detectportal.firefox.com/success.txt?ipv4
200 OK 8 B URL HTTP/1.1 detectportal.firefox.com/success.txt?ipv4
IP
Hash ae780585f49b94ce1444eb7d28906123
7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86
81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5
GET /success.txt?ipv4 HTTP/1.1
Host: detectportal.firefox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Length: 8
Via: 1.1 google
Date: Wed, 18 Jan 2023 17:37:49 GMT
Age: 46778
Content-Type: text/plain
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600
hclips.com/videos/7819579/linda-sleepy-feet
301 Moved Permanently 0 B URL HTTP/1.1 hclips.com/videos/7819579/linda-sleepy-feet
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /videos/7819579/linda-sleepy-feet HTTP/1.1
Host: hclips.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 19 Jan 2023 06:37:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 19 Jan 2023 07:37:28 GMT
Location: https://hclips.com/videos/7819579/linda-sleepy-feet
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=86AFaZKqokDUQOn6MYIPErAsBRR8MKAEzZ1zOqSMT8Uhqri6eDSD159H3l8C3kOKiW4eKI8L5TBxs2MzX2NhNgTtfYkuIb08Kj%2Fv1r19kdJGJ%2BGN4VxOlOdSbZPB"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78bd8fda1dc4744f-LHR
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d3bb7b1f9716183d6400199cc5e002da
ffac4d9825f16a577003bf13a74eba9c12aa129f
b0bc8cadc20d366cd6ca9afc702d93fbfd1fe6d419407f0a512c2e267fefdd43
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0BC8CADC20D366CD6CA9AFC702D93FBFD1FE6D419407F0A512C2E267FEFDD43"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12784
Expires: Thu, 19 Jan 2023 10:10:32 GMT
Date: Thu, 19 Jan 2023 06:37:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 37284a837312d6586460a3b86bbe7bd0
6ac0847abd48eb8607597218aaa2cb2d434c012b
6a0e11bb042555d72b397ae0cc3d5e242d3a3fe04418e28ffd222decca7d16ca
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A0E11BB042555D72B397AE0CC3D5E242D3A3FE04418E28FFD222DECCA7D16CA"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10894
Expires: Thu, 19 Jan 2023 09:39:02 GMT
Date: Thu, 19 Jan 2023 06:37:28 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 2ea04b5e5f1adcd329776f457dfdf3ef
2e3249022604fb8f2cd7dc5ba719ac2abbd06d40
c3650cd4f2b9c4a8e55e00d020581435c9b519f1d2995e1fab36e5a4d9164010
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2762
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 06:37:28 GMT
Last-Modified: Thu, 19 Jan 2023 05:51:26 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 279
getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
200 OK 46 kB URL HTTP/2 getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 4546f927109c0f0d9c2ab5c7f6668e29
bbe1cd3d1740d5f418cbf23c758dfdb6f6cf8601
bf7a7890713a844c850576c19191ba5dc94cbba3af2c9986df925588761a6dc8
GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 HTTP/1.1
Host: getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding
content-location: global-recs.php
tcn: choice
x-frame-options: SAMEORIGIN
status: 200 OK
x-source: Pocket
pragma: cache
p3p: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa OUR IND UNI COM NAV INT STA PRE"
x-cache: Hit from cloudfront
x-amz-cf-pop: SEA73-P2
x-amz-cf-id: VwkrsE1nJtHjfeZ96eyrs8dYSpov56d_1gD_1_m7qFhj0DC4yrd8dQ==
content-encoding: gzip
via: 1.1 7f06047c304d80ea094816a27c933914.cloudfront.net (CloudFront), 1.1 google
date: Thu, 19 Jan 2023 06:35:50 GMT
age: 98
content-type: application/json
content-length: 46191
cache-control: s-maxage=900,public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6c8239f3894cfba54d1f3a9ea1c85db5
a70f2b3bf79f2aa26b0cc0340dd182565c3eb946
64dc0508d3fcea1ec92fb60310e9b3f5454c0b69f61e8453fd443bc46ab9471b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "64DC0508D3FCEA1EC92FB60310E9B3F5454C0B69F61E8453FD443BC46AB9471B"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10670
Expires: Thu, 19 Jan 2023 09:35:18 GMT
Date: Thu, 19 Jan 2023 06:37:28 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: HPTDFJ6yh1EHsqqfNQt3wSTi8KmLE4rJ7Z7rWwrYbAI/OJpoOknBC80Gi1TJs0nalFJdts5eUWM=
x-amz-request-id: C00JSQCVJE0Q4H2G
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 19 Jan 2023 05:57:46 GMT
age: 2382
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 2ea04b5e5f1adcd329776f457dfdf3ef
2e3249022604fb8f2cd7dc5ba719ac2abbd06d40
c3650cd4f2b9c4a8e55e00d020581435c9b519f1d2995e1fab36e5a4d9164010
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2762
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 06:37:28 GMT
Last-Modified: Thu, 19 Jan 2023 05:51:26 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 279
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cc07d664b5dadee6f9120d54904dfa57
df75a55b0b2019684a6c512bee528c51a2c4a756
14a1bd6315a3256468edafedfd1c02a6ba147914c0f01e8504e7d8cc67781c34
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "14A1BD6315A3256468EDAFEDFD1C02A6BA147914C0F01E8504E7D8CC67781C34"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18681
Expires: Thu, 19 Jan 2023 11:48:49 GMT
Date: Thu, 19 Jan 2023 06:37:28 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 06:37:28 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 19 Jan 2023 05:49:25 GMT
content-type: application/json
age: 2883
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 607bf9684e4803d817fdd1120427dcdd
886fa77396c792751868f05806793937a4f11be6
d17df5470015b9c3be3fc1e9c8fa5f2b732231eed453b689e94897f6f1da3911
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 06:37:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css2?family=Montserrat:wght@500&display=block
200 OK 986 B URL HTTP/2 fonts.googleapis.com/css2?family=Montserrat:wght@500&display=block
IP
Hash 16ffe3a30d8084a538daa78d229386d1
8fe03656e6377ed7d72504c61b82b07d513386d5
5e2ed072ccd2cc753a051a10da2f52513b152574ff3cd21e22db9d51210b421e
GET /css2?family=Montserrat:wght@500&display=block HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 19 Jan 2023 06:37:28 GMT
date: Thu, 19 Jan 2023 06:37:28 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 783c01fa14ade2316e22ead869b3dbf8
71e20a947b3a9e10cb2bf046e2ca3da294d97f70
9b0aee93ad83dd0c14a106a2514b86ab950b2fc679596fd621841242b5c7e95c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 06:37:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-MVMB4DG
200 OK 40 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MVMB4DG
IP
File type ASCII text, with very long lines (2198)
Hash f726d14af2a449e6ec4b9644cc56d602
0b909c94390e604fb5e1df82b82d8cd352a25049
7b2d9e4b30ade03f381d10cb9b769c76d1a7916a43d02d7d06f1ed3945d1cb9c
GET /gtm.js?id=GTM-MVMB4DG HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 19 Jan 2023 06:37:28 GMT
expires: Thu, 19 Jan 2023 06:37:28 GMT
cache-control: private, max-age=900
last-modified: Thu, 19 Jan 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 39955
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 783c01fa14ade2316e22ead869b3dbf8
71e20a947b3a9e10cb2bf046e2ca3da294d97f70
9b0aee93ad83dd0c14a106a2514b86ab950b2fc679596fd621841242b5c7e95c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 06:37:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 60 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
Hash 7557421f3a18fce70d273d2a7142c883
461b44fd4b4048c131f760d9c5ddce97ccd0c7a7
6b32c83c421a533fe1c70f5819edd44539fe14cba8bb1a3d604667bd41e76659
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 19 Jan 2023 06:17:26 GMT
age: 1202
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 65 kB IP
Hash f4eb26175f1c04153cc65b53592ec9ad
6c76b50e68712ddc73f78dfa2652326aa9aabc18
81bc81ff34d53b4d5915e52bf7f7e20c76e7c818c88ac8b0f19c8e076cc98262
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 06:37:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-TCQ7X2
200 OK 48 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-TCQ7X2
IP
File type ASCII text, with very long lines (3415)
Hash bea9d0ab066023bf938b2036bb101ec4
6c6c04801affa121e4bfd05d8def84d43213e089
8c9cdf786cda28c0014381430d69fdb3a8b7a8036c4787853e0026e4539791a0
GET /gtm.js?id=GTM-TCQ7X2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 19 Jan 2023 06:37:28 GMT
expires: Thu, 19 Jan 2023 06:37:28 GMT
cache-control: private, max-age=900
last-modified: Thu, 19 Jan 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 48380
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db72b0cf36b635e3c0825b954e3f0571
f0f3d97119b058f86553062c835f89b1b283945d
bf6ecaa45a5dbd66d0c657e5f33345ac46bdc94d8cae1274fcaf01c0ff302b97
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 06:37:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash de13be8f7df1c2196efcecf130739b83
ead8aff3f401a7d0fb560997727f43e260fa9fbe
eab4604e285fbdb1fa294e4de17ab64a2a82025b0c5d4d7dd8f42b38aa2a0244
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4357
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 06:37:29 GMT
Last-Modified: Thu, 19 Jan 2023 05:24:53 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtZ6Hw5aXo.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtZ6Hw5aXo.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12820, version 1.0\012- data
Hash 3f2f6d9e64a95a40ea5dedfc91f42a95
9cd9f5a2f86f1d42390141d91619a0aa41a276b7
ed121b1a8fbf30998a4ed0a7c8343abe9091ac4744f1c24b602b5d3f962bdb78
GET /s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtZ6Hw5aXo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hclips.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12820
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 15 Jan 2023 21:07:12 GMT
expires: Mon, 15 Jan 2024 21:07:12 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 18:56:10 GMT
content-type: font/woff2
age: 293417
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db72b0cf36b635e3c0825b954e3f0571
f0f3d97119b058f86553062c835f89b1b283945d
bf6ecaa45a5dbd66d0c657e5f33345ac46bdc94d8cae1274fcaf01c0ff302b97
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 06:37:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 79af32d8e279b4cfec147ab51cb6fcb3
d726903292bd1e08a6d9fe0719d2cd5b33dc5fe6
bfcb2d8f14d89736ac6b771f1618a8fc5e707691d60807a574fb719c8e9393ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4970
Cache-Control: max-age=100329
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 06:37:29 GMT
Etag: "63c7b6a8-1d7"
Expires: Fri, 20 Jan 2023 10:29:38 GMT
Last-Modified: Wed, 18 Jan 2023 09:06:48 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
shavar.services.mozilla.com/downloads?client=Firefox&appver=96.0a&pver=2.2
200 OK 29 kB URL HTTP/1.1 shavar.services.mozilla.com/downloads?client=Firefox&appver=96.0a&pver=2.2
IP
Hash 1cd9e41beb49edd93022b0da7aff5896
83564fc057f42a94798d602cd3148cd332473b7e
e0410a7333f296fa76627f52bf491acd7ad68d6219fa572e3eec644c34b5fc7f
POST /downloads?client=Firefox&appver=96.0a&pver=2.2 HTTP/1.1
Host: shavar.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 773
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Date: Thu, 19 Jan 2023 06:37:29 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Length: 8
Connection: Close
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 19 Jan 2023 05:45:20 GMT
expires: Thu, 19 Jan 2023 07:45:20 GMT
cache-control: public, max-age=7200
age: 3129
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 6df78b786d921895fe37bd0e389bcdaa
63e8b5470d8fa4463eae95692f177500cd84e495
38e636e316ac89757c44fd94c69574c43ed025a395de9dc78eb8a6e0e8822275
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 06:37:29 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Mon, 23 Jan 2023 03:16:16 GMT
ETag: "63e8b5470d8fa4463eae95692f177500cd84e495"
Last-Modified: Thu, 19 Jan 2023 03:16:17 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2323
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78bd8fe39c0bb4f9-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 6df78b786d921895fe37bd0e389bcdaa
63e8b5470d8fa4463eae95692f177500cd84e495
38e636e316ac89757c44fd94c69574c43ed025a395de9dc78eb8a6e0e8822275
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 06:37:29 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Mon, 23 Jan 2023 03:16:16 GMT
ETag: "63e8b5470d8fa4463eae95692f177500cd84e495"
Last-Modified: Thu, 19 Jan 2023 03:16:17 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2323
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78bd8fe398dbb529-OSL
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3IphGpxOnuK/TPOe1Vhs3A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hHvRsnVUJmVhNO3dWR21bG1reSg=
mc.yandex.ru/metrika/tag.js
200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash 6b73c16591711035f0f831449387805a
9ced28d59b6bb733eb61affa4a1813799825c5fb
882ce5914d1128850855e250a5e4e6b6d71ed5d5ba33294aebd74411dc73fd10
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73629
date: Thu, 19 Jan 2023 06:37:29 GMT
access-control-allow-origin: *
etag: "63c637bd-11f9d"
expires: Thu, 19 Jan 2023 07:37:29 GMT
last-modified: Tue, 17 Jan 2023 08:53:01 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/watch.js
200 OK 58 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (549)
Hash bb2056b4a26983fcf5cb315734a2a097
20410f6645360c3d152190bd72675f0112892369
176324f8e6437256a5255ff01701d5bbccad19e0eb03696b456921935285a35e
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 58167
date: Thu, 19 Jan 2023 06:37:29 GMT
access-control-allow-origin: *
etag: "63c637bd-e337"
expires: Thu, 19 Jan 2023 07:37:29 GMT
last-modified: Tue, 17 Jan 2023 08:53:01 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221674097035492%22
200 OK 21 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221674097035492%22
IP
File type JSON data\012- , ASCII text, with very long lines (20973), with no line terminators
Hash ad55a538d260d6c37b408ae83c99fba8
3d7e70a4b8f4b29e16a236078c89f98013277a07
9bb154f8ef2e6e637a56fff25604b45ecaedf5eea025d6036aae57a86fe33261
GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221674097035492%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 20973
via: 1.1 google
date: Thu, 19 Jan 2023 06:02:00 GMT
age: 2129
last-modified: Thu, 19 Jan 2023 02:57:15 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1674067033293&_since=%221666204638208%22
200 OK 14 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1674067033293&_since=%221666204638208%22
IP
File type JSON data\012- , ASCII text, with very long lines (13591), with no line terminators
Hash 893aeeffa893951cf72fab3006d39319
37aff72036c5079fd6965c9d206432daf9ffca29
3aebdfea3abb810a004585ab9e5ae175e5ef125bd6d70a2307cdec0e9d314ee5
GET /v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1674067033293&_since=%221666204638208%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 13591
via: 1.1 google
date: Thu, 19 Jan 2023 06:16:34 GMT
age: 1255
last-modified: Wed, 18 Jan 2023 18:37:13 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 4q1JNaHPKwycgHANbicnNzXOO8nDJO1n2UzLWooa6ooUEb5bT+saoNY1fAZsv1hbft8KuIyHosw=
x-amz-request-id: C7JCY19BT82BVTQ4
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 19 Jan 2023 06:17:06 GMT
age: 1223
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 19 Jan 2023 05:49:25 GMT
content-type: application/json
age: 2884
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8c9984d5c620e41ba04fb1532f748fb9
e0023265f90e595dfcfc67504fc47501b3fc026a
ed120934226911bd964e091ccb429df35520b93af4c5639d34838fa2a4006b33
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ED120934226911BD964E091CCB429DF35520B93AF4C5639D34838FA2A4006B33"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15938
Expires: Thu, 19 Jan 2023 11:03:07 GMT
Date: Thu, 19 Jan 2023 06:37:29 GMT
Connection: keep-alive
firefox-settings-attachments.cdn.mozilla.net/staging/addons-bloomfilters/8038652a-6557-460a-858c-84f19a5a0987.bin
200 OK 807 kB URL HTTP/2 firefox-settings-attachments.cdn.mozilla.net/staging/addons-bloomfilters/8038652a-6557-460a-858c-84f19a5a0987.bin
IP
Size 807 kB (807180 bytes)
Hash 914be443bdfbe8a1c3ded61e1c114bd6
4fe7c5ff83f6a29e6699f4cebc17550891504661
41b036d0c889509d547296b238027a063c313261ad52d5f7bb81922011791857
GET /staging/addons-bloomfilters/8038652a-6557-460a-858c-84f19a5a0987.bin HTTP/1.1
Host: firefox-settings-attachments.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: IHrBFAcqOzrZBc0XSyAZmRSCjs5ZzB/IQCWyrpihN9xvs5fQOE0nMhnzNX8vsP+wG9mFjsUj1Ps=
x-amz-request-id: NKRTYG83CQM92SHM
x-amz-version-id: K1ODzappZsD35qeu0OM5zvs_BP1eybj7
accept-ranges: bytes
server: AmazonS3
content-length: 807180
via: 1.1 google
date: Tue, 17 Jan 2023 12:42:00 GMT
age: 150929
last-modified: Tue, 10 Jan 2023 12:38:46 GMT
etag: "914be443bdfbe8a1c3ded61e1c114bd6"
content-type: application/octet-stream
cache-control: public,max-age=604800
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1674073315973&_since=%221666483264567%22
200 OK 54 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1674073315973&_since=%221666483264567%22
IP
File type JSON data\012- , ASCII text, with very long lines (53706), with no line terminators
Hash a81163f84d5323ac2c0f2e9186cb849d
123b9f65d4c66b2bf660d2b091abbcf719180538
cf7c529c0bfe41c88763a85c284bcee25ddc27f68858d1030b4b04434d1839fa
GET /v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1674073315973&_since=%221666483264567%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 53706
via: 1.1 google
date: Thu, 19 Jan 2023 06:21:27 GMT
age: 963
last-modified: Wed, 18 Jan 2023 20:21:56 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
a.exosrv.com/ads.js
200 OK 1.4 kB IP
ASN #60068 Datacamp Limited
Hash fb20517f7e358882fb3948525c431ae7
3063ca89c1358a56daab4b60b862ff6cdbdfea9e
4b16e833508b2f3238cd3fdb12a56ce676fb1a8a5cadde2b057e4f2c521fc2b4
GET /ads.js HTTP/1.1
Host: a.exosrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:29 GMT
content-type: application/javascript
etag: W/"b60fdcc211f42a1f246a8c80b56"
expires: Wed, 18 Jan 2023 20:02:42 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1674115404
server: CDN77-Turbo
x-77-nzt: AblMCQ210fP/DRYAAA
x-77-nzt-ray: c0a4cc28e194cc3429e5c86363684f17
x-cache: HIT
x-age: 5645
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
js.wpadmngr.com/npc/sdk/wp-banners.js
200 OK 0 B URL HTTP/2 js.wpadmngr.com/npc/sdk/wp-banners.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npc/sdk/wp-banners.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 20 Aug 2021 15:14:31 GMT
etag: "611fc6d7-0"
expires: Thu, 19 Jan 2023 06:42:30 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1674071162071&_since=%221666279968541%22
200 OK 68 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1674071162071&_since=%221666279968541%22
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash cd2f56c71e4684e332b88f118696d346
a154eb51607a90286df7669a97a1fbb04adfc5e4
a727c1e0ce890ecc133a0f97e5b40f074c2fff94f66d350e5a18614e259e9a49
GET /v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1674071162071&_since=%221666279968541%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 67515
via: 1.1 google
date: Thu, 19 Jan 2023 06:16:35 GMT
age: 1255
last-modified: Wed, 18 Jan 2023 19:46:02 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 19 Jan 2023 06:37:30 GMT
access-control-allow-origin: *
etag: "63c637bd-2b"
expires: Thu, 19 Jan 2023 07:37:30 GMT
accept-ranges: bytes
last-modified: Tue, 17 Jan 2023 08:53:01 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/49315045/1?wmode=7&page-url=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1334%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A713530841441%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063729%3Aet%3A1674110250%3Ac%3A1%3Arn%3A710509795%3Arqn%3A1%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C71%2C0%2C525%2C0%2C%2C712%2C3%2C%2C%2C%2C1348%3Aco%3A0%3Ans%3A1674110247630%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674110250%3At%3ALinda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 419 B URL HTTP/2 mc.yandex.ru/watch/49315045/1?wmode=7&page-url=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1334%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A713530841441%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063729%3Aet%3A1674110250%3Ac%3A1%3Arn%3A710509795%3Arqn%3A1%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C71%2C0%2C525%2C0%2C%2C712%2C3%2C%2C%2C%2C1348%3Aco%3A0%3Ans%3A1674110247630%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674110250%3At%3ALinda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash a85134cbe34963cb1038f47f0e8a6255
6ce68a3995d45c4b0dc8f92f3413d04240cac3e5
f5d8bfec7373bcc4a644ea7203b6e3089e9fb81e3bf2d06b5450e53356b8e959
GET /watch/49315045/1?wmode=7&page-url=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1334%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A713530841441%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063729%3Aet%3A1674110250%3Ac%3A1%3Arn%3A710509795%3Arqn%3A1%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C71%2C0%2C525%2C0%2C%2C712%2C3%2C%2C%2C%2C1348%3Aco%3A0%3Ans%3A1674110247630%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674110250%3At%3ALinda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hclips.com
Referer: https://hclips.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 419
date: Thu, 19 Jan 2023 06:37:30 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://hclips.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 19-Jan-2023 06:37:30 GMT
last-modified: Thu, 19-Jan-2023 06:37:30 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/23578756/1?wmode=7&page-url=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqnly895ce05obhzcv6r%3Afp%3A1334%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A2%3Adp%3A0%3Als%3A822134401023%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063729%3Aet%3A1674110250%3Ac%3A1%3Arn%3A912081741%3Arqn%3A1%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C71%2C0%2C525%2C0%2C%2C712%2C3%2C%2C%2C%2C1348%3Aco%3A0%3Ans%3A1674110247630%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674110250%3At%3ALinda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/23578756/1?wmode=7&page-url=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqnly895ce05obhzcv6r%3Afp%3A1334%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A2%3Adp%3A0%3Als%3A822134401023%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063729%3Aet%3A1674110250%3Ac%3A1%3Arn%3A912081741%3Arqn%3A1%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C71%2C0%2C525%2C0%2C%2C712%2C3%2C%2C%2C%2C1348%3Aco%3A0%3Ans%3A1674110247630%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674110250%3At%3ALinda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 23870a798cba0d122541eb82d4120778
69634942cd327ae42245fe63280ec80464a76060
392bdd46dcdc809071ba865e00b13dd16ce74cdab75c8fe40dbaecad9ee13cab
GET /watch/23578756/1?wmode=7&page-url=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqnly895ce05obhzcv6r%3Afp%3A1334%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A2%3Adp%3A0%3Als%3A822134401023%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063729%3Aet%3A1674110250%3Ac%3A1%3Arn%3A912081741%3Arqn%3A1%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C71%2C0%2C525%2C0%2C%2C712%2C3%2C%2C%2C%2C1348%3Aco%3A0%3Ans%3A1674110247630%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674110250%3At%3ALinda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hclips.com
Referer: https://hclips.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Thu, 19 Jan 2023 06:37:30 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://hclips.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 19-Jan-2023 06:37:30 GMT
last-modified: Thu, 19-Jan-2023 06:37:30 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ads.exoclick.com/ads.js
200 OK 38 kB IP
Hash 3dd923aea2513b440f9deb4c0b34fa44
9a38c07f26dc66d794eb8f3185fcc3f6bcc98434
10e43d4275d0657df05155e81c28c683aaf211665ad34dbc22e216373da59639
GET /ads.js HTTP/1.1
Host: ads.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 06:37:30 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 974
Content-Type: application/javascript
Accept-Ranges: bytes
Cache-Control: max-age=10800
Server: nginx
etag: W/"8f3c7314efe500b41baba9f571b"
X-HW: 1674110250.dop065.sk1.t,1674110250.cds249.sk1.shn,1674110250.dop065.sk1.t,1674110250.cds003.sk1.c
Access-Control-Allow-Origin: *, *
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash efac8d32469e6807b1b1f2916a47edf1
68d91e7af565f1cf6597bcdd642a78dbada50a8d
22639289563bb576a7c20b9c733bdd7f98c41519fdddeef0d710f0d058c5bf88
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 06:37:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash efac8d32469e6807b1b1f2916a47edf1
68d91e7af565f1cf6597bcdd642a78dbada50a8d
22639289563bb576a7c20b9c733bdd7f98c41519fdddeef0d710f0d058c5bf88
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 06:37:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash efac8d32469e6807b1b1f2916a47edf1
68d91e7af565f1cf6597bcdd642a78dbada50a8d
22639289563bb576a7c20b9c733bdd7f98c41519fdddeef0d710f0d058c5bf88
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 06:37:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mc.yandex.ru/watch/23578756?wmode=7&page-url=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqnly895ce05obhzcv6r%3Afp%3A1334%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A2%3Adp%3A0%3Als%3A822134401023%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063729%3Aet%3A1674110250%3Ac%3A1%3Arn%3A912081741%3Arqn%3A1%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C71%2C0%2C525%2C0%2C%2C712%2C3%2C%2C%2C%2C1348%3Aco%3A0%3Ans%3A1674110247630%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674110250%3At%3ALinda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 1 B URL HTTP/2 mc.yandex.ru/watch/23578756?wmode=7&page-url=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqnly895ce05obhzcv6r%3Afp%3A1334%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A2%3Adp%3A0%3Als%3A822134401023%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063729%3Aet%3A1674110250%3Ac%3A1%3Arn%3A912081741%3Arqn%3A1%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C71%2C0%2C525%2C0%2C%2C712%2C3%2C%2C%2C%2C1348%3Aco%3A0%3Ans%3A1674110247630%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674110250%3At%3ALinda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
GET /watch/23578756?wmode=7&page-url=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqnly895ce05obhzcv6r%3Afp%3A1334%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A2%3Adp%3A0%3Als%3A822134401023%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063729%3Aet%3A1674110250%3Ac%3A1%3Arn%3A912081741%3Arqn%3A1%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C71%2C0%2C525%2C0%2C%2C712%2C3%2C%2C%2C%2C1348%3Aco%3A0%3Ans%3A1674110247630%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674110250%3At%3ALinda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hclips.com
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/23578756/1?wmode=7&page-url=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqnly895ce05obhzcv6r%3Afp%3A1334%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A2%3Adp%3A0%3Als%3A822134401023%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063729%3Aet%3A1674110250%3Ac%3A1%3Arn%3A912081741%3Arqn%3A1%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C71%2C0%2C525%2C0%2C%2C712%2C3%2C%2C%2C%2C1348%3Aco%3A0%3Ans%3A1674110247630%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674110250%3At%3ALinda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Thu, 19 Jan 2023 06:37:29 GMT
access-control-allow-origin: https://hclips.com
set-cookie: yabs-sid=2137551951674110249; Path=/; SameSite=None; Secure
i=sbSA/N43cqICuvxEGaITG/YUtlHXvsIOV1O5tYAytvv90KJiZA0IEYqdkVSykpUwDw+8pvdp44xw2fTNlGov73Rn6Kc=; Expires=Sun, 16-Jan-2033 06:37:28 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=8348555691674110249; Expires=Fri, 19-Jan-2024 06:37:29 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=8348555691674110249; Expires=Fri, 19-Jan-2024 06:37:29 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1705646249.yc.1674110249#1705646249.yrts.1674110249#1705646249.yrtsi.1674110249; Expires=Fri, 19-Jan-2024 06:37:29 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 19-Jan-2023 06:37:29 GMT
last-modified: Thu, 19-Jan-2023 06:37:29 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-31745569-16&cid=747976946.1674110249&jid=380668164&gjid=242490826&_gid=2011097561.1674110249&_u=aGBAAAAiAAAAAC~&z=2055592522
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-31745569-16&cid=747976946.1674110249&jid=380668164&gjid=242490826&_gid=2011097561.1674110249&_u=aGBAAAAiAAAAAC~&z=2055592522
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-31745569-16&cid=747976946.1674110249&jid=380668164&gjid=242490826&_gid=2011097561.1674110249&_u=aGBAAAAiAAAAAC~&z=2055592522 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://hclips.com
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://hclips.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 19 Jan 2023 06:37:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-51278971-2&cid=747976946.1674110249&jid=1322537173&gjid=1528916883&_gid=2011097561.1674110249&_u=aGDAAAAjAAAAAC~&z=906657937
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-51278971-2&cid=747976946.1674110249&jid=1322537173&gjid=1528916883&_gid=2011097561.1674110249&_u=aGDAAAAjAAAAAC~&z=906657937
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-51278971-2&cid=747976946.1674110249&jid=1322537173&gjid=1528916883&_gid=2011097561.1674110249&_u=aGDAAAAjAAAAAC~&z=906657937 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://hclips.com
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://hclips.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 19 Jan 2023 06:37:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/query-stripping/changeset?_expected=1667238122278&_since=%221656585893704%22
200 OK 1.7 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/query-stripping/changeset?_expected=1667238122278&_since=%221656585893704%22
IP
File type JSON data\012- , ASCII text, with very long lines (1718), with no line terminators
Hash 3292ba62caa5fec67ea0d90d1e97e8da
b61394006887664253e50ea6f021c6254ae16b9b
a3dfe94751c3f663fd11c09cc52e9d61ee8713906a7d657305b40b33078fe30e
GET /v1/buckets/main/collections/query-stripping/changeset?_expected=1667238122278&_since=%221656585893704%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1718
via: 1.1 google
date: Thu, 19 Jan 2023 06:04:31 GMT
age: 1979
last-modified: Mon, 16 Jan 2023 16:36:45 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash efac8d32469e6807b1b1f2916a47edf1
68d91e7af565f1cf6597bcdd642a78dbada50a8d
22639289563bb576a7c20b9c733bdd7f98c41519fdddeef0d710f0d058c5bf88
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 06:37:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 33 kB IP
ASN #20940 Akamai International B.V.
Hash c9e6332663e1df02b07df0b71ff03a68
85a5fbbbba0619c15b1fa3e8edde077f0e86837a
340eaa6f8415141f380deda1c080123cf9cee2898de32e8e6f0ec4809e8d2263
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8779F688AE96AE9D469BD3FF343DF8F2D785E14A179B89EB8A75BB64F895BE61"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3357
Expires: Thu, 19 Jan 2023 07:33:27 GMT
Date: Thu, 19 Jan 2023 06:37:30 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22
200 OK 1.3 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22
IP
File type JSON data\012- , ASCII text, with very long lines (1251), with no line terminators
Hash a15652d2ad5a61b333b603a147df4087
f737222311cbc30f90aeacadea9f48e460710e74
c49c6ab42f400eab679ca2a696f76e8083c9ac8fa81f45716ec027a12d29fab9
GET /v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1251
via: 1.1 google
date: Thu, 19 Jan 2023 06:24:45 GMT
age: 765
last-modified: Mon, 16 Jan 2023 16:36:42 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4d062e08833d1eb4e62457a89a9afc7b
ef5f346a2a981981882f588bf7ed6c8303966ffd
baedf310a936837db2b54793543cf49f89253184a758131cd70b42c819db5967
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BAEDF310A936837DB2B54793543CF49F89253184A758131CD70B42C819DB5967"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20321
Expires: Thu, 19 Jan 2023 12:16:11 GMT
Date: Thu, 19 Jan 2023 06:37:30 GMT
Connection: keep-alive
fp.metricswpsh.com/fp?tag_id=821
204 No Content 0 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=821
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=821 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://hclips.com/
Origin: https://hclips.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Thu, 19 Jan 2023 06:37:30 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://hclips.com
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
vast.yomeno.xyz/vast
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /vast HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://hclips.com/
Origin: https://hclips.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.20.1
date: Thu, 19 Jan 2023 06:37:30 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://hclips.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
content-type: text/plain; charset=utf-8
content-length: 0
X-Firefox-Spdy: h2
vast.yomeno.xyz/prepare
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://hclips.com/
Origin: https://hclips.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.20.1
