| 4fans.gay/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=7.6 |  188.114.96.1 | 200 OK | 5.9 kB |
URL GET HTTP/34fans.gay/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=7.6 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJavaScript source, ASCII text, with very long lines (20538) Hashf905907e6908ba3646d8fb7e41484531 b5dac8702b02ff2015effdf26cc2781c5c134ed3 c30b6d9818f986da2367e411cebf9aa5bf2eb3580a1bf3acb573f9481f0de5ab
GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=7.6 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: application/javascript
last-modified: Mon, 06 May 2024 17:52:58 GMT
vary: Accept-Encoding
etag: W/"663918fa-5115"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 92379
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FcRll2QWWyPIjOhiLk6EVvO%2F%2BZqunYnz%2Bxiv8WpjFZCugj9BYRydVLOnG%2FowWW4075rACAfxBPqJZsr%2B9%2FkYR5kS7FO93GpZs8b58YMBjWCnZ72XsJaJyk%2FgKH0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55e3e3a0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=GT-5R4NJ2R |  142.250.74.168 | 200 OK | 102 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=GT-5R4NJ2R IP142.250.74.168:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Size102 kB (101542 bytes) Hash7a756a6b2e8f1b8a5f264f4cc5540d70 af956497f4722c0bd592fb077f6403de2e28e15b e08029a9ae4cfa74cf940f925365375f2395e09eb950936b18e139c67e6d5437
GET /gtag/js?id=GT-5R4NJ2R HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 19:34:11 GMT
expires: Tue, 07 May 2024 19:34:11 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 101542
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 4fans.gay/wp-content/plugins/jnews-social-share/assets/js/plugin.js | 188.114.96.1 | 200 OK | 1.7 kB |
URL GET HTTP/34fans.gay/wp-content/plugins/jnews-social-share/assets/js/plugin.js IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJavaScript source, ASCII text, with very long lines (3480), with no line terminators Hash71ed5d351d462619d0b359f73f22bc2c 53b2bc6d7d8d387ed34dad9c473945662cc54d24 ae63276d13de5376dd9d5d0dd2d330cb131ace6ab96008ddcad724acff553cea
GET /wp-content/plugins/jnews-social-share/assets/js/plugin.js HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 12:02:10 GMT
vary: Accept-Encoding
etag: W/"65521042-d98"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96430
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jxKQ8hYLm2QuZZvPvvHHjPMOJKYaLeCiR7sbfcmk8xQowZRDmUIUWIhHZ4gxZ%2FA5n%2FaprDk7GUs3egfRXCd4VBXZEhoA7KFPFWbsHVWLoZwd9YPMYTbEOJDlGzY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55e3e250b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-includes/js/imagesloaded.min.js?ver=5.0.0 | 188.114.96.1 | 200 OK | 2.1 kB |
URL GET HTTP/34fans.gay/wp-includes/js/imagesloaded.min.js?ver=5.0.0 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJavaScript source, ASCII text, with very long lines (4358) Hash6823120876c9afc8929418c9a6f8e343 90b0adb37d70ffec5f9189c36bb0027c310c9502 b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1
GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: application/javascript
last-modified: Wed, 08 Nov 2023 11:27:18 GMT
vary: Accept-Encoding
etag: W/"654b7096-1590"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96449
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=boFbj8YFbR7qLHPikFYIU6jrvNB4PZUGD4LwYB1NQz83E1%2BH12m5O%2BEDqN720BpXGqGlxaOOdr538LCw4oelZ5QRb7jce2%2FJAshTGRFLxXzdRbBX5q8nU3ecrpk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55e1deb0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| giggleostentatious.com/64/06/b1/6406b181e5c0405a3cf1ae0dcbeb6e6e.js | 192.243.59.12 | 200 OK | 31 kB |
URL GET HTTP/1.1giggleostentatious.com/64/06/b1/6406b181e5c0405a3cf1ae0dcbeb6e6e.js IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subjectgiggleostentatious.com Fingerprint08:41:FC:D7:E8:5D:A1:62:29:D0:D9:BC:B9:2F:38:DB:78:9D:73:AD ValidityThu, 21 Mar 2024 07:32:49 GMT - Wed, 19 Jun 2024 07:32:48 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash797e6c849b9ad61924b06f29933c6aa7 39d7fa63533f8535e950e7a1036c90713a694faf f712d53355f03b91fe272bf8be9093e3a77819e9cfc5b365f065dcfc6134aea7
GET /64/06/b1/6406b181e5c0405a3cf1ae0dcbeb6e6e.js HTTP/1.1
Host: giggleostentatious.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 07 May 2024 19:34:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: aebb4a03d0d576df5fad75cbb2bfe8d7
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| 4fans.gay/wp-content/plugins/bp-verified-member/assets/js/main.js?ver=1.2.6 | 188.114.96.1 | 200 OK | 1.9 kB |
URL GET HTTP/34fans.gay/wp-content/plugins/bp-verified-member/assets/js/main.js?ver=1.2.6 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
Hash55f69ac49022d15956feb6164bb08b11 99a58ddab245f0403b686b78f4be19cb120d70a2 5f1334b0d0a1ce35fc5aad935efcb5b7f9afb66e71afd1613da15ec27bb5c5f5
GET /wp-content/plugins/bp-verified-member/assets/js/main.js?ver=1.2.6 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: application/javascript
last-modified: Fri, 16 Dec 2022 07:27:16 GMT
vary: Accept-Encoding
etag: W/"639c1dd4-11a5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96450
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JeDUn5ZLKxejx0m7IjZLvgPU4vLJFgXWAMjodo8pMrAnQ5pc6fmcI0CmGks38C48OgArWe%2BvLolSj2ZP0%2FaEbBzzOFX%2F9Dm4v%2FqHuMgl0zKLuUGYVHRF2WHcjlk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55dbd2e0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-content/themes/jnews/assets/css/elementor-frontend.css?ver=11.5.2 | 188.114.96.1 | 200 OK | 655 B |
URL GET HTTP/34fans.gay/wp-content/themes/jnews/assets/css/elementor-frontend.css?ver=11.5.2 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeASCII text, with very long lines (681), with no line terminators Hashd3f72a23a4659d7c807ef226a63d313a 9ce54035aa58581ce6396a33765cb2f476f79a50 6400dc8b0e288909fa6cc5abdb32a8c2f1a8f8efeb93369ab9bf9378f5f50bd7
GET /wp-content/themes/jnews/assets/css/elementor-frontend.css?ver=11.5.2 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: text/css
last-modified: Mon, 06 May 2024 16:55:14 GMT
vary: Accept-Encoding
etag: W/"66390b72-2a9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 95931
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8pRIP2NjOT0SHfxDjgA24w%2BeR5xMFHc9kNbmy2XKasL3t3VG%2FBbITDLuBJgOgqROX%2BaCFSp7qDP3lHT%2BLfKPFnvmc7%2BO3lBu5SKX87P372QrSO%2F7zhLkEPzpVig%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55dace20b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-content/plugins/jnews-social-share/assets/css/plugin.css | 188.114.96.1 | 200 OK | 4.8 kB |
URL GET HTTP/34fans.gay/wp-content/plugins/jnews-social-share/assets/css/plugin.css IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeASCII text, with very long lines (1461), with no line terminators Hashd8362094b258cbf05eff4954b9e53a06 62128851d3d201b4767775ac92ad5fa27608a357 af1c8d56406938096d49c1cefa52b3141494941f3fe98079bd8497114aebe05e
GET /wp-content/plugins/jnews-social-share/assets/css/plugin.css HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: text/css
last-modified: Mon, 13 Nov 2023 12:02:10 GMT
vary: Accept-Encoding
etag: W/"65521042-5b5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96430
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iJ59cIU7MvvLqMG%2Bx2BkU2doQaPSGp1QPDPX20nwoXFldV%2BmH1wlJpdYQPIvLr4dxk4LnSQ3LsO7L4QuTS01%2BVt4Wv1SiwgbwpmC6WVZXKjagzHNsZwHLtQkCCU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55dbd250b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-content/themes/jnews/assets/css/darkmode-device.css?ver=11.5.2 | 188.114.96.1 | 200 OK | 14 kB |
URL GET HTTP/34fans.gay/wp-content/themes/jnews/assets/css/darkmode-device.css?ver=11.5.2 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeASCII text, with very long lines (49987), with no line terminators Hash38b3572c82966286259d268da8aa7dcc 1a2286e23091b3a99cccb524a0ee3cc0a8cda11b 87cb2b4acc1d6cd2bbb2fe9c89a7de3d52649eccb13968c618af35105b14475e
GET /wp-content/themes/jnews/assets/css/darkmode-device.css?ver=11.5.2 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: text/css
last-modified: Mon, 06 May 2024 16:55:14 GMT
vary: Accept-Encoding
etag: W/"66390b72-c343"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 95931
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HGAzaVv9IE%2FQszV8wsifXp5Nry0jyKpY7D6K%2FS1EO7X9pk4ItLMtlDQ%2FZVmsvxzshKXYoQSJgIN289K%2BAM0HShVnTxnaFkd6dv1Ojtv4isxtPiRXrdoZklSg3HM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55dace70b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 188.114.96.1 | 200 OK | 37 kB |
URL GET HTTP/34fans.gay/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: application/javascript
last-modified: Wed, 08 Nov 2023 11:27:18 GMT
vary: Accept-Encoding
etag: W/"654b7096-15601"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96450
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7A94OEMI5aRbRp4pCx3rPVEZ7NKqFSuffG1IHqpNwo32rjvUSJX8Lxeif37qf2FncnExOWJrmneR2JBL52o2Zf5yFrz0yOBNOYi6VE9VJ6tre%2FLhSI6eN3mJBoA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55dbd2b0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-content/plugins/advanced-ads/public/assets/js/advanced.min.js?ver=1.52.2 | 188.114.96.1 | 200 OK | 11 kB |
URL GET HTTP/34fans.gay/wp-content/plugins/advanced-ads/public/assets/js/advanced.min.js?ver=1.52.2 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJavaScript source, ASCII text, with very long lines (7581), with no line terminators Hashbe37be2fa8d07d31530ef0bdcc676f1b 9834ae3c8fa1fd3676b5e4839ece78d41160bf47 98ff2f173784b131e58f376088dfd9f53aedfcbc9feb5a65d5f90d671f9b8e4f
GET /wp-content/plugins/advanced-ads/public/assets/js/advanced.min.js?ver=1.52.2 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: application/javascript
last-modified: Mon, 06 May 2024 16:51:19 GMT
vary: Accept-Encoding
etag: W/"66390a87-1d9d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 95931
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rNXEH1hB%2FqEAXhktxleWFnxGk9zLiQDOzp2IBtpErhMFgMhGq8WSrAgp4d2rcpA7BHEUth9gkdltVEErIXPXFvgNH0Ai3P9q4WszORAIDizQkd%2BSrn4VSJiHIB4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55dbd300b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 188.114.96.1 | 200 OK | 10 kB |
URL GET HTTP/34fans.gay/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: application/javascript
last-modified: Tue, 08 Aug 2023 20:27:22 GMT
vary: Accept-Encoding
etag: W/"64d2a52a-3509"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96450
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nWf%2F%2FPt7KY3Ft7SOBAxuCC3%2BAK3ZRfjBuUml6Gk4cVp%2FNWmLby09nPCn9XxYFgK5NOOUStLdPgoo4Z%2BMijhkuNBJ2K1BmbEzzeW%2Bx47Yngj80gHF6qkWdEYZQyo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55dbd2c0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-content/themes/jnews/assets/dist/font/fontawesome-webfont.woff2 | 188.114.96.1 | 200 OK | 77 kB |
URL GET HTTP/34fans.gay/wp-content/themes/jnews/assets/dist/font/fontawesome-webfont.woff2 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /wp-content/themes/jnews/assets/dist/font/fontawesome-webfont.woff2 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://4fans.gay/wp-content/themes/jnews/assets/dist/frontend.min.css?ver=11.5.2
Cookie: _ga_BLZ9KGC3FH=GS1.1.1715110451.1.0.1715110451.0.0.0; _ga=GA1.1.1031319977.1715110451; advanced_ads_browser_width=1280
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:11 GMT
content-type: application/octet-stream
content-length: 77160
last-modified: Mon, 06 May 2024 16:55:14 GMT
vary: Accept-Encoding
etag: "66390b72-12d68"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 95931
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i4U8rmrjWSR3VZfAlyru3WiDHe6tKJf229ceH8yLQW6NYHJA3agmvHO4tG6iXm0%2Fx4kI3vgpCYyo9eSaVW%2BEf4t%2Flc9lhyFR%2Bdbxh1Rj5X%2BeZPFWUkA7D3Gtm0s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a564da250b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ocsp.r2m03.amazontrust.com/ | 143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hash3a1e61864f6877260287982fa7e36085 6d426b2327915af4f120ff6b18ebd20ed03c2a2b 9ee2ee3f0b60937becb4aa057c348332dd277e32b268f5c0ea260c0d2a2af498
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Tue, 07 May 2024 19:34:11 GMT
Last-Modified: Tue, 07 May 2024 18:44:10 GMT
Server: ECAcc (ska/F77E)
X-Cache: Miss from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: k611TgLe49_tP_ZTVfFNGAuJZpG5QuB-U7GCoA0SVeUNVlEJ1MHWiA==
Age: 3001
|
|
| 4fans.gay/wp-content/uploads/2023/06/thumbnail-00180-120x86.jpg | 188.114.96.1 | 200 OK | 10 kB |
URL GET HTTP/34fans.gay/wp-content/uploads/2023/06/thumbnail-00180-120x86.jpg IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x86, components 3 Hashb4315b80207ebd39be31a8b04a3189e4 25879d28bf8dd20a440de9123d60445ef88b6d19 345437618e694be4d6dab5ee3c65e9a44767f3f582719de740f7bf926ecc4f7f
GET /wp-content/uploads/2023/06/thumbnail-00180-120x86.jpg HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:11 GMT
content-type: image/jpeg
last-modified: Tue, 27 Jun 2023 20:53:56 GMT
vary: Accept-Encoding
etag: W/"649b4c64-c80"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m2GmIQfeLJCScGBBGEX7MYTqzv0zuKV3fIc80ny3cDI7ISMWNXisOX9B%2FaRYA2ZOS4aQ5lkLT5gku%2B4Oo%2FP%2FJFQmMYrwabW6ts0nSrTJX1ppNV7XztvRCvqzXss%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55e0dd50b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-content/themes/jnews/assets/dist/frontend.min.js?ver=11.5.2 | 188.114.96.1 | 200 OK | 81 kB |
URL GET HTTP/34fans.gay/wp-content/themes/jnews/assets/dist/frontend.min.js?ver=11.5.2 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash2ff5979bedeefba5e149751c47a87b29 4de64e624449a0b815087da92e75bcad4dcd321d b5de21b4f771e89917e2a15ec13c709effa1ab1a1e86feea6424619d0b560b88
GET /wp-content/themes/jnews/assets/dist/frontend.min.js?ver=11.5.2 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: application/javascript
last-modified: Mon, 06 May 2024 16:55:14 GMT
vary: Accept-Encoding
etag: W/"66390b72-4acfd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 95931
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FwnZ4cRogVJr0k%2B0wfygGOiMngXPfzcmpmvGUod7sy8oZftJnD6xni%2FiuX05PQ5q9aNTl7ZyiwByooZ%2BPb5reby5JDQ5hC%2F2%2BTQOazuY%2FwtWFB7p7o%2BPBLtAozU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55e2e0a0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-content/plugins/jnews-video/assets/js/supposition.js?ver=11.0.5 | 188.114.96.1 | 200 OK | 28 kB |
URL GET HTTP/34fans.gay/wp-content/plugins/jnews-video/assets/js/supposition.js?ver=11.0.5 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJavaScript source, ASCII text, with very long lines (1315), with no line terminators Hashba8b52a5f394aafad7c57fc7f27f30ea 8ba127f074513c7d481f6b7d9b352bec9336d861 28d894b4664f51376d31de576644dad93b7c928551e66efc58bdba0ad51f3a9d
GET /wp-content/plugins/jnews-video/assets/js/supposition.js?ver=11.0.5 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: application/javascript
last-modified: Mon, 06 May 2024 17:52:53 GMT
vary: Accept-Encoding
etag: W/"663918f5-523"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 92379
