www.daftporn.com/afb/logo_trans.gif
37.128.144.49200 OK 147 B URL GET HTTP/2 www.daftporn.com/afb/logo_trans.gif
IP 37.128.144.49:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerLet's Encrypt
Subjectdaftporn.com
FingerprintDF:6E:A1:AB:14:B0:0C:D7:87:48:15:B3:5C:B6:9D:8E:5B:E2:29:DD
ValidityFri, 21 Apr 2023 04:36:23 GMT - Thu, 20 Jul 2023 04:36:22 GMT
File type GIF image data, version 89a, 87 x 100\012- data
Hash 2749d509f43454b43b48f01eca8409cb
912e5c54f8edce75bb1f7da1aa4ebf68284d84b6
f25fb527edef0a5f8dc3e95233211b89d053c982f3d328444373e001e4d2c13c
GET /afb/logo_trans.gif HTTP/1.1
Host: www.daftporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.1
date: Fri, 09 Jun 2023 15:05:28 GMT
content-type: image/gif
content-length: 147
x-accel-version: 0.01
last-modified: Wed, 06 Sep 2017 06:35:32 GMT
etag: "93-5587f8ced3500"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 09 Jul 2023 15:05:28 GMT
X-Firefox-Spdy: h2
www.daftporn.com/afb/videotop.jpg
37.128.144.49200 OK 359 B URL GET HTTP/2 www.daftporn.com/afb/videotop.jpg
IP 37.128.144.49:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerLet's Encrypt
Subjectdaftporn.com
FingerprintDF:6E:A1:AB:14:B0:0C:D7:87:48:15:B3:5C:B6:9D:8E:5B:E2:29:DD
ValidityFri, 21 Apr 2023 04:36:23 GMT - Thu, 20 Jul 2023 04:36:22 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 600x1, components 3\012- data
Hash bbfaae4ec9be899d4c2a217565657e7c
a7e51a32eebb6078e7650dd37bfe8fff8e522c57
3243803463ec5d600bfd9d74c171e3c7db51741e3288c6bc2751b5a70e8509eb
GET /afb/videotop.jpg HTTP/1.1
Host: www.daftporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.1
date: Fri, 09 Jun 2023 15:05:28 GMT
content-type: image/jpeg
content-length: 359
x-accel-version: 0.01
last-modified: Wed, 06 Sep 2017 06:35:53 GMT
etag: "167-5587f8e2da440"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 09 Jul 2023 15:05:28 GMT
X-Firefox-Spdy: h2
www.daftporn.com/poster/poster_142308.jpg
37.128.144.49200 OK 3.1 kB URL GET HTTP/2 www.daftporn.com/poster/poster_142308.jpg
IP 37.128.144.49:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerLet's Encrypt
Subjectdaftporn.com
FingerprintDF:6E:A1:AB:14:B0:0C:D7:87:48:15:B3:5C:B6:9D:8E:5B:E2:29:DD
ValidityFri, 21 Apr 2023 04:36:23 GMT - Thu, 20 Jul 2023 04:36:22 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 125x75, components 3\012- data
Hash 5aede76ed0347f2442b6690c1f133456
58d6b45a9902dc19ee9e1e4e2c79d05848ffbd62
88f187fc75fd0ecaf442734fe3de7e8de03c95c2ccdb5e905235df7ed2741177
GET /poster/poster_142308.jpg HTTP/1.1
Host: www.daftporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.1
date: Fri, 09 Jun 2023 15:05:28 GMT
content-type: image/jpeg
content-length: 3110
last-modified: Tue, 05 Sep 2017 17:41:27 GMT
cache-control: max-age=2592000
expires: Sun, 09 Jul 2023 15:05:28 GMT
etag: "59aee1c7-c26"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3 471 B IP 142.250.74.3:0
Hash fc8e1ec54c50413f6e09e63a85414e7c
929ef6a2a5150200fe2bacfc03245b53be30e46f
9441071bcc600b4efd8d0e6f03237f7cccb737b30125bd1095051a5acdf23ec6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Jun 2023 15:05:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.daftporn.com/afb/500-311.jpg
37.128.144.49200 OK 61 kB URL GET HTTP/2 www.daftporn.com/afb/500-311.jpg
IP 37.128.144.49:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerLet's Encrypt
Subjectdaftporn.com
FingerprintDF:6E:A1:AB:14:B0:0C:D7:87:48:15:B3:5C:B6:9D:8E:5B:E2:29:DD
ValidityFri, 21 Apr 2023 04:36:23 GMT - Thu, 20 Jul 2023 04:36:22 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 500x311, components 3\012- data
Hash dfd24d3ca848082522dbcb0b983ca657
e9cab53fc31979a265a1f86872d93fb40287c535
283d6d5f83c560746c1360fd901ea9bf82e3b590ce26071267a409d1ffa0ce0e
GET /afb/500-311.jpg HTTP/1.1
Host: www.daftporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.1
date: Fri, 09 Jun 2023 15:05:28 GMT
content-type: image/jpeg
content-length: 61243
last-modified: Mon, 03 Jun 2019 06:52:38 GMT
cache-control: max-age=2592000
expires: Sun, 09 Jul 2023 15:05:28 GMT
etag: "5cf4c3b6-ef3b"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.daftporn.com/afb/cool_stuff_11.jpg
37.128.144.49200 OK 1.5 kB URL GET HTTP/2 www.daftporn.com/afb/cool_stuff_11.jpg
IP 37.128.144.49:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerLet's Encrypt
Subjectdaftporn.com
FingerprintDF:6E:A1:AB:14:B0:0C:D7:87:48:15:B3:5C:B6:9D:8E:5B:E2:29:DD
ValidityFri, 21 Apr 2023 04:36:23 GMT - Thu, 20 Jul 2023 04:36:22 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 85x85, components 3\012- data
Hash 7b192af50a21c6aea24fe03eeeb2213a
8a48d5ba9d34a782436a86d8d34c76225c6bf45c
0790416261e602ec05966621fc3f8c9f689c5e5bc1ea394e8dbc6648b35fb885
GET /afb/cool_stuff_11.jpg HTTP/1.1
Host: www.daftporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.1
date: Fri, 09 Jun 2023 15:05:28 GMT
content-type: image/jpeg
content-length: 1532
last-modified: Wed, 06 Sep 2017 06:35:25 GMT
cache-control: max-age=2592000
expires: Sun, 09 Jul 2023 15:05:28 GMT
etag: "59af972d-5fc"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.daftporn.com/afb/arrow.gif
37.128.144.49200 OK 187 B URL GET HTTP/2 www.daftporn.com/afb/arrow.gif
IP 37.128.144.49:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerLet's Encrypt
Subjectdaftporn.com
FingerprintDF:6E:A1:AB:14:B0:0C:D7:87:48:15:B3:5C:B6:9D:8E:5B:E2:29:DD
ValidityFri, 21 Apr 2023 04:36:23 GMT - Thu, 20 Jul 2023 04:36:22 GMT
File type GIF image data, version 89a, 15 x 15\012- data
Hash 2dc626f7228d024c0c67578d80e7b122
4bae19047ea0cd2d14b7f6cff81c62a907c744f9
3f2ed7392b7c7d18180e293203a5077b6dd82b42649272630192b7a014cae23a
GET /afb/arrow.gif HTTP/1.1
Host: www.daftporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.1
date: Fri, 09 Jun 2023 15:05:28 GMT
content-type: image/gif
content-length: 187
x-accel-version: 0.01
last-modified: Wed, 06 Sep 2017 06:35:18 GMT
etag: "bb-5587f8c179580"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 09 Jul 2023 15:05:28 GMT
X-Firefox-Spdy: h2
www.daftporn.com/afb/rechterbanner.jpg
37.128.144.49200 OK 16 kB URL GET HTTP/2 www.daftporn.com/afb/rechterbanner.jpg
IP 37.128.144.49:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerLet's Encrypt
Subjectdaftporn.com
FingerprintDF:6E:A1:AB:14:B0:0C:D7:87:48:15:B3:5C:B6:9D:8E:5B:E2:29:DD
ValidityFri, 21 Apr 2023 04:36:23 GMT - Thu, 20 Jul 2023 04:36:22 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x250, components 3\012- data
Hash b2795b506f3aeaaadb94e41fbfb4d563
67be1360c6433180abd49083482bc1622a789fd2
5c29d086a3045853fdb31585b630092dde221caaba4fb787b4e5bacc61b74ba1
GET /afb/rechterbanner.jpg HTTP/1.1
Host: www.daftporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.1
date: Fri, 09 Jun 2023 15:05:28 GMT
content-type: image/jpeg
content-length: 15956
last-modified: Mon, 03 Dec 2018 09:15:06 GMT
cache-control: max-age=2592000
expires: Sun, 09 Jul 2023 15:05:28 GMT
etag: "5c04f41a-3e54"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.daftporn.com/uploads/2242.jpg
37.128.144.49200 OK 4.2 kB URL GET HTTP/2 www.daftporn.com/uploads/2242.jpg
IP 37.128.144.49:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerLet's Encrypt
Subjectdaftporn.com
FingerprintDF:6E:A1:AB:14:B0:0C:D7:87:48:15:B3:5C:B6:9D:8E:5B:E2:29:DD
ValidityFri, 21 Apr 2023 04:36:23 GMT - Thu, 20 Jul 2023 04:36:22 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 125x125, components 3\012- data
Hash c70d335491aed52cfe4e8cf7fad21267
60f8512285bf7448e80b041119f5a6d8b698efca
27221eaccad5368d420dd2bf3c74f18887ca4f1255f5b6ee8d965fac41ce21d0
GET /uploads/2242.jpg HTTP/1.1
Host: www.daftporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.1
date: Fri, 09 Jun 2023 15:05:28 GMT
content-type: image/jpeg
content-length: 4181
last-modified: Tue, 05 Sep 2017 17:28:16 GMT
cache-control: max-age=2592000
expires: Sun, 09 Jul 2023 15:05:28 GMT
etag: "59aedeb0-1055"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.daftporn.com/afb/topthumb_7.jpg
37.128.144.49200 OK 2.7 kB URL GET HTTP/2 www.daftporn.com/afb/topthumb_7.jpg
IP 37.128.144.49:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerLet's Encrypt
Subjectdaftporn.com
FingerprintDF:6E:A1:AB:14:B0:0C:D7:87:48:15:B3:5C:B6:9D:8E:5B:E2:29:DD
ValidityFri, 21 Apr 2023 04:36:23 GMT - Thu, 20 Jul 2023 04:36:22 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 85x85, components 3\012- data
Hash fa114a74ab2aeccd8022b1ad7b84c70d
612629df5d824c866fb61fa6b649c7834593ce21
6fb0eaf0a55ff9961fd2d90f086ad319443615c73b6410beff0a079e7dca6953
GET /afb/topthumb_7.jpg HTTP/1.1
Host: www.daftporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.1
date: Fri, 09 Jun 2023 15:05:28 GMT
content-type: image/jpeg
content-length: 2704
last-modified: Wed, 06 Sep 2017 06:35:51 GMT
cache-control: max-age=2592000
expires: Sun, 09 Jul 2023 15:05:28 GMT
etag: "59af9747-a90"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.daftporn.com/afb/topthumb_3.jpg
37.128.144.49200 OK 4.0 kB URL GET HTTP/2 www.daftporn.com/afb/topthumb_3.jpg
IP 37.128.144.49:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerLet's Encrypt
Subjectdaftporn.com
FingerprintDF:6E:A1:AB:14:B0:0C:D7:87:48:15:B3:5C:B6:9D:8E:5B:E2:29:DD
ValidityFri, 21 Apr 2023 04:36:23 GMT - Thu, 20 Jul 2023 04:36:22 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 85x85, components 3\012- data
Hash 8ff0ecbcae922504705577d60ee968e9
2b9a8dc4d7a050d8e626829fce0d6351ee576a39
35f0a44b71d9ec46b1842851a2d9d485579544b51d5d1f78cceff9595b955673
GET /afb/topthumb_3.jpg HTTP/1.1
Host: www.daftporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.1
date: Fri, 09 Jun 2023 15:05:28 GMT
content-type: image/jpeg
content-length: 4034
last-modified: Fri, 29 Jun 2018 19:26:22 GMT
cache-control: max-age=2592000
expires: Sun, 09 Jul 2023 15:05:28 GMT