date: Thu, 19 Jan 2023 06:37:30 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://hclips.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
content-type: text/plain; charset=utf-8
content-length: 0
X-Firefox-Spdy: h2
54c56b7936.e374d4ca27.com/in/track?data=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
200 OK 0 B URL HTTP/2 54c56b7936.e374d4ca27.com/in/track?data=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
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/track?data=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 HTTP/1.1
Host: 54c56b7936.e374d4ca27.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hclips.com
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:30 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
detectportal.firefox.com/success.txt?ipv4
200 OK 8 B URL HTTP/1.1 detectportal.firefox.com/success.txt?ipv4
IP
Hash ae780585f49b94ce1444eb7d28906123
7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86
81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5
GET /success.txt?ipv4 HTTP/1.1
Host: detectportal.firefox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Length: 8
Via: 1.1 google
Date: Wed, 18 Jan 2023 17:37:49 GMT
Age: 46781
Content-Type: text/plain
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600
vast.yomeno.xyz/prepare
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 912
Origin: https://hclips.com
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.20.1
date: Thu, 19 Jan 2023 06:37:30 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://hclips.com
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=821
200 OK 28 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=821
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text
Hash e3af49472d683a217237a6ebaf79bcb7
378db4d7e6171a2676ee15c80b4475d7f5ec9742
7714898d715fb8b1ce7a1de73e0e7c9f6394acc8a08cf1a3b342a7829d4de84a
POST /fp?tag_id=821 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 22286
Origin: https://hclips.com
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Thu, 19 Jan 2023 06:37:30 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 28
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://hclips.com
Set-Cookie: id=2372067510333745392; Expires=Fri, 19 Jan 2024 06:37:30 GMT; Secure; SameSite=None
Vary: Origin
firefox.settings.services.mozilla.com/v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258
200 OK 682 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258
IP
File type JSON data\012- , ASCII text, with very long lines (682), with no line terminators
Hash 668f51f448163fe951f3449c028bfd40
8d624c9419b30c8be7f62724ccd6095f7c4794ef
f3feec2c60186018c18cfcd262d851e35223e8285139c96a89335bb473972395
GET /v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 682
via: 1.1 google
date: Thu, 19 Jan 2023 06:24:23 GMT
age: 787
last-modified: Fri, 13 Jan 2023 16:36:53 GMT
etag: "1673627813356"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c59874d5ada636ad88a2c338d746cd02
3a0244e9538d2461a49ca41561b46c79f632824f
623062fd7a5109b1e042e4bf7035e774879d94bea9da4ecd164638a0dc3e765c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "623062FD7A5109B1E042E4BF7035E774879D94BEA9DA4ECD164638A0DC3E765C"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5415
Expires: Thu, 19 Jan 2023 08:07:45 GMT
Date: Thu, 19 Jan 2023 06:37:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash acd864c695f165d85e18c37ee1fe60d4
48a13bbac76b478d7cb37300bc932b7e58cbb0e1
f33416b3ab1880f47faf17d7c4b4b6a67a7d90a4c290b5b6ae6bde9030597087
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F33416B3AB1880F47FAF17D7C4B4B6A67A7D90A4C290B5B6AE6BDE9030597087"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2238
Expires: Thu, 19 Jan 2023 07:14:48 GMT
Date: Thu, 19 Jan 2023 06:37:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash df865beece538f11ef0dc4a1343e4963
45f0f617e787356b7dc66faa6efb7b80e5cf7544
db20a6b9452db497606eab526c228cbff0468d81b4fea50a8f15cf36d8d2d123
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DB20A6B9452DB497606EAB526C228CBFF0468D81B4FEA50A8F15CF36D8D2D123"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14334
Expires: Thu, 19 Jan 2023 10:36:24 GMT
Date: Thu, 19 Jan 2023 06:37:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash df865beece538f11ef0dc4a1343e4963
45f0f617e787356b7dc66faa6efb7b80e5cf7544
db20a6b9452db497606eab526c228cbff0468d81b4fea50a8f15cf36d8d2d123
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DB20A6B9452DB497606EAB526C228CBFF0468D81B4FEA50A8F15CF36D8D2D123"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14334
Expires: Thu, 19 Jan 2023 10:36:24 GMT
Date: Thu, 19 Jan 2023 06:37:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash df865beece538f11ef0dc4a1343e4963
45f0f617e787356b7dc66faa6efb7b80e5cf7544
db20a6b9452db497606eab526c228cbff0468d81b4fea50a8f15cf36d8d2d123
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DB20A6B9452DB497606EAB526C228CBFF0468D81B4FEA50A8F15CF36D8D2D123"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14334
Expires: Thu, 19 Jan 2023 10:36:24 GMT
Date: Thu, 19 Jan 2023 06:37:30 GMT
Connection: keep-alive
js.wpshsdk.com/npc/sdk/wp-banners.js
200 OK 0 B URL HTTP/2 js.wpshsdk.com/npc/sdk/wp-banners.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npc/sdk/wp-banners.js HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 20 Aug 2021 15:14:31 GMT
etag: "611fc6d7-0"
expires: Thu, 19 Jan 2023 06:42:30 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22
200 OK 934 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22
IP
File type JSON data\012- , ASCII text, with very long lines (934), with no line terminators
Hash 20b9199d0871aa8d1f02e09fc0de6a48
874015ed48e4ccc4d1d3dc4a979d50eaeb059d8c
07214176412ea5e83b5be84ca1d401061fac8b20275e2ee7da3189de2fdba7ed
GET /v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 934
via: 1.1 google
date: Thu, 19 Jan 2023 05:57:48 GMT
age: 2382
last-modified: Fri, 13 Jan 2023 16:36:44 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 89055b1f42119cc1e7a33ce2fc364e76
20550fd56bf49a8aa30e18a923be22cda3f2ba7b
7698e9bb59f46011dbd3b6b74fc5784ac60d64c9d8403e8fe3aa18a60c17393d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7698E9BB59F46011DBD3B6B74FC5784AC60D64C9D8403E8FE3AA18A60C17393D"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3294
Expires: Thu, 19 Jan 2023 07:32:24 GMT
Date: Thu, 19 Jan 2023 06:37:30 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1673517253376&_since=%221657747510534%22
200 OK 2.1 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1673517253376&_since=%221657747510534%22
IP
File type JSON data\012- , ASCII text, with very long lines (2053), with no line terminators
Hash c9dfad8fb4f66de06991e6a07810fd81
f52da6b70dcdbc23965b701d5814910db2b352f4
809ef846c4956a8fce795fe871cb2d6c5ab2746c1fc3c76c4cd182e4cbf3aded
GET /v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1673517253376&_since=%221657747510534%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 2053
via: 1.1 google
date: Thu, 19 Jan 2023 06:31:44 GMT
age: 346
last-modified: Thu, 12 Jan 2023 09:54:13 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 89055b1f42119cc1e7a33ce2fc364e76
20550fd56bf49a8aa30e18a923be22cda3f2ba7b
7698e9bb59f46011dbd3b6b74fc5784ac60d64c9d8403e8fe3aa18a60c17393d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7698E9BB59F46011DBD3B6B74FC5784AC60D64C9D8403E8FE3AA18A60C17393D"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3294
Expires: Thu, 19 Jan 2023 07:32:24 GMT
Date: Thu, 19 Jan 2023 06:37:30 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f0e28e6-b0e8-4d6a-86c1-1fc0c9c5513e.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f0e28e6-b0e8-4d6a-86c1-1fc0c9c5513e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7f69a0610e549f99b84e2ac1355ec1d6
c957e6d925e932c8f4939b5b723bccb532b5bf44
0304ec77a98bcd152446d03f4d630304bb6362d3ff99c58c883ebeb3f1448130
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f0e28e6-b0e8-4d6a-86c1-1fc0c9c5513e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8665
x-amzn-requestid: d4ef9b00-3cff-4ca0-be67-39074ca71996
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ewYQuE1NIAMFymQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c33a6a-57f41f0a286ffffd2ca5ee8b;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 23:27:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ESbnZ69JgaSSqmynXtDLCCkPi9I3KeFPISrQUr1WMJWQBIyxhTHW5w==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 17:37:08 GMT
age: 46822
etag: "c957e6d925e932c8f4939b5b723bccb532b5bf44"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57ef64b6-6b9b-4860-a201-58a01048084b.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57ef64b6-6b9b-4860-a201-58a01048084b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 511bbd0c410838e4a978d471d361d876
706be1b2636ad65bf5fe78ef7301af472c015275
e124c1ba6059fb613d0ab8f7ad37f4524323e7bbde851f78e9e5727c7d20f19f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57ef64b6-6b9b-4860-a201-58a01048084b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9916
x-amzn-requestid: 42bb326d-889c-4b91-b989-47c1fd650afa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e96pVF61oAMF76g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c8a4a1-2f33e6be45e298a7120d1119;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 02:02:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 68BfqCCeDzqQURstD87lSuWaXjwrqVQnXX8ws6EeFfQtbu_ad9JEgw==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 19 Jan 2023 02:14:04 GMT
age: 15806
etag: "706be1b2636ad65bf5fe78ef7301af472c015275"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa13fdc43-f169-4fe6-a14b-6ed62c4d08cc.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa13fdc43-f169-4fe6-a14b-6ed62c4d08cc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7817aa566a3271f82153811b756bb90f
6be8688f3b8d2f053afed5c09d00e71ad9210258
1ec4a11d1598683001714eb1a130c5ba96c37aef0e43623a17780f848543b1c9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa13fdc43-f169-4fe6-a14b-6ed62c4d08cc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7864
x-amzn-requestid: 932e4550-d62d-448d-b60d-d3c62944c86c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3fnEEVOIAMFZcA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c612f9-0977cfca7fe22f83168e5d9e;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 03:16:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WSyQEwTUUN83EL9C9y9VPDzKnNjBXSmvcO5SfTuvIKPCDurKTM-oEg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 19 Jan 2023 03:43:12 GMT
age: 10458
etag: "6be8688f3b8d2f053afed5c09d00e71ad9210258"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 3e5567ab0fdc719905fd747941832281
adf117499d792e9957398972a371128b4fe35fd8
a2f012e6b13b05155679a7c17a2314bfdfb5da865fc04a6a5db2b440f4b627d0
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "A2F012E6B13B05155679A7C17A2314BFDFB5DA865FC04A6A5DB2B440F4B627D0"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2626
Expires: Thu, 19 Jan 2023 07:21:16 GMT
Date: Thu, 19 Jan 2023 06:37:30 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F94ef2ebf-b368-4c49-877b-a14ed2f748c4.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F94ef2ebf-b368-4c49-877b-a14ed2f748c4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e0a101619de7c42082cb54416bf0cba0
a759ba4a1a95674e9b8c7146ba748826d22bc60f
7b75ffde64861431963ec226259f03d3848aada46f611962d10dff8a4aa88bd4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F94ef2ebf-b368-4c49-877b-a14ed2f748c4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4017
x-amzn-requestid: 3f89e17a-7a8d-460b-9bea-ee8c23b88379
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3nBpFr9oAMFbbA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c61ed7-21c5578f084a3f36640ac14e;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 04:06:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QZKDFQMsEJJbTgg9f3qDQLIy3VXn9gLaX9OX4aalwKqbvqektWwZQA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 17:34:10 GMT
age: 47000
etag: "a759ba4a1a95674e9b8c7146ba748826d22bc60f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 3e5567ab0fdc719905fd747941832281
adf117499d792e9957398972a371128b4fe35fd8
a2f012e6b13b05155679a7c17a2314bfdfb5da865fc04a6a5db2b440f4b627d0
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "A2F012E6B13B05155679A7C17A2314BFDFB5DA865FC04A6A5DB2B440F4B627D0"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2626
Expires: Thu, 19 Jan 2023 07:21:16 GMT
Date: Thu, 19 Jan 2023 06:37:30 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28666e20-8b0b-428c-af81-822361800b23.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28666e20-8b0b-428c-af81-822361800b23.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ee23b50996d59e5b3d4d99af0d0bc05f
76fbdbd85092cb841ca269206de46cc1b6e0f215
20e83f1e7f48eaee8f946958d4bd94d0c876dd2fdab85f3c4dfe088d7726e0eb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28666e20-8b0b-428c-af81-822361800b23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6902
x-amzn-requestid: eac4818f-27cf-4e74-967f-ba9b761e236f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0uNuF0QIAMFUEg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4f724-3a8ae0ba482b10f04c90c3b5;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 07:05:08 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AKGI_lQSNDKkYkcLfgIsQOt8ghMJbouQt26TehAyOBDEkg0ZU-L_Tw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 07:32:30 GMT
age: 83100
etag: "76fbdbd85092cb841ca269206de46cc1b6e0f215"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dec1a38500944a37edf52ba2111ceb83
a83c4f9020b7d43e92419f93c98301524ab65ceb
a97256652927bb1ace49c9bd7505138523c75d49712856a085edee6354f382d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A97256652927BB1ACE49C9BD7505138523C75D49712856A085EDEE6354F382D1"
Last-Modified: Tue, 17 Jan 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13786
Expires: Thu, 19 Jan 2023 10:27:16 GMT
Date: Thu, 19 Jan 2023 06:37:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 89055b1f42119cc1e7a33ce2fc364e76
20550fd56bf49a8aa30e18a923be22cda3f2ba7b
7698e9bb59f46011dbd3b6b74fc5784ac60d64c9d8403e8fe3aa18a60c17393d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7698E9BB59F46011DBD3B6B74FC5784AC60D64C9D8403E8FE3AA18A60C17393D"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3294
Expires: Thu, 19 Jan 2023 07:32:24 GMT
Date: Thu, 19 Jan 2023 06:37:30 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe34f344d-12b3-4719-9ecf-6191897f233e.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe34f344d-12b3-4719-9ecf-6191897f233e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b015242ebdda9cc22cfe6741d2e926f1
76072223007cd11c6f7b9fda8f01818ab0fea740
b7a72c737cac91c83c39718de999bc6ff0ec4ede63342e86407190d95e60d9a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe34f344d-12b3-4719-9ecf-6191897f233e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6908
x-amzn-requestid: 5f0a0b3b-1d4c-450e-bcd5-481bda79f4e1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eq1qQHwYIAMF-IQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1030e-62d053e35c8ab2374fd2fe35;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 07:06:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1eiEXaC2jHawVVHg6KAlFvdV7ZMpXdCaN8o36sbYL9WwPvXejGobKA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 17:36:56 GMT
age: 46834
etag: "76072223007cd11c6f7b9fda8f01818ab0fea740"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22
200 OK 1.5 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22
IP
File type JSON data\012- , ASCII text, with very long lines (1506), with no line terminators
Hash 04e8681bd37cd9936118efcc4f31393e
c4fc04440eaabf9fd6cbb8fa329e3613c20f4af9
c30333d7ffeb2568b19b0574dfe60261a7fe5920b8cf8f3309928638dad4007c
GET /v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1506
via: 1.1 google
date: Thu, 19 Jan 2023 05:37:32 GMT
age: 3598
last-modified: Wed, 11 Jan 2023 16:36:47 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
nereserv.com/in/dip?site=native-push&wl=1&event_id=6ece6b62-5d8f-459f-a824-cee189834b3c&subid=1036627156&sid=3477700942&spot_id=438&created_at=2023-01-19&timezone=0&ver=8.20.0&is_native=1
200 OK 0 B URL HTTP/2 nereserv.com/in/dip?site=native-push&wl=1&event_id=6ece6b62-5d8f-459f-a824-cee189834b3c&subid=1036627156&sid=3477700942&spot_id=438&created_at=2023-01-19&timezone=0&ver=8.20.0&is_native=1
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?site=native-push&wl=1&event_id=6ece6b62-5d8f-459f-a824-cee189834b3c&subid=1036627156&sid=3477700942&spot_id=438&created_at=2023-01-19&timezone=0&ver=8.20.0&is_native=1 HTTP/1.1
Host: nereserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hclips.com
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:30 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
cdntocdn.com/dli/webcamera.svg?fill=rgb(128%2C%20128%2C%20128)
200 OK 16 kB URL HTTP/2 cdntocdn.com/dli/webcamera.svg?fill=rgb(128%2C%20128%2C%20128)
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (937), with CRLF line terminators
Hash 548127e06901ffb158967eb1261ba8b1
549e36c146961706f0499ea241b5d89691ebabfc
ab1818e8e86e6f6270af3bc9b52a291e2d44776d2f1d0588adbc77d6091fdb0c
GET /dli/webcamera.svg?fill=rgb(128%2C%20128%2C%20128) HTTP/1.1
Host: cdntocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: image/svg+xml
last-modified: Tue, 16 Jun 2020 16:25:10 GMT
etag: W/"5ee8f266-545"
pragma: no-cache, no-cache
x-proxy-cache: HIT, HIT
cache-control: no-cache, no-store, must-revalidate
expires: 0
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oqu1VpqXnfs5GIA5lrYFVO%2FISdIAPgkmlKMHITSrBFjFLH0K08N1i0CmJdMPTCDLtn9ZuN7Dx94Q0SMG7qs2w5cZ485pJ%2FQiEYfGg%2BXn%2F58wGKPkWy0bfF721oNVk1k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bd8feb4fef744b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 3e5567ab0fdc719905fd747941832281
adf117499d792e9957398972a371128b4fe35fd8
a2f012e6b13b05155679a7c17a2314bfdfb5da865fc04a6a5db2b440f4b627d0
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "A2F012E6B13B05155679A7C17A2314BFDFB5DA865FC04A6A5DB2B440F4B627D0"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2626
Expires: Thu, 19 Jan 2023 07:21:16 GMT
Date: Thu, 19 Jan 2023 06:37:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8c4f29f8dcbeab4550c2cef020f8611c
ace0857ce3d6c5e5e00d626f26f20ff3b0eade1d
7b15cc4da532998247be91445672d4a1d8dcb4d17f08272d91303345e7043691
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7B15CC4DA532998247BE91445672D4A1D8DCB4D17F08272D91303345E7043691"
Last-Modified: Wed, 18 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6869
Expires: Thu, 19 Jan 2023 08:31:59 GMT
Date: Thu, 19 Jan 2023 06:37:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 468968d1f788697da67284872300b2ca
42b99fcab1a1735594a46c5d2800b2b5d0b6361e
3637565c56bbe053ecd14fde92be8e0ffb85c77519c76bd5015896e24cbe0c96
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3637565C56BBE053ECD14FDE92BE8E0FFB85C77519C76BD5015896E24CBE0C96"
Last-Modified: Wed, 18 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16588
Expires: Thu, 19 Jan 2023 11:13:58 GMT
Date: Thu, 19 Jan 2023 06:37:30 GMT
Connection: keep-alive
mc.yandex.ru/watch/23578756/1?page-url=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&hittoken=1674110250_1f4dc3052e4802a4a8a8d6a5d5d5f5ac729f579711a29e2cdbdc3a9f3576768d&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3kqnly895ce05obhzcv6r%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A2%3Adp%3A0%3Als%3A822134401023%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063729%3Aet%3A1674110250%3Ac%3A1%3Arn%3A441778285%3Arqn%3A2%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1970%2C1970%2C0%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1674110247630%3Ast%3A1674110250&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(0)&force-urlencoded=1&site-info=%7B%22source%22%3Anull%7D
200 OK 109 B URL HTTP/2 mc.yandex.ru/watch/23578756/1?page-url=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&hittoken=1674110250_1f4dc3052e4802a4a8a8d6a5d5d5f5ac729f579711a29e2cdbdc3a9f3576768d&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3kqnly895ce05obhzcv6r%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A2%3Adp%3A0%3Als%3A822134401023%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063729%3Aet%3A1674110250%3Ac%3A1%3Arn%3A441778285%3Arqn%3A2%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1970%2C1970%2C0%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1674110247630%3Ast%3A1674110250&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(0)&force-urlencoded=1&site-info=%7B%22source%22%3Anull%7D
IP
Hash e3c85b504f341e755705c4bcb8695562
0180a4fcbaf7824cc368a4f90c1572114b5a5b12
32f57639d1c3945f4b454c22d22db91bc2b3b2c4274576bd3fbfc69f4dfd9414
POST /watch/23578756/1?page-url=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&hittoken=1674110250_1f4dc3052e4802a4a8a8d6a5d5d5f5ac729f579711a29e2cdbdc3a9f3576768d&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3kqnly895ce05obhzcv6r%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A2%3Adp%3A0%3Als%3A822134401023%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063729%3Aet%3A1674110250%3Ac%3A1%3Arn%3A441778285%3Arqn%3A2%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1970%2C1970%2C0%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1674110247630%3Ast%3A1674110250&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(0)&force-urlencoded=1&site-info=%7B%22source%22%3Anull%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hclips.com
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 19 Jan 2023 06:37:30 GMT
access-control-allow-origin: https://hclips.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 19-Jan-2023 06:37:30 GMT
last-modified: Thu, 19-Jan-2023 06:37:30 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
9757fdc45b.92b501c719.com/in/multy
204 No Content 0 B URL HTTP/2 9757fdc45b.92b501c719.com/in/multy
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /in/multy HTTP/1.1
Host: 9757fdc45b.92b501c719.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://hclips.com/
Origin: https://hclips.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.20.1
date: Thu, 19 Jan 2023 06:37:30 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
sw.wpu.sh/npc/sdk/common/service-worker.js
200 OK 1.8 kB URL HTTP/2 sw.wpu.sh/npc/sdk/common/service-worker.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (5516), with no line terminators
Hash b84c3df63522b5774e068693cff05b61
87c6d8ca6ee6d308faa8b5aa22793774660e7f29
67018bf78daadb61952675af92eb06ecc2c8728e27d992f5b0082b5ca1c5b52b
GET /npc/sdk/common/service-worker.js HTTP/1.1
Host: sw.wpu.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 11 Jan 2023 09:42:43 GMT
etag: W/"63be8493-158c"
content-encoding: gzip
expires: Thu, 19 Jan 2023 06:42:30 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=8497776760967817011&pid=0&site=28725&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.01445&ecpm=0.010925645&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-10&site_id=0&spot_id=28725&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.0031331834413437375&placement_type_id=10&skin_test=&verify_hash=&score=99.94693208664391&ml=&tag_ab=&ttl=&space_id=28725&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImDEiCHmRgwaYVrIiDEjRgsaNGTQaAHxxkozOWyMGZMjhgwYN2zcEOFwjpg0ZBTq2JJRRBeHY9wIlTFDhsMwdcZgxEEjx42rOm3AiHkDR4wbGmPwFPGTDMY0dMq0-SL2KRk7C2XY8ErDIZw6YhbWmFHD6UM4cBZeldFQxBw4EnXQ-EoDR44ZDsvgofPlcOKHZPS8cVPmiwwcN2TUGDumTWAdM2bkgGHDhlszEx2KceMm7gwbNVbXFdHGzUXFNGDg8Aun9--vMFg7rCNWx0A6dODM0fHixRg0YejUkSMmexkXY960eZHGzYsfdORAXNODzpwWdEzeKSNmTJg2LezT4VInuVw6b2zXgw1vwCAGf_7JdB8cYaRxhhs91BDEEjEhCINcZKQxRxhisNHZHAG6QUYPMVgoVxtv_OShFGVkKEcZEfUAFYAm2qCWGC1-YQdQZbzxxWZs5EHiWGSIhxEaY7CRhnTgGYlUdgttMdJRIsAhh1Q6xODCDWW0AEMNssGmAwwuaIRUcV9YiSWZGqEEpghy2HFaDG_CWNxCbH61XB1pYJRDGVXRcIMZfN1Qw0e4LRaDGWTEEAYNZtQwBl84jNHVWEv6qeVqLqTkAp00jFVHGBg18YYeabDBRhgv1FAmCChcUV6Rd8wBghNUgBADmzuAIKsbNtDQKx7B9hpnll-WmQIIR8C4xhsv3LSrRhqBYEQaL5rxBh4v7OoqDKRhKYITT4z1hhxfzIQRuWOxIW4RThBZhh1fvMjGRDVchcNtOCTnkBwPxlUDaA4dRK8YciyEAw4Fz_sFimbp8JkNFIlAhhxvLASZCG8ItZuV2-ax0G5k5FGbDunVUca_ZYj5XHTTVYekkkyGN96OB3X8Qlcx5JBvDi8oKWJIc3hYBhx5tGBGGWXQ8cJYc8SJEcZ0ZHduC3W4gVYLNszgAhmWEinuQV-AvVNFbUykk6IX1gAD2jKo7dJGbbPWlVv1lnHYF1BmuTbdor0tgsNheCiHe1HyRSWHlx1kBlRsSGSXu3gi9RsMfSgQEA%253D%253D%26s%3Dd4b058c81a6b75d0d4b8ff3f975e50952b770c4e03f8c72be7a467b028856abe1674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756
302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=8497776760967817011&pid=0&site=28725&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.01445&ecpm=0.010925645&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-10&site_id=0&spot_id=28725&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.0031331834413437375&placement_type_id=10&skin_test=&verify_hash=&score=99.94693208664391&ml=&tag_ab=&ttl=&space_id=28725&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImDEiCHmRgwaYVrIiDEjRgsaNGTQaAHxxkozOWyMGZMjhgwYN2zcEOFwjpg0ZBTq2JJRRBeHY9wIlTFDhsMwdcZgxEEjx42rOm3AiHkDR4wbGmPwFPGTDMY0dMq0-SL2KRk7C2XY8ErDIZw6YhbWmFHD6UM4cBZeldFQxBw4EnXQ-EoDR44ZDsvgofPlcOKHZPS8cVPmiwwcN2TUGDumTWAdM2bkgGHDhlszEx2KceMm7gwbNVbXFdHGzUXFNGDg8Aun9--vMFg7rCNWx0A6dODM0fHixRg0YejUkSMmexkXY960eZHGzYsfdORAXNODzpwWdEzeKSNmTJg2LezT4VInuVw6b2zXgw1vwCAGf_7JdB8cYaRxhhs91BDEEjEhCINcZKQxRxhisNHZHAG6QUYPMVgoVxtv_OShFGVkKEcZEfUAFYAm2qCWGC1-YQdQZbzxxWZs5EHiWGSIhxEaY7CRhnTgGYlUdgttMdJRIsAhh1Q6xODCDWW0AEMNssGmAwwuaIRUcV9YiSWZGqEEpghy2HFaDG_CWNxCbH61XB1pYJRDGVXRcIMZfN1Qw0e4LRaDGWTEEAYNZtQwBl84jNHVWEv6qeVqLqTkAp00jFVHGBg18YYeabDBRhgv1FAmCChcUV6Rd8wBghNUgBADmzuAIKsbNtDQKx7B9hpnll-WmQIIR8C4xhsv3LSrRhqBYEQaL5rxBh4v7OoqDKRhKYITT4z1hhxfzIQRuWOxIW4RThBZhh1fvMjGRDVchcNtOCTnkBwPxlUDaA4dRK8YciyEAw4Fz_sFimbp8JkNFIlAhhxvLASZCG8ItZuV2-ax0G5k5FGbDunVUca_ZYj5XHTTVYekkkyGN96OB3X8Qlcx5JBvDi8oKWJIc3hYBhx5tGBGGWXQ8cJYc8SJEcZ0ZHduC3W4gVYLNszgAhmWEinuQV-AvVNFbUykk6IX1gAD2jKo7dJGbbPWlVv1lnHYF1BmuTbdor0tgsNheCiHe1HyRSWHlx1kBlRsSGSXu3gi9RsMfSgQEA%253D%253D%26s%3Dd4b058c81a6b75d0d4b8ff3f975e50952b770c4e03f8c72be7a467b028856abe1674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=8497776760967817011&pid=0&site=28725&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.01445&ecpm=0.010925645&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-10&site_id=0&spot_id=28725&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.0031331834413437375&placement_type_id=10&skin_test=&verify_hash=&score=99.94693208664391&ml=&tag_ab=&ttl=&space_id=28725&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImDEiCHmRgwaYVrIiDEjRgsaNGTQaAHxxkozOWyMGZMjhgwYN2zcEOFwjpg0ZBTq2JJRRBeHY9wIlTFDhsMwdcZgxEEjx42rOm3AiHkDR4wbGmPwFPGTDMY0dMq0-SL2KRk7C2XY8ErDIZw6YhbWmFHD6UM4cBZeldFQxBw4EnXQ-EoDR44ZDsvgofPlcOKHZPS8cVPmiwwcN2TUGDumTWAdM2bkgGHDhlszEx2KceMm7gwbNVbXFdHGzUXFNGDg8Aun9--vMFg7rCNWx0A6dODM0fHixRg0YejUkSMmexkXY960eZHGzYsfdORAXNODzpwWdEzeKSNmTJg2LezT4VInuVw6b2zXgw1vwCAGf_7JdB8cYaRxhhs91BDEEjEhCINcZKQxRxhisNHZHAG6QUYPMVgoVxtv_OShFGVkKEcZEfUAFYAm2qCWGC1-YQdQZbzxxWZs5EHiWGSIhxEaY7CRhnTgGYlUdgttMdJRIsAhh1Q6xODCDWW0AEMNssGmAwwuaIRUcV9YiSWZGqEEpghy2HFaDG_CWNxCbH61XB1pYJRDGVXRcIMZfN1Qw0e4LRaDGWTEEAYNZtQwBl84jNHVWEv6qeVqLqTkAp00jFVHGBg18YYeabDBRhgv1FAmCChcUV6Rd8wBghNUgBADmzuAIKsbNtDQKx7B9hpnll-WmQIIR8C4xhsv3LSrRhqBYEQaL5rxBh4v7OoqDKRhKYITT4z1hhxfzIQRuWOxIW4RThBZhh1fvMjGRDVchcNtOCTnkBwPxlUDaA4dRK8YciyEAw4Fz_sFimbp8JkNFIlAhhxvLASZCG8ItZuV2-ax0G5k5FGbDunVUca_ZYj5XHTTVYekkkyGN96OB3X8Qlcx5JBvDi8oKWJIc3hYBhx5tGBGGWXQ8cJYc8SJEcZ0ZHduC3W4gVYLNszgAhmWEinuQV-AvVNFbUykk6IX1gAD2jKo7dJGbbPWlVv1lnHYF1BmuTbdor0tgsNheCiHe1HyRSWHlx1kBlRsSGSXu3gi9RsMfSgQEA%253D%253D%26s%3Dd4b058c81a6b75d0d4b8ff3f975e50952b770c4e03f8c72be7a467b028856abe1674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:30 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: //r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImDEiCHmRgwaYVrIiDEjRgsaNGTQaAHxxkozOWyMGZMjhgwYN2zcEOFwjpg0ZBTq2JJRRBeHY9wIlTFDhsMwdcZgxEEjx42rOm3AiHkDR4wbGmPwFPGTDMY0dMq0-SL2KRk7C2XY8ErDIZw6YhbWmFHD6UM4cBZeldFQxBw4EnXQ-EoDR44ZDsvgofPlcOKHZPS8cVPmiwwcN2TUGDumTWAdM2bkgGHDhlszEx2KceMm7gwbNVbXFdHGzUXFNGDg8Aun9--vMFg7rCNWx0A6dODM0fHixRg0YejUkSMmexkXY960eZHGzYsfdORAXNODzpwWdEzeKSNmTJg2LezT4VInuVw6b2zXgw1vwCAGf_7JdB8cYaRxhhs91BDEEjEhCINcZKQxRxhisNHZHAG6QUYPMVgoVxtv_OShFGVkKEcZEfUAFYAm2qCWGC1-YQdQZbzxxWZs5EHiWGSIhxEaY7CRhnTgGYlUdgttMdJRIsAhh1Q6xODCDWW0AEMNssGmAwwuaIRUcV9YiSWZGqEEpghy2HFaDG_CWNxCbH61XB1pYJRDGVXRcIMZfN1Qw0e4LRaDGWTEEAYNZtQwBl84jNHVWEv6qeVqLqTkAp00jFVHGBg18YYeabDBRhgv1FAmCChcUV6Rd8wBghNUgBADmzuAIKsbNtDQKx7B9hpnll-WmQIIR8C4xhsv3LSrRhqBYEQaL5rxBh4v7OoqDKRhKYITT4z1hhxfzIQRuWOxIW4RThBZhh1fvMjGRDVchcNtOCTnkBwPxlUDaA4dRK8YciyEAw4Fz_sFimbp8JkNFIlAhhxvLASZCG8ItZuV2-ax0G5k5FGbDunVUca_ZYj5XHTTVYekkkyGN96OB3X8Qlcx5JBvDi8oKWJIc3hYBhx5tGBGGWXQ8cJYc8SJEcZ0ZHduC3W4gVYLNszgAhmWEinuQV-AvVNFbUykk6IX1gAD2jKo7dJGbbPWlVv1lnHYF1BmuTbdor0tgsNheCiHe1HyRSWHlx1kBlRsSGSXu3gi9RsMfSgQEA%3D%3D&s=d4b058c81a6b75d0d4b8ff3f975e50952b770c4e03f8c72be7a467b028856abe1674110250
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=1046473781854600640&pid=0&site=28718&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.01445&ecpm=0.010925645&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-4&site_id=0&spot_id=28718&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.0066604946435656655&placement_type_id=5&skin_test=&verify_hash=&score=99.97418464198705&ml=&tag_ab=&ttl=&space_id=28718&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImTcyFFmBhkxZlrUiEFGRgsaMgq2EJMjR5iTMXKQmWEmRpkbMszIEOFwjpg0ZBTq2CIChoguDse4ESpjhgyHYeqMwRgDBg0bNG7MuIEjBo4aV2HAwGrU4U8yGNPQKdPmSwyeD8nYWSjDRlcaDuHUEbOwxowaTx_CgbPwBs6GIubAkaiDRgytOHLgFVEGD50vihnH1fPGTZkvMnDc8Ap3TBvCOmbMyDHWBlQyZiaadeOG7gwbNVhPbuPmYmMaMHAEhsPb92OxrkXUeatjIB06cOboePFiDJowdOrIEYO9jIsxb9q8SOPmxQ86ciCu6UFnTgs6MVrcKSNmTJg2LezT4VJHbF06b2jXgw1vwCAGf_7ZYN9pYaRxhhs91BDEEjnYgCAMdZGRxhxhiMHGZ3ME6AYZPcRwYV1tvPHTh1KUoaEcZUTUQ1QAnmgDW2K4-IUdQJXxxhedsZFHiXCRER5GaIzBRhrRfXdkUtgttIUMMSAlAhxyTKVDDC7cUEYLMNRgVmw6wOACDBSJMAZxX2CppZlo0kCDmCLIYQdqMdAZI3ELwfmYQ3XUkQZGHNEg2Q1m_HXDSFeBFUMMZpARQxg0mFHDGH_hMAZXcDFJKJesuYCSC3nSAFcdYWDUxBt6pMEGG2G8UMOZIKBwBXlG3jEHCE5QAUJVZ-4Awq1uYCUsHsaCYOeWYZ6ZAghHxLjGGy_IgKZYVcUAghFpwGjGG3i8UNWsZamppQhOPAHXG3J8Mca56cLFxrlFOFFkGXZ8ASMbE9VgGA634SCWQ3I8SFcNojl0UL5iyLEQDjgojO8XKaKlQ2g2pEmGHG8sNINDbwg1GZbg5rHQZGTkUZsO6NVRBsFlkOkcdNJRl-SSTYInHo8HhfwCVzH5m8MLS4740hwflgFHHi2YUUYZdLwA1xx2YsQxHdix20IdbqjVglYukLFpkece9IXYN8BFRxsT2XCDY1XJUAMMFbWx05Zuw43h3G5HHJe-ZSj2RZR4v_3o3nRTlm8YH8rRnpR_WdmhZgeZERUbEuU1b59J-QZDHwoEBA%253D%253D%26s%3Db1e06498ce0654df6d2660563e1dc0f9b53f746100a51129662d20fbe19d1e0b1674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756
302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=1046473781854600640&pid=0&site=28718&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.01445&ecpm=0.010925645&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-4&site_id=0&spot_id=28718&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.0066604946435656655&placement_type_id=5&skin_test=&verify_hash=&score=99.97418464198705&ml=&tag_ab=&ttl=&space_id=28718&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImTcyFFmBhkxZlrUiEFGRgsaMgq2EJMjR5iTMXKQmWEmRpkbMszIEOFwjpg0ZBTq2CIChoguDse4ESpjhgyHYeqMwRgDBg0bNG7MuIEjBo4aV2HAwGrU4U8yGNPQKdPmSwyeD8nYWSjDRlcaDuHUEbOwxowaTx_CgbPwBs6GIubAkaiDRgytOHLgFVEGD50vihnH1fPGTZkvMnDc8Ap3TBvCOmbMyDHWBlQyZiaadeOG7gwbNVhPbuPmYmMaMHAEhsPb92OxrkXUeatjIB06cOboePFiDJowdOrIEYO9jIsxb9q8SOPmxQ86ciCu6UFnTgs6MVrcKSNmTJg2LezT4VJHbF06b2jXgw1vwCAGf_7ZYN9pYaRxhhs91BDEEjnYgCAMdZGRxhxhiMHGZ3ME6AYZPcRwYV1tvPHTh1KUoaEcZUTUQ1QAnmgDW2K4-IUdQJXxxhedsZFHiXCRER5GaIzBRhrRfXdkUtgttIUMMSAlAhxyTKVDDC7cUEYLMNRgVmw6wOACDBSJMAZxX2CppZlo0kCDmCLIYQdqMdAZI3ELwfmYQ3XUkQZGHNEg2Q1m_HXDSFeBFUMMZpARQxg0mFHDGH_hMAZXcDFJKJesuYCSC3nSAFcdYWDUxBt6pMEGG2G8UMOZIKBwBXlG3jEHCE5QAUJVZ-4Awq1uYCUsHsaCYOeWYZ6ZAghHxLjGGy_IgKZYVcUAghFpwGjGG3i8UNWsZamppQhOPAHXG3J8Mca56cLFxrlFOFFkGXZ8ASMbE9VgGA634SCWQ3I8SFcNojl0UL5iyLEQDjgojO8XKaKlQ2g2pEmGHG8sNINDbwg1GZbg5rHQZGTkUZsO6NVRBsFlkOkcdNJRl-SSTYInHo8HhfwCVzH5m8MLS4740hwflgFHHi2YUUYZdLwA1xx2YsQxHdix20IdbqjVglYukLFpkece9IXYN8BFRxsT2XCDY1XJUAMMFbWx05Zuw43h3G5HHJe-ZSj2RZR4v_3o3nRTlm8YH8rRnpR_WdmhZgeZERUbEuU1b59J-QZDHwoEBA%253D%253D%26s%3Db1e06498ce0654df6d2660563e1dc0f9b53f746100a51129662d20fbe19d1e0b1674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=1046473781854600640&pid=0&site=28718&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.01445&ecpm=0.010925645&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-4&site_id=0&spot_id=28718&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.0066604946435656655&placement_type_id=5&skin_test=&verify_hash=&score=99.97418464198705&ml=&tag_ab=&ttl=&space_id=28718&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImTcyFFmBhkxZlrUiEFGRgsaMgq2EJMjR5iTMXKQmWEmRpkbMszIEOFwjpg0ZBTq2CIChoguDse4ESpjhgyHYeqMwRgDBg0bNG7MuIEjBo4aV2HAwGrU4U8yGNPQKdPmSwyeD8nYWSjDRlcaDuHUEbOwxowaTx_CgbPwBs6GIubAkaiDRgytOHLgFVEGD50vihnH1fPGTZkvMnDc8Ap3TBvCOmbMyDHWBlQyZiaadeOG7gwbNVhPbuPmYmMaMHAEhsPb92OxrkXUeatjIB06cOboePFiDJowdOrIEYO9jIsxb9q8SOPmxQ86ciCu6UFnTgs6MVrcKSNmTJg2LezT4VJHbF06b2jXgw1vwCAGf_7ZYN9pYaRxhhs91BDEEjnYgCAMdZGRxhxhiMHGZ3ME6AYZPcRwYV1tvPHTh1KUoaEcZUTUQ1QAnmgDW2K4-IUdQJXxxhedsZFHiXCRER5GaIzBRhrRfXdkUtgttIUMMSAlAhxyTKVDDC7cUEYLMNRgVmw6wOACDBSJMAZxX2CppZlo0kCDmCLIYQdqMdAZI3ELwfmYQ3XUkQZGHNEg2Q1m_HXDSFeBFUMMZpARQxg0mFHDGH_hMAZXcDFJKJesuYCSC3nSAFcdYWDUxBt6pMEGG2G8UMOZIKBwBXlG3jEHCE5QAUJVZ-4Awq1uYCUsHsaCYOeWYZ6ZAghHxLjGGy_IgKZYVcUAghFpwGjGG3i8UNWsZamppQhOPAHXG3J8Mca56cLFxrlFOFFkGXZ8ASMbE9VgGA634SCWQ3I8SFcNojl0UL5iyLEQDjgojO8XKaKlQ2g2pEmGHG8sNINDbwg1GZbg5rHQZGTkUZsO6NVRBsFlkOkcdNJRl-SSTYInHo8HhfwCVzH5m8MLS4740hwflgFHHi2YUUYZdLwA1xx2YsQxHdix20IdbqjVglYukLFpkece9IXYN8BFRxsT2XCDY1XJUAMMFbWx05Zuw43h3G5HHJe-ZSj2RZR4v_3o3nRTlm8YH8rRnpR_WdmhZgeZERUbEuU1b59J-QZDHwoEBA%253D%253D%26s%3Db1e06498ce0654df6d2660563e1dc0f9b53f746100a51129662d20fbe19d1e0b1674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:31 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: //r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImTcyFFmBhkxZlrUiEFGRgsaMgq2EJMjR5iTMXKQmWEmRpkbMszIEOFwjpg0ZBTq2CIChoguDse4ESpjhgyHYeqMwRgDBg0bNG7MuIEjBo4aV2HAwGrU4U8yGNPQKdPmSwyeD8nYWSjDRlcaDuHUEbOwxowaTx_CgbPwBs6GIubAkaiDRgytOHLgFVEGD50vihnH1fPGTZkvMnDc8Ap3TBvCOmbMyDHWBlQyZiaadeOG7gwbNVhPbuPmYmMaMHAEhsPb92OxrkXUeatjIB06cOboePFiDJowdOrIEYO9jIsxb9q8SOPmxQ86ciCu6UFnTgs6MVrcKSNmTJg2LezT4VJHbF06b2jXgw1vwCAGf_7ZYN9pYaRxhhs91BDEEjnYgCAMdZGRxhxhiMHGZ3ME6AYZPcRwYV1tvPHTh1KUoaEcZUTUQ1QAnmgDW2K4-IUdQJXxxhedsZFHiXCRER5GaIzBRhrRfXdkUtgttIUMMSAlAhxyTKVDDC7cUEYLMNRgVmw6wOACDBSJMAZxX2CppZlo0kCDmCLIYQdqMdAZI3ELwfmYQ3XUkQZGHNEg2Q1m_HXDSFeBFUMMZpARQxg0mFHDGH_hMAZXcDFJKJesuYCSC3nSAFcdYWDUxBt6pMEGG2G8UMOZIKBwBXlG3jEHCE5QAUJVZ-4Awq1uYCUsHsaCYOeWYZ6ZAghHxLjGGy_IgKZYVcUAghFpwGjGG3i8UNWsZamppQhOPAHXG3J8Mca56cLFxrlFOFFkGXZ8ASMbE9VgGA634SCWQ3I8SFcNojl0UL5iyLEQDjgojO8XKaKlQ2g2pEmGHG8sNINDbwg1GZbg5rHQZGTkUZsO6NVRBsFlkOkcdNJRl-SSTYInHo8HhfwCVzH5m8MLS4740hwflgFHHi2YUUYZdLwA1xx2YsQxHdix20IdbqjVglYukLFpkece9IXYN8BFRxsT2XCDY1XJUAMMFbWx05Zuw43h3G5HHJe-ZSj2RZR4v_3o3nRTlm8YH8rRnpR_WdmhZgeZERUbEuU1b59J-QZDHwoEBA%3D%3D&s=b1e06498ce0654df6d2660563e1dc0f9b53f746100a51129662d20fbe19d1e0b1674110250