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v6J9KO245QHlaVjBe16UCKEeCT%2BXAN0TwgOspnYPHg7hMWF8MiKdVl9q%2FOBO%2FKijJe1BOI1VFIhSYRu25sl1DOb%2BfSSz3KHUjZvv0ixQlkUWhIYhwXfoEevXyDA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55e1ded0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15920, version 1.0 Hash3a44e06eb954b96aa043227f3534189d 23cef6993ddb2b2979e8e7647fc3763694e2ba7d b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://4fans.gay
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:03:54 GMT
expires: Fri, 02 May 2025 02:03:54 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 495018
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 4fans.gay/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2 | 188.114.96.1 | 200 OK | 17 kB |
URL GET HTTP/34fans.gay/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJavaScript source, ASCII text, with very long lines (3224) Hashc4a1336d5abc0f160d866481f99b1717 4498359374276a34a59ab798d667da38fd17a439 809ec973a018b6bf8ac18e74bfffc3d25182e6f44df00128d531cf3e07570ee6
GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: application/javascript
last-modified: Tue, 01 Nov 2022 19:27:32 GMT
vary: Accept-Encoding
etag: W/"63617324-d4a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96449
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EzYqkblCUYZkJMv2Xe4slU6dp1WEdTu5xEMvjjrvwpJr8w9SgnV%2BvaInGhIniUO130zWd5RCMesaZKFGxpK9AEjQ2lTMqWwqT9wJHbhuDgJJPEdvikPusvJUqEE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55e2df30b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-includes/js/comment-reply.min.js?ver=6.5.2 | 188.114.96.1 | 200 OK | 17 kB |
URL GET HTTP/34fans.gay/wp-includes/js/comment-reply.min.js?ver=6.5.2 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeASCII text, with very long lines (2946) Hash492f2c1a7ea7eb83fe42e0ff7cb51aa2 db36a77f6aaa2063bfbec02c2c0e967438c5a245 e174a58a503ab84b3d1b9de12fd3895788204485170f1289e445f7b5b98ec789
GET /wp-includes/js/comment-reply.min.js?ver=6.5.2 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: application/javascript
last-modified: Tue, 24 May 2022 18:28:26 GMT
vary: Accept-Encoding
etag: W/"628d23ca-ba5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96429
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6u0tAlf0D87m3AV%2B8cffKLli83q6mvBlg9gxBfqPlMTtkpwJeoCxUvEPtq762sI8kBFoWd5Jrd7OWfwA9xJ%2FrwmfI2qWg4tdGlYiQ0kSGdC1P3BRj4pN0Ed9yeU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55e1de40b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 | 188.114.96.1 | 200 OK | 6.8 kB |
URL GET HTTP/34fans.gay/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (8189) Hashc4e68a0f3463c0bd3c39eab38815e881 0ce58644e9f3c5063a11453ff287c5ec096465a7 ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: application/javascript
last-modified: Wed, 29 Mar 2023 18:27:28 GMT
vary: Accept-Encoding
etag: W/"64248310-53be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96449
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bNwv5EtTFF3WwzJsc3Il3jF5TRe9dKSnHSR07PqJHduutkK%2BzIgfKOMM7lVo6mtrF2Uow70tK0a42GsugSJmgGJ0VO8ahdWy79r%2B7e%2BbpxvDwOZnoPitGKDZ4To%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55e1def0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pixel.wp.com/g.gif?v=ext&blog=224528421&post=18138&tz=-6&srv=4fans.gay&j=1%3A13.3.1&host=4fans.gay&ref=&fcp=2194&rand=0.9454825794488706 | 192.0.76.3 | 200 OK | 50 B |
URL GET HTTP/3pixel.wp.com/g.gif?v=ext&blog=224528421&post=18138&tz=-6&srv=4fans.gay&j=1%3A13.3.1&host=4fans.gay&ref=&fcp=2194&rand=0.9454825794488706 IP192.0.76.3:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerSectigo Limited Subject*.wp.com Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2 ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeGIF image data, version 89a, 6 x 5 Hashe4d673a55c5656f19ef81563fb10884c 1f2d8ed221d39329251ad3a6ff1edb20b7219443 f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
GET /g.gif?v=ext&blog=224528421&post=18138&tz=-6&srv=4fans.gay&j=1%3A13.3.1&host=4fans.gay&ref=&fcp=2194&rand=0.9454825794488706 HTTP/1.1
Host: pixel.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
server: nginx
date: Tue, 07 May 2024 19:34:12 GMT
content-type: image/gif
content-length: 50
cache-control: no-cache
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
|
|
| play.cdnm4m.nl/assets/img/menu.png |  104.21.17.137 | 200 OK | 20 kB |
URL GET HTTP/3play.cdnm4m.nl/assets/img/menu.png IP104.21.17.137:443
Requested byhttps://play.cdnm4m.nl/embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d CertificateIssuerGoogle Trust Services LLC Subjectcdnm4m.nl FingerprintEC:8C:A5:8B:91:32:7B:AE:3C:D1:79:4A:A3:6E:3C:5D:CC:05:29:22 ValiditySat, 23 Mar 2024 09:33:01 GMT - Fri, 21 Jun 2024 09:33:00 GMT
File typePNG image data, 29 x 21, 8-bit/color RGBA, non-interlaced Hashf7073693ae0abee71dcbe6b4683d15a0 1f6ee14fc2bfe7184568aac31ef9d247b6ffbdde 43e1a200a6912f591d8e5a05adbe01193487924bda0efaa94d8cf29ecb302609
GET /assets/img/menu.png HTTP/1.1
Host: play.cdnm4m.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:12 GMT
content-type: image/png
content-length: 19864
last-modified: Tue, 31 Aug 2021 13:45:54 GMT
etag: "612e3292-4d98"
access-control-allow-origin: *
access-control-allow-credentials: false
cache-control: max-age=14400
cf-cache-status: HIT
age: 3997
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FzN0NYQq0BUPZGddWU16Yif9ugPI0jBTzausB51f%2Fb%2BcV1WOhaS4d%2FXB7FnP9YU0HRgx87CSZ07kvNgA2Ku3mVEZOO7uMCZ99rZXnfSu4F%2B%2B1tBKStOWRbMTJBQnGowQdw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8803a5687dce56be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| play.cdnm4m.nl/assets/img/logo/direct.png | 104.21.17.137 | 200 OK | 370 B |
URL GET HTTP/3play.cdnm4m.nl/assets/img/logo/direct.png IP104.21.17.137:443
Requested byhttps://play.cdnm4m.nl/embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d CertificateIssuerGoogle Trust Services LLC Subjectcdnm4m.nl FingerprintEC:8C:A5:8B:91:32:7B:AE:3C:D1:79:4A:A3:6E:3C:5D:CC:05:29:22 ValiditySat, 23 Mar 2024 09:33:01 GMT - Fri, 21 Jun 2024 09:33:00 GMT
File typePNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced Hash0c55e586e54d8a1025bea75b3be4d159 ac366840688bfbffd98e1829e6c78424a3afd07f ca0fa469771eebb909fb79f4c6be5e771ff353dc2c589f0fa7d5eac36939fe82
GET /assets/img/logo/direct.png HTTP/1.1
Host: play.cdnm4m.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:12 GMT
content-type: image/png
content-length: 370
last-modified: Mon, 02 Aug 2021 18:46:50 GMT
etag: "61083d9a-172"
access-control-allow-origin: *
access-control-allow-credentials: false
cache-control: max-age=14400
cf-cache-status: HIT
age: 3997
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nUl5fB9nIFa9e0QdxyD1ppz8UFMftSYWH94huf3Sw%2Bd9P4X5dvYeyHvMAnmXeGirHwomKenz0jqlZUTQIeIHplPmYMwTyb%2BaJ5rARwhH%2F2DhUJseyYM3yXtLrxCPQVIm4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8803a5687dd256be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| play.cdnm4m.nl/assets/js/prebid-ads.js | 104.21.17.137 | 200 OK | 23 B |
URL GET HTTP/3play.cdnm4m.nl/assets/js/prebid-ads.js IP104.21.17.137:443
Requested byhttps://play.cdnm4m.nl/embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d CertificateIssuerGoogle Trust Services LLC Subjectcdnm4m.nl FingerprintEC:8C:A5:8B:91:32:7B:AE:3C:D1:79:4A:A3:6E:3C:5D:CC:05:29:22 ValiditySat, 23 Mar 2024 09:33:01 GMT - Fri, 21 Jun 2024 09:33:00 GMT
File typeASCII text, with CRLF line terminators Hash384958cc7472e3568f7a3ac741e69ff8 536b8cfc2414774bf6f257b5cabb45fac2bbc558 76321fcc0235564dfe7dac3459eb95efa986bb0937ca965c9ef4eab2ee4e2876
GET /assets/js/prebid-ads.js HTTP/1.1
Host: play.cdnm4m.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:12 GMT
content-type: application/javascript
content-length: 23
last-modified: Sun, 11 Apr 2021 09:18:28 GMT
etag: "6072bee4-17"
access-control-allow-origin: *
access-control-allow-credentials: false
cache-control: max-age=14400
cf-cache-status: HIT
age: 4429
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4nd7%2Fh29sInoEwwmbYHlxMdX%2Ft3rzDNDKl54VXY8Sq4soMNhaBzahk3LlnrRbm60XCrAK0P5sdYWFWkgm98nIc85kkgjlLm%2Fa4ZrKwo%2Bqrq02B7QJve63rAktCFcmwlcVA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8803a5687dd356be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.5.2 | 188.114.96.1 | 200 OK | 3.2 kB |
URL GET HTTP/34fans.gay/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.5.2 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeASCII text, with very long lines (4186), with no line terminators Hashea958276b7de454bd3c2873f0dc47e5f b143f6e8e8f79d8f104c26b0057ef5514d763219 2e10d353ff038c2cad3492fc17801af3e6ef2669c9e9713bdb78b1dcb104c4fe
GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.5.2 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: text/css
last-modified: Sun, 15 Aug 2021 06:24:36 GMT
vary: Accept-Encoding
etag: W/"6118b324-105a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96450
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aIGq2iASCTaSN5vgeBqeHpf%2FNnsRpyeKzB%2F5TYLMOXjrMfJZ%2BbyFKpjSQgjg6LyzjXWOxr6H1iBGIdIxSUg1rRxKPmB8AMBwQf0Q%2FOpcjIZJvCSfEYLOdgjCO4c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55d9cd00b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| content.jwplatform.com/libraries/KB5zFt7A.js | 143.204.55.98 | 200 OK | 42 kB |
URL GET HTTP/2content.jwplatform.com/libraries/KB5zFt7A.js IP143.204.55.98:443
Requested byhttps://play.cdnm4m.nl/embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d CertificateIssuerAmazon Subjectjwplayer.com Fingerprint1E:36:B3:05:8C:13:3B:38:7D:97:0E:97:1E:60:3F:62:06:F3:A6:33 ValidityFri, 27 Oct 2023 00:00:00 GMT - Sat, 23 Nov 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65143) Hashf41f897ed001b3dad8f4e10f161d9667 a59da3c0a8ccc5fa9602082f4b2b3d9d0d48085c 6701286953d36556d63868e5aa448a3d0db7202215d4583b590f1d025567b666
GET /libraries/KB5zFt7A.js HTTP/1.1
Host: content.jwplatform.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 41967
access-control-allow-origin: *
cache-control: max-age=180
content-encoding: gzip
date: Tue, 07 May 2024 19:31:47 GMT
server: openresty
x-robots-tag: noindex, indexifembedded
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yZYl50C7SDfZ5PJMPOkN49TrK5D0vs68CvWplluOu_T8zYNm1Dgufw==
age: 145
X-Firefox-Spdy: h2
|
|
| s.w.org/images/core/emoji/15.0.3/svg/1f3f3-fe0f-200d-1f308.svg | 192.0.77.48 | 200 OK | 409 B |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/1f3f3-fe0f-200d-1f308.svg IP192.0.77.48:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hasha38a70388a9ffb9ede271e41142a8f2e 6e9691008b70cd624e4a0367aafe0204db65a424 8e61740534a2e504dc51482175d5c9c75e219d1a0f48ca6af3fefe9e0d0bdb8d
GET /images/core/emoji/15.0.3/svg/1f3f3-fe0f-200d-1f308.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 19:34:12 GMT
content-type: image/svg+xml
content-length: 409
last-modified: Tue, 30 Jan 2024 01:15:38 GMT
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 1
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| s.w.org/images/core/emoji/15.0.3/svg/1f346.svg | 192.0.77.48 | 200 OK | 432 B |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/1f346.svg IP192.0.77.48:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashf92a9f8821057c551982b659b268ed8e 6238f3b621be938ec83d96306647991cf8cec28f 6a51feacbc0c6653c8adf378b5bf03b10a82f8ff387674f6434d3ee9019416af
GET /images/core/emoji/15.0.3/svg/1f346.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 19:34:12 GMT
content-type: image/svg+xml
content-length: 432
last-modified: Tue, 30 Jan 2024 01:18:34 GMT
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 1
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| s.magsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA12PTWoDMQyFr9ILjHmSJf9k3WxbSMkBJsbupqSLbDKgw1eekFLqZ7CQ3rM/M1gW6IL8QnqIciC2SqEiCAdSsbf3kwnZ9/Vrk7Feb+Fz3Uw4QauR1lzEahXfpuR+JCMqJrlojclKyRq1wq0WDS7WKDKrAESpXCzDzh+vdjyfjAKyAzwPWATuBI/vHCYw8Rr3eZOmPlhbG50U/TJSrkXARfsqvY4ZcvsvMx4KoBx9xM+Ga5nOSBLZ0XzB9vZ6267N7I9xf3aP0vzDjP0fP8QTVMq0mCojJW25rXqh0UrvvDpsw5CcMX4AVE5TYIMBAAA= | 95.211.229.245 | 200 OK | 20 B |
URL GET HTTP/1.1s.magsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA12PTWoDMQyFr9ILjHmSJf9k3WxbSMkBJsbupqSLbDKgw1eekFLqZ7CQ3rM/M1gW6IL8QnqIciC2SqEiCAdSsbf3kwnZ9/Vrk7Feb+Fz3Uw4QauR1lzEahXfpuR+JCMqJrlojclKyRq1wq0WDS7WKDKrAESpXCzDzh+vdjyfjAKyAzwPWATuBI/vHCYw8Rr3eZOmPlhbG50U/TJSrkXARfsqvY4ZcvsvMx4KoBx9xM+Ga5nOSBLZ0XzB9vZ6267N7I9xf3aP0vzDjP0fP8QTVMq0mCojJW25rXqh0UrvvDpsw5CcMX4AVE5TYIMBAAA= IP95.211.229.245:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subjectmagsrv.com FingerprintE9:B1:06:11:C7:80:11:9F:62:6C:E8:AF:35:69:C6:21:29:87:60:51 ValidityTue, 30 Apr 2024 07:49:25 GMT - Mon, 29 Jul 2024 07:49:24 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA12PTWoDMQyFr9ILjHmSJf9k3WxbSMkBJsbupqSLbDKgw1eekFLqZ7CQ3rM/M1gW6IL8QnqIciC2SqEiCAdSsbf3kwnZ9/Vrk7Feb+Fz3Uw4QauR1lzEahXfpuR+JCMqJrlojclKyRq1wq0WDS7WKDKrAESpXCzDzh+vdjyfjAKyAzwPWATuBI/vHCYw8Rr3eZOmPlhbG50U/TJSrkXARfsqvY4ZcvsvMx4KoBx9xM+Ga5nOSBLZ0XzB9vZ6267N7I9xf3aP0vzDjP0fP8QTVMq0mCojJW25rXqh0UrvvDpsw5CcMX4AVE5TYIMBAAA= HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://4fans.gay
DNT: 1
Connection: keep-alive
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22663a82347a5c42.669090162668852502%22%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 19:34:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://4fans.gay
Access-Control-Allow-Credentials: true
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| 4fans.gay/wp-content/uploads/2024/02/thumbnail-00476-75x75.jpg | 188.114.96.1 | 200 OK | 1.7 kB |
URL GET HTTP/34fans.gay/wp-content/uploads/2024/02/thumbnail-00476-75x75.jpg IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 75x75, components 3 Hash4d60cc9729e565db3d1758b15f6ea283 95bb3a7134c344f7a8b219c63ca19147d12c7415 56f769f21c21a0546c17a511ca8ddc6d268abb039afe2aeab39d123faf2731c6
GET /wp-content/uploads/2024/02/thumbnail-00476-75x75.jpg HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:11 GMT
content-type: image/jpeg
last-modified: Tue, 13 Feb 2024 22:08:02 GMT
vary: Accept-Encoding
etag: W/"65cbe842-6d1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vavHvkr4zFjqqUiU%2FyUOyGw31BEAs7Ky7Yvc9NonFiCbYOLgdrTmBsswHXw7M%2BLIXWSlOw70U%2Fk5S6HgXpxFWULT%2BxNj0TyRHqkSLT9qvYlqhOvt2t2tCu7KO3M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55e0dbb0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s.w.org/images/core/emoji/15.0.3/svg/1f975.svg | 192.0.77.48 | 200 OK | 802 B |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/1f975.svg IP192.0.77.48:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash372518b135d414f92edcd06b89e1468b b32e5c33c552fd816f4b9bc9a1278e51d736c649 2b91a8995577f8db77fd3cf3b9570839b62ca8969ab15b7fea1a4dcff58137d3
GET /images/core/emoji/15.0.3/svg/1f975.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 19:34:12 GMT
content-type: image/svg+xml
last-modified: Tue, 30 Jan 2024 01:15:16 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| s.w.org/images/core/emoji/15.0.3/svg/1f3c8.svg | 192.0.77.48 | 200 OK | 8.3 kB |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/1f3c8.svg IP192.0.77.48:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash1a25c1bc80c7722bec151bbff3e85dec 613427a2d41bd8a846dfe39dd7a1587c10e6ffaa f2eeff5ba8557c8518d9d3325c941fe5339e2f2228a13e64600cad42bb795170
GET /images/core/emoji/15.0.3/svg/1f3c8.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 19:34:12 GMT