etag: "5b3687de-fc2"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.daftporn.com/afb/2056.jpg
37.128.144.49200 OK 1.4 kB URL GET HTTP/2 www.daftporn.com/afb/2056.jpg
IP 37.128.144.49:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerLet's Encrypt
Subjectdaftporn.com
FingerprintDF:6E:A1:AB:14:B0:0C:D7:87:48:15:B3:5C:B6:9D:8E:5B:E2:29:DD
ValidityFri, 21 Apr 2023 04:36:23 GMT - Thu, 20 Jul 2023 04:36:22 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 85x85, components 3\012- data
Hash e9dea42d8d19934f1f5431631560d15d
cc496e83deae910895417495df648d7957eaa49b
3ce91c72af6de7b5631e3aebe0347a0f5f59acee5c5fa3613cc79fb8cc7cd0a5
GET /afb/2056.jpg HTTP/1.1
Host: www.daftporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.1
date: Fri, 09 Jun 2023 15:05:28 GMT
content-type: image/jpeg
content-length: 1358
last-modified: Fri, 08 Sep 2017 12:24:33 GMT
cache-control: max-age=2592000
expires: Sun, 09 Jul 2023 15:05:28 GMT
etag: "59b28c01-54e"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.daftporn.com/afb/cool_stuff_8.jpg
37.128.144.49200 OK 1.9 kB URL GET HTTP/2 www.daftporn.com/afb/cool_stuff_8.jpg
IP 37.128.144.49:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerLet's Encrypt
Subjectdaftporn.com
FingerprintDF:6E:A1:AB:14:B0:0C:D7:87:48:15:B3:5C:B6:9D:8E:5B:E2:29:DD
ValidityFri, 21 Apr 2023 04:36:23 GMT - Thu, 20 Jul 2023 04:36:22 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 85x85, components 3\012- data
Hash 8ba41d93054890ea7b19dd0ef37c69e5
da4b54fa98fb068896013a04790a9180a03c3550
2971f798fa94dd980fcc6a9c07d7861936920378922de0ed7bd9ed9734bb1fa3
GET /afb/cool_stuff_8.jpg HTTP/1.1
Host: www.daftporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.1
date: Fri, 09 Jun 2023 15:05:28 GMT
content-type: image/jpeg
content-length: 1890
last-modified: Wed, 06 Sep 2017 06:35:24 GMT
cache-control: max-age=2592000
expires: Sun, 09 Jul 2023 15:05:28 GMT
etag: "59af972c-762"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-17606744-1
142.250.74.168200 OK 49 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-17606744-1
IP 142.250.74.168:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint73:BF:B0:D4:62:48:8E:EF:09:5F:00:57:95:98:82:16:BB:07:35:0C
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type ASCII text, with very long lines (2271)
Hash e95d2ed33fe6b9ce9ec2dc747db6a54b
58817717a7421359764aedf253c1b0a54637bf41
81c3a6898fdc46adf0a938f359c7da2796406cab17b3ba940ba502ce51249d0a
GET /gtag/js?id=UA-17606744-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.daftporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 09 Jun 2023 15:05:28 GMT
expires: Fri, 09 Jun 2023 15:05:28 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 48574
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.buypass.com/
95.101.11.123 1.7 kB IP 95.101.11.123:0
ASN #20940 Akamai International B.V.
Hash ef36dd436fa040b924265ddaa7afbf69
9d67f4ad5eae3f63072014110c70fea725f794f5
f05b3ad08f463822ee0c1268a67ddec4b97cbd9c3073755f5425a1e65ab10a0d
POST / HTTP/1.1
Host: ocsp.buypass.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 78
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Access-Control-Allow-Origin: https://www.buypass.no
Access-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With,Content-Length,Accept,Origin,X-Buypass-Session-Id,X-Buypass-Locale
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
MDC-correlationId: 4bce8895-2a20-4fa3-86a1-d578003d8328
Content-Length: 1701
Date: Fri, 09 Jun 2023 15:05:28 GMT
Connection: keep-alive
Server-Timing: ak_p; desc="1686323128565_1600457591_98617847_4317_452_0_0_-";dur=1
ocsp.pki.goog/gts1c3
142.250.74.3 471 B IP 142.250.74.3:0
Hash fc8e1ec54c50413f6e09e63a85414e7c
929ef6a2a5150200fe2bacfc03245b53be30e46f
9441071bcc600b4efd8d0e6f03237f7cccb737b30125bd1095051a5acdf23ec6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Jun 2023 15:05:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.daftporn.com/style.css
37.128.144.49200 OK 3.3 kB URL GET HTTP/2 www.daftporn.com/style.css
IP 37.128.144.49:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerLet's Encrypt
Subjectdaftporn.com
FingerprintDF:6E:A1:AB:14:B0:0C:D7:87:48:15:B3:5C:B6:9D:8E:5B:E2:29:DD
ValidityFri, 21 Apr 2023 04:36:23 GMT - Thu, 20 Jul 2023 04:36:22 GMT
File type ASCII text, with CRLF line terminators
Hash 33c1970bf6d2e2b4a3b724a14fb1da1b
eac1c6d9c46a000245180185015d21584ebe9613
69265529c2fd78f1c8aaace8f43707cb708ddb4bbd000125febd35e3e1337c2e
GET /style.css HTTP/1.1
Host: www.daftporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.1
date: Fri, 09 Jun 2023 15:05:28 GMT
content-type: text/css
last-modified: Thu, 24 Mar 2022 16:49:43 GMT
vary: Accept-Encoding
cache-control: max-age=2592000
expires: Sun, 09 Jul 2023 15:05:28 GMT
etag: W/"623ca127-3c29"
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3 471 B IP 142.250.74.3:0
Hash df893f12f5cf31daedf4910ffcc872c8
bbd271b0e76cd11d6a00327914b74882c95655fb
134d16adfc51baecc40c9fba86cc6c2d37b489435c99878912d1948543a0337b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Jun 2023 15:05:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
go.xlivrdr.com/i?tag=girls&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&showButton=0&showModelName=1&showTitle=0&showLiveBadge=1&isXhDesign=0&actionButtonPlacement=bottom&thumbSizeKey=big&hideButtonOnSmallSpots=0&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&landing=WidgetV4Universal&autoplay=all&autoplayForce=1&campaignId=headerWidget
104.18.59.150302 Found 0 B URL GET HTTP/2 go.xlivrdr.com/i?tag=girls&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&showButton=0&showModelName=1&showTitle=0&showLiveBadge=1&isXhDesign=0&actionButtonPlacement=bottom&thumbSizeKey=big&hideButtonOnSmallSpots=0&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&landing=WidgetV4Universal&autoplay=all&autoplayForce=1&campaignId=headerWidget
IP 104.18.59.150:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerCloudflare, Inc.
Subjectxlivrdr.com
FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /i?tag=girls&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&showButton=0&showModelName=1&showTitle=0&showLiveBadge=1&isXhDesign=0&actionButtonPlacement=bottom&thumbSizeKey=big&hideButtonOnSmallSpots=0&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&landing=WidgetV4Universal&autoplay=all&autoplayForce=1&campaignId=headerWidget HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.daftporn.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 09 Jun 2023 15:05:28 GMT
content-length: 0
location: https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
access-control-allow-origin: *
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDFRFiBZBvMSLtr4uyFiEegrSgDACCU82WkFUcuxQ; SameSite=None; Secure; path=/; expires=Sat, 10-Jun-23 15:05:28 GMT; HttpOnly
server: cloudflare
cf-ray: 7d4a45e31f80b52d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.daftporn.com/afb/bg.jpg
37.128.144.49200 OK 12 kB URL GET HTTP/2 www.daftporn.com/afb/bg.jpg
IP 37.128.144.49:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerLet's Encrypt
Subjectdaftporn.com
FingerprintDF:6E:A1:AB:14:B0:0C:D7:87:48:15:B3:5C:B6:9D:8E:5B:E2:29:DD
ValidityFri, 21 Apr 2023 04:36:23 GMT - Thu, 20 Jul 2023 04:36:22 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1000x100, components 3\012- data
Hash bc565422b611ba209656e6e1c52dd0b4
af6edecb03450be5347fe5d26c1f41e60f6e1f47
f2fe4240a0f1f0fab12c4e4b197228cb860d3d381c4c474413f17bc4128e59b1
GET /afb/bg.jpg HTTP/1.1
Host: www.daftporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.daftporn.com/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.1
date: Fri, 09 Jun 2023 15:05:28 GMT
content-type: image/jpeg
content-length: 12196
last-modified: Wed, 06 Sep 2017 06:35:18 GMT
cache-control: max-age=2592000
expires: Sun, 09 Jul 2023 15:05:28 GMT
etag: "59af9726-2fa4"
accept-ranges: bytes
X-Firefox-Spdy: h2
takeoverrings.com/1e/4b/61/1e4b611506b72c0f633e755d6f95bf46.js
173.233.139.164403 Forbidden 0 B URL GET HTTP/1.1 takeoverrings.com/1e/4b/61/1e4b611506b72c0f633e755d6f95bf46.js
IP 173.233.139.164:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerLet's Encrypt
Subjecttakeoverrings.com
Fingerprint02:3D:A5:73:C4:27:95:2B:58:0D:8B:8C:1E:00:EF:85:18:6C:9D:08
ValidityTue, 02 May 2023 07:51:57 GMT - Mon, 31 Jul 2023 07:51:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /1e/4b/61/1e4b611506b72c0f633e755d6f95bf46.js HTTP/1.1
Host: takeoverrings.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.daftporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx/1.19.5
Date: Fri, 09 Jun 2023 15:05:29 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
www.daftporn.com/fluidplayer.js
37.128.144.49200 OK 17 kB URL GET HTTP/2 www.daftporn.com/fluidplayer.js
IP 37.128.144.49:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerLet's Encrypt
Subjectdaftporn.com
FingerprintDF:6E:A1:AB:14:B0:0C:D7:87:48:15:B3:5C:B6:9D:8E:5B:E2:29:DD
ValidityFri, 21 Apr 2023 04:36:23 GMT - Thu, 20 Jul 2023 04:36:22 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash cebb9e6c7d74f021eae7464de2f93856
db7ddc2cebce65c5d0ee87d2c7fba303ae950c2a
8e67ed9773a40d2f24bc02942e31ef16d9ae18ca03d337ae00b9f46627695854
GET /fluidplayer.js HTTP/1.1
Host: www.daftporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.1
date: Fri, 09 Jun 2023 15:05:28 GMT
content-type: application/javascript
last-modified: Sat, 09 Jun 2018 12:59:06 GMT
vary: Accept-Encoding
cache-control: max-age=2592000
expires: Sun, 09 Jul 2023 15:05:28 GMT
etag: W/"5b1bcf1a-1388e"
content-encoding: br
X-Firefox-Spdy: h2
creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
104.18.59.150200 OK 82 kB URL GET HTTP/2 creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
IP 104.18.59.150:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerCloudflare, Inc.