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=6483293948335098126&pid=0&site=28713&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.0153&ecpm=0.01156833&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-8&site_id=0&spot_id=28713&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.0032429572807829653&placement_type_id=8&skin_test=&verify_hash=&score=100&ml=&tag_ab=&ttl=&space_id=28713&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIm6YKXODRg4xYlrcqBEjpMcyMlqEoUFmTIsYMcbAEPNxTI0yZnCIcDhHTBoyCnVsEQFDRBeHY9wElTFDhsMwdcZgtEEDR9McM3JUnTGjBowcOGLIsLFThE8yGNPQKdPmS4yyBu0sHBuWhkM4dcQsrNHV6UM4cBbeuCGjoYg5cCTqmGGjBkkaNhyWwUPnC2LFD8noeeOmzBcZOG7EmFF2TJvAi7PCsBE5s5mJDsW4cTOXcY0cMOyKaOPmog4aNGDg8AuHt-8YN2CsdljnrY6BdOjAmaPjxYsxaMLQqSNHjPYyLsa8afMijZsXP-jIgbimB505LejEaHGnjJgxYdq0wE-HSx3lY9HxBnc92PDGTP4BaAN-p4WRxhlu9FBDEEvkYEOCMIxFRhpzhCEGG57NMaAbZPQQA4ZjtfGGTyBKUcaGcpQRUQ9QCYiiDWyJ8eIXdvxUxhtfcMZGHiaWRcZ4GKExBhtpTBcekkhpt9AWMsRwlAhwyCGVDjG4cEMZLcBQQ2yv6QCDCzBQJMIYxX2R5ZZnpsmXQ3LYgVoMMEjGZhsLxYkcc3WkgVEOZXhEg0ZdjRQDZDXQAJMZZMSwkhk1jNEVDmPcoJNDTQ7aJW4u0CCDCzE0WlYdYWDUxBt6pMEGG2G8UAOaIKBwhXlH3jEHCE5QAQKeaO4Awq1uUCUsHsaCUCeXYqKZAghHyLjGGy_IkKZyeMYAghFpxGjGG3i8gOesRSG1pQhOPFHWG3J8Mca56ZbFxrlFOGFkGXZ8ESMbE9UwmFU24KAcnRDOVUNoDh2UrxhyLIQDDgnj-4WKaOkAmg1qkiHHGwvN4NAbQemWJbh5LKQbGXnQpoN6dZRBJ05JRjdddS8oyaST4pHX40Egv6BpDDn4m8MLTJIYRgtzgFgGHHm0sFEZdLxQ1hx1YrQxHdqx20IdbqjVQpUutHSDkece9IXYZdHBJ5c2dARThl5V1IYME7XtKJ4yeEWVbgbpWwZiX0jJttt4xy2CxGGAKMd7U3Z1pYeYHWQGVGxIdNe8fSLlGwx9KBAQ%26s%3Db8f5df68de5450f104f812b9b6bf723bb84cbd8c1b996329a2395b9efdc263821674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756
302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=6483293948335098126&pid=0&site=28713&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.0153&ecpm=0.01156833&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-8&site_id=0&spot_id=28713&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.0032429572807829653&placement_type_id=8&skin_test=&verify_hash=&score=100&ml=&tag_ab=&ttl=&space_id=28713&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIm6YKXODRg4xYlrcqBEjpMcyMlqEoUFmTIsYMcbAEPNxTI0yZnCIcDhHTBoyCnVsEQFDRBeHY9wElTFDhsMwdcZgtEEDR9McM3JUnTGjBowcOGLIsLFThE8yGNPQKdPmS4yyBu0sHBuWhkM4dcQsrNHV6UM4cBbeuCGjoYg5cCTqmGGjBkkaNhyWwUPnC2LFD8noeeOmzBcZOG7EmFF2TJvAi7PCsBE5s5mJDsW4cTOXcY0cMOyKaOPmog4aNGDg8AuHt-8YN2CsdljnrY6BdOjAmaPjxYsxaMLQqSNHjPYyLsa8afMijZsXP-jIgbimB505LejEaHGnjJgxYdq0wE-HSx3lY9HxBnc92PDGTP4BaAN-p4WRxhlu9FBDEEvkYEOCMIxFRhpzhCEGG57NMaAbZPQQA4ZjtfGGTyBKUcaGcpQRUQ9QCYiiDWyJ8eIXdvxUxhtfcMZGHiaWRcZ4GKExBhtpTBcekkhpt9AWMsRwlAhwyCGVDjG4cEMZLcBQQ2yv6QCDCzBQJMIYxX2R5ZZnpsmXQ3LYgVoMMEjGZhsLxYkcc3WkgVEOZXhEg0ZdjRQDZDXQAJMZZMSwkhk1jNEVDmPcoJNDTQ7aJW4u0CCDCzE0WlYdYWDUxBt6pMEGG2G8UAOaIKBwhXlH3jEHCE5QAQKeaO4Awq1uUCUsHsaCUCeXYqKZAghHyLjGGy_IkKZyeMYAghFpxGjGG3i8gOesRSG1pQhOPFHWG3J8Mca56ZbFxrlFOGFkGXZ8ESMbE9UwmFU24KAcnRDOVUNoDh2UrxhyLIQDDgnj-4WKaOkAmg1qkiHHGwvN4NAbQemWJbh5LKQbGXnQpoN6dZRBJ05JRjdddS8oyaST4pHX40Egv6BpDDn4m8MLTJIYRgtzgFgGHHm0sFEZdLxQ1hx1YrQxHdqx20IdbqjVQpUutHSDkece9IXYZdHBJ5c2dARThl5V1IYME7XtKJ4yeEWVbgbpWwZiX0jJttt4xy2CxGGAKMd7U3Z1pYeYHWQGVGxIdNe8fSLlGwx9KBAQ%26s%3Db8f5df68de5450f104f812b9b6bf723bb84cbd8c1b996329a2395b9efdc263821674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=6483293948335098126&pid=0&site=28713&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.0153&ecpm=0.01156833&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-8&site_id=0&spot_id=28713&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.0032429572807829653&placement_type_id=8&skin_test=&verify_hash=&score=100&ml=&tag_ab=&ttl=&space_id=28713&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIm6YKXODRg4xYlrcqBEjpMcyMlqEoUFmTIsYMcbAEPNxTI0yZnCIcDhHTBoyCnVsEQFDRBeHY9wElTFDhsMwdcZgtEEDR9McM3JUnTGjBowcOGLIsLFThE8yGNPQKdPmS4yyBu0sHBuWhkM4dcQsrNHV6UM4cBbeuCGjoYg5cCTqmGGjBkkaNhyWwUPnC2LFD8noeeOmzBcZOG7EmFF2TJvAi7PCsBE5s5mJDsW4cTOXcY0cMOyKaOPmog4aNGDg8AuHt-8YN2CsdljnrY6BdOjAmaPjxYsxaMLQqSNHjPYyLsa8afMijZsXP-jIgbimB505LejEaHGnjJgxYdq0wE-HSx3lY9HxBnc92PDGTP4BaAN-p4WRxhlu9FBDEEvkYEOCMIxFRhpzhCEGG57NMaAbZPQQA4ZjtfGGTyBKUcaGcpQRUQ9QCYiiDWyJ8eIXdvxUxhtfcMZGHiaWRcZ4GKExBhtpTBcekkhpt9AWMsRwlAhwyCGVDjG4cEMZLcBQQ2yv6QCDCzBQJMIYxX2R5ZZnpsmXQ3LYgVoMMEjGZhsLxYkcc3WkgVEOZXhEg0ZdjRQDZDXQAJMZZMSwkhk1jNEVDmPcoJNDTQ7aJW4u0CCDCzE0WlYdYWDUxBt6pMEGG2G8UAOaIKBwhXlH3jEHCE5QAQKeaO4Awq1uUCUsHsaCUCeXYqKZAghHyLjGGy_IkKZyeMYAghFpxGjGG3i8gOesRSG1pQhOPFHWG3J8Mca56ZbFxrlFOGFkGXZ8ESMbE9UwmFU24KAcnRDOVUNoDh2UrxhyLIQDDgnj-4WKaOkAmg1qkiHHGwvN4NAbQemWJbh5LKQbGXnQpoN6dZRBJ05JRjdddS8oyaST4pHX40Egv6BpDDn4m8MLTJIYRgtzgFgGHHm0sFEZdLxQ1hx1YrQxHdqx20IdbqjVQpUutHSDkece9IXYZdHBJ5c2dARThl5V1IYME7XtKJ4yeEWVbgbpWwZiX0jJttt4xy2CxGGAKMd7U3Z1pYeYHWQGVGxIdNe8fSLlGwx9KBAQ%26s%3Db8f5df68de5450f104f812b9b6bf723bb84cbd8c1b996329a2395b9efdc263821674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:31 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: //r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIm6YKXODRg4xYlrcqBEjpMcyMlqEoUFmTIsYMcbAEPNxTI0yZnCIcDhHTBoyCnVsEQFDRBeHY9wElTFDhsMwdcZgtEEDR9McM3JUnTGjBowcOGLIsLFThE8yGNPQKdPmS4yyBu0sHBuWhkM4dcQsrNHV6UM4cBbeuCGjoYg5cCTqmGGjBkkaNhyWwUPnC2LFD8noeeOmzBcZOG7EmFF2TJvAi7PCsBE5s5mJDsW4cTOXcY0cMOyKaOPmog4aNGDg8AuHt-8YN2CsdljnrY6BdOjAmaPjxYsxaMLQqSNHjPYyLsa8afMijZsXP-jIgbimB505LejEaHGnjJgxYdq0wE-HSx3lY9HxBnc92PDGTP4BaAN-p4WRxhlu9FBDEEvkYEOCMIxFRhpzhCEGG57NMaAbZPQQA4ZjtfGGTyBKUcaGcpQRUQ9QCYiiDWyJ8eIXdvxUxhtfcMZGHiaWRcZ4GKExBhtpTBcekkhpt9AWMsRwlAhwyCGVDjG4cEMZLcBQQ2yv6QCDCzBQJMIYxX2R5ZZnpsmXQ3LYgVoMMEjGZhsLxYkcc3WkgVEOZXhEg0ZdjRQDZDXQAJMZZMSwkhk1jNEVDmPcoJNDTQ7aJW4u0CCDCzE0WlYdYWDUxBt6pMEGG2G8UAOaIKBwhXlH3jEHCE5QAQKeaO4Awq1uUCUsHsaCUCeXYqKZAghHyLjGGy_IkKZyeMYAghFpxGjGG3i8gOesRSG1pQhOPFHWG3J8Mca56ZbFxrlFOGFkGXZ8ESMbE9UwmFU24KAcnRDOVUNoDh2UrxhyLIQDDgnj-4WKaOkAmg1qkiHHGwvN4NAbQemWJbh5LKQbGXnQpoN6dZRBJ05JRjdddS8oyaST4pHX40Egv6BpDDn4m8MLTJIYRgtzgFgGHHm0sFEZdLxQ1hx1YrQxHdqx20IdbqjVQpUutHSDkece9IXYZdHBJ5c2dARThl5V1IYME7XtKJ4yeEWVbgbpWwZiX0jJttt4xy2CxGGAKMd7U3Z1pYeYHWQGVGxIdNe8fSLlGwx9KBAQ&s=b8f5df68de5450f104f812b9b6bf723bb84cbd8c1b996329a2395b9efdc263821674110250
X-Firefox-Spdy: h2
cdntocdn.com/dli/webcamera.svg?fill=rgb(128%2C%20128%2C%20128)
200 OK 658 B URL HTTP/2 cdntocdn.com/dli/webcamera.svg?fill=rgb(128%2C%20128%2C%20128)
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (937), with CRLF line terminators
Hash 87aa03070f426aa9622db1d2808eeba1
344845828b82acd1b09cc1161cbd70e6b9b77bb6
a6628a9306dea83370ca1cc7461a90df6824838fd4f33965a8976dbd5678b2b1
GET /dli/webcamera.svg?fill=rgb(128%2C%20128%2C%20128) HTTP/1.1
Host: cdntocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: image/svg+xml
last-modified: Tue, 16 Jun 2020 16:25:10 GMT
etag: W/"5ee8f266-545"
pragma: no-cache, no-cache
x-proxy-cache: HIT, HIT
cache-control: no-cache, no-store, must-revalidate
expires: 0
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0XNEooxoGMcXoyaClWkDsp860hfu%2FVcBLm833nYoYsNklB3rVgC1PRCgGAH76Z49ltgXVodqIysldRO75hlReUYt77MxuTANInA5k2Mf47bFxh0CilBzD4yrfwMZqBA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bd8feb8823744b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
js.wpshsdk.com/npc/sdk/common/config.js
200 OK 19 B URL HTTP/2 js.wpshsdk.com/npc/sdk/common/config.js
IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash 51a5853c57b13b8f7464e2e754b195ac
99918d5cc348ab73570a2d316e7c5a8204ba0dea
58d88daf9adc6488455b4d269e15d8381bcda15aad126bcbab0623be37651f23
GET /npc/sdk/common/config.js HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hclips.com/
Origin: https://hclips.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 19
server: nginx/1.18.0
last-modified: Wed, 11 Jan 2023 09:42:43 GMT
etag: "63be8493-13"
expires: Thu, 19 Jan 2023 06:42:31 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
btds.zog.link/in/dl_show/?spot_id=84749&out_name=106970|2005|cpc|0.0108|$%200.0120&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84749&p=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F
200 OK 2 B URL HTTP/2 btds.zog.link/in/dl_show/?spot_id=84749&out_name=106970|2005|cpc|0.0108|$%200.0120&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84749&p=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /in/dl_show/?spot_id=84749&out_name=106970|2005|cpc|0.0108|$%200.0120&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84749&p=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: application/json
content-length: 2
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: 952.0=1; expires=Fri, 20 Jan 2023 06:37:30 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
btds.zog.link/in/dl_show/?spot_id=84749&out_name=122502|2005|cpm|0.0090|$%200.0100&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84749&p=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F
200 OK 2 B URL HTTP/2 btds.zog.link/in/dl_show/?spot_id=84749&out_name=122502|2005|cpm|0.0090|$%200.0100&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84749&p=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /in/dl_show/?spot_id=84749&out_name=122502|2005|cpm|0.0090|$%200.0100&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84749&p=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: application/json
content-length: 2
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
set-cookie: 952.0=1; expires=Fri, 20 Jan 2023 06:37:31 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=2654874424851094908&pid=0&site=28717&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.01445&ecpm=0.010925645&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-9&site_id=0&spot_id=28717&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.00500462901732575&placement_type_id=2&skin_test=&verify_hash=&score=99.97375085967171&ml=&tag_ab=&ttl=&space_id=28717&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsSUuWEQh4wbLczQkGGjBY0aZWa0yFEmhpmQOMbcuFFGRhkbZGzUEOFwjpg0ZBTq2CIChoguDse4ESpjhgyHYeqMwUiyBg0cN2iMvFojBowcNHLAwMEzI1CMaeiUafMlRlmDdhaSxBGDhkM4dcQsrDGjxtOHcOAsnPmxJxyJOmjEuFGjBg4bDsvgofNlzmGMBvW8cVPmiwysi8uOaSNYx4wZYm1AfkjGzESHYty4kTtDp1i7Itq4uZiYxti_cHTzXgwDxuo6bnUMpEMHzhwdL16MQROGTh05YqqXcTHmTZsXady8-EFHDsQ1PejMaUEnRos7ZcSMCdOmxXw6XOoUJ0nnzfUeNrwBgxj57WfDfKSFkcYZbvRQQxBL5GBDgTCQREYac4QhBhudzeGfG2T0EAOFJLXxxk8cSlHGhXKUEVEPUfVHog1raUTGF3YAVcYbX2zGRh4ilkWGdxihMQYbaTjHHZFJVbfQFjLEgJQIcMgxlQ4xuEBTCzDUAJtrOsDgAgwUiTBGcF9UeaWYZGrlpQhy2FFaDG-6GNxCbC7mUB11pIERS2HRcIMZfTFWl06KuURGDGHQYEYNY_QV0w1kOZTkn1mK5cJILtBJQ1l1hIFRE2_okQYbbITxQg1jgoDCFeENecccIDhBBQhejbkDCLC6YQMNu-Lx665xYtnlmCmAcISLa7zxggxkFudVDCAYkUaLZryBxwtesWpUUleK4MQTZb0hxxdjhDtuWWyEW4QTQpZhxxctsjFRDTPhUBsOxTkkB4NyOdaQCAfNK4YcC-GAg0MFf2EiGXI9ViYZcryx0AwOvSEUblVqm8dCuJGRx2w6lFdHGf6WAeZyzT0XnZFIKtnddzkepPELlMaQA745vIAkiGG0MAeHZcCRR0hllEHHC2XNESdGFdNRnbkt1OFGWiZlSYZMQoZ70Bdb31AWHW1MZENWMXglQw0wVNSGDGajrTbbv75pEL1lWPaFk1ienWiFbEc2bxgcyqHek31NqSFiBKscFRsS3dUunknxBkMfCgQE%26s%3D563541be5d9df5484973e1add8f5adfc5eaca241b2b70162ddf1650f853595741674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756
302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=2654874424851094908&pid=0&site=28717&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.01445&ecpm=0.010925645&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-9&site_id=0&spot_id=28717&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.00500462901732575&placement_type_id=2&skin_test=&verify_hash=&score=99.97375085967171&ml=&tag_ab=&ttl=&space_id=28717&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsSUuWEQh4wbLczQkGGjBY0aZWa0yFEmhpmQOMbcuFFGRhkbZGzUEOFwjpg0ZBTq2CIChoguDse4ESpjhgyHYeqMwUiyBg0cN2iMvFojBowcNHLAwMEzI1CMaeiUafMlRlmDdhaSxBGDhkM4dcQsrDGjxtOHcOAsnPmxJxyJOmjEuFGjBg4bDsvgofNlzmGMBvW8cVPmiwysi8uOaSNYx4wZYm1AfkjGzESHYty4kTtDp1i7Itq4uZiYxti_cHTzXgwDxuo6bnUMpEMHzhwdL16MQROGTh05YqqXcTHmTZsXady8-EFHDsQ1PejMaUEnRos7ZcSMCdOmxXw6XOoUJ0nnzfUeNrwBgxj57WfDfKSFkcYZbvRQQxBL5GBDgTCQREYac4QhBhudzeGfG2T0EAOFJLXxxk8cSlHGhXKUEVEPUfVHog1raUTGF3YAVcYbX2zGRh4ilkWGdxihMQYbaTjHHZFJVbfQFjLEgJQIcMgxlQ4xuEBTCzDUAJtrOsDgAgwUiTBGcF9UeaWYZGrlpQhy2FFaDG-6GNxCbC7mUB11pIERS2HRcIMZfTFWl06KuURGDGHQYEYNY_QV0w1kOZTkn1mK5cJILtBJQ1l1hIFRE2_okQYbbITxQg1jgoDCFeENecccIDhBBQhejbkDCLC6YQMNu-Lx665xYtnlmCmAcISLa7zxggxkFudVDCAYkUaLZryBxwtesWpUUleK4MQTZb0hxxdjhDtuWWyEW4QTQpZhxxctsjFRDTPhUBsOxTkkB4NyOdaQCAfNK4YcC-GAg0MFf2EiGXI9ViYZcryx0AwOvSEUblVqm8dCuJGRx2w6lFdHGf6WAeZyzT0XnZFIKtnddzkepPELlMaQA745vIAkiGG0MAeHZcCRR0hllEHHC2XNESdGFdNRnbkt1OFGWiZlSYZMQoZ70Bdb31AWHW1MZENWMXglQw0wVNSGDGajrTbbv75pEL1lWPaFk1ienWiFbEc2bxgcyqHek31NqSFiBKscFRsS3dUunknxBkMfCgQE%26s%3D563541be5d9df5484973e1add8f5adfc5eaca241b2b70162ddf1650f853595741674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=2654874424851094908&pid=0&site=28717&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.01445&ecpm=0.010925645&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-9&site_id=0&spot_id=28717&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.00500462901732575&placement_type_id=2&skin_test=&verify_hash=&score=99.97375085967171&ml=&tag_ab=&ttl=&space_id=28717&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsSUuWEQh4wbLczQkGGjBY0aZWa0yFEmhpmQOMbcuFFGRhkbZGzUEOFwjpg0ZBTq2CIChoguDse4ESpjhgyHYeqMwUiyBg0cN2iMvFojBowcNHLAwMEzI1CMaeiUafMlRlmDdhaSxBGDhkM4dcQsrDGjxtOHcOAsnPmxJxyJOmjEuFGjBg4bDsvgofNlzmGMBvW8cVPmiwysi8uOaSNYx4wZYm1AfkjGzESHYty4kTtDp1i7Itq4uZiYxti_cHTzXgwDxuo6bnUMpEMHzhwdL16MQROGTh05YqqXcTHmTZsXady8-EFHDsQ1PejMaUEnRos7ZcSMCdOmxXw6XOoUJ0nnzfUeNrwBgxj57WfDfKSFkcYZbvRQQxBL5GBDgTCQREYac4QhBhudzeGfG2T0EAOFJLXxxk8cSlHGhXKUEVEPUfVHog1raUTGF3YAVcYbX2zGRh4ilkWGdxihMQYbaTjHHZFJVbfQFjLEgJQIcMgxlQ4xuEBTCzDUAJtrOsDgAgwUiTBGcF9UeaWYZGrlpQhy2FFaDG-6GNxCbC7mUB11pIERS2HRcIMZfTFWl06KuURGDGHQYEYNY_QV0w1kOZTkn1mK5cJILtBJQ1l1hIFRE2_okQYbbITxQg1jgoDCFeENecccIDhBBQhejbkDCLC6YQMNu-Lx665xYtnlmCmAcISLa7zxggxkFudVDCAYkUaLZryBxwtesWpUUleK4MQTZb0hxxdjhDtuWWyEW4QTQpZhxxctsjFRDTPhUBsOxTkkB4NyOdaQCAfNK4YcC-GAg0MFf2EiGXI9ViYZcryx0AwOvSEUblVqm8dCuJGRx2w6lFdHGf6WAeZyzT0XnZFIKtnddzkepPELlMaQA745vIAkiGG0MAeHZcCRR0hllEHHC2XNESdGFdNRnbkt1OFGWiZlSYZMQoZ70Bdb31AWHW1MZENWMXglQw0wVNSGDGajrTbbv75pEL1lWPaFk1ienWiFbEc2bxgcyqHek31NqSFiBKscFRsS3dUunknxBkMfCgQE%26s%3D563541be5d9df5484973e1add8f5adfc5eaca241b2b70162ddf1650f853595741674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:31 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: //r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsSUuWEQh4wbLczQkGGjBY0aZWa0yFEmhpmQOMbcuFFGRhkbZGzUEOFwjpg0ZBTq2CIChoguDse4ESpjhgyHYeqMwUiyBg0cN2iMvFojBowcNHLAwMEzI1CMaeiUafMlRlmDdhaSxBGDhkM4dcQsrDGjxtOHcOAsnPmxJxyJOmjEuFGjBg4bDsvgofNlzmGMBvW8cVPmiwysi8uOaSNYx4wZYm1AfkjGzESHYty4kTtDp1i7Itq4uZiYxti_cHTzXgwDxuo6bnUMpEMHzhwdL16MQROGTh05YqqXcTHmTZsXady8-EFHDsQ1PejMaUEnRos7ZcSMCdOmxXw6XOoUJ0nnzfUeNrwBgxj57WfDfKSFkcYZbvRQQxBL5GBDgTCQREYac4QhBhudzeGfG2T0EAOFJLXxxk8cSlHGhXKUEVEPUfVHog1raUTGF3YAVcYbX2zGRh4ilkWGdxihMQYbaTjHHZFJVbfQFjLEgJQIcMgxlQ4xuEBTCzDUAJtrOsDgAgwUiTBGcF9UeaWYZGrlpQhy2FFaDG-6GNxCbC7mUB11pIERS2HRcIMZfTFWl06KuURGDGHQYEYNY_QV0w1kOZTkn1mK5cJILtBJQ1l1hIFRE2_okQYbbITxQg1jgoDCFeENecccIDhBBQhejbkDCLC6YQMNu-Lx665xYtnlmCmAcISLa7zxggxkFudVDCAYkUaLZryBxwtesWpUUleK4MQTZb0hxxdjhDtuWWyEW4QTQpZhxxctsjFRDTPhUBsOxTkkB4NyOdaQCAfNK4YcC-GAg0MFf2EiGXI9ViYZcryx0AwOvSEUblVqm8dCuJGRx2w6lFdHGf6WAeZyzT0XnZFIKtnddzkepPELlMaQA745vIAkiGG0MAeHZcCRR0hllEHHC2XNESdGFdNRnbkt1OFGWiZlSYZMQoZ70Bdb31AWHW1MZENWMXglQw0wVNSGDGajrTbbv75pEL1lWPaFk1ienWiFbEc2bxgcyqHek31NqSFiBKscFRsS3dUunknxBkMfCgQE&s=563541be5d9df5484973e1add8f5adfc5eaca241b2b70162ddf1650f853595741674110250
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
200 OK 1.9 kB URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2334)
Hash a35e21f5f7197c2532ed694822d919f2
56fc73b9b9d248b1fabea75e61e93446e92898bd
b236fc75852e9c17a52c6a5be36043b1aaae0cbfc1f799365ae3280fc04957bd
GET /get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxNDk2LCJzcGFjZWlkIjoyODcxNSwidHlwZSI6InBvcCIsImlkem9uZSI6NTMxMzI5LCJhZF90YWdzIjoiU3RyYWlnaHQlMkNGZXRpc2glMkNBbWF0ZXVyJTJDTUlMRiUyQ0Jsb25kZSUyQ0Zvb3QlMjBGZXRpc2glMkNIRCIsImxhYmVscyI6IiIsImFsbG93ZWRfbGFiZWxzIjoiIiwidGl0bGUiOiIiLCJzdWJpZCI6IjAiLCJ1dG0xIjoiIiwidXRtMiI6IiIsInV0bTQiOiIiLCJzcG90X2lkIjoyODcxNSwibXVsdGlwbGUiOmZhbHNlLCJpc19pZnJhbWUiOmZhbHNlLCJyZWZkb21haW4iOiIiLCJwbCI6OCwic3RyYXRhZ2VtIjpudWxsLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTZ9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9fV0sInNpdGUiOnsiaWQiOiIyODcxNSIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9oY2xpcHMuY29tL3ZpZGVvcy83ODE5NTc5L2xpbmRhLXNsZWVweS1mZWV0LyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI5ZTQ5NDdmMzU3NTE0NjU0MTFmZDFhNGY1YzM1OGM3OCJ9LCJleHQiOnsiZHQiOjE2NzQxMTAyNTAxMDB9fQ== HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
200 OK 50 kB URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
Hash edc1f67ee070c1c8d4d8b1f8062dbc6c
163b42d0e46a6b20e8fc5e4da9a2afcdd8a0c31c
72da5412487640970e2b7edca8f9c4e60384b449cfa5887a7c06f2e3afcc09f8
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=1111617454752551619&pid=0&site=37490&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.0153&ecpm=0.01156833&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-3&site_id=0&spot_id=37490&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.00253934664726888&placement_type_id=10&skin_test=&verify_hash=&score=100&ml=&tag_ab=&ttl=&space_id=37490&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsbUMKPxRpkYLWiQiTEj5BgcJcWIqWGjRQ4bY8zkyEHjxpgyN0U4nCMmDRmFOraIgCGii8MxboDKmCHDYZg6YzDGmBrDRowbNGrUrCGjRo2qMXLoFNGTDMY0dMq0-RJjrEE7C2XYwBGDhkM4dcQsrDGDq1M4cBbeuCGjoYg5cCTqoAFjLkscDsvgofMFseKHZPS8cVPmywysOYgebRNYx4wZoW3YcErGzESHYty4iTvDRo3QdkW0cXNxMWMcTUXA2d37KozGDuu01TGQDh04c3S8eDEGTRg6deSIuV7GxZg3bV6kcfPiBx05ENf0oDOnBR2Qd8qIGROmTQv6dLjUOS6XzpvsPdjwBgxi6McfTPXBEUYaZ7jRQw1BLPGSgTDIRUYac4QhBhudzfGfG2T0EAOFcrXxRk8cSlHGhXLgREcPT_lHog1qibHiF3b4VMYbX2zGRh4ijkUGeBihMQYbaUDnHZFHXbfQFjLEYJRwckSlQwwueNQCDDXA5poOMLgAA0UZDfcFHFUuFOaYfDkkhx2lxQBDZGMMp6aYVyVXRxoY5VAGDTTdYEZfN3xFg200TGXGSGHQYEYNY_SFwxg34DBWkn1iGZoLNMjgQgxajVVHGBg18YYeabDBRhgv1CAmCChcMd6Qd8wBghNUgCCnmDuAIKsbNtDQKx7B9vrmlVyKmQIIR-C0xhsvyDDmcXLGAIIRabRoxht4vCCnq6JlZKUITjwx1htyfDHGuOWOxca4RTghZBl2fNEiGxPVMBhKcx3nZoNx1YCDYQfVK4YcC-EAmQgFf2GiWTrIgINVDpEhxxsLzeDQG0Dlhia3eSyUGxl5zKbDeXWU4WYZXzb3XHTTGYmkkt-Fl-NBHL9QaVj65vACkiCG0cIcHJYBRx4tmFFGGXS8MNYcb2J0MR3XodtCHW6g1QJqLpBBqZDjHvSF1zeMRUcbE9mA1VQV1jCnCGfLkPbacnbVWFas2VsGYl84eaXaidbtdmT1hsGhHOw92deUGl52kBlPsSHRXe-qeVRvMPShQEA%253D%26s%3D9098140cb8ec4a58fb22228323b12e081639495f35193cc0f3876dd47563507d1674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756
302 Found 152 kB URL HTTP/2 rtbrennab.com/banner/in/show/?mid=1111617454752551619&pid=0&site=37490&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.0153&ecpm=0.01156833&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-3&site_id=0&spot_id=37490&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.00253934664726888&placement_type_id=10&skin_test=&verify_hash=&score=100&ml=&tag_ab=&ttl=&space_id=37490&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsbUMKPxRpkYLWiQiTEj5BgcJcWIqWGjRQ4bY8zkyEHjxpgyN0U4nCMmDRmFOraIgCGii8MxboDKmCHDYZg6YzDGmBrDRowbNGrUrCGjRo2qMXLoFNGTDMY0dMq0-RJjrEE7C2XYwBGDhkM4dcQsrDGDq1M4cBbeuCGjoYg5cCTqoAFjLkscDsvgofMFseKHZPS8cVPmywysOYgebRNYx4wZoW3YcErGzESHYty4iTvDRo3QdkW0cXNxMWMcTUXA2d37KozGDuu01TGQDh04c3S8eDEGTRg6deSIuV7GxZg3bV6kcfPiBx05ENf0oDOnBR2Qd8qIGROmTQv6dLjUOS6XzpvsPdjwBgxi6McfTPXBEUYaZ7jRQw1BLPGSgTDIRUYac4QhBhudzfGfG2T0EAOFcrXxRk8cSlHGhXLgREcPT_lHog1qibHiF3b4VMYbX2zGRh4ijkUGeBihMQYbaUDnHZFHXbfQFjLEYJRwckSlQwwueNQCDDXA5poOMLgAA0UZDfcFHFUuFOaYfDkkhx2lxQBDZGMMp6aYVyVXRxoY5VAGDTTdYEZfN3xFg200TGXGSGHQYEYNY_SFwxg34DBWkn1iGZoLNMjgQgxajVVHGBg18YYeabDBRhgv1CAmCChcMd6Qd8wBghNUgCCnmDuAIKsbNtDQKx7B9vrmlVyKmQIIR-C0xhsvyDDmcXLGAIIRabRoxht4vCCnq6JlZKUITjwx1htyfDHGuOWOxca4RTghZBl2fNEiGxPVMBhKcx3nZoNx1YCDYQfVK4YcC-EAmQgFf2GiWTrIgINVDpEhxxsLzeDQG0Dlhia3eSyUGxl5zKbDeXWU4WYZXzb3XHTTGYmkkt-Fl-NBHL9QaVj65vACkiCG0cIcHJYBRx4tmFFGGXS8MNYcb2J0MR3XodtCHW6g1QJqLpBBqZDjHvSF1zeMRUcbE9mA1VQV1jCnCGfLkPbacnbVWFas2VsGYl84eaXaidbtdmT1hsGhHOw92deUGl52kBlPsSHRXe-qeVRvMPShQEA%253D%26s%3D9098140cb8ec4a58fb22228323b12e081639495f35193cc0f3876dd47563507d1674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756
IP
ASN #24940 Hetzner Online GmbH
Size 152 kB (152452 bytes)
Hash 24b82a6e2aea5d4b9991133431db7ca6
e857d2036dcd3264c44d9c9c4c6276fead1ecd8b
bddddc53d0b5679f897acafbd56263e8b381ede16e193e623fa6e7103be3680c
GET /banner/in/show/?mid=1111617454752551619&pid=0&site=37490&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.0153&ecpm=0.01156833&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-3&site_id=0&spot_id=37490&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.00253934664726888&placement_type_id=10&skin_test=&verify_hash=&score=100&ml=&tag_ab=&ttl=&space_id=37490&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsbUMKPxRpkYLWiQiTEj5BgcJcWIqWGjRQ4bY8zkyEHjxpgyN0U4nCMmDRmFOraIgCGii8MxboDKmCHDYZg6YzDGmBrDRowbNGrUrCGjRo2qMXLoFNGTDMY0dMq0-RJjrEE7C2XYwBGDhkM4dcQsrDGDq1M4cBbeuCGjoYg5cCTqoAFjLkscDsvgofMFseKHZPS8cVPmywysOYgebRNYx4wZoW3YcErGzESHYty4iTvDRo3QdkW0cXNxMWMcTUXA2d37KozGDuu01TGQDh04c3S8eDEGTRg6deSIuV7GxZg3bV6kcfPiBx05ENf0oDOnBR2Qd8qIGROmTQv6dLjUOS6XzpvsPdjwBgxi6McfTPXBEUYaZ7jRQw1BLPGSgTDIRUYac4QhBhudzfGfG2T0EAOFcrXxRk8cSlHGhXLgREcPT_lHog1qibHiF3b4VMYbX2zGRh4ijkUGeBihMQYbaUDnHZFHXbfQFjLEYJRwckSlQwwueNQCDDXA5poOMLgAA0UZDfcFHFUuFOaYfDkkhx2lxQBDZGMMp6aYVyVXRxoY5VAGDTTdYEZfN3xFg200TGXGSGHQYEYNY_SFwxg34DBWkn1iGZoLNMjgQgxajVVHGBg18YYeabDBRhgv1CAmCChcMd6Qd8wBghNUgCCnmDuAIKsbNtDQKx7B9vrmlVyKmQIIR-C0xhsvyDDmcXLGAIIRabRoxht4vCCnq6JlZKUITjwx1htyfDHGuOWOxca4RTghZBl2fNEiGxPVMBhKcx3nZoNx1YCDYQfVK4YcC-EAmQgFf2GiWTrIgINVDpEhxxsLzeDQG0Dlhia3eSyUGxl5zKbDeXWU4WYZXzb3XHTTGYmkkt-Fl-NBHL9QaVj65vACkiCG0cIcHJYBRx4tmFFGGXS8MNYcb2J0MR3XodtCHW6g1QJqLpBBqZDjHvSF1zeMRUcbE9mA1VQV1jCnCGfLkPbacnbVWFas2VsGYl84eaXaidbtdmT1hsGhHOw92deUGl52kBlPsSHRXe-qeVRvMPShQEA%253D%26s%3D9098140cb8ec4a58fb22228323b12e081639495f35193cc0f3876dd47563507d1674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:31 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: //r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsbUMKPxRpkYLWiQiTEj5BgcJcWIqWGjRQ4bY8zkyEHjxpgyN0U4nCMmDRmFOraIgCGii8MxboDKmCHDYZg6YzDGmBrDRowbNGrUrCGjRo2qMXLoFNGTDMY0dMq0-RJjrEE7C2XYwBGDhkM4dcQsrDGDq1M4cBbeuCGjoYg5cCTqoAFjLkscDsvgofMFseKHZPS8cVPmywysOYgebRNYx4wZoW3YcErGzESHYty4iTvDRo3QdkW0cXNxMWMcTUXA2d37KozGDuu01TGQDh04c3S8eDEGTRg6deSIuV7GxZg3bV6kcfPiBx05ENf0oDOnBR2Qd8qIGROmTQv6dLjUOS6XzpvsPdjwBgxi6McfTPXBEUYaZ7jRQw1BLPGSgTDIRUYac4QhBhudzfGfG2T0EAOFcrXxRk8cSlHGhXLgREcPT_lHog1qibHiF3b4VMYbX2zGRh4ijkUGeBihMQYbaUDnHZFHXbfQFjLEYJRwckSlQwwueNQCDDXA5poOMLgAA0UZDfcFHFUuFOaYfDkkhx2lxQBDZGMMp6aYVyVXRxoY5VAGDTTdYEZfN3xFg200TGXGSGHQYEYNY_SFwxg34DBWkn1iGZoLNMjgQgxajVVHGBg18YYeabDBRhgv1CAmCChcMd6Qd8wBghNUgCCnmDuAIKsbNtDQKx7B9vrmlVyKmQIIR-C0xhsvyDDmcXLGAIIRabRoxht4vCCnq6JlZKUITjwx1htyfDHGuOWOxca4RTghZBl2fNEiGxPVMBhKcx3nZoNx1YCDYQfVK4YcC-EAmQgFf2GiWTrIgINVDpEhxxsLzeDQG0Dlhia3eSyUGxl5zKbDeXWU4WYZXzb3XHTTGYmkkt-Fl-NBHL9QaVj65vACkiCG0cIcHJYBRx4tmFFGGXS8MNYcb2J0MR3XodtCHW6g1QJqLpBBqZDjHvSF1zeMRUcbE9mA1VQV1jCnCGfLkPbacnbVWFas2VsGYl84eaXaidbtdmT1hsGhHOw92deUGl52kBlPsSHRXe-qeVRvMPShQEA%3D&s=9098140cb8ec4a58fb22228323b12e081639495f35193cc0f3876dd47563507d1674110250
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=7914748858526107872&pid=0&site=28712&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.0153&ecpm=0.01156833&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-4&site_id=0&spot_id=28712&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.0017696071948155006&placement_type_id=8&skin_test=&verify_hash=&score=99.97959072949976&ml=&tag_ab=&ttl=&space_id=28712&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImyIqQFDhhkZNVqYsTFjRgsaNWLgaJFDpUkbNWbgIIMDxkcaY8yIcDhHTBoyCnVsEQFDRBeHY9wElTFDhsMwdcZgvNGSxg0aOHDU0CrDRgwYN3DckLFThE8yGNPQKdPmS4yyBu0s7IojBg2HcOqIWRizhtOHcOAsvDG2oYg5cCTqmAEzJQ0bDsvgofMFseKHZPS8cVPmiwyxMcgibSN48YwcMGxAxqxTB0WzbtzMZVwD9V0Rbdxc1EGDBgwcf-Hk3h3jBozUDuu81TGQDh04c3S8eDEGTRg6deSIuV7GxZg3bV6kcfPiBx05ENf0oDOnBZ0YLe6UETMmTJsW9elwqXO8K5032fVgwxswiLFffzbUR1oYaZzhRg81BLFEDjYc2JENZKQxRxhisNHZHAC6QUYPMVjYVRtv-OShFGVkKEcZEfUA1X8m2sCWGC1-YcdPZbzxxWZs5EFiWWSAhxEaY7CRBnTeGYnUdQttIUMMR4kAhxxSuebCDWW0AEMNDonRGgwuwPDaGMJ9cWWWZJoZk0Ny2FHaV5Gh2cZCbRaXXB1pYJRDGTTkYJUZM9Rwg2Mw0RBDDGaQEUMYNJhRwxiF4jBGWGUt6WcMLqDmAg0yuBBDDTSUVUcYGDXxhh5psMFGGC_UUCYIKFwxXpF3zAGCE1SA8FWZO4Bgqxs20BAsHsUGG6drX5aZAghHwLjGGy_IYOZxX8UAghFpvGjGG3i88JWsRSGVpQhOPFHWG3J8Mca56ZbFxrlFOEFkGXZ88SIbExkaFmM1wQCng3NtZdhB-Yohx0JZOYTwFyiipcNnXjksxxsLzeDQG0HddiW4eSx0Gxl5yKbDeXWUAWcZrTX3XHTTIakkk9-Ft-NBHL8QVgw5GJrDC0qKGEYLc3hYBhx5iFRGGXS8UNYccWJ0MR3XsdtCHW6o1YJKLpBxKZHnHvSF1zeURcedrtlw1aIdcVRRG2SlvfZXIKXm11Nk6FsGYl9AKbeidLstAr59eygHe1EWWiWHlx1kBlRsSITXvHgitRsMfSgQEA%253D%253D%26s%3De0a790303d38be7506d74d8408f3170ea5c007578c653c0b9caf5d1de69856cf1674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756
302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=7914748858526107872&pid=0&site=28712&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.0153&ecpm=0.01156833&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-4&site_id=0&spot_id=28712&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.0017696071948155006&placement_type_id=8&skin_test=&verify_hash=&score=99.97959072949976&ml=&tag_ab=&ttl=&space_id=28712&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImyIqQFDhhkZNVqYsTFjRgsaNWLgaJFDpUkbNWbgIIMDxkcaY8yIcDhHTBoyCnVsEQFDRBeHY9wElTFDhsMwdcZgvNGSxg0aOHDU0CrDRgwYN3DckLFThE8yGNPQKdPmS4yyBu0s7IojBg2HcOqIWRizhtOHcOAsvDG2oYg5cCTqmAEzJQ0bDsvgofMFseKHZPS8cVPmiwyxMcgibSN48YwcMGxAxqxTB0WzbtzMZVwD9V0Rbdxc1EGDBgwcf-Hk3h3jBozUDuu81TGQDh04c3S8eDEGTRg6deSIuV7GxZg3bV6kcfPiBx05ENf0oDOnBZ0YLe6UETMmTJsW9elwqXO8K5032fVgwxswiLFffzbUR1oYaZzhRg81BLFEDjYc2JENZKQxRxhisNHZHAC6QUYPMVjYVRtv-OShFGVkKEcZEfUA1X8m2sCWGC1-YcdPZbzxxWZs5EFiWWSAhxEaY7CRBnTeGYnUdQttIUMMR4kAhxxSuebCDWW0AEMNDonRGgwuwPDaGMJ9cWWWZJoZk0Ny2FHaV5Gh2cZCbRaXXB1pYJRDGTTkYJUZM9Rwg2Mw0RBDDGaQEUMYNJhRwxiF4jBGWGUt6WcMLqDmAg0yuBBDDTSUVUcYGDXxhh5psMFGGC_UUCYIKFwxXpF3zAGCE1SA8FWZO4Bgqxs20BAsHsUGG6drX5aZAghHwLjGGy_IYOZxX8UAghFpvGjGG3i88JWsRSGVpQhOPFHWG3J8Mca56ZbFxrlFOEFkGXZ88SIbExkaFmM1wQCng3NtZdhB-Yohx0JZOYTwFyiipcNnXjksxxsLzeDQG0HddiW4eSx0Gxl5yKbDeXWUAWcZrTX3XHTTIakkk9-Ft-NBHL8QVgw5GJrDC0qKGEYLc3hYBhx5iFRGGXS8UNYccWJ0MR3XsdtCHW6o1YJKLpBxKZHnHvSF1zeURcedrtlw1aIdcVRRG2SlvfZXIKXm11Nk6FsGYl9AKbeidLstAr59eygHe1EWWiWHlx1kBlRsSITXvHgitRsMfSgQEA%253D%253D%26s%3De0a790303d38be7506d74d8408f3170ea5c007578c653c0b9caf5d1de69856cf1674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=7914748858526107872&pid=0&site=28712&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.0153&ecpm=0.01156833&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-4&site_id=0&spot_id=28712&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.0017696071948155006&placement_type_id=8&skin_test=&verify_hash=&score=99.97959072949976&ml=&tag_ab=&ttl=&space_id=28712&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImyIqQFDhhkZNVqYsTFjRgsaNWLgaJFDpUkbNWbgIIMDxkcaY8yIcDhHTBoyCnVsEQFDRBeHY9wElTFDhsMwdcZgvNGSxg0aOHDU0CrDRgwYN3DckLFThE8yGNPQKdPmS4yyBu0s7IojBg2HcOqIWRizhtOHcOAsvDG2oYg5cCTqmAEzJQ0bDsvgofMFseKHZPS8cVPmiwyxMcgibSN48YwcMGxAxqxTB0WzbtzMZVwD9V0Rbdxc1EGDBgwcf-Hk3h3jBozUDuu81TGQDh04c3S8eDEGTRg6deSIuV7GxZg3bV6kcfPiBx05ENf0oDOnBZ0YLe6UETMmTJsW9elwqXO8K5032fVgwxswiLFffzbUR1oYaZzhRg81BLFEDjYc2JENZKQxRxhisNHZHAC6QUYPMVjYVRtv-OShFGVkKEcZEfUA1X8m2sCWGC1-YcdPZbzxxWZs5EFiWWSAhxEaY7CRBnTeGYnUdQttIUMMR4kAhxxSuebCDWW0AEMNDonRGgwuwPDaGMJ9cWWWZJoZk0Ny2FHaV5Gh2cZCbRaXXB1pYJRDGTTkYJUZM9Rwg2Mw0RBDDGaQEUMYNJhRwxiF4jBGWGUt6WcMLqDmAg0yuBBDDTSUVUcYGDXxhh5psMFGGC_UUCYIKFwxXpF3zAGCE1SA8FWZO4Bgqxs20BAsHsUGG6drX5aZAghHwLjGGy_IYOZxX8UAghFpvGjGG3i88JWsRSGVpQhOPFHWG3J8Mca56ZbFxrlFOEFkGXZ88SIbExkaFmM1wQCng3NtZdhB-Yohx0JZOYTwFyiipcNnXjksxxsLzeDQG0HddiW4eSx0Gxl5yKbDeXWUAWcZrTX3XHTTIakkk9-Ft-NBHL8QVgw5GJrDC0qKGEYLc3hYBhx5iFRGGXS8UNYccWJ0MR3XsdtCHW6o1YJKLpBxKZHnHvSF1zeURcedrtlw1aIdcVRRG2SlvfZXIKXm11Nk6FsGYl9AKbeidLstAr59eygHe1EWWiWHlx1kBlRsSITXvHgitRsMfSgQEA%253D%253D%26s%3De0a790303d38be7506d74d8408f3170ea5c007578c653c0b9caf5d1de69856cf1674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxNDk2LCJzcGFjZWlkIjoyODcxMiwidHlwZSI6InBvcCIsImlkem9uZSI6NTMxMzI1LCJhZF90YWdzIjoiU3RyYWlnaHQlMkNGZXRpc2glMkNBbWF0ZXVyJTJDTUlMRiUyQ0Jsb25kZSUyQ0Zvb3QlMjBGZXRpc2glMkNIRCIsImxhYmVscyI6IiIsImFsbG93ZWRfbGFiZWxzIjoiIiwidGl0bGUiOiIiLCJzdWJpZCI6IjAiLCJ1dG0xIjoiIiwidXRtMiI6IiIsInV0bTQiOiIiLCJzcG90X2lkIjoyODcxMiwibXVsdGlwbGUiOnRydWUsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjo4LCJzdHJhdGFnZW0iOm51bGwsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1Nn0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH19XSwic2l0ZSI6eyJpZCI6IjI4NzEyIiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL2hjbGlwcy5jb20vdmlkZW9zLzc4MTk1NzkvbGluZGEtc2xlZXB5LWZlZXQvIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjllNDk0N2YzNTc1MTQ2NTQxMWZkMWE0ZjVjMzU4Yzc4In0sImV4dCI6eyJkdCI6MTY3NDExMDI1MDA5NX19
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:31 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: //r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImyIqQFDhhkZNVqYsTFjRgsaNWLgaJFDpUkbNWbgIIMDxkcaY8yIcDhHTBoyCnVsEQFDRBeHY9wElTFDhsMwdcZgvNGSxg0aOHDU0CrDRgwYN3DckLFThE8yGNPQKdPmS4yyBu0s7IojBg2HcOqIWRizhtOHcOAsvDG2oYg5cCTqmAEzJQ0bDsvgofMFseKHZPS8cVPmiwyxMcgibSN48YwcMGxAxqxTB0WzbtzMZVwD9V0Rbdxc1EGDBgwcf-Hk3h3jBozUDuu81TGQDh04c3S8eDEGTRg6deSIuV7GxZg3bV6kcfPiBx05ENf0oDOnBZ0YLe6UETMmTJsW9elwqXO8K5032fVgwxswiLFffzbUR1oYaZzhRg81BLFEDjYc2JENZKQxRxhisNHZHAC6QUYPMVjYVRtv-OShFGVkKEcZEfUA1X8m2sCWGC1-YcdPZbzxxWZs5EFiWWSAhxEaY7CRBnTeGYnUdQttIUMMR4kAhxxSuebCDWW0AEMNDonRGgwuwPDaGMJ9cWWWZJoZk0Ny2FHaV5Gh2cZCbRaXXB1pYJRDGTTkYJUZM9Rwg2Mw0RBDDGaQEUMYNJhRwxiF4jBGWGUt6WcMLqDmAg0yuBBDDTSUVUcYGDXxhh5psMFGGC_UUCYIKFwxXpF3zAGCE1SA8FWZO4Bgqxs20BAsHsUGG6drX5aZAghHwLjGGy_IYOZxX8UAghFpvGjGG3i88JWsRSGVpQhOPFHWG3J8Mca56ZbFxrlFOEFkGXZ88SIbExkaFmM1wQCng3NtZdhB-Yohx0JZOYTwFyiipcNnXjksxxsLzeDQG0HddiW4eSx0Gxl5yKbDeXWUAWcZrTX3XHTTIakkk9-Ft-NBHL8QVgw5GJrDC0qKGEYLc3hYBhx5iFRGGXS8UNYccWJ0MR3XsdtCHW6o1YJKLpBxKZHnHvSF1zeURcedrtlw1aIdcVRRG2SlvfZXIKXm11Nk6FsGYl9AKbeidLstAr59eygHe1EWWiWHlx1kBlRsSITXvHgitRsMfSgQEA%3D%3D&s=e0a790303d38be7506d74d8408f3170ea5c007578c653c0b9caf5d1de69856cf1674110250
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=3265123153790064268&pid=0&site=28714&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.0153&ecpm=0.01156833&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-6&site_id=0&spot_id=28714&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.003360666578494908&placement_type_id=8&skin_test=&verify_hash=&score=100&ml=&tag_ab=&ttl=&space_id=28714&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsSQgRHGzA0bN1rAwCHDTAsaY8rUaIEjh4yQYnLQoCEmxgwcNGTEGCPC4Rwxacgo1LFFBAwRXRyOcTNUxgwZDsPU4alDxFMbNWI4jVFjxo0cMGDYyGkDR8-MQTGmoVOmzZcYZw3aWSijbAwaDuHUEbOwaw2oD-HAWXjjxkufcCTqmIE1Kw0bDsvgofNlTmKMBvW8cVPmiwwcN-6eHdNm8OIZYG1AfkjGzESHYty4ocu4Bli8Itq4uahj5kjAcHTzjnEj7Oo6cKuioUMHzhwdL16MQROGTh05YqqXcTHmTZsXady8-EFHDsQ1PejMaUEnRos7ZcSMCdOmxXw6XOqErUvnzfUeNrwBgxj57WfDfKWFkcYZbvRQQxBL5GBDgTDURUYac4QhBhudzeGfG2T0EAOFdbXxBlAcSlHGhXKUEVEPUvVHog1tibHiF3YEVcYbX2zGRh4inkWGdxihMQYbaTjHHZFKVbfQFjolJQIcclAVgws3lCFSDbC5pgMMLsBAkQhjBPcFlVSBKWZXDslhh2kxwBBZmW0spCZxDtVRRxoY5VAGDTLdYMYMNdzgGFY0xBCDGWTEEAYNZtQwBqE4jHGDWQ4l2eeVYLmQkwtc0XBWHWFg1MQbeqTBBhthvFBDmCCgcEV4Q94xBwhOUAFCnGHuAMKsbozlKx7CguCmDnG-CkMKIBzh4hpvvCCDmGHFGQMIRqTRohlv4PFCsmGORpUITjxx1htyfDHGuOWexca4RTghZBl2fNEiGxMVeiljOITVJoN01QCaQwfVK4YcC-GAA8H0fmEiGXThYMOYZMjxxkIzOPTGULhR2W0eC-FGRh6z6VBeHWW0WYaXAzHnHHQvGImkkt19l-NBG79waQw5FJrDC0iCGEYLc3BYBhx5tGBGGWXQ8cJZc7iJkcV0VIduC3W4sVYLNrlAhqVCjnvQF1_fcBYddSILUqJxylCDnCKgLcNEayta4dtj5RAVGfaWYdkXTqp9A9t3w91wGBzKod6ThEqpoWIiHGSGVGxIlNe7dirFGwx9KBAQ%26s%3D4e775bec84022db907d1edcec7613050fb038ad05339848c000b1c492472471b1674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756