content-type: image/svg+xml
last-modified: Tue, 30 Jan 2024 01:15:16 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| s.w.org/images/core/emoji/15.0.3/svg/1f60f.svg | 192.0.77.48 | 200 OK | 58 kB |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/1f60f.svg IP192.0.77.48:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash480eb6b0f6c22cbc1d98d6ff93e1edc1 4783d272ed82b97f07330743d8d951a2446c01d3 9b365ccd80dfed36f75598c5c06251b56764fde6914bed50a8ec3b43285c35e0
GET /images/core/emoji/15.0.3/svg/1f60f.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 19:34:12 GMT
content-type: image/svg+xml
last-modified: Tue, 30 Jan 2024 01:21:10 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| s3t3d2y8.afcdn.net/images/close-icon-circle.png |  185.76.9.16 | 200 OK | 405 B |
URL GET HTTP/2s3t3d2y8.afcdn.net/images/close-icon-circle.png IP185.76.9.16:443 ASN#60068 Datacamp Limited
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subjectafcdn.net Fingerprint22:9F:54:A2:AF:3E:A2:6B:FB:1A:C6:F4:B8:E8:E1:C3:A8:02:B3:29 ValidityTue, 30 Apr 2024 07:42:02 GMT - Mon, 29 Jul 2024 07:42:01 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced Hashbc8bf5d1633e548e9a178bf29be30b7b bd290b6eabd73d2c95db053620797503e9178484 94f575abdb5c45476f9c2b62bbe06fbfacce9d25e95796ffcd07680bd7c6c0bb
GET /images/close-icon-circle.png HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 19:34:13 GMT
content-type: image/png
content-length: 405
last-modified: Tue, 25 Oct 2022 11:33:38 GMT
etag: "6357c992-195"
expires: Fri, 27 Oct 2023 07:10:07 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: EQwBuUwJDQH3n7GaAQ
x-77-nzt-ray: c0a4cc2855fd3fa835823a66f0e2a818
x-accel-expires: @1719731222
x-accel-date: 1688195222
x-cache: HIT
x-age: 26915231
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 26915231
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ssl.p.jwpcdn.com/player/v/8.33.4/jwplayer.core.controls.html5.js | 151.101.194.114 | 200 OK | 99 kB |
URL GET HTTP/2ssl.p.jwpcdn.com/player/v/8.33.4/jwplayer.core.controls.html5.js IP151.101.194.114:443
Requested byhttps://play.cdnm4m.nl/embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d CertificateIssuerGlobalSign nv-sa Subject*.jwplayer.com FingerprintAB:15:C6:40:38:53:10:D6:CD:12:E9:B3:27:A9:9A:A9:79:8D:B2:9A ValidityWed, 30 Aug 2023 18:09:48 GMT - Mon, 30 Sep 2024 18:09:47 GMT
File typeJavaScript source, ASCII text, with very long lines (65143) Hash95174852849259936eec488d9ff85bed f13365a531a3942b11ad2f9d9161014cec8c133e 9a4cd91fa1dd95a50caa6ee8222a09c877ab6400fae355c520f1da11623e0581
GET /player/v/8.33.4/jwplayer.core.controls.html5.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=31536000, immutable
last-modified: Mon, 29 Apr 2024 21:54:15 GMT
etag: "95174852849259936eec488d9ff85bed"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Tue, 07 May 2024 19:34:13 GMT
via: 1.1 varnish
age: 590844
x-served-by: cache-hel1410034-HEL
x-cache: HIT
x-cache-hits: 13284
x-timer: S1715110453.407227,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 98620
X-Firefox-Spdy: h2
|
|
| ssl.p.jwpcdn.com/player/v/8.33.4/jwpsrv.js | 151.101.194.114 | 200 OK | 20 kB |
URL GET HTTP/2ssl.p.jwpcdn.com/player/v/8.33.4/jwpsrv.js IP151.101.194.114:443
Requested byhttps://play.cdnm4m.nl/embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d CertificateIssuerGlobalSign nv-sa Subject*.jwplayer.com FingerprintAB:15:C6:40:38:53:10:D6:CD:12:E9:B3:27:A9:9A:A9:79:8D:B2:9A ValidityWed, 30 Aug 2023 18:09:48 GMT - Mon, 30 Sep 2024 18:09:47 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashd7f3733c71441c1881fc4eabe9c96086 8db1f2f35489a41d1fb63af5b9aad52388c58735 9f4c0014a4f36c11302077dc073ef529031ce3eebc04c0ca9bc1d7ea0ed95eca
GET /player/v/8.33.4/jwpsrv.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=900, immutable
last-modified: Mon, 29 Apr 2024 21:54:22 GMT
etag: "d7f3733c71441c1881fc4eabe9c96086"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Tue, 07 May 2024 19:34:13 GMT
via: 1.1 varnish
age: 390
x-served-by: cache-hel1410034-HEL
x-cache: HIT
x-cache-hits: 2311
x-timer: S1715110453.411364,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 19879
X-Firefox-Spdy: h2
|
|
| ssl.p.jwpcdn.com/player/v/8.33.4/vast.js | 151.101.194.114 | 200 OK | 32 kB |
URL GET HTTP/2ssl.p.jwpcdn.com/player/v/8.33.4/vast.js IP151.101.194.114:443
Requested byhttps://play.cdnm4m.nl/embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d CertificateIssuerGlobalSign nv-sa Subject*.jwplayer.com FingerprintAB:15:C6:40:38:53:10:D6:CD:12:E9:B3:27:A9:9A:A9:79:8D:B2:9A ValidityWed, 30 Aug 2023 18:09:48 GMT - Mon, 30 Sep 2024 18:09:47 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashe94a2803ad145bc834bb1d9085c52de4 106c85dcb24dce07f88872260ca405a4767396bc 17f39d9f8719fe88439ee3b4196fd6adec9b3d58765e74e7846c46487b75c1b2
GET /player/v/8.33.4/vast.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=86400, immutable
last-modified: Mon, 29 Apr 2024 21:54:21 GMT
etag: "e94a2803ad145bc834bb1d9085c52de4"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Tue, 07 May 2024 19:34:13 GMT
via: 1.1 varnish
age: 32232
x-served-by: cache-hel1410034-HEL
x-cache: HIT
x-cache-hits: 79349
x-timer: S1715110453.417268,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 32505
X-Firefox-Spdy: h2
|
|
| s.w.org/images/core/emoji/15.0.3/svg/1f4a6.svg | 192.0.77.48 | 200 OK | 822 B |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/1f4a6.svg IP192.0.77.48:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash9d7ddcf78b0fdff6ab938077da38401f 83189c4f8a689abf9c97318472fddef8c692089f 17ab064814a33763fc58aca9e62a5d93078e45e0f4a10e6baf402d5396833397
GET /images/core/emoji/15.0.3/svg/1f4a6.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 19:34:12 GMT
content-type: image/svg+xml
last-modified: Tue, 30 Jan 2024 01:18:13 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| bleachimpartialtrusted.com/pixel/pure | 172.240.108.76 | 204 No Content | 0 B |
URL OPTIONS HTTP/1.1bleachimpartialtrusted.com/pixel/pure IP172.240.108.76:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subjectbleachimpartialtrusted.com Fingerprint13:E9:1E:BA:56:EE:4E:57:E9:B4:0D:01:06:CD:11:31:C2:0B:D6:B9 ValidityMon, 06 May 2024 08:04:15 GMT - Sun, 04 Aug 2024 08:04:14 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pixel/pure HTTP/1.1
Host: bleachimpartialtrusted.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://4fans.gay
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.21.6
Date: Tue, 07 May 2024 19:34:13 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
Content-Type: text/plain; charset=utf-8
Content-Length: 0
|
|
| bleachimpartialtrusted.com/pixel/pure | 172.240.108.76 | 204 No Content | 0 B |
URL OPTIONS HTTP/1.1bleachimpartialtrusted.com/pixel/pure IP172.240.108.76:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subjectbleachimpartialtrusted.com Fingerprint13:E9:1E:BA:56:EE:4E:57:E9:B4:0D:01:06:CD:11:31:C2:0B:D6:B9 ValidityMon, 06 May 2024 08:04:15 GMT - Sun, 04 Aug 2024 08:04:14 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pixel/pure HTTP/1.1
Host: bleachimpartialtrusted.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://4fans.gay
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.21.6
Date: Tue, 07 May 2024 19:34:13 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
Content-Type: text/plain; charset=utf-8
Content-Length: 0
|
|
| 4fans.gay/?ajax-request=jnews | 188.114.96.1 | 200 OK | 93 B |
URL POST HTTP/34fans.gay/?ajax-request=jnews IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
Hash5ce7264fb2d6cd62189dafc0779c414f 14b52ad3f9bd894a111dca04a8184e9b820a6838 dbdbb36eab9ed83a0e269faee054a77f04286bd7a0acd87d3c45afa1a169113f
POST /?ajax-request=jnews HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 73
Origin: https://4fans.gay
DNT: 1
Connection: keep-alive
Cookie: _ga_BLZ9KGC3FH=GS1.1.1715110451.1.0.1715110451.0.0.0; _ga=GA1.1.1031319977.1715110451; advanced_ads_browser_width=1280; advanced_ads_visitor=%7B%22browser_width%22%3A1280%7D; darkmode=false
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:12 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
set-cookie: jnews_view_counter_visits[0]=1715114052b18138; expires=Tue, 07-May-2024 20:34:12 GMT; Max-Age=3600; path=/; secure; HttpOnly
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0, no-transform
x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff, nosniff
x-xss-protection: 1; mode=block, 1; mode=block
x-permitted-cross-domain-policies: master-only, master-only
referrer-policy: same-origin, same-origin
content-encoding: br
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ww5TsnyX8l33eIZB1fuanaNloCL3Xt7k%2FqOkHGJU2Us28au6Ox9Me1ZUmCDGr8BcxCOD6YGCPV%2FqRsYT2pDSiP7idFEjhYHDf6HY0F8xMW0IDMGrL2zG3MFhevs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a5679f750b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| bleachimpartialtrusted.com/pixel/pure | 172.240.108.76 | 204 No Content | 0 B |
URL OPTIONS HTTP/1.1bleachimpartialtrusted.com/pixel/pure IP172.240.108.76:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subjectbleachimpartialtrusted.com Fingerprint13:E9:1E:BA:56:EE:4E:57:E9:B4:0D:01:06:CD:11:31:C2:0B:D6:B9 ValidityMon, 06 May 2024 08:04:15 GMT - Sun, 04 Aug 2024 08:04:14 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pixel/pure HTTP/1.1
Host: bleachimpartialtrusted.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 73
Origin: https://4fans.gay
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 07 May 2024 19:34:13 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| bleachimpartialtrusted.com/pixel/pure | 172.240.108.76 | 204 No Content | 0 B |
URL OPTIONS HTTP/1.1bleachimpartialtrusted.com/pixel/pure IP172.240.108.76:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subjectbleachimpartialtrusted.com Fingerprint13:E9:1E:BA:56:EE:4E:57:E9:B4:0D:01:06:CD:11:31:C2:0B:D6:B9 ValidityMon, 06 May 2024 08:04:15 GMT - Sun, 04 Aug 2024 08:04:14 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pixel/pure HTTP/1.1
Host: bleachimpartialtrusted.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 73
Origin: https://4fans.gay
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 07 May 2024 19:34:13 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| entitlements.jwplayer.com/GCCG.json | 152.199.22.243 | 400 Bad Request | 71 B |
URL GET HTTP/2entitlements.jwplayer.com/GCCG.json IP152.199.22.243:443
Requested byhttps://play.cdnm4m.nl/embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d CertificateIssuerDigiCert Inc Subjectentitlements.jwplayer.com FingerprintB5:24:44:E4:35:14:01:E0:7C:17:57:0A:BA:CD:20:0F:B5:05:DB:8A ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
Hash5534f424f1d6586164a58758f3e2c51a ef37ca3d8831aaad699430dcaa9967469542d602 f28df38bea81995fd78f9077bff2dfc9d60ee13b8c414bc426c61c0e1b0bee86
GET /GCCG.json HTTP/1.1
Host: entitlements.jwplayer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://play.cdnm4m.nl
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 400 Bad Request
accept-ranges: bytes
access-control-allow-origin: *
age: 19341
cache-control: max-age=1800, s-maxage=11460
content-type: application/json
date: Tue, 07 May 2024 19:34:13 GMT
last-modified: Tue, 07 May 2024 14:11:52 GMT
server: ECAcc (ska/F77E)
x-cache: 400-HIT
content-length: 71
X-Firefox-Spdy: h2
|
|
| play.cdnm4m.nl/uploads/images/0hmozen00poux3213e7ov_source%20Large-J0A1Nhc4tEgdu3p.jpeg | 104.21.17.137 | 200 OK | 242 kB |
URL GET HTTP/3play.cdnm4m.nl/uploads/images/0hmozen00poux3213e7ov_source%20Large-J0A1Nhc4tEgdu3p.jpeg IP104.21.17.137:443
Requested byhttps://play.cdnm4m.nl/embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d CertificateIssuerGoogle Trust Services LLC Subjectcdnm4m.nl FingerprintEC:8C:A5:8B:91:32:7B:AE:3C:D1:79:4A:A3:6E:3C:5D:CC:05:29:22 ValiditySat, 23 Mar 2024 09:33:01 GMT - Fri, 21 Jun 2024 09:33:00 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], baseline, precision 8, 1203x675, components 3 Size242 kB (242111 bytes) Hashac07138f87e9908f1b39917fa6f8c676 83cec6d650bb45a274e098444f78242064d5947d 52d2747a1e2902513c189443f9c9afc9da672aac312fe64473e2d388f229dec6
GET /uploads/images/0hmozen00poux3213e7ov_source%20Large-J0A1Nhc4tEgdu3p.jpeg HTTP/1.1
Host: play.cdnm4m.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:13 GMT
content-type: image/jpeg
content-length: 242111
last-modified: Mon, 12 Feb 2024 17:44:04 GMT
etag: "65ca58e4-3b1bf"
access-control-allow-origin: *
access-control-allow-credentials: false
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=53tpM3%2F1hiZtE7vuCQOjdgNFDsaFTGs4tLTxEQezSdAf%2FIidG5t7ThTqDraKbQyuePkPy9TGJIU6FfIlBpJj%2FQfIXmJA7fqRfzErAJMPIC10T0yw8zjdwyJLDzqNtkIXBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8803a5709cf256be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-content/uploads/avatars/28764/1701029976-bpfull.jpg | 188.114.96.1 | 200 OK | 212 kB |
URL GET HTTP/34fans.gay/wp-content/uploads/avatars/28764/1701029976-bpfull.jpg IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 150x150, components 3 Size212 kB (211930 bytes) Hash7924bf93a474012275e3e1bd2c9e2145 feb6d903249aaa2ce488b2a06cfdaab4db1a52da f023aed9a9af0823beea3709cc8a8ed5f1cbbea3298da6575eb6275683be8018
GET /wp-content/uploads/avatars/28764/1701029976-bpfull.jpg HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: image/jpeg
last-modified: Sun, 26 Nov 2023 14:19:36 GMT
vary: Accept-Encoding
etag: W/"656353f8-1811"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 95929
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LM2fpaXW0QchfFOx8TrTOfKym2Hx2MHVPABIUh3R%2FeaVE9REhOVFYLgAYOvlGGYT8ms1UiTVovJWYqOLOtLl3cCfAl2rf04xYyQSVDmPmDGnhSjCy6xMvJy6DOI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55dcd3f0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css | 142.250.74.99 | 200 OK | 25 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=5ixa0tpqj0zz CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeASCII text, with very long lines (56412), with no line terminators Hash2c00b9f417b688224937053cd0c284a5 17b4c18ebc129055dd25f214c3f11e03e9df2d82 1e754b107428162c65a26d399b66db3daaea09616bf8620d9de4bc689ce48eed
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24617
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 May 2024 15:37:51 GMT
expires: Tue, 06 May 2025 15:37:51 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/css
vary: Accept-Encoding
age: 100583
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.99 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 13:33:10 GMT
expires: Wed, 07 May 2025 13:33:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 21664
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.99 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 13:33:10 GMT
expires: Wed, 07 May 2025 13:33:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 21664
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=m91y45gcdabk | 142.250.74.132 | 200 OK | 234 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=m91y45gcdabk IP142.250.74.132:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File typeHTML document, ASCII text, with very long lines (36712) Size234 kB (233942 bytes) Hash3bfe7ae0d3a41c3fb9c8f8785e064bcc eb212f6cc2850c5da7069f779b8c0817dbbcd334 b2cb9742c4a10cd78ed04bb14fd3525cbcfe165cadf78bb7c8be6097c6775e36