Subjectxlivrdr.com
FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 5b49d1c698e3082250ff0fd81389042b
fd6c0f014e848505d248c2b1d751143887c10caa
2a5cc6b90b70273cd8669fe4efbe19a8231eaa97cbe053f0f45d85d3a39985fb
GET /widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5 HTTP/1.1
Host: creative.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.daftporn.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Jun 2023 15:05:28 GMT
content-type: text/html
last-modified: Wed, 07 Jun 2023 12:45:47 GMT
expires: Fri, 09 Jun 2023 15:05:27 GMT
cache-control: max-age=10
strict-transport-security: max-age=15768000
pragma: public
report-to: { "endpoints":[{ "url": "https://go.stripchat.com/report" }], "group": "default", "max_age": 1048576 }
cf-cache-status: HIT
age: 9
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45e36fcdb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
godpvqnszo.com/solid.gif?z=1916107&abvar=0
62.122.171.6200 OK 43 B URL POST HTTP/2 godpvqnszo.com/solid.gif?z=1916107&abvar=0
IP 62.122.171.6:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerBuypass AS-983163327
Subject
FingerprintEF:B4:33:E0:27:57:87:63:7C:EA:75:9E:F0:07:FE:B0:CD:03:EF:39
ValidityWed, 31 May 2023 13:05:56 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=1916107&abvar=0 HTTP/1.1
Host: godpvqnszo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.daftporn.com
DNT: 1
Connection: keep-alive
Referer: https://www.daftporn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
video.ktkjmp.com/adsbygoogle.js
104.18.62.235200 OK 16 B URL GET HTTP/2 video.ktkjmp.com/adsbygoogle.js
IP 104.18.62.235:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectvideo.ktkjmp.com
FingerprintD6:F4:DC:36:6D:BC:E5:36:F7:AC:71:BE:47:40:06:E8:12:9F:23:EC
ValidityMon, 01 Aug 2022 00:00:00 GMT - Tue, 01 Aug 2023 23:59:59 GMT
Hash 3d7f7a60216d40dea48e495fef6903c9
fecdb5184f55cf012563d78940eb97b10b9cc99b
96d83ac9f20fc0b88404f307f135e212642e02d6ea295c96b28aed0d771a224f
GET /adsbygoogle.js HTTP/1.1
Host: video.ktkjmp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: application/javascript
content-length: 16
x-amz-id-2: vyeGnGdlTyojmOYSIUGVlkgbVgeOOGCLIaQn1JUXSWf+3Pefo3BQFYiXbFyiqHYw9AcYvZvBFpo=
x-amz-request-id: 5JAJ7X857BTA65NJ
last-modified: Thu, 10 Mar 2022 13:52:07 GMT
etag: "3d7f7a60216d40dea48e495fef6903c9"
x-amz-meta-s3cmd-attrs: atime:1646920284/ctime:1646920283/gid:20/gname:staff/md5:3d7f7a60216d40dea48e495fef6903c9/mode:33188/mtime:1646920283/uid:501/uname:mikhailchubar
x-amz-version-id: eIgLIBoMMcsEXtxOH6UDjWyfAquRpkIG
access-control-allow-origin: https://creative.xlivrdr.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: HIT
age: 5066
expires: Fri, 09 Jun 2023 17:05:29 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45e76f000b49-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.buypass.com/
95.101.11.123 1.7 kB IP 95.101.11.123:0
ASN #20940 Akamai International B.V.
Hash 4f1ebc10d287ffa318d6de58b2fe3fbe
e64f0b41ac27940f1b40c975aca5d4f8074aa61e
e3636db1b2ad2195a70f430ce34711c090d07b002bcec43e65e2f95a20466a6b
POST / HTTP/1.1
Host: ocsp.buypass.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 78
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Access-Control-Allow-Origin: https://www.buypass.no
Access-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With,Content-Length,Accept,Origin,X-Buypass-Session-Id,X-Buypass-Locale
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
MDC-correlationId: f0411468-edf9-462c-a5ba-95b97d5ad5cd
Content-Length: 1701
Date: Fri, 09 Jun 2023 15:05:29 GMT
Connection: keep-alive
Server-Timing: ak_p; desc="1686323129563_1600457591_98617858_4344_462_0_0_-";dur=1
creative.xlivrdr.com/widgets/Player/main.5de9ad47d832a0068877.css
104.18.59.150200 OK 3.1 kB URL GET HTTP/3 creative.xlivrdr.com/widgets/Player/main.5de9ad47d832a0068877.css
IP 104.18.59.150:443
Requested by https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Certificate IssuerCloudflare, Inc.
Subjectxlivrdr.com
FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (4543), with no line terminators
Hash dfff766fa241d3f39aac5cc92937ad52
fd7498d6f9766cbfa3aff840476bbb36067b58f0
e5fcdd2ec44aab0590bbc9d1ef39ac720c4230a89ab3b1b52dc103f6c071f53e
GET /widgets/Player/main.5de9ad47d832a0068877.css HTTP/1.1
Host: creative.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Cookie: __cflb=02DiuDFRFiBZBvMSLtr5q6uSw62gLvY51BAs3hmXh2f6c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: text/css
last-modified: Wed, 07 Jun 2023 12:47:37 GMT
etag: W/"64807c69-11bf"
expires: Fri, 09 Jun 2023 15:05:37 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45e77cadb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.daftporn.com/movies/daft_main_mouthshot_06_10.mp4
37.128.144.49206 Partial Content 1.9 MB URL GET HTTP/2 www.daftporn.com/movies/daft_main_mouthshot_06_10.mp4
IP 37.128.144.49:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerLet's Encrypt
Subjectdaftporn.com
FingerprintDF:6E:A1:AB:14:B0:0C:D7:87:48:15:B3:5C:B6:9D:8E:5B:E2:29:DD
ValidityFri, 21 Apr 2023 04:36:23 GMT - Thu, 20 Jul 2023 04:36:22 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 1.9 MB (1908743 bytes)
Hash e94a93406f772d2a32adfa9bd1911931
08fa0505dc9944d432aca9e3f9a73836d3b1b238
9ee8d4c624bc6fbf3d0b9aecad33c0d73a7ac06dc09a929f1989c3d080260057
GET /movies/daft_main_mouthshot_06_10.mp4 HTTP/1.1
Host: www.daftporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Referer: https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
server: nginx/1.22.1
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: video/mp4
content-length: 13731978
last-modified: Wed, 06 Sep 2017 10:26:21 GMT
etag: "59afcd4d-d1888a"
content-range: bytes 0-13731977/13731978
X-Firefox-Spdy: h2
video.ktkjmp.com/adsbygoogle.js
104.18.62.235200 OK 16 B URL GET HTTP/2 video.ktkjmp.com/adsbygoogle.js
IP 104.18.62.235:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectvideo.ktkjmp.com
FingerprintD6:F4:DC:36:6D:BC:E5:36:F7:AC:71:BE:47:40:06:E8:12:9F:23:EC
ValidityMon, 01 Aug 2022 00:00:00 GMT - Tue, 01 Aug 2023 23:59:59 GMT
Hash 3d7f7a60216d40dea48e495fef6903c9
fecdb5184f55cf012563d78940eb97b10b9cc99b
96d83ac9f20fc0b88404f307f135e212642e02d6ea295c96b28aed0d771a224f
GET /adsbygoogle.js HTTP/1.1
Host: video.ktkjmp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: application/javascript
content-length: 16
x-amz-id-2: vyeGnGdlTyojmOYSIUGVlkgbVgeOOGCLIaQn1JUXSWf+3Pefo3BQFYiXbFyiqHYw9AcYvZvBFpo=
x-amz-request-id: 5JAJ7X857BTA65NJ
last-modified: Thu, 10 Mar 2022 13:52:07 GMT
etag: "3d7f7a60216d40dea48e495fef6903c9"
x-amz-meta-s3cmd-attrs: atime:1646920284/ctime:1646920283/gid:20/gname:staff/md5:3d7f7a60216d40dea48e495fef6903c9/mode:33188/mtime:1646920283/uid:501/uname:mikhailchubar
x-amz-version-id: eIgLIBoMMcsEXtxOH6UDjWyfAquRpkIG
access-control-allow-origin: https://creative.xlivrdr.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: HIT
age: 5066
expires: Fri, 09 Jun 2023 17:05:29 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45e8b8470b49-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
limurol.com/ssp/req/1916107/?pb=6506b6ec4309df140159d588f2bd321d1686330329&psp=qNrndY3sEnwU2c_R-qywl--G_lJtbj4yS1-Z1qrzNPaTsXzQ_diHlqUpXeZXQYV2-XD6i2YzyaqdCPVFkHHhtk5s9GdZqhEaLHf-k07RNYNjofJ6eHcCCtl272Gg18o8W-b81VS8fBWHwrQOS2kFxAsROPXz7eI9X2_QiY9pMDs1L85Xx_kfSA5vwzLLkbQ9CYbGpwW-h9BeXyPy6JaYf9i3rtLmCywz9-h2euVtgm_koytuYyTFOhWoUGhKSX7jwNdNWZDkxH98wMP-JbwwnFgXWLNFWsQ7ikIJqFEb6g6RI7InTuyc5daMnvwFKGUa9bBFa1N-eNq27IzcNP18ewMHPWUit3OzTSSWT8WOWRopehreaVTI1_rtQ99sJWElYWDwevd__o6UONkypn-Y2WXN_dZW9D8O9CCfGQa2UD4qGFNP5fvDkjEpNh-373ILvH7FmrHeTgkWpUGBYA3gRzkf8loyAdFQl8_PdmuxUPzs8B5JzLetahmdNf-SPD-vLm52H8YTuUZvL2dye1zS2tmdF0KcuHD8oVemcjMvq4NGNwQExTH03BSyyaBdTHjGgIBPBW2wWt5rbtvDbmtAr7AnUzNslZSR51IHCHOHcMtfegXODn625xCQJFnXvsisuDQxQYo8FAWhFi_OKNrd_CYGcDCWPdHValdT2xNnqpuaw0tLiQspQl8RdmOnQwS-zb66LVcbEP6PWDq-f50otI3_wfKKqxwPcd681Ox26DKhVPm9h7RMsiwO_ZlQ_0z4FKqQAcoMD134fDuFMJ9A8-eoRWq6u9rkMSVhXINTLlqmO237M5Pa-4XGNd-rlZUe2vkRg3NSy88mGU2-_FKirQgXIPiW3CmR_-BnTQmYTQEwDdP40fEaolEr5d1JhNzN-c0YQ5yRbQOUXUv0tutuwV7Usj3h7QvFJhZVLnzC1lsyVMPZiI6dJFH0mAWl2Q==&sp=1&cb=_clqlo5kwy6132eupy1wir1&nojs=0&ix=0&abvar=0&febuild=1.0.116&t=0&x=1280&y=1024&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24