302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=3265123153790064268&pid=0&site=28714&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.0153&ecpm=0.01156833&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-6&site_id=0&spot_id=28714&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.003360666578494908&placement_type_id=8&skin_test=&verify_hash=&score=100&ml=&tag_ab=&ttl=&space_id=28714&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsSQgRHGzA0bN1rAwCHDTAsaY8rUaIEjh4yQYnLQoCEmxgwcNGTEGCPC4Rwxacgo1LFFBAwRXRyOcTNUxgwZDsPU4alDxFMbNWI4jVFjxo0cMGDYyGkDR8-MQTGmoVOmzZcYZw3aWSijbAwaDuHUEbOwaw2oD-HAWXjjxkufcCTqmIE1Kw0bDsvgofNlTmKMBvW8cVPmiwwcN-6eHdNm8OIZYG1AfkjGzESHYty4ocu4Bli8Itq4uahj5kjAcHTzjnEj7Oo6cKuioUMHzhwdL16MQROGTh05YqqXcTHmTZsXady8-EFHDsQ1PejMaUEnRos7ZcSMCdOmxXw6XOqErUvnzfUeNrwBgxj57WfDfKWFkcYZbvRQQxBL5GBDgTDURUYac4QhBhudzeGfG2T0EAOFdbXxBlAcSlHGhXKUEVEPUvVHog1tibHiF3YEVcYbX2zGRh4inkWGdxihMQYbaTjHHZFKVbfQFjolJQIcclAVgws3lCFSDbC5pgMMLsBAkQhjBPcFlVSBKWZXDslhh2kxwBBZmW0spCZxDtVRRxoY5VAGDTLdYMYMNdzgGFY0xBCDGWTEEAYNZtQwBqE4jHGDWQ4l2eeVYLmQkwtc0XBWHWFg1MQbeqTBBhthvFBDmCCgcEV4Q94xBwhOUAFCnGHuAMKsbozlKx7CguCmDnG-CkMKIBzh4hpvvCCDmGHFGQMIRqTRohlv4PFCsmGORpUITjxx1htyfDHGuOWexca4RTghZBl2fNEiGxMVeiljOITVJoN01QCaQwfVK4YcC-GAA8H0fmEiGXThYMOYZMjxxkIzOPTGULhR2W0eC-FGRh6z6VBeHWW0WYaXAzHnHHQvGImkkt19l-NBG79waQw5FJrDC0iCGEYLc3BYBhx5tGBGGWXQ8cJZc7iJkcV0VIduC3W4sVYLNrlAhqVCjnvQF1_fcBYddSILUqJxylCDnCKgLcNEayta4dtj5RAVGfaWYdkXTqp9A9t3w91wGBzKod6ThEqpoWIiHGSGVGxIlNe7dirFGwx9KBAQ%26s%3D4e775bec84022db907d1edcec7613050fb038ad05339848c000b1c492472471b1674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=3265123153790064268&pid=0&site=28714&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.0153&ecpm=0.01156833&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-6&site_id=0&spot_id=28714&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.003360666578494908&placement_type_id=8&skin_test=&verify_hash=&score=100&ml=&tag_ab=&ttl=&space_id=28714&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsSQgRHGzA0bN1rAwCHDTAsaY8rUaIEjh4yQYnLQoCEmxgwcNGTEGCPC4Rwxacgo1LFFBAwRXRyOcTNUxgwZDsPU4alDxFMbNWI4jVFjxo0cMGDYyGkDR8-MQTGmoVOmzZcYZw3aWSijbAwaDuHUEbOwaw2oD-HAWXjjxkufcCTqmIE1Kw0bDsvgofNlTmKMBvW8cVPmiwwcN-6eHdNm8OIZYG1AfkjGzESHYty4ocu4Bli8Itq4uahj5kjAcHTzjnEj7Oo6cKuioUMHzhwdL16MQROGTh05YqqXcTHmTZsXady8-EFHDsQ1PejMaUEnRos7ZcSMCdOmxXw6XOqErUvnzfUeNrwBgxj57WfDfKWFkcYZbvRQQxBL5GBDgTDURUYac4QhBhudzeGfG2T0EAOFdbXxBlAcSlHGhXKUEVEPUvVHog1tibHiF3YEVcYbX2zGRh4inkWGdxihMQYbaTjHHZFKVbfQFjolJQIcclAVgws3lCFSDbC5pgMMLsBAkQhjBPcFlVSBKWZXDslhh2kxwBBZmW0spCZxDtVRRxoY5VAGDTLdYMYMNdzgGFY0xBCDGWTEEAYNZtQwBqE4jHGDWQ4l2eeVYLmQkwtc0XBWHWFg1MQbeqTBBhthvFBDmCCgcEV4Q94xBwhOUAFCnGHuAMKsbozlKx7CguCmDnG-CkMKIBzh4hpvvCCDmGHFGQMIRqTRohlv4PFCsmGORpUITjxx1htyfDHGuOWexca4RTghZBl2fNEiGxMVeiljOITVJoN01QCaQwfVK4YcC-GAA8H0fmEiGXThYMOYZMjxxkIzOPTGULhR2W0eC-FGRh6z6VBeHWW0WYaXAzHnHHQvGImkkt19l-NBG79waQw5FJrDC0iCGEYLc3BYBhx5tGBGGWXQ8cJZc7iJkcV0VIduC3W4sVYLNrlAhqVCjnvQF1_fcBYddSILUqJxylCDnCKgLcNEayta4dtj5RAVGfaWYdkXTqp9A9t3w91wGBzKod6ThEqpoWIiHGSGVGxIlNe7dirFGwx9KBAQ%26s%3D4e775bec84022db907d1edcec7613050fb038ad05339848c000b1c492472471b1674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:31 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: //r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsSQgRHGzA0bN1rAwCHDTAsaY8rUaIEjh4yQYnLQoCEmxgwcNGTEGCPC4Rwxacgo1LFFBAwRXRyOcTNUxgwZDsPU4alDxFMbNWI4jVFjxo0cMGDYyGkDR8-MQTGmoVOmzZcYZw3aWSijbAwaDuHUEbOwaw2oD-HAWXjjxkufcCTqmIE1Kw0bDsvgofNlTmKMBvW8cVPmiwwcN-6eHdNm8OIZYG1AfkjGzESHYty4ocu4Bli8Itq4uahj5kjAcHTzjnEj7Oo6cKuioUMHzhwdL16MQROGTh05YqqXcTHmTZsXady8-EFHDsQ1PejMaUEnRos7ZcSMCdOmxXw6XOqErUvnzfUeNrwBgxj57WfDfKWFkcYZbvRQQxBL5GBDgTDURUYac4QhBhudzeGfG2T0EAOFdbXxBlAcSlHGhXKUEVEPUvVHog1tibHiF3YEVcYbX2zGRh4inkWGdxihMQYbaTjHHZFKVbfQFjolJQIcclAVgws3lCFSDbC5pgMMLsBAkQhjBPcFlVSBKWZXDslhh2kxwBBZmW0spCZxDtVRRxoY5VAGDTLdYMYMNdzgGFY0xBCDGWTEEAYNZtQwBqE4jHGDWQ4l2eeVYLmQkwtc0XBWHWFg1MQbeqTBBhthvFBDmCCgcEV4Q94xBwhOUAFCnGHuAMKsbozlKx7CguCmDnG-CkMKIBzh4hpvvCCDmGHFGQMIRqTRohlv4PFCsmGORpUITjxx1htyfDHGuOWexca4RTghZBl2fNEiGxMVeiljOITVJoN01QCaQwfVK4YcC-GAA8H0fmEiGXThYMOYZMjxxkIzOPTGULhR2W0eC-FGRh6z6VBeHWW0WYaXAzHnHHQvGImkkt19l-NBG79waQw5FJrDC0iCGEYLc3BYBhx5tGBGGWXQ8cJZc7iJkcV0VIduC3W4sVYLNrlAhqVCjnvQF1_fcBYddSILUqJxylCDnCKgLcNEayta4dtj5RAVGfaWYdkXTqp9A9t3w91wGBzKod6ThEqpoWIiHGSGVGxIlNe7dirFGwx9KBAQ&s=4e775bec84022db907d1edcec7613050fb038ad05339848c000b1c492472471b1674110250
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=8739324462772499828&pid=0&site=28724&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.01445&ecpm=0.010925645&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-8&site_id=0&spot_id=28724&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.002727152493056474&placement_type_id=10&skin_test=&verify_hash=&score=99.94672409938343&ml=&tag_ab=&ttl=&space_id=28724&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsjEGCOmjBkZNlqYKWMjRwsaMHCUaRHmxpgZLcTQKBMjjJmbZGzcmCHC4Rwxacgo1LFFBAwRXRyOcTNUxgwZDsPUGYMRx84cT2nQsCHjxg0ZNHLkwCEDR08RQMlgTEOnTJsvMc4atLMQJI4YNBzCqSNmYY0ZNaA-hANnodeuPuFI1EEjxo0aX204LIOHzpc5ijEa1PPGTZkvZb_SODumTWEdM2bkgGFD8kMyZiY6FOPGTd0ZNmqsziuijZuLjFGS1esbuGMYrB3WiatjIB06cOboePFiDJowdOrIEYO9jIsxb9q8SOPmxQ86ciCu6UFnTgs6MVrcKSNmTJg2LezT4VIHOUg6b2jXgw1vwCAGf_7ZYJ9pYaRxhhs91BDEEjnYgCAMIJGRxhxhiMHGZ3ME6AYZPcRwIUhtvAHUh1KUoaEcZUTUg1QAnmiDWx2R8YUdQZXxxhedsZFHiWeRER5GaIzBRhrRfXekUtgttIUMMSQlAhxyUKVDDC7csBIMNcwWmw4wuAADRSKMAcdbWGpZ5plahSmCHHacFoOcMa650JuOKVdHGhjlUEZYNNxgBmCP4ZVbYzGYoVEYNJhRw0s14DDGDWY5xGSgXK7mAg0yuHDnaMqFgVETb-iRBhtshPFCDWaCgMIV5Bl5xxwgOEEFCDG8uQMItLphAw2_4jHsr3RuCaaZKYBwRIxrvPGCDGci12sMIBiRBoxmvIHHC73CepRSWorgxBNnvSHHF2OUe-5ZbJRbhBNFlmHHFzCyMRFkmOKGA3IOyfFgXZU2lJG9X4ghx0I44ODQQfemqJYOZdmAJhlyvLHQDA69MRRvWHqbx0K8kZGHbTqgV0cZAXuE5HPRTfdCkks2CZ54PB7k8QuYxpADZDm8sOSIYbQwx4dlwJGHSGWUQccLZ81BJ0YZ04Gdui3U4QZbLZTkAhmXFlnuQV-AfcNZdLQxkU6MYlgDDBW1IcPaN7Qtw9s6GWwQvmVg9kWUW7IdQ693wy0CwmF8KEd7UgJmZYeLHWyGVGxIpFe8eyoFHAx9KBAQ%26s%3D13bd1c7aa897de2adadd30b5ca6e077324abbe3acdca38b20d86d1afc939f91d1674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756
302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=8739324462772499828&pid=0&site=28724&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.01445&ecpm=0.010925645&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-8&site_id=0&spot_id=28724&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.002727152493056474&placement_type_id=10&skin_test=&verify_hash=&score=99.94672409938343&ml=&tag_ab=&ttl=&space_id=28724&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsjEGCOmjBkZNlqYKWMjRwsaMHCUaRHmxpgZLcTQKBMjjJmbZGzcmCHC4Rwxacgo1LFFBAwRXRyOcTNUxgwZDsPUGYMRx84cT2nQsCHjxg0ZNHLkwCEDR08RQMlgTEOnTJsvMc4atLMQJI4YNBzCqSNmYY0ZNaA-hANnodeuPuFI1EEjxo0aX204LIOHzpc5ijEa1PPGTZkvZb_SODumTWEdM2bkgGFD8kMyZiY6FOPGTd0ZNmqsziuijZuLjFGS1esbuGMYrB3WiatjIB06cOboePFiDJowdOrIEYO9jIsxb9q8SOPmxQ86ciCu6UFnTgs6MVrcKSNmTJg2LezT4VIHOUg6b2jXgw1vwCAGf_7ZYJ9pYaRxhhs91BDEEjnYgCAMIJGRxhxhiMHGZ3ME6AYZPcRwIUhtvAHUh1KUoaEcZUTUg1QAnmiDWx2R8YUdQZXxxhedsZFHiWeRER5GaIzBRhrRfXekUtgttIUMMSQlAhxyUKVDDC7csBIMNcwWmw4wuAADRSKMAcdbWGpZ5plahSmCHHacFoOcMa650JuOKVdHGhjlUEZYNNxgBmCP4ZVbYzGYoVEYNJhRw0s14DDGDWY5xGSgXK7mAg0yuHDnaMqFgVETb-iRBhtshPFCDWaCgMIV5Bl5xxwgOEEFCDG8uQMItLphAw2_4jHsr3RuCaaZKYBwRIxrvPGCDGci12sMIBiRBoxmvIHHC73CepRSWorgxBNnvSHHF2OUe-5ZbJRbhBNFlmHHFzCyMRFkmOKGA3IOyfFgXZU2lJG9X4ghx0I44ODQQfemqJYOZdmAJhlyvLHQDA69MRRvWHqbx0K8kZGHbTqgV0cZAXuE5HPRTfdCkks2CZ54PB7k8QuYxpADZDm8sOSIYbQwx4dlwJGHSGWUQccLZ81BJ0YZ04Gdui3U4QZbLZTkAhmXFlnuQV-AfcNZdLQxkU6MYlgDDBW1IcPaN7Qtw9s6GWwQvmVg9kWUW7IdQ693wy0CwmF8KEd7UgJmZYeLHWyGVGxIpFe8eyoFHAx9KBAQ%26s%3D13bd1c7aa897de2adadd30b5ca6e077324abbe3acdca38b20d86d1afc939f91d1674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=8739324462772499828&pid=0&site=28724&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.01445&ecpm=0.010925645&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-8&site_id=0&spot_id=28724&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.002727152493056474&placement_type_id=10&skin_test=&verify_hash=&score=99.94672409938343&ml=&tag_ab=&ttl=&space_id=28724&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsjEGCOmjBkZNlqYKWMjRwsaMHCUaRHmxpgZLcTQKBMjjJmbZGzcmCHC4Rwxacgo1LFFBAwRXRyOcTNUxgwZDsPUGYMRx84cT2nQsCHjxg0ZNHLkwCEDR08RQMlgTEOnTJsvMc4atLMQJI4YNBzCqSNmYY0ZNaA-hANnodeuPuFI1EEjxo0aX204LIOHzpc5ijEa1PPGTZkvZb_SODumTWEdM2bkgGFD8kMyZiY6FOPGTd0ZNmqsziuijZuLjFGS1esbuGMYrB3WiatjIB06cOboePFiDJowdOrIEYO9jIsxb9q8SOPmxQ86ciCu6UFnTgs6MVrcKSNmTJg2LezT4VIHOUg6b2jXgw1vwCAGf_7ZYJ9pYaRxhhs91BDEEjnYgCAMIJGRxhxhiMHGZ3ME6AYZPcRwIUhtvAHUh1KUoaEcZUTUg1QAnmiDWx2R8YUdQZXxxhedsZFHiWeRER5GaIzBRhrRfXekUtgttIUMMSQlAhxyUKVDDC7csBIMNcwWmw4wuAADRSKMAcdbWGpZ5plahSmCHHacFoOcMa650JuOKVdHGhjlUEZYNNxgBmCP4ZVbYzGYoVEYNJhRw0s14DDGDWY5xGSgXK7mAg0yuHDnaMqFgVETb-iRBhtshPFCDWaCgMIV5Bl5xxwgOEEFCDG8uQMItLphAw2_4jHsr3RuCaaZKYBwRIxrvPGCDGci12sMIBiRBoxmvIHHC73CepRSWorgxBNnvSHHF2OUe-5ZbJRbhBNFlmHHFzCyMRFkmOKGA3IOyfFgXZU2lJG9X4ghx0I44ODQQfemqJYOZdmAJhlyvLHQDA69MRRvWHqbx0K8kZGHbTqgV0cZAXuE5HPRTfdCkks2CZ54PB7k8QuYxpADZDm8sOSIYbQwx4dlwJGHSGWUQccLZ81BJ0YZ04Gdui3U4QZbLZTkAhmXFlnuQV-AfcNZdLQxkU6MYlgDDBW1IcPaN7Qtw9s6GWwQvmVg9kWUW7IdQ693wy0CwmF8KEd7UgJmZYeLHWyGVGxIpFe8eyoFHAx9KBAQ%26s%3D13bd1c7aa897de2adadd30b5ca6e077324abbe3acdca38b20d86d1afc939f91d1674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:31 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: //r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsjEGCOmjBkZNlqYKWMjRwsaMHCUaRHmxpgZLcTQKBMjjJmbZGzcmCHC4Rwxacgo1LFFBAwRXRyOcTNUxgwZDsPUGYMRx84cT2nQsCHjxg0ZNHLkwCEDR08RQMlgTEOnTJsvMc4atLMQJI4YNBzCqSNmYY0ZNaA-hANnodeuPuFI1EEjxo0aX204LIOHzpc5ijEa1PPGTZkvZb_SODumTWEdM2bkgGFD8kMyZiY6FOPGTd0ZNmqsziuijZuLjFGS1esbuGMYrB3WiatjIB06cOboePFiDJowdOrIEYO9jIsxb9q8SOPmxQ86ciCu6UFnTgs6MVrcKSNmTJg2LezT4VIHOUg6b2jXgw1vwCAGf_7ZYJ9pYaRxhhs91BDEEjnYgCAMIJGRxhxhiMHGZ3ME6AYZPcRwIUhtvAHUh1KUoaEcZUTUg1QAnmiDWx2R8YUdQZXxxhedsZFHiWeRER5GaIzBRhrRfXekUtgttIUMMSQlAhxyUKVDDC7csBIMNcwWmw4wuAADRSKMAcdbWGpZ5plahSmCHHacFoOcMa650JuOKVdHGhjlUEZYNNxgBmCP4ZVbYzGYoVEYNJhRw0s14DDGDWY5xGSgXK7mAg0yuHDnaMqFgVETb-iRBhtshPFCDWaCgMIV5Bl5xxwgOEEFCDG8uQMItLphAw2_4jHsr3RuCaaZKYBwRIxrvPGCDGci12sMIBiRBoxmvIHHC73CepRSWorgxBNnvSHHF2OUe-5ZbJRbhBNFlmHHFzCyMRFkmOKGA3IOyfFgXZU2lJG9X4ghx0I44ODQQfemqJYOZdmAJhlyvLHQDA69MRRvWHqbx0K8kZGHbTqgV0cZAXuE5HPRTfdCkks2CZ54PB7k8QuYxpADZDm8sOSIYbQwx4dlwJGHSGWUQccLZ81BJ0YZ04Gdui3U4QZbLZTkAhmXFlnuQV-AfcNZdLQxkU6MYlgDDBW1IcPaN7Qtw9s6GWwQvmVg9kWUW7IdQ693wy0CwmF8KEd7UgJmZYeLHWyGVGxIpFe8eyoFHAx9KBAQ&s=13bd1c7aa897de2adadd30b5ca6e077324abbe3acdca38b20d86d1afc939f91d1674110250
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=28722&source=0&idzone=2922186&w=728&h=90&mo=&ve=&site_id=28722&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&spot_id=28722&p=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&katds_labels=&btype=0&score=99.97679438864843&bf=0.000892
302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=28722&source=0&idzone=2922186&w=728&h=90&mo=&ve=&site_id=28722&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&spot_id=28722&p=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&katds_labels=&btype=0&score=99.97679438864843&bf=0.000892
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=28722&source=0&idzone=2922186&w=728&h=90&mo=&ve=&site_id=28722&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&spot_id=28722&p=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&katds_labels=&btype=0&score=99.97679438864843&bf=0.000892 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Cookie: 952.0=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://tsyndicate.com/iframes2/488d518d8b8a4f4e9d4c4a031bfe0055.html?subid=0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: *
set-cookie: 912.0=1; expires=Fri, 20 Jan 2023 06:37:30 GMT; path=/; secure; SameSite=None
1624.0=1; expires=Fri, 20 Jan 2023 06:37:30 GMT; path=/; secure; SameSite=None
1625.0=1; expires=Fri, 20 Jan 2023 06:37:30 GMT; path=/; secure; SameSite=None
1629.0=1; expires=Fri, 20 Jan 2023 06:37:30 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
btds.zog.link/in/dl/?spot_id=84749&screen_resolution=1280x1024&dt=1674110250127&ad_sub=0&mo=&ve=&katds_labels=&p=https%3A//hclips.com/videos/7819579/linda-sleepy-feet/&utm1=&utm2=&utm3=&utm4=&ad_tags=Linda%252CSleepy%252CFeet%252CVideo%252CFree%252CPorn%252CVideos%252Chclips.com%252CWatch%252CLinda%252CSleepy%252CFeet%252Con%252CHClips.com%252Cthe%252Cbest%252Chomemade%252Cporn%252Csite%252CHClips.com%252Cis%252Cfree%252Csite%252Cwith%252Chot%252CFetish%252Csex%252Cvideos%252CBest%252CAmateur%252CXXX%252Cmovies%252Cyou%27ll%252Cfind%252Con%252CHClips.com.&title=Linda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&katds_rcc=2
200 OK 381 B URL HTTP/2 btds.zog.link/in/dl/?spot_id=84749&screen_resolution=1280x1024&dt=1674110250127&ad_sub=0&mo=&ve=&katds_labels=&p=https%3A//hclips.com/videos/7819579/linda-sleepy-feet/&utm1=&utm2=&utm3=&utm4=&ad_tags=Linda%252CSleepy%252CFeet%252CVideo%252CFree%252CPorn%252CVideos%252Chclips.com%252CWatch%252CLinda%252CSleepy%252CFeet%252Con%252CHClips.com%252Cthe%252Cbest%252Chomemade%252Cporn%252Csite%252CHClips.com%252Cis%252Cfree%252Csite%252Cwith%252Chot%252CFetish%252Csex%252Cvideos%252CBest%252CAmateur%252CXXX%252Cmovies%252Cyou%27ll%252Cfind%252Con%252CHClips.com.&title=Linda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&katds_rcc=2
IP
File type JSON data\012- , ASCII text, with very long lines (1146), with no line terminators
Hash 4dccf5196342e941601c65c2cfa77f5c
5600db5bd09c5cd616d4134b23aa88989360707b
16f542e9b30e0ed6045e6179f54453b804ca4b5d19a13d00b6b89c1f73b0a5ef
GET /in/dl/?spot_id=84749&screen_resolution=1280x1024&dt=1674110250127&ad_sub=0&mo=&ve=&katds_labels=&p=https%3A//hclips.com/videos/7819579/linda-sleepy-feet/&utm1=&utm2=&utm3=&utm4=&ad_tags=Linda%252CSleepy%252CFeet%252CVideo%252CFree%252CPorn%252CVideos%252Chclips.com%252CWatch%252CLinda%252CSleepy%252CFeet%252Con%252CHClips.com%252Cthe%252Cbest%252Chomemade%252Cporn%252Csite%252CHClips.com%252Cis%252Cfree%252Csite%252Cwith%252Chot%252CFetish%252Csex%252Cvideos%252CBest%252CAmateur%252CXXX%252Cmovies%252Cyou%27ll%252Cfind%252Con%252CHClips.com.&title=Linda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&katds_rcc=2 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hclips.com/
Origin: https://hclips.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: 953.122502=1; expires=Fri, 20 Jan 2023 06:37:30 GMT; path=/; secure; SameSite=None
953.106970=1; expires=Fri, 20 Jan 2023 06:37:30 GMT; path=/; secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=8968332659415125062&pid=0&site=28716&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.01445&ecpm=0.010925645&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-6&site_id=0&spot_id=28716&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.004721597672265573&placement_type_id=1&skin_test=&verify_hash=&score=99.97303146998152&ml=&tag_ab=&ttl=&space_id=28716&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsiIuSGmxkEYLXLMmFGjBQ0zZHKEpCFDjMkcMGbIsAHjRk0bY0Q4nCMmDRmFOraIgCGii8MxboDKkOkwTJ2cOkTgyGEDx8iZNXLQiFEjhowaMGzI0CmiJxmMaeiUafMlBlmDdhbOxBGDhkM4dcQsrEFSRlM4cBbeuCGjoYg5cCTq2HqDRg0ZOByWwUPnC2LFD8noeeOmzBfIN2LYIDumTWAdI2HasNGUjJmJDsW4cSN3ho2sMOyKaOPm4mIaMHD4FQGHt-8YNsM6rOM2Kho6dODM0fHixRg0YejUkSMmexkXY960eZHGzYsfdORAXNODzpwWdGK0uFNGzJgwbVrcp8OlDgwYM9HxxnY92PAGDGL0999M95kWRhpnuNFDDUEsQZWCANpARhpzhCEGG57NMaAbZPQQA4YztfFGTyBKUcaGcpQRUQ9OCYiiDWuJ8eIXdvhUxhtfcMZGHiaSRYZ4GKExBhtpSAcekkdlt9AWMsRgFHFyQBWDCzeU0QIMNcT2mg4wuAADRSKMUdwXcGS5UJln0uCYQ3LYcRpXkqnZxptmIrdcHWlglEMZNGh1gxkk3dAVDbdtFQNKMYRxUg1jkITDGDfgQFaTgm4JkwssucAVDWTVEQZGTbyhRxpssBHGCzWYCQIKV5R35B1zgOAEFSDEAOcOINTqhg00AIsHscDWqYOvscKQAghHyLjGGy_IcOZ_vsYAghFpxGjGG3i8wKyZpEElghNPkPWGHF-MYS66ZLFhbhFOGFmGHV_EyMZENQxmVVX_0RmhXDXgYNhB-Iohx0I4RJbRvV-oeJYOkNmAJhlyvLHQDA69AZRubYKbx0K6kZEHbTqkV0cZdJYx5kDQSUfdC0oy6WR44_V4kMcvZBpDDv3m8AKTJIbRwhwglgFHHi2YUUYZdLxA1hx1YpQxHdmt20IdbqT15QwukIGpkeYe9IXYN5BFx57L2tBYDL5-BUNFbYzV9ttxg1WVbgblWwZiX0h5t6MAgiUZvmGAKId7U5J0pYeYHWSGU2xIdJe8bx7lGwx9KBAQ%26s%3D91c6d2a740329084d1557a88c229a689e2bbf4ea47183f4e0cf23081f85241931674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756
302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=8968332659415125062&pid=0&site=28716&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.01445&ecpm=0.010925645&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-6&site_id=0&spot_id=28716&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.004721597672265573&placement_type_id=1&skin_test=&verify_hash=&score=99.97303146998152&ml=&tag_ab=&ttl=&space_id=28716&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsiIuSGmxkEYLXLMmFGjBQ0zZHKEpCFDjMkcMGbIsAHjRk0bY0Q4nCMmDRmFOraIgCGii8MxboDKkOkwTJ2cOkTgyGEDx8iZNXLQiFEjhowaMGzI0CmiJxmMaeiUafMlBlmDdhbOxBGDhkM4dcQsrEFSRlM4cBbeuCGjoYg5cCTq2HqDRg0ZOByWwUPnC2LFD8noeeOmzBfIN2LYIDumTWAdI2HasNGUjJmJDsW4cSN3ho2sMOyKaOPm4mIaMHD4FQGHt-8YNsM6rOM2Kho6dODM0fHixRg0YejUkSMmexkXY960eZHGzYsfdORAXNODzpwWdGK0uFNGzJgwbVrcp8OlDgwYM9HxxnY92PAGDGL0999M95kWRhpnuNFDDUEsQZWCANpARhpzhCEGG57NMaAbZPQQA4YztfFGTyBKUcaGcpQRUQ9OCYiiDWuJ8eIXdvhUxhtfcMZGHiaSRYZ4GKExBhtpSAcekkdlt9AWMsRgFHFyQBWDCzeU0QIMNcT2mg4wuAADRSKMUdwXcGS5UJln0uCYQ3LYcRpXkqnZxptmIrdcHWlglEMZNGh1gxkk3dAVDbdtFQNKMYRxUg1jkITDGDfgQFaTgm4JkwssucAVDWTVEQZGTbyhRxpssBHGCzWYCQIKV5R35B1zgOAEFSDEAOcOINTqhg00AIsHscDWqYOvscKQAghHyLjGGy_IcOZ_vsYAghFpxGjGG3i8wKyZpEElghNPkPWGHF-MYS66ZLFhbhFOGFmGHV_EyMZENQxmVVX_0RmhXDXgYNhB-Iohx0I4RJbRvV-oeJYOkNmAJhlyvLHQDA69AZRubYKbx0K6kZEHbTqkV0cZdJYx5kDQSUfdC0oy6WR44_V4kMcvZBpDDv3m8AKTJIbRwhwglgFHHi2YUUYZdLxA1hx1YpQxHdmt20IdbqT15QwukIGpkeYe9IXYN5BFx57L2tBYDL5-BUNFbYzV9ttxg1WVbgblWwZiX0h5t6MAgiUZvmGAKId7U5J0pYeYHWSGU2xIdJe8bx7lGwx9KBAQ%26s%3D91c6d2a740329084d1557a88c229a689e2bbf4ea47183f4e0cf23081f85241931674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=8968332659415125062&pid=0&site=28716&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10272&price=0&is_cpm=1&cpm=0.01445&ecpm=0.010925645&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=hclips.com&hostname=auc-banner-hz-6&site_id=0&spot_id=28716&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25-3&min_cpm=0.004721597672265573&placement_type_id=1&skin_test=&verify_hash=&score=99.97303146998152&ml=&tag_ab=&ttl=&space_id=28716&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25-3&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsiIuSGmxkEYLXLMmFGjBQ0zZHKEpCFDjMkcMGbIsAHjRk0bY0Q4nCMmDRmFOraIgCGii8MxboDKkOkwTJ2cOkTgyGEDx8iZNXLQiFEjhowaMGzI0CmiJxmMaeiUafMlBlmDdhbOxBGDhkM4dcQsrEFSRlM4cBbeuCGjoYg5cCTq2HqDRg0ZOByWwUPnC2LFD8noeeOmzBfIN2LYIDumTWAdI2HasNGUjJmJDsW4cSN3ho2sMOyKaOPm4mIaMHD4FQGHt-8YNsM6rOM2Kho6dODM0fHixRg0YejUkSMmexkXY960eZHGzYsfdORAXNODzpwWdGK0uFNGzJgwbVrcp8OlDgwYM9HxxnY92PAGDGL0999M95kWRhpnuNFDDUEsQZWCANpARhpzhCEGG57NMaAbZPQQA4YztfFGTyBKUcaGcpQRUQ9OCYiiDWuJ8eIXdvhUxhtfcMZGHiaSRYZ4GKExBhtpSAcekkdlt9AWMsRgFHFyQBWDCzeU0QIMNcT2mg4wuAADRSKMUdwXcGS5UJln0uCYQ3LYcRpXkqnZxptmIrdcHWlglEMZNGh1gxkk3dAVDbdtFQNKMYRxUg1jkITDGDfgQFaTgm4JkwssucAVDWTVEQZGTbyhRxpssBHGCzWYCQIKV5R35B1zgOAEFSDEAOcOINTqhg00AIsHscDWqYOvscKQAghHyLjGGy_IcOZ_vsYAghFpxGjGG3i8wKyZpEElghNPkPWGHF-MYS66ZLFhbhFOGFmGHV_EyMZENQxmVVX_0RmhXDXgYNhB-Iohx0I4RJbRvV-oeJYOkNmAJhlyvLHQDA69AZRubYKbx0K6kZEHbTqkV0cZdJYx5kDQSUfdC0oy6WR44_V4kMcvZBpDDv3m8AKTJIbRwhwglgFHHi2YUUYZdLxA1hx1YpQxHdmt20IdbqT15QwukIGpkeYe9IXYN5BFx57L2tBYDL5-BUNFbYzV9ttxg1WVbgblWwZiX0h5t6MAgiUZvmGAKId7U5J0pYeYHWSGU2xIdJe8bx7lGwx9KBAQ%26s%3D91c6d2a740329084d1557a88c229a689e2bbf4ea47183f4e0cf23081f85241931674110250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight%2CFetish%2CAmateur%2CMILF%2CBlonde%2CFoot%20Fetish%2CHD&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:31 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: //r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsiIuSGmxkEYLXLMmFGjBQ0zZHKEpCFDjMkcMGbIsAHjRk0bY0Q4nCMmDRmFOraIgCGii8MxboDKkOkwTJ2cOkTgyGEDx8iZNXLQiFEjhowaMGzI0CmiJxmMaeiUafMlBlmDdhbOxBGDhkM4dcQsrEFSRlM4cBbeuCGjoYg5cCTq2HqDRg0ZOByWwUPnC2LFD8noeeOmzBfIN2LYIDumTWAdI2HasNGUjJmJDsW4cSN3ho2sMOyKaOPm4mIaMHD4FQGHt-8YNsM6rOM2Kho6dODM0fHixRg0YejUkSMmexkXY960eZHGzYsfdORAXNODzpwWdGK0uFNGzJgwbVrcp8OlDgwYM9HxxnY92PAGDGL0999M95kWRhpnuNFDDUEsQZWCANpARhpzhCEGG57NMaAbZPQQA4YztfFGTyBKUcaGcpQRUQ9OCYiiDWuJ8eIXdvhUxhtfcMZGHiaSRYZ4GKExBhtpSAcekkdlt9AWMsRgFHFyQBWDCzeU0QIMNcT2mg4wuAADRSKMUdwXcGS5UJln0uCYQ3LYcRpXkqnZxptmIrdcHWlglEMZNGh1gxkk3dAVDbdtFQNKMYRxUg1jkITDGDfgQFaTgm4JkwssucAVDWTVEQZGTbyhRxpssBHGCzWYCQIKV5R35B1zgOAEFSDEAOcOINTqhg00AIsHscDWqYOvscKQAghHyLjGGy_IcOZ_vsYAghFpxGjGG3i8wKyZpEElghNPkPWGHF-MYS66ZLFhbhFOGFmGHV_EyMZENQxmVVX_0RmhXDXgYNhB-Iohx0I4RJbRvV-oeJYOkNmAJhlyvLHQDA69AZRubYKbx0K6kZEHbTqkV0cZdJYx5kDQSUfdC0oy6WR44_V4kMcvZBpDDv3m8AKTJIbRwhwglgFHHi2YUUYZdLxA1hx1YpQxHdmt20IdbqT15QwukIGpkeYe9IXYN5BFx57L2tBYDL5-BUNFbYzV9ttxg1WVbgblWwZiX0h5t6MAgiUZvmGAKId7U5J0pYeYHWSGU2xIdJe8bx7lGwx9KBAQ&s=91c6d2a740329084d1557a88c229a689e2bbf4ea47183f4e0cf23081f85241931674110250
X-Firefox-Spdy: h2
r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImLAmEEDx5gbMFqMoTGmRgsaYsyIaZGjxo2VM8zcKEPjBkocMsrMEOFwjpg0ZBTq2CIChoguDse4ESpjhgyHYeqMwYhjRg0ZMmzIqBEjxowcM2LkaNqSp4ifZDCmoVOmzZcYZg3aWZgVRwwaDuHUEbOwhtWnD-HAWXjjhoyGIubAkahjho0aXGnYcFgGD50vihk_JKPnjZsyX2TguBGjhtkxbQY3_grDxuTNZiY6FOPGDV3HNXLAwCuijZuLOmjQgIEzr2_gMUC2dlgHro6BdOjAmaPjxYsxaMLQqSNHjPYyLsa8afMijZsXP-jIgbimB505LejEaHGnjJgxYdqI1M6lDgwYWdHxBnc92PAGDGL0919W-KUWRhpnuNFDDUEskYMNCgJoAxlpzBGGGGyANseAbpDRQwwZZtXGGz-FKEUZHMpRRkQ9RCVgija0JQaMX9gBVBlvfOEZG3mcaBYZ42GExhhspDFdeEkmpd1CW8gQA1IiwCHHVDrE4MJMLcBQw2yx6QCDCzBQJMIYcLilJZdnpumXQ3LYoZpGlLHZxkJxJsdcHWlglANNOdRkhlU3RPYYDV2ZQUYMYdBgRg1jWOXRDTiY5aSgXurmAg0yuFAaDWbVEQZGTbyhRxpssBHGCzWgCQIKV5iH5B1zgOAEFSBohOYOINTqhg00AIsHscDW2aWYaKYAwhEzrvHGCzKk-Z9GMYBgRBoymvEGHi9oFKtRSXEpghNPmPWGHF-MYS66ZrFhbhFOHFmGHV_IyMZELmHqGA7_0RkhXTWM5tBB-Iohx0I44HDwvV-smJYOotmgJhlyvLHQDA69IRRvWn6bx0K8kZGHbTqoV0cZdJZRJnTSUWfdkk0-KR55Ph7k8QuYiuVSDi80WWIYLcwRYhlw5NGCGWWUQccLZs1RJ0YZ06Hdui3U4cZaYd7gAhkfHWnuQV-AfYNZdOzZpQ02dQVgDTBU1IYME7HNqEZbtVYTVGTkW4ZiX0y5dtt4w00ZvmGEKMd7VFqF5YeaHWRGVGxIlJe8fCYFHAx9KBAQ&s=3bbc6562072180e005bd7b3fb7402f9b6cc54ed6d799f37ca18811086ff080cb1674110250
200 OK 2.4 kB URL HTTP/2 r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImLAmEEDx5gbMFqMoTGmRgsaYsyIaZGjxo2VM8zcKEPjBkocMsrMEOFwjpg0ZBTq2CIChoguDse4ESpjhgyHYeqMwYhjRg0ZMmzIqBEjxowcM2LkaNqSp4ifZDCmoVOmzZcYZg3aWZgVRwwaDuHUEbOwhtWnD-HAWXjjhoyGIubAkahjho0aXGnYcFgGD50vihk_JKPnjZsyX2TguBGjhtkxbQY3_grDxuTNZiY6FOPGDV3HNXLAwCuijZuLOmjQgIEzr2_gMUC2dlgHro6BdOjAmaPjxYsxaMLQqSNHjPYyLsa8afMijZsXP-jIgbimB505LejEaHGnjJgxYdqI1M6lDgwYWdHxBnc92PAGDGL0919W-KUWRhpnuNFDDUEskYMNCgJoAxlpzBGGGGyANseAbpDRQwwZZtXGGz-FKEUZHMpRRkQ9RCVgija0JQaMX9gBVBlvfOEZG3mcaBYZ42GExhhspDFdeEkmpd1CW8gQA1IiwCHHVDrE4MJMLcBQw2yx6QCDCzBQJMIYcLilJZdnpumXQ3LYoZpGlLHZxkJxJsdcHWlglANNOdRkhlU3RPYYDV2ZQUYMYdBgRg1jWOXRDTiY5aSgXurmAg0yuFAaDWbVEQZGTbyhRxpssBHGCzWgCQIKV5iH5B1zgOAEFSBohOYOINTqhg00AIsHscDW2aWYaKYAwhEzrvHGCzKk-Z9GMYBgRBoymvEGHi9oFKtRSXEpghNPmPWGHF-MYS66ZrFhbhFOHFmGHV_IyMZELmHqGA7_0RkhXTWM5tBB-Iohx0I44HDwvV-smJYOotmgJhlyvLHQDA69IRRvWn6bx0K8kZGHbTqoV0cZdJZRJnTSUWfdkk0-KR55Ph7k8QuYiuVSDi80WWIYLcwRYhlw5NGCGWWUQccLZs1RJ0YZ06Hdui3U4cZaYd7gAhkfHWnuQV-AfYNZdOzZpQ02dQVgDTBU1IYME7HNqEZbtVYTVGTkW4ZiX0y5dtt4w00ZvmGEKMd7VFqF5YeaHWRGVGxIlJe8fCYFHAx9KBAQ&s=3bbc6562072180e005bd7b3fb7402f9b6cc54ed6d799f37ca18811086ff080cb1674110250
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3744)
Hash 0f258aab9fdc6fad34e09914dfeaffb7
b8d1966e2442b1e650eabcad2a5858570110926b
307998651a8fe0a1e679532c3191fd3abb4fb44ca4edee4247778bd0255223b1
GET /api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImLAmEEDx5gbMFqMoTGmRgsaYsyIaZGjxo2VM8zcKEPjBkocMsrMEOFwjpg0ZBTq2CIChoguDse4ESpjhgyHYeqMwYhjRg0ZMmzIqBEjxowcM2LkaNqSp4ifZDCmoVOmzZcYZg3aWZgVRwwaDuHUEbOwhtWnD-HAWXjjhoyGIubAkahjho0aXGnYcFgGD50vihk_JKPnjZsyX2TguBGjhtkxbQY3_grDxuTNZiY6FOPGDV3HNXLAwCuijZuLOmjQgIEzr2_gMUC2dlgHro6BdOjAmaPjxYsxaMLQqSNHjPYyLsa8afMijZsXP-jIgbimB505LejEaHGnjJgxYdqI1M6lDgwYWdHxBnc92PAGDGL0919W-KUWRhpnuNFDDUEskYMNCgJoAxlpzBGGGGyANseAbpDRQwwZZtXGGz-FKEUZHMpRRkQ9RCVgija0JQaMX9gBVBlvfOEZG3mcaBYZ42GExhhspDFdeEkmpd1CW8gQA1IiwCHHVDrE4MJMLcBQw2yx6QCDCzBQJMIYcLilJZdnpumXQ3LYoZpGlLHZxkJxJsdcHWlglANNOdRkhlU3RPYYDV2ZQUYMYdBgRg1jWOXRDTiY5aSgXurmAg0yuFAaDWbVEQZGTbyhRxpssBHGCzWgCQIKV5iH5B1zgOAEFSBohOYOINTqhg00AIsHscDW2aWYaKYAwhEzrvHGCzKk-Z9GMYBgRBoymvEGHi9oFKtRSXEpghNPmPWGHF-MYS66ZrFhbhFOHFmGHV_IyMZELmHqGA7_0RkhXTWM5tBB-Iohx0I44HDwvV-smJYOotmgJhlyvLHQDA69IRRvWn6bx0K8kZGHbTqoV0cZdJZRJnTSUWfdkk0-KR55Ph7k8QuYiuVSDi80WWIYLcwRYhlw5NGCGWWUQccLZs1RJ0YZ06Hdui3U4cZaYd7gAhkfHWnuQV-AfYNZdOzZpQ02dQVgDTBU1IYME7HNqEZbtVYTVGTkW4ZiX0y5dtt4w00ZvmGEKMd7VFqF5YeaHWRGVGxIlJe8fCYFHAx9KBAQ&s=3bbc6562072180e005bd7b3fb7402f9b6cc54ed6d799f37ca18811086ff080cb1674110250 HTTP/1.1
Host: r-eu.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html; charset=utf-8
content-length: 2441
vary: *
content-encoding: gzip
pragma: no-cache
expires: 0
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: 3045f550c741908c
set-cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78; expires=Wed, 19 Jul 2023 06:37:31 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
200 OK 4.4 kB URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3736)
Hash 36555c2dfd26d947a757574bc728151c
7b6256075d411a05f733105a4ef131aeb156d7e5
0f079f54dcd5fa35faba2e1db335f90ba28a9b85940999dabb17894b4882713f
GET /get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxNDk2LCJzcGFjZWlkIjoyODcyNSwidHlwZSI6InBvcCIsImlkem9uZSI6NDQ2MTMwNCwiYWRfdGFncyI6IlN0cmFpZ2h0JTJDRmV0aXNoJTJDQW1hdGV1ciUyQ01JTEYlMkNCbG9uZGUlMkNGb290JTIwRmV0aXNoJTJDSEQiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6Mjg3MjUsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjEwLCJzdHJhdGFnZW0iOm51bGwsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1Nn0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH19XSwic2l0ZSI6eyJpZCI6IjI4NzI1IiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL2hjbGlwcy5jb20vdmlkZW9zLzc4MTk1NzkvbGluZGEtc2xlZXB5LWZlZXQvIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjllNDk0N2YzNTc1MTQ2NTQxMWZkMWE0ZjVjMzU4Yzc4In0sImV4dCI6eyJkdCI6MTY3NDExMDI1MDA4OH19 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
606ce5a4d5.800b6771fc.com/get/
200 OK 2.8 kB URL HTTP/2 606ce5a4d5.800b6771fc.com/get/
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with very long lines (2848), with no line terminators
Hash 57e33e0a2367c42ee8ce4a4690ff2ecf
866ab6eeb886555a54b6112ba57448c46a1496db
907c8de60af84e77f888715d427d538335ada22e357a8b9280ff2a34e4a90d0f
Analyzer Verdict Alert quad9 Sinkholed
POST /get/ HTTP/1.1
Host: 606ce5a4d5.800b6771fc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hclips.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://hclips.com
Content-Length: 648
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.16.0
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: application/json
content-length: 2848
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsSUuWEQh4wbLczQkGGjBY0aZWa0yFEmhpmQOMbcuFFGRhkbZGzUEOFwjpg0ZBTq2CIChoguDse4ESpjhgyHYeqMwUiyBg0cN2iMvFojBowcNHLAwMEzI1CMaeiUafMlRlmDdhaSxBGDhkM4dcQsrDGjxtOHcOAsnPmxJxyJOmjEuFGjBg4bDsvgofNlzmGMBvW8cVPmiwysi8uOaSNYx4wZYm1AfkjGzESHYty4kTtDp1i7Itq4uZiYxti_cHTzXgwDxuo6bnUMpEMHzhwdL16MQROGTh05YqqXcTHmTZsXady8-EFHDsQ1PejMaUEnRos7ZcSMCdOmxXw6XOoUJ0nnzfUeNrwBgxj57WfDfKSFkcYZbvRQQxBL5GBDgTCQREYac4QhBhudzeGfG2T0EAOFJLXxxk8cSlHGhXKUEVEPUfVHog1raUTGF3YAVcYbX2zGRh4ilkWGdxihMQYbaTjHHZFJVbfQFjLEgJQIcMgxlQ4xuEBTCzDUAJtrOsDgAgwUiTBGcF9UeaWYZGrlpQhy2FFaDG-6GNxCbC7mUB11pIERS2HRcIMZfTFWl06KuURGDGHQYEYNY_QV0w1kOZTkn1mK5cJILtBJQ1l1hIFRE2_okQYbbITxQg1jgoDCFeENecccIDhBBQhejbkDCLC6YQMNu-Lx665xYtnlmCmAcISLa7zxggxkFudVDCAYkUaLZryBxwtesWpUUleK4MQTZb0hxxdjhDtuWWyEW4QTQpZhxxctsjFRDTPhUBsOxTkkB4NyOdaQCAfNK4YcC-GAg0MFf2EiGXI9ViYZcryx0AwOvSEUblVqm8dCuJGRx2w6lFdHGf6WAeZyzT0XnZFIKtnddzkepPELlMaQA745vIAkiGG0MAeHZcCRR0hllEHHC2XNESdGFdNRnbkt1OFGWiZlSYZMQoZ70Bdb31AWHW1MZENWMXglQw0wVNSGDGajrTbbv75pEL1lWPaFk1ienWiFbEc2bxgcyqHek31NqSFiBKscFRsS3dUunknxBkMfCgQE&s=563541be5d9df5484973e1add8f5adfc5eaca241b2b70162ddf1650f853595741674110250
200 OK 2.4 kB URL HTTP/2 r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsSUuWEQh4wbLczQkGGjBY0aZWa0yFEmhpmQOMbcuFFGRhkbZGzUEOFwjpg0ZBTq2CIChoguDse4ESpjhgyHYeqMwUiyBg0cN2iMvFojBowcNHLAwMEzI1CMaeiUafMlRlmDdhaSxBGDhkM4dcQsrDGjxtOHcOAsnPmxJxyJOmjEuFGjBg4bDsvgofNlzmGMBvW8cVPmiwysi8uOaSNYx4wZYm1AfkjGzESHYty4kTtDp1i7Itq4uZiYxti_cHTzXgwDxuo6bnUMpEMHzhwdL16MQROGTh05YqqXcTHmTZsXady8-EFHDsQ1PejMaUEnRos7ZcSMCdOmxXw6XOoUJ0nnzfUeNrwBgxj57WfDfKSFkcYZbvRQQxBL5GBDgTCQREYac4QhBhudzeGfG2T0EAOFJLXxxk8cSlHGhXKUEVEPUfVHog1raUTGF3YAVcYbX2zGRh4ilkWGdxihMQYbaTjHHZFJVbfQFjLEgJQIcMgxlQ4xuEBTCzDUAJtrOsDgAgwUiTBGcF9UeaWYZGrlpQhy2FFaDG-6GNxCbC7mUB11pIERS2HRcIMZfTFWl06KuURGDGHQYEYNY_QV0w1kOZTkn1mK5cJILtBJQ1l1hIFRE2_okQYbbITxQg1jgoDCFeENecccIDhBBQhejbkDCLC6YQMNu-Lx665xYtnlmCmAcISLa7zxggxkFudVDCAYkUaLZryBxwtesWpUUleK4MQTZb0hxxdjhDtuWWyEW4QTQpZhxxctsjFRDTPhUBsOxTkkB4NyOdaQCAfNK4YcC-GAg0MFf2EiGXI9ViYZcryx0AwOvSEUblVqm8dCuJGRx2w6lFdHGf6WAeZyzT0XnZFIKtnddzkepPELlMaQA745vIAkiGG0MAeHZcCRR0hllEHHC2XNESdGFdNRnbkt1OFGWiZlSYZMQoZ70Bdb31AWHW1MZENWMXglQw0wVNSGDGajrTbbv75pEL1lWPaFk1ienWiFbEc2bxgcyqHek31NqSFiBKscFRsS3dUunknxBkMfCgQE&s=563541be5d9df5484973e1add8f5adfc5eaca241b2b70162ddf1650f853595741674110250
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3736)
Hash 90dec90b3914ad6c48b02ddcf57d70d9
a0e201abf56d3b4d211dafcafd3759e82e138ebf
d43d43f02e614da5a1b7cbad50f1ab5ac82d5dee840e6fd6d27e5d626ec14ee0
GET /api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsSUuWEQh4wbLczQkGGjBY0aZWa0yFEmhpmQOMbcuFFGRhkbZGzUEOFwjpg0ZBTq2CIChoguDse4ESpjhgyHYeqMwUiyBg0cN2iMvFojBowcNHLAwMEzI1CMaeiUafMlRlmDdhaSxBGDhkM4dcQsrDGjxtOHcOAsnPmxJxyJOmjEuFGjBg4bDsvgofNlzmGMBvW8cVPmiwysi8uOaSNYx4wZYm1AfkjGzESHYty4kTtDp1i7Itq4uZiYxti_cHTzXgwDxuo6bnUMpEMHzhwdL16MQROGTh05YqqXcTHmTZsXady8-EFHDsQ1PejMaUEnRos7ZcSMCdOmxXw6XOoUJ0nnzfUeNrwBgxj57WfDfKSFkcYZbvRQQxBL5GBDgTCQREYac4QhBhudzeGfG2T0EAOFJLXxxk8cSlHGhXKUEVEPUfVHog1raUTGF3YAVcYbX2zGRh4ilkWGdxihMQYbaTjHHZFJVbfQFjLEgJQIcMgxlQ4xuEBTCzDUAJtrOsDgAgwUiTBGcF9UeaWYZGrlpQhy2FFaDG-6GNxCbC7mUB11pIERS2HRcIMZfTFWl06KuURGDGHQYEYNY_QV0w1kOZTkn1mK5cJILtBJQ1l1hIFRE2_okQYbbITxQg1jgoDCFeENecccIDhBBQhejbkDCLC6YQMNu-Lx665xYtnlmCmAcISLa7zxggxkFudVDCAYkUaLZryBxwtesWpUUleK4MQTZb0hxxdjhDtuWWyEW4QTQpZhxxctsjFRDTPhUBsOxTkkB4NyOdaQCAfNK4YcC-GAg0MFf2EiGXI9ViYZcryx0AwOvSEUblVqm8dCuJGRx2w6lFdHGf6WAeZyzT0XnZFIKtnddzkepPELlMaQA745vIAkiGG0MAeHZcCRR0hllEHHC2XNESdGFdNRnbkt1OFGWiZlSYZMQoZ70Bdb31AWHW1MZENWMXglQw0wVNSGDGajrTbbv75pEL1lWPaFk1ienWiFbEc2bxgcyqHek31NqSFiBKscFRsS3dUunknxBkMfCgQE&s=563541be5d9df5484973e1add8f5adfc5eaca241b2b70162ddf1650f853595741674110250 HTTP/1.1
Host: r-eu.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html; charset=utf-8
content-length: 2434
vary: *
content-encoding: gzip
pragma: no-cache
expires: 0
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: 31341883ecbe2bea
set-cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78; expires=Wed, 19 Jul 2023 06:37:31 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInLUsJFjBhkZY1rUmIEDRgsaNcSQaYGjBg0cLXLgiDFDRgyVZHKYISPC4Rwxacgo1LFFBAwRXRyOcTNURk2HYeqMwWjTxg0YN2TQuIFjRg0YOW7EwHqjpwigPHWISEOnTJsvMcwatLNQho2ZNBzCqSNm4cgaMqDCgbPwRtaGIubAkaiDBgwbgMc6LIOHzhfFjB-S0fPGTZkvM67GoGF2TBvCOmbMyPHYBlQyZiY6FOPGTd0ZkFnnFdHGzcXGjnEEFgGn9-8YVx87rBNXLRo6dODM0fHixRg0YejUkSMmexkXY960eZHGzYsfdORAXNODzpwWdGK0uFNGzJgwbVrcp8OlDgwYdtHxxnY92PAGDGL0959d950WRhpnuNFDDUEskYMNCgJoAxlpzBGGGGx8NseAbpDRQwwZ2tXGG0CFKEUZHMpRRkQ9RCVgija4JQaMX9gRVBlvfNEZG3mcaBYZ4mGExhhspCEdeEkqld1CW9iUFHFyTKVDDC7cUEYLMNQwW2w6wOACDBSJMEZxX8CR5UJmojmSQ3LYgZpkIsxYHJxnIrdcHWlglEMZNOSwlRle3VDDaJDREEMMO8UQBg1m1DCGVziMwZVZTgrKJWsu0CCDCzG4ZFYdYWDUxBt6pMEGG2G8UMOZIKBwRXlI3jEHCE5QAcJYZ-4Awq1u2ECDsHgYK2ydW4Z5ZgogHDHjGm-8IAOa_40VAwhGpCGjGW_g8cJYsx6llJYiOPGEWW_I8cUY6KprFhvoFuHEkWXY8YWMbExUg2Fd3fUfnRHWVQMOiB2krxhyLIQDDg4p_MWKacmAgw1pkiHHGwvN4NAbQ-3mZrh5LLQbGXnYpkN6dZRBZxlkDgSddNS9sGSTT4Y3no8HgfwCVzFodEMOLzRZYhgtzBFiGXDk0YIZZZRBxwtmzVEnRhvTkV27LdThBlst0OQCGZoeie5BX5BdVkVtTGSVo2PJ8BXbMrh9A9wAfmUVYgbtW4ZiX0y55duP5g3DZPqGEaIc7lHp1ZUfZnaQGVGxIZFe9MKp1G8w9KFAQA%3D%3D&s=bbe50c3f1a1de39b5559636748471a994a08bf46a0a828130d2ea87845052fd01674110250
200 OK 2.4 kB URL HTTP/2 r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInLUsJFjBhkZY1rUmIEDRgsaNcSQaYGjBg0cLXLgiDFDRgyVZHKYISPC4Rwxacgo1LFFBAwRXRyOcTNURk2HYeqMwWjTxg0YN2TQuIFjRg0YOW7EwHqjpwigPHWISEOnTJsvMcwatLNQho2ZNBzCqSNm4cgaMqDCgbPwRtaGIubAkaiDBgwbgMc6LIOHzhfFjB-S0fPGTZkvM67GoGF2TBvCOmbMyPHYBlQyZiY6FOPGTd0ZkFnnFdHGzcXGjnEEFgGn9-8YVx87rBNXLRo6dODM0fHixRg0YejUkSMmexkXY960eZHGzYsfdORAXNODzpwWdGK0uFNGzJgwbVrcp8OlDgwYdtHxxnY92PAGDGL0959d950WRhpnuNFDDUEskYMNCgJoAxlpzBGGGGx8NseAbpDRQwwZ2tXGG0CFKEUZHMpRRkQ9RCVgija4JQaMX9gRVBlvfNEZG3mcaBYZ4mGExhhspCEdeEkqld1CW9iUFHFyTKVDDC7cUEYLMNQwW2w6wOACDBSJMEZxX8CR5UJmojmSQ3LYgZpkIsxYHJxnIrdcHWlglEMZNOSwlRle3VDDaJDREEMMO8UQBg1m1DCGVziMwZVZTgrKJWsu0CCDCzG4ZFYdYWDUxBt6pMEGG2G8UMOZIKBwRXlI3jEHCE5QAcJYZ-4Awq1u2ECDsHgYK2ydW4Z5ZgogHDHjGm-8IAOa_40VAwhGpCGjGW_g8cJYsx6llJYiOPGEWW_I8cUY6KprFhvoFuHEkWXY8YWMbExUg2Fd3fUfnRHWVQMOiB2krxhyLIQDDg4p_MWKacmAgw1pkiHHGwvN4NAbQ-3mZrh5LLQbGXnYpkN6dZRBZxlkDgSddNS9sGSTT4Y3no8HgfwCVzFodEMOLzRZYhgtzBFiGXDk0YIZZZRBxwtmzVEnRhvTkV27LdThBlst0OQCGZoeie5BX5BdVkVtTGSVo2PJ8BXbMrh9A9wAfmUVYgbtW4ZiX0y55duP5g3DZPqGEaIc7lHp1ZUfZnaQGVGxIZFe9MKp1G8w9KFAQA%3D%3D&s=bbe50c3f1a1de39b5559636748471a994a08bf46a0a828130d2ea87845052fd01674110250