GET /recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=m91y45gcdabk HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 07 May 2024 19:34:14 GMT
content-security-policy: script-src 'nonce-0sWNZs0uxlTbK3YOVObB0A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=mrg2ftfsptej CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 16:31:04 GMT
expires: Sat, 03 May 2025 16:31:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 356591
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/js/bg/pAY4Jgi82uSAEr2jIgpI2fcbEoZ0MRbNANtMr9BudIc.js | 142.250.74.132 | 200 OK | 7.5 kB |
URL GET HTTP/3www.google.com/js/bg/pAY4Jgi82uSAEr2jIgpI2fcbEoZ0MRbNANtMr9BudIc.js IP142.250.74.132:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=5ixa0tpqj0zz CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File typeJavaScript source, ASCII text, with very long lines (17588) Hash81965d03d416a0601f29281d353056f3 e3d92db7e0287b8cc16ef71877d276e7ee0030d6 a406382608bcdae48012bda3220a48d9f71b1286743116cd00db4cafd06e7487
GET /js/bg/pAY4Jgi82uSAEr2jIgpI2fcbEoZ0MRbNANtMr9BudIc.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=5ixa0tpqj0zz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7452
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:15:50 GMT
expires: Fri, 02 May 2025 02:15:50 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 29 Apr 2024 11:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 494305
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m | 142.250.74.132 | 200 OK | 2.3 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m IP142.250.74.132:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=m91y45gcdabk CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash318383482baab4f7d17507373bd8a84f 8804baca752ff3c292113e637e66a770af980145 791703d6d03807b8efb032a6d6d512f21e878c701bd25e218bedac25bb79a8e2
GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=5ixa0tpqj0zz
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Tue, 07 May 2024 19:34:15 GMT
date: Tue, 07 May 2024 19:34:15 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=mrg2ftfsptej CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 16:31:04 GMT
expires: Sat, 03 May 2025 16:31:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 356591
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.99 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 13:33:10 GMT
expires: Wed, 07 May 2025 13:33:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 21665
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m | 142.250.74.132 | 200 OK | 7.6 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m IP142.250.74.132:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=m91y45gcdabk CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash63e347b4db474a65bf4443b81ef54ffc 03e9621d38f8de3214d1837ed320581e277e2a46 15be619a38fb8103442f3d2a58800c1f80cefa56476715f075a91a5d3ecb12dc
GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=mrg2ftfsptej
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Tue, 07 May 2024 19:34:15 GMT
date: Tue, 07 May 2024 19:34:15 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=mrg2ftfsptej CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 16:31:04 GMT
expires: Sat, 03 May 2025 16:31:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 356591
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m | 142.250.74.132 | 200 OK | 7.6 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m IP142.250.74.132:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=m91y45gcdabk CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash63e347b4db474a65bf4443b81ef54ffc 03e9621d38f8de3214d1837ed320581e277e2a46 15be619a38fb8103442f3d2a58800c1f80cefa56476715f075a91a5d3ecb12dc
GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=m91y45gcdabk
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Tue, 07 May 2024 19:34:15 GMT
date: Tue, 07 May 2024 19:34:15 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=5ixa0tpqj0zz | 142.250.74.132 | 200 OK | 234 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=5ixa0tpqj0zz IP142.250.74.132:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File typeHTML document, ASCII text, with very long lines (37227) Size234 kB (234325 bytes) Hash120543ce9981cfe2fc97cfb1d9f80825 16756ba7d6124ece79b127fd86e80e20b53e0979 6d4a23cca0388bf814bd9130642ff874e45cbbc4f013f43ecb78d5b5f2576ed4
GET /recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=5ixa0tpqj0zz HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 07 May 2024 19:34:14 GMT
content-security-policy: script-src 'nonce-yaBrGIyXbcU0S7BTiD_Iaw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.99 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 13:33:10 GMT
expires: Wed, 07 May 2025 13:33:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 21665
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 4fans.gay/wp-content/plugins/jnews-video/assets/css/darkmode.css?ver=11.0.5 | 188.114.96.1 | 200 OK | 27 kB |
URL GET HTTP/34fans.gay/wp-content/plugins/jnews-video/assets/css/darkmode.css?ver=11.0.5 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeASCII text, with very long lines (4445), with no line terminators Hash1d0ce6bf48c0569e060acec3bc59da66 574fdc0c07d12ec328fcf64ea0355f35569fe30f 1b15b4c5b04a6eb4f7809b76aa670c86dbcb633b91ead770fd64816d458fa481
GET /wp-content/plugins/jnews-video/assets/css/darkmode.css?ver=11.0.5 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: text/css
last-modified: Mon, 06 May 2024 17:52:53 GMT
vary: Accept-Encoding
etag: W/"663918f5-115d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 92379
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FIT94bDjH62Z1mU1OqIM%2BkBNVjWoUyUInGRO7Zl7mibtnnlkv2x5Hrmxxsrs%2B8O7Lybyd5GxQtHnk4H51SVyCT%2FvEpb5V%2BLpXN%2BCwnlr%2B2b8oj6Nc2cFEe75eQ0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55dacf70b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.99 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 13:33:10 GMT
expires: Wed, 07 May 2025 13:33:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 21666
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE | 142.250.74.132 | 200 OK | 26 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE IP142.250.74.132:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File typeHTML document, ASCII text, with very long lines (56439) Hashd1cd0a53894e5cc77fff27df1758c711 495f48a0747868c2a5968f5b892cfd237ded6afb 30b2f1cff0bd0d10b2b6d78d071bea84fa533daa61087e8df603efd51db064e9
GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 07 May 2024 19:34:16 GMT
content-security-policy: script-src 'nonce-FfQZfNqDYLEzn0Pl1mCl9w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.99 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 13:33:10 GMT
expires: Wed, 07 May 2025 13:33:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 21666
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 4fans.gay/wp-content/plugins/jnews-video/assets/css/buddypress/buddypress.css?ver=11.0.5 | 188.114.96.1 | 200 OK | 28 kB |
URL GET HTTP/34fans.gay/wp-content/plugins/jnews-video/assets/css/buddypress/buddypress.css?ver=11.0.5 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeASCII text, with very long lines (7796), with no line terminators Hashe024838408c8d60b4e7d4e832c91454b 78b0298f26dfa192e72511cb0f3cda0ebc8290af 5f5937f59c8b7b5c3ac64add42e915a57bbf75692267eaba8582405d1fdc76fd
GET /wp-content/plugins/jnews-video/assets/css/buddypress/buddypress.css?ver=11.0.5 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: text/css
last-modified: Mon, 06 May 2024 17:52:53 GMT
vary: Accept-Encoding
etag: W/"663918f5-1e74"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 92379
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O20dVeaq4cHvy3RB8VfaYp8UXOR2iG2G7lChpNHyth279EPpNuNzWDAKEju7BCYMASW8oYRV68isAs78pnYoXmRP2OBTIvDwy9gNiOjKarFzayAtGEvA8lPVe2g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55d9cd40b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| play.cdnm4m.nl/assets/js/jquery.min.js | 104.21.17.137 | 200 OK | 238 kB |
URL GET HTTP/3play.cdnm4m.nl/assets/js/jquery.min.js IP104.21.17.137:443
Requested byhttps://play.cdnm4m.nl/embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d CertificateIssuerGoogle Trust Services LLC Subjectcdnm4m.nl FingerprintEC:8C:A5:8B:91:32:7B:AE:3C:D1:79:4A:A3:6E:3C:5D:CC:05:29:22 ValiditySat, 23 Mar 2024 09:33:01 GMT - Fri, 21 Jun 2024 09:33:00 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Size238 kB (237754 bytes) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /assets/js/jquery.min.js HTTP/1.1
Host: play.cdnm4m.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:12 GMT
content-type: application/javascript
last-modified: Wed, 29 Dec 2021 01:43:14 GMT
vary: Accept-Encoding
etag: W/"61cbbd32-15d9d"
access-control-allow-origin: *
access-control-allow-credentials: false
cache-control: max-age=14400
cf-cache-status: HIT
age: 4429
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XoHU4RO5x2W20tiEWkj4%2B4ziRSczaoSHd9xgdqX4yE2teAOK%2FnGxHv7eHL33SWdxXrQ4GLaKeR4CiWEXkjO6WshaJBbwzQCwZ%2FUQ5Uu4Dc9WAYEHhG1IkM2%2FZy8X8plbgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a5687dc956be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| a.magsrv.com/ad-provider.js | 185.76.9.15 | 200 OK | 51 kB |
URL GET HTTP/2a.magsrv.com/ad-provider.js IP185.76.9.15:443 ASN#60068 Datacamp Limited
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subjectmagsrv.com FingerprintE9:B1:06:11:C7:80:11:9F:62:6C:E8:AF:35:69:C6:21:29:87:60:51 ValidityTue, 30 Apr 2024 07:49:25 GMT - Mon, 29 Jul 2024 07:49:24 GMT
File typegzip compressed data, from Unix Hash214472d21c626bc762a928858ac22a1b 8161b23d031038455b47ad26808e288111c1b393 55be89912fdcefb8f5f28fc3efa45829d936d359d51c5e3c21b20ff414c16999
GET /ad-provider.js HTTP/1.1
Host: a.magsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"057432c37ba5cf65231392a9e07"
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
expires: Tue, 07 May 2024 14:38:37 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: EwwBuUwJDQH3RhkAAAwBuUwKCQH3CwAAAAwBnJIhHwH3wAEAAA
x-77-nzt-ray: c0a4cc28d0176d6032823a66f18e5a36
x-accel-expires: @1715114780
x-accel-date: 1715103980
x-77-cache: HIT
x-77-age: 6470
content-encoding: gzip
server: CDN77-Turbo
x-cache: HIT
x-age: 6470
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
|
|
| s1.s3m4m.lol/storage/whwqyr8whf78rhje7ir7eft8ghiw.mov | 104.21.69.175 | | 768 kB |
URL GET s1.s3m4m.lol/storage/whwqyr8whf78rhje7ir7eft8ghiw.mov IP104.21.69.175:0
Requested byhttps://play.cdnm4m.nl/embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d CertificateIssuerGoogle Trust Services LLC Subjects3m4m.lol FingerprintA3:E1:F3:F4:49:13:86:79:6C:15:E8:E1:FA:CA:D9:06:DF:A8:06:1C ValidityTue, 07 May 2024 06:40:55 GMT - Mon, 05 Aug 2024 06:40:54 GMT
Size768 kB (768301 bytes) Hash75b1bcc754b2d987eec498cd449f1c6a e5a75749dfca7cdbd02c525de0d87333b038c4f5 c04feca4ee7a97ad37d5e0da5bc558a9b80d1fb5043c247de53937c4191658ba
GET /storage/whwqyr8whf78rhje7ir7eft8ghiw.mov HTTP/1.1
Host: s1.s3m4m.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=1575124992-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Tue, 07 May 2024 19:34:21 GMT
content-type: video/quicktime
content-length: 768301
last-modified: Mon, 12 Feb 2024 17:44:27 GMT
etag: "65ca58fb-5dee392d"
strict-transport-security: max-age=31536000
content-range: bytes 1575124992-1575893292/1575893293
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BYBa0Hie38SjBn09nzhAnC6pSpAiisff1Ur%2FPJhGNNFaqtJuT8E6t72CsWkl%2FkfY2%2BM7iKl1KUsG%2BCJowD%2BgGn2NHDEsFG5rOsrYagpLgqnqMZq1DCxN3b7bGZvwOs8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a58ed99d5684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s1.s3m4m.lol/storage/whwqyr8whf78rhje7ir7eft8ghiw.mov | 104.21.69.175 | | 768 kB |
URL GET s1.s3m4m.lol/storage/whwqyr8whf78rhje7ir7eft8ghiw.mov IP104.21.69.175:0
Requested byhttps://play.cdnm4m.nl/embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d CertificateIssuerGoogle Trust Services LLC Subjects3m4m.lol FingerprintA3:E1:F3:F4:49:13:86:79:6C:15:E8:E1:FA:CA:D9:06:DF:A8:06:1C ValidityTue, 07 May 2024 06:40:55 GMT - Mon, 05 Aug 2024 06:40:54 GMT
Size768 kB (768301 bytes) Hash75b1bcc754b2d987eec498cd449f1c6a e5a75749dfca7cdbd02c525de0d87333b038c4f5 c04feca4ee7a97ad37d5e0da5bc558a9b80d1fb5043c247de53937c4191658ba
GET /storage/whwqyr8whf78rhje7ir7eft8ghiw.mov HTTP/1.1
Host: s1.s3m4m.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=1575124992-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Tue, 07 May 2024 19:34:29 GMT
content-type: video/quicktime
content-length: 768301
last-modified: Mon, 12 Feb 2024 17:44:27 GMT
etag: "65ca58fb-5dee392d"
strict-transport-security: max-age=31536000
content-range: bytes 1575124992-1575893292/1575893293
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dCQz1oIGDLiSuFtTjoBPvibBbtxy85KcVTyvuJ7Vio9KQLiRAzHKXe%2BzgKYGq4laMJAsi1Cx9VXQShiPACXnY1r7iNr0B3GprXbLirJqwjnji%2BnU1n7RQWpggJ6go2Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a5c59d055684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s1.s3m4m.lol/storage/whwqyr8whf78rhje7ir7eft8ghiw.mov | 104.21.69.175 | | 801 kB |
URL GET s1.s3m4m.lol/storage/whwqyr8whf78rhje7ir7eft8ghiw.mov IP104.21.69.175:0
Requested byhttps://play.cdnm4m.nl/embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d CertificateIssuerGoogle Trust Services LLC Subjects3m4m.lol FingerprintA3:E1:F3:F4:49:13:86:79:6C:15:E8:E1:FA:CA:D9:06:DF:A8:06:1C ValidityTue, 07 May 2024 06:40:55 GMT - Mon, 05 Aug 2024 06:40:54 GMT
File typeISO Media, Apple QuickTime movie, Apple QuickTime (.MOV/QT) Size801 kB (801069 bytes) Hash992d11803bf2f5e367916a28e843b57c fe900f7eb261a9ad61820757f23e8065a2865aeb 000f7d1ac496d34a84d47e2a89ba86d7a335893e8fb26d1083d021b834427942
GET /storage/whwqyr8whf78rhje7ir7eft8ghiw.mov HTTP/1.1
Host: s1.s3m4m.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Tue, 07 May 2024 19:34:32 GMT
content-type: video/quicktime
content-length: 1575893293
last-modified: Mon, 12 Feb 2024 17:44:27 GMT
etag: "65ca58fb-5dee392d"
strict-transport-security: max-age=31536000
content-range: bytes 0-1575893292/1575893293
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=40S6PhmWjY%2FLjp30AwIed4SocM2RDF0%2BxEI8lf8lYx9oZn2v%2FYDmoVTv2VKyqRRRlrHcE5YBfZFEoIAcBuODeJ28czEv55p6MDsj7%2BdVKUElYBwwozTFJlf0SuwxHjs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a5ddbb105684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s1.s3m4m.lol/storage/whwqyr8whf78rhje7ir7eft8ghiw.mov | 104.21.69.175 | | 59 kB |
URL GET s1.s3m4m.lol/storage/whwqyr8whf78rhje7ir7eft8ghiw.mov IP104.21.69.175:0
Requested byhttps://play.cdnm4m.nl/embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d CertificateIssuerGoogle Trust Services LLC Subjects3m4m.lol FingerprintA3:E1:F3:F4:49:13:86:79:6C:15:E8:E1:FA:CA:D9:06:DF:A8:06:1C ValidityTue, 07 May 2024 06:40:55 GMT - Mon, 05 Aug 2024 06:40:54 GMT
File typeISO Media, Apple QuickTime movie, Apple QuickTime (.MOV/QT) Hashabd5a74cfc3e364f7163c6259e74b39e 7da31dc4442a0c7fd388d36ccfdc4811080faa60 89fe423c95b831910c00a160a80ec2184dcbec6d636ea3326f57b4ba1bfae9fc