62.122.171.6200 OK 7 B URL GET HTTP/2 limurol.com/ssp/req/1916107/?pb=6506b6ec4309df140159d588f2bd321d1686330329&psp=qNrndY3sEnwU2c_R-qywl--G_lJtbj4yS1-Z1qrzNPaTsXzQ_diHlqUpXeZXQYV2-XD6i2YzyaqdCPVFkHHhtk5s9GdZqhEaLHf-k07RNYNjofJ6eHcCCtl272Gg18o8W-b81VS8fBWHwrQOS2kFxAsROPXz7eI9X2_QiY9pMDs1L85Xx_kfSA5vwzLLkbQ9CYbGpwW-h9BeXyPy6JaYf9i3rtLmCywz9-h2euVtgm_koytuYyTFOhWoUGhKSX7jwNdNWZDkxH98wMP-JbwwnFgXWLNFWsQ7ikIJqFEb6g6RI7InTuyc5daMnvwFKGUa9bBFa1N-eNq27IzcNP18ewMHPWUit3OzTSSWT8WOWRopehreaVTI1_rtQ99sJWElYWDwevd__o6UONkypn-Y2WXN_dZW9D8O9CCfGQa2UD4qGFNP5fvDkjEpNh-373ILvH7FmrHeTgkWpUGBYA3gRzkf8loyAdFQl8_PdmuxUPzs8B5JzLetahmdNf-SPD-vLm52H8YTuUZvL2dye1zS2tmdF0KcuHD8oVemcjMvq4NGNwQExTH03BSyyaBdTHjGgIBPBW2wWt5rbtvDbmtAr7AnUzNslZSR51IHCHOHcMtfegXODn625xCQJFnXvsisuDQxQYo8FAWhFi_OKNrd_CYGcDCWPdHValdT2xNnqpuaw0tLiQspQl8RdmOnQwS-zb66LVcbEP6PWDq-f50otI3_wfKKqxwPcd681Ox26DKhVPm9h7RMsiwO_ZlQ_0z4FKqQAcoMD134fDuFMJ9A8-eoRWq6u9rkMSVhXINTLlqmO237M5Pa-4XGNd-rlZUe2vkRg3NSy88mGU2-_FKirQgXIPiW3CmR_-BnTQmYTQEwDdP40fEaolEr5d1JhNzN-c0YQ5yRbQOUXUv0tutuwV7Usj3h7QvFJhZVLnzC1lsyVMPZiI6dJFH0mAWl2Q==&sp=1&cb=_clqlo5kwy6132eupy1wir1&nojs=0&ix=0&abvar=0&febuild=1.0.116&t=0&x=1280&y=1024&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24
IP 62.122.171.6:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerBuypass AS-983163327
Subject
FingerprintB4:97:5A:E0:89:F4:2A:6B:FF:80:77:49:35:55:95:AD:70:3B:79:53
ValidityWed, 31 May 2023 15:31:47 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type ASCII text, with no line terminators
Hash a97eb6fbe6f13b601d5d48c0eba8baae
736efb938caf3d0edec406932ada889f1a4f2268
a04bf061f53e0011fd2f43bdf081526344f003c50146c88c42c2d95ef22c1821
GET /ssp/req/1916107/?pb=6506b6ec4309df140159d588f2bd321d1686330329&psp=qNrndY3sEnwU2c_R-qywl--G_lJtbj4yS1-Z1qrzNPaTsXzQ_diHlqUpXeZXQYV2-XD6i2YzyaqdCPVFkHHhtk5s9GdZqhEaLHf-k07RNYNjofJ6eHcCCtl272Gg18o8W-b81VS8fBWHwrQOS2kFxAsROPXz7eI9X2_QiY9pMDs1L85Xx_kfSA5vwzLLkbQ9CYbGpwW-h9BeXyPy6JaYf9i3rtLmCywz9-h2euVtgm_koytuYyTFOhWoUGhKSX7jwNdNWZDkxH98wMP-JbwwnFgXWLNFWsQ7ikIJqFEb6g6RI7InTuyc5daMnvwFKGUa9bBFa1N-eNq27IzcNP18ewMHPWUit3OzTSSWT8WOWRopehreaVTI1_rtQ99sJWElYWDwevd__o6UONkypn-Y2WXN_dZW9D8O9CCfGQa2UD4qGFNP5fvDkjEpNh-373ILvH7FmrHeTgkWpUGBYA3gRzkf8loyAdFQl8_PdmuxUPzs8B5JzLetahmdNf-SPD-vLm52H8YTuUZvL2dye1zS2tmdF0KcuHD8oVemcjMvq4NGNwQExTH03BSyyaBdTHjGgIBPBW2wWt5rbtvDbmtAr7AnUzNslZSR51IHCHOHcMtfegXODn625xCQJFnXvsisuDQxQYo8FAWhFi_OKNrd_CYGcDCWPdHValdT2xNnqpuaw0tLiQspQl8RdmOnQwS-zb66LVcbEP6PWDq-f50otI3_wfKKqxwPcd681Ox26DKhVPm9h7RMsiwO_ZlQ_0z4FKqQAcoMD134fDuFMJ9A8-eoRWq6u9rkMSVhXINTLlqmO237M5Pa-4XGNd-rlZUe2vkRg3NSy88mGU2-_FKirQgXIPiW3CmR_-BnTQmYTQEwDdP40fEaolEr5d1JhNzN-c0YQ5yRbQOUXUv0tutuwV7Usj3h7QvFJhZVLnzC1lsyVMPZiI6dJFH0mAWl2Q==&sp=1&cb=_clqlo5kwy6132eupy1wir1&nojs=0&ix=0&abvar=0&febuild=1.0.116&t=0&x=1280&y=1024&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24 HTTP/1.1
Host: limurol.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.daftporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: text/javascript
content-length: 7
x-route-id: ssp.bet
set-cookie: UID=2306091005bf59208c9f69495e88a1d02b89; Path=/; Expires=Sat, 08 Jun 2024 15:05:29 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
limurol.com/ssp/req/1916107/?pb=6506b6ec4309df140159d588f2bd321d1686330329&psp=qNrndY3sEnwU2c_R-qywl--G_lJtbj4yS1-Z1qrzNPaTsXzQ_diHlqUpXeZXQYV2-XD6i2YzyaqdCPVFkHHhtk5s9GdZqhEaLHf-k07RNYNjofJ6eHcCCtl272Gg18o8W-b81VS8fBWHwrQOS2kFxAsROPXz7eI9X2_QiY9pMDs1L85Xx_kfSA5vwzLLkbQ9CYbGpwW-h9BeXyPy6JaYf9i3rtLmCywz9-h2euVtgm_koytuYyTFOhWoUGhKSX7jwNdNWZDkxH98wMP-JbwwnFgXWLNFWsQ7ikIJqFEb6g6RI7InTuyc5daMnvwFKGUa9bBFa1N-eNq27IzcNP18ewMHPWUit3OzTSSWT8WOWRopehreaVTI1_rtQ99sJWElYWDwevd__o6UONkypn-Y2WXN_dZW9D8O9CCfGQa2UD4qGFNP5fvDkjEpNh-373ILvH7FmrHeTgkWpUGBYA3gRzkf8loyAdFQl8_PdmuxUPzs8B5JzLetahmdNf-SPD-vLm52H8YTuUZvL2dye1zS2tmdF0KcuHD8oVemcjMvq4NGNwQExTH03BSyyaBdTHjGgIBPBW2wWt5rbtvDbmtAr7AnUzNslZSR51IHCHOHcMtfegXODn625xCQJFnXvsisuDQxQYo8FAWhFi_OKNrd_CYGcDCWPdHValdT2xNnqpuaw0tLiQspQl8RdmOnQwS-zb66LVcbEP6PWDq-f50otI3_wfKKqxwPcd681Ox26DKhVPm9h7RMsiwO_ZlQ_0z4FKqQAcoMD134fDuFMJ9A8-eoRWq6u9rkMSVhXINTLlqmO237M5Pa-4XGNd-rlZUe2vkRg3NSy88mGU2-_FKirQgXIPiW3CmR_-BnTQmYTQEwDdP40fEaolEr5d1JhNzN-c0YQ5yRbQOUXUv0tutuwV7Usj3h7QvFJhZVLnzC1lsyVMPZiI6dJFH0mAWl2Q==&sp=1&cb=_clqlo5kwy6132eupy1wir1&nojs=0&ix=0&abvar=0&febuild=1.0.116&t=0&x=1280&y=1024&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24
62.122.171.6200 OK 7 B URL GET HTTP/2 limurol.com/ssp/req/1916107/?pb=6506b6ec4309df140159d588f2bd321d1686330329&psp=qNrndY3sEnwU2c_R-qywl--G_lJtbj4yS1-Z1qrzNPaTsXzQ_diHlqUpXeZXQYV2-XD6i2YzyaqdCPVFkHHhtk5s9GdZqhEaLHf-k07RNYNjofJ6eHcCCtl272Gg18o8W-b81VS8fBWHwrQOS2kFxAsROPXz7eI9X2_QiY9pMDs1L85Xx_kfSA5vwzLLkbQ9CYbGpwW-h9BeXyPy6JaYf9i3rtLmCywz9-h2euVtgm_koytuYyTFOhWoUGhKSX7jwNdNWZDkxH98wMP-JbwwnFgXWLNFWsQ7ikIJqFEb6g6RI7InTuyc5daMnvwFKGUa9bBFa1N-eNq27IzcNP18ewMHPWUit3OzTSSWT8WOWRopehreaVTI1_rtQ99sJWElYWDwevd__o6UONkypn-Y2WXN_dZW9D8O9CCfGQa2UD4qGFNP5fvDkjEpNh-373ILvH7FmrHeTgkWpUGBYA3gRzkf8loyAdFQl8_PdmuxUPzs8B5JzLetahmdNf-SPD-vLm52H8YTuUZvL2dye1zS2tmdF0KcuHD8oVemcjMvq4NGNwQExTH03BSyyaBdTHjGgIBPBW2wWt5rbtvDbmtAr7AnUzNslZSR51IHCHOHcMtfegXODn625xCQJFnXvsisuDQxQYo8FAWhFi_OKNrd_CYGcDCWPdHValdT2xNnqpuaw0tLiQspQl8RdmOnQwS-zb66LVcbEP6PWDq-f50otI3_wfKKqxwPcd681Ox26DKhVPm9h7RMsiwO_ZlQ_0z4FKqQAcoMD134fDuFMJ9A8-eoRWq6u9rkMSVhXINTLlqmO237M5Pa-4XGNd-rlZUe2vkRg3NSy88mGU2-_FKirQgXIPiW3CmR_-BnTQmYTQEwDdP40fEaolEr5d1JhNzN-c0YQ5yRbQOUXUv0tutuwV7Usj3h7QvFJhZVLnzC1lsyVMPZiI6dJFH0mAWl2Q==&sp=1&cb=_clqlo5kwy6132eupy1wir1&nojs=0&ix=0&abvar=0&febuild=1.0.116&t=0&x=1280&y=1024&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24
IP 62.122.171.6:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerBuypass AS-983163327
Subject
FingerprintB4:97:5A:E0:89:F4:2A:6B:FF:80:77:49:35:55:95:AD:70:3B:79:53
ValidityWed, 31 May 2023 15:31:47 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type ASCII text, with no line terminators
Hash a97eb6fbe6f13b601d5d48c0eba8baae
736efb938caf3d0edec406932ada889f1a4f2268
a04bf061f53e0011fd2f43bdf081526344f003c50146c88c42c2d95ef22c1821
GET /ssp/req/1916107/?pb=6506b6ec4309df140159d588f2bd321d1686330329&psp=qNrndY3sEnwU2c_R-qywl--G_lJtbj4yS1-Z1qrzNPaTsXzQ_diHlqUpXeZXQYV2-XD6i2YzyaqdCPVFkHHhtk5s9GdZqhEaLHf-k07RNYNjofJ6eHcCCtl272Gg18o8W-b81VS8fBWHwrQOS2kFxAsROPXz7eI9X2_QiY9pMDs1L85Xx_kfSA5vwzLLkbQ9CYbGpwW-h9BeXyPy6JaYf9i3rtLmCywz9-h2euVtgm_koytuYyTFOhWoUGhKSX7jwNdNWZDkxH98wMP-JbwwnFgXWLNFWsQ7ikIJqFEb6g6RI7InTuyc5daMnvwFKGUa9bBFa1N-eNq27IzcNP18ewMHPWUit3OzTSSWT8WOWRopehreaVTI1_rtQ99sJWElYWDwevd__o6UONkypn-Y2WXN_dZW9D8O9CCfGQa2UD4qGFNP5fvDkjEpNh-373ILvH7FmrHeTgkWpUGBYA3gRzkf8loyAdFQl8_PdmuxUPzs8B5JzLetahmdNf-SPD-vLm52H8YTuUZvL2dye1zS2tmdF0KcuHD8oVemcjMvq4NGNwQExTH03BSyyaBdTHjGgIBPBW2wWt5rbtvDbmtAr7AnUzNslZSR51IHCHOHcMtfegXODn625xCQJFnXvsisuDQxQYo8FAWhFi_OKNrd_CYGcDCWPdHValdT2xNnqpuaw0tLiQspQl8RdmOnQwS-zb66LVcbEP6PWDq-f50otI3_wfKKqxwPcd681Ox26DKhVPm9h7RMsiwO_ZlQ_0z4FKqQAcoMD134fDuFMJ9A8-eoRWq6u9rkMSVhXINTLlqmO237M5Pa-4XGNd-rlZUe2vkRg3NSy88mGU2-_FKirQgXIPiW3CmR_-BnTQmYTQEwDdP40fEaolEr5d1JhNzN-c0YQ5yRbQOUXUv0tutuwV7Usj3h7QvFJhZVLnzC1lsyVMPZiI6dJFH0mAWl2Q==&sp=1&cb=_clqlo5kwy6132eupy1wir1&nojs=0&ix=0&abvar=0&febuild=1.0.116&t=0&x=1280&y=1024&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24 HTTP/1.1
Host: limurol.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.daftporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: text/javascript
content-length: 7
x-route-id: ssp.bet
set-cookie: UID=23060910054ab772c96e174a7b8098c72978; Path=/; Expires=Sat, 08 Jun 2024 15:05:29 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
www.daftporn.com/favicon.ico
37.128.144.49200 OK 1.4 kB URL GET HTTP/2 www.daftporn.com/favicon.ico
IP 37.128.144.49:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerLet's Encrypt
Subjectdaftporn.com
FingerprintDF:6E:A1:AB:14:B0:0C:D7:87:48:15:B3:5C:B6:9D:8E:5B:E2:29:DD
ValidityFri, 21 Apr 2023 04:36:23 GMT - Thu, 20 Jul 2023 04:36:22 GMT
File type MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel\012- data
Hash d3e6d5b0ff8ee02f1d3ca68105d4e6c7
2209883ad4f57c3ef001f5bd9591a332485665c9
cdf1c0792c960d0f0cd6850bd89ee6b2935ba7124296ff508f3517ee8e4ae46e
GET /favicon.ico HTTP/1.1
Host: www.daftporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Cookie: _ga_2ZYFDQBKG9=GS1.1.1686323128.1.0.1686323128.0.0.0; _ga=GA1.1.868677559.1686323129; __PPU___PPU_SESSION_URL=%2Fextreme-videos%2FUnannounced-mouthshot.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.1
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: image/vnd.microsoft.icon
content-length: 1406
last-modified: Tue, 05 Sep 2017 15:42:36 GMT
etag: "59aec5ec-57e"
accept-ranges: bytes
X-Firefox-Spdy: h2
img.strpst.com/thumbs/1686322950/112263213
104.18.63.132200 OK 45 kB URL GET HTTP/2 img.strpst.com/thumbs/1686322950/112263213
IP 104.18.63.132:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectimg.strpst.com
FingerprintED:62:74:FE:E4:F5:89:43:B3:49:55:FE:18:19:0D:29:24:96:75:BC
ValidityMon, 03 Apr 2023 00:00:00 GMT - Tue, 02 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 640x360, components 3\012- data
Hash e9ae3307ccc7c5f3a439622c8032ee9c
4c2953659448029cba0d9d7c14d6bfdbc21246e2
bc67b2827e534ad7c9b2d6ec0bbef33d199ac524615de3ccab8f3205b36e4ab9
GET /thumbs/1686322950/112263213 HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: image/jpeg