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3744)
Hash d4e8773deb11b4fe0ab5a480b0c35513
786e47be7d875ef423710462b49cb6d6031e00c3
524f86a02759422203adbcbc6f3cf7d81439fc6165e06655f82e5998e72ad669
GET /api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInLUsJFjBhkZY1rUmIEDRgsaNcSQaYGjBg0cLXLgiDFDRgyVZHKYISPC4Rwxacgo1LFFBAwRXRyOcTNURk2HYeqMwWjTxg0YN2TQuIFjRg0YOW7EwHqjpwigPHWISEOnTJsvMcwatLNQho2ZNBzCqSNm4cgaMqDCgbPwRtaGIubAkaiDBgwbgMc6LIOHzhfFjB-S0fPGTZkvM67GoGF2TBvCOmbMyPHYBlQyZiY6FOPGTd0ZkFnnFdHGzcXGjnEEFgGn9-8YVx87rBNXLRo6dODM0fHixRg0YejUkSMmexkXY960eZHGzYsfdORAXNODzpwWdGK0uFNGzJgwbVrcp8OlDgwYdtHxxnY92PAGDGL0959d950WRhpnuNFDDUEskYMNCgJoAxlpzBGGGGx8NseAbpDRQwwZ2tXGG0CFKEUZHMpRRkQ9RCVgija4JQaMX9gRVBlvfNEZG3mcaBYZ4mGExhhspCEdeEkqld1CW9iUFHFyTKVDDC7cUEYLMNQwW2w6wOACDBSJMEZxX8CR5UJmojmSQ3LYgZpkIsxYHJxnIrdcHWlglEMZNOSwlRle3VDDaJDREEMMO8UQBg1m1DCGVziMwZVZTgrKJWsu0CCDCzG4ZFYdYWDUxBt6pMEGG2G8UMOZIKBwRXlI3jEHCE5QAcJYZ-4Awq1u2ECDsHgYK2ydW4Z5ZgogHDHjGm-8IAOa_40VAwhGpCGjGW_g8cJYsx6llJYiOPGEWW_I8cUY6KprFhvoFuHEkWXY8YWMbExUg2Fd3fUfnRHWVQMOiB2krxhyLIQDDg4p_MWKacmAgw1pkiHHGwvN4NAbQ-3mZrh5LLQbGXnYpkN6dZRBZxlkDgSddNS9sGSTT4Y3no8HgfwCVzFodEMOLzRZYhgtzBFiGXDk0YIZZZRBxwtmzVEnRhvTkV27LdThBlst0OQCGZoeie5BX5BdVkVtTGSVo2PJ8BXbMrh9A9wAfmUVYgbtW4ZiX0y55duP5g3DZPqGEaIc7lHp1ZUfZnaQGVGxIZFe9MKp1G8w9KFAQA%3D%3D&s=bbe50c3f1a1de39b5559636748471a994a08bf46a0a828130d2ea87845052fd01674110250 HTTP/1.1
Host: r-eu.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html; charset=utf-8
content-length: 2439
vary: *
content-encoding: gzip
pragma: no-cache
expires: 0
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: bc713bb6d0650a3c
set-cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78; expires=Wed, 19 Jul 2023 06:37:31 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
js.wpshsdk.com/npc/sdk/common/core.js
200 OK 38 kB URL HTTP/2 js.wpshsdk.com/npc/sdk/common/core.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9e3c4cee21805819fc3dc35a7c3a21c8
63ad8a18579318d9d6a30e7a8d289f27f63e848a
7d7808a3765b23ee7ac777d0b13320db2c6c46a068c2f6f2b018d43364591370
GET /npc/sdk/common/core.js HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hclips.com/
Origin: https://hclips.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 11 Jan 2023 09:42:43 GMT
etag: W/"63be8493-1934c"
content-encoding: gzip
expires: Thu, 19 Jan 2023 06:42:31 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImyIqQFDhhkZNVqYsTFjRgsaNWLgaJFDpUkbNWbgIIMDxkcaY8yIcDhHTBoyCnVsEQFDRBeHY9wElTFDhsMwdcZgvNGSxg0aOHDU0CrDRgwYN3DckLFThE8yGNPQKdPmS4yyBu0s7IojBg2HcOqIWRizhtOHcOAsvDG2oYg5cCTqmAEzJQ0bDsvgofMFseKHZPS8cVPmiwyxMcgibSN48YwcMGxAxqxTB0WzbtzMZVwD9V0Rbdxc1EGDBgwcf-Hk3h3jBozUDuu81TGQDh04c3S8eDEGTRg6deSIuV7GxZg3bV6kcfPiBx05ENf0oDOnBZ0YLe6UETMmTJsW9elwqXO8K5032fVgwxswiLFffzbUR1oYaZzhRg81BLFEDjYc2JENZKQxRxhisNHZHAC6QUYPMVjYVRtv-OShFGVkKEcZEfUA1X8m2sCWGC1-YcdPZbzxxWZs5EFiWWSAhxEaY7CRBnTeGYnUdQttIUMMR4kAhxxSuebCDWW0AEMNDonRGgwuwPDaGMJ9cWWWZJoZk0Ny2FHaV5Gh2cZCbRaXXB1pYJRDGTTkYJUZM9Rwg2Mw0RBDDGaQEUMYNJhRwxiF4jBGWGUt6WcMLqDmAg0yuBBDDTSUVUcYGDXxhh5psMFGGC_UUCYIKFwxXpF3zAGCE1SA8FWZO4Bgqxs20BAsHsUGG6drX5aZAghHwLjGGy_IYOZxX8UAghFpvGjGG3i88JWsRSGVpQhOPFHWG3J8Mca56ZbFxrlFOEFkGXZ88SIbExkaFmM1wQCng3NtZdhB-Yohx0JZOYTwFyiipcNnXjksxxsLzeDQG0HddiW4eSx0Gxl5yKbDeXWUAWcZrTX3XHTTIakkk9-Ft-NBHL8QVgw5GJrDC0qKGEYLc3hYBhx5iFRGGXS8UNYccWJ0MR3XsdtCHW6o1YJKLpBxKZHnHvSF1zeURcedrtlw1aIdcVRRG2SlvfZXIKXm11Nk6FsGYl9AKbeidLstAr59eygHe1EWWiWHlx1kBlRsSITXvHgitRsMfSgQEA%3D%3D&s=e0a790303d38be7506d74d8408f3170ea5c007578c653c0b9caf5d1de69856cf1674110250
200 OK 2.4 kB URL HTTP/2 r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImyIqQFDhhkZNVqYsTFjRgsaNWLgaJFDpUkbNWbgIIMDxkcaY8yIcDhHTBoyCnVsEQFDRBeHY9wElTFDhsMwdcZgvNGSxg0aOHDU0CrDRgwYN3DckLFThE8yGNPQKdPmS4yyBu0s7IojBg2HcOqIWRizhtOHcOAsvDG2oYg5cCTqmAEzJQ0bDsvgofMFseKHZPS8cVPmiwyxMcgibSN48YwcMGxAxqxTB0WzbtzMZVwD9V0Rbdxc1EGDBgwcf-Hk3h3jBozUDuu81TGQDh04c3S8eDEGTRg6deSIuV7GxZg3bV6kcfPiBx05ENf0oDOnBZ0YLe6UETMmTJsW9elwqXO8K5032fVgwxswiLFffzbUR1oYaZzhRg81BLFEDjYc2JENZKQxRxhisNHZHAC6QUYPMVjYVRtv-OShFGVkKEcZEfUA1X8m2sCWGC1-YcdPZbzxxWZs5EFiWWSAhxEaY7CRBnTeGYnUdQttIUMMR4kAhxxSuebCDWW0AEMNDonRGgwuwPDaGMJ9cWWWZJoZk0Ny2FHaV5Gh2cZCbRaXXB1pYJRDGTTkYJUZM9Rwg2Mw0RBDDGaQEUMYNJhRwxiF4jBGWGUt6WcMLqDmAg0yuBBDDTSUVUcYGDXxhh5psMFGGC_UUCYIKFwxXpF3zAGCE1SA8FWZO4Bgqxs20BAsHsUGG6drX5aZAghHwLjGGy_IYOZxX8UAghFpvGjGG3i88JWsRSGVpQhOPFHWG3J8Mca56ZbFxrlFOEFkGXZ88SIbExkaFmM1wQCng3NtZdhB-Yohx0JZOYTwFyiipcNnXjksxxsLzeDQG0HddiW4eSx0Gxl5yKbDeXWUAWcZrTX3XHTTIakkk9-Ft-NBHL8QVgw5GJrDC0qKGEYLc3hYBhx5iFRGGXS8UNYccWJ0MR3XsdtCHW6o1YJKLpBxKZHnHvSF1zeURcedrtlw1aIdcVRRG2SlvfZXIKXm11Nk6FsGYl9AKbeidLstAr59eygHe1EWWiWHlx1kBlRsSITXvHgitRsMfSgQEA%3D%3D&s=e0a790303d38be7506d74d8408f3170ea5c007578c653c0b9caf5d1de69856cf1674110250
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3736)
Hash 51c4d46c5bf0f7f4a2db3eeb02892f35
00818ac9d6e208c5d78a4f8c7d5ffbea2588a116
5749b6fbe3e496d2b2faa41be3db1e674fdf7b0ff4a653b8a9e296cfacf26367
GET /api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImyIqQFDhhkZNVqYsTFjRgsaNWLgaJFDpUkbNWbgIIMDxkcaY8yIcDhHTBoyCnVsEQFDRBeHY9wElTFDhsMwdcZgvNGSxg0aOHDU0CrDRgwYN3DckLFThE8yGNPQKdPmS4yyBu0s7IojBg2HcOqIWRizhtOHcOAsvDG2oYg5cCTqmAEzJQ0bDsvgofMFseKHZPS8cVPmiwyxMcgibSN48YwcMGxAxqxTB0WzbtzMZVwD9V0Rbdxc1EGDBgwcf-Hk3h3jBozUDuu81TGQDh04c3S8eDEGTRg6deSIuV7GxZg3bV6kcfPiBx05ENf0oDOnBZ0YLe6UETMmTJsW9elwqXO8K5032fVgwxswiLFffzbUR1oYaZzhRg81BLFEDjYc2JENZKQxRxhisNHZHAC6QUYPMVjYVRtv-OShFGVkKEcZEfUA1X8m2sCWGC1-YcdPZbzxxWZs5EFiWWSAhxEaY7CRBnTeGYnUdQttIUMMR4kAhxxSuebCDWW0AEMNDonRGgwuwPDaGMJ9cWWWZJoZk0Ny2FHaV5Gh2cZCbRaXXB1pYJRDGTTkYJUZM9Rwg2Mw0RBDDGaQEUMYNJhRwxiF4jBGWGUt6WcMLqDmAg0yuBBDDTSUVUcYGDXxhh5psMFGGC_UUCYIKFwxXpF3zAGCE1SA8FWZO4Bgqxs20BAsHsUGG6drX5aZAghHwLjGGy_IYOZxX8UAghFpvGjGG3i88JWsRSGVpQhOPFHWG3J8Mca56ZbFxrlFOEFkGXZ88SIbExkaFmM1wQCng3NtZdhB-Yohx0JZOYTwFyiipcNnXjksxxsLzeDQG0HddiW4eSx0Gxl5yKbDeXWUAWcZrTX3XHTTIakkk9-Ft-NBHL8QVgw5GJrDC0qKGEYLc3hYBhx5iFRGGXS8UNYccWJ0MR3XsdtCHW6o1YJKLpBxKZHnHvSF1zeURcedrtlw1aIdcVRRG2SlvfZXIKXm11Nk6FsGYl9AKbeidLstAr59eygHe1EWWiWHlx1kBlRsSITXvHgitRsMfSgQEA%3D%3D&s=e0a790303d38be7506d74d8408f3170ea5c007578c653c0b9caf5d1de69856cf1674110250 HTTP/1.1
Host: r-eu.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html; charset=utf-8
content-length: 2440
vary: *
content-encoding: gzip
pragma: no-cache
expires: 0
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: 7c1258ca647c7a87
set-cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78; expires=Wed, 19 Jul 2023 06:37:31 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsSQgRHGzA0bN1rAwCHDTAsaY8rUaIEjh4yQYnLQoCEmxgwcNGTEGCPC4Rwxacgo1LFFBAwRXRyOcTNUxgwZDsPU4alDxFMbNWI4jVFjxo0cMGDYyGkDR8-MQTGmoVOmzZcYZw3aWSijbAwaDuHUEbOwaw2oD-HAWXjjxkufcCTqmIE1Kw0bDsvgofNlTmKMBvW8cVPmiwwcN-6eHdNm8OIZYG1AfkjGzESHYty4ocu4Bli8Itq4uahj5kjAcHTzjnEj7Oo6cKuioUMHzhwdL16MQROGTh05YqqXcTHmTZsXady8-EFHDsQ1PejMaUEnRos7ZcSMCdOmxXw6XOqErUvnzfUeNrwBgxj57WfDfKWFkcYZbvRQQxBL5GBDgTDURUYac4QhBhudzeGfG2T0EAOFdbXxBlAcSlHGhXKUEVEPUvVHog1tibHiF3YEVcYbX2zGRh4inkWGdxihMQYbaTjHHZFKVbfQFjolJQIcclAVgws3lCFSDbC5pgMMLsBAkQhjBPcFlVSBKWZXDslhh2kxwBBZmW0spCZxDtVRRxoY5VAGDTLdYMYMNdzgGFY0xBCDGWTEEAYNZtQwBqE4jHGDWQ4l2eeVYLmQkwtc0XBWHWFg1MQbeqTBBhthvFBDmCCgcEV4Q94xBwhOUAFCnGHuAMKsbozlKx7CguCmDnG-CkMKIBzh4hpvvCCDmGHFGQMIRqTRohlv4PFCsmGORpUITjxx1htyfDHGuOWexca4RTghZBl2fNEiGxMVeiljOITVJoN01QCaQwfVK4YcC-GAA8H0fmEiGXThYMOYZMjxxkIzOPTGULhR2W0eC-FGRh6z6VBeHWW0WYaXAzHnHHQvGImkkt19l-NBG79waQw5FJrDC0iCGEYLc3BYBhx5tGBGGWXQ8cJZc7iJkcV0VIduC3W4sVYLNrlAhqVCjnvQF1_fcBYddSILUqJxylCDnCKgLcNEayta4dtj5RAVGfaWYdkXTqp9A9t3w91wGBzKod6ThEqpoWIiHGSGVGxIlNe7dirFGwx9KBAQ&s=4e775bec84022db907d1edcec7613050fb038ad05339848c000b1c492472471b1674110250
200 OK 2.4 kB URL HTTP/2 r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsSQgRHGzA0bN1rAwCHDTAsaY8rUaIEjh4yQYnLQoCEmxgwcNGTEGCPC4Rwxacgo1LFFBAwRXRyOcTNUxgwZDsPU4alDxFMbNWI4jVFjxo0cMGDYyGkDR8-MQTGmoVOmzZcYZw3aWSijbAwaDuHUEbOwaw2oD-HAWXjjxkufcCTqmIE1Kw0bDsvgofNlTmKMBvW8cVPmiwwcN-6eHdNm8OIZYG1AfkjGzESHYty4ocu4Bli8Itq4uahj5kjAcHTzjnEj7Oo6cKuioUMHzhwdL16MQROGTh05YqqXcTHmTZsXady8-EFHDsQ1PejMaUEnRos7ZcSMCdOmxXw6XOqErUvnzfUeNrwBgxj57WfDfKWFkcYZbvRQQxBL5GBDgTDURUYac4QhBhudzeGfG2T0EAOFdbXxBlAcSlHGhXKUEVEPUvVHog1tibHiF3YEVcYbX2zGRh4inkWGdxihMQYbaTjHHZFKVbfQFjolJQIcclAVgws3lCFSDbC5pgMMLsBAkQhjBPcFlVSBKWZXDslhh2kxwBBZmW0spCZxDtVRRxoY5VAGDTLdYMYMNdzgGFY0xBCDGWTEEAYNZtQwBqE4jHGDWQ4l2eeVYLmQkwtc0XBWHWFg1MQbeqTBBhthvFBDmCCgcEV4Q94xBwhOUAFCnGHuAMKsbozlKx7CguCmDnG-CkMKIBzh4hpvvCCDmGHFGQMIRqTRohlv4PFCsmGORpUITjxx1htyfDHGuOWexca4RTghZBl2fNEiGxMVeiljOITVJoN01QCaQwfVK4YcC-GAA8H0fmEiGXThYMOYZMjxxkIzOPTGULhR2W0eC-FGRh6z6VBeHWW0WYaXAzHnHHQvGImkkt19l-NBG79waQw5FJrDC0iCGEYLc3BYBhx5tGBGGWXQ8cJZc7iJkcV0VIduC3W4sVYLNrlAhqVCjnvQF1_fcBYddSILUqJxylCDnCKgLcNEayta4dtj5RAVGfaWYdkXTqp9A9t3w91wGBzKod6ThEqpoWIiHGSGVGxIlNe7dirFGwx9KBAQ&s=4e775bec84022db907d1edcec7613050fb038ad05339848c000b1c492472471b1674110250
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3744)
Hash 081a2a5916994d99865b72fb850ad68c
233db0198f9a5bfde8afeba9d1b20ff023f6bc3b
0c1d2904f004b461fd69fc63f621c6d41f1a28d50c274a85a6c2b63307e532a9
GET /api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsSQgRHGzA0bN1rAwCHDTAsaY8rUaIEjh4yQYnLQoCEmxgwcNGTEGCPC4Rwxacgo1LFFBAwRXRyOcTNUxgwZDsPU4alDxFMbNWI4jVFjxo0cMGDYyGkDR8-MQTGmoVOmzZcYZw3aWSijbAwaDuHUEbOwaw2oD-HAWXjjxkufcCTqmIE1Kw0bDsvgofNlTmKMBvW8cVPmiwwcN-6eHdNm8OIZYG1AfkjGzESHYty4ocu4Bli8Itq4uahj5kjAcHTzjnEj7Oo6cKuioUMHzhwdL16MQROGTh05YqqXcTHmTZsXady8-EFHDsQ1PejMaUEnRos7ZcSMCdOmxXw6XOqErUvnzfUeNrwBgxj57WfDfKWFkcYZbvRQQxBL5GBDgTDURUYac4QhBhudzeGfG2T0EAOFdbXxBlAcSlHGhXKUEVEPUvVHog1tibHiF3YEVcYbX2zGRh4inkWGdxihMQYbaTjHHZFKVbfQFjolJQIcclAVgws3lCFSDbC5pgMMLsBAkQhjBPcFlVSBKWZXDslhh2kxwBBZmW0spCZxDtVRRxoY5VAGDTLdYMYMNdzgGFY0xBCDGWTEEAYNZtQwBqE4jHGDWQ4l2eeVYLmQkwtc0XBWHWFg1MQbeqTBBhthvFBDmCCgcEV4Q94xBwhOUAFCnGHuAMKsbozlKx7CguCmDnG-CkMKIBzh4hpvvCCDmGHFGQMIRqTRohlv4PFCsmGORpUITjxx1htyfDHGuOWexca4RTghZBl2fNEiGxMVeiljOITVJoN01QCaQwfVK4YcC-GAA8H0fmEiGXThYMOYZMjxxkIzOPTGULhR2W0eC-FGRh6z6VBeHWW0WYaXAzHnHHQvGImkkt19l-NBG79waQw5FJrDC0iCGEYLc3BYBhx5tGBGGWXQ8cJZc7iJkcV0VIduC3W4sVYLNrlAhqVCjnvQF1_fcBYddSILUqJxylCDnCKgLcNEayta4dtj5RAVGfaWYdkXTqp9A9t3w91wGBzKod6ThEqpoWIiHGSGVGxIlNe7dirFGwx9KBAQ&s=4e775bec84022db907d1edcec7613050fb038ad05339848c000b1c492472471b1674110250 HTTP/1.1
Host: r-eu.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html; charset=utf-8
content-length: 2437
vary: *
content-encoding: gzip
pragma: no-cache
expires: 0
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: 885793bcc24f138e
set-cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78; expires=Wed, 19 Jul 2023 06:37:31 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsjEGCOmjBkZNlqYKWMjRwsaMHCUaRHmxpgZLcTQKBMjjJmbZGzcmCHC4Rwxacgo1LFFBAwRXRyOcTNUxgwZDsPUGYMRx84cT2nQsCHjxg0ZNHLkwCEDR08RQMlgTEOnTJsvMc4atLMQJI4YNBzCqSNmYY0ZNaA-hANnodeuPuFI1EEjxo0aX204LIOHzpc5ijEa1PPGTZkvZb_SODumTWEdM2bkgGFD8kMyZiY6FOPGTd0ZNmqsziuijZuLjFGS1esbuGMYrB3WiatjIB06cOboePFiDJowdOrIEYO9jIsxb9q8SOPmxQ86ciCu6UFnTgs6MVrcKSNmTJg2LezT4VIHOUg6b2jXgw1vwCAGf_7ZYJ9pYaRxhhs91BDEEjnYgCAMIJGRxhxhiMHGZ3ME6AYZPcRwIUhtvAHUh1KUoaEcZUTUg1QAnmiDWx2R8YUdQZXxxhedsZFHiWeRER5GaIzBRhrRfXekUtgttIUMMSQlAhxyUKVDDC7csBIMNcwWmw4wuAADRSKMAcdbWGpZ5plahSmCHHacFoOcMa650JuOKVdHGhjlUEZYNNxgBmCP4ZVbYzGYoVEYNJhRw0s14DDGDWY5xGSgXK7mAg0yuHDnaMqFgVETb-iRBhtshPFCDWaCgMIV5Bl5xxwgOEEFCDG8uQMItLphAw2_4jHsr3RuCaaZKYBwRIxrvPGCDGci12sMIBiRBoxmvIHHC73CepRSWorgxBNnvSHHF2OUe-5ZbJRbhBNFlmHHFzCyMRFkmOKGA3IOyfFgXZU2lJG9X4ghx0I44ODQQfemqJYOZdmAJhlyvLHQDA69MRRvWHqbx0K8kZGHbTqgV0cZAXuE5HPRTfdCkks2CZ54PB7k8QuYxpADZDm8sOSIYbQwx4dlwJGHSGWUQccLZ81BJ0YZ04Gdui3U4QZbLZTkAhmXFlnuQV-AfcNZdLQxkU6MYlgDDBW1IcPaN7Qtw9s6GWwQvmVg9kWUW7IdQ693wy0CwmF8KEd7UgJmZYeLHWyGVGxIpFe8eyoFHAx9KBAQ&s=13bd1c7aa897de2adadd30b5ca6e077324abbe3acdca38b20d86d1afc939f91d1674110250
200 OK 2.4 kB URL HTTP/2 r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsjEGCOmjBkZNlqYKWMjRwsaMHCUaRHmxpgZLcTQKBMjjJmbZGzcmCHC4Rwxacgo1LFFBAwRXRyOcTNUxgwZDsPUGYMRx84cT2nQsCHjxg0ZNHLkwCEDR08RQMlgTEOnTJsvMc4atLMQJI4YNBzCqSNmYY0ZNaA-hANnodeuPuFI1EEjxo0aX204LIOHzpc5ijEa1PPGTZkvZb_SODumTWEdM2bkgGFD8kMyZiY6FOPGTd0ZNmqsziuijZuLjFGS1esbuGMYrB3WiatjIB06cOboePFiDJowdOrIEYO9jIsxb9q8SOPmxQ86ciCu6UFnTgs6MVrcKSNmTJg2LezT4VIHOUg6b2jXgw1vwCAGf_7ZYJ9pYaRxhhs91BDEEjnYgCAMIJGRxhxhiMHGZ3ME6AYZPcRwIUhtvAHUh1KUoaEcZUTUg1QAnmiDWx2R8YUdQZXxxhedsZFHiWeRER5GaIzBRhrRfXekUtgttIUMMSQlAhxyUKVDDC7csBIMNcwWmw4wuAADRSKMAcdbWGpZ5plahSmCHHacFoOcMa650JuOKVdHGhjlUEZYNNxgBmCP4ZVbYzGYoVEYNJhRw0s14DDGDWY5xGSgXK7mAg0yuHDnaMqFgVETb-iRBhtshPFCDWaCgMIV5Bl5xxwgOEEFCDG8uQMItLphAw2_4jHsr3RuCaaZKYBwRIxrvPGCDGci12sMIBiRBoxmvIHHC73CepRSWorgxBNnvSHHF2OUe-5ZbJRbhBNFlmHHFzCyMRFkmOKGA3IOyfFgXZU2lJG9X4ghx0I44ODQQfemqJYOZdmAJhlyvLHQDA69MRRvWHqbx0K8kZGHbTqgV0cZAXuE5HPRTfdCkks2CZ54PB7k8QuYxpADZDm8sOSIYbQwx4dlwJGHSGWUQccLZ81BJ0YZ04Gdui3U4QZbLZTkAhmXFlnuQV-AfcNZdLQxkU6MYlgDDBW1IcPaN7Qtw9s6GWwQvmVg9kWUW7IdQ693wy0CwmF8KEd7UgJmZYeLHWyGVGxIpFe8eyoFHAx9KBAQ&s=13bd1c7aa897de2adadd30b5ca6e077324abbe3acdca38b20d86d1afc939f91d1674110250
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3756)
Hash f4174e6cedbee5ec291140b8210c2832
8f137086803e51f4fa79c41e51031d8b3cd6acfb
dd4319168f251465b108504ffeac3f1ae268aea41f898c0d1fafb0092df2b115
GET /api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsjEGCOmjBkZNlqYKWMjRwsaMHCUaRHmxpgZLcTQKBMjjJmbZGzcmCHC4Rwxacgo1LFFBAwRXRyOcTNUxgwZDsPUGYMRx84cT2nQsCHjxg0ZNHLkwCEDR08RQMlgTEOnTJsvMc4atLMQJI4YNBzCqSNmYY0ZNaA-hANnodeuPuFI1EEjxo0aX204LIOHzpc5ijEa1PPGTZkvZb_SODumTWEdM2bkgGFD8kMyZiY6FOPGTd0ZNmqsziuijZuLjFGS1esbuGMYrB3WiatjIB06cOboePFiDJowdOrIEYO9jIsxb9q8SOPmxQ86ciCu6UFnTgs6MVrcKSNmTJg2LezT4VIHOUg6b2jXgw1vwCAGf_7ZYJ9pYaRxhhs91BDEEjnYgCAMIJGRxhxhiMHGZ3ME6AYZPcRwIUhtvAHUh1KUoaEcZUTUg1QAnmiDWx2R8YUdQZXxxhedsZFHiWeRER5GaIzBRhrRfXekUtgttIUMMSQlAhxyUKVDDC7csBIMNcwWmw4wuAADRSKMAcdbWGpZ5plahSmCHHacFoOcMa650JuOKVdHGhjlUEZYNNxgBmCP4ZVbYzGYoVEYNJhRw0s14DDGDWY5xGSgXK7mAg0yuHDnaMqFgVETb-iRBhtshPFCDWaCgMIV5Bl5xxwgOEEFCDG8uQMItLphAw2_4jHsr3RuCaaZKYBwRIxrvPGCDGci12sMIBiRBoxmvIHHC73CepRSWorgxBNnvSHHF2OUe-5ZbJRbhBNFlmHHFzCyMRFkmOKGA3IOyfFgXZU2lJG9X4ghx0I44ODQQfemqJYOZdmAJhlyvLHQDA69MRRvWHqbx0K8kZGHbTqgV0cZAXuE5HPRTfdCkks2CZ54PB7k8QuYxpADZDm8sOSIYbQwx4dlwJGHSGWUQccLZ81BJ0YZ04Gdui3U4QZbLZTkAhmXFlnuQV-AfcNZdLQxkU6MYlgDDBW1IcPaN7Qtw9s6GWwQvmVg9kWUW7IdQ693wy0CwmF8KEd7UgJmZYeLHWyGVGxIpFe8eyoFHAx9KBAQ&s=13bd1c7aa897de2adadd30b5ca6e077324abbe3acdca38b20d86d1afc939f91d1674110250 HTTP/1.1
Host: r-eu.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html; charset=utf-8
content-length: 2445
vary: *
content-encoding: gzip
pragma: no-cache
expires: 0
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: 82ff6145a83d66a2
set-cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78; expires=Wed, 19 Jul 2023 06:37:31 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
cdntocdn.com/dli/webcamera.svg?fill=rgb(128%2C%20128%2C%20128)
200 OK 3.1 kB URL HTTP/2 cdntocdn.com/dli/webcamera.svg?fill=rgb(128%2C%20128%2C%20128)
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (937), with CRLF line terminators
Hash 83abc355e849c426d08d495cbe81f76a
8f0e48fdcd81b324f3343b1eb562bfee954e91ef
b09662a541a246f217fcf52cd1f29ffa4f8d461cb62d2a75a3051f712148a7d4
GET /dli/webcamera.svg?fill=rgb(128%2C%20128%2C%20128) HTTP/1.1
Host: cdntocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: image/svg+xml
last-modified: Tue, 16 Jun 2020 16:25:10 GMT
etag: W/"5ee8f266-545"
pragma: no-cache, no-cache
x-proxy-cache: HIT, HIT
cache-control: no-cache, no-store, must-revalidate
expires: 0
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4bs1VpoTSthxwE3gFRF1OL65Rwe6a861OLZ9BRq7BzI1KPgrM8xLxM2weBjgs1PtRMX3TNURBTUDqoFUggTkmWeor4XanQTaO%2BkU2XKCfjsTKkVFzcH2jhAeWRMmZUA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bd8feb8825744b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInLQIBMmx4wwZlrcmIEDRgsaNcbMaCEmxpgaLXDMEGPjhksZNmjMiCHC4Rwxacgo1LFFBAwRXRyOcTNUxgwZDsPUGYMxRwwaMmBklXGDq40aOL7W6CkCKBmMaeiUafOFZ1QydhbixHHVIZw6YhbWmFED6kM4cBbe6NpQxBw4EnXQiHHDhtUZDsvgofPlcOKHZPS8cVPmiwwcXW2QHdMmsI4ZM3LAsGHjrZmJDsW4cSN3xlfVNBy2cXNRMQ0YOPzC2d2bMYzVDuvw1DGQDh04c3S8eDEGTRg6deSIuV7GxZg3bV6kcfPiBx05ENf0oDOnBZ0YLe6UETMmTJsW9elwqXMcJ5032fVgwxswiLFffzbUV1oYaZzhRg81BLFEDjYcqJUNZKQxRxhisNHZHAC6QUYPMViIUxtvAOWhFGVkKEcZEfUg1X8m2rCWGC1-YUdQZbzxxWZs5EEiWWSAhxEaY7CRBnTeGanUdQttIUMMSYkAhxxU6RCDCzeU0QIMNcT2mg4wuAADRSKMMdwXV2ZZ5pk0oOSQHHaYFkOYIsA43EJvMpZcHWlUVQYNGt1gBl831HDVV4vFYAYZMYRBgxkp8YXDGDfgQNaSVW2pmgtYuXAnDWTVEQZGTbyhRxpssBHGCzWYCQIKV4xX5B1zgOAEFSDE8OYOINTqRk7A4kEsCHRqCaaZKYBwBIxrvPFCVr6eeSYIRqTxohlv4PGCr7EepVSWIjjxBFlvyPHFGOSaSxYb5BbhBJFl2PHFi2xMVMNgMtlQEgxzOigXWIUdZK8YciyEAw4OGfwFimfp8JkNaJIhxxsLQSbCG0PlZuXFeOSxkMdk5EGbDufVUcacZYzZ3HPRTYekkkx-F96OB3H8QqYx5LBvDi8oKWIYLczhYRlw5NGCGWWUQccLZM1BJ0YX03Fdui3U4UZaX8ZKBqZEknvQF1_fQBYdbUxUU6Na1QCwCGjLoPYNbMvgdk2FGXRvGYd9AaWWa8fgq91v1-u3h3KwFyVfVXJ42UFmSMWGRHbBy6dSvcHQhwIBAQ%3D%3D&s=16b982a8d2dafb49821f36f8d3e312558a9720b8def6571867bf7198a9c6cb701674110250
200 OK 2.4 kB URL HTTP/2 r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInLQIBMmx4wwZlrcmIEDRgsaNcbMaCEmxpgaLXDMEGPjhksZNmjMiCHC4Rwxacgo1LFFBAwRXRyOcTNUxgwZDsPUGYMxRwwaMmBklXGDq40aOL7W6CkCKBmMaeiUafOFZ1QydhbixHHVIZw6YhbWmFED6kM4cBbe6NpQxBw4EnXQiHHDhtUZDsvgofPlcOKHZPS8cVPmiwwcXW2QHdMmsI4ZM3LAsGHjrZmJDsW4cSN3xlfVNBy2cXNRMQ0YOPzC2d2bMYzVDuvw1DGQDh04c3S8eDEGTRg6deSIuV7GxZg3bV6kcfPiBx05ENf0oDOnBZ0YLe6UETMmTJsW9elwqXMcJ5032fVgwxswiLFffzbUV1oYaZzhRg81BLFEDjYcqJUNZKQxRxhisNHZHAC6QUYPMViIUxtvAOWhFGVkKEcZEfUg1X8m2rCWGC1-YUdQZbzxxWZs5EEiWWSAhxEaY7CRBnTeGanUdQttIUMMSYkAhxxU6RCDCzeU0QIMNcT2mg4wuAADRSKMMdwXV2ZZ5pk0oOSQHHaYFkOYIsA43EJvMpZcHWlUVQYNGt1gBl831HDVV4vFYAYZMYRBgxkp8YXDGDfgQNaSVW2pmgtYuXAnDWTVEQZGTbyhRxpssBHGCzWYCQIKV4xX5B1zgOAEFSDE8OYOINTqRk7A4kEsCHRqCaaZKYBwBIxrvPFCVr6eeSYIRqTxohlv4PGCr7EepVSWIjjxBFlvyPHFGOSaSxYb5BbhBJFl2PHFi2xMVMNgMtlQEgxzOigXWIUdZK8YciyEAw4OGfwFimfp8JkNaJIhxxsLQSbCG0PlZuXFeOSxkMdk5EGbDufVUcacZYzZ3HPRTYekkkx-F96OB3H8QqYx5LBvDi8oKWIYLczhYRlw5NGCGWWUQccLZM1BJ0YX03Fdui3U4UZaX8ZKBqZEknvQF1_fQBYdbUxUU6Na1QCwCGjLoPYNbMvgdk2FGXRvGYd9AaWWa8fgq91v1-u3h3KwFyVfVXJ42UFmSMWGRHbBy6dSvcHQhwIBAQ%3D%3D&s=16b982a8d2dafb49821f36f8d3e312558a9720b8def6571867bf7198a9c6cb701674110250
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3748)
Hash 1a156461b61a72acc0e0ff7fa2e01e56
436b321b0c06510ee2ee1684ee641b49928ea8f8
7517a570aa3c669ddd64efda277761c6ffab6c4dfd9a0c538682db462526c833
GET /api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInLQIBMmx4wwZlrcmIEDRgsaNcbMaCEmxpgaLXDMEGPjhksZNmjMiCHC4Rwxacgo1LFFBAwRXRyOcTNUxgwZDsPUGYMxRwwaMmBklXGDq40aOL7W6CkCKBmMaeiUafOFZ1QydhbixHHVIZw6YhbWmFED6kM4cBbe6NpQxBw4EnXQiHHDhtUZDsvgofPlcOKHZPS8cVPmiwwcXW2QHdMmsI4ZM3LAsGHjrZmJDsW4cSN3xlfVNBy2cXNRMQ0YOPzC2d2bMYzVDuvw1DGQDh04c3S8eDEGTRg6deSIuV7GxZg3bV6kcfPiBx05ENf0oDOnBZ0YLe6UETMmTJsW9elwqXMcJ5032fVgwxswiLFffzbUV1oYaZzhRg81BLFEDjYcqJUNZKQxRxhisNHZHAC6QUYPMViIUxtvAOWhFGVkKEcZEfUg1X8m2rCWGC1-YUdQZbzxxWZs5EEiWWSAhxEaY7CRBnTeGanUdQttIUMMSYkAhxxU6RCDCzeU0QIMNcT2mg4wuAADRSKMMdwXV2ZZ5pk0oOSQHHaYFkOYIsA43EJvMpZcHWlUVQYNGt1gBl831HDVV4vFYAYZMYRBgxkp8YXDGDfgQNaSVW2pmgtYuXAnDWTVEQZGTbyhRxpssBHGCzWYCQIKV4xX5B1zgOAEFSDE8OYOINTqRk7A4kEsCHRqCaaZKYBwBIxrvPFCVr6eeSYIRqTxohlv4PGCr7EepVSWIjjxBFlvyPHFGOSaSxYb5BbhBJFl2PHFi2xMVMNgMtlQEgxzOigXWIUdZK8YciyEAw4OGfwFimfp8JkNaJIhxxsLQSbCG0PlZuXFeOSxkMdk5EGbDufVUcacZYzZ3HPRTYekkkx-F96OB3H8QqYx5LBvDi8oKWIYLczhYRlw5NGCGWWUQccLZM1BJ0YX03Fdui3U4UZaX8ZKBqZEknvQF1_fQBYdbUxUU6Na1QCwCGjLoPYNbMvgdk2FGXRvGYd9AaWWa8fgq91v1-u3h3KwFyVfVXJ42UFmSMWGRHbBy6dSvcHQhwIBAQ%3D%3D&s=16b982a8d2dafb49821f36f8d3e312558a9720b8def6571867bf7198a9c6cb701674110250 HTTP/1.1
Host: r-eu.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html; charset=utf-8
content-length: 2443
vary: *
content-encoding: gzip
pragma: no-cache
expires: 0
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: f3b1e933d38113ce
set-cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78; expires=Wed, 19 Jul 2023 06:37:31 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsiIuSGmxkEYLXLMmFGjBQ0zZHKEpCFDjMkcMGbIsAHjRk0bY0Q4nCMmDRmFOraIgCGii8MxboDKkOkwTJ2cOkTgyGEDx8iZNXLQiFEjhowaMGzI0CmiJxmMaeiUafMlBlmDdhbOxBGDhkM4dcQsrEFSRlM4cBbeuCGjoYg5cCTq2HqDRg0ZOByWwUPnC2LFD8noeeOmzBfIN2LYIDumTWAdI2HasNGUjJmJDsW4cSN3ho2sMOyKaOPm4mIaMHD4FQGHt-8YNsM6rOM2Kho6dODM0fHixRg0YejUkSMmexkXY960eZHGzYsfdORAXNODzpwWdGK0uFNGzJgwbVrcp8OlDgwYM9HxxnY92PAGDGL0999M95kWRhpnuNFDDUEsQZWCANpARhpzhCEGG57NMaAbZPQQA4YztfFGTyBKUcaGcpQRUQ9OCYiiDWuJ8eIXdvhUxhtfcMZGHiaSRYZ4GKExBhtpSAcekkdlt9AWMsRgFHFyQBWDCzeU0QIMNcT2mg4wuAADRSKMUdwXcGS5UJln0uCYQ3LYcRpXkqnZxptmIrdcHWlglEMZNGh1gxkk3dAVDbdtFQNKMYRxUg1jkITDGDfgQFaTgm4JkwssucAVDWTVEQZGTbyhRxpssBHGCzWYCQIKV5R35B1zgOAEFSDEAOcOINTqhg00AIsHscDWqYOvscKQAghHyLjGGy_IcOZ_vsYAghFpxGjGG3i8wKyZpEElghNPkPWGHF-MYS66ZLFhbhFOGFmGHV_EyMZENQxmVVX_0RmhXDXgYNhB-Iohx0I4RJbRvV-oeJYOkNmAJhlyvLHQDA69AZRubYKbx0K6kZEHbTqkV0cZdJYx5kDQSUfdC0oy6WR44_V4kMcvZBpDDv3m8AKTJIbRwhwglgFHHi2YUUYZdLxA1hx1YpQxHdmt20IdbqT15QwukIGpkeYe9IXYN5BFx57L2tBYDL5-BUNFbYzV9ttxg1WVbgblWwZiX0h5t6MAgiUZvmGAKId7U5J0pYeYHWSGU2xIdJe8bx7lGwx9KBAQ&s=91c6d2a740329084d1557a88c229a689e2bbf4ea47183f4e0cf23081f85241931674110250
200 OK 2.4 kB URL HTTP/2 r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsiIuSGmxkEYLXLMmFGjBQ0zZHKEpCFDjMkcMGbIsAHjRk0bY0Q4nCMmDRmFOraIgCGii8MxboDKkOkwTJ2cOkTgyGEDx8iZNXLQiFEjhowaMGzI0CmiJxmMaeiUafMlBlmDdhbOxBGDhkM4dcQsrEFSRlM4cBbeuCGjoYg5cCTq2HqDRg0ZOByWwUPnC2LFD8noeeOmzBfIN2LYIDumTWAdI2HasNGUjJmJDsW4cSN3ho2sMOyKaOPm4mIaMHD4FQGHt-8YNsM6rOM2Kho6dODM0fHixRg0YejUkSMmexkXY960eZHGzYsfdORAXNODzpwWdGK0uFNGzJgwbVrcp8OlDgwYM9HxxnY92PAGDGL0999M95kWRhpnuNFDDUEsQZWCANpARhpzhCEGG57NMaAbZPQQA4YztfFGTyBKUcaGcpQRUQ9OCYiiDWuJ8eIXdvhUxhtfcMZGHiaSRYZ4GKExBhtpSAcekkdlt9AWMsRgFHFyQBWDCzeU0QIMNcT2mg4wuAADRSKMUdwXcGS5UJln0uCYQ3LYcRpXkqnZxptmIrdcHWlglEMZNGh1gxkk3dAVDbdtFQNKMYRxUg1jkITDGDfgQFaTgm4JkwssucAVDWTVEQZGTbyhRxpssBHGCzWYCQIKV5R35B1zgOAEFSDEAOcOINTqhg00AIsHscDWqYOvscKQAghHyLjGGy_IcOZ_vsYAghFpxGjGG3i8wKyZpEElghNPkPWGHF-MYS66ZLFhbhFOGFmGHV_EyMZENQxmVVX_0RmhXDXgYNhB-Iohx0I4RJbRvV-oeJYOkNmAJhlyvLHQDA69AZRubYKbx0K6kZEHbTqkV0cZdJYx5kDQSUfdC0oy6WR44_V4kMcvZBpDDv3m8AKTJIbRwhwglgFHHi2YUUYZdLxA1hx1YpQxHdmt20IdbqT15QwukIGpkeYe9IXYN5BFx57L2tBYDL5-BUNFbYzV9ttxg1WVbgblWwZiX0h5t6MAgiUZvmGAKId7U5J0pYeYHWSGU2xIdJe8bx7lGwx9KBAQ&s=91c6d2a740329084d1557a88c229a689e2bbf4ea47183f4e0cf23081f85241931674110250
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3744)
Hash 923b4a0260b49ff4bd3ee2e08b011505
d0943ddc44197685260e555b741682b1032e7927
4244600e4fa1d96ecd1da29e4478be30a56cab54eaabd2696fafcc01b8d2674e
GET /api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIsiIuSGmxkEYLXLMmFGjBQ0zZHKEpCFDjMkcMGbIsAHjRk0bY0Q4nCMmDRmFOraIgCGii8MxboDKkOkwTJ2cOkTgyGEDx8iZNXLQiFEjhowaMGzI0CmiJxmMaeiUafMlBlmDdhbOxBGDhkM4dcQsrEFSRlM4cBbeuCGjoYg5cCTq2HqDRg0ZOByWwUPnC2LFD8noeeOmzBfIN2LYIDumTWAdI2HasNGUjJmJDsW4cSN3ho2sMOyKaOPm4mIaMHD4FQGHt-8YNsM6rOM2Kho6dODM0fHixRg0YejUkSMmexkXY960eZHGzYsfdORAXNODzpwWdGK0uFNGzJgwbVrcp8OlDgwYM9HxxnY92PAGDGL0999M95kWRhpnuNFDDUEsQZWCANpARhpzhCEGG57NMaAbZPQQA4YztfFGTyBKUcaGcpQRUQ9OCYiiDWuJ8eIXdvhUxhtfcMZGHiaSRYZ4GKExBhtpSAcekkdlt9AWMsRgFHFyQBWDCzeU0QIMNcT2mg4wuAADRSKMUdwXcGS5UJln0uCYQ3LYcRpXkqnZxptmIrdcHWlglEMZNGh1gxkk3dAVDbdtFQNKMYRxUg1jkITDGDfgQFaTgm4JkwssucAVDWTVEQZGTbyhRxpssBHGCzWYCQIKV5R35B1zgOAEFSDEAOcOINTqhg00AIsHscDWqYOvscKQAghHyLjGGy_IcOZ_vsYAghFpxGjGG3i8wKyZpEElghNPkPWGHF-MYS66ZLFhbhFOGFmGHV_EyMZENQxmVVX_0RmhXDXgYNhB-Iohx0I4RJbRvV-oeJYOkNmAJhlyvLHQDA69AZRubYKbx0K6kZEHbTqkV0cZdJYx5kDQSUfdC0oy6WR44_V4kMcvZBpDDv3m8AKTJIbRwhwglgFHHi2YUUYZdLxA1hx1YpQxHdmt20IdbqT15QwukIGpkeYe9IXYN5BFx57L2tBYDL5-BUNFbYzV9ttxg1WVbgblWwZiX0h5t6MAgiUZvmGAKId7U5J0pYeYHWSGU2xIdJe8bx7lGwx9KBAQ&s=91c6d2a740329084d1557a88c229a689e2bbf4ea47183f4e0cf23081f85241931674110250 HTTP/1.1
Host: r-eu.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html; charset=utf-8
content-length: 2437
vary: *
content-encoding: gzip
pragma: no-cache
expires: 0
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: 580ea02d08a4a98f
set-cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78; expires=Wed, 19 Jul 2023 06:37:31 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIm6YKXODRg4xYlrcqBEjpMcyMlqEoUFmTIsYMcbAEPNxTI0yZnCIcDhHTBoyCnVsEQFDRBeHY9wElTFDhsMwdcZgtEEDR9McM3JUnTGjBowcOGLIsLFThE8yGNPQKdPmS4yyBu0sHBuWhkM4dcQsrNHV6UM4cBbeuCGjoYg5cCTqmGGjBkkaNhyWwUPnC2LFD8noeeOmzBcZOG7EmFF2TJvAi7PCsBE5s5mJDsW4cTOXcY0cMOyKaOPmog4aNGDg8AuHt-8YN2CsdljnrY6BdOjAmaPjxYsxaMLQqSNHjPYyLsa8afMijZsXP-jIgbimB505LejEaHGnjJgxYdq0wE-HSx3lY9HxBnc92PDGTP4BaAN-p4WRxhlu9FBDEEvkYEOCMIxFRhpzhCEGG57NMaAbZPQQA4ZjtfGGTyBKUcaGcpQRUQ9QCYiiDWyJ8eIXdvxUxhtfcMZGHiaWRcZ4GKExBhtpTBcekkhpt9AWMsRwlAhwyCGVDjG4cEMZLcBQQ2yv6QCDCzBQJMIYxX2R5ZZnpsmXQ3LYgVoMMEjGZhsLxYkcc3WkgVEOZXhEg0ZdjRQDZDXQAJMZZMSwkhk1jNEVDmPcoJNDTQ7aJW4u0CCDCzE0WlYdYWDUxBt6pMEGG2G8UAOaIKBwhXlH3jEHCE5QAQKeaO4Awq1uUCUsHsaCUCeXYqKZAghHyLjGGy_IkKZyeMYAghFpxGjGG3i8gOesRSG1pQhOPFHWG3J8Mca56ZbFxrlFOGFkGXZ8ESMbE9UwmFU24KAcnRDOVUNoDh2UrxhyLIQDDgnj-4WKaOkAmg1qkiHHGwvN4NAbQemWJbh5LKQbGXnQpoN6dZRBJ05JRjdddS8oyaST4pHX40Egv6BpDDn4m8MLTJIYRgtzgFgGHHm0sFEZdLxQ1hx1YrQxHdqx20IdbqjVQpUutHSDkece9IXYZdHBJ5c2dARThl5V1IYME7XtKJ4yeEWVbgbpWwZiX0jJttt4xy2CxGGAKMd7U3Z1pYeYHWQGVGxIdNe8fSLlGwx9KBAQ&s=b8f5df68de5450f104f812b9b6bf723bb84cbd8c1b996329a2395b9efdc263821674110250
200 OK 2.4 kB URL HTTP/2 r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIm6YKXODRg4xYlrcqBEjpMcyMlqEoUFmTIsYMcbAEPNxTI0yZnCIcDhHTBoyCnVsEQFDRBeHY9wElTFDhsMwdcZgtEEDR9McM3JUnTGjBowcOGLIsLFThE8yGNPQKdPmS4yyBu0sHBuWhkM4dcQsrNHV6UM4cBbeuCGjoYg5cCTqmGGjBkkaNhyWwUPnC2LFD8noeeOmzBcZOG7EmFF2TJvAi7PCsBE5s5mJDsW4cTOXcY0cMOyKaOPmog4aNGDg8AuHt-8YN2CsdljnrY6BdOjAmaPjxYsxaMLQqSNHjPYyLsa8afMijZsXP-jIgbimB505LejEaHGnjJgxYdq0wE-HSx3lY9HxBnc92PDGTP4BaAN-p4WRxhlu9FBDEEvkYEOCMIxFRhpzhCEGG57NMaAbZPQQA4ZjtfGGTyBKUcaGcpQRUQ9QCYiiDWyJ8eIXdvxUxhtfcMZGHiaWRcZ4GKExBhtpTBcekkhpt9AWMsRwlAhwyCGVDjG4cEMZLcBQQ2yv6QCDCzBQJMIYxX2R5ZZnpsmXQ3LYgVoMMEjGZhsLxYkcc3WkgVEOZXhEg0ZdjRQDZDXQAJMZZMSwkhk1jNEVDmPcoJNDTQ7aJW4u0CCDCzE0WlYdYWDUxBt6pMEGG2G8UAOaIKBwhXlH3jEHCE5QAQKeaO4Awq1uUCUsHsaCUCeXYqKZAghHyLjGGy_IkKZyeMYAghFpxGjGG3i8gOesRSG1pQhOPFHWG3J8Mca56ZbFxrlFOGFkGXZ8ESMbE9UwmFU24KAcnRDOVUNoDh2UrxhyLIQDDgnj-4WKaOkAmg1qkiHHGwvN4NAbQemWJbh5LKQbGXnQpoN6dZRBJ05JRjdddS8oyaST4pHX40Egv6BpDDn4m8MLTJIYRgtzgFgGHHm0sFEZdLxQ1hx1YrQxHdqx20IdbqjVQpUutHSDkece9IXYZdHBJ5c2dARThl5V1IYME7XtKJ4yeEWVbgbpWwZiX0jJttt4xy2CxGGAKMd7U3Z1pYeYHWQGVGxIdNe8fSLlGwx9KBAQ&s=b8f5df68de5450f104f812b9b6bf723bb84cbd8c1b996329a2395b9efdc263821674110250
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3764)
Hash e564208a23f843fa0f5c612197d09aec
13cc03288d649e30245b54c3bf884a54c2bfccce
c4939ccdbb92523cd4331d7cfc973f1f2556a9f7e8064dad3057fd3e6a1f5c27
GET /api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFIm6YKXODRg4xYlrcqBEjpMcyMlqEoUFmTIsYMcbAEPNxTI0yZnCIcDhHTBoyCnVsEQFDRBeHY9wElTFDhsMwdcZgtEEDR9McM3JUnTGjBowcOGLIsLFThE8yGNPQKdPmS4yyBu0sHBuWhkM4dcQsrNHV6UM4cBbeuCGjoYg5cCTqmGGjBkkaNhyWwUPnC2LFD8noeeOmzBcZOG7EmFF2TJvAi7PCsBE5s5mJDsW4cTOXcY0cMOyKaOPmog4aNGDg8AuHt-8YN2CsdljnrY6BdOjAmaPjxYsxaMLQqSNHjPYyLsa8afMijZsXP-jIgbimB505LejEaHGnjJgxYdq0wE-HSx3lY9HxBnc92PDGTP4BaAN-p4WRxhlu9FBDEEvkYEOCMIxFRhpzhCEGG57NMaAbZPQQA4ZjtfGGTyBKUcaGcpQRUQ9QCYiiDWyJ8eIXdvxUxhtfcMZGHiaWRcZ4GKExBhtpTBcekkhpt9AWMsRwlAhwyCGVDjG4cEMZLcBQQ2yv6QCDCzBQJMIYxX2R5ZZnpsmXQ3LYgVoMMEjGZhsLxYkcc3WkgVEOZXhEg0ZdjRQDZDXQAJMZZMSwkhk1jNEVDmPcoJNDTQ7aJW4u0CCDCzE0WlYdYWDUxBt6pMEGG2G8UAOaIKBwhXlH3jEHCE5QAQKeaO4Awq1uUCUsHsaCUCeXYqKZAghHyLjGGy_IkKZyeMYAghFpxGjGG3i8gOesRSG1pQhOPFHWG3J8Mca56ZbFxrlFOGFkGXZ8ESMbE9UwmFU24KAcnRDOVUNoDh2UrxhyLIQDDgnj-4WKaOkAmg1qkiHHGwvN4NAbQemWJbh5LKQbGXnQpoN6dZRBJ05JRjdddS8oyaST4pHX40Egv6BpDDn4m8MLTJIYRgtzgFgGHHm0sFEZdLxQ1hx1YrQxHdqx20IdbqjVQpUutHSDkece9IXYZdHBJ5c2dARThl5V1IYME7XtKJ4yeEWVbgbpWwZiX0jJttt4xy2CxGGAKMd7U3Z1pYeYHWQGVGxIdNe8fSLlGwx9KBAQ&s=b8f5df68de5450f104f812b9b6bf723bb84cbd8c1b996329a2395b9efdc263821674110250 HTTP/1.1
Host: r-eu.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html; charset=utf-8
content-length: 2445
vary: *
content-encoding: gzip
pragma: no-cache
expires: 0
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: 19295c0892642ba7
set-cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78; expires=Wed, 19 Jul 2023 06:37:31 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImTcyFFmBhkxZlrUiEFGRgsaMgq2EJMjR5iTMXKQmWEmRpkbMszIEOFwjpg0ZBTq2CIChoguDse4ESpjhgyHYeqMwRgDBg0bNG7MuIEjBo4aV2HAwGrU4U8yGNPQKdPmSwyeD8nYWSjDRlcaDuHUEbOwxowaTx_CgbPwBs6GIubAkaiDRgytOHLgFVEGD50vihnH1fPGTZkvMnDc8Ap3TBvCOmbMyDHWBlQyZiaadeOG7gwbNVhPbuPmYmMaMHAEhsPb92OxrkXUeatjIB06cOboePFiDJowdOrIEYO9jIsxb9q8SOPmxQ86ciCu6UFnTgs6MVrcKSNmTJg2LezT4VJHbF06b2jXgw1vwCAGf_7ZYN9pYaRxhhs91BDEEjnYgCAMdZGRxhxhiMHGZ3ME6AYZPcRwYV1tvPHTh1KUoaEcZUTUQ1QAnmgDW2K4-IUdQJXxxhedsZFHiXCRER5GaIzBRhrRfXdkUtgttIUMMSAlAhxyTKVDDC7cUEYLMNRgVmw6wOACDBSJMAZxX2CppZlo0kCDmCLIYQdqMdAZI3ELwfmYQ3XUkQZGHNEg2Q1m_HXDSFeBFUMMZpARQxg0mFHDGH_hMAZXcDFJKJesuYCSC3nSAFcdYWDUxBt6pMEGG2G8UMOZIKBwBXlG3jEHCE5QAUJVZ-4Awq1uYCUsHsaCYOeWYZ6ZAghHxLjGGy_IgKZYVcUAghFpwGjGG3i8UNWsZamppQhOPAHXG3J8Mca56cLFxrlFOFFkGXZ8ASMbE9VgGA634SCWQ3I8SFcNojl0UL5iyLEQDjgojO8XKaKlQ2g2pEmGHG8sNINDbwg1GZbg5rHQZGTkUZsO6NVRBsFlkOkcdNJRl-SSTYInHo8HhfwCVzH5m8MLS4740hwflgFHHi2YUUYZdLwA1xx2YsQxHdix20IdbqjVglYukLFpkece9IXYN8BFRxsT2XCDY1XJUAMMFbWx05Zuw43h3G5HHJe-ZSj2RZR4v_3o3nRTlm8YH8rRnpR_WdmhZgeZERUbEuU1b59J-QZDHwoEBA%3D%3D&s=b1e06498ce0654df6d2660563e1dc0f9b53f746100a51129662d20fbe19d1e0b1674110250
200 OK 2.5 kB URL HTTP/2 r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImTcyFFmBhkxZlrUiEFGRgsaMgq2EJMjR5iTMXKQmWEmRpkbMszIEOFwjpg0ZBTq2CIChoguDse4ESpjhgyHYeqMwRgDBg0bNG7MuIEjBo4aV2HAwGrU4U8yGNPQKdPmSwyeD8nYWSjDRlcaDuHUEbOwxowaTx_CgbPwBs6GIubAkaiDRgytOHLgFVEGD50vihnH1fPGTZkvMnDc8Ap3TBvCOmbMyDHWBlQyZiaadeOG7gwbNVhPbuPmYmMaMHAEhsPb92OxrkXUeatjIB06cOboePFiDJowdOrIEYO9jIsxb9q8SOPmxQ86ciCu6UFnTgs6MVrcKSNmTJg2LezT4VJHbF06b2jXgw1vwCAGf_7ZYN9pYaRxhhs91BDEEjnYgCAMdZGRxhxhiMHGZ3ME6AYZPcRwYV1tvPHTh1KUoaEcZUTUQ1QAnmgDW2K4-IUdQJXxxhedsZFHiXCRER5GaIzBRhrRfXdkUtgttIUMMSAlAhxyTKVDDC7cUEYLMNRgVmw6wOACDBSJMAZxX2CppZlo0kCDmCLIYQdqMdAZI3ELwfmYQ3XUkQZGHNEg2Q1m_HXDSFeBFUMMZpARQxg0mFHDGH_hMAZXcDFJKJesuYCSC3nSAFcdYWDUxBt6pMEGG2G8UMOZIKBwBXlG3jEHCE5QAUJVZ-4Awq1uYCUsHsaCYOeWYZ6ZAghHxLjGGy_IgKZYVcUAghFpwGjGG3i8UNWsZamppQhOPAHXG3J8Mca56cLFxrlFOFFkGXZ8ASMbE9VgGA634SCWQ3I8SFcNojl0UL5iyLEQDjgojO8XKaKlQ2g2pEmGHG8sNINDbwg1GZbg5rHQZGTkUZsO6NVRBsFlkOkcdNJRl-SSTYInHo8HhfwCVzH5m8MLS4740hwflgFHHi2YUUYZdLwA1xx2YsQxHdix20IdbqjVglYukLFpkece9IXYN8BFRxsT2XCDY1XJUAMMFbWx05Zuw43h3G5HHJe-ZSj2RZR4v_3o3nRTlm8YH8rRnpR_WdmhZgeZERUbEuU1b59J-QZDHwoEBA%3D%3D&s=b1e06498ce0654df6d2660563e1dc0f9b53f746100a51129662d20fbe19d1e0b1674110250
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3776)
Hash 0e5f09b296a35adc34c23c11763f66d1
1ce4490c5d9098414434abd51b111d0bb235d741
709f2fefc72eb661ab7b90863e6c9fa0b31f8e77b094c251b0cd670b579c77b5
GET /api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImTcyFFmBhkxZlrUiEFGRgsaMgq2EJMjR5iTMXKQmWEmRpkbMszIEOFwjpg0ZBTq2CIChoguDse4ESpjhgyHYeqMwRgDBg0bNG7MuIEjBo4aV2HAwGrU4U8yGNPQKdPmSwyeD8nYWSjDRlcaDuHUEbOwxowaTx_CgbPwBs6GIubAkaiDRgytOHLgFVEGD50vihnH1fPGTZkvMnDc8Ap3TBvCOmbMyDHWBlQyZiaadeOG7gwbNVhPbuPmYmMaMHAEhsPb92OxrkXUeatjIB06cOboePFiDJowdOrIEYO9jIsxb9q8SOPmxQ86ciCu6UFnTgs6MVrcKSNmTJg2LezT4VJHbF06b2jXgw1vwCAGf_7ZYN9pYaRxhhs91BDEEjnYgCAMdZGRxhxhiMHGZ3ME6AYZPcRwYV1tvPHTh1KUoaEcZUTUQ1QAnmgDW2K4-IUdQJXxxhedsZFHiXCRER5GaIzBRhrRfXdkUtgttIUMMSAlAhxyTKVDDC7cUEYLMNRgVmw6wOACDBSJMAZxX2CppZlo0kCDmCLIYQdqMdAZI3ELwfmYQ3XUkQZGHNEg2Q1m_HXDSFeBFUMMZpARQxg0mFHDGH_hMAZXcDFJKJesuYCSC3nSAFcdYWDUxBt6pMEGG2G8UMOZIKBwBXlG3jEHCE5QAUJVZ-4Awq1uYCUsHsaCYOeWYZ6ZAghHxLjGGy_IgKZYVcUAghFpwGjGG3i8UNWsZamppQhOPAHXG3J8Mca56cLFxrlFOFFkGXZ8ASMbE9VgGA634SCWQ3I8SFcNojl0UL5iyLEQDjgojO8XKaKlQ2g2pEmGHG8sNINDbwg1GZbg5rHQZGTkUZsO6NVRBsFlkOkcdNJRl-SSTYInHo8HhfwCVzH5m8MLS4740hwflgFHHi2YUUYZdLwA1xx2YsQxHdix20IdbqjVglYukLFpkece9IXYN8BFRxsT2XCDY1XJUAMMFbWx05Zuw43h3G5HHJe-ZSj2RZR4v_3o3nRTlm8YH8rRnpR_WdmhZgeZERUbEuU1b59J-QZDHwoEBA%3D%3D&s=b1e06498ce0654df6d2660563e1dc0f9b53f746100a51129662d20fbe19d1e0b1674110250 HTTP/1.1
Host: r-eu.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html; charset=utf-8
content-length: 2450
vary: *
content-encoding: gzip
pragma: no-cache
expires: 0
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: 3fd34b7d8d7fdabf
set-cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78; expires=Wed, 19 Jul 2023 06:37:31 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
mc.yandex.ru/watch/49315045/1?page-url=goal%3A%2F%2Fhclips.com%2Fplayer_error&page-ref=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&hittoken=1674110250_9f5171286ffc91606234388aa819a4d43964be79b04997cf7f15ce90b8490de2&browser-info=ar%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A713530841441%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063730%3Aet%3A1674110250%3Ac%3A1%3Arn%3A819248045%3Arqn%3A3%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674110247630%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674110250%3At%3ALinda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&t=gdpr(14)mc(p-1-g-1)clc(0-0-0)rqnt(3)aw(1)fip(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/49315045/1?page-url=goal%3A%2F%2Fhclips.com%2Fplayer_error&page-ref=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&hittoken=1674110250_9f5171286ffc91606234388aa819a4d43964be79b04997cf7f15ce90b8490de2&browser-info=ar%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A713530841441%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063730%3Aet%3A1674110250%3Ac%3A1%3Arn%3A819248045%3Arqn%3A3%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674110247630%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674110250%3At%3ALinda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&t=gdpr(14)mc(p-1-g-1)clc(0-0-0)rqnt(3)aw(1)fip(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/49315045/1?page-url=goal%3A%2F%2Fhclips.com%2Fplayer_error&page-ref=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&hittoken=1674110250_9f5171286ffc91606234388aa819a4d43964be79b04997cf7f15ce90b8490de2&browser-info=ar%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A713530841441%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063730%3Aet%3A1674110250%3Ac%3A1%3Arn%3A819248045%3Arqn%3A3%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674110247630%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674110250%3At%3ALinda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&t=gdpr(14)mc(p-1-g-1)clc(0-0-0)rqnt(3)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 85