GET /storage/whwqyr8whf78rhje7ir7eft8ghiw.mov HTTP/1.1
Host: s1.s3m4m.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Tue, 07 May 2024 19:34:27 GMT
content-type: video/quicktime
content-length: 1575893293
last-modified: Mon, 12 Feb 2024 17:44:27 GMT
etag: "65ca58fb-5dee392d"
strict-transport-security: max-age=31536000
content-range: bytes 0-1575893292/1575893293
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0Ane9t1iRt%2BmFFe62j9H4HgyPgE%2BgcYrcDjwNF6c9BCnPsUMGJwI1bBeXPVvbsqhDDuMwp%2BLCznXS2Z%2BNk97JC6oygmR%2FM2wjwAAJoHXb56KM45ykIk2JWmMxRkA2L8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a5afefe15684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s1.s3m4m.lol/storage/whwqyr8whf78rhje7ir7eft8ghiw.mov | 104.21.69.175 | | 768 kB |
URL GET s1.s3m4m.lol/storage/whwqyr8whf78rhje7ir7eft8ghiw.mov IP104.21.69.175:0
Requested byhttps://play.cdnm4m.nl/embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d CertificateIssuerGoogle Trust Services LLC Subjects3m4m.lol FingerprintA3:E1:F3:F4:49:13:86:79:6C:15:E8:E1:FA:CA:D9:06:DF:A8:06:1C ValidityTue, 07 May 2024 06:40:55 GMT - Mon, 05 Aug 2024 06:40:54 GMT
Size768 kB (768301 bytes) Hash75b1bcc754b2d987eec498cd449f1c6a e5a75749dfca7cdbd02c525de0d87333b038c4f5 c04feca4ee7a97ad37d5e0da5bc558a9b80d1fb5043c247de53937c4191658ba
GET /storage/whwqyr8whf78rhje7ir7eft8ghiw.mov HTTP/1.1
Host: s1.s3m4m.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=1575124992-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Tue, 07 May 2024 19:34:38 GMT
content-type: video/quicktime
content-length: 768301
last-modified: Mon, 12 Feb 2024 17:44:27 GMT
etag: "65ca58fb-5dee392d"
strict-transport-security: max-age=31536000
content-range: bytes 1575124992-1575893292/1575893293
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zOEwsnJHqeCn0nyG5k95AOvlowgQP7ddrDlnvwnR5LFeWKMHNn5wr3c3SbePj8JwM%2B54KHaicSjNRQbcpmkr3tIKZRX7ounZGnqzfSYM5hbdkWO0mD5zJYEsOM8DiPQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a60368675684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-content/themes/jnews/assets/dist/image/preloader.gif | 188.114.96.1 | 200 OK | 84 kB |
URL GET HTTP/34fans.gay/wp-content/themes/jnews/assets/dist/image/preloader.gif IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeGIF image data, version 89a, 100 x 75 Hashc225d4001dc31c7ff8e290129f436175 b27a1dcbf1accdee9b64db482e72ac3972363915 e2e60e9eae839d6b2e857c708f6d02ae6069141594b941a1590cd5c5435d42f4
GET /wp-content/themes/jnews/assets/dist/image/preloader.gif HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fans.gay/wp-content/themes/jnews/assets/dist/frontend.min.css?ver=11.5.2
Cookie: _ga_BLZ9KGC3FH=GS1.1.1715110451.1.0.1715110451.0.0.0; _ga=GA1.1.1031319977.1715110451; advanced_ads_browser_width=1280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:11 GMT
content-type: image/gif
last-modified: Wed, 06 Dec 2023 22:17:14 GMT
vary: Accept-Encoding
etag: W/"6570f2ea-112f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96450
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZEFY8BCpNp9wI1VLc71LAotNxH8UOVxpqRJJcHj9HKcuDlkD1dz7f51x%2BCKaWceqEq%2B8mhpFUsNmhF7dZe4DZFMG8YkqyfNIpiibMwAnsTtFburNwM%2F1HZR2jOY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a564ca1e0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| proftrafficcounter.com/stats |  52.58.212.182 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP52.58.212.182:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashc5b4aed6e46d07bb30f9312a677a8287 ef38d86c8c2751fdd0eb0c49f27520b51e2456d3 40c7b658cf333e5f71b9965c9909dfa5f13e8f569aa5544b50985cc6f228a86b
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://4fans.gay
DNT: 1
Connection: keep-alive
Cookie: uid_id2=36025c48-a2d0-48a1-8636-d828aa0aa088:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 07 May 2024 19:34:39 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://4fans.gay
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
|
|
| 4fans.gay/wp-content/plugins/bp-verified-member/assets/js/vendor/popper.min.js?ver=2.11.0 | 188.114.96.1 | 200 OK | 7.3 kB |
URL GET HTTP/34fans.gay/wp-content/plugins/bp-verified-member/assets/js/vendor/popper.min.js?ver=2.11.0 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJavaScript source, ASCII text, with very long lines (19402) Hash5f4740edb9021363b526e4826279af72 6eda692e76892040c8829d3e39bfd4de23e18fc5 c83dceabf8fb8a39041cae0996f421962b2332c25d03796ea77614a4291fdbae
GET /wp-content/plugins/bp-verified-member/assets/js/vendor/popper.min.js?ver=2.11.0 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: application/javascript
last-modified: Fri, 16 Dec 2022 07:27:16 GMT
vary: Accept-Encoding
etag: W/"639c1dd4-4c23"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96450
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gwZwGLUS%2By8j%2FLWrsLX%2Fu1RDpglV5xSbCbvgtA6XxZB4IdXq0R2AUaAIEcnuz0Deh82q1S669pqW3fDNfmcdtwN%2BLVzIzoAMz4S%2FzWxysQ06fYh%2BQ17ESIguSh8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55dbd280b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| unseenreport.com/pxf.gif?uuid=36025c48-a2d0-48a1-8636-d828aa0aa088&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=6406b181e5c0405a3cf1ae0dcbeb6e6e&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=19 | 192.243.59.12 | | 1 B |
URL unseenreport.com/pxf.gif?uuid=36025c48-a2d0-48a1-8636-d828aa0aa088&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=6406b181e5c0405a3cf1ae0dcbeb6e6e&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=19 IP192.243.59.12:0 ASN#39572 DataWeb Global Group B.V.
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=36025c48-a2d0-48a1-8636-d828aa0aa088&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=6406b181e5c0405a3cf1ae0dcbeb6e6e&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=19 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 07 May 2024 19:34:39 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3c9a92969b445ac66c9efe8c1819e11a
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| www.google.com/recaptcha/api.js?render=explicit&onload=jnewsgrecaptcha | 142.250.74.132 | 200 OK | 910 B |
URL GET HTTP/2www.google.com/recaptcha/api.js?render=explicit&onload=jnewsgrecaptcha IP142.250.74.132:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99 ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
File typeJavaScript source, ASCII text, with very long lines (910), with no line terminators Hasha45ba959f5a85eea1a340654ef7e909a 88d21be1d109945d31a937ee118321bad7d6880f 7f3704a10af3c750987292ba20aaac3c460bbf53c3eff20b23aeece5ca83f643
GET /recaptcha/api.js?render=explicit&onload=jnewsgrecaptcha HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Tue, 07 May 2024 19:34:11 GMT
date: Tue, 07 May 2024 19:34:11 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| play.cdnm4m.nl/assets/js/sandblaster.js | 104.21.17.137 | 200 OK | 16 kB |
URL GET HTTP/3play.cdnm4m.nl/assets/js/sandblaster.js IP104.21.17.137:443
Requested byhttps://play.cdnm4m.nl/embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d CertificateIssuerGoogle Trust Services LLC Subjectcdnm4m.nl FingerprintEC:8C:A5:8B:91:32:7B:AE:3C:D1:79:4A:A3:6E:3C:5D:CC:05:29:22 ValiditySat, 23 Mar 2024 09:33:01 GMT - Fri, 21 Jun 2024 09:33:00 GMT
File typeJavaScript source, ASCII text Hashc5e74507d4d7199236e5d67f43251443 d75bd810fda00e81234bc0b8f458b9e930d6fdb4 79eaa6e5c947b6756f4bbdffa56486ef28014da288a545978657b9ecd0da2ac5
GET /assets/js/sandblaster.js HTTP/1.1
Host: play.cdnm4m.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:12 GMT
content-type: application/javascript
last-modified: Mon, 17 Jan 2022 14:56:02 GMT
vary: Accept-Encoding
etag: W/"61e58382-3d68"
access-control-allow-origin: *
access-control-allow-credentials: false
cache-control: max-age=14400
cf-cache-status: HIT
age: 5018
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nd22ue8vzE7vsWHDfMQ3v20ZmCFvvoG80kHVAJxHO0uYLybLHKFM0pnCgTybJFR2KPj57Cd9JIVKUTPIaJVavDzZK9t5E2z6S%2B3xS24Iuw5prgKwOLe%2FKQNxb8l4ULAYcg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a5688ddb56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Roboto%3Aregular%2C500%2C700%7COswald%3A700&display=swap&ver=1.3.0 | 142.250.74.106 | 200 OK | 8.9 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto%3Aregular%2C500%2C700%7COswald%3A700&display=swap&ver=1.3.0 IP142.250.74.106:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (9088), with no line terminators Hash77d52eb6dd26d9b43918cf94afceedf8 3743092e46b0f7500b7e468d80fd21d28afbc6c6 a645140e10d39f24ced17fceb11f8ba342d469dfe064a5958e64c806470e4ca7
GET /css?family=Roboto%3Aregular%2C500%2C700%7COswald%3A700&display=swap&ver=1.3.0 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 May 2024 19:34:11 GMT
date: Tue, 07 May 2024 19:34:11 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 4fans.gay/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 | 188.114.96.1 | 200 OK | 113 kB |
URL GET HTTP/34fans.gay/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
Size113 kB (113381 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: text/css
last-modified: Wed, 03 Apr 2024 02:27:24 GMT
vary: Accept-Encoding
etag: W/"660cbe8c-1bae5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96450
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ygPIrwAdoI2JcNTB7Q9nxVPphAoE7dT0XRgAMPEcu0%2FZ1x7XXNkUWMMf7CiWFy1zsBnfgEnpJ%2F1nK3olNmaUveURkPHZ1rkHjJkdIkFi3lvoCrGGeqAxl7xBqdA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55d8cc90b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s.w.org/images/core/emoji/15.0.3/svg/1f608.svg | 192.0.77.48 | 200 OK | 1.4 kB |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/1f608.svg IP192.0.77.48:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashf7d82038f3736cb747696961f212c27f 272e750f0b1681bf56fad4b0939004f9e26b682b 5334f31d8f620f6d6d60b959448c324ba8af47e4ce54cc01c58bce387e923a23
GET /images/core/emoji/15.0.3/svg/1f608.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 19:34:12 GMT
content-type: image/svg+xml
last-modified: Tue, 30 Jan 2024 01:15:39 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.99 | 200 OK | 2.2 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=5ixa0tpqj0zz CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 00:37:29 GMT
expires: Fri, 10 May 2024 00:37:29 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 413806
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 4fans.gay/wp-content/plugins/jnews-video/assets/css/single-video.css?ver=11.0.5 | 188.114.96.1 | 200 OK | 3.1 kB |
URL GET HTTP/34fans.gay/wp-content/plugins/jnews-video/assets/css/single-video.css?ver=11.0.5 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeASCII text, with very long lines (3097), with no line terminators Hashff1f9a1096fb0ecb5e025d5f422602ff 72bdb3d6854450db19c6b276ab7cf51f2bd80487 4fc0576bf9cc72c94f0a6fe2aadb14406bed7909e21a5bd1e92c13f7dee88194
GET /wp-content/plugins/jnews-video/assets/css/single-video.css?ver=11.0.5 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: text/css
last-modified: Mon, 06 May 2024 17:52:53 GMT
vary: Accept-Encoding
etag: W/"663918f5-c17"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 92340
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R0DXuxjCm182tYhwlIMkEXyRk1NH%2FO6LbkrzbmwcBVKbRCBWCBwS%2FzojSLE4zg1Wd0DVLmS57pZu6AEyaTjYq9rAB3PRgHpH9Uypwekq9Qli%2BPGgQbGvn%2BC%2BUDo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55dacf60b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-content/themes/jnews/assets/dist/font/jegicon.woff | 188.114.96.1 | 200 OK | 7.1 kB |
URL GET HTTP/34fans.gay/wp-content/themes/jnews/assets/dist/font/jegicon.woff IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeWeb Open Font Format, CFF, length 7144, version 1.0 Hash80f6e7a7a6eb44255aeb06a2d5b5ea41 4ded570e00c9c96cc3cf18e770903cb60e360ce4 e2d3127da85763e024971c6192f78becbdf85db231b3d088c9f8b3777d444ede
GET /wp-content/themes/jnews/assets/dist/font/jegicon.woff HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://4fans.gay/wp-content/themes/jnews/assets/dist/frontend.min.css?ver=11.5.2
Cookie: _ga_BLZ9KGC3FH=GS1.1.1715110451.1.0.1715110451.0.0.0; _ga=GA1.1.1031319977.1715110451; advanced_ads_browser_width=1280
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:12 GMT
content-type: application/font-woff
content-length: 7144
last-modified: Mon, 06 May 2024 16:55:14 GMT
vary: Accept-Encoding
etag: "66390b72-1be8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 95932
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p9oiVHwVTbZUtncriEQc330GeKFxpn07JuI5DMSa8BK8146IjAfq5BZslOhwvt8CrLoJzraE%2FEl%2BCdx9B2LdWfMOvvEs3Gc2zH803rKyDGpP04ddUhxyBqKcJcY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a5651ac40b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s.w.org/images/core/emoji/15.0.3/svg/1f48b.svg | 192.0.77.48 | 200 OK | 701 B |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/1f48b.svg IP192.0.77.48:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash96221c7fcaed91c0f1379ef2e56ea273 721c3efc4ad4e4bcf321b35c7891c4cb70aa4a2f 40731c85b21e8eb02ea3334a473781da2f9789c2ada9666d81ba20cb4ddb3d97
GET /images/core/emoji/15.0.3/svg/1f48b.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 19:34:12 GMT
content-type: image/svg+xml
last-modified: Tue, 30 Jan 2024 01:18:34 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| s3t3d2y8.afcdn.net/library/426059/350be617aeb440d62ec208dd8642a397dc6779d7.mp4 | 185.76.9.16 | 206 Partial Content | 7.8 kB |
URL GET HTTP/2s3t3d2y8.afcdn.net/library/426059/350be617aeb440d62ec208dd8642a397dc6779d7.mp4 IP185.76.9.16:443 ASN#60068 Datacamp Limited
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subjectafcdn.net Fingerprint22:9F:54:A2:AF:3E:A2:6B:FB:1A:C6:F4:B8:E8:E1:C3:A8:02:B3:29 ValidityTue, 30 Apr 2024 07:42:02 GMT - Mon, 29 Jul 2024 07:42:01 GMT
File typeISO Media, MP4 Base Media v1 [ISO 14496-12:2003] Hashe88b61490590ec836ff640fd0de61a71 350be617aeb440d62ec208dd8642a397dc6779d7 3720d4583195b09498887c7dba652c94716665ff6cb143d9397f2fe25be0baff
GET /library/426059/350be617aeb440d62ec208dd8642a397dc6779d7.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Tue, 07 May 2024 19:34:13 GMT
content-type: video/mp4
content-length: 7778
last-modified: Mon, 06 Mar 2023 17:56:26 GMT
etag: "6406294a-1e62"
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
expires: Tue, 31 Dec 2024 12:35:24 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-77-nzt: EwwBuUwJDQH38BBeAAwBuUwKDAH3+elGAAwBJRPCLgH3wNUCAA
x-77-nzt-ray: c0a4cc2855fd3fa835823a6665544117
x-accel-expires: @1735648524
x-accel-date: 1708945733
x-77-cache: HIT
x-77-age: 6164720
server: CDN77-Turbo
x-cache: HIT
x-age: 6164720
x-77-pop: stockholmSE
content-range: bytes 0-7777/7778
X-Firefox-Spdy: h2
|
|
| | 188.114.96.1 | 200 OK | 136 kB |
URL User Request GET HTTP/2IP188.114.96.1:443
CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
Size136 kB (135899 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch/2/18138/ HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-pingback: https://4fans.gay/xmlrpc.php
link: <https://4fans.gay/wp-json/>; rel="https://api.w.org/", <https://4fans.gay/wp-json/wp/v2/posts/18138>; rel="alternate"; type="application/json", <https://4fans.gay/?p=18138>; rel=shortlink
x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff, nosniff