content-length: 45079
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: public, max-age=1800, s-maxage=1800, stale-while-revalidate=1, max-stale=1, stale-if-error=1
cf-bgj: h2pri
etag: "e9ae3307ccc7c5f3a439622c8032ee9c"
last-modified: Fri, 09 Jun 2023 15:03:15 GMT
cf-cache-status: HIT
age: 107
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45e91cc2b51d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
104.18.59.150200 OK 41 kB URL GET HTTP/3 creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
IP 104.18.59.150:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerCloudflare, Inc.
Subjectxlivrdr.com
FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f0a3c4e17235ffa9df63be958c111bc6
3f73262575213a33242fba4a948fcce35e73a331
df53a7d4769878b8ca580bf893c774ac47e50a3bddbf83fc4270731988a026ed
GET /widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767 HTTP/1.1
Host: creative.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.daftporn.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: text/html
last-modified: Wed, 07 Jun 2023 12:44:45 GMT
expires: Fri, 09 Jun 2023 15:05:31 GMT
cache-control: max-age=10
strict-transport-security: max-age=15768000
pragma: public
report-to: { "endpoints":[{ "url": "https://go.stripchat.com/report" }], "group": "default", "max_age": 1048576 }
cf-cache-status: HIT
set-cookie: __cflb=02DiuDFRFiBZBvMSLtr5q6uSw62gLvY51BAs3hmXh2f6c; SameSite=None; Secure; path=/; expires=Sat, 10-Jun-23 15:05:29 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45e60abab4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
go.xlivrdr.com/api/models?tag=girls%2Fyoung&forceClient=1&stripcashR=0&limit=1&usePreroll
104.18.59.150200 OK 43 kB URL GET HTTP/3 go.xlivrdr.com/api/models?tag=girls%2Fyoung&forceClient=1&stripcashR=0&limit=1&usePreroll
IP 104.18.59.150:443
Requested by https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Certificate IssuerCloudflare, Inc.
Subjectxlivrdr.com
FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (1757), with no line terminators
Hash 006bec0cd1b6439778c093f3ad267b33
2ac8f9225a2fa1f59e97d1d6e31f86b1359c81db
d030f754259bca0e1e1a3f6ef8f1a9720e8ee7ef1433317b433cfedddeb49b58
GET /api/models?tag=girls%2Fyoung&forceClient=1&stripcashR=0&limit=1&usePreroll HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Cookie: __cflb=02DiuDFRFiBZBvMSLtr4uyFiEegrSgDACCU82WkFUcuxQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: application/json
access-control-allow-origin: https://creative.xlivrdr.com
access-control-allow-credentials: true
vary: Origin, Accept-Encoding
last-modified: Fri, 09 Jun 2023 10:16:53 GMT
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 7d4a45e99f3ab4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
go.xlivrdr.com/abc.gif?campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&smartpopId=6697&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767&modelsLimit=1&stripcashR=0&thumbType=default&thumbFit=cover&quality=original&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=1&segment=hls-newAPI&landing=Player&referrer=https%3A%2F%2Fwww.daftporn.com%2F&i=0&ib=0&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A752%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A586%2C%22duration%22%3A67%2C%22transferSize%22%3A1813%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A586%2C%22duration%22%3A84%2C%22transferSize%22%3A65917%7D%2C%7B%22type%22%3A%22first-contentful-paint%22%2C%22startTime%22%3A905%2C%22duration%22%3A0%7D%5D&mh=738531860
104.18.59.150200 OK 103 B URL GET HTTP/3 go.xlivrdr.com/abc.gif?campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&smartpopId=6697&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767&modelsLimit=1&stripcashR=0&thumbType=default&thumbFit=cover&quality=original&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=1&segment=hls-newAPI&landing=Player&referrer=https%3A%2F%2Fwww.daftporn.com%2F&i=0&ib=0&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A752%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A586%2C%22duration%22%3A67%2C%22transferSize%22%3A1813%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A586%2C%22duration%22%3A84%2C%22transferSize%22%3A65917%7D%2C%7B%22type%22%3A%22first-contentful-paint%22%2C%22startTime%22%3A905%2C%22duration%22%3A0%7D%5D&mh=738531860
IP 104.18.59.150:443
Requested by https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Certificate IssuerCloudflare, Inc.
Subjectxlivrdr.com
FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash 8c99886486b9a004383cb4df29011c43
d79ca4754481fc59598bc08fcdf354900918bffe
bda00b0f6892b1c6991e793b42654ad1807694e2ffabcbc4eb1399379737ef6c
GET /abc.gif?campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&smartpopId=6697&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767&modelsLimit=1&stripcashR=0&thumbType=default&thumbFit=cover&quality=original&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=1&segment=hls-newAPI&landing=Player&referrer=https%3A%2F%2Fwww.daftporn.com%2F&i=0&ib=0&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A752%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A586%2C%22duration%22%3A67%2C%22transferSize%22%3A1813%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A586%2C%22duration%22%3A84%2C%22transferSize%22%3A65917%7D%2C%7B%22type%22%3A%22first-contentful-paint%22%2C%22startTime%22%3A905%2C%22duration%22%3A0%7D%5D&mh=738531860 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Cookie: __cflb=02DiuDFRFiBZBvMSLtr4uyFiEegrSgDACCU82WkFUcuxQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:30 GMT
content-type: image/gif
content-length: 103
access-control-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7d4a45ea2fe7b4ed-OSL
alt-svc: h3=":443"; ma=86400
b-hls-08.doppiocdn.com/hls/93721974/93721974_init_z6Y4eat3DIyiVUqK.mp4
104.18.63.122200 OK 1.2 kB URL GET HTTP/2 b-hls-08.doppiocdn.com/hls/93721974/93721974_init_z6Y4eat3DIyiVUqK.mp4
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type ISO Media, MP4 Base Media v5 \012- data
Hash c6271f1849775766e96d98c1f0ae239e
1d5d5412d920b329c61eafa00a08baea26d0b353
3854ee4fd176b33906537c7bf973c04254995d4ff370fe064e0e51f98097b75a
GET /hls/93721974/93721974_init_z6Y4eat3DIyiVUqK.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Jun 2023 15:05:30 GMT
content-type: video/mp4
content-length: 1226
last-modified: Fri, 09 Jun 2023 14:56:44 GMT
etag: "64833dac-4ca"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 23
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45ebcd21b4f3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
b-hls-08.doppiocdn.com/hls/93721974/93721974_314_43EuUJyUgAmTTuw5_1686323120.mp4
104.18.63.122200 OK 273 kB URL GET HTTP/2 b-hls-08.doppiocdn.com/hls/93721974/93721974_314_43EuUJyUgAmTTuw5_1686323120.mp4
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
Size 273 kB (273183 bytes)
Hash 240daf4d726483da30d7c8222abc2d0b
12e773085b55e3d32d745748fbe315bc505e7c27
0995c2de0ea22ea1bb413f0255cddfb10f6efc8c47d3a9fbd38d252738e22092
GET /hls/93721974/93721974_314_43EuUJyUgAmTTuw5_1686323120.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Jun 2023 15:05:30 GMT
content-type: video/mp4
content-length: 273183
last-modified: Fri, 09 Jun 2023 15:05:22 GMT
etag: "64833fb2-42b1f"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 7
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45ebed63b4f3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
go.xlivrdr.com/thumbs/view
104.18.59.150200 OK 367 kB URL POST HTTP/3 go.xlivrdr.com/thumbs/view
IP 104.18.59.150:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectxlivrdr.com
FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Size 367 kB (366651 bytes)
Hash dbe39e8bc5185bf802ec1d6fa312ccb1
77a2c4286f5e324d321681f414d0b1db69c80e18
d94e1841b55c8ae5dd97e0909398c828248608e8c9f6271728c501e2f7d450c1
POST /thumbs/view HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 83
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:30 GMT
content-type: application/json
access-control-allow-origin: *
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDFRFiBZBvMSLtrthB7vPWzPQsdr9tzCYpJ5sfE9J; SameSite=None; Secure; path=/; expires=Sat, 10-Jun-23 15:05:30 GMT; HttpOnly
server: cloudflare
cf-ray: 7d4a45eac896b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
b-hls-11.doppiocdn.com/hls/115662490/115662490_480p_init_ywbqEC6MTEyxbmvz.mp4
104.18.63.122200 OK 1.2 kB URL GET HTTP/3 b-hls-11.doppiocdn.com/hls/115662490/115662490_480p_init_ywbqEC6MTEyxbmvz.mp4
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type ISO Media, MP4 Base Media v5 \012- data
Hash c8a79c758125f0fbfb25db8cfc8ae755
194edcea12e0744ebd59b454cf283842266ebb8e
f9cc739485b057a3fca9d6d1c0e31850592ebeda92603ac53451ef3e3b43c45f