Origin: https://hclips.com
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 19 Jan 2023 06:37:31 GMT
access-control-allow-origin: https://hclips.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 19-Jan-2023 06:37:31 GMT
last-modified: Thu, 19-Jan-2023 06:37:31 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/49315045/1?page-url=goal%3A%2F%2Fhclips.com%2Fplayer_setup_error&page-ref=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&hittoken=1674110250_9f5171286ffc91606234388aa819a4d43964be79b04997cf7f15ce90b8490de2&browser-info=ar%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A713530841441%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063730%3Aet%3A1674110250%3Ac%3A1%3Arn%3A37441995%3Arqn%3A2%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1970%2C1970%2C0%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1674110247630%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674110250%3At%3ALinda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/49315045/1?page-url=goal%3A%2F%2Fhclips.com%2Fplayer_setup_error&page-ref=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&hittoken=1674110250_9f5171286ffc91606234388aa819a4d43964be79b04997cf7f15ce90b8490de2&browser-info=ar%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A713530841441%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063730%3Aet%3A1674110250%3Ac%3A1%3Arn%3A37441995%3Arqn%3A2%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1970%2C1970%2C0%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1674110247630%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674110250%3At%3ALinda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/49315045/1?page-url=goal%3A%2F%2Fhclips.com%2Fplayer_setup_error&page-ref=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&hittoken=1674110250_9f5171286ffc91606234388aa819a4d43964be79b04997cf7f15ce90b8490de2&browser-info=ar%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A713530841441%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063730%3Aet%3A1674110250%3Ac%3A1%3Arn%3A37441995%3Arqn%3A2%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1970%2C1970%2C0%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1674110247630%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674110250%3At%3ALinda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 36
Origin: https://hclips.com
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 19 Jan 2023 06:37:31 GMT
access-control-allow-origin: https://hclips.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 19-Jan-2023 06:37:31 GMT
last-modified: Thu, 19-Jan-2023 06:37:31 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
btds.zog.link/in/va?spot_id=28716&view=1
200 OK 2 B URL HTTP/2 btds.zog.link/in/va?spot_id=28716&view=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /in/va?spot_id=28716&view=1 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hclips.com
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: application/json
content-length: 2
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 1840.0=1; expires=Fri, 20 Jan 2023 06:37:31 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
btds.zog.link/in/va?spot_id=28717&view=1
200 OK 2 B URL HTTP/2 btds.zog.link/in/va?spot_id=28717&view=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /in/va?spot_id=28717&view=1 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hclips.com
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: application/json
content-length: 2
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
set-cookie: 1840.0=1; expires=Fri, 20 Jan 2023 06:37:31 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
btds.zog.link/in/va?spot_id=28718&view=1
200 OK 2 B URL HTTP/2 btds.zog.link/in/va?spot_id=28718&view=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /in/va?spot_id=28718&view=1 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hclips.com
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: application/json
content-length: 2
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 1840.0=1; expires=Fri, 20 Jan 2023 06:37:31 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
200 OK 1.9 kB URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
Hash bfddf219fb5b80dd4f897e723d470b4b
446ce5ed482e4b6c499699b1f2a8aa38f2e4b01e
9166bc8d8dba48447a2f0c62a7f93f8a41fb7970742ac8f8a251c357a7d3c992
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 5f1f8cfafbe8d1d8715f73078d990068
81633231003da3bbcb216d09fa6c6bfd779bf33b
36c5d32a366c2447ba150ef104d2ca34a30296988c899b292f74da7952b33c31
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 06:37:31 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 18 Jan 2023 03:56:21 GMT
Expires: Wed, 25 Jan 2023 03:56:20 GMT
Etag: "81633231003da3bbcb216d09fa6c6bfd779bf33b"
Cache-Control: max-age=508128,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78bd8fef3a62b4fa-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash 5f1f8cfafbe8d1d8715f73078d990068
81633231003da3bbcb216d09fa6c6bfd779bf33b
36c5d32a366c2447ba150ef104d2ca34a30296988c899b292f74da7952b33c31
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 06:37:31 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 18 Jan 2023 03:56:21 GMT
Expires: Wed, 25 Jan 2023 03:56:20 GMT
Etag: "81633231003da3bbcb216d09fa6c6bfd779bf33b"
Cache-Control: max-age=508128,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78bd8fef38a1b505-OSL
rtbrennab.com/get/?go=1&data=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
200 OK 2.4 kB URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
Hash 05d602bdf3bee121c4d4327b1fff7e2f
80d28fe3f0661eab5b5c9420cb767a8e893e97ec
b01e6ab22c88adc926393c3f8c1a8e3e3776989a52c8b09fb02addab23ab441d
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 5f1f8cfafbe8d1d8715f73078d990068
81633231003da3bbcb216d09fa6c6bfd779bf33b
36c5d32a366c2447ba150ef104d2ca34a30296988c899b292f74da7952b33c31
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 06:37:31 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 18 Jan 2023 03:56:21 GMT
Expires: Wed, 25 Jan 2023 03:56:20 GMT
Etag: "81633231003da3bbcb216d09fa6c6bfd779bf33b"
Cache-Control: max-age=508128,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78bd8fef3f5ab506-OSL
lcdn.tsyndicate.com/sdk/v1/b.b.js
200 OK 2.8 kB URL HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP
File type ASCII text, with very long lines (2590)
Hash 01c3ce239d639853ba1e41661c115938
704741ca41e890a26eef6190c2d61131ff294f56
9aabcddb7b91826c4b8bf721d77fa448ceba501616a38c6fe0d6c4f11091ed47
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r-eu.tsyndicate.com/
Cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: application/javascript
content-length: 2808
last-modified: Tue, 22 Feb 2022 13:07:15 GMT
server: nginx
x-robots-tag: noindex, nofollow
content-encoding: gzip
vary: Accept-Encoding
etag: W/"6214e003-1eb1"
age: 27375988
accept-ranges: bytes
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
304 Not Modified 0 B URL HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r-eu.tsyndicate.com/
Cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
If-Modified-Since: Tue, 22 Feb 2022 13:07:15 GMT
If-None-Match: W/"6214e003-1eb1"
TE: trailers
HTTP/2 304 Not Modified
date: Thu, 19 Jan 2023 06:37:31 GMT
last-modified: Tue, 22 Feb 2022 13:07:15 GMT
server: nginx
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6214e003-1eb1"
age: 27375988
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
304 Not Modified 0 B URL HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r-eu.tsyndicate.com/
Cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
If-Modified-Since: Tue, 22 Feb 2022 13:07:15 GMT
If-None-Match: W/"6214e003-1eb1"
TE: trailers
HTTP/2 304 Not Modified
date: Thu, 19 Jan 2023 06:37:31 GMT
last-modified: Tue, 22 Feb 2022 13:07:15 GMT
server: nginx
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6214e003-1eb1"
age: 27375988
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
304 Not Modified 0 B URL HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r-eu.tsyndicate.com/
Cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
If-Modified-Since: Tue, 22 Feb 2022 13:07:15 GMT
If-None-Match: W/"6214e003-1eb1"
TE: trailers
HTTP/2 304 Not Modified
date: Thu, 19 Jan 2023 06:37:31 GMT
last-modified: Tue, 22 Feb 2022 13:07:15 GMT
server: nginx
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6214e003-1eb1"
age: 27375988
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
304 Not Modified 0 B URL HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r-eu.tsyndicate.com/
Cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
If-Modified-Since: Tue, 22 Feb 2022 13:07:15 GMT
If-None-Match: W/"6214e003-1eb1"
TE: trailers
HTTP/2 304 Not Modified
date: Thu, 19 Jan 2023 06:37:31 GMT
last-modified: Tue, 22 Feb 2022 13:07:15 GMT
server: nginx
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6214e003-1eb1"
age: 27375988
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
304 Not Modified 0 B URL HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r-eu.tsyndicate.com/
Cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
If-Modified-Since: Tue, 22 Feb 2022 13:07:15 GMT
If-None-Match: W/"6214e003-1eb1"
TE: trailers
HTTP/2 304 Not Modified
date: Thu, 19 Jan 2023 06:37:31 GMT
last-modified: Tue, 22 Feb 2022 13:07:15 GMT
server: nginx
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6214e003-1eb1"
age: 27375988
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
304 Not Modified 0 B URL HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r-eu.tsyndicate.com/
Cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
If-Modified-Since: Tue, 22 Feb 2022 13:07:15 GMT
If-None-Match: W/"6214e003-1eb1"
TE: trailers
HTTP/2 304 Not Modified
date: Thu, 19 Jan 2023 06:37:31 GMT
last-modified: Tue, 22 Feb 2022 13:07:15 GMT
server: nginx
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6214e003-1eb1"
age: 27375988
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
304 Not Modified 0 B URL HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r-eu.tsyndicate.com/
Cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
If-Modified-Since: Tue, 22 Feb 2022 13:07:15 GMT
If-None-Match: W/"6214e003-1eb1"
TE: trailers
HTTP/2 304 Not Modified
date: Thu, 19 Jan 2023 06:37:31 GMT
last-modified: Tue, 22 Feb 2022 13:07:15 GMT
server: nginx
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6214e003-1eb1"
age: 27375988
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
304 Not Modified 0 B URL HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r-eu.tsyndicate.com/
Cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
If-Modified-Since: Tue, 22 Feb 2022 13:07:15 GMT
If-None-Match: W/"6214e003-1eb1"
TE: trailers
HTTP/2 304 Not Modified
date: Thu, 19 Jan 2023 06:37:31 GMT
last-modified: Tue, 22 Feb 2022 13:07:15 GMT
server: nginx
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6214e003-1eb1"
age: 27375988
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
200 OK 1.9 kB URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2350)
Hash 35e1d52c7fb38f0b4b0b95c528846f48
8b0bdde9528ef49a2e4f80ae17920c51b4d845f6
e3dfc3f8a3770e323e79530570f43f25927ee167096127acc2c4dfeaedc08a50
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
200 OK 1.9 kB URL HTTP/2 rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxNDk2LCJzcGFjZWlkIjoyODcyNywidHlwZSI6InBvcCIsImlkem9uZSI6NDQ2MTMwOCwiYWRfdGFncyI6IlN0cmFpZ2h0JTJDRmV0aXNoJTJDQW1hdGV1ciUyQ01JTEYlMkNCbG9uZGUlMkNGb290JTIwRmV0aXNoJTJDSEQiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6Mjg3MjcsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjEwLCJzdHJhdGFnZW0iOm51bGwsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1Nn0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH19XSwic2l0ZSI6eyJpZCI6IjI4NzI3IiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL2hjbGlwcy5jb20vdmlkZW9zLzc4MTk1NzkvbGluZGEtc2xlZXB5LWZlZXQvIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjllNDk0N2YzNTc1MTQ2NTQxMWZkMWE0ZjVjMzU4Yzc4In0sImV4dCI6eyJkdCI6MTY3NDExMDI1MDA5Mn19
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2343)
Hash 2ad360af24483ec0b6e2671834ca6584
18ba90810566af54ccdba7115bd99bbc20fcc0bd
0f8ec30aae350e75edbb3445d954adc420a0a57904794cbbb4e6ba29e7d73bda
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
304 Not Modified 0 B URL HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r-eu.tsyndicate.com/
Cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
If-Modified-Since: Tue, 22 Feb 2022 13:07:15 GMT
If-None-Match: W/"6214e003-1eb1"
TE: trailers
HTTP/2 304 Not Modified
date: Thu, 19 Jan 2023 06:37:31 GMT
last-modified: Tue, 22 Feb 2022 13:07:15 GMT
server: nginx
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6214e003-1eb1"
age: 27375988
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
304 Not Modified 0 B URL HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r-eu.tsyndicate.com/
Cookie: ts_uid=9e4947f35751465411fd1a4f5c358c78
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
If-Modified-Since: Tue, 22 Feb 2022 13:07:15 GMT
If-None-Match: W/"6214e003-1eb1"
TE: trailers
HTTP/2 304 Not Modified
date: Thu, 19 Jan 2023 06:37:31 GMT
last-modified: Tue, 22 Feb 2022 13:07:15 GMT
server: nginx
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6214e003-1eb1"
age: 27375988
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
304 Not Modified 0 B URL HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=205ab7e7-1eaf-4dbd-a646-9d7d0450ce48
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
If-Modified-Since: Tue, 22 Feb 2022 13:07:15 GMT
If-None-Match: W/"6214e003-1eb1"
TE: trailers
HTTP/2 304 Not Modified
date: Thu, 19 Jan 2023 06:37:31 GMT
last-modified: Tue, 22 Feb 2022 13:07:15 GMT
server: nginx
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6214e003-1eb1"
age: 27375988
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 5f1f8cfafbe8d1d8715f73078d990068
81633231003da3bbcb216d09fa6c6bfd779bf33b
36c5d32a366c2447ba150ef104d2ca34a30296988c899b292f74da7952b33c31
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 06:37:31 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 18 Jan 2023 03:56:21 GMT
Expires: Wed, 25 Jan 2023 03:56:20 GMT
Etag: "81633231003da3bbcb216d09fa6c6bfd779bf33b"
Cache-Control: max-age=508128,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78bd8fef3a5fb518-OSL
go.xlivrdr.com/smartpop/c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&sourceId=226437&memberId=zh7jSCcRbMekT1IqmIRVb18wbJ1Tr22rCROWHnLkKwq3CMNaepo-nG5wz8vFW2ucFRBiPrSM5qZ3_k2gYasHYiGJl0NTsFy9MYJRbKNCrbJlLoA_gUIDRUi&p1=4097593&buttonColor=%23930606&liveBadgeColor=%23ff0707
302 Found 0 B URL HTTP/2 go.xlivrdr.com/smartpop/c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&sourceId=226437&memberId=zh7jSCcRbMekT1IqmIRVb18wbJ1Tr22rCROWHnLkKwq3CMNaepo-nG5wz8vFW2ucFRBiPrSM5qZ3_k2gYasHYiGJl0NTsFy9MYJRbKNCrbJlLoA_gUIDRUi&p1=4097593&buttonColor=%23930606&liveBadgeColor=%23ff0707
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smartpop/c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&sourceId=226437&memberId=zh7jSCcRbMekT1IqmIRVb18wbJ1Tr22rCROWHnLkKwq3CMNaepo-nG5wz8vFW2ucFRBiPrSM5qZ3_k2gYasHYiGJl0NTsFy9MYJRbKNCrbJlLoA_gUIDRUi&p1=4097593&buttonColor=%23930606&liveBadgeColor=%23ff0707 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 19 Jan 2023 06:37:31 GMT
content-length: 0
location: https://creative.xliirdr.com/widgets/v4/Universal?buttonColor=%23930606&campaignId=c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88&campaignType=smartpop&creativeId=f7d35c19e8363f8e59e197e6034e23aaac0f22600b273fb0cad1f12ae1c95358&iterationId=383554&liveBadgeColor=%23ff0707&masterSmartpopId=1605&memberId=zh7jSCcRbMekT1IqmIRVb18wbJ1Tr22rCROWHnLkKwq3CMNaepo-nG5wz8vFW2ucFRBiPrSM5qZ3_k2gYasHYiGJl0NTsFy9MYJRbKNCrbJlLoA_gUIDRUi&p1=4097593&quality=optimal&ruleId=3&smartpopId=1547&sourceId=226437&tag=-girls%2Findian&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=30029
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: DYNAMIC
set-cookie: _var=808613.30029; Path=/; HttpOnly; SameSite=Strict
__cflb=02DiuDfsBaY2bRYJiCeRWUB3HBu9a5K9VP22CyYuqU3rk; SameSite=None; Secure; path=/; expires=Fri, 20-Jan-23 05:37:31 GMT; HttpOnly
server: cloudflare
cf-ray: 78bd8ff05e32b4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
video.ktkjmp.com/adsbygoogle.js
200 OK 4.2 kB URL HTTP/2 video.ktkjmp.com/adsbygoogle.js
IP
Hash 09a7f31f27985420b77e81c2dc6c3eb3
4082488ce21590dfad251bf70fcecd9d66443960
ede2019b6a0073ac7c9ba053444b2944f881821deeeda31e9941b3499bcfb12a
GET /adsbygoogle.js HTTP/1.1
Host: video.ktkjmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xliirdr.com/
Origin: https://creative.xliirdr.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: application/javascript
content-length: 16
x-amz-id-2: 82LrMcdTIgiiUrI9u3lX3tFHaCLr3ymHKLkEwNLyokkeYiwFlIM4yC4yCFQnnUQuIMhDhYz/PaY=
x-amz-request-id: G1890SVVQRD857Z0
last-modified: Thu, 10 Mar 2022 13:52:07 GMT
etag: "3d7f7a60216d40dea48e495fef6903c9"
x-amz-meta-s3cmd-attrs: atime:1646920284/ctime:1646920283/gid:20/gname:staff/md5:3d7f7a60216d40dea48e495fef6903c9/mode:33188/mtime:1646920283/uid:501/uname:mikhailchubar
x-amz-version-id: eIgLIBoMMcsEXtxOH6UDjWyfAquRpkIG
access-control-allow-origin: https://creative.xliirdr.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: HIT
age: 5576
expires: Thu, 19 Jan 2023 10:37:31 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bd8ff1cb3eb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WU2XijDA0aOFqMEYPjRgsaZWDQaIHDoMkxMm7MCANjRo4aY8bEEPFwjpg0ZBTq2CIChoguD8PUGZOxzAwzZHDkIJNDJAwzVWmIKRODpZkZMlrYKGPDTFkxMmTAyCGGJ0QydijioJEDx0M4ddoylJHjRlI4cOTaFTEHzkQdNNbeqJFjxsMxbQLrSGuDxgy_b80slOFYhBg3bijasAHDxo2KItq4wcgQrNq7qlnHoBEjxuA6O3UMpEMHzhwdL16ceeMCD5s0duSQkeNizJs2L-a0CSOn9xs4L8Y8DTODxg0ZOGDUuIGjTA4YYXKUaSkmBlnwMMbAcGqjoQwaZBrGIDPSDFkxYtQgxndPbZSDd2Osh8MPdcyBUBJk9FAGGSh1R5daMoTxURhmhIFDDDM0BMMN6eWXYQxj5GADZzLYRppHYpiRU4ZhxCDGDDPZJtUNYrzIRR0wwCCDDXO8UYccCULYA2WW3fBjkEO2UUYbW8mh5Ax4OGEEEkncQcURRlQxRg1R2MGEEjHoEUcYZeCBxBhMxJhQGUrUEAMaR-BABhlOSBHFG1UQYQcddVTBRg123GHHV2To0UQdX8xAhRZy3MDEEW3QoAcRc5yRhBBCSNVCE2aoEQMMYjRBRA1rUIFDiHDU4EQZUtxQhRZuzKDFFDQ8McMdMHxxRhVJECFFFWk8KaQNcMTQQ2J9MTaDskOKUQdvb7gxxBtsvCFHDyVw1lhppVFrw3F2lCGEQWeUsW2334b7lBkjjugWGc9lVJ0YcpQBWhhiNJfvY2EctkWISHmmmQ4wuAADanLYIZltD9VRRxoZqVUDwB2Z5B6HJ5EhBhkthFGZDS1MdQMZKtUQn0c4uJWGZCLkEIML57lAgwwuNESDW3J8MXNGNuPc8M491_BzxWFk1MQbeqTBBhthvFCDwyCgcEUabuB7xxwgOEEFCKc6vAMIW7tR2dl4rA1CxAyJ53AKIBxRxhhrvPGCWqc-_DAIRqTRrxlv4PHCqVcb9RhTujnxhFvefpFTRo67xQbjIhThxL1l2PFFv2xQNB55M9gQHgwPyXFGaJPVUNJDB3nO70I4DBb7F228QcZmONQHuxxvLNTZG0LRcBfweOSxkPEiDJ4RGrz5BtwL-_b7b8DOQefWHBHr-wYdBXvbQh1upEFHC925wF8MMtyL-UFfrN--RW2IdgNtp8pgJ_3tM2Qa_kKy02WYZ5DPlaEwXyiY_QCoP9R0LoFsQAgdhHIwGiQMYIcRwUE6VAc2TOQul1sI6kQwBtbAoA8KCAg%3D&s=e5101ede6505e935c607d0504d0da23ca1bac2794a24aa7df876ef3a5f6ca4891674110251&w=t&r=1&d=232&priv=false
200 OK 24 B URL HTTP/2 pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WU2XijDA0aOFqMEYPjRgsaZWDQaIHDoMkxMm7MCANjRo4aY8bEEPFwjpg0ZBTq2CIChoguD8PUGZOxzAwzZHDkIJNDJAwzVWmIKRODpZkZMlrYKGPDTFkxMmTAyCGGJ0QydijioJEDx0M4ddoylJHjRlI4cOTaFTEHzkQdNNbeqJFjxsMxbQLrSGuDxgy_b80slOFYhBg3bijasAHDxo2KItq4wcgQrNq7qlnHoBEjxuA6O3UMpEMHzhwdL16ceeMCD5s0duSQkeNizJs2L-a0CSOn9xs4L8Y8DTODxg0ZOGDUuIGjTA4YYXKUaSkmBlnwMMbAcGqjoQwaZBrGIDPSDFkxYtQgxndPbZSDd2Osh8MPdcyBUBJk9FAGGSh1R5daMoTxURhmhIFDDDM0BMMN6eWXYQxj5GADZzLYRppHYpiRU4ZhxCDGDDPZJtUNYrzIRR0wwCCDDXO8UYccCULYA2WW3fBjkEO2UUYbW8mh5Ax4OGEEEkncQcURRlQxRg1R2MGEEjHoEUcYZeCBxBhMxJhQGUrUEAMaR-BABhlOSBHFG1UQYQcddVTBRg123GHHV2To0UQdX8xAhRZy3MDEEW3QoAcRc5yRhBBCSNVCE2aoEQMMYjRBRA1rUIFDiHDU4EQZUtxQhRZuzKDFFDQ8McMdMHxxRhVJECFFFWk8KaQNcMTQQ2J9MTaDskOKUQdvb7gxxBtsvCFHDyVw1lhppVFrw3F2lCGEQWeUsW2334b7lBkjjugWGc9lVJ0YcpQBWhhiNJfvY2EctkWISHmmmQ4wuAADanLYIZltD9VRRxoZqVUDwB2Z5B6HJ5EhBhkthFGZDS1MdQMZKtUQn0c4uJWGZCLkEIML57lAgwwuNESDW3J8MXNGNuPc8M491_BzxWFk1MQbeqTBBhthvFCDwyCgcEUabuB7xxwgOEEFCKc6vAMIW7tR2dl4rA1CxAyJ53AKIBxRxhhrvPGCWqc-_DAIRqTRrxlv4PHCqVcb9RhTujnxhFvefpFTRo67xQbjIhThxL1l2PFFv2xQNB55M9gQHgwPyXFGaJPVUNJDB3nO70I4DBb7F228QcZmONQHuxxvLNTZG0LRcBfweOSxkPEiDJ4RGrz5BtwL-_b7b8DOQefWHBHr-wYdBXvbQh1upEFHC925wF8MMtyL-UFfrN--RW2IdgNtp8pgJ_3tM2Qa_kKy02WYZ5DPlaEwXyiY_QCoP9R0LoFsQAgdhHIwGiQMYIcRwUE6VAc2TOQul1sI6kQwBtbAoA8KCAg%3D&s=e5101ede6505e935c607d0504d0da23ca1bac2794a24aa7df876ef3a5f6ca4891674110251&w=t&r=1&d=232&priv=false
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0959ba36d476b6dc1994ba3c678b07c4
d30b94da72daa02766965206a85b7e0356375f5e
897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WU2XijDA0aOFqMEYPjRgsaZWDQaIHDoMkxMm7MCANjRo4aY8bEEPFwjpg0ZBTq2CIChoguD8PUGZOxzAwzZHDkIJNDJAwzVWmIKRODpZkZMlrYKGPDTFkxMmTAyCGGJ0QydijioJEDx0M4ddoylJHjRlI4cOTaFTEHzkQdNNbeqJFjxsMxbQLrSGuDxgy_b80slOFYhBg3bijasAHDxo2KItq4wcgQrNq7qlnHoBEjxuA6O3UMpEMHzhwdL16ceeMCD5s0duSQkeNizJs2L-a0CSOn9xs4L8Y8DTODxg0ZOGDUuIGjTA4YYXKUaSkmBlnwMMbAcGqjoQwaZBrGIDPSDFkxYtQgxndPbZSDd2Osh8MPdcyBUBJk9FAGGSh1R5daMoTxURhmhIFDDDM0BMMN6eWXYQxj5GADZzLYRppHYpiRU4ZhxCDGDDPZJtUNYrzIRR0wwCCDDXO8UYccCULYA2WW3fBjkEO2UUYbW8mh5Ax4OGEEEkncQcURRlQxRg1R2MGEEjHoEUcYZeCBxBhMxJhQGUrUEAMaR-BABhlOSBHFG1UQYQcddVTBRg123GHHV2To0UQdX8xAhRZy3MDEEW3QoAcRc5yRhBBCSNVCE2aoEQMMYjRBRA1rUIFDiHDU4EQZUtxQhRZuzKDFFDQ8McMdMHxxRhVJECFFFWk8KaQNcMTQQ2J9MTaDskOKUQdvb7gxxBtsvCFHDyVw1lhppVFrw3F2lCGEQWeUsW2334b7lBkjjugWGc9lVJ0YcpQBWhhiNJfvY2EctkWISHmmmQ4wuAADanLYIZltD9VRRxoZqVUDwB2Z5B6HJ5EhBhkthFGZDS1MdQMZKtUQn0c4uJWGZCLkEIML57lAgwwuNESDW3J8MXNGNuPc8M491_BzxWFk1MQbeqTBBhthvFCDwyCgcEUabuB7xxwgOEEFCKc6vAMIW7tR2dl4rA1CxAyJ53AKIBxRxhhrvPGCWqc-_DAIRqTRrxlv4PHCqVcb9RhTujnxhFvefpFTRo67xQbjIhThxL1l2PFFv2xQNB55M9gQHgwPyXFGaJPVUNJDB3nO70I4DBb7F228QcZmONQHuxxvLNTZG0LRcBfweOSxkPEiDJ4RGrz5BtwL-_b7b8DOQefWHBHr-wYdBXvbQh1upEFHC925wF8MMtyL-UFfrN--RW2IdgNtp8pgJ_3tM2Qa_kKy02WYZ5DPlaEwXyiY_QCoP9R0LoFsQAgdhHIwGiQMYIcRwUE6VAc2TOQul1sI6kQwBtbAoA8KCAg%3D&s=e5101ede6505e935c607d0504d0da23ca1bac2794a24aa7df876ef3a5f6ca4891674110251&w=t&r=1&d=232&priv=false HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=205ab7e7-1eaf-4dbd-a646-9d7d0450ce48
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 91d6fb6f66f6f75a20e1ea719e803905
25b11595dcef60dd2004844d7abb076d49e4bbd3
1d87a6c958b19cd06b5e5f82b01bbdbfc873aac3c5fff1811c067b0e7b240971
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2430
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 06:37:32 GMT
Last-Modified: Thu, 19 Jan 2023 05:57:02 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 91d6fb6f66f6f75a20e1ea719e803905
25b11595dcef60dd2004844d7abb076d49e4bbd3
1d87a6c958b19cd06b5e5f82b01bbdbfc873aac3c5fff1811c067b0e7b240971
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2430
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 06:37:32 GMT
Last-Modified: Thu, 19 Jan 2023 05:57:02 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 372 B IP
Hash bcea8a8ba80fad72ad2cc21a739cc1bc
0a35e8139a7f3968fdd33c05fee87340f62d7573
30e1d5411e3ab51d00dadcc5d7b6baf03f2a70b8aabdeb33e36a8fd5b4ce98de
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1519
Cache-Control: max-age=85742
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 06:37:32 GMT
Etag: "63c78b2b-116"
Expires: Fri, 20 Jan 2023 06:26:34 GMT
Last-Modified: Wed, 18 Jan 2023 06:01:15 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 278
chaturbate.com/in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
302 Found 278 B URL HTTP/2 chaturbate.com/in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
IP
Hash 91d6fb6f66f6f75a20e1ea719e803905
25b11595dcef60dd2004844d7abb076d49e4bbd3
1d87a6c958b19cd06b5e5f82b01bbdbfc873aac3c5fff1811c067b0e7b240971
GET /in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1 HTTP/1.1
Host: chaturbate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r-eu.tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html; charset=utf-8
location: /topembed/female/?join_overlay=1&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
vary: Accept-Language, Cookie
content-language: en
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://ajax.googleapis.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.google.com/cv/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/cv/ https://www.gstatic.com/eureka/ https://www.gstatic.com/cast/ https://*.nr-data.net https://certify-js.alexametrics.com https://player.vimeo.com/api/player.js http://static.hotjar.com https://static.hotjar.com https://script.hotjar.com ; style-src 'self' data: 'unsafe-inline' https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.googleapis.com ; img-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://*.stream.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.nr-data.net https://certify.alexametrics.com https://stats.g.doubleclick.net https://cbgames.s3.amazonaws.com https://player.vimeo.com https://script.hotjar.com http://script.hotjar.com ; font-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.gstatic.com http://script.hotjar.com https://script.hotjar.com ; connect-src 'self' blob: blob https://*.mmcdn.com wss://*.mmcdn.com wss://*.mmcdn.com:8443 https://*.highwebmedia.com wss://*.highwebmedia.com wss://*.highwebmedia.com:8443 https://*.nr-data.net https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://cbvideoupload.s3-accelerate.amazonaws.com https://stats.g.doubleclick.net https://internet-up.ably-realtime.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://tls-use1.fpapi.io https://use1.fptls.com https://eun1.fptls.com https://aps1.fptls.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* https://surveystats.hotjar.io wss://*.hotjar.com ; media-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com mediasource: blob: data: https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com; object-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://download.macromedia.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com ; frame-src 'self' https://*.mmcdn.com https://*.chaturbate.com https://chaturbate.com https://*.highwebmedia.com https://adserver.exoticads.com https://www.google.com/recaptcha/ https://*.wnu.com https://wnu.com https://checkout.2000charge.com https://www.sofort.com https://*.girogate.de https://player.vimeo.com https://vars.hotjar.com ; child-src 'self' blob: blob ; worker-src 'self' blob: blob ; form-action 'self' https://*.chaturbate.com https://chaturbate.com https://*.stream.highwebmedia.com https://*.wnu.com https://wnu.com https://devportal.cb.dev https://*.web.amer-1.jumio.ai https://smartpay.coinsmart.com https://secure.paygarden.com ; manifest-src 'self' https://*.mmcdn.com https://*.highwebmedia.com ; report-uri https://report-uri.mmcdn.com/r/t/csp/enforce;
report-to: {"group":"default","max_age":2592000,"endpoints":[{"url":"https://report-uri.mmcdn.com/a/t/g"}],"include_subdomains":true}
nel: {"report_to":"default","max_age":2592000,"include_subdomains":true}
x-frame-options: DENY
cache-control: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block; report=https://report-uri.highwebmedia.com/r/t/xss/enforce
referrer-policy: strict-origin-when-cross-origin
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
set-cookie: u_6o0b=1; expires=Tue, 24 Jan 2023 06:37:31 GMT; Max-Age=432000; Path=/
us_6o0b=1; Path=/
affkey="eJwdjUEKgzAQRa8iszZGCwq667qnGNMEQ41K5ouI9O7tuHz/PfgXgYaCurUeqSzIpU2xfb76Thn5owwxaMzhR8fJOIaqrGICNhmszcbvFeRc3vGvfeXWZDXiEDRjibzIvOOIwet+vzwa+v4ABdglHg=="; Domain=.chaturbate.com; expires=Sat, 18 Feb 2023 06:37:31 GMT; Max-Age=2592000; Path=/
fromaffiliate=1; Domain=.chaturbate.com; Path=/
noads=1; expires=Thu, 19 Jan 2023 12:37:31 GMT; Max-Age=21600; Path=/
sbr=sec:sbreb13964c-bb98-4172-8bc0-f1f44b8fbcef:1pIOYF:3iM-01rwkKuQ1h-q4rUtD6X1P1c; Domain=.chaturbate.com; expires=Tue, 14 Oct 2025 06:37:31 GMT; HttpOnly; Max-Age=86313600; Path=/; Secure
__cf_bm=AFCVKWN4oFxtZL45EgxBx4nxL6JT2rQm8LMOFSaaWvM-1674110251-0-AcgbwkJ+nkfYHO+LIpZL/eY4r5stm6LIjfKAC94cXaG5GtwJRtyrShgYyNcvSPbb7PV1XcbkYuh0785as2Yehps=; path=/; expires=Thu, 19-Jan-23 07:07:31 GMT; domain=.chaturbate.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78bd8fefeb1c1c12-OSL
X-Firefox-Spdy: h2
chaturbate.com/topembed/female/?join_overlay=1&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
302 Found 278 B URL HTTP/2 chaturbate.com/topembed/female/?join_overlay=1&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
IP
Hash 91d6fb6f66f6f75a20e1ea719e803905
25b11595dcef60dd2004844d7abb076d49e4bbd3
1d87a6c958b19cd06b5e5f82b01bbdbfc873aac3c5fff1811c067b0e7b240971
GET /topembed/female/?join_overlay=1&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1 HTTP/1.1
Host: chaturbate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://r-eu.tsyndicate.com/
Connection: keep-alive
Cookie: __cf_bm=AFCVKWN4oFxtZL45EgxBx4nxL6JT2rQm8LMOFSaaWvM-1674110251-0-AcgbwkJ+nkfYHO+LIpZL/eY4r5stm6LIjfKAC94cXaG5GtwJRtyrShgYyNcvSPbb7PV1XcbkYuh0785as2Yehps=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html; charset=utf-8
location: /embed/annaceleste/?join_overlay=1&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
vary: Accept-Language, Cookie
content-language: en
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://ajax.googleapis.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.google.com/cv/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/cv/ https://www.gstatic.com/eureka/ https://www.gstatic.com/cast/ https://*.nr-data.net https://certify-js.alexametrics.com https://player.vimeo.com/api/player.js http://static.hotjar.com https://static.hotjar.com https://script.hotjar.com ; style-src 'self' data: 'unsafe-inline' https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.googleapis.com ; img-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://*.stream.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.nr-data.net https://certify.alexametrics.com https://stats.g.doubleclick.net https://cbgames.s3.amazonaws.com https://player.vimeo.com https://script.hotjar.com http://script.hotjar.com ; font-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.gstatic.com http://script.hotjar.com https://script.hotjar.com ; connect-src 'self' blob: blob https://*.mmcdn.com wss://*.mmcdn.com wss://*.mmcdn.com:8443 https://*.highwebmedia.com wss://*.highwebmedia.com wss://*.highwebmedia.com:8443 https://*.nr-data.net https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://cbvideoupload.s3-accelerate.amazonaws.com https://stats.g.doubleclick.net https://internet-up.ably-realtime.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://tls-use1.fpapi.io https://use1.fptls.com https://eun1.fptls.com https://aps1.fptls.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* https://surveystats.hotjar.io wss://*.hotjar.com ; media-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com mediasource: blob: data: https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com; object-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://download.macromedia.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com ; frame-src 'self' https://*.mmcdn.com https://*.chaturbate.com https://chaturbate.com https://*.highwebmedia.com https://adserver.exoticads.com https://www.google.com/recaptcha/ https://*.wnu.com https://wnu.com https://checkout.2000charge.com https://www.sofort.com https://*.girogate.de https://player.vimeo.com https://vars.hotjar.com ; child-src 'self' blob: blob ; worker-src 'self' blob: blob ; form-action 'self' https://*.chaturbate.com https://chaturbate.com https://*.stream.highwebmedia.com https://*.wnu.com https://wnu.com https://devportal.cb.dev https://*.web.amer-1.jumio.ai https://smartpay.coinsmart.com https://secure.paygarden.com ; manifest-src 'self' https://*.mmcdn.com https://*.highwebmedia.com ; report-uri https://report-uri.mmcdn.com/r/t/csp/enforce;
report-to: {"group":"default","max_age":2592000,"endpoints":[{"url":"https://report-uri.mmcdn.com/a/t/g"}],"include_subdomains":true}
nel: {"report_to":"default","max_age":2592000,"include_subdomains":true}
x-frame-options: DENY
cache-control: no-cache
set-cookie: affkey=eJyrVipSslJQyigpKSi20tcv0k0t1SsprsxLyUxOLEnVS87P1VeqBQDlhgyT; Domain=.chaturbate.com; expires=Sat, 18 Feb 2023 06:37:31 GMT; Max-Age=2592000; Path=/
sbr=sec:sbree0e50f1-5663-46f3-a720-c75073faf980:1pIOYF:2GkklpFZilgaG15NWPX60o1Zgd4; Domain=.chaturbate.com; expires=Tue, 14 Oct 2025 06:37:31 GMT; HttpOnly; Max-Age=86313600; Path=/; Secure
x-content-type-options: nosniff
x-xss-protection: 1; mode=block; report=https://report-uri.highwebmedia.com/r/t/xss/enforce
referrer-policy: strict-origin-when-cross-origin
