-type: text/html;charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p45ujdHIAPy50oq2I5VunLUsZggoYJHtyMaITtH6xZQ8Tv7t%2FSmmWF6X5DPwm%2FESSZl2%2B1Tk9%2BlNIGjfKX7nZrFa8FGcxspV3LzwaHnmoRGu0ytx%2F2Ztuclnv2Rf37cPqBao"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=3600, s-maxage=3600, must-revalidate
x-content-type-options: nosniff
content-encoding: br
cf-ray: 9490f4096f8cb660-AMS
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=24245&min_rtt=19978&rtt_var=8501&sent=20&recv=21&lost=0&retrans=0&sent_bytes=4167&recv_bytes=2271&delivery_rate=117152&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=18f7628030e5257a&ts=429&x=80"
|
|
| accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiNoQrDe9YJJuLK7Q9LBuFQGUSwT1i0KRRxQrQalV5-cDP8ahzYFs0Zw0_FZ4e7jBRZ8wKhCqw | 142.250.147.84 | 302 Found | 0 B |
URL GET accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiNoQrDe9YJJuLK7Q9LBuFQGUSwT1i0KRRxQrQalV5-cDP8ahzYFs0Zw0_FZ4e7jBRZ8wKhCqw IP142.250.147.84:443
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerGoogle Trust Services Subjectaccounts.google.com FingerprintB1:06:D8:49:F1:03:BE:43:D7:79:D9:25:25:FE:92:54:6C:93:0B:54 ValidityMon, 12 May 2025 08:44:47 GMT - Mon, 04 Aug 2025 08:44:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiNoQrDe9YJJuLK7Q9LBuFQGUSwT1i0KRRxQrQalV5-cDP8ahzYFs0Zw0_FZ4e7jBRZ8wKhCqw HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:6L7Mzn2MDFmf1_1iqhYIuXS5BqjQdg:fKRfBjTaKX8XqlUf;Path=/;Expires=Tue, 01-Jun-2027 19:00:21 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 01 Jun 2025 19:00:21 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOb19RLe2tVOdoY3wCBDVlCj8tnqsN09ahdZkYac4iz2_crzxoanEDdAS8am_i4l1ldHHdC1Q&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S520668373%3A1748804421719820
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: script-src 'nonce-2IbuhsjPj2gHalwELmpNRw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 414
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| nereserv.com/in/dip?event_id=450f5bd8-ed7e-451b-8299-a1401eb7181d&subid=1352461613&spot_id=1451788&created_at=2025-06-01&timezone=0&ver=1.162.2 | 116.202.249.56 | 200 OK | 0 B |
URL GET nereserv.com/in/dip?event_id=450f5bd8-ed7e-451b-8299-a1401eb7181d&subid=1352461613&spot_id=1451788&created_at=2025-06-01&timezone=0&ver=1.162.2 IP116.202.249.56:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subjectinpage.infrapu.sh Fingerprint53:32:5A:78:97:D4:AD:CF:41:C6:08:3E:D5:02:8C:C6:22:50:E8:35 ValidityTue, 01 Apr 2025 08:22:50 GMT - Mon, 30 Jun 2025 08:22:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?event_id=450f5bd8-ed7e-451b-8299-a1401eb7181d&subid=1352461613&spot_id=1451788&created_at=2025-06-01&timezone=0&ver=1.162.2 HTTP/1.1
Host: nereserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://poopstream.cloud
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Sun, 01 Jun 2025 19:00:21 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| tracking.eu.flamtyr.com/rtb/feedimpression?uuid=6e85b214-7bb2-4b1d-8c43-9360fb80949d&s=101&d=254&feedid=e703&rt=1748804426330&sb=0.0027027027&db=0.005&subid=311451790&tokid=null&url=J44XHDROF354SQSK6H3P6EMFWAHPU2R6GIAQ2WT2SFROO2FWR7WG2UR23MNEVJCZHY6YRELGMJFOYIU2ZUHGWSWMDICU3J76A7YYGTY%3D&i=88d0bd&u=125ff5&g=NO&ad=1058532&sp=&spv=&sm= | 138.68.123.32 | 302 Found | 37 kB |
URL GET tracking.eu.flamtyr.com/rtb/feedimpression?uuid=6e85b214-7bb2-4b1d-8c43-9360fb80949d&s=101&d=254&feedid=e703&rt=1748804426330&sb=0.0027027027&db=0.005&subid=311451790&tokid=null&url=J44XHDROF354SQSK6H3P6EMFWAHPU2R6GIAQ2WT2SFROO2FWR7WG2UR23MNEVJCZHY6YRELGMJFOYIU2ZUHGWSWMDICU3J76A7YYGTY%3D&i=88d0bd&u=125ff5&g=NO&ad=1058532&sp=&spv=&sm= IP138.68.123.32:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subject*.eu.aneorwd.com Fingerprint07:E6:88:5E:3C:D6:6C:5A:C6:06:99:E9:07:3C:DA:B1:CA:49:BE:07 ValidityWed, 07 May 2025 16:07:35 GMT - Tue, 05 Aug 2025 16:07:34 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/feedimpression?uuid=6e85b214-7bb2-4b1d-8c43-9360fb80949d&s=101&d=254&feedid=e703&rt=1748804426330&sb=0.0027027027&db=0.005&subid=311451790&tokid=null&url=J44XHDROF354SQSK6H3P6EMFWAHPU2R6GIAQ2WT2SFROO2FWR7WG2UR23MNEVJCZHY6YRELGMJFOYIU2ZUHGWSWMDICU3J76A7YYGTY%3D&i=88d0bd&u=125ff5&g=NO&ad=1058532&sp=&spv=&sm= HTTP/1.1
Host: tracking.eu.flamtyr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
referrer-policy: no-referrer
location: https://x1.giriucon.com/8d04ffe9e8f556fe192.jpeg
content-length: 0
date: Sun, 01 Jun 2025 19:00:26 GMT
|
|
| 8752d657fd.a3a706a0ae.com/41c71c9e5e38037e1044aa916eb13f60.js | 45.133.44.52 | 200 OK | 125 kB |
URL GET 8752d657fd.a3a706a0ae.com/41c71c9e5e38037e1044aa916eb13f60.js IP45.133.44.52:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subject8752d657fd.a3a706a0ae.com FingerprintD1:74:F1:97:31:52:84:CB:96:EF:C9:EE:83:F4:F5:1A:BF:AC:7A:2D ValidityThu, 29 May 2025 02:15:13 GMT - Wed, 27 Aug 2025 02:15:12 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators Size125 kB (125308 bytes) Hash736b38a34c9504a888e30573e7d5ef87 91e89bc34199af1de6824983c0d3e28755b28e6b c72df3d0c56cbd1710375f7b69985ebeba6af49918fcb95e6ff9c90f6936b5f0
GET /41c71c9e5e38037e1044aa916eb13f60.js HTTP/1.1
Host: 8752d657fd.a3a706a0ae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://poopstream.cloud
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 01 Jun 2025 19:00:20 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Fri, 16 May 2025 12:46:37 GMT
etag: W/"682733ad-1e97c"
content-encoding: gzip
expires: Sun, 01 Jun 2025 19:05:20 GMT
cache-control: max-age=300
x-cdn-host-id: ah1747
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| nereserv.com/in/dip?site=native-push&wl=1&event_id=11488a36-9ac8-45e2-b5e0-df2793c60382&subid=2101559281&sid=506843734&spot_id=1451790&created_at=2025-06-01&timezone=0&ver=8.227.0&is_native=1 | 116.202.249.56 | 200 OK | 0 B |
URL GET nereserv.com/in/dip?site=native-push&wl=1&event_id=11488a36-9ac8-45e2-b5e0-df2793c60382&subid=2101559281&sid=506843734&spot_id=1451790&created_at=2025-06-01&timezone=0&ver=8.227.0&is_native=1 IP116.202.249.56:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subjectinpage.infrapu.sh Fingerprint53:32:5A:78:97:D4:AD:CF:41:C6:08:3E:D5:02:8C:C6:22:50:E8:35 ValidityTue, 01 Apr 2025 08:22:50 GMT - Mon, 30 Jun 2025 08:22:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?site=native-push&wl=1&event_id=11488a36-9ac8-45e2-b5e0-df2793c60382&subid=2101559281&sid=506843734&spot_id=1451790&created_at=2025-06-01&timezone=0&ver=8.227.0&is_native=1 HTTP/1.1
Host: nereserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://poopstream.cloud
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Sun, 01 Jun 2025 19:00:26 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp | 45.133.44.24 | 200 OK | 486 B |
URL GET static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp IP45.133.44.24:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subjectstatic.bookmsg.com Fingerprint81:A4:C6:88:C3:3E:D5:D5:E5:AB:E3:D3:AC:1A:1F:DE:B8:17:28:C6 ValidityFri, 30 May 2025 02:32:38 GMT - Thu, 28 Aug 2025 02:32:37 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp Hashceeb4e8840c24621c0e0352b42b38a5b 03cbceb0134a39267014595938705e2916580644 50cb77ae9715629235f102dd53a68559df1b64416f71179dbb4aa942725790b3
GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 01 Jun 2025 19:00:27 GMT
content-type: image/webp
content-length: 486
server: nginx/1.24.0
last-modified: Fri, 31 May 2024 10:56:43 GMT
etag: "6659aceb-1e6"
expires: Mon, 01 Jun 2026 19:00:27 GMT
cache-control: max-age=31536000
x-cdn-host-id: ds5058
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| nereserv.com/in/dip?event_id=450f5bd8-ed7e-451b-8299-a1401eb7181d&subid=1352461613&spot_id=1451788&created_at=2025-06-01&timezone=0&ver=1.162.2 | 116.202.249.56 | 200 OK | 0 B |
URL GET nereserv.com/in/dip?event_id=450f5bd8-ed7e-451b-8299-a1401eb7181d&subid=1352461613&spot_id=1451788&created_at=2025-06-01&timezone=0&ver=1.162.2 IP116.202.249.56:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subjectinpage.infrapu.sh Fingerprint53:32:5A:78:97:D4:AD:CF:41:C6:08:3E:D5:02:8C:C6:22:50:E8:35 ValidityTue, 01 Apr 2025 08:22:50 GMT - Mon, 30 Jun 2025 08:22:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?event_id=450f5bd8-ed7e-451b-8299-a1401eb7181d&subid=1352461613&spot_id=1451788&created_at=2025-06-01&timezone=0&ver=1.162.2 HTTP/1.1
Host: nereserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://poopstream.cloud
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Sun, 01 Jun 2025 19:00:21 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| 8309b4c5f6.602e6a55fb.com/in/show/?tag_ab=b&site_id=311451789&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=mq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fpoopstream.cloud%2Fe%2Fb3xocoheonom&refdom=poopstream.cloud&auction_time=1748804426&subid=1904497813&sid=3684562383&tcid=0&ver=8.227.0&ver_c=&spot_id=1451789&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-06-01&iabcat=IAB25-3&user_fp=16840880353512051555&score=0&kubik_score=0&kaminari_bot_ip=1&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1904497813%26spot_id%3D1451789%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoopstream.cloud%252Fe%252Fb3xocoheonom%26idzone%3D0%26sid%3D1886&is_cpm=1&resp_type=&crid=&crtid=b0681ff5c1739e7f8bdbb8527f77d810&url=https%3A%2F%2Fmohawe.top%2F33%2F1%2Fpgo%2F1-15103%2Farfkgpdi3go6aacoj4aaaaaajfs5mbe2fjnfwip7hiaaaaiaaaaaaaaaaaaa&icons=uy36RFgCxw49T32l--FnMtU-SLvhG5fFsntRok_GLyFeT11AtqNl8lcWeUdy8xNHqX-auPQ5tOcO-lLE2fdtpnpCVR9HVIDlIeJRBQTV0-_H_hujqZFjwCY7ZN74QbiaAl_8CirqHFCcOHFewzW1tyS51ZGl7CQOFXSAlsjr3jImLzIylA&ext_cid=0&pop_price=0.00071&pop_ecpm=0.025549831933631962&px_id=1451789&min_cpm=0.04356931829470199&out_id=1&campaign_type=lq-pop-ext&aid=258&cid=19126&uniq=&mid=3044664877838960257&skin_id=2&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.518725999593738&cpm=0.71&verify_hash=23ac3e47448f66d5e2f5613330eb9703&verify_hash_v2=a5197afe6cbf282c1a8df79e82384ff2e8bb361f1a6643040ad0e3cd99317eba&is_native=3&real_bid=0.518725999593738&pop_real_cpm=0.71&pop_real_bid=0.000518725999593738&original_bid_usd=0.71&original_bid=0.71&show_type=0&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=150,108,0,31,4,81,20,27&need_redirect_show=0&applied_features=coef_090,main-skins-settings&show_count=1&expiration_timestamp=1748977226&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp&site=native-push-adult&price=0&hostname=auc-inpage-hz-4-c&auc_type=1&pop_type=1&is_pop_cpc=0&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.00071&ext_campaign_id_str=&is_webview=0&client_price=0&direct_client_price=0&priority=0&client_payment_model=&is_in_app=0&auc_domain_type=hash&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=teens&is_iframe=0&traffic_category=adult&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&mlf=1&mlc=1&st=0.11&cpa=c2d092b4-9f77-4b2e-9470-22e3fe0ebcd4&prev_step_diff=907 | 168.119.25.102 | 200 OK | 0 B |
URL GET 8309b4c5f6.602e6a55fb.com/in/show/?tag_ab=b&site_id=311451789&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=mq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fpoopstream.cloud%2Fe%2Fb3xocoheonom&refdom=poopstream.cloud&auction_time=1748804426&subid=1904497813&sid=3684562383&tcid=0&ver=8.227.0&ver_c=&spot_id=1451789&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-06-01&iabcat=IAB25-3&user_fp=16840880353512051555&score=0&kubik_score=0&kaminari_bot_ip=1&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1904497813%26spot_id%3D1451789%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoopstream.cloud%252Fe%252Fb3xocoheonom%26idzone%3D0%26sid%3D1886&is_cpm=1&resp_type=&crid=&crtid=b0681ff5c1739e7f8bdbb8527f77d810&url=https%3A%2F%2Fmohawe.top%2F33%2F1%2Fpgo%2F1-15103%2Farfkgpdi3go6aacoj4aaaaaajfs5mbe2fjnfwip7hiaaaaiaaaaaaaaaaaaa&icons=uy36RFgCxw49T32l--FnMtU-SLvhG5fFsntRok_GLyFeT11AtqNl8lcWeUdy8xNHqX-auPQ5tOcO-lLE2fdtpnpCVR9HVIDlIeJRBQTV0-_H_hujqZFjwCY7ZN74QbiaAl_8CirqHFCcOHFewzW1tyS51ZGl7CQOFXSAlsjr3jImLzIylA&ext_cid=0&pop_price=0.00071&pop_ecpm=0.025549831933631962&px_id=1451789&min_cpm=0.04356931829470199&out_id=1&campaign_type=lq-pop-ext&aid=258&cid=19126&uniq=&mid=3044664877838960257&skin_id=2&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.518725999593738&cpm=0.71&verify_hash=23ac3e47448f66d5e2f5613330eb9703&verify_hash_v2=a5197afe6cbf282c1a8df79e82384ff2e8bb361f1a6643040ad0e3cd99317eba&is_native=3&real_bid=0.518725999593738&pop_real_cpm=0.71&pop_real_bid=0.000518725999593738&original_bid_usd=0.71&original_bid=0.71&show_type=0&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=150,108,0,31,4,81,20,27&need_redirect_show=0&applied_features=coef_090,main-skins-settings&show_count=1&expiration_timestamp=1748977226&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp&site=native-push-adult&price=0&hostname=auc-inpage-hz-4-c&auc_type=1&pop_type=1&is_pop_cpc=0&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.00071&ext_campaign_id_str=&is_webview=0&client_price=0&direct_client_price=0&priority=0&client_payment_model=&is_in_app=0&auc_domain_type=hash&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=teens&is_iframe=0&traffic_category=adult&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&mlf=1&mlc=1&st=0.11&cpa=c2d092b4-9f77-4b2e-9470-22e3fe0ebcd4&prev_step_diff=907 IP168.119.25.102:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerLet's Encrypt Subject602e6a55fb.com FingerprintB2:C4:E9:FD:D6:BD:E7:5F:E3:D4:1B:D7:07:7A:59:CB:C8:BB:ED:FF ValidityWed, 28 May 2025 14:04:24 GMT - Tue, 26 Aug 2025 14:04:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?tag_ab=b&site_id=311451789&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=mq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fpoopstream.cloud%2Fe%2Fb3xocoheonom&refdom=poopstream.cloud&auction_time=1748804426&subid=1904497813&sid=3684562383&tcid=0&ver=8.227.0&ver_c=&spot_id=1451789&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-06-01&iabcat=IAB25-3&user_fp=16840880353512051555&score=0&kubik_score=0&kaminari_bot_ip=1&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1904497813%26spot_id%3D1451789%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoopstream.cloud%252Fe%252Fb3xocoheonom%26idzone%3D0%26sid%3D1886&is_cpm=1&resp_type=&crid=&crtid=b0681ff5c1739e7f8bdbb8527f77d810&url=https%3A%2F%2Fmohawe.top%2F33%2F1%2Fpgo%2F1-15103%2Farfkgpdi3go6aacoj4aaaaaajfs5mbe2fjnfwip7hiaaaaiaaaaaaaaaaaaa&icons=uy36RFgCxw49T32l--FnMtU-SLvhG5fFsntRok_GLyFeT11AtqNl8lcWeUdy8xNHqX-auPQ5tOcO-lLE2fdtpnpCVR9HVIDlIeJRBQTV0-_H_hujqZFjwCY7ZN74QbiaAl_8CirqHFCcOHFewzW1tyS51ZGl7CQOFXSAlsjr3jImLzIylA&ext_cid=0&pop_price=0.00071&pop_ecpm=0.025549831933631962&px_id=1451789&min_cpm=0.04356931829470199&out_id=1&campaign_type=lq-pop-ext&aid=258&cid=19126&uniq=&mid=3044664877838960257&skin_id=2&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.518725999593738&cpm=0.71&verify_hash=23ac3e47448f66d5e2f5613330eb9703&verify_hash_v2=a5197afe6cbf282c1a8df79e82384ff2e8bb361f1a6643040ad0e3cd99317eba&is_native=3&real_bid=0.518725999593738&pop_real_cpm=0.71&pop_real_bid=0.000518725999593738&original_bid_usd=0.71&original_bid=0.71&show_type=0&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=150,108,0,31,4,81,20,27&need_redirect_show=0&applied_features=coef_090,main-skins-settings&show_count=1&expiration_timestamp=1748977226&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp&site=native-push-adult&price=0&hostname=auc-inpage-hz-4-c&auc_type=1&pop_type=1&is_pop_cpc=0&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.00071&ext_campaign_id_str=&is_webview=0&client_price=0&direct_client_price=0&priority=0&client_payment_model=&is_in_app=0&auc_domain_type=hash&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=teens&is_iframe=0&traffic_category=adult&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&mlf=1&mlc=1&st=0.11&cpa=c2d092b4-9f77-4b2e-9470-22e3fe0ebcd4&prev_step_diff=907 HTTP/1.1
Host: 8309b4c5f6.602e6a55fb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poopstream.cloud/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 01 Jun 2025 19:00:27 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| poopstream.cloud/404 | 172.67.199.205 | 200 OK | 8.2 kB |
IP172.67.199.205:443
Requested byhttps://poopstream.cloud/e/b3xocoheonom CertificateIssuerGoogle Trust Services Subjectpoopstream.cloud Fingerprint91:F9:F6:B3:A7:88:7A:1F:B0:21:B5:95:23:F5:3B:C9:E8:A8:54:A8 ValiditySun, 01 Jun 2025 13:05:38 GMT - Sat, 30 Aug 2025 14:05:34 GMT
File typeHTML document, ASCII text, with very long lines (3141) Hashd473a317864656342f58085b77ac6f5b 346e6f9288a6d5a711f9d3957c17b6b0aa2772f7 51fcac38e476eb1916988a12ff04dbef9fdd6c757ea90ff03b94143f1d84d6e8
GET /404 HTTP/1.1
Host: poopstream.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: _ga_RRBBHD087X=GS2.1.s1748804420$o1$g0$t1748804420$j60$l0$h0; _ga=GA1.1.2128681749.1748804420
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 01 Jun 2025 19:00:27 GMT
content-type: text/html;charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=owFbtLQDu25dZxgQqH0NZNGKdYIbaRLHiu1OggnNNG7vWEsLgInjjxRzyoTzVkPzRhPwNHGjovXBeHM59KZETW%2Fr2uTZsT1pkB%2FlLY9YPfxdQblpQMVI0vVeyzrUrnzygg32"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=3600, s-maxage=3600, must-revalidate
x-content-type-options: nosniff
content-encoding: br
cf-ray: 9490f4361debb660-AMS
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=23705&min_rtt=19978&rtt_var=5700&sent=33&recv=28&lost=0&retrans=0&sent_bytes=9733&recv_bytes=3725&delivery_rate=167624&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=18f7628030e5257a&ts=7571&x=80"
|
|