GET /hls/115662490/115662490_480p_init_ywbqEC6MTEyxbmvz.mp4 HTTP/1.1
Host: b-hls-11.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:30 GMT
content-type: video/mp4
content-length: 1217
last-modified: Fri, 09 Jun 2023 14:53:40 GMT
etag: "64833cf4-4c1"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 37
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45ed6eec0b69-OSL
alt-svc: h3=":443"; ma=86400
b-hls-11.doppiocdn.com/hls/115662490/115662490_480p_350_NpdopTCtgcKkdyQ4_1686323121.mp4
104.18.63.122200 OK 319 kB URL GET HTTP/3 b-hls-11.doppiocdn.com/hls/115662490/115662490_480p_350_NpdopTCtgcKkdyQ4_1686323121.mp4
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
Size 319 kB (319084 bytes)
Hash 3837d3dbd545cd52b7d44ffb15195e12
aa4b41050e68983777e77c639515d75e4687bc99
81271988406de9e562d63d9b2f8d304c93b7b503804afdcc66ca4db9eccdca76
GET /hls/115662490/115662490_480p_350_NpdopTCtgcKkdyQ4_1686323121.mp4 HTTP/1.1
Host: b-hls-11.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:30 GMT
content-type: video/mp4
content-length: 319084
last-modified: Fri, 09 Jun 2023 15:05:23 GMT
etag: "64833fb3-4de6c"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 4
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45ed8f000b69-OSL
alt-svc: h3=":443"; ma=86400
b-hls-11.doppiocdn.com/hls/115662490/115662490_480p_351_BavpE2qFkTDgPMKJ_1686323123.mp4
104.18.63.122200 OK 316 kB URL GET HTTP/3 b-hls-11.doppiocdn.com/hls/115662490/115662490_480p_351_BavpE2qFkTDgPMKJ_1686323123.mp4
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
Size 316 kB (316196 bytes)
Hash 430708f690b92af46bc641af0d20ce4a
4a8dba555e78594e0f570745f6a58e8ecdf096b5
cbbe1d6212baaaa3fee88092d1c5696c0b028709bec4c3d0007f7611f8636616
GET /hls/115662490/115662490_480p_351_BavpE2qFkTDgPMKJ_1686323123.mp4 HTTP/1.1
Host: b-hls-11.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:30 GMT
content-type: video/mp4
content-length: 316196
last-modified: Fri, 09 Jun 2023 15:05:25 GMT
etag: "64833fb5-4d324"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 4
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45edef460b69-OSL
alt-svc: h3=":443"; ma=86400
go.xlivrdr.com/config?url=https%3A%2F%2Fcreative.xlivrdr.com%2Fwidgets%2Fv4%2FUniversal%2F%3FactionButtonPlacement%3Dbottom%26autoplay%3Dall%26autoplayForce%3D1%26campaignId%3DheaderWidget%26domain%3Dstripchat%26hideButtonOnSmallSpots%3D0%26hideModelNameOnSmallSpots%3D0%26hideTitleOnSmallSpots%3D0%26isXhDesign%3D0%26showButton%3D0%26showLiveBadge%3D1%26showModelName%3D1%26showTitle%3D0%26sound%3Doff%26tag%3Dgirls%26thumbSizeKey%3Dbig%26trackOff%3D1%26userId%3D5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
104.18.59.150200 OK 6.5 kB URL GET HTTP/3 go.xlivrdr.com/config?url=https%3A%2F%2Fcreative.xlivrdr.com%2Fwidgets%2Fv4%2FUniversal%2F%3FactionButtonPlacement%3Dbottom%26autoplay%3Dall%26autoplayForce%3D1%26campaignId%3DheaderWidget%26domain%3Dstripchat%26hideButtonOnSmallSpots%3D0%26hideModelNameOnSmallSpots%3D0%26hideTitleOnSmallSpots%3D0%26isXhDesign%3D0%26showButton%3D0%26showLiveBadge%3D1%26showModelName%3D1%26showTitle%3D0%26sound%3Doff%26tag%3Dgirls%26thumbSizeKey%3Dbig%26trackOff%3D1%26userId%3D5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
IP 104.18.59.150:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectxlivrdr.com
FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (8506), with no line terminators
Hash db3ec38e9c55a66b7c32137b4dee210c
b4c6084d8a721052687a0707f1928a6e13087d88
ad2ca344f3d91aab787be3536a3a3f06acaf4916599dba52f523353b9632e48c
GET /config?url=https%3A%2F%2Fcreative.xlivrdr.com%2Fwidgets%2Fv4%2FUniversal%2F%3FactionButtonPlacement%3Dbottom%26autoplay%3Dall%26autoplayForce%3D1%26campaignId%3DheaderWidget%26domain%3Dstripchat%26hideButtonOnSmallSpots%3D0%26hideModelNameOnSmallSpots%3D0%26hideTitleOnSmallSpots%3D0%26isXhDesign%3D0%26showButton%3D0%26showLiveBadge%3D1%26showModelName%3D1%26showTitle%3D0%26sound%3Doff%26tag%3Dgirls%26thumbSizeKey%3Dbig%26trackOff%3D1%26userId%3D5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: application/json
access-control-allow-origin: *
last-modified: Fri, 09 Jun 2023 14:56:23 GMT
cf-cache-status: HIT
age: 185
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45e74c7eb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
creative.xlivrdr.com/widgets/Player/main.5de9ad47d832a0068877.js
104.18.59.150200 OK 230 kB URL GET HTTP/3 creative.xlivrdr.com/widgets/Player/main.5de9ad47d832a0068877.js
IP 104.18.59.150:443
Requested by https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Certificate IssuerCloudflare, Inc.
Subjectxlivrdr.com
FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Size 230 kB (229583 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /widgets/Player/main.5de9ad47d832a0068877.js HTTP/1.1
Host: creative.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Cookie: __cflb=02DiuDFRFiBZBvMSLtr5q6uSw62gLvY51BAs3hmXh2f6c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 07 Jun 2023 12:47:37 GMT
etag: W/"64807c69-380cf"
expires: Fri, 09 Jun 2023 15:05:30 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45e77cbeb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
b-hls-11.doppiocdn.com/hls/115662490/115662490_480p.m3u8
104.18.63.122200 OK 730 B URL GET HTTP/3 b-hls-11.doppiocdn.com/hls/115662490/115662490_480p.m3u8
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (748), with no line terminators
Hash 829e7cc9830827390e59cf2992f5fbbb
a5af6715058ce08714227eb535227c2c391bc8ff
1686e5c4f6ccc0a07db87f917f8f7a36e9a048fa7b90b755a7e6bc192219da2f
GET /hls/115662490/115662490_480p.m3u8 HTTP/1.1
Host: b-hls-11.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:34 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Fri, 09 Jun 2023 15:05:33 GMT
x-proxy-cache: EXPIRED
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 7d4a46061d860b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
b-hls-08.doppiocdn.com/hls/93721974/93721974.m3u8
104.18.63.122200 OK 702 B URL GET HTTP/3 b-hls-08.doppiocdn.com/hls/93721974/93721974.m3u8
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (720), with no line terminators
Hash 9fb918221fbe96ead9f9ed14f3f070fc
efe8183cadfd305382455f40a55f7db226d13c7b
58133c5b03678466f531d4a489339dbe0dcc0a6af0b9e440a6f1ee317da78397
GET /hls/93721974/93721974.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:36 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Fri, 09 Jun 2023 15:05:34 GMT
x-proxy-cache: EXPIRED
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 7d4a46132a9b0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
b-hls-08.doppiocdn.com/hls/93721974/93721974.m3u8
104.18.63.122200 OK 702 B URL GET HTTP/3 b-hls-08.doppiocdn.com/hls/93721974/93721974.m3u8
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (720), with no line terminators
Hash 6fdeb9cc5db26fd31aa707fd341447fa
4a996bbe073005418fbcd067b633594ec6121292
05572c00b28e9bd2e0bbc657cd8f309ce4e5b23fac46138ab80d390cdb6bbe90
GET /hls/93721974/93721974.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:40 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Fri, 09 Jun 2023 15:05:38 GMT
x-proxy-cache: EXPIRED
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 7d4a462d9b740b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
go.xlviirdr.com/smartpop/117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2?userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
104.18.59.150302 Found 824 B URL GET HTTP/2 go.xlviirdr.com/smartpop/117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2?userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
IP 104.18.59.150:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerCloudflare, Inc.
Subjectxlviirdr.com
Fingerprint34:67:61:B2:84:83:30:FA:C5:86:BF:74:16:34:0B:20:58:A0:20:01
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smartpop/117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2?userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5 HTTP/1.1
Host: go.xlviirdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.daftporn.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 09 Jun 2023 15:05:29 GMT
content-length: 0
location: https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: DYNAMIC
set-cookie: _var=67531067.28767; Path=/; HttpOnly; SameSite=Strict
__cflb=02DiuDFRFiBZBvMSLtrtWS5dSf3dTPfP7v5xqPDjVmCjN; SameSite=None; Secure; path=/; expires=Sat, 10-Jun-23 15:05:29 GMT; HttpOnly
server: cloudflare
cf-ray: 7d4a45e48aadb50c-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
img.strpst.com/thumbs/1686323010/115662490
104.18.63.132200 OK 42 kB URL GET HTTP/3 img.strpst.com/thumbs/1686323010/115662490
IP 104.18.63.132:443
Requested by https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Certificate IssuerCloudflare, Inc.