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78bd8ff10c8d1c12-OSL
X-Firefox-Spdy: h2
img.strpst.com/thumbs/1674110161/72568703
200 OK 24 kB URL HTTP/2 img.strpst.com/thumbs/1674110161/72568703
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 270x360, components 3\012- data
Hash c87b303c681a1d1b43c476300268170b
76a1e5105488cda6d1a396d3910a2b96d2a63c41
6edb238473720d88faad1f9f2d2e1478c9b65b0f86129b2d331f1c0d31a3f8d5
GET /thumbs/1674110161/72568703 HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://creative.xliirdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:32 GMT
content-type: image/jpeg
content-length: 24355
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-allow-origin: *
cf-bgj: imgq:100,h2pri
cf-polished: origSize=25064, status=webp_bigger
etag: "b40fa179a0ceb7dcd92668e15efe2429"
last-modified: Thu, 19 Jan 2023 06:35:29 GMT
cf-cache-status: HIT
age: 45
expires: Thu, 19 Jan 2023 07:07:32 GMT
cache-control: public, max-age=1800
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bd8ff34838b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img.strpst.com/thumbs/1674110161/71463224
200 OK 33 kB URL HTTP/2 img.strpst.com/thumbs/1674110161/71463224
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 270x360, components 3\012- data
Hash 75e0bf025753e1a16434584cc62f445b
37d659aeb8b39d9c7e496301c5646355377c2f0b
9f9904df26e5d07220f2ad8e284725f45c40a2837f58575b823d9bee1a2d7ec3
GET /thumbs/1674110161/71463224 HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://creative.xliirdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:32 GMT
content-type: image/jpeg
content-length: 32654
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-allow-origin: *
cf-bgj: imgq:100,h2pri
cf-polished: origSize=33810, status=webp_bigger
etag: "bb3f2ad6e4a62f7c9c8f682acc86c6e4"
last-modified: Thu, 19 Jan 2023 06:35:41 GMT
cf-cache-status: HIT
age: 45
expires: Thu, 19 Jan 2023 07:07:32 GMT
cache-control: public, max-age=1800
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bd8ff36856b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
9757fdc45b.92b501c719.com/in/multy
200 OK 19 kB URL HTTP/2 9757fdc45b.92b501c719.com/in/multy
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (19093), with no line terminators
Hash 5d30dd4055eba8ee960938b291abf96d
f04cbfda85658d9cb820367fc7c61dec68e0072f
1085a2b519e65d8bafcf2d651ea663c0fec4c17e69487ac035d777896d4a7e07
POST /in/multy HTTP/1.1
Host: 9757fdc45b.92b501c719.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1017
Origin: https://hclips.com
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 19 Jan 2023 06:37:32 GMT
content-type: application/json
content-length: 19100
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
img.strpst.com/thumbs/1674110161/71228306
200 OK 23 kB URL HTTP/2 img.strpst.com/thumbs/1674110161/71228306
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 270x360, components 3\012- data
Hash 232faedd4ba438ce2d069085e658a5b1
c84d4627ac00cc411194fde37d506085eb35cc00
d4f10af3adf9ab25092cefce77156ae76cbbb748ba53a28d0d29d8a6635ebeac
GET /thumbs/1674110161/71228306 HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://creative.xliirdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:32 GMT
content-type: image/jpeg
content-length: 22846
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-allow-origin: *
cf-bgj: imgq:100,h2pri
cf-polished: origSize=23809, status=webp_bigger
etag: "e5ce0985f6ada8552e82177e17c33a27"
last-modified: Thu, 19 Jan 2023 06:36:07 GMT
cf-cache-status: HIT
age: 45
expires: Thu, 19 Jan 2023 07:07:32 GMT
cache-control: public, max-age=1800
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bd8ff37862b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img.strpst.com/thumbs/1674110161/78571132
200 OK 17 kB URL HTTP/2 img.strpst.com/thumbs/1674110161/78571132
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 270x360, components 3\012- data
Hash c34828aaa3d2b231e4a8a58fca6eaccc
be859e3339a1b072df2319cd85d656008edf19d0
e099375e39806e9cb4a08b34b7ebdc45113f6ae599b6e200b746d35d21fd9aec
GET /thumbs/1674110161/78571132 HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://creative.xliirdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:32 GMT
content-type: image/jpeg
content-length: 17272
access-control-allow-methods: GET
access-control-allow-origin: *
cf-bgj: imgq:100,h2pri
cf-polished: origSize=18141, status=webp_bigger
etag: "b59cb447436d153a2727a614ba2f5b3f"
last-modified: Thu, 19 Jan 2023 06:35:27 GMT
cf-cache-status: HIT
age: 45
expires: Thu, 19 Jan 2023 07:07:32 GMT
cache-control: public, max-age=1800
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bd8ff38870b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img.strpst.com/thumbs/1674110161/96689290
200 OK 17 kB URL HTTP/2 img.strpst.com/thumbs/1674110161/96689290
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 270x360, components 3\012- data
Hash 0a5e153c8fe321ed8480213f894a5fae
2f21cccee24ac72e4460bfb90b3c9dbca01b148d
1d284e2df177f9aa692a8fd074f7ae81eb9f63b71d3b8b5c6901105b701af54a
GET /thumbs/1674110161/96689290 HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://creative.xliirdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:32 GMT
content-type: image/jpeg
content-length: 17115
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-allow-origin: *
cf-bgj: imgq:100,h2pri
cf-polished: origSize=18175, status=webp_bigger
etag: "6be6d304d0baac7a8aa15f20ac67a606"
last-modified: Thu, 19 Jan 2023 06:35:29 GMT
cf-cache-status: HIT
age: 45
expires: Thu, 19 Jan 2023 07:07:32 GMT
cache-control: public, max-age=1800
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bd8ff38872b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img.strpst.com/thumbs/1674110161/86249010
200 OK 36 kB URL HTTP/2 img.strpst.com/thumbs/1674110161/86249010
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 640x360, components 3\012- data
Hash c423b56fb436048dcda07474ec4cc937
63d18537979d0d096987ba11cbc885cf3a9a5430
e983d076ab08bf529c0d506602d48e8dedb6eeee7f76d07bbdefedd9befec923
GET /thumbs/1674110161/86249010 HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://creative.xliirdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:32 GMT
content-type: image/jpeg
content-length: 35606
access-control-allow-methods: GET
access-control-allow-origin: *
cf-bgj: imgq:100,h2pri
cf-polished: origSize=36785, status=webp_bigger
etag: "44e852847f2eb796cc82947f6d8de929"
last-modified: Thu, 19 Jan 2023 06:35:51 GMT
cf-cache-status: HIT
age: 45
expires: Thu, 19 Jan 2023 07:07:32 GMT
cache-control: public, max-age=1800
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bd8ff3a890b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 91d6fb6f66f6f75a20e1ea719e803905
25b11595dcef60dd2004844d7abb076d49e4bbd3
1d87a6c958b19cd06b5e5f82b01bbdbfc873aac3c5fff1811c067b0e7b240971
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2430
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 06:37:32 GMT
Last-Modified: Thu, 19 Jan 2023 05:57:02 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 278
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 468968d1f788697da67284872300b2ca
42b99fcab1a1735594a46c5d2800b2b5d0b6361e
3637565c56bbe053ecd14fde92be8e0ffb85c77519c76bd5015896e24cbe0c96
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3637565C56BBE053ECD14FDE92BE8E0FFB85C77519C76BD5015896E24CBE0C96"
Last-Modified: Wed, 18 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16586
Expires: Thu, 19 Jan 2023 11:13:58 GMT
Date: Thu, 19 Jan 2023 06:37:32 GMT
Connection: keep-alive
9757fdc45b.92b501c719.com/in/show/?mid=8775232586087654737&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1036627156&sid=3477700942&cid=13433&price=0.0031&is_cpm=0&cpm=0&ecpm=0.05093956676816007&crid=&crtid=8fc5a3949d58ed66158a5da3a7b48b19&tcid=0&out_id=1&ver=8.20.0&ver_c=&refdom=hclips.com&hostname=auc-inpage-hz-7-c&site_id=31438&spot_id=438&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-01-19&is_native=2&auction_queue=0&burl=VxBslWmRkTHDxRqb1Hr4laDvl_DnM9iLZ9zep_XWR8vOqrdCADKvqQ&pop_winurl=&ip=91.90.42.154&testab=0&px_id=53438&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.01026611808525446&placement_type_id=&skin_test=0&verify_hash=57450c1affd7b8a8015712735df73d95&score=69.15290619079323&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1036627156%26spot_id%3D438%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fhclips.com%252F%26idzone%3D4438140%26sid%3D1886&ml=&tag_ab=d&original_bid=0.0031&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=soWGReI8_-YLeBMFnFkPzXwbGxkJrXuj2gzA_EKn7TVotY1GS8h5mV4wYHbr4kjLTXzszDccykDU1Lkf8bvrfvBz4swIUhZNmUI69OX5y83RD801eeEDU5atutq28w-oQc35_pMn2gzU1Wl9qMjsDvfjtbhpOULVFwoSiO5YLcjmHT4TDQ&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp&skin_id=4&vertical_id=0&real_bid=0.00277512&pr=&user_keywords=&auc_type=1&aid=3335&ext_cid=0&device_theme=light&keywords=Adult&label_ids=4,83,89,0&conditions=dch_ip,tz_offset,all&need_redirect_show=0&mlf=1&cpa=51793c89-067d-4aa0-87d1-d43a98dad386&mlc=1&format=social-scale-b_r-body
200 OK 0 B URL HTTP/2 9757fdc45b.92b501c719.com/in/show/?mid=8775232586087654737&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1036627156&sid=3477700942&cid=13433&price=0.0031&is_cpm=0&cpm=0&ecpm=0.05093956676816007&crid=&crtid=8fc5a3949d58ed66158a5da3a7b48b19&tcid=0&out_id=1&ver=8.20.0&ver_c=&refdom=hclips.com&hostname=auc-inpage-hz-7-c&site_id=31438&spot_id=438&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-01-19&is_native=2&auction_queue=0&burl=VxBslWmRkTHDxRqb1Hr4laDvl_DnM9iLZ9zep_XWR8vOqrdCADKvqQ&pop_winurl=&ip=91.90.42.154&testab=0&px_id=53438&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.01026611808525446&placement_type_id=&skin_test=0&verify_hash=57450c1affd7b8a8015712735df73d95&score=69.15290619079323&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1036627156%26spot_id%3D438%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fhclips.com%252F%26idzone%3D4438140%26sid%3D1886&ml=&tag_ab=d&original_bid=0.0031&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=soWGReI8_-YLeBMFnFkPzXwbGxkJrXuj2gzA_EKn7TVotY1GS8h5mV4wYHbr4kjLTXzszDccykDU1Lkf8bvrfvBz4swIUhZNmUI69OX5y83RD801eeEDU5atutq28w-oQc35_pMn2gzU1Wl9qMjsDvfjtbhpOULVFwoSiO5YLcjmHT4TDQ&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp&skin_id=4&vertical_id=0&real_bid=0.00277512&pr=&user_keywords=&auc_type=1&aid=3335&ext_cid=0&device_theme=light&keywords=Adult&label_ids=4,83,89,0&conditions=dch_ip,tz_offset,all&need_redirect_show=0&mlf=1&cpa=51793c89-067d-4aa0-87d1-d43a98dad386&mlc=1&format=social-scale-b_r-body
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?mid=8775232586087654737&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1036627156&sid=3477700942&cid=13433&price=0.0031&is_cpm=0&cpm=0&ecpm=0.05093956676816007&crid=&crtid=8fc5a3949d58ed66158a5da3a7b48b19&tcid=0&out_id=1&ver=8.20.0&ver_c=&refdom=hclips.com&hostname=auc-inpage-hz-7-c&site_id=31438&spot_id=438&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-01-19&is_native=2&auction_queue=0&burl=VxBslWmRkTHDxRqb1Hr4laDvl_DnM9iLZ9zep_XWR8vOqrdCADKvqQ&pop_winurl=&ip=91.90.42.154&testab=0&px_id=53438&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.01026611808525446&placement_type_id=&skin_test=0&verify_hash=57450c1affd7b8a8015712735df73d95&score=69.15290619079323&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1036627156%26spot_id%3D438%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fhclips.com%252F%26idzone%3D4438140%26sid%3D1886&ml=&tag_ab=d&original_bid=0.0031&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=soWGReI8_-YLeBMFnFkPzXwbGxkJrXuj2gzA_EKn7TVotY1GS8h5mV4wYHbr4kjLTXzszDccykDU1Lkf8bvrfvBz4swIUhZNmUI69OX5y83RD801eeEDU5atutq28w-oQc35_pMn2gzU1Wl9qMjsDvfjtbhpOULVFwoSiO5YLcjmHT4TDQ&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp&skin_id=4&vertical_id=0&real_bid=0.00277512&pr=&user_keywords=&auc_type=1&aid=3335&ext_cid=0&device_theme=light&keywords=Adult&label_ids=4,83,89,0&conditions=dch_ip,tz_offset,all&need_redirect_show=0&mlf=1&cpa=51793c89-067d-4aa0-87d1-d43a98dad386&mlc=1&format=social-scale-b_r-body HTTP/1.1
Host: 9757fdc45b.92b501c719.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 19 Jan 2023 06:37:32 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
9757fdc45b.92b501c719.com/in/show/?mid=8775232586087654737&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1036627156&sid=3477700942&cid=2703&price=0.014&is_cpm=0&cpm=0&ecpm=0.07042438628719863&crid=49675&crtid=f4bc8cd691515e1eeae62c073e5070e3&tcid=0&out_id=0&ver=8.20.0&ver_c=&refdom=hclips.com&hostname=auc-inpage-hz-7-c&site_id=31438&spot_id=438&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1674167850&created_at=2023-01-19&is_native=1&auction_queue=0&burl=I3j33xCrB2ABZj2KcEOiO-6Nt9mwg_7vsu8SnHNmOyjyfzyEURSnTg&pop_winurl=&ip=91.90.42.154&testab=0&px_id=73438&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=hq&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.0032982136131467833&placement_type_id=&skin_test=0&verify_hash=fccf478581e7dcc2400ef5166091eb25&score=69.15290619079323&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1036627156%26spot_id%3D438%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fhclips.com%252F%26idzone%3D4438140%26sid%3D1886&ml=&tag_ab=d&original_bid=0.014&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=uHTNmK41nN7DawFwI8WDgjl4zqvBldDmXEHkStESVa0jXHEmjD54ODZOegQQrGqDYC8RhMWPHaE5LJlmNFzP4HYAENt2w6WwMEamxtUaSV5MHKmBRDcJGRrRZegaIj7mwFWVFd9fDjoRP15kSlf9uGzbGIDK_umb_sbZHBYFG7fefq6Y7md9PU6vFrRqL1dkKK8VTaHmtNzGb_71O4sCfVJT5HEjgSzgXeJfZk6H7zTTWrQ3ubKh8f7qxUKC2TszLR1PXvbPM8GWVz0uDpmarF5pNy-W-tnc5B5NnHSBlsnNO8Ml1JaPhrZQh5OD-1HPCzip6qndrWjK5btDiA96ibbct5Dp2JEJ2qnvcZfqm18LMr1QCbyxry1znTjYfGQ3uzDp_bIFYAa9-sRKeT5yhsrMyQneYztM-iJR59c9JjHAwW9hbohTy6JDCNPNciylpls_5gUV-W9a5mlM-_kUs6K7xjdDxw0M2J6f_dQnKgxX2cyKGmVEiOLvXFnPooAf3OLp1Gp_AEknvnIrzBhF7OM5CdQgf6SZ1K0IF70AeTuy69dbgsJrnE_iwMNUhUVJYuhTyzj_mWjq63vN0IcqUhtwdZkh_M1my8ZODHwf9KIf7WpUfMHhJWcVBhyMZSIpaxa0uEbJpBX32n9K_DgbCZvr3tD2jKlm0b6BZ5al&image_url=https%3A%2F%2Fimgdelnw.com%2Fie%3Fv%3D4%26c%3D4j2R8Ow6J-On2cB6rchST9OUAuPSlcQfZeoorwIfjOjn5dUsuXQv9d33aMBg4IKw7oXG8YGFsBKCCYAaCbSz0aGvsarmmvW2W3ZRv0kdp_R9q9KP-k45_AHzf4fMBHF5PggSXR4OZPk-HV5cqJ50lO5FindP0BejaVlqf9VP6SZBL-uHneIlCkYBIPcoLWS8moj7woPTXE13ccgdA7oJF2NGeEFLAZmvsMfkzoLRWyB6rIqxo9S2O3NO2jbx_8VxdupdpwwJrz4wKvkgRbxW-i_uPTsjOlr-C55CVXZCR2_lj4Tb6qXH9hZakPFKqPRGonhnCBK3rz_ewABg5DIYnNVXSIOQyk03EwCEYi2Xoe88SQtKVmVH1ja8y_dsn8Ua1V-dMhKgmYysfnT3Y6r0A6vPq5tugfiWpPI6YPaxhA%3D%3D&skin_id=4&vertical_id=5&real_bid=0.011942&pr=&user_keywords=&auc_type=1&aid=291&ext_cid=0&device_theme=light&keywords=Adult&label_ids=4,90,5&conditions=dch_ip,tz_offset,all&need_redirect_show=0&cpa=ad788a97-adc3-40e5-9e72-ff34d656688b&format=social-scale-b_r-body
200 OK 0 B URL HTTP/2 9757fdc45b.92b501c719.com/in/show/?mid=8775232586087654737&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1036627156&sid=3477700942&cid=2703&price=0.014&is_cpm=0&cpm=0&ecpm=0.07042438628719863&crid=49675&crtid=f4bc8cd691515e1eeae62c073e5070e3&tcid=0&out_id=0&ver=8.20.0&ver_c=&refdom=hclips.com&hostname=auc-inpage-hz-7-c&site_id=31438&spot_id=438&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1674167850&created_at=2023-01-19&is_native=1&auction_queue=0&burl=I3j33xCrB2ABZj2KcEOiO-6Nt9mwg_7vsu8SnHNmOyjyfzyEURSnTg&pop_winurl=&ip=91.90.42.154&testab=0&px_id=73438&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=hq&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.0032982136131467833&placement_type_id=&skin_test=0&verify_hash=fccf478581e7dcc2400ef5166091eb25&score=69.15290619079323&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1036627156%26spot_id%3D438%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fhclips.com%252F%26idzone%3D4438140%26sid%3D1886&ml=&tag_ab=d&original_bid=0.014&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=uHTNmK41nN7DawFwI8WDgjl4zqvBldDmXEHkStESVa0jXHEmjD54ODZOegQQrGqDYC8RhMWPHaE5LJlmNFzP4HYAENt2w6WwMEamxtUaSV5MHKmBRDcJGRrRZegaIj7mwFWVFd9fDjoRP15kSlf9uGzbGIDK_umb_sbZHBYFG7fefq6Y7md9PU6vFrRqL1dkKK8VTaHmtNzGb_71O4sCfVJT5HEjgSzgXeJfZk6H7zTTWrQ3ubKh8f7qxUKC2TszLR1PXvbPM8GWVz0uDpmarF5pNy-W-tnc5B5NnHSBlsnNO8Ml1JaPhrZQh5OD-1HPCzip6qndrWjK5btDiA96ibbct5Dp2JEJ2qnvcZfqm18LMr1QCbyxry1znTjYfGQ3uzDp_bIFYAa9-sRKeT5yhsrMyQneYztM-iJR59c9JjHAwW9hbohTy6JDCNPNciylpls_5gUV-W9a5mlM-_kUs6K7xjdDxw0M2J6f_dQnKgxX2cyKGmVEiOLvXFnPooAf3OLp1Gp_AEknvnIrzBhF7OM5CdQgf6SZ1K0IF70AeTuy69dbgsJrnE_iwMNUhUVJYuhTyzj_mWjq63vN0IcqUhtwdZkh_M1my8ZODHwf9KIf7WpUfMHhJWcVBhyMZSIpaxa0uEbJpBX32n9K_DgbCZvr3tD2jKlm0b6BZ5al&image_url=https%3A%2F%2Fimgdelnw.com%2Fie%3Fv%3D4%26c%3D4j2R8Ow6J-On2cB6rchST9OUAuPSlcQfZeoorwIfjOjn5dUsuXQv9d33aMBg4IKw7oXG8YGFsBKCCYAaCbSz0aGvsarmmvW2W3ZRv0kdp_R9q9KP-k45_AHzf4fMBHF5PggSXR4OZPk-HV5cqJ50lO5FindP0BejaVlqf9VP6SZBL-uHneIlCkYBIPcoLWS8moj7woPTXE13ccgdA7oJF2NGeEFLAZmvsMfkzoLRWyB6rIqxo9S2O3NO2jbx_8VxdupdpwwJrz4wKvkgRbxW-i_uPTsjOlr-C55CVXZCR2_lj4Tb6qXH9hZakPFKqPRGonhnCBK3rz_ewABg5DIYnNVXSIOQyk03EwCEYi2Xoe88SQtKVmVH1ja8y_dsn8Ua1V-dMhKgmYysfnT3Y6r0A6vPq5tugfiWpPI6YPaxhA%3D%3D&skin_id=4&vertical_id=5&real_bid=0.011942&pr=&user_keywords=&auc_type=1&aid=291&ext_cid=0&device_theme=light&keywords=Adult&label_ids=4,90,5&conditions=dch_ip,tz_offset,all&need_redirect_show=0&cpa=ad788a97-adc3-40e5-9e72-ff34d656688b&format=social-scale-b_r-body
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?mid=8775232586087654737&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1036627156&sid=3477700942&cid=2703&price=0.014&is_cpm=0&cpm=0&ecpm=0.07042438628719863&crid=49675&crtid=f4bc8cd691515e1eeae62c073e5070e3&tcid=0&out_id=0&ver=8.20.0&ver_c=&refdom=hclips.com&hostname=auc-inpage-hz-7-c&site_id=31438&spot_id=438&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1674167850&created_at=2023-01-19&is_native=1&auction_queue=0&burl=I3j33xCrB2ABZj2KcEOiO-6Nt9mwg_7vsu8SnHNmOyjyfzyEURSnTg&pop_winurl=&ip=91.90.42.154&testab=0&px_id=73438&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=hq&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.0032982136131467833&placement_type_id=&skin_test=0&verify_hash=fccf478581e7dcc2400ef5166091eb25&score=69.15290619079323&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1036627156%26spot_id%3D438%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fhclips.com%252F%26idzone%3D4438140%26sid%3D1886&ml=&tag_ab=d&original_bid=0.014&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=uHTNmK41nN7DawFwI8WDgjl4zqvBldDmXEHkStESVa0jXHEmjD54ODZOegQQrGqDYC8RhMWPHaE5LJlmNFzP4HYAENt2w6WwMEamxtUaSV5MHKmBRDcJGRrRZegaIj7mwFWVFd9fDjoRP15kSlf9uGzbGIDK_umb_sbZHBYFG7fefq6Y7md9PU6vFrRqL1dkKK8VTaHmtNzGb_71O4sCfVJT5HEjgSzgXeJfZk6H7zTTWrQ3ubKh8f7qxUKC2TszLR1PXvbPM8GWVz0uDpmarF5pNy-W-tnc5B5NnHSBlsnNO8Ml1JaPhrZQh5OD-1HPCzip6qndrWjK5btDiA96ibbct5Dp2JEJ2qnvcZfqm18LMr1QCbyxry1znTjYfGQ3uzDp_bIFYAa9-sRKeT5yhsrMyQneYztM-iJR59c9JjHAwW9hbohTy6JDCNPNciylpls_5gUV-W9a5mlM-_kUs6K7xjdDxw0M2J6f_dQnKgxX2cyKGmVEiOLvXFnPooAf3OLp1Gp_AEknvnIrzBhF7OM5CdQgf6SZ1K0IF70AeTuy69dbgsJrnE_iwMNUhUVJYuhTyzj_mWjq63vN0IcqUhtwdZkh_M1my8ZODHwf9KIf7WpUfMHhJWcVBhyMZSIpaxa0uEbJpBX32n9K_DgbCZvr3tD2jKlm0b6BZ5al&image_url=https%3A%2F%2Fimgdelnw.com%2Fie%3Fv%3D4%26c%3D4j2R8Ow6J-On2cB6rchST9OUAuPSlcQfZeoorwIfjOjn5dUsuXQv9d33aMBg4IKw7oXG8YGFsBKCCYAaCbSz0aGvsarmmvW2W3ZRv0kdp_R9q9KP-k45_AHzf4fMBHF5PggSXR4OZPk-HV5cqJ50lO5FindP0BejaVlqf9VP6SZBL-uHneIlCkYBIPcoLWS8moj7woPTXE13ccgdA7oJF2NGeEFLAZmvsMfkzoLRWyB6rIqxo9S2O3NO2jbx_8VxdupdpwwJrz4wKvkgRbxW-i_uPTsjOlr-C55CVXZCR2_lj4Tb6qXH9hZakPFKqPRGonhnCBK3rz_ewABg5DIYnNVXSIOQyk03EwCEYi2Xoe88SQtKVmVH1ja8y_dsn8Ua1V-dMhKgmYysfnT3Y6r0A6vPq5tugfiWpPI6YPaxhA%3D%3D&skin_id=4&vertical_id=5&real_bid=0.011942&pr=&user_keywords=&auc_type=1&aid=291&ext_cid=0&device_theme=light&keywords=Adult&label_ids=4,90,5&conditions=dch_ip,tz_offset,all&need_redirect_show=0&cpa=ad788a97-adc3-40e5-9e72-ff34d656688b&format=social-scale-b_r-body HTTP/1.1
Host: 9757fdc45b.92b501c719.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 19 Jan 2023 06:37:32 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp
200 OK 590 B URL HTTP/2 static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp
IP
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash debce753f1ce6652c1637491fd72b1b1
fd102eb3f058f7a43b0f9ec03541681699f5895e
c2443b0a74b25158756abb7aa12832e5442adab247aab6e24514f54396c72579
GET /creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:32 GMT
content-type: image/webp
content-length: 590
last-modified: Tue, 24 Nov 2020 14:24:12 GMT
etag: "5fbd178c-24e"
cache-control: public, max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?mlf=1&cpa=bb4f25d3-fed6-43f3-a29f-4bcbd3128784&mlc=1&format=social-scale-b_r-body
200 OK 590 B URL HTTP/2 static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?mlf=1&cpa=bb4f25d3-fed6-43f3-a29f-4bcbd3128784&mlc=1&format=social-scale-b_r-body
IP
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash debce753f1ce6652c1637491fd72b1b1
fd102eb3f058f7a43b0f9ec03541681699f5895e
c2443b0a74b25158756abb7aa12832e5442adab247aab6e24514f54396c72579
GET /creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?mlf=1&cpa=bb4f25d3-fed6-43f3-a29f-4bcbd3128784&mlc=1&format=social-scale-b_r-body HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:32 GMT
content-type: image/webp
content-length: 590
last-modified: Tue, 24 Nov 2020 14:24:12 GMT
etag: "5fbd178c-24e"
cache-control: public, max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9ee27334dd2ca91977bca7de91098777
25439049c175f9a056b1e6dbf9fc72ffb8bf5669
5e930b4ed4bcd9bb5c9491dec39535a350606bd961d51e113cc77b27e6bf8323
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E930B4ED4BCD9BB5C9491DEC39535A350606BD961D51E113CC77B27E6BF8323"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9343
Expires: Thu, 19 Jan 2023 09:13:15 GMT
Date: Thu, 19 Jan 2023 06:37:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b41651cacec10159eb092fa755a9a3ba
672d070c90c92c93f19e7e54c94ba8252d7bb317
5b86952698c6f38af73f2f9f6af6446bb7d28c677f6e4afa43aca3fa6daf3e06
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5B86952698C6F38AF73F2F9F6AF6446BB7D28C677F6E4AFA43ACA3FA6DAF3E06"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2737
Expires: Thu, 19 Jan 2023 07:23:09 GMT
Date: Thu, 19 Jan 2023 06:37:32 GMT
Connection: keep-alive
chaturbate.com/in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
302 Found 0 B URL HTTP/2 chaturbate.com/in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1 HTTP/1.1
Host: chaturbate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r-eu.tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html; charset=utf-8
location: /topembed/female/?join_overlay=1&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
vary: Accept-Language, Cookie
content-language: en
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://ajax.googleapis.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.google.com/cv/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/cv/ https://www.gstatic.com/eureka/ https://www.gstatic.com/cast/ https://*.nr-data.net https://certify-js.alexametrics.com https://player.vimeo.com/api/player.js http://static.hotjar.com https://static.hotjar.com https://script.hotjar.com ; style-src 'self' data: 'unsafe-inline' https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.googleapis.com ; img-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://*.stream.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.nr-data.net https://certify.alexametrics.com https://stats.g.doubleclick.net https://cbgames.s3.amazonaws.com https://player.vimeo.com https://script.hotjar.com http://script.hotjar.com ; font-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.gstatic.com http://script.hotjar.com https://script.hotjar.com ; connect-src 'self' blob: blob https://*.mmcdn.com wss://*.mmcdn.com wss://*.mmcdn.com:8443 https://*.highwebmedia.com wss://*.highwebmedia.com wss://*.highwebmedia.com:8443 https://*.nr-data.net https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://cbvideoupload.s3-accelerate.amazonaws.com https://stats.g.doubleclick.net https://internet-up.ably-realtime.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://tls-use1.fpapi.io https://use1.fptls.com https://eun1.fptls.com https://aps1.fptls.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* https://surveystats.hotjar.io wss://*.hotjar.com ; media-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com mediasource: blob: data: https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com; object-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://download.macromedia.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com ; frame-src 'self' https://*.mmcdn.com https://*.chaturbate.com https://chaturbate.com https://*.highwebmedia.com https://adserver.exoticads.com https://www.google.com/recaptcha/ https://*.wnu.com https://wnu.com https://checkout.2000charge.com https://www.sofort.com https://*.girogate.de https://player.vimeo.com https://vars.hotjar.com ; child-src 'self' blob: blob ; worker-src 'self' blob: blob ; form-action 'self' https://*.chaturbate.com https://chaturbate.com https://*.stream.highwebmedia.com https://*.wnu.com https://wnu.com https://devportal.cb.dev https://*.web.amer-1.jumio.ai https://smartpay.coinsmart.com https://secure.paygarden.com ; manifest-src 'self' https://*.mmcdn.com https://*.highwebmedia.com ; report-uri https://report-uri.mmcdn.com/r/t/csp/enforce;
report-to: {"group":"default","max_age":2592000,"endpoints":[{"url":"https://report-uri.mmcdn.com/a/t/g"}],"include_subdomains":true}
nel: {"report_to":"default","max_age":2592000,"include_subdomains":true}
x-frame-options: DENY
cache-control: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block; report=https://report-uri.highwebmedia.com/r/t/xss/enforce
referrer-policy: strict-origin-when-cross-origin
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
set-cookie: u_6o0b=1; expires=Tue, 24 Jan 2023 06:37:31 GMT; Max-Age=432000; Path=/
us_6o0b=1; Path=/
affkey="eJwdjUEKgzAQRa8iszZGCwq667qnGNMEQ41K5ouI9O7tuHz/PfgXgYaCurUeqSzIpU2xfb76Thn5owwxaMzhR8fJOIaqrGICNhmszcbvFeRc3vGvfeXWZDXiEDRjibzIvOOIwet+vzwa+v4ABdglHg=="; Domain=.chaturbate.com; expires=Sat, 18 Feb 2023 06:37:31 GMT; Max-Age=2592000; Path=/
fromaffiliate=1; Domain=.chaturbate.com; Path=/
noads=1; expires=Thu, 19 Jan 2023 12:37:31 GMT; Max-Age=21600; Path=/
sbr=sec:sbrcbd0ff58-fb9d-45f7-b033-7fd4c3443505:1pIOYF:BoZP72XjhJTt7iNMDpeEU04tWLw; Domain=.chaturbate.com; expires=Tue, 14 Oct 2025 06:37:31 GMT; HttpOnly; Max-Age=86313600; Path=/; Secure
__cf_bm=FlrwlOzKelTq_FtRRtT.JtqIzWkbrJDyWTxR1XNkaB8-1674110251-0-AZTeGNaLwLzkeij+lUPdNxp2k95dh640ch3K1geTD1tIvnCCczoqbxLJAjE4yz0erssw+C3xXtv1ZnCU5AOFqfc=; path=/; expires=Thu, 19-Jan-23 07:07:31 GMT; domain=.chaturbate.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78bd8ff0fc7e1c12-OSL
X-Firefox-Spdy: h2
imgdelnw.com/ie?v=4&c=4j2R8Ow6J-On2cB6rchST9OUAuPSlcQfZeoorwIfjOjn5dUsuXQv9d33aMBg4IKw7oXG8YGFsBKCCYAaCbSz0aGvsarmmvW2W3ZRv0kdp_R9q9KP-k45_AHzf4fMBHF5PggSXR4OZPk-HV5cqJ50lO5FindP0BejaVlqf9VP6SZBL-uHneIlCkYBIPcoLWS8moj7woPTXE13ccgdA7oJF2NGeEFLAZmvsMfkzoLRWyB6rIqxo9S2O3NO2jbx_8VxdupdpwwJrz4wKvkgRbxW-i_uPTsjOlr-C55CVXZCR2_lj4Tb6qXH9hZakPFKqPRGonhnCBK3rz_ewABg5DIYnNVXSIOQyk03EwCEYi2Xoe88SQtKVmVH1ja8y_dsn8Ua1V-dMhKgmYysfnT3Y6r0A6vPq5tugfiWpPI6YPaxhA==
301 Moved Permanently 0 B URL HTTP/1.1 imgdelnw.com/ie?v=4&c=4j2R8Ow6J-On2cB6rchST9OUAuPSlcQfZeoorwIfjOjn5dUsuXQv9d33aMBg4IKw7oXG8YGFsBKCCYAaCbSz0aGvsarmmvW2W3ZRv0kdp_R9q9KP-k45_AHzf4fMBHF5PggSXR4OZPk-HV5cqJ50lO5FindP0BejaVlqf9VP6SZBL-uHneIlCkYBIPcoLWS8moj7woPTXE13ccgdA7oJF2NGeEFLAZmvsMfkzoLRWyB6rIqxo9S2O3NO2jbx_8VxdupdpwwJrz4wKvkgRbxW-i_uPTsjOlr-C55CVXZCR2_lj4Tb6qXH9hZakPFKqPRGonhnCBK3rz_ewABg5DIYnNVXSIOQyk03EwCEYi2Xoe88SQtKVmVH1ja8y_dsn8Ua1V-dMhKgmYysfnT3Y6r0A6vPq5tugfiWpPI6YPaxhA==
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ie?v=4&c=4j2R8Ow6J-On2cB6rchST9OUAuPSlcQfZeoorwIfjOjn5dUsuXQv9d33aMBg4IKw7oXG8YGFsBKCCYAaCbSz0aGvsarmmvW2W3ZRv0kdp_R9q9KP-k45_AHzf4fMBHF5PggSXR4OZPk-HV5cqJ50lO5FindP0BejaVlqf9VP6SZBL-uHneIlCkYBIPcoLWS8moj7woPTXE13ccgdA7oJF2NGeEFLAZmvsMfkzoLRWyB6rIqxo9S2O3NO2jbx_8VxdupdpwwJrz4wKvkgRbxW-i_uPTsjOlr-C55CVXZCR2_lj4Tb6qXH9hZakPFKqPRGonhnCBK3rz_ewABg5DIYnNVXSIOQyk03EwCEYi2Xoe88SQtKVmVH1ja8y_dsn8Ua1V-dMhKgmYysfnT3Y6r0A6vPq5tugfiWpPI6YPaxhA== HTTP/1.1
Host: imgdelnw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
server: fasthttp
date: Thu, 19 Jan 2023 06:37:31 GMT
content-length: 0
location: https://img.vmmcdn.com/get/96038712/71049_image.png
x-app-id: 14
notification.tubecup.net/in/subscription-offers?href=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&tcid=0&spot_id=1019&site=hclips&source_id=0
200 OK 0 B URL HTTP/2 notification.tubecup.net/in/subscription-offers?href=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&tcid=0&spot_id=1019&site=hclips&source_id=0
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/subscription-offers?href=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&tcid=0&spot_id=1019&site=hclips&source_id=0 HTTP/1.1
Host: notification.tubecup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:32 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 22e2f4505637403a784f50a8add8c147
52aaf5b3065b196846037a129a7c9ab1f1de6dc0
707638e44d92a5d5f5af6cb666ca32e659da101621c76690aff49b66185fd48e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "707638E44D92A5D5F5AF6CB666CA32E659DA101621C76690AFF49B66185FD48E"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13596
Expires: Thu, 19 Jan 2023 10:24:09 GMT
Date: Thu, 19 Jan 2023 06:37:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 575c3fe00009486ab50b8ac48b539298
bbb6b12bee2728d031c10fa1e0b71d25d42f768e
bb64a3b067c19fac0a4a68090102c6264e63d42da27ccecd997803e706745375
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BB64A3B067C19FAC0A4A68090102C6264E63D42DA27CCECD997803E706745375"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6594
Expires: Thu, 19 Jan 2023 08:27:27 GMT
Date: Thu, 19 Jan 2023 06:37:33 GMT
Connection: keep-alive
img.vmmcdn.com/get/96038712/71049_image.png
200 OK 50 kB URL HTTP/2 img.vmmcdn.com/get/96038712/71049_image.png
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 720x480, components 3\012- data
Hash 8a623e2c2f5ff57ac200c617f80c2f61
84ee241dd3a6463395147b596772ef9433318dba
07be740dcfd3eabc34ded2b37bbd9cbb761160504c578b172af50242e1ce6a8f
GET /get/96038712/71049_image.png HTTP/1.1
Host: img.vmmcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.1
date: Thu, 19 Jan 2023 06:37:33 GMT
content-type: image/png
content-length: 50495
last-modified: Sat, 27 Nov 2021 11:12:16 GMT
cache-control: public, max-age=604800
etag: "61a21290-c53f"
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
img.vmmcdn.com/get/54661559/71049_icon.png
200 OK 77 kB URL HTTP/2 img.vmmcdn.com/get/54661559/71049_icon.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash e40bebadddf9f24d3473604087b72b61
9b18cd68b37aa261fd07341fa561f31621451138
b09761af91e52adb991dcaa32c2c407f222f91b2aa188296ae124082a5ea1ef9
GET /get/54661559/71049_icon.png HTTP/1.1
Host: img.vmmcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.1
date: Thu, 19 Jan 2023 06:37:33 GMT
content-type: image/png
content-length: 77160
last-modified: Sat, 27 Nov 2021 11:12:16 GMT
cache-control: public, max-age=604800
etag: "61a21290-12d68"
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cbjpeg.stream.highwebmedia.com/stream?room=annaceleste&f=0.5932558227654049
200 OK 32 kB URL HTTP/2 cbjpeg.stream.highwebmedia.com/stream?room=annaceleste&f=0.5932558227654049
IP
ASN #50389 Phoenix Nap, LLC.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 854x480, components 3\012- data
Hash 5547cc4dfc963f49fe133b7ad5e39643
84f6f65d591f746cdd18ccb3407ade6b404586ea
4f60bec5382c448c8bfdb48d2fa6e953a85570244d9a4ed2c51d89a786481f59
GET /stream?room=annaceleste&f=0.5932558227654049 HTTP/1.1
Host: cbjpeg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Cookie: _cfuvid=jgm7FohfPJ9N_SFpgZyfpfb5gEznkOYZebqnD3hdfIw-1674110252402-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 06:37:34 GMT
content-type: image/jpeg
content-length: 31555
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
cache-tag: cbjpeg
x-frame-options: DENY
X-Firefox-Spdy: h2
cbjpeg.stream.highwebmedia.com/stream?room=cassynash&f=0.8962957591180082
200 OK 32 kB URL HTTP/2 cbjpeg.stream.highwebmedia.com/stream?room=cassynash&f=0.8962957591180082
IP
ASN #50389 Phoenix Nap, LLC.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1280x1281, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 854x480, components 3\012- data
Hash 358b3a1af7543c847d860ead7df1d199
f1e0456f0d165069a202a6c21ac4a9561e743037
fe8e93fc451b78995596d50f99d21af98aa67179c207eb7753a6292959a3fa1c
GET /stream?room=cassynash&f=0.8962957591180082 HTTP/1.1
Host: cbjpeg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Cookie: _cfuvid=jgm7FohfPJ9N_SFpgZyfpfb5gEznkOYZebqnD3hdfIw-1674110252402-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 06:37:34 GMT
content-type: image/jpeg
content-length: 32399
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
cache-tag: cbjpeg
x-frame-options: DENY
X-Firefox-Spdy: h2
cbjpeg.stream.highwebmedia.com/stream?room=annwithoutane&f=0.027324367649922965
404 Not Found 1.6 kB URL HTTP/2 cbjpeg.stream.highwebmedia.com/stream?room=annwithoutane&f=0.027324367649922965
IP
ASN #50389 Phoenix Nap, LLC.