x-xss-protection: 1; mode=block, 1; mode=block
x-permitted-cross-domain-policies: master-only, master-only
referrer-policy: same-origin, same-origin
content-encoding: br
cache-control: no-transform
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fuqttYQbEA%2BHM9JnjIuWbRK1gj3f6bh8yg29ssytv22axLSKbD%2FsJ%2FEYY2FNAV1Xv5OUdUaRT1so0vguwG3HHiGuuA0KUGGUgvnE4zriPfba2Cifh8GVbvUZ50c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a5574ce55697-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 4fans.gay/wp-content/themes/jnews/assets/css/js-composer-frontend.css?ver=11.5.2 | 188.114.96.1 | 200 OK | 3.0 kB |
URL GET HTTP/34fans.gay/wp-content/themes/jnews/assets/css/js-composer-frontend.css?ver=11.5.2 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeASCII text, with very long lines (2999), with no line terminators Hashfc83441dd57e3efc19dde7715224aa04 ca4cec1e5c8334d2bbb63899944ad0ec4f73607c 1c468f25c66a9aeaa637ca5244f64ec7f967734b2dc2aa92b667cf5316155e81
GET /wp-content/themes/jnews/assets/css/js-composer-frontend.css?ver=11.5.2 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: text/css
last-modified: Mon, 06 May 2024 16:55:14 GMT
vary: Accept-Encoding
etag: W/"66390b72-bb7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 95931
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2iGVFEHn2jQErVNI45%2BO2m0s3p3vp0gu8%2Fty8Yp%2FeukTEnBovuhNWYQbKmFTpy9m0gLMLc7fXppFomxuEYDS1HLHCSze1hrxNWEbh0w0yNMWZoOVLHQwLcdk00A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55dace00b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-content/uploads/2024/03/only4fanslogo2.png | 188.114.96.1 | 200 OK | 4.5 kB |
URL GET HTTP/34fans.gay/wp-content/uploads/2024/03/only4fanslogo2.png IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typePNG image data, 200 x 91, 8-bit colormap, non-interlaced Hash493eff37d988c41d121af6f7c52a12c4 7df46e9821f058166ee3a3b32df710f35a111302 b9fd08b936681ff29f07892671a425e92c60851e69c2c9579af171145e9013ac
GET /wp-content/uploads/2024/03/only4fanslogo2.png HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: image/png
last-modified: Mon, 25 Mar 2024 17:34:18 GMT
vary: Accept-Encoding
etag: W/"6601b59a-1195"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96450
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S2KVfInxYJHThUNmvnVPo3tLC8Z0zfZI5TweZ6GY09qb5nXWNhf95LwY%2BjzVq4V2Raci06sTSKYlq4gVRo%2BBusIvBSwKha9LRd%2BErASm8f5ivsLn6rxB4yeXA4s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55dbd330b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-includes/js/hoverIntent.min.js?ver=1.10.2 | 188.114.96.1 | 200 OK | 1.5 kB |
URL GET HTTP/34fans.gay/wp-includes/js/hoverIntent.min.js?ver=1.10.2 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJavaScript source, ASCII text, with very long lines (1528), with no line terminators Hash05dfab5ea94e431b975302359420e027 6fedd8876d4dd468783359ca3bc4882748dde111 d05f197f608d0f4f0eab7000e11622a7dfbb913b7aee1a1352496fa1fcfc5789
GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: application/javascript
last-modified: Tue, 24 May 2022 18:28:26 GMT
vary: Accept-Encoding
etag: W/"628d23ca-5db"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96449
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zzwjKSkg87yd%2BlG8L1Z7KuqtRj%2Fv5oCZDdpO8B1OZSVIFe6z5gawLsINa2%2FlcoNn5F4hyRSIivrB6qCk7hlje1xwQrvjO4XnTfYNR0fG9iUbk%2Fjf3tz7IAZll8s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55e1dea0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-content/plugins/jnews-video/assets/css/plugin.css?ver=11.0.5 | 188.114.96.1 | 200 OK | 29 kB |
URL GET HTTP/34fans.gay/wp-content/plugins/jnews-video/assets/css/plugin.css?ver=11.0.5 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeASCII text, with very long lines (29382), with no line terminators Hashec4fa588f5bc4733816ff97f95e1c699 5abd1b9b4afcceaba438dc8e316dfb305b83e35a 68725762f8658ebd5c28f53a5098b47fba547f7ae685ac1d1d0bfb19e029a25b
GET /wp-content/plugins/jnews-video/assets/css/plugin.css?ver=11.0.5 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: text/css
last-modified: Mon, 06 May 2024 17:52:53 GMT
vary: Accept-Encoding
etag: W/"663918f5-72c6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 92379
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V3qGODdj5d9q%2Bxrqgx%2FY%2FkprtnPUeIco4m3qQojBNg4KHa5aKgFh3LO4ypS%2B7jp5Ubd9YIbjHn%2BFaizcknEmgRE%2B1q2MHOfAHvRoEXlWnaoREwQO4LN33mVTK74%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55d9cd60b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-content/plugins/advanced-ads-pro/assets/js/advanced-ads-pro.min.js?ver=2.26.0 | 188.114.96.1 | 200 OK | 7.9 kB |
URL GET HTTP/34fans.gay/wp-content/plugins/advanced-ads-pro/assets/js/advanced-ads-pro.min.js?ver=2.26.0 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJavaScript source, ASCII text, with very long lines (8114), with no line terminators Hash4c031411708f7f2d6b4aaf03b399a818 5d351ce8daf3a612127999796bed2724f5333fc3 cf0558158f4fee8031e6942d00b6a6cc10fa782cd6ee961764032400fae31508
GET /wp-content/plugins/advanced-ads-pro/assets/js/advanced-ads-pro.min.js?ver=2.26.0 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: application/javascript
last-modified: Sun, 04 Feb 2024 10:53:22 GMT
vary: Accept-Encoding
etag: W/"65bf6ca2-1ee6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96450
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P98dxyphESIhmbMNblIkaDi11u29Vw9j95uSGwKUV7mbnaVE8BBkOa1sa4Yjf1v50Luv179IE%2FPL4MRykUyev%2BoUMzyG24KbnxNE80YpctD8nAQti3xbPIRiQu4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55e0dd90b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s.magsrv.com/v1/api.php | 95.211.229.245 | 200 OK | 3.4 kB |
IP95.211.229.245:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subjectmagsrv.com FingerprintE9:B1:06:11:C7:80:11:9F:62:6C:E8:AF:35:69:C6:21:29:87:60:51 ValidityTue, 30 Apr 2024 07:49:25 GMT - Mon, 29 Jul 2024 07:49:24 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (3566), with no line terminators Hash1de358cfc759a30f83b23c203bb05196 3ccf8472dabb8f5638565c493d7e176aaf8d89b3 e3449bddd70882b0279316f1bcdc84e9f2c955938cfeafb5441270a0135fcae8
POST /v1/api.php HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 309
Origin: https://4fans.gay
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 19:34:12 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://4fans.gay
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22663a82347a5c42.669090162668852502%22%3B%7D; expires=Thu, 07-May-2026 19:34:12 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| s.w.org/images/core/emoji/15.0.3/svg/1f525.svg | 192.0.77.48 | 200 OK | 822 B |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/1f525.svg IP192.0.77.48:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashdf3feac705602bbe1397b64d74544cce 4c5fafe84bcbcae24c1fc8b07a0f08e41cfad981 1e4025170bb68b27cea9cd041672fd1d65a61aed5e94df0316e37db06ddfbcf1
GET /images/core/emoji/15.0.3/svg/1f525.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 19:34:12 GMT
content-type: image/svg+xml
last-modified: Tue, 30 Jan 2024 01:18:34 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| s.pemsrv.com/venor.php | 95.211.229.248 | 200 OK | 1 B |
IP95.211.229.248:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subjectpemsrv.com FingerprintBA:AA:AB:1F:22:EF:D5:0A:2D:0C:D0:E8:1C:F5:D4:F5:29:2A:0D:5D ValidityTue, 30 Apr 2024 07:53:35 GMT - Mon, 29 Jul 2024 07:53:34 GMT
File typevery short file (no magic) Hashcfcd208495d565ef66e7dff9f98764da b6589fc6ab0dc82cf12099d1c2d40ab994e8410c 5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
GET /venor.php HTTP/1.1
Host: s.pemsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://4fans.gay
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 19:34:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| 4fans.gay/wp-content/plugins/jnews-video/assets/js/plugin.js?ver=11.0.5 | 188.114.96.1 | 200 OK | 17 kB |
URL GET HTTP/34fans.gay/wp-content/plugins/jnews-video/assets/js/plugin.js?ver=11.0.5 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJavaScript source, ASCII text, with very long lines (17279), with no line terminators Hash49a9d55ebf05545f9484cdbe07104acc be7366dd23a9c832e5d56dfb43e29282228f969b 0514580c53e8c81ce58ff2a3f86d65f5c8b671896f9c4f0489973670c1912f94
GET /wp-content/plugins/jnews-video/assets/js/plugin.js?ver=11.0.5 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: application/javascript
last-modified: Mon, 06 May 2024 17:52:53 GMT
vary: Accept-Encoding
etag: W/"663918f5-437f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 92379
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aEWVsAAW%2Bf2tm4xXQxzL%2BvTCkaj98dEPNyTXPcnT%2BSWVzdIYkBx5ivEhQJgcZAAzZZZ%2BRCg%2FadaVTMgkmCUVTeIyGTM2lV1llHrmIMhVBcwLpgdViLIo28GTwBQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55e2df90b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://4fans.gay
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 May 2024 09:28:37 GMT
expires: Sun, 04 May 2025 09:28:37 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 295535
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| s.w.org/images/core/emoji/15.0.3/svg/1f633.svg | 192.0.77.48 | 200 OK | 959 B |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/1f633.svg IP192.0.77.48:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash1e4a50a0e45593204ce227cb38a9f76d 045de2bcdf157c4918a102f4dd35fd27be5d7c09 a55ef9f30f5f17ac42baecd48d4e5d35437a51a06fa8508fe911b4830eaf9c4c
GET /images/core/emoji/15.0.3/svg/1f633.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 19:34:12 GMT
content-type: image/svg+xml
last-modified: Tue, 30 Jan 2024 01:15:39 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| 4fans.gay/wp-content/themes/jnews/data/import/playit/scheme.css?ver=11.5.2 | 188.114.96.1 | 200 OK | 3.1 kB |
URL GET HTTP/34fans.gay/wp-content/themes/jnews/data/import/playit/scheme.css?ver=11.5.2 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeASCII text, with very long lines (3286), with no line terminators Hash14abae2ac48fedb0c81f9246b70497ff 4634eabf185df0ebfcd6ebda389b8e7427388c2f 8a2a29da91046242692d9478c322fb19efb3ed82ab5e74cd711cd7fb4cd31dba
GET /wp-content/themes/jnews/data/import/playit/scheme.css?ver=11.5.2 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: text/css
last-modified: Mon, 06 May 2024 16:55:14 GMT
vary: Accept-Encoding
etag: W/"66390b72-bf8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 95931
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OqCVwyhxWW1ouapnxJn0%2BR3wf%2BiB%2BO86wT2yfScQ%2BxyB4TrQ6qNGrxmB80Kpr81zPmFEOULqSMUxg0K5C2xxX2o9%2B6YpmZYAMEXsSPh7S5dZ73UgmcAepa%2Bm4%2F0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55dacef0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-content/plugins/jnews-like/assets/js/plugin.js?ver=11.0.0 | 188.114.96.1 | 200 OK | 2.4 kB |
URL GET HTTP/34fans.gay/wp-content/plugins/jnews-like/assets/js/plugin.js?ver=11.0.0 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJavaScript source, ASCII text, with very long lines (2511), with no line terminators Hashbe2549a458c56c179c7e51f20ef79b69 f2c9121f032580d4ecd34a1827c339d54faa73d2 99aca9d9aeb8fa46ba3218c7f253c5ffded05b8708f73ced9b4735bb60bdde47
GET /wp-content/plugins/jnews-like/assets/js/plugin.js?ver=11.0.0 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 12:03:42 GMT
vary: Accept-Encoding
etag: W/"6552109e-95f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96449
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tbkkf5SCypWbLQd0brLvJx%2FfjpjZTrHC8Czwh1%2BnDe7DnKwtEpj%2FgfbfYnDt9fOGk8pzpErfRleJe8qelErV8IjusBVg8EZ77hUnn0fgoGZiLfsbxUXL3mujOGU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55e2e1a0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| a.pemsrv.com/popunder1000.js | 185.76.9.22 | 200 OK | 100 kB |
URL GET HTTP/2a.pemsrv.com/popunder1000.js IP185.76.9.22:443 ASN#60068 Datacamp Limited
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subjectpemsrv.com FingerprintBA:AA:AB:1F:22:EF:D5:0A:2D:0C:D0:E8:1C:F5:D4:F5:29:2A:0D:5D ValidityTue, 30 Apr 2024 07:53:35 GMT - Mon, 29 Jul 2024 07:53:34 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /popunder1000.js HTTP/1.1
Host: a.pemsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 19:34:12 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"d9d3b543c03e218b51fa2081f01"
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
expires: Tue, 07 May 2024 14:38:40 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: EwwBuUwJFAH3URkAAAwBuUwKAQH3BwAAAAwBisclxAH3vgEAAA
x-77-nzt-ray: af585630a4043d5734823a6687b6971d
x-accel-expires: @1715114771
x-accel-date: 1715103971
x-77-cache: HIT
x-77-age: 6481
content-encoding: gzip
server: CDN77-Turbo
x-cache: HIT
x-age: 6481
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
|
|
| 4fans.gay/wp-content/uploads/2023/10/thumbnail-00311-120x86.jpg | 188.114.96.1 | 200 OK | 2.4 kB |
URL GET HTTP/34fans.gay/wp-content/uploads/2023/10/thumbnail-00311-120x86.jpg IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x86, components 3 Hash3946c3dd1a550f643b5cf67e723ea00e 6df6c44a801a5a19a301644707321ccfba81f744 edb58ffa77dc83d21926204a7509d38d72dc1387148cffd186798979e26dcada
GET /wp-content/uploads/2023/10/thumbnail-00311-120x86.jpg HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:11 GMT
content-type: image/jpeg
last-modified: Tue, 10 Oct 2023 20:47:02 GMT
vary: Accept-Encoding
etag: W/"6525b846-95a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HGS7XoQ2xRtVYiiPmNATQa5kZWelJ39C8FHgAlySm5rj%2Fb7P0FKmCh1Nz5YiddcYDXnmHfk5iga4h1sahXaS2jtwIXx3utcyaaDdpHLPEEt6msi8CbN%2FT3gPCRY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55e0dd30b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| bleachimpartialtrusted.com/pixel/purst?dl=0&th=0&sc=0&rs=2073&rd=2073&fd=991&bv=24.5.6485&tmpl=70 | 172.240.108.76 | 200 OK | 0 B |
URL GET HTTP/1.1bleachimpartialtrusted.com/pixel/purst?dl=0&th=0&sc=0&rs=2073&rd=2073&fd=991&bv=24.5.6485&tmpl=70 IP172.240.108.76:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subjectbleachimpartialtrusted.com Fingerprint13:E9:1E:BA:56:EE:4E:57:E9:B4:0D:01:06:CD:11:31:C2:0B:D6:B9 ValidityMon, 06 May 2024 08:04:15 GMT - Sun, 04 Aug 2024 08:04:14 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/purst?dl=0&th=0&sc=0&rs=2073&rd=2073&fd=991&bv=24.5.6485&tmpl=70 HTTP/1.1
Host: bleachimpartialtrusted.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 07 May 2024 19:34:12 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| 4fans.gay/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.21.4 | 188.114.96.1 | 200 OK | 174 kB |
URL GET HTTP/34fans.gay/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.21.4 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
Size174 kB (173746 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.21.4 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: text/css
last-modified: Fri, 03 May 2024 03:50:56 GMT
vary: Accept-Encoding
etag: W/"66345f20-2a6b2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96450
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CeUEF1DQtilquAy7vaTvdKDjq0zu6%2F%2FzTs8VoRDprA7Yakgkxh7D1IdY%2FJOmra%2BYW9bqu6EsiS9RyUQCnKZt%2BjvSFEo8Yx40xpyHw9PUxo92IF5mPjq6YzbKzAA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55d9cd90b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-content/uploads/2023/10/cropped-AdobeStock_63236409-32x32.png | 188.114.96.1 | 200 OK | 970 B |
URL GET HTTP/34fans.gay/wp-content/uploads/2023/10/cropped-AdobeStock_63236409-32x32.png IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hash8bcc86a3166620ed7d8463b9bf9b11b0 7e48d16622979a535d6f6b80cf874e8d52ceea7c 662000e331d336f5e907ed5d2d766f7d750578e49083d95082412aa378ce2d04
GET /wp-content/uploads/2023/10/cropped-AdobeStock_63236409-32x32.png HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Cookie: _ga_BLZ9KGC3FH=GS1.1.1715110451.1.0.1715110451.0.0.0; _ga=GA1.1.1031319977.1715110451; advanced_ads_browser_width=1280; advanced_ads_visitor=%7B%22browser_width%22%3A1280%7D; darkmode=false; pp_main_6406b181e5c0405a3cf1ae0dcbeb6e6e=1; jnews_view_counter_visits[0]=1715114052b18138
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:13 GMT
content-type: image/png
last-modified: Sun, 29 Oct 2023 15:19:28 GMT
vary: Accept-Encoding
etag: W/"653e7800-3ca"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 95961
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sQ2CKdz3wykrGV4RFoYex%2Bs2K8HIFiWxAJ%2FYHF62iUEPbtDQoi3ugof7rY%2B9VGpznEJJyQ1oTh8Lt8bv%2BFUG6D3%2FL%2Be9UiQJvxC0Lp%2BcMcip1akQWRs8XMvUqaU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a570c9360b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s.w.org/images/core/emoji/15.0.3/svg/1f467-1f3fc.svg | 192.0.77.48 | 200 OK | 1.7 kB |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/1f467-1f3fc.svg IP192.0.77.48:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash3eac4a4616e5513d9a443163c2a0f46b 9376ba6d34abf371caba983d2cd29165f38d5d91 5618cc234ebceb4fcd182754dc0cf8326c8d15541ca78cf5c5c286d7b470e31b
GET /images/core/emoji/15.0.3/svg/1f467-1f3fc.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 19:34:12 GMT
content-type: image/svg+xml
last-modified: Tue, 30 Jan 2024 01:21:10 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=mrg2ftfsptej | 142.250.74.132 | 200 OK | 46 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=mrg2ftfsptej IP142.250.74.132:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File typeHTML document, ASCII text, with very long lines (36805) Hasha4b0a6f6e79fc32f04ca219f78bf6d6a b7dcd5bfd280b0e11f24868f3a54461ca56b47c1 8590bed974ef176a44375686ab326d5a11799f8150386a6edec1477bbe6fe725
GET /recaptcha/api2/anchor?ar=1&k=6LcJB7ohAAAAACwVuspMX_tBBOZrsmvK9KqkRAdE&co=aHR0cHM6Ly80ZmFucy5nYXk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=mrg2ftfsptej HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 07 May 2024 19:34:14 GMT
content-security-policy: script-src 'nonce-fKttxR0Rok47c6INpwRYIA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 4fans.gay/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 | 188.114.96.1 | 200 OK | 19 kB |
URL GET HTTP/34fans.gay/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJavaScript source, ASCII text, with very long lines (15752) Hashb976b651932bfd25b9ddb5b7693d88a7 7fcb7cb5c11227f9213b1e08a07d0212209e1432 4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Cookie: _ga_BLZ9KGC3FH=GS1.1.1715110451.1.0.1715110451.0.0.0; _ga=GA1.1.1031319977.1715110451; advanced_ads_browser_width=1280; advanced_ads_visitor=%7B%22browser_width%22%3A1280%7D; darkmode=false
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:12 GMT
content-type: application/javascript
last-modified: Wed, 03 Apr 2024 02:27:24 GMT
vary: Accept-Encoding
etag: W/"660cbe8c-4926"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 95963
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f3PkcxB0b8Ymu%2BpXUTFySoUOl7PEQQENDXWusxzkdDjGrgJhhkEMF1r5m1tmyldpnD%2BtmlL8%2F6iYOwaajuEY0LKv6MgCjFscCwbPnTFTfr6G5A8RL5G5aEPxEdE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a567bf9d0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s.magsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA11OS05DMQy8ChdoZDt2Pl3DFqSiHiDvNWGDyqKbPmkOj9PyE5lITjzj8QiJ7sh2lB/Y9lH3LKgcKgWVwKZ4fjlAGR/n901HO1/CW9ugkiKBreaiqFX9wpgtlgTmgqSVSnQnLZZc5FJEkEMsqs5XIGJkwvH1EU/HAzhQ9t1fJSESXcV8yS0BssBdQNdpYqkPsXUdnY36MlKuRUmK9aa9jjlE+E1LdwR2hVPy3XDspjKyRvFUfgi3drts5xX4I7yt/RmdU//ZOzRNllVnQe4kQ7r/ltqWFlddBy1aM8VTW072CRfw6Qp+AQAA | 95.211.229.248 | 200 OK | 0 B |
URL GET HTTP/1.1s.magsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA11OS05DMQy8ChdoZDt2Pl3DFqSiHiDvNWGDyqKbPmkOj9PyE5lITjzj8QiJ7sh2lB/Y9lH3LKgcKgWVwKZ4fjlAGR/n901HO1/CW9ugkiKBreaiqFX9wpgtlgTmgqSVSnQnLZZc5FJEkEMsqs5XIGJkwvH1EU/HAzhQ9t1fJSESXcV8yS0BssBdQNdpYqkPsXUdnY36MlKuRUmK9aa9jjlE+E1LdwR2hVPy3XDspjKyRvFUfgi3drts5xX4I7yt/RmdU//ZOzRNllVnQe4kQ7r/ltqWFlddBy1aM8VTW072CRfw6Qp+AQAA IP95.211.229.248:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subjectmagsrv.com FingerprintE9:B1:06:11:C7:80:11:9F:62:6C:E8:AF:35:69:C6:21:29:87:60:51 ValidityTue, 30 Apr 2024 07:49:25 GMT - Mon, 29 Jul 2024 07:49:24 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cimp.php?t=api&data=H4sIAAAAAAAAA11OS05DMQy8ChdoZDt2Pl3DFqSiHiDvNWGDyqKbPmkOj9PyE5lITjzj8QiJ7sh2lB/Y9lH3LKgcKgWVwKZ4fjlAGR/n901HO1/CW9ugkiKBreaiqFX9wpgtlgTmgqSVSnQnLZZc5FJEkEMsqs5XIGJkwvH1EU/HAzhQ9t1fJSESXcV8yS0BssBdQNdpYqkPsXUdnY36MlKuRUmK9aa9jjlE+E1LdwR2hVPy3XDspjKyRvFUfgi3drts5xX4I7yt/RmdU//ZOzRNllVnQe4kQ7r/ltqWFlddBy1aM8VTW072CRfw6Qp+AQAA HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://4fans.gay
DNT: 1
Connection: keep-alive
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22663a82347a5c42.669090162668852502%22%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 19:34:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://4fans.gay
Access-Control-Allow-Credentials: true
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| play.cdnm4m.nl/assets/js/detect-adblocker.min.js | 104.21.17.137 | 200 OK | 2.6 kB |
URL GET HTTP/3play.cdnm4m.nl/assets/js/detect-adblocker.min.js IP104.21.17.137:443
Requested byhttps://play.cdnm4m.nl/embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d CertificateIssuerGoogle Trust Services LLC Subjectcdnm4m.nl FingerprintEC:8C:A5:8B:91:32:7B:AE:3C:D1:79:4A:A3:6E:3C:5D:CC:05:29:22 ValiditySat, 23 Mar 2024 09:33:01 GMT - Fri, 21 Jun 2024 09:33:00 GMT
File typeJavaScript source, ASCII text, with very long lines (2626), with no line terminators Hasha1d5f898e1926ddaa05309ce7402b971 0c51e4e561392e80ce68ac23eaf08bec6e49f953 c05c50665ef2ef7e5d44e924303500e3d41b2424626a9c2e226e3e4486fefc24
GET /assets/js/detect-adblocker.min.js HTTP/1.1
Host: play.cdnm4m.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:12 GMT
content-type: application/javascript
last-modified: Sun, 11 Apr 2021 08:53:36 GMT
vary: Accept-Encoding
etag: W/"6072b910-a14"
access-control-allow-origin: *
access-control-allow-credentials: false
cache-control: max-age=14400
cf-cache-status: HIT
age: 4428
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iEdV8kdy53hFvPmEP6WC%2B44ab5B2VnNjvCZCAP9sdV5XzH0PO0pgdXPbqKBFGzQ7DvQbSx4WZWwQTJo5DSqlzOLXEHsJ5Gpxf5TMcbJ3yL%2BComBJJSZQWilO10I%2FCN3%2FWg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a5687dd656be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=7.6 | 188.114.96.1 | 200 OK | 465 kB |
URL GET HTTP/34fans.gay/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=7.6 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeASCII text, with very long lines (65358) Size465 kB (464668 bytes) Hashfb5f518eb9199b22350c111c413f066f 49baa6bd0902cc4abb5ee499725084abd5fbe525 caad2ecf2e37f3007e63c118a4c26a9cc26a62c495fbdd4b9d20e55bc89052d9
GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=7.6 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: text/css
last-modified: Mon, 06 May 2024 17:52:58 GMT
vary: Accept-Encoding
etag: W/"663918fa-7171c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 92379
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qkqPwe%2F%2FvWw2OGtXYl7qL0BrGSHgWeqm5Ls6hTBmmOxKzV0x2sw0sudpMFvUqa1SfZeHUxoAL5E4r%2FPLm6anVjEoktK%2BJbcolnzIMCqgPnXGVZpcIUbRzb4njTQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55d9cd80b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-content/themes/jnews/assets/css/darkmode.css?ver=11.5.2 | 188.114.96.1 | 200 OK | 48 kB |
URL GET HTTP/34fans.gay/wp-content/themes/jnews/assets/css/darkmode.css?ver=11.5.2 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeASCII text, with very long lines (47490), with no line terminators Hash0f06624704247d783f8270c9cc116ef1 ade2893534c4435d05e8334762791dc1e37be1a2 83d36dfd09b5f1fdf95c7ac47e7df5586a2448aa4b4f97b40894b783f4846717
GET /wp-content/themes/jnews/assets/css/darkmode.css?ver=11.5.2 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: text/css
last-modified: Mon, 06 May 2024 16:55:14 GMT
vary: Accept-Encoding
etag: W/"66390b72-b982"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 95931
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3s6kjGS8mxiMGZhHtYwrRzCAamSayQ172fIkkZ5fsZRarmAJHi1YCNA3CH5WVIx38BWZ0YdfEUY%2FqPigE%2Bg4HCV98T5pb7xkKKIHnN%2BWw18fLmJY5e30RfovDhk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55dace60b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-includes/js/jquery/ui/sortable.min.js?ver=1.13.2 | 188.114.96.1 | 200 OK | 25 kB |
URL GET HTTP/34fans.gay/wp-includes/js/jquery/ui/sortable.min.js?ver=1.13.2 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJavaScript source, ASCII text, with very long lines (25268) Hash8f089859fbea9ebc6fcb2a24ddf37f63 e8cbbcecf6e7218f0a869f25fd4371a477c49e47 275bace21e01961de13dd85b2454bf719249ee3b33559f7b468c92e3cf01a93a
GET /wp-includes/js/jquery/ui/sortable.min.js?ver=1.13.2 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: application/javascript
last-modified: Wed, 29 Mar 2023 18:27:28 GMT
vary: Accept-Encoding
etag: W/"64248310-6369"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96449
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=msJtDVa8xeuRMkOQBQ8dDiihS85UTfbpQNMTto8IaD%2FarnieL9PUtm9477D71%2F%2BW28BNy%2BGDTh8Hf1GJP1C4r8Tbwsbn8RLD3tf581P1f0K2RI2f%2BLiFs6AwW2w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55e2df60b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| play.cdnm4m.nl/assets/js/devtools-detector.js | 104.21.17.137 | 200 OK | 26 kB |
URL GET HTTP/3play.cdnm4m.nl/assets/js/devtools-detector.js IP104.21.17.137:443
Requested byhttps://play.cdnm4m.nl/embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d CertificateIssuerGoogle Trust Services LLC Subjectcdnm4m.nl FingerprintEC:8C:A5:8B:91:32:7B:AE:3C:D1:79:4A:A3:6E:3C:5D:CC:05:29:22 ValiditySat, 23 Mar 2024 09:33:01 GMT - Fri, 21 Jun 2024 09:33:00 GMT
File typeJavaScript source, ASCII text, with very long lines (26027), with no line terminators Hash1e57b07679446605cb363ffe74928fbe 011a1c7bf6057cd91bb9928af3fdef6a7cbae852 e76b1c90144aa8f2f9c954bf03b223c6c0bc7ccf9114d4ea6e52433c24d652f7
GET /assets/js/devtools-detector.js HTTP/1.1
Host: play.cdnm4m.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:12 GMT
content-type: application/javascript
last-modified: Thu, 15 Apr 2021 20:39:10 GMT
vary: Accept-Encoding
etag: W/"6078a46e-65ab"
access-control-allow-origin: *
access-control-allow-credentials: false
cache-control: max-age=14400
cf-cache-status: HIT
age: 5019
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=povQy57Z62MtB%2FpzbOWS2P6KQ%2FEjYNLPsu7RFSc8co7tsbV004UX%2F1P9MQ95Lj1B0OJlwph61tm89Z4MBIyX1G99bIhwRreBE%2BPSEWIIr%2B7F2SOMR%2BkdoQyWWcwby%2B2xkg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a5687dd756be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| s.w.org/images/core/emoji/15.0.3/svg/1f60d.svg | 192.0.77.48 | 200 OK | 941 B |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/1f60d.svg IP192.0.77.48:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash69e6429be817d93191ad3735f74429b6 08d7c79ff002221c983194f75bc3dbe8b8d75cb5 22e0358ca63549ef6a7bff14e3d5577e14791e30aac67029a33e94094f7e111b
GET /images/core/emoji/15.0.3/svg/1f60d.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 19:34:12 GMT
content-type: image/svg+xml
last-modified: Tue, 30 Jan 2024 01:18:13 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| 4fans.gay/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 | 188.114.96.1 | 200 OK | 11 kB |
URL GET HTTP/34fans.gay/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeASCII text, with very long lines (11256), with no line terminators Hash2b0dd7eecea03b4bdedb94ba622fdb03 703becba85161118dd6fc66af465428ef43f561c b7908a015a567ec2363011df2475368dbff34360e9da3fdff50604d6395fb646
GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: text/css
last-modified: Sun, 15 Aug 2021 06:24:36 GMT
vary: Accept-Encoding
etag: W/"6118b324-2bf8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96450
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BZ0bxKgpjPN%2FBRNicHgg7htaNNbeTxHTJ3yrDFa8A4SzPUuhavHYld9Ko7dwlqFSqMSUWR1S3%2F0RcYZeqnvEk93X0fRjv4EGUW1QrhZzfBDwXTVs1J12pYAdpdA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55d9cce0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| play.cdnm4m.nl/assets/css/style.css | 104.21.17.137 | 200 OK | 26 kB |
URL GET HTTP/3play.cdnm4m.nl/assets/css/style.css IP104.21.17.137:443
Requested byhttps://play.cdnm4m.nl/embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d CertificateIssuerGoogle Trust Services LLC Subjectcdnm4m.nl FingerprintEC:8C:A5:8B:91:32:7B:AE:3C:D1:79:4A:A3:6E:3C:5D:CC:05:29:22 ValiditySat, 23 Mar 2024 09:33:01 GMT - Fri, 21 Jun 2024 09:33:00 GMT
File typeASCII text, with CRLF line terminators Hash182d7d888fccecf4824c15d561ea3470 e76ab71657f8ce277d6aa11ce2672e8a669449bb 67c91d3ae90b9f0c439b209b0006bea42a958f025f984c4507328d8bf56d9b92
GET /assets/css/style.css HTTP/1.1
Host: play.cdnm4m.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:12 GMT
content-type: text/css
last-modified: Fri, 25 Mar 2022 17:12:20 GMT
vary: Accept-Encoding
etag: W/"623df7f4-65f6"
access-control-allow-origin: *
access-control-allow-credentials: false
cache-control: max-age=14400
cf-cache-status: HIT
age: 4429
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wyDrcAFOWZp8p1QX%2FNQAUihCAu3xbmummJFi72NzOM%2FhaM6Zp%2F9ANE0XFjLN8WV9h%2Bl7QfUEUleYOu9%2FunxkIiE%2BetH%2Bs3uT6dos7ggkcmMfWwt7AfW%2B8iXFfMYe3hQ3hA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a5687dc356be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| s.w.org/images/core/emoji/15.0.3/svg/1f625.svg | 192.0.77.48 | 200 OK | 1.0 kB |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/1f625.svg IP192.0.77.48:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash0b689a0ef2dd236876b323e7cc3b1fe7 5ac4b9f00db26fbf85127cc9589b4acb5dc1c3cd 76cb5c4d0b4a4ac281d1352ed11dac993824799943eed8a9ee992458a434d9bd
GET /images/core/emoji/15.0.3/svg/1f625.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 19:34:12 GMT
content-type: image/svg+xml
last-modified: Tue, 30 Jan 2024 01:15:16 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| 4fans.gay/wp-content/uploads/2023/10/cropped-AdobeStock_63236409-192x192.png | 188.114.96.1 | 200 OK | 3.8 kB |
URL GET HTTP/34fans.gay/wp-content/uploads/2023/10/cropped-AdobeStock_63236409-192x192.png IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typePNG image data, 192 x 192, 8-bit colormap, non-interlaced Hash8644847d55cfc7965b85801765f91efe 4efa32b9ef2ca6b2f973492f5e530fd63a399293 442455e8451ded6a953b200b0bca4e05a685df5332342de4c39dd1423b363e9b
GET /wp-content/uploads/2023/10/cropped-AdobeStock_63236409-192x192.png HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Cookie: _ga_BLZ9KGC3FH=GS1.1.1715110451.1.0.1715110451.0.0.0; _ga=GA1.1.1031319977.1715110451; advanced_ads_browser_width=1280; advanced_ads_visitor=%7B%22browser_width%22%3A1280%7D; darkmode=false; pp_main_6406b181e5c0405a3cf1ae0dcbeb6e6e=1; jnews_view_counter_visits[0]=1715114052b18138
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:13 GMT
content-type: image/png
last-modified: Sun, 29 Oct 2023 15:19:26 GMT
vary: Accept-Encoding
etag: W/"653e77fe-f05"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96449
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wg1uZICkpLlA8XvNIkDRJxxB3KEFFnMsLmQjmgLXjEdjYpZJPtVua6O4RXd7t9GuQNPLRDc5509rhWVm3cuKtmVwAhmSZjiiCOSNIEOvEmRapFHm3iAplgA8ebU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a570c9340b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-content/plugins/bp-verified-member/assets/css/style.css?ver=1.2.6 | 188.114.96.1 | 200 OK | 15 kB |
URL GET HTTP/34fans.gay/wp-content/plugins/bp-verified-member/assets/css/style.css?ver=1.2.6 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
Hash8dcf2ec371b6b152a9fa009ff1f29ee7 7fbd870f5a5cfec80049ebd36b834001007cc686 f12f12e1f95861c121e2b1b8f9d756bbc218bd86a0b4efbaabaf22029ac2c52d
GET /wp-content/plugins/bp-verified-member/assets/css/style.css?ver=1.2.6 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: text/css
last-modified: Fri, 16 Dec 2022 07:27:16 GMT
vary: Accept-Encoding
etag: W/"639c1dd4-3910"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96450
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FnBxgYF20%2FGkkBTfxc8Z5P8WLZp77DpMhWqugOIrNq6ZuoQqGnL%2FIUzfcyrB1BWDpe6DudtvIABDIg5dHgAPMlZyacdJIQLwgzpEPgeQWVBYPCaD5Z7Le5lLzU4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55d8cc60b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-content/themes/jnews/assets/dist/frontend.min.css?ver=11.5.2 | 188.114.96.1 | 200 OK | 605 kB |
URL GET HTTP/34fans.gay/wp-content/themes/jnews/assets/dist/frontend.min.css?ver=11.5.2 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeASCII text, with very long lines (42577) Size605 kB (604655 bytes) Hash5d925293c964b93f337b1f885254f45b ec686eb07eebd87b8541eacd823677d6e7e5b290 7d80ebebba0e5163e7be43ac2249e58b5c923ffd60bf119ec8be1f5df2e91251
GET /wp-content/themes/jnews/assets/dist/frontend.min.css?ver=11.5.2 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: text/css
last-modified: Mon, 06 May 2024 16:55:14 GMT
vary: Accept-Encoding
etag: W/"66390b72-939ef"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 95931
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3B95lw7WLMG1uq1pA8ickiKu2Q%2BeV9Shfp527uF%2BchYb%2B1f%2B%2FwNdnUAXrvzPhjrQKatMFlYbFvktuhBOJXyDkta%2BTGJQ7drasc4PF%2F1y0pPRXt8NvjmGVLjHnbQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55dacdf0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| downstairsnegotiatebarren.com/sfp.js | 104.21.35.227 | 200 OK | 86 kB |
URL GET HTTP/2downstairsnegotiatebarren.com/sfp.js IP104.21.35.227:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint5D:DB:CB:C6:CE:2A:8B:34:7D:BC:43:74:33:1D:5F:77:48:F7:BC:1B ValidityThu, 02 May 2024 21:26:34 GMT - Wed, 31 Jul 2024 21:26:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 19:34:12 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 6dc78cfb3689b43fbe84b382ec565d82
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 07 May 2024 19:34:11 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cn18VAPks%2FQDkYu5R1U82l3ciWk679kWHpzZGM9mHC6Uz2Iw0IpQBCa%2BlSjhULY8iwWJsynVT8V8qQMAs54yq5f79WUHW3qYYGMBiOdSGfh1oAmxMmAP7%2FpIJBSb498%2FIvoro3Yc6%2BonhH5uogln8A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8803a5647b3456bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 4fans.gay/wp-includes/css/dashicons.min.css?ver=6.5.2 | 188.114.96.1 | 200 OK | 59 kB |
URL GET HTTP/34fans.gay/wp-includes/css/dashicons.min.css?ver=6.5.2 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeASCII text, with very long lines (58981) Hashd68d6bf519169d86e155bad0bed833f8 27ba9c67d0e775fc4e6dd62011daf4c3902698fc c21e5a2b32c47bc5f9d9efc97bc0e29fd081946d1d3ebffc5621cfafb1d3960e
GET /wp-includes/css/dashicons.min.css?ver=6.5.2 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: text/css
last-modified: Sun, 15 Aug 2021 06:24:36 GMT
vary: Accept-Encoding
etag: W/"6118b324-e688"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96450
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=83EwVeY8sBsv8h1E4uGnIacYdYrgfvEi8BxBCtvbxossZ4Bf%2Bvy%2BsRVEBkhO0JsJ7%2FDHlMLERvN35Yyjp0AcEpY8RZUbv0%2Ftuql1tCjy2N2SsCglqQN4HCvwmlI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55d8cc50b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| play.cdnm4m.nl/embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d | 104.21.17.137 | 200 OK | 43 kB |
URL GET HTTP/2play.cdnm4m.nl/embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d IP104.21.17.137:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerGoogle Trust Services LLC Subjectcdnm4m.nl FingerprintEC:8C:A5:8B:91:32:7B:AE:3C:D1:79:4A:A3:6E:3C:5D:CC:05:29:22 ValiditySat, 23 Mar 2024 09:33:01 GMT - Fri, 21 Jun 2024 09:33:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/6ac0e17b-10ce-4ccd-8c42-a66969c0447d HTTP/1.1
Host: play.cdnm4m.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 19:34:12 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=q3cdqdm1v1dj0bumg1erls49cq; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
developed-by: GDPlayer.top
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, User-Agent, If-Modified-Since, Cache-Control, Range, Accept-Ranges, Cache-Control, Accept, Origin, X-Requested-With
access-control-expose-headers: Content-Length, Content-Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7oJF%2BBXflUxqloYQnYmv8EQcHoRgtnUN0stmSQW7v6eiBB4giOiOaPaCXROqNa8vWCLXSbgpqWEdzZFAYkIjTuIG81%2FPJN8xpLWEu9SiSwz1RG4NzONS6wq9tQnDxaiIlQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a56508271bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 4fans.gay/wp-content/plugins/advanced-ads-responsive/public/assets/js/script.js?ver=1.10.3 | 188.114.96.1 | 200 OK | 3.0 kB |
URL GET HTTP/34fans.gay/wp-content/plugins/advanced-ads-responsive/public/assets/js/script.js?ver=1.10.3 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJavaScript source, ASCII text, with very long lines (3080), with no line terminators Hash7391cc65b63427254711f331605e9137 9f06a04d77d9e570aaf0f99e837a10592a5f2571 5a887219b993f32b5fefbe59319f8f557bda6f201d2bac0cbccbf859f9d15f1c
GET /wp-content/plugins/advanced-ads-responsive/public/assets/js/script.js?ver=1.10.3 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: application/javascript
last-modified: Mon, 27 Feb 2023 10:08:32 GMT
vary: Accept-Encoding
etag: W/"63fc8120-b92"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 96450
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K0qn8Zjq86rww7hvPzZ1fJ9vE5dn895qPfjGhkS0D8Qem0JhkyyjfMNBTY8dasglTcvQKkD7vFjBwCjkMPJRzWM4%2B%2F9Z5qsYcPPul06NTclCWYXZUhRnIHk4hNY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55e0dd80b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s.w.org/images/core/emoji/15.0.3/svg/1f431.svg | 192.0.77.48 | 200 OK | 3.3 kB |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/1f431.svg IP192.0.77.48:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash534bbe5095fd6c4f83c17eb01813cdb2 1281bbfd1d620b4f52208a1eae0fcdf95d33a549 bbc979d74b7d083a94056c8c91f1be421205c4a52a1b7276bbb707a4088170ab
GET /images/core/emoji/15.0.3/svg/1f431.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 19:34:12 GMT
content-type: image/svg+xml
last-modified: Tue, 30 Jan 2024 01:15:38 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| s3t3d2y8.afcdn.net/library/42630/a8576dfa339297c60b07d4095ce6427f20b0fa64.mp4 | 185.76.9.16 | 206 Partial Content | 57 kB |
URL GET HTTP/2s3t3d2y8.afcdn.net/library/42630/a8576dfa339297c60b07d4095ce6427f20b0fa64.mp4 IP185.76.9.16:443 ASN#60068 Datacamp Limited
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subjectafcdn.net Fingerprint22:9F:54:A2:AF:3E:A2:6B:FB:1A:C6:F4:B8:E8:E1:C3:A8:02:B3:29 ValidityTue, 30 Apr 2024 07:42:02 GMT - Mon, 29 Jul 2024 07:42:01 GMT
File typeISO Media, MP4 Base Media v1 [ISO 14496-12:2003] Hash2a1e8345a81ec886ad4baef165067555 a8576dfa339297c60b07d4095ce6427f20b0fa64 2139a076f50b6180b7bab88c5a47e84e307cf00a12c9b08853541536c6b7eccf
GET /library/42630/a8576dfa339297c60b07d4095ce6427f20b0fa64.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Tue, 07 May 2024 19:34:13 GMT
content-type: video/mp4
content-length: 56854
last-modified: Fri, 22 Sep 2023 19:06:32 GMT
etag: "650de5b8-de16"
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
expires: Sat, 21 Sep 2024 19:54:11 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: EQwBuUwJDQH3t8klAQ
x-77-nzt-ray: c0a4cc2855fd3fa835823a66b8809d17
x-accel-expires: @1727392766
x-accel-date: 1695856766
x-cache: HIT
x-age: 19253687
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 19253687
content-range: bytes 0-56853/56854
X-Firefox-Spdy: h2
|
|
| s.w.org/images/core/emoji/15.0.3/svg/1f62e-200d-1f4a8.svg | 192.0.77.48 | 200 OK | 2.1 kB |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/1f62e-200d-1f4a8.svg IP192.0.77.48:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashb7fbc6b13983847c67045a5b64bc90a9 7e99d9a56c372f89a0afe610cf3f1ff2afbe8b8e 396676c042bca7a77a3604bbff34115665e26eaa72b03f8c32bae07e38c1be48
GET /images/core/emoji/15.0.3/svg/1f62e-200d-1f4a8.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 19:34:12 GMT
content-type: image/svg+xml
last-modified: Tue, 30 Jan 2024 01:18:13 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| s.w.org/images/core/emoji/15.0.3/svg/1f9b6-1f3fc.svg | 192.0.77.48 | 200 OK | 1.3 kB |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/1f9b6-1f3fc.svg IP192.0.77.48:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash3921ffe83444fed5f30a6665507ddc7e ea45edb11176e83f671508d8a4f43aeaabf085f8 f1c06f39284616a5ce9a332d1089e983140de2e72693a20d596440929d8b295c
GET /images/core/emoji/15.0.3/svg/1f9b6-1f3fc.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 19:34:12 GMT
content-type: image/svg+xml
last-modified: Tue, 30 Jan 2024 01:15:39 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://4fans.gay
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:55:00 GMT
expires: Fri, 02 May 2025 01:55:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 495552
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| stats.wp.com/e-202419.js | 192.0.76.3 | 200 OK | 7.3 kB |
IP192.0.76.3:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerSectigo Limited Subject*.wp.com Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2 ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (7504), with no line terminators Hash43bf680c0caba9b62f1c46e128d40360 e8950271ef6af3759a7429b45a7e583e6e24e305 21ef883e41d9b0fc02bd11801d9823daf93a2b294a6f05b6080bad1b689facab
GET /e-202419.js HTTP/1.1
Host: stats.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 19:34:10 GMT
content-type: application/javascript
vary: Accept-Encoding
x-minify: t
x-minify-cache: hit
etag: W/14377-1704402358485.9985
content-encoding: br
expires: Sat, 03 May 2025 15:12:58 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| capaciousdrewreligion.com/advertisers.js | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1capaciousdrewreligion.com/advertisers.js IP172.240.108.68:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subjectcapaciousdrewreligion.com FingerprintBB:9C:12:88:24:43:D4:47:71:3F:F0:A4:BB:E1:85:65:CE:E7:92:E4 ValidityMon, 06 May 2024 02:35:23 GMT - Sun, 04 Aug 2024 02:35:22 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: capaciousdrewreligion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 07 May 2024 19:34:13 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8e2f79e78d9ce834d506d9c767b7bde5
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| 4fans.gay/wp-content/uploads/2024/02/thumbnail-00478-120x86.jpg | 188.114.96.1 | 200 OK | 2.6 kB |
URL GET HTTP/34fans.gay/wp-content/uploads/2024/02/thumbnail-00478-120x86.jpg IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x86, components 3 Hash2d7e0081d67cf1f1f671d37af1fd4186 f659adc8e89d04da7fdf94f31df98bcdf9798c69 626fc1525976def7d79e0368e1bd2ce1c404604f2254323d123e1bfc3b8880ed
GET /wp-content/uploads/2024/02/thumbnail-00478-120x86.jpg HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:11 GMT
content-type: image/jpeg
last-modified: Wed, 14 Feb 2024 01:28:08 GMT
vary: Accept-Encoding
etag: W/"65cc1728-a1c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V62SvsNuylFGPzvlKhGajsn4NaoHn0IEdhUf%2BysAmfSsblgaRMPmozT1FhTL57tWXeOFVj8sPOnZlcP8UYYCIZDfJxVebOqdHXVH2nNr0s5esIOIn2%2BqNpwsnwU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55e0dbf0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-content/uploads/2021/12/thumnail-00013-1-120x86.jpg | 188.114.96.1 | 200 OK | 2.8 kB |
URL GET HTTP/34fans.gay/wp-content/uploads/2021/12/thumnail-00013-1-120x86.jpg IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x86, components 3 Hashd28937c9d7445626e000c30d9bfbc5db 4c868d488aeda621ac09d20ab390792afe400d5e eba163f1ca433be96e54869c5d3e5b01e6ed3c363f19a2a28f9638458608e018
GET /wp-content/uploads/2021/12/thumnail-00013-1-120x86.jpg HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:11 GMT
content-type: image/jpeg
last-modified: Wed, 29 Dec 2021 12:44:50 GMT
vary: Accept-Encoding
etag: W/"61cc5842-b16"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L3Rz2EcUmheJ8EjozSPTfLgijKWOHb%2BCkujxf3SWSBSHy4wj6Ow905STod5%2Bcl8AqoSzmK2kw%2FkggAkkkzjDkTAX7hwbt9rDCNek2ZhGxV%2Bki%2FIMWE0hT6k4a4c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55e0dd60b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4fans.gay/wp-content/themes/jnews/style.css?ver=11.5.2 | 188.114.96.1 | 200 OK | 427 B |
URL GET HTTP/34fans.gay/wp-content/themes/jnews/style.css?ver=11.5.2 IP188.114.96.1:443
Requested byhttps://4fans.gay/watch/2/18138/ CertificateIssuerLet's Encrypt Subject4fans.gay FingerprintDD:10:8D:F1:E9:2C:C4:BC:57:0D:89:D7:A0:A9:33:69:10:4C:74:F3 ValidityThu, 18 Apr 2024 22:15:31 GMT - Wed, 17 Jul 2024 22:15:30 GMT
File typeASCII text, with very long lines (439), with no line terminators Hash37961735f0f2aa500308469d48a211bf 5fdb3ba2eb1675dfa314ea802615dadce4c292b2 6680b0393e96f89c5af3e575d0a25eb7e22fff409ab89af3f1913010d6c13f8b
GET /wp-content/themes/jnews/style.css?ver=11.5.2 HTTP/1.1
Host: 4fans.gay
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fans.gay/watch/2/18138/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 19:34:10 GMT
content-type: text/css
last-modified: Mon, 06 May 2024 16:55:14 GMT
vary: Accept-Encoding
etag: W/"66390b72-1ab"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, no-transform
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
age: 95931
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NjnDlw8Z45SOuSmFHQVSKKKthVhRa6zw8WENHNKqxVWcupSVVo9UltDSK%2FS7hKPmqKuDMjGaVgvgzpsDyl7aMbQu5BkJJYdYxBLHllyBdpGB7KyS9PWAqpTz0Ic%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8803a55dace50b59-OSL
alt-svc: h3=":443"; ma=86400
|
|