Subjectimg.strpst.com
FingerprintED:62:74:FE:E4:F5:89:43:B3:49:55:FE:18:19:0D:29:24:96:75:BC
ValidityMon, 03 Apr 2023 00:00:00 GMT - Tue, 02 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 640x360, components 3\012- data
Hash 81d013ebf61758631636d1b91bd3902a
7abe08bfe80bc201ce4e8b5048d6db5ae9acc1df
300a821d5935ef3244ccdf10cd2564ed0aca07ef7c711885a2663f5bfe8fba62
GET /thumbs/1686323010/115662490 HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: image/jpeg
content-length: 42023
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: public, max-age=1800, s-maxage=1800, stale-while-revalidate=1, max-stale=1, stale-if-error=1
cf-bgj: h2pri
etag: "81d013ebf61758631636d1b91bd3902a"
last-modified: Fri, 09 Jun 2023 15:04:04 GMT
cf-cache-status: HIT
age: 55
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45ea299c0b02-OSL
alt-svc: h3=":443"; ma=86400
b-hls-08.doppiocdn.com/hls/93721974/93721974.m3u8
104.18.63.122200 OK 702 B URL GET HTTP/3 b-hls-08.doppiocdn.com/hls/93721974/93721974.m3u8
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (720), with no line terminators
Hash eff7350186953a9cc2391b926f77f74e
263521795f5a5ff28ee18dd4bcda95489a43e393
e0954f705a03ff522e659f5cb918e05588041b6acf246626549cdab16c90fbb7
GET /hls/93721974/93721974.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:38 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Fri, 09 Jun 2023 15:05:36 GMT
x-proxy-cache: EXPIRED
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 7d4a46206f740b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
godpvqnszo.com/get/1916107?zoneid=1916107&jp=_cl19vjb42o1bs9zqleh2q1&nojs=0&ix=0&abvar=0&febuild=1.0.116&t=0&x=1280&y=1024&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=1&cid=110514872541215
62.122.171.6200 OK 4.2 kB URL GET HTTP/2 godpvqnszo.com/get/1916107?zoneid=1916107&jp=_cl19vjb42o1bs9zqleh2q1&nojs=0&ix=0&abvar=0&febuild=1.0.116&t=0&x=1280&y=1024&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=1&cid=110514872541215
IP 62.122.171.6:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerBuypass AS-983163327
Subject
FingerprintEF:B4:33:E0:27:57:87:63:7C:EA:75:9E:F0:07:FE:B0:CD:03:EF:39
ValidityWed, 31 May 2023 13:05:56 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type ASCII text, with very long lines (4544), with no line terminators
Hash edf0ddcb8e2c03459c4db90a2cea54e6
cd0a94fd622616460f02330212f51134429f1597
9c9740f5c358d95d9bef19c6fe4112aed39202b49557d4a721d17fd29a1d7ddf
GET /get/1916107?zoneid=1916107&jp=_cl19vjb42o1bs9zqleh2q1&nojs=0&ix=0&abvar=0&febuild=1.0.116&t=0&x=1280&y=1024&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=1&cid=110514872541215 HTTP/1.1
Host: godpvqnszo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.daftporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2306091005b0a909d487624124b2bc1fc543; Path=/; Expires=Sat, 08 Jun 2024 15:05:29 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
b-hls-08.doppiocdn.com/hls/93721974/93721974.m3u8
104.18.63.122200 OK 702 B URL GET HTTP/3 b-hls-08.doppiocdn.com/hls/93721974/93721974.m3u8
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (720), with no line terminators
Hash 2d431a65fe0d010017a0135885f91263
a271105ffe27e32670ee59ab2a1da2cd20c016f3
0061b679a42829bfd74500a0378d849a31000cf7d296f65b1c48b4689e1ea4bd
GET /hls/93721974/93721974.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:34 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Fri, 09 Jun 2023 15:05:32 GMT
x-proxy-cache: EXPIRED
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 7d4a4605ed600b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
b-hls-11.doppiocdn.com/hls/115662490/115662490_480p.m3u8
104.18.63.122200 OK 730 B URL GET HTTP/3 b-hls-11.doppiocdn.com/hls/115662490/115662490_480p.m3u8
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (748), with no line terminators
Hash fa20bf3b8feebfe3f4a9e6f981b7b904
7f8b61b084a0c8c112cbb051b1c2e67f8e2ddaa4
db07b447acdc410000eaa90c83a485a47f07b8980818e07c6ce6baac92df3ce5
GET /hls/115662490/115662490_480p.m3u8 HTTP/1.1
Host: b-hls-11.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:40 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Fri, 09 Jun 2023 15:05:39 GMT
x-proxy-cache: EXPIRED
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 7d4a462bc9da0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
godpvqnszo.com/aas/r45d/vki/1916107/758d70a8.js
62.122.171.6200 OK 84 kB URL GET HTTP/2 godpvqnszo.com/aas/r45d/vki/1916107/758d70a8.js
IP 62.122.171.6:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerBuypass AS-983163327
Subject
FingerprintEF:B4:33:E0:27:57:87:63:7C:EA:75:9E:F0:07:FE:B0:CD:03:EF:39
ValidityWed, 31 May 2023 13:05:56 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type ASCII text, with very long lines (64959)
Hash 0e0baa06d745ee15f8550b5dd0bb5bec
f624fb867e66b829e73177f4bdb724966073cc2e
8885c475c81f2323ecf558ad45f396f2ca20aa5fb26871349db68068bab04b66
GET /aas/r45d/vki/1916107/758d70a8.js HTTP/1.1
Host: godpvqnszo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.daftporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 15:05:28 GMT
content-type: application/javascript
last-modified: Thu, 08 Jun 2023 15:53:32 GMT
vary: Accept-Encoding
etag: W/"6481f97c-1497b"
x-js-ab1: current
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
creative.xlivrdr.com/widgets/v4/Universal/vendors~hls.9ec633be3d1b9138b261.js
104.18.59.150200 OK 178 kB URL GET HTTP/3 creative.xlivrdr.com/widgets/v4/Universal/vendors~hls.9ec633be3d1b9138b261.js
IP 104.18.59.150:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectxlivrdr.com
FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (45140)
Size 178 kB (177865 bytes)
Hash 8102f5a113bebb9adbfd7ce04362388b
03d77d1cb8d31b730254a76afced4f6154f9ecc7
29a025b7ae7794c89d85c8299963c7b2aef9f1d0bfc4bf5692c5c7a9276512ff
GET /widgets/v4/Universal/vendors~hls.9ec633be3d1b9138b261.js HTTP/1.1
Host: creative.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Cookie: __cflb=02DiuDFRFiBZBvMSLtr5q6uSw62gLvY51BAs3hmXh2f6c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:30 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 07 Jun 2023 12:47:37 GMT
etag: W/"64807c69-2b6c9"
expires: Fri, 09 Jun 2023 15:05:30 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 5
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45eac88db4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.googletagmanager.com/gtag/js?id=G-2ZYFDQBKG9&l=dataLayer&cx=c
142.250.74.168200 OK 232 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-2ZYFDQBKG9&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint73:BF:B0:D4:62:48:8E:EF:09:5F:00:57:95:98:82:16:BB:07:35:0C
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type ASCII text, with very long lines (3288)
Size 232 kB (231833 bytes)
Hash eb7d3ebb65cc9b44df5f32f50439fe94
45378d0578a0d646c2425f9489a1c746a3cb585e
48cf34cede02a93efff44e30cbc1429d6b15a92505dbccc8d5b3c8a234716029
GET /gtag/js?id=G-2ZYFDQBKG9&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.daftporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 09 Jun 2023 15:05:29 GMT
expires: Fri, 09 Jun 2023 15:05:29 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81399
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
creative.xlivrdr.com/widgets/v4/Universal/main.dd2ec6f4ef5d03277725.css
104.18.59.150200 OK 13 kB URL GET HTTP/3 creative.xlivrdr.com/widgets/v4/Universal/main.dd2ec6f4ef5d03277725.css
IP 104.18.59.150:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectxlivrdr.com
FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (13396), with no line terminators
Hash d55b785d72863fbb8425a36b7d675ec2
546cda15b6fb2a67ce1f102dc82eefb6f749f9c3
a4d09f6a50b6d96e7f22ab12f406dcf44be0d815105018cc5c7f1105fbf597f7
GET /widgets/v4/Universal/main.dd2ec6f4ef5d03277725.css HTTP/1.1
Host: creative.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: text/css
last-modified: Wed, 07 Jun 2023 12:47:37 GMT
etag: W/"64807c69-3454"
expires: Fri, 09 Jun 2023 15:05:28 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 2
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45e59a5bb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
creative.xlivrdr.com/widgets/v4/Universal/hls.4cfa5b780bfed20a8b26.js
104.18.59.150200 OK 61 B URL GET HTTP/3 creative.xlivrdr.com/widgets/v4/Universal/hls.4cfa5b780bfed20a8b26.js
IP 104.18.59.150:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectxlivrdr.com
FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 22f22b49cc901aa95826401f7ce0930c
6471abdd35ab6d511b67d73ad1375f1ee0f255de
0fae8b03858a764bad3e9af19bfc924ead5b9e25c760432c19e91cba3dff1cf3
GET /widgets/v4/Universal/hls.4cfa5b780bfed20a8b26.js HTTP/1.1
Host: creative.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Cookie: __cflb=02DiuDFRFiBZBvMSLtr5q6uSw62gLvY51BAs3hmXh2f6c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:30 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 07 Jun 2023 12:47:37 GMT
etag: W/"64807c69-3d"
expires: Fri, 09 Jun 2023 15:05:27 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 5
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45eac890b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
edge-hls.doppiocdn.com/hls/93721974/master/93721974.m3u8
104.18.63.122200 OK 220 B URL GET HTTP/2 edge-hls.doppiocdn.com/hls/93721974/master/93721974.m3u8
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with no line terminators
Hash 64904988d695dc9a37cd1c85a57eac94
8472f8c23a2c2052cf6183e8620993fc3c01ad31
8ebb4a87c7035c93d7131649a8883a764d39d20584d6ca6b37eacca0710fc58a
GET /hls/93721974/master/93721974.m3u8 HTTP/1.1
Host: edge-hls.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 Jun 2023 15:05:30 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Fri, 09 Jun 2023 15:05:28 GMT
x-proxy-cache: MISS
cache-control: public, max-age=3, s-maxage=3
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 2
server: cloudflare
cf-ray: 7d4a45eb5c81b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
b-hls-08.doppiocdn.com/hls/93721974/93721974_315_0cfdB04lObHr70FD_1686323122.mp4
104.18.63.122200 OK 313 kB URL GET HTTP/3 b-hls-08.doppiocdn.com/hls/93721974/93721974_315_0cfdB04lObHr70FD_1686323122.mp4
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
Size 313 kB (313003 bytes)
Hash c62b194682c8c5a9c077614aef2bdb3b
01cf202d76a6b1fd9f78b3cb89189994934c754a
f91dd1f43c559ab5552772d601f7770fba54b60bea66795f17b9829a52520a3c
GET /hls/93721974/93721974_315_0cfdB04lObHr70FD_1686323122.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:30 GMT
content-type: video/mp4
content-length: 313003
last-modified: Fri, 09 Jun 2023 15:05:24 GMT
etag: "64833fb4-4c6ab"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 4
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45ec9e4e0b69-OSL
alt-svc: h3=":443"; ma=86400
b-hls-08.doppiocdn.com/hls/93721974/93721974.m3u8
104.18.63.122200 OK 702 B URL GET HTTP/3 b-hls-08.doppiocdn.com/hls/93721974/93721974.m3u8
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (720), with no line terminators
Hash 118653f297c1222458b03eb03a3b6070
b1576f80ab51081fe49775ac6166b3683d3f2eeb
b8ca53646994cf1fc9b8c9fc9af5325459c2956d50eceaf560a753ce1de5d68c
GET /hls/93721974/93721974.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:32 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Fri, 09 Jun 2023 15:05:30 GMT
x-proxy-cache: EXPIRED
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 7d4a45f8a9950b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
b-hls-11.doppiocdn.com/hls/115662490/115662490_480p.m3u8
104.18.63.122200 OK 730 B URL GET HTTP/3 b-hls-11.doppiocdn.com/hls/115662490/115662490_480p.m3u8
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (748), with no line terminators
Hash 829e7cc9830827390e59cf2992f5fbbb
a5af6715058ce08714227eb535227c2c391bc8ff
1686e5c4f6ccc0a07db87f917f8f7a36e9a048fa7b90b755a7e6bc192219da2f
GET /hls/115662490/115662490_480p.m3u8 HTTP/1.1
Host: b-hls-11.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:32 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Fri, 09 Jun 2023 15:05:31 GMT
x-proxy-cache: EXPIRED
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 7d4a45f99aac0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
creative.xlivrdr.com/widgets/Player/vendors~hls.0540395ea0de1bd2da19.js
104.18.59.150200 OK 178 kB URL GET HTTP/3 creative.xlivrdr.com/widgets/Player/vendors~hls.0540395ea0de1bd2da19.js
IP 104.18.59.150:443
Requested by https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Certificate IssuerCloudflare, Inc.