Hash eb361f642067dd8d996411a36660af03
af216e2845f541a9eb935fd47197156dfae5f20a
16e7909203abbe6c89f070b312422815dceb8655e5b19001a44fb1b60aff8c5c
GET /stream?room=annwithoutane&f=0.027324367649922965 HTTP/1.1
Host: cbjpeg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Cookie: _cfuvid=jgm7FohfPJ9N_SFpgZyfpfb5gEznkOYZebqnD3hdfIw-1674110252402-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Thu, 19 Jan 2023 06:37:35 GMT
content-type: text/plain; charset=utf-8
content-length: 11
x-content-type-options: nosniff
X-Firefox-Spdy: h2
realtime.pa.highwebmedia.com/keys/KSKw2g.L36ISg/requestToken?rnd=9909454542372105
204 No Content 720 B URL HTTP/2 realtime.pa.highwebmedia.com/keys/KSKw2g.L36ISg/requestToken?rnd=9909454542372105
IP
Hash 27a694b40a173ef6598deaaf57d1186e
2d6c4600b3a98cbb88d27da90860f94b83e0c014
380b0f9defd96d1283228daf315ba20917eb5ac7a1f46075e84d7a1c0241a4fa
OPTIONS /keys/KSKw2g.L36ISg/requestToken?rnd=9909454542372105 HTTP/1.1
Host: realtime.pa.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: ably-agent,content-type,x-ably-version
Referer: https://chaturbate.com/
Origin: https://chaturbate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-headers: Origin,X-Requested-With,Content-Type,Content-Length,Accept,Authorization,X-Ably-Version,X-Ably-Lib,X-Ably-ClientId,Ably-Agent
access-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS
access-control-allow-origin: https://chaturbate.com
access-control-max-age: 3600
date: Thu, 19 Jan 2023 06:37:36 GMT
x-cache: Miss from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: k21W0XRv1wDGi8BtKN6Y4UXVJLe-QjBVZzEoYCyKmYkvjy8ZvZAfEQ==
X-Firefox-Spdy: h2
realtime.pa.highwebmedia.com/keys/KSKw2g.L36ISg/requestToken?rnd=9909454542372105
201 Created 1.0 kB URL HTTP/2 realtime.pa.highwebmedia.com/keys/KSKw2g.L36ISg/requestToken?rnd=9909454542372105
IP
File type JSON data\012- , ASCII text, with very long lines (804)
Hash df7b46d693774adec0e9da5ec8bbfa95
f2f6a4a3b0c438a1e5c2bc0d2beb9a4e4623504b
ef8a0b6bc796b966c10b20588359b8583282a398544aa47c6ee4bf28c2f85e9c
POST /keys/KSKw2g.L36ISg/requestToken?rnd=9909454542372105 HTTP/1.1
Host: realtime.pa.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
content-type: application/json
X-Ably-Version: 1.2
Ably-Agent: ably-js/1.2.13 browser
Content-Length: 1039
Origin: https://chaturbate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 201 Created
content-type: application/json
content-length: 1036
access-control-allow-credentials: true
access-control-allow-origin: https://chaturbate.com
access-control-expose-headers: Link,Transfer-Encoding,Content-Length,X-Ably-ErrorCode,X-Ably-ErrorMessage,X-Ably-ServerId,X-Ably-Cluster,Server
date: Thu, 19 Jan 2023 06:37:36 GMT
vary: Origin
x-ably-cluster: production:highwebmedia
x-ably-serverid: frontend.a396.7.eu-central-1-A.i-06f376a047b61cd63.e91KKoEDwBKQsB
x-robots-tag: noindex
x-cache: Miss from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BB54YDB3BfwbR3fy-uN0IxnkJjSsxOT5vq_O3BGyD7jQBL8r99jkYQ==
X-Firefox-Spdy: h2
realtime.pa.highwebmedia.com/keys/KSKw2g.L36ISg/requestToken?rnd=46293290048344427
204 No Content 0 B URL HTTP/2 realtime.pa.highwebmedia.com/keys/KSKw2g.L36ISg/requestToken?rnd=46293290048344427
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /keys/KSKw2g.L36ISg/requestToken?rnd=46293290048344427 HTTP/1.1
Host: realtime.pa.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: ably-agent,content-type,x-ably-version
Referer: https://chaturbate.com/
Origin: https://chaturbate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-headers: Origin,X-Requested-With,Content-Type,Content-Length,Accept,Authorization,X-Ably-Version,X-Ably-Lib,X-Ably-ClientId,Ably-Agent
access-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS
access-control-allow-origin: https://chaturbate.com
access-control-max-age: 3600
date: Thu, 19 Jan 2023 06:37:36 GMT
x-cache: Miss from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3kvtVx78TgzLbei7-mp4KnzsPvSmM_-59b0FgsmkmITPNip2VvnO2Q==
X-Firefox-Spdy: h2
js.wpshsdk.com/npc/sdk/push/styles.css
200 OK 1.1 kB URL HTTP/2 js.wpshsdk.com/npc/sdk/push/styles.css
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (3179)
Hash 8b9ea1eb5d343e9b1a1cbad3e939a8bf
899569fab9911b7b19b52c9d97c60d79788e7f88
a3e6a9faf6478398b86d012a368e73db642af966339817fae27acfa645e61c86
GET /npc/sdk/push/styles.css HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:32 GMT
content-type: text/css
server: nginx/1.18.0
last-modified: Tue, 30 Aug 2022 09:15:33 GMT
etag: W/"630dd535-10f4"
content-encoding: gzip
expires: Thu, 19 Jan 2023 06:42:32 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
realtime.pa.highwebmedia.com/keys/KSKw2g.L36ISg/requestToken?rnd=46293290048344427
201 Created 1.0 kB URL HTTP/2 realtime.pa.highwebmedia.com/keys/KSKw2g.L36ISg/requestToken?rnd=46293290048344427
IP
File type JSON data\012- , ASCII text, with very long lines (804)
Hash a8ae1ddd7b7dab72bde05a2b797c2e85
3abef2bdae1174af9acc7f24f4ff6cd308191da6
ca1148d5e4ccee9feb9fb8334ebce60bf5f4300773bc9fed661967d26a0e13af
POST /keys/KSKw2g.L36ISg/requestToken?rnd=46293290048344427 HTTP/1.1
Host: realtime.pa.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
content-type: application/json
X-Ably-Version: 1.2
Ably-Agent: ably-js/1.2.13 browser
Content-Length: 1039
Origin: https://chaturbate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 201 Created
content-type: application/json
content-length: 1036
access-control-allow-credentials: true
access-control-allow-origin: https://chaturbate.com
access-control-expose-headers: Link,Transfer-Encoding,Content-Length,X-Ably-ErrorCode,X-Ably-ErrorMessage,X-Ably-ServerId,X-Ably-Cluster,Server
date: Thu, 19 Jan 2023 06:37:37 GMT
vary: Origin
x-ably-cluster: production:highwebmedia
x-ably-serverid: frontend.adf8.2.eu-central-1-A.i-0017c0049f5e4990c.e91E37BowBKPnr
x-robots-tag: noindex
x-cache: Miss from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xZ0wcEbwfBxvBRk-veg343f2WsOuEi0kOxe3RgrMYf7GzskhwQJChg==
X-Firefox-Spdy: h2
realtime.pa.highwebmedia.com/keys/KSKw2g.L36ISg/requestToken?rnd=4737104312840389
201 Created 1.1 kB URL HTTP/2 realtime.pa.highwebmedia.com/keys/KSKw2g.L36ISg/requestToken?rnd=4737104312840389
IP
Hash 52e9f242971edbacf368178dea4e4884
4434029e72ece46ae2aaf916f0af4ad45734839b
9edaef58d8e1a0285d7b3cc63d946e2b1f03236a7beb1fa7ac2486b28325ebee
POST /keys/KSKw2g.L36ISg/requestToken?rnd=4737104312840389 HTTP/1.1
Host: realtime.pa.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
content-type: application/json
X-Ably-Version: 1.2
Ably-Agent: ably-js/1.2.13 browser
Content-Length: 1039
Origin: https://chaturbate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 201 Created
content-type: application/json
content-length: 1036
access-control-allow-credentials: true
access-control-allow-origin: https://chaturbate.com
access-control-expose-headers: Link,Transfer-Encoding,Content-Length,X-Ably-ErrorCode,X-Ably-ErrorMessage,X-Ably-ServerId,X-Ably-Cluster,Server
date: Thu, 19 Jan 2023 06:37:37 GMT
vary: Origin
x-ably-cluster: production:highwebmedia
x-ably-serverid: frontend.a516.4.eu-central-1-A.i-0969a3ae8eaa2298f.e91lC_D3wBKPnT
x-robots-tag: noindex
x-cache: Miss from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NGR_NRKoE286h_Sa1thJUSZQvmn_V3cGEQmo6LdLMKoVGvJSWRvXkA==
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5e839b2-9887-4705-93dd-351351c5f612.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5e839b2-9887-4705-93dd-351351c5f612.jpeg
IP
Hash 46bedb7e88f3e5da8bbb95d2fb78ad9d
922e64b376b33dc1763c49732d80c43cb3a8bb13
a20b6c0f91dfce28b2137dd3141cc88cc9df85aa612f905f851b3e773e19d344
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5e839b2-9887-4705-93dd-351351c5f612.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6489
x-amzn-requestid: 8290bd7c-4fb9-4149-b82a-dde38ba2afca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ewag5H5EoAMFV-w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c33e05-6ad6ec63583c8d511f1b6425;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 23:43:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: splv2LTI5lvHrhvTcF5T0t15iXeLQ2FFZ5uPopDoYxFaa8LE5U9uxA==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 12:34:58 GMT
age: 64959
etag: "9b12e4ce9f936ccb2203807886765e5b0c6e0339"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static-assets.highwebmedia.com/CACHE/js/output.97a5db11ca63.js
200 OK 0 B URL HTTP/2 static-assets.highwebmedia.com/CACHE/js/output.97a5db11ca63.js
IP
GET /CACHE/js/output.97a5db11ca63.js HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:32 GMT
content-type: application/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=827275
etag: W/"692ec922d2a39b4037073f70286968b3"
last-modified: Fri, 13 May 2022 09:09:46 GMT
x-amz-id-2: cm1wH1tB3VPUytbB+ZVpHkw/m3SedhP243fBi2a1vig2wRGFAOdRFt9NQ1zfS8O0H/B731DXlN8=
x-amz-meta-s3cmd-attrs: md5:692ec922d2a39b4037073f70286968b3
x-amz-request-id: 932N29A1CDHYXHRM
cf-cache-status: HIT
age: 6715
expires: Sat, 18 Feb 2023 06:37:32 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r1IKge0gA3s5%2FoIHTa1zkZmOR5RWj1z2tzTR3evazcoittZ38APjR6NWjw3qLgsk7%2BzLTej4Cav9NmAxZST2GwCkUcP7TRgJTUQaxzZjZKUo56kTTWaTggkLaGIsHFA%2FhgHAtt4SUQfOY6QNbyEW8g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=ktvM9gRTbL1HhLIGA5f5gXX3r576sr3Pbbq_XVnInUg-1674110252341-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 78bd8ff50aa2b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
200 OK 0 B URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
200 OK 0 B URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/49315045?wmode=7&page-url=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1334%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A713530841441%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063729%3Aet%3A1674110250%3Ac%3A1%3Arn%3A710509795%3Arqn%3A1%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C71%2C0%2C525%2C0%2C%2C712%2C3%2C%2C%2C%2C1348%3Aco%3A0%3Ans%3A1674110247630%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674110250%3At%3ALinda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/49315045?wmode=7&page-url=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1334%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A713530841441%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063729%3Aet%3A1674110250%3Ac%3A1%3Arn%3A710509795%3Arqn%3A1%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C71%2C0%2C525%2C0%2C%2C712%2C3%2C%2C%2C%2C1348%3Aco%3A0%3Ans%3A1674110247630%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674110250%3At%3ALinda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
GET /watch/49315045?wmode=7&page-url=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1334%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A713530841441%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063729%3Aet%3A1674110250%3Ac%3A1%3Arn%3A710509795%3Arqn%3A1%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C71%2C0%2C525%2C0%2C%2C712%2C3%2C%2C%2C%2C1348%3Aco%3A0%3Ans%3A1674110247630%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674110250%3At%3ALinda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hclips.com
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/49315045/1?wmode=7&page-url=https%3A%2F%2Fhclips.com%2Fvideos%2F7819579%2Flinda-sleepy-feet%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1334%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A713530841441%3Ahid%3A303286814%3Az%3A0%3Ai%3A20230119063729%3Aet%3A1674110250%3Ac%3A1%3Arn%3A710509795%3Arqn%3A1%3Au%3A1674110250686442074%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C71%2C0%2C525%2C0%2C%2C712%2C3%2C%2C%2C%2C1348%3Aco%3A0%3Ans%3A1674110247630%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674110250%3At%3ALinda%20Sleepy%20Feet%20-%20Video%20-%20Free%20Porn%20Videos%20-%20hclips.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Thu, 19 Jan 2023 06:37:29 GMT
access-control-allow-origin: https://hclips.com
set-cookie: yabs-sid=272607111674110249; Path=/; SameSite=None; Secure
i=Y5JfPXx2OFf30MoBgz/nuVEo/dA0BuF0sfH3zV6bpTrGxRRCjwHbvA00awECr+nqiIcH2BSTodPshMpUX4bo6MppXv8=; Expires=Sun, 16-Jan-2033 06:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=730383761674110249; Expires=Fri, 19-Jan-2024 06:37:29 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=730383761674110249; Expires=Fri, 19-Jan-2024 06:37:29 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1705646249.yc.1674110249#1705646249.yrts.1674110249#1705646249.yrtsi.1674110249; Expires=Fri, 19-Jan-2024 06:37:29 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 19-Jan-2023 06:37:29 GMT
last-modified: Thu, 19-Jan-2023 06:37:29 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
cdntocdn.com/dli/webcamera.svg?fill=rgb(128%2C%20128%2C%20128)
200 OK 0 B URL HTTP/2 cdntocdn.com/dli/webcamera.svg?fill=rgb(128%2C%20128%2C%20128)
IP
GET /dli/webcamera.svg?fill=rgb(128%2C%20128%2C%20128) HTTP/1.1
Host: cdntocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: image/svg+xml
last-modified: Tue, 16 Jun 2020 16:25:10 GMT
etag: W/"5ee8f266-545"
pragma: no-cache, no-cache
x-proxy-cache: HIT, HIT
cache-control: no-cache, no-store, must-revalidate
expires: 0
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zkN4lQB83HECjJAwC0n765mVmTWktXobtPlgQsEadtmu%2B0V%2FTklCtZxiNLMp2c9Z1sg1cg20p55m%2FIXRWIhFd1nEyrLD5k9934Tc4lfdreXmWwBO6%2F5Yv9SL%2B94gUhw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bd8feb8820744b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
200 OK 0 B URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
chaturbate.com/in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
302 Found 0 B URL HTTP/2 chaturbate.com/in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
IP
GET /in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1 HTTP/1.1
Host: chaturbate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r-eu.tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html; charset=utf-8
location: /topembed/female/?join_overlay=1&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
vary: Accept-Language, Cookie
content-language: en
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://ajax.googleapis.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.google.com/cv/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/cv/ https://www.gstatic.com/eureka/ https://www.gstatic.com/cast/ https://*.nr-data.net https://certify-js.alexametrics.com https://player.vimeo.com/api/player.js http://static.hotjar.com https://static.hotjar.com https://script.hotjar.com ; style-src 'self' data: 'unsafe-inline' https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.googleapis.com ; img-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://*.stream.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.nr-data.net https://certify.alexametrics.com https://stats.g.doubleclick.net https://cbgames.s3.amazonaws.com https://player.vimeo.com https://script.hotjar.com http://script.hotjar.com ; font-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.gstatic.com http://script.hotjar.com https://script.hotjar.com ; connect-src 'self' blob: blob https://*.mmcdn.com wss://*.mmcdn.com wss://*.mmcdn.com:8443 https://*.highwebmedia.com wss://*.highwebmedia.com wss://*.highwebmedia.com:8443 https://*.nr-data.net https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://cbvideoupload.s3-accelerate.amazonaws.com https://stats.g.doubleclick.net https://internet-up.ably-realtime.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://tls-use1.fpapi.io https://use1.fptls.com https://eun1.fptls.com https://aps1.fptls.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* https://surveystats.hotjar.io wss://*.hotjar.com ; media-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com mediasource: blob: data: https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com; object-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://download.macromedia.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com ; frame-src 'self' https://*.mmcdn.com https://*.chaturbate.com https://chaturbate.com https://*.highwebmedia.com https://adserver.exoticads.com https://www.google.com/recaptcha/ https://*.wnu.com https://wnu.com https://checkout.2000charge.com https://www.sofort.com https://*.girogate.de https://player.vimeo.com https://vars.hotjar.com ; child-src 'self' blob: blob ; worker-src 'self' blob: blob ; form-action 'self' https://*.chaturbate.com https://chaturbate.com https://*.stream.highwebmedia.com https://*.wnu.com https://wnu.com https://devportal.cb.dev https://*.web.amer-1.jumio.ai https://smartpay.coinsmart.com https://secure.paygarden.com ; manifest-src 'self' https://*.mmcdn.com https://*.highwebmedia.com ; report-uri https://report-uri.mmcdn.com/r/t/csp/enforce;
report-to: {"group":"default","max_age":2592000,"endpoints":[{"url":"https://report-uri.mmcdn.com/a/t/g"}],"include_subdomains":true}
nel: {"report_to":"default","max_age":2592000,"include_subdomains":true}
x-frame-options: DENY
cache-control: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block; report=https://report-uri.highwebmedia.com/r/t/xss/enforce
referrer-policy: strict-origin-when-cross-origin
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
set-cookie: u_6o0b=1; expires=Tue, 24 Jan 2023 06:37:31 GMT; Max-Age=432000; Path=/
us_6o0b=1; Path=/
affkey="eJwdjUEKgzAQRa8iszZGCwq667qnGNMEQ41K5ouI9O7tuHz/PfgXgYaCurUeqSzIpU2xfb76Thn5owwxaMzhR8fJOIaqrGICNhmszcbvFeRc3vGvfeXWZDXiEDRjibzIvOOIwet+vzwa+v4ABdglHg=="; Domain=.chaturbate.com; expires=Sat, 18 Feb 2023 06:37:31 GMT; Max-Age=2592000; Path=/
fromaffiliate=1; Domain=.chaturbate.com; Path=/
noads=1; expires=Thu, 19 Jan 2023 12:37:31 GMT; Max-Age=21600; Path=/
sbr=sec:sbraea87d0e-b2ae-4fe3-9f59-14ad8098181d:1pIOYF:IPG8IQzo9ZGgxmFn1VTtqxY976E; Domain=.chaturbate.com; expires=Tue, 14 Oct 2025 06:37:31 GMT; HttpOnly; Max-Age=86313600; Path=/; Secure
__cf_bm=b5NG.WDBXrKCPMStxvL_V6uJuMz.EQalN8tCtlyyAHg-1674110251-0-AbhoVYX1YtkB4RwtCMTWdV2CJqXGvIZ7y3H+sUS493fabR+PQNPhfjXVo9AcgrVjOAXoFQB/bai9NYmq+0RjN8c=; path=/; expires=Thu, 19-Jan-23 07:07:31 GMT; domain=.chaturbate.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78bd8ff0fc841c12-OSL
X-Firefox-Spdy: h2
chaturbate.com/in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
302 Found 0 B URL HTTP/2 chaturbate.com/in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
IP
GET /in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1 HTTP/1.1
Host: chaturbate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r-eu.tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html; charset=utf-8
location: /topembed/female/?join_overlay=1&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
vary: Accept-Language, Cookie
content-language: en
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://ajax.googleapis.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.google.com/cv/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/cv/ https://www.gstatic.com/eureka/ https://www.gstatic.com/cast/ https://*.nr-data.net https://certify-js.alexametrics.com https://player.vimeo.com/api/player.js http://static.hotjar.com https://static.hotjar.com https://script.hotjar.com ; style-src 'self' data: 'unsafe-inline' https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.googleapis.com ; img-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://*.stream.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.nr-data.net https://certify.alexametrics.com https://stats.g.doubleclick.net https://cbgames.s3.amazonaws.com https://player.vimeo.com https://script.hotjar.com http://script.hotjar.com ; font-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.gstatic.com http://script.hotjar.com https://script.hotjar.com ; connect-src 'self' blob: blob https://*.mmcdn.com wss://*.mmcdn.com wss://*.mmcdn.com:8443 https://*.highwebmedia.com wss://*.highwebmedia.com wss://*.highwebmedia.com:8443 https://*.nr-data.net https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://cbvideoupload.s3-accelerate.amazonaws.com https://stats.g.doubleclick.net https://internet-up.ably-realtime.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://tls-use1.fpapi.io https://use1.fptls.com https://eun1.fptls.com https://aps1.fptls.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* https://surveystats.hotjar.io wss://*.hotjar.com ; media-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com mediasource: blob: data: https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com; object-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://download.macromedia.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com ; frame-src 'self' https://*.mmcdn.com https://*.chaturbate.com https://chaturbate.com https://*.highwebmedia.com https://adserver.exoticads.com https://www.google.com/recaptcha/ https://*.wnu.com https://wnu.com https://checkout.2000charge.com https://www.sofort.com https://*.girogate.de https://player.vimeo.com https://vars.hotjar.com ; child-src 'self' blob: blob ; worker-src 'self' blob: blob ; form-action 'self' https://*.chaturbate.com https://chaturbate.com https://*.stream.highwebmedia.com https://*.wnu.com https://wnu.com https://devportal.cb.dev https://*.web.amer-1.jumio.ai https://smartpay.coinsmart.com https://secure.paygarden.com ; manifest-src 'self' https://*.mmcdn.com https://*.highwebmedia.com ; report-uri https://report-uri.mmcdn.com/r/t/csp/enforce;
report-to: {"group":"default","max_age":2592000,"endpoints":[{"url":"https://report-uri.mmcdn.com/a/t/g"}],"include_subdomains":true}
nel: {"report_to":"default","max_age":2592000,"include_subdomains":true}
x-frame-options: DENY
cache-control: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block; report=https://report-uri.highwebmedia.com/r/t/xss/enforce
referrer-policy: strict-origin-when-cross-origin
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
set-cookie: u_6o0b=1; expires=Tue, 24 Jan 2023 06:37:31 GMT; Max-Age=432000; Path=/
us_6o0b=1; Path=/
affkey="eJwdjUEKgzAQRa8iszZGCwq667qnGNMEQ41K5ouI9O7tuHz/PfgXgYaCurUeqSzIpU2xfb76Thn5owwxaMzhR8fJOIaqrGICNhmszcbvFeRc3vGvfeXWZDXiEDRjibzIvOOIwet+vzwa+v4ABdglHg=="; Domain=.chaturbate.com; expires=Sat, 18 Feb 2023 06:37:31 GMT; Max-Age=2592000; Path=/
fromaffiliate=1; Domain=.chaturbate.com; Path=/
noads=1; expires=Thu, 19 Jan 2023 12:37:31 GMT; Max-Age=21600; Path=/
sbr=sec:sbr132d8761-d35f-4421-ac8c-f7f067dfa268:1pIOYF:J1is7OtaOe5dtvAwcl7dHCHzQOs; Domain=.chaturbate.com; expires=Tue, 14 Oct 2025 06:37:31 GMT; HttpOnly; Max-Age=86313600; Path=/; Secure
__cf_bm=dj9383BZyJX5kgqvSEJkYs_L8zA6_s3x5B1oan4P7TU-1674110251-0-AQBwrXRuT1nloVT77yO1h9zFN8P+yPnBeyRKPpElqjzpQ4Yd2zqmpGMY85A53JqJZTBwqW7K248sYXoykXo3dNk=; path=/; expires=Thu, 19-Jan-23 07:07:31 GMT; domain=.chaturbate.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78bd8ff10c8c1c12-OSL
X-Firefox-Spdy: h2
static-assets.highwebmedia.com/CACHE/js/output.bc85e791cb2f.js
200 OK 0 B URL HTTP/2 static-assets.highwebmedia.com/CACHE/js/output.bc85e791cb2f.js
IP
GET /CACHE/js/output.bc85e791cb2f.js HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:32 GMT
content-type: application/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=202270
etag: W/"7d90e856406997eee24123ea8a61c92d"
last-modified: Fri, 10 Sep 2021 01:29:44 GMT
x-amz-id-2: HJqgrzmpP8NIgQA+YW8wx4YmDeOFkE860/zZrYgEfEOOhSRenFjn4mxx7ChaQYvyWjZAxImMIY8=
x-amz-meta-s3cmd-attrs: md5:7d90e856406997eee24123ea8a61c92d
x-amz-request-id: EVKN10SQAKNB8VZG
cf-cache-status: HIT
age: 1407824
expires: Sat, 18 Feb 2023 06:37:32 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z8YAV4DrVgUvXAetyyAYPJM0KHnXCJtOPbl6T%2BtpClEtSjZEEx9vQYXabaTm5HS3piV45C75F17umaVRO5FpZhm%2BCWRnCVqthEt7FZlsgZJbQ1d%2B6RyaHKOFZsSn19JAixbGIU8OesubcnrWgmccig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=QGzMv3LW5b_kRzjqsqwP401pB4GRy81vM0tdG7BOE0E-1674110252354-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 78bd8ff51aacb517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
tsyndicate.com/iframes2/488d518d8b8a4f4e9d4c4a031bfe0055.html?subid=0
200 OK 0 B URL HTTP/2 tsyndicate.com/iframes2/488d518d8b8a4f4e9d4c4a031bfe0055.html?subid=0
IP
ASN #24940 Hetzner Online GmbH
GET /iframes2/488d518d8b8a4f4e9d4c4a031bfe0055.html?subid=0 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: 199901ab86bf1271
set-cookie: ts_uid=205ab7e7-1eaf-4dbd-a646-9d7d0450ce48; expires=Wed, 19 Jul 2023 06:37:31 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
creative.xliirdr.com/widgets/v4/Universal?buttonColor=%23930606&campaignId=c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88&campaignType=smartpop&creativeId=f7d35c19e8363f8e59e197e6034e23aaac0f22600b273fb0cad1f12ae1c95358&iterationId=383554&liveBadgeColor=%23ff0707&masterSmartpopId=1605&memberId=zh7jSCcRbMekT1IqmIRVb18wbJ1Tr22rCROWHnLkKwq3CMNaepo-nG5wz8vFW2ucFRBiPrSM5qZ3_k2gYasHYiGJl0NTsFy9MYJRbKNCrbJlLoA_gUIDRUi&p1=4097593&quality=optimal&ruleId=3&smartpopId=1547&sourceId=226437&tag=-girls%2Findian&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=30029
200 OK 0 B URL HTTP/2 creative.xliirdr.com/widgets/v4/Universal?buttonColor=%23930606&campaignId=c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88&campaignType=smartpop&creativeId=f7d35c19e8363f8e59e197e6034e23aaac0f22600b273fb0cad1f12ae1c95358&iterationId=383554&liveBadgeColor=%23ff0707&masterSmartpopId=1605&memberId=zh7jSCcRbMekT1IqmIRVb18wbJ1Tr22rCROWHnLkKwq3CMNaepo-nG5wz8vFW2ucFRBiPrSM5qZ3_k2gYasHYiGJl0NTsFy9MYJRbKNCrbJlLoA_gUIDRUi&p1=4097593&quality=optimal&ruleId=3&smartpopId=1547&sourceId=226437&tag=-girls%2Findian&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=30029
IP
GET /widgets/v4/Universal?buttonColor=%23930606&campaignId=c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88&campaignType=smartpop&creativeId=f7d35c19e8363f8e59e197e6034e23aaac0f22600b273fb0cad1f12ae1c95358&iterationId=383554&liveBadgeColor=%23ff0707&masterSmartpopId=1605&memberId=zh7jSCcRbMekT1IqmIRVb18wbJ1Tr22rCROWHnLkKwq3CMNaepo-nG5wz8vFW2ucFRBiPrSM5qZ3_k2gYasHYiGJl0NTsFy9MYJRbKNCrbJlLoA_gUIDRUi&p1=4097593&quality=optimal&ruleId=3&smartpopId=1547&sourceId=226437&tag=-girls%2Findian&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=30029 HTTP/1.1
Host: creative.xliirdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tsyndicate.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html
last-modified: Wed, 18 Jan 2023 09:15:40 GMT
expires: Thu, 19 Jan 2023 06:37:26 GMT
cache-control: max-age=10
strict-transport-security: max-age=15768000
pragma: public
report-to: { "endpoints":[{ "url": "https://go.stripchat.com/report" }], "group": "default", "max_age": 1048576 }
cf-cache-status: HIT
age: 7
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bd8ff0dc36b529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxNDk2LCJzcGFjZWlkIjozNzQ5MCwidHlwZSI6InBvcCIsImlkem9uZSI6NDYzNTA5NiwiYWRfdGFncyI6IlN0cmFpZ2h0JTJDRmV0aXNoJTJDQW1hdGV1ciUyQ01JTEYlMkNCbG9uZGUlMkNGb290JTIwRmV0aXNoJTJDSEQiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6Mzc0OTAsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjEwLCJzdHJhdGFnZW0iOm51bGwsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1Nn0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH19XSwic2l0ZSI6eyJpZCI6IjM3NDkwIiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL2hjbGlwcy5jb20vdmlkZW9zLzc4MTk1NzkvbGluZGEtc2xlZXB5LWZlZXQvIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjllNDk0N2YzNTc1MTQ2NTQxMWZkMWE0ZjVjMzU4Yzc4In0sImV4dCI6eyJkdCI6MTY3NDExMDI1MDA5NH19
200 OK 0 B URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
GET /get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxNDk2LCJzcGFjZWlkIjozNzQ5MCwidHlwZSI6InBvcCIsImlkem9uZSI6NDYzNTA5NiwiYWRfdGFncyI6IlN0cmFpZ2h0JTJDRmV0aXNoJTJDQW1hdGV1ciUyQ01JTEYlMkNCbG9uZGUlMkNGb290JTIwRmV0aXNoJTJDSEQiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6Mzc0OTAsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjEwLCJzdHJhdGFnZW0iOm51bGwsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1Nn0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH19XSwic2l0ZSI6eyJpZCI6IjM3NDkwIiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL2hjbGlwcy5jb20vdmlkZW9zLzc4MTk1NzkvbGluZGEtc2xlZXB5LWZlZXQvIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjllNDk0N2YzNTc1MTQ2NTQxMWZkMWE0ZjVjMzU4Yzc4In0sImV4dCI6eyJkdCI6MTY3NDExMDI1MDA5NH19 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
static-assets.highwebmedia.com/cachebust/chatembed-prod-dc035477c911.js
200 OK 0 B URL HTTP/2 static-assets.highwebmedia.com/cachebust/chatembed-prod-dc035477c911.js
IP
GET /cachebust/chatembed-prod-dc035477c911.js HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:32 GMT
content-type: application/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=1008201
etag: W/"0a641e54fca9bc278c839fe60da7a81a"
last-modified: Thu, 19 Jan 2023 02:33:00 GMT
x-amz-id-2: vS70fSkGIKhCCcfedLIEQP+te3wxIVbl8gHmpWEyBVOXq0TJQ5yHDceLglNOG7Rirbo1HR+FbP4=
x-amz-meta-s3cmd-attrs: md5:0a641e54fca9bc278c839fe60da7a81a
x-amz-request-id: ECRA868ZP8ZAC4F0
cf-cache-status: HIT
age: 14461
expires: Sat, 18 Feb 2023 06:37:32 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9zzDSh009tfdOkjIOYoPN9TOHGMz6nrTgmPNrvLWYIND%2FU71xsAkpI%2BbEpDNTPEmjcQzbsQvjlnZouMUbEt0XDvfGO1Ll9kkq%2B4eeZFdmR9qiivGlj3Fq6c8b7Gfy%2Fad4SUVXKOfzSgIKPoy938sWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=CvvS.aAfVICENpC3IC26mjtlDUMUmNGuBEYZ4EFSOeA-1674110252348-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 78bd8ff51aaeb517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
hclips.com/videos/7819579/linda-sleepy-feet
301 Moved Permanently 0 B URL HTTP/2 hclips.com/videos/7819579/linda-sleepy-feet
IP
GET /videos/7819579/linda-sleepy-feet HTTP/1.1
Host: hclips.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Thu, 19 Jan 2023 06:37:28 GMT
content-type: text/html
location: https://hclips.com/videos/7819579/linda-sleepy-feet/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6M4BNvnQoq189il%2FmnmkuEYRlSGQxLQWcI%2FxKYaxZcCq%2FiThOm9NuE18ZwHgKHwxs51Mn%2F7JKR9i5QpkAKhZU0%2FurW0bPczw%2BJB3XILKaCjx8ejMEDcRKF8cweuI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78bd8fdc2e2123fb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
chaturbate.com/in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
302 Found 0 B URL HTTP/2 chaturbate.com/in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
IP
GET /in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1 HTTP/1.1
Host: chaturbate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r-eu.tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html; charset=utf-8
location: /topembed/female/?join_overlay=1&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
vary: Accept-Language, Cookie
content-language: en
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://ajax.googleapis.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.google.com/cv/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/cv/ https://www.gstatic.com/eureka/ https://www.gstatic.com/cast/ https://*.nr-data.net https://certify-js.alexametrics.com https://player.vimeo.com/api/player.js http://static.hotjar.com https://static.hotjar.com https://script.hotjar.com ; style-src 'self' data: 'unsafe-inline' https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.googleapis.com ; img-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://*.stream.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.nr-data.net https://certify.alexametrics.com https://stats.g.doubleclick.net https://cbgames.s3.amazonaws.com https://player.vimeo.com https://script.hotjar.com http://script.hotjar.com ; font-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.gstatic.com http://script.hotjar.com https://script.hotjar.com ; connect-src 'self' blob: blob https://*.mmcdn.com wss://*.mmcdn.com wss://*.mmcdn.com:8443 https://*.highwebmedia.com wss://*.highwebmedia.com wss://*.highwebmedia.com:8443 https://*.nr-data.net https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://cbvideoupload.s3-accelerate.amazonaws.com https://stats.g.doubleclick.net https://internet-up.ably-realtime.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://tls-use1.fpapi.io https://use1.fptls.com https://eun1.fptls.com https://aps1.fptls.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* https://surveystats.hotjar.io wss://*.hotjar.com ; media-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com mediasource: blob: data: https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com; object-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://download.macromedia.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com ; frame-src 'self' https://*.mmcdn.com https://*.chaturbate.com https://chaturbate.com https://*.highwebmedia.com https://adserver.exoticads.com https://www.google.com/recaptcha/ https://*.wnu.com https://wnu.com https://checkout.2000charge.com https://www.sofort.com https://*.girogate.de https://player.vimeo.com https://vars.hotjar.com ; child-src 'self' blob: blob ; worker-src 'self' blob: blob ; form-action 'self' https://*.chaturbate.com https://chaturbate.com https://*.stream.highwebmedia.com https://*.wnu.com https://wnu.com https://devportal.cb.dev https://*.web.amer-1.jumio.ai https://smartpay.coinsmart.com https://secure.paygarden.com ; manifest-src 'self' https://*.mmcdn.com https://*.highwebmedia.com ; report-uri https://report-uri.mmcdn.com/r/t/csp/enforce;
report-to: {"group":"default","max_age":2592000,"endpoints":[{"url":"https://report-uri.mmcdn.com/a/t/g"}],"include_subdomains":true}
nel: {"report_to":"default","max_age":2592000,"include_subdomains":true}
x-frame-options: DENY
cache-control: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block; report=https://report-uri.highwebmedia.com/r/t/xss/enforce
referrer-policy: strict-origin-when-cross-origin
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
set-cookie: u_6o0b=1; expires=Tue, 24 Jan 2023 06:37:31 GMT; Max-Age=432000; Path=/
us_6o0b=1; Path=/
affkey="eJwdjUEKgzAQRa8iszZGCwq667qnGNMEQ41K5ouI9O7tuHz/PfgXgYaCurUeqSzIpU2xfb76Thn5owwxaMzhR8fJOIaqrGICNhmszcbvFeRc3vGvfeXWZDXiEDRjibzIvOOIwet+vzwa+v4ABdglHg=="; Domain=.chaturbate.com; expires=Sat, 18 Feb 2023 06:37:31 GMT; Max-Age=2592000; Path=/
fromaffiliate=1; Domain=.chaturbate.com; Path=/
noads=1; expires=Thu, 19 Jan 2023 12:37:31 GMT; Max-Age=21600; Path=/
sbr=sec:sbr76ef8535-e99b-4cfd-a10d-ee06590002c1:1pIOYF:V1xCqKrvt0rskS2afVfL3-jBCj0; Domain=.chaturbate.com; expires=Tue, 14 Oct 2025 06:37:31 GMT; HttpOnly; Max-Age=86313600; Path=/; Secure
__cf_bm=e3mTWYfODuKj.1Gj18xxyJnQmUGaCXJ10_XsxFq78R8-1674110251-0-AVsiHKL609t5GtMi06QgQm6VGIuhPBO+rJEf1V9aOlTaBQlN7kttPDaQrXVUp/1q7MYk1XNqfsu5mizxmTCYbOY=; path=/; expires=Thu, 19-Jan-23 07:07:31 GMT; domain=.chaturbate.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78bd8ff10c881c12-OSL
X-Firefox-Spdy: h2
chaturbate.com/in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
302 Found 0 B URL HTTP/2 chaturbate.com/in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
IP
GET /in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1 HTTP/1.1
Host: chaturbate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r-eu.tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html; charset=utf-8
location: /topembed/female/?join_overlay=1&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
vary: Accept-Language, Cookie
content-language: en
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://ajax.googleapis.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.google.com/cv/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/cv/ https://www.gstatic.com/eureka/ https://www.gstatic.com/cast/ https://*.nr-data.net https://certify-js.alexametrics.com https://player.vimeo.com/api/player.js http://static.hotjar.com https://static.hotjar.com https://script.hotjar.com ; style-src 'self' data: 'unsafe-inline' https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.googleapis.com ; img-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://*.stream.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.nr-data.net https://certify.alexametrics.com https://stats.g.doubleclick.net https://cbgames.s3.amazonaws.com https://player.vimeo.com https://script.hotjar.com http://script.hotjar.com ; font-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.gstatic.com http://script.hotjar.com https://script.hotjar.com ; connect-src 'self' blob: blob https://*.mmcdn.com wss://*.mmcdn.com wss://*.mmcdn.com:8443 https://*.highwebmedia.com wss://*.highwebmedia.com wss://*.highwebmedia.com:8443 https://*.nr-data.net https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://cbvideoupload.s3-accelerate.amazonaws.com https://stats.g.doubleclick.net https://internet-up.ably-realtime.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://tls-use1.fpapi.io https://use1.fptls.com https://eun1.fptls.com https://aps1.fptls.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* https://surveystats.hotjar.io wss://*.hotjar.com ; media-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com mediasource: blob: data: https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com; object-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://download.macromedia.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com ; frame-src 'self' https://*.mmcdn.com https://*.chaturbate.com https://chaturbate.com https://*.highwebmedia.com https://adserver.exoticads.com https://www.google.com/recaptcha/ https://*.wnu.com https://wnu.com https://checkout.2000charge.com https://www.sofort.com https://*.girogate.de https://player.vimeo.com https://vars.hotjar.com ; child-src 'self' blob: blob ; worker-src 'self' blob: blob ; form-action 'self' https://*.chaturbate.com https://chaturbate.com https://*.stream.highwebmedia.com https://*.wnu.com https://wnu.com https://devportal.cb.dev https://*.web.amer-1.jumio.ai https://smartpay.coinsmart.com https://secure.paygarden.com ; manifest-src 'self' https://*.mmcdn.com https://*.highwebmedia.com ; report-uri https://report-uri.mmcdn.com/r/t/csp/enforce;
report-to: {"group":"default","max_age":2592000,"endpoints":[{"url":"https://report-uri.mmcdn.com/a/t/g"}],"include_subdomains":true}
nel: {"report_to":"default","max_age":2592000,"include_subdomains":true}
x-frame-options: DENY
cache-control: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block; report=https://report-uri.highwebmedia.com/r/t/xss/enforce
referrer-policy: strict-origin-when-cross-origin
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
set-cookie: u_6o0b=1; expires=Tue, 24 Jan 2023 06:37:31 GMT; Max-Age=432000; Path=/
us_6o0b=1; Path=/
affkey="eJwdjUEKgzAQRa8iszZGCwq667qnGNMEQ41K5ouI9O7tuHz/PfgXgYaCurUeqSzIpU2xfb76Thn5owwxaMzhR8fJOIaqrGICNhmszcbvFeRc3vGvfeXWZDXiEDRjibzIvOOIwet+vzwa+v4ABdglHg=="; Domain=.chaturbate.com; expires=Sat, 18 Feb 2023 06:37:31 GMT; Max-Age=2592000; Path=/
fromaffiliate=1; Domain=.chaturbate.com; Path=/
noads=1; expires=Thu, 19 Jan 2023 12:37:31 GMT; Max-Age=21600; Path=/
sbr=sec:sbr3eb05c9a-bc0c-4872-9fc9-eaa0bb21a130:1pIOYF:PJ_r5QWW_vfXnng51H1KDkcFTlc; Domain=.chaturbate.com; expires=Tue, 14 Oct 2025 06:37:31 GMT; HttpOnly; Max-Age=86313600; Path=/; Secure
__cf_bm=PSw0DgaGgDYn859vgaK3dkm4undz4xRwN2JWtRngkDU-1674110251-0-Ab9ZS7hwzKpX7i35SU5ta9hGTofFEG82ioy5dyxxz4KNNwD3sGmLRh5UBKmsu4tRiMxj5AQm0UX7fAfGWltP3K0=; path=/; expires=Thu, 19-Jan-23 07:07:31 GMT; domain=.chaturbate.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78bd8ff10c8b1c12-OSL
X-Firefox-Spdy: h2
sw.wpu.sh/npc/sdk/common/service-worker.js
200 OK 0 B URL HTTP/2 sw.wpu.sh/npc/sdk/common/service-worker.js
IP
ASN #39572 DataWeb Global Group B.V.
GET /npc/sdk/common/service-worker.js HTTP/1.1
Host: sw.wpu.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:32 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 11 Jan 2023 09:42:43 GMT
etag: W/"63be8493-158c"
content-encoding: gzip
expires: Thu, 19 Jan 2023 06:42:32 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
200 OK 0 B URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
go.xliirdr.com/config?url=https%3A%2F%2Fcreative.xliirdr.com%2Fwidgets%2Fv4%2FUniversal%3FbuttonColor%3D%2523930606%26campaignId%3Dc3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88%26campaignType%3Dsmartpop%26creativeId%3Df7d35c19e8363f8e59e197e6034e23aaac0f22600b273fb0cad1f12ae1c95358%26iterationId%3D383554%26liveBadgeColor%3D%2523ff0707%26masterSmartpopId%3D1605%26memberId%3Dzh7jSCcRbMekT1IqmIRVb18wbJ1Tr22rCROWHnLkKwq3CMNaepo-nG5wz8vFW2ucFRBiPrSM5qZ3_k2gYasHYiGJl0NTsFy9MYJRbKNCrbJlLoA_gUIDRUi%26p1%3D4097593%26quality%3Doptimal%26ruleId%3D3%26smartpopId%3D1547%26sourceId%3D226437%26tag%3D-girls%252Findian%26userId%3Ded4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e%26variationId%3D30029
200 OK 0 B URL HTTP/2 go.xliirdr.com/config?url=https%3A%2F%2Fcreative.xliirdr.com%2Fwidgets%2Fv4%2FUniversal%3FbuttonColor%3D%2523930606%26campaignId%3Dc3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88%26campaignType%3Dsmartpop%26creativeId%3Df7d35c19e8363f8e59e197e6034e23aaac0f22600b273fb0cad1f12ae1c95358%26iterationId%3D383554%26liveBadgeColor%3D%2523ff0707%26masterSmartpopId%3D1605%26memberId%3Dzh7jSCcRbMekT1IqmIRVb18wbJ1Tr22rCROWHnLkKwq3CMNaepo-nG5wz8vFW2ucFRBiPrSM5qZ3_k2gYasHYiGJl0NTsFy9MYJRbKNCrbJlLoA_gUIDRUi%26p1%3D4097593%26quality%3Doptimal%26ruleId%3D3%26smartpopId%3D1547%26sourceId%3D226437%26tag%3D-girls%252Findian%26userId%3Ded4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e%26variationId%3D30029
IP
GET /config?url=https%3A%2F%2Fcreative.xliirdr.com%2Fwidgets%2Fv4%2FUniversal%3FbuttonColor%3D%2523930606%26campaignId%3Dc3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88%26campaignType%3Dsmartpop%26creativeId%3Df7d35c19e8363f8e59e197e6034e23aaac0f22600b273fb0cad1f12ae1c95358%26iterationId%3D383554%26liveBadgeColor%3D%2523ff0707%26masterSmartpopId%3D1605%26memberId%3Dzh7jSCcRbMekT1IqmIRVb18wbJ1Tr22rCROWHnLkKwq3CMNaepo-nG5wz8vFW2ucFRBiPrSM5qZ3_k2gYasHYiGJl0NTsFy9MYJRbKNCrbJlLoA_gUIDRUi%26p1%3D4097593%26quality%3Doptimal%26ruleId%3D3%26smartpopId%3D1547%26sourceId%3D226437%26tag%3D-girls%252Findian%26userId%3Ded4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e%26variationId%3D30029 HTTP/1.1
Host: go.xliirdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xliirdr.com/
Origin: https://creative.xliirdr.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: application/json
access-control-allow-origin: *
last-modified: Thu, 19 Jan 2023 06:37:31 GMT
cf-cache-status: MISS
set-cookie: __cflb=02DiuDfsBaY2bRYJiCeRhAptQvDh5wz7muXvti6RxD38Q; SameSite=None; Secure; path=/; expires=Fri, 20-Jan-23 05:37:31 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bd8ff1bcf4b529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
chaturbate.com/in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
302 Found 0 B URL HTTP/2 chaturbate.com/in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
IP
GET /in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1 HTTP/1.1
Host: chaturbate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r-eu.tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html; charset=utf-8
location: /topembed/female/?join_overlay=1&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
vary: Accept-Language, Cookie
content-language: en
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://ajax.googleapis.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.google.com/cv/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/cv/ https://www.gstatic.com/eureka/ https://www.gstatic.com/cast/ https://*.nr-data.net https://certify-js.alexametrics.com https://player.vimeo.com/api/player.js http://static.hotjar.com https://static.hotjar.com https://script.hotjar.com ; style-src 'self' data: 'unsafe-inline' https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.googleapis.com ; img-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://*.stream.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.nr-data.net https://certify.alexametrics.com https://stats.g.doubleclick.net https://cbgames.s3.amazonaws.com https://player.vimeo.com https://script.hotjar.com http://script.hotjar.com ; font-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.gstatic.com http://script.hotjar.com https://script.hotjar.com ; connect-src 'self' blob: blob https://*.mmcdn.com wss://*.mmcdn.com wss://*.mmcdn.com:8443 https://*.highwebmedia.com wss://*.highwebmedia.com wss://*.highwebmedia.com:8443 https://*.nr-data.net https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://cbvideoupload.s3-accelerate.amazonaws.com https://stats.g.doubleclick.net https://internet-up.ably-realtime.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://tls-use1.fpapi.io https://use1.fptls.com https://eun1.fptls.com https://aps1.fptls.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* https://surveystats.hotjar.io wss://*.hotjar.com ; media-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com mediasource: blob: data: https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com; object-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://download.macromedia.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com ; frame-src 'self' https://*.mmcdn.com https://*.chaturbate.com https://chaturbate.com https://*.highwebmedia.com https://adserver.exoticads.com https://www.google.com/recaptcha/ https://*.wnu.com https://wnu.com https://checkout.2000charge.com https://www.sofort.com https://*.girogate.de https://player.vimeo.com https://vars.hotjar.com ; child-src 'self' blob: blob ; worker-src 'self' blob: blob ; form-action 'self' https://*.chaturbate.com https://chaturbate.com https://*.stream.highwebmedia.com https://*.wnu.com https://wnu.com https://devportal.cb.dev https://*.web.amer-1.jumio.ai https://smartpay.coinsmart.com https://secure.paygarden.com ; manifest-src 'self' https://*.mmcdn.com https://*.highwebmedia.com ; report-uri https://report-uri.mmcdn.com/r/t/csp/enforce;
report-to: {"group":"default","max_age":2592000,"endpoints":[{"url":"https://report-uri.mmcdn.com/a/t/g"}],"include_subdomains":true}
nel: {"report_to":"default","max_age":2592000,"include_subdomains":true}
x-frame-options: DENY
cache-control: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block; report=https://report-uri.highwebmedia.com/r/t/xss/enforce
referrer-policy: strict-origin-when-cross-origin
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
set-cookie: u_6o0b=1; expires=Tue, 24 Jan 2023 06:37:31 GMT; Max-Age=432000; Path=/
us_6o0b=1; Path=/
affkey="eJwdjUEKgzAQRa8iszZGCwq667qnGNMEQ41K5ouI9O7tuHz/PfgXgYaCurUeqSzIpU2xfb76Thn5owwxaMzhR8fJOIaqrGICNhmszcbvFeRc3vGvfeXWZDXiEDRjibzIvOOIwet+vzwa+v4ABdglHg=="; Domain=.chaturbate.com; expires=Sat, 18 Feb 2023 06:37:31 GMT; Max-Age=2592000; Path=/
fromaffiliate=1; Domain=.chaturbate.com; Path=/
noads=1; expires=Thu, 19 Jan 2023 12:37:31 GMT; Max-Age=21600; Path=/
sbr=sec:sbr7297df8e-9b9e-4699-a896-e633f56766dc:1pIOYF:WEYqG83kWKUDUgc53z_PY0SFrQc; Domain=.chaturbate.com; expires=Tue, 14 Oct 2025 06:37:31 GMT; HttpOnly; Max-Age=86313600; Path=/; Secure
__cf_bm=3dvKLDRek7iR5z_cyNMgYWzwEeHva16wq.u3z2b2z5o-1674110251-0-AesNkV/xTOSvjdf7eVlCRkoymIspKXPJS1zIIU7eYUB25B2lzvYkp3F6CvdE704R7qlX49ieIBfazG8V+CzIMtI=; path=/; expires=Thu, 19-Jan-23 07:07:31 GMT; domain=.chaturbate.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78bd8ff10c891c12-OSL
X-Firefox-Spdy: h2
chaturbate.com/in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
302 Found 0 B URL HTTP/2 chaturbate.com/in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
IP
GET /in/?track=ts-t1-webcam-cat&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1 HTTP/1.1
Host: chaturbate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r-eu.tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Thu, 19 Jan 2023 06:37:31 GMT
content-type: text/html; charset=utf-8
location: /topembed/female/?join_overlay=1&tour=6o0b&campaign=5AK96&disable_sound=1&mobileRedirect=auto&embed_video_only=1
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
vary: Accept-Language, Cookie
content-language: en
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://ajax.googleapis.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.google.com/cv/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/cv/ https://www.gstatic.com/eureka/ https://www.gstatic.com/cast/ https://*.nr-data.net https://certify-js.alexametrics.com https://player.vimeo.com/api/player.js http://static.hotjar.com https://static.hotjar.com https://script.hotjar.com ; style-src 'self' data: 'unsafe-inline' https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.googleapis.com ; img-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://*.stream.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.nr-data.net https://certify.alexametrics.com https://stats.g.doubleclick.net https://cbgames.s3.amazonaws.com https://player.vimeo.com https://script.hotjar.com http://script.hotjar.com ; font-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.gstatic.com http://script.hotjar.com https://script.hotjar.com ; connect-src 'self' blob: blob https://*.mmcdn.com wss://*.mmcdn.com wss://*.mmcdn.com:8443 https://*.highwebmedia.com wss://*.highwebmedia.com wss://*.highwebmedia.com:8443 https://*.nr-data.net https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://cbvideoupload.s3-accelerate.amazonaws.com https://stats.g.doubleclick.net https://internet-up.ably-realtime.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://tls-use1.fpapi.io https://use1.fptls.com https://eun1.fptls.com https://aps1.fptls.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* https://surveystats.hotjar.io wss://*.hotjar.com ; media-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com mediasource: blob: data: https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com; object-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://download.macromedia.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com ; frame-src 'self' https://*.mmcdn.com https://*.chaturbate.com https://chaturbate.com https://*.highwebmedia.com https://adserver.exoticads.com https://www.google.com/recaptcha/ https://*.wnu.com https://wnu.com https://checkout.2000charge.com https://www.sofort.com https://*.girogate.de https://player.vimeo.com https://vars.hotjar.com ; child-src 'self' blob: blob ; worker-src 'self' blob: blob ; form-action 'self' https://*.chaturbate.com https://chaturbate.com https://*.stream.highwebmedia.com https://*.wnu.com https://wnu.com https://devportal.cb.dev https://*.web.amer-1.jumio.ai https://smartpay.coinsmart.com https://secure.paygarden.com ; manifest-src 'self' https://*.mmcdn.com https://*.highwebmedia.com ; report-uri https://report-uri.mmcdn.com/r/t/csp/enforce;
report-to: {"group":"default","max_age":2592000,"endpoints":[{"url":"https://report-uri.mmcdn.com/a/t/g"}],"include_subdomains":true}
nel: {"report_to":"default","max_age":2592000,"include_subdomains":true}
x-frame-options: DENY
cache-control: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block; report=https://report-uri.highwebmedia.com/r/t/xss/enforce
referrer-policy: strict-origin-when-cross-origin
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
set-cookie: u_6o0b=1; expires=Tue, 24 Jan 2023 06:37:31 GMT; Max-Age=432000; Path=/
us_6o0b=1; Path=/
affkey="eJwdjUEKgzAQRa8iszZGCwq667qnGNMEQ41K5ouI9O7tuHz/PfgXgYaCurUeqSzIpU2xfb76Thn5owwxaMzhR8fJOIaqrGICNhmszcbvFeRc3vGvfeXWZDXiEDRjibzIvOOIwet+vzwa+v4ABdglHg=="; Domain=.chaturbate.com; expires=Sat, 18 Feb 2023 06:37:31 GMT; Max-Age=2592000; Path=/
fromaffiliate=1; Domain=.chaturbate.com; Path=/
noads=1; expires=Thu, 19 Jan 2023 12:37:31 GMT; Max-Age=21600; Path=/
sbr=sec:sbr81d32ca4-c73a-473a-af1b-af8c1b9209ac:1pIOYF:GxZyhB504Y9zZbQSqW7_wQDSNAs; Domain=.chaturbate.com; expires=Tue, 14 Oct 2025 06:37:31 GMT; HttpOnly; Max-Age=86313600; Path=/; Secure
__cf_bm=XnKt_7gOUUxEqaw0RdOa.aMFb.n09w6LZLdhbhM66_0-1674110251-0-AR8VmHHE3vLZSoJVpJ+UFraaw2OQ1BsKB3jgAoMD02msxzUfVpl5NxnRVDw6EBU9oJk2Qf1pVyh8/ba7/KNTuf4=; path=/; expires=Thu, 19-Jan-23 07:07:31 GMT; domain=.chaturbate.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78bd8ff0fc811c12-OSL
X-Firefox-Spdy: h2
static-assets.highwebmedia.com/CACHE/js/output.90a7a6687776.js
200 OK 0 B URL HTTP/2 static-assets.highwebmedia.com/CACHE/js/output.90a7a6687776.js
IP
GET /CACHE/js/output.90a7a6687776.js HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:32 GMT
content-type: application/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
etag: W/"eba6018c1d2ab593c234e5750506e38a"
last-modified: Mon, 17 Oct 2022 21:37:31 GMT
x-amz-id-2: MuRi9INFlyZ8s0MfpOqtyosRRye3EDr/cdpWTRrQUKKo6PNFSGfohJwm10zs48bLswjVhUc8b0Z/eZ9oVm3U4Q==
x-amz-meta-s3cmd-attrs: md5:eba6018c1d2ab593c234e5750506e38a
x-amz-request-id: VR1ABN9AAN3FB4KK
cf-cache-status: HIT
age: 291450
expires: Sat, 18 Feb 2023 06:37:32 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iTgGcOzSJFX6FWrnfUP75a6hyoco59h7miKbs40L%2BUzH1D9JzS5BKNa6w5kC49pMxt03NF7L5hlKTWr2mAS891U6Pc1nIjCfarQR9XhSrI0zw9D4lny9N2phxeh8N6uuUd8zyqXmZsrZajCuUNMJGA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=anbgjpeetMkYpaI8Wj46rG4qPW0YUltkvhrjfKkjpTQ-1674110252339-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 78bd8ff50aa3b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
vast.yomeno.xyz/vast
200 OK 0 B IP
POST /vast HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json; charset=utf-8
Content-Length: 552
Origin: https://hclips.com
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: Accept-Encoding, *
access-control-allow-credentials: true
access-control-allow-origin: https://hclips.com
access-control-expose-headers: Content-Length,Content-Range
content-encoding: gzip
X-Firefox-Spdy: h2
static-assets.highwebmedia.com/cachebust/theatermode-react-dc035477c911.js
200 OK 0 B URL HTTP/2 static-assets.highwebmedia.com/cachebust/theatermode-react-dc035477c911.js
IP
GET /cachebust/theatermode-react-dc035477c911.js HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 06:37:32 GMT
content-type: application/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=218878
etag: W/"1363fbe9e1db7af301a7e324294a1efd"
last-modified: Thu, 19 Jan 2023 02:32:58 GMT
x-amz-id-2: oMcFDyLgZqsjKXacLEs8BUtvnog8W7cJ+nvpCggyrvZpmaBKReY2jvARV+NPfQxbO0ACjug1SVY=
x-amz-meta-s3cmd-attrs: md5:1363fbe9e1db7af301a7e324294a1efd
x-amz-request-id: ECRFAZ3G9QYPQPQS
cf-cache-status: HIT
age: 14461
expires: Sat, 18 Feb 2023 06:37:32 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E7IN7YR2xAptTYj6hM5MFjHqwU2oKlUJbDLO0YAy3nNq85I8pOiLl1VSpLNTdn539kq7M2lzYcqYQAQ0cv6rTnKh5FT7rAwTHumUkr7cEL0%2FBRgAk53jihKn8Ie%2FBJ8N66f286gR2zZsNoBncE%2Bmtw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=XSzqIpfEGGcEzrqbarWfWZcFnaRRIYlDehdy2chFhaw-1674110252343-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 78bd8ff50aa5b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
200 OK 0 B URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
200 OK 0 B URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hclips.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 19 Jan 2023 06:37:30 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
172.64.170.29
78.47.199.210
109.206.181.2
104.16.93.42
23.33.119.10
185.76.9.16
87.250.251.119
93.184.220.29