Subjectxlivrdr.com
FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (45140)
Size 178 kB (177865 bytes)
Hash 713be02fa5d0cf6c84b8a926dc2992f2
bdfb9529388c7d5fb12ead4b99ef1f0b51796c1f
3b9ab9147e8580ae512fbe00d86daf955f5b76b02360ff8498a122bc6e8d1531
GET /widgets/Player/vendors~hls.0540395ea0de1bd2da19.js HTTP/1.1
Host: creative.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Cookie: __cflb=02DiuDFRFiBZBvMSLtr5q6uSw62gLvY51BAs3hmXh2f6c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:30 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 07 Jun 2023 12:47:37 GMT
etag: W/"64807c69-2b6c9"
expires: Fri, 09 Jun 2023 15:05:30 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45ec2a39b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
b-hls-08.doppiocdn.com/hls/93721974/93721974.m3u8
104.18.63.122200 OK 702 B URL GET HTTP/3 b-hls-08.doppiocdn.com/hls/93721974/93721974.m3u8
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (720), with no line terminators
Hash 6fdeb9cc5db26fd31aa707fd341447fa
4a996bbe073005418fbcd067b633594ec6121292
05572c00b28e9bd2e0bbc657cd8f309ce4e5b23fac46138ab80d390cdb6bbe90
GET /hls/93721974/93721974.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:42 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Fri, 09 Jun 2023 15:05:40 GMT
x-proxy-cache: EXPIRED
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 7d4a463ac9aa0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
creative.xlivrdr.com/widgets/v4/Universal/lang/en.json
104.18.59.150200 OK 172 B URL GET HTTP/3 creative.xlivrdr.com/widgets/v4/Universal/lang/en.json
IP 104.18.59.150:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectxlivrdr.com
FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 402f4a06b5dcf96d25dd4ff1f840784b
edebb253af01ef1882f424ee6278368485898d62
bd570b38d9d687c593545a7b250570605c601381f3d3d5263346b295e12a55ba
GET /widgets/v4/Universal/lang/en.json HTTP/1.1
Host: creative.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
DNT: 1
Connection: keep-alive
Cookie: __cflb=02DiuDFRFiBZBvMSLtr5q6uSw62gLvY51BAs3hmXh2f6c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: application/json
last-modified: Wed, 07 Jun 2023 12:45:47 GMT
etag: W/"64807bfb-ac"
expires: Fri, 09 Jun 2023 15:05:30 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 8
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45e74c7bb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
creative.xlivrdr.com/widgets/Player/hls.4cfa5b780bfed20a8b26.js
104.18.59.150200 OK 61 B URL GET HTTP/3 creative.xlivrdr.com/widgets/Player/hls.4cfa5b780bfed20a8b26.js
IP 104.18.59.150:443
Requested by https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Certificate IssuerCloudflare, Inc.
Subjectxlivrdr.com
FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 22f22b49cc901aa95826401f7ce0930c
6471abdd35ab6d511b67d73ad1375f1ee0f255de
0fae8b03858a764bad3e9af19bfc924ead5b9e25c760432c19e91cba3dff1cf3
GET /widgets/Player/hls.4cfa5b780bfed20a8b26.js HTTP/1.1
Host: creative.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Cookie: __cflb=02DiuDFRFiBZBvMSLtr5q6uSw62gLvY51BAs3hmXh2f6c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:30 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 07 Jun 2023 12:47:37 GMT
etag: W/"64807c69-3d"
expires: Fri, 09 Jun 2023 15:05:31 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45ec2a3eb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
b-hls-11.doppiocdn.com/hls/115662490/115662490_480p.m3u8
104.18.63.122200 OK 730 B URL GET HTTP/3 b-hls-11.doppiocdn.com/hls/115662490/115662490_480p.m3u8
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (748), with no line terminators
Hash 829e7cc9830827390e59cf2992f5fbbb
a5af6715058ce08714227eb535227c2c391bc8ff
1686e5c4f6ccc0a07db87f917f8f7a36e9a048fa7b90b755a7e6bc192219da2f
GET /hls/115662490/115662490_480p.m3u8 HTTP/1.1
Host: b-hls-11.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:35 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Fri, 09 Jun 2023 15:05:33 GMT
x-proxy-cache: EXPIRED
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 7d4a460c6bec0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.daftporn.com/fluidplayer.css
37.128.144.49200 OK 27 kB URL GET HTTP/2 www.daftporn.com/fluidplayer.css
IP 37.128.144.49:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerLet's Encrypt
Subjectdaftporn.com
FingerprintDF:6E:A1:AB:14:B0:0C:D7:87:48:15:B3:5C:B6:9D:8E:5B:E2:29:DD
ValidityFri, 21 Apr 2023 04:36:23 GMT - Thu, 20 Jul 2023 04:36:22 GMT
File type ASCII text, with very long lines (26687), with no line terminators
Hash 1e6d53259e2a382ba87fd9682096186f
6aa439691105627bcd4ff0cf2b8a68e98897b5f4
c68c35fe202779ec23f66f25f3fdaad880ff1d7a7841f509c12a62a23c22489c
GET /fluidplayer.css HTTP/1.1
Host: www.daftporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.22.1
date: Fri, 09 Jun 2023 15:05:28 GMT
content-type: text/css
last-modified: Fri, 01 Jun 2018 19:44:59 GMT
vary: Accept-Encoding
cache-control: max-age=2592000
expires: Sun, 09 Jul 2023 15:05:28 GMT
etag: W/"5b11a23b-683f"
content-encoding: br
X-Firefox-Spdy: h2
b-hls-08.doppiocdn.com/hls/93721974/93721974.m3u8
104.18.63.122200 OK 702 B URL GET HTTP/2 b-hls-08.doppiocdn.com/hls/93721974/93721974.m3u8
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (720), with no line terminators
Hash 771e22d3d75cc0e9a50c6b235b4e706b
ce1786fe1a17e44a478ac496923fbe18b8a87f3e
149e3880e1429eedc442193e373ee0405cc5a862c531309dc7fdf36b10d80509
GET /hls/93721974/93721974.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 Jun 2023 15:05:30 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Fri, 09 Jun 2023 15:05:28 GMT
x-proxy-cache: EXPIRED
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 7d4a45eb9cd4b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
edge-hls.doppiocdn.com/hls/115662490/master/115662490_480p.m3u8
104.18.63.122200 OK 227 B URL GET HTTP/3 edge-hls.doppiocdn.com/hls/115662490/master/115662490_480p.m3u8
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with no line terminators
Hash ddf98dd22b3952a2e2ab2fc9838e1adf
fe916a424f164d7f1d8a1d398d27fc18d62032b6
091a46852b513730d5981cbd602ae9af56652ae2dcb5e8a187368639b5cebedd
GET /hls/115662490/master/115662490_480p.m3u8 HTTP/1.1
Host: edge-hls.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:30 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Fri, 09 Jun 2023 15:05:26 GMT
x-proxy-cache: MISS
cache-control: public, max-age=3, s-maxage=3
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 7d4a45ecae600b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
b-hls-11.doppiocdn.com/hls/115662490/115662490_480p.m3u8
104.18.63.122200 OK 730 B URL GET HTTP/3 b-hls-11.doppiocdn.com/hls/115662490/115662490_480p.m3u8
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (748), with no line terminators
Hash fa20bf3b8feebfe3f4a9e6f981b7b904
7f8b61b084a0c8c112cbb051b1c2e67f8e2ddaa4
db07b447acdc410000eaa90c83a485a47f07b8980818e07c6ce6baac92df3ce5
GET /hls/115662490/115662490_480p.m3u8 HTTP/1.1
Host: b-hls-11.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:42 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Fri, 09 Jun 2023 15:05:41 GMT
x-proxy-cache: EXPIRED
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 7d4a46384f1f0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
go.xlivrdr.com/config?url=https%3A%2F%2Fcreative.xlivrdr.com%2Fwidgets%2FPlayer%3Fautoplay%3Dall%26autoplayForce%3D1%26campaignId%3D117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2%26campaignType%3Dsmartpop%26creativeId%3Ddc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5%26iterationId%3D216588%26masterSmartpopId%3D0%26ruleId%3D0%26showModal%3Dsignup%26smartpopId%3D6697%26tag%3Dgirls%252Fyoung%26userId%3D5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5%26variationId%3D28767
104.18.59.150200 OK 6.5 kB URL GET HTTP/3 go.xlivrdr.com/config?url=https%3A%2F%2Fcreative.xlivrdr.com%2Fwidgets%2FPlayer%3Fautoplay%3Dall%26autoplayForce%3D1%26campaignId%3D117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2%26campaignType%3Dsmartpop%26creativeId%3Ddc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5%26iterationId%3D216588%26masterSmartpopId%3D0%26ruleId%3D0%26showModal%3Dsignup%26smartpopId%3D6697%26tag%3Dgirls%252Fyoung%26userId%3D5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5%26variationId%3D28767
IP 104.18.59.150:443
Requested by https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Certificate IssuerCloudflare, Inc.
Subjectxlivrdr.com
FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (8506), with no line terminators
Hash d972ebfbfb6e372eec32cc3ab110b8bf
ebb8f216aba7acdad796e78ef9fa673ef56d67af
ff02de8115b6d4a73c1c0d5f0e4b59c99635753f7abadada9427b854bf2115b5
GET /config?url=https%3A%2F%2Fcreative.xlivrdr.com%2Fwidgets%2FPlayer%3Fautoplay%3Dall%26autoplayForce%3D1%26campaignId%3D117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2%26campaignType%3Dsmartpop%26creativeId%3Ddc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5%26iterationId%3D216588%26masterSmartpopId%3D0%26ruleId%3D0%26showModal%3Dsignup%26smartpopId%3D6697%26tag%3Dgirls%252Fyoung%26userId%3D5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5%26variationId%3D28767 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: application/json
access-control-allow-origin: *
last-modified: Fri, 09 Jun 2023 14:47:39 GMT
cf-cache-status: HIT
age: 107
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45e8be0fb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
b-hls-11.doppiocdn.com/hls/115662490/115662490_480p.m3u8
104.18.63.122200 OK 730 B URL GET HTTP/3 b-hls-11.doppiocdn.com/hls/115662490/115662490_480p.m3u8
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (748), with no line terminators
Hash 119068853ac3dfac7e696ecc06bd9a10
0a63411d58c7fa754092ff8ad1e30d01b2a9a833
3a93cf57c9988ac3e91240df456316a37f82909664c7ea08d496b4feef4bf22c
GET /hls/115662490/115662490_480p.m3u8 HTTP/1.1
Host: b-hls-11.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:36 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Fri, 09 Jun 2023 15:05:35 GMT
x-proxy-cache: EXPIRED
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 7d4a4612ca310b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
37.128.144.49200 OK 32 kB URL User Request GET HTTP/2 www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
IP 37.128.144.49:443
Certificate IssuerLet's Encrypt
Subjectdaftporn.com
FingerprintDF:6E:A1:AB:14:B0:0C:D7:87:48:15:B3:5C:B6:9D:8E:5B:E2:29:DD
ValidityFri, 21 Apr 2023 04:36:23 GMT - Thu, 20 Jul 2023 04:36:22 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (7967), with CRLF, CR line terminators
Hash db18631d5ec3294cae1354abac6ea59b
946292b98b91ba02b9b38c76dcbcc8db4480a504
b13a6a53b2ca7c9de5d448d75d16492072b166a1c7105bd18c57a36748d21e76
GET /extreme-videos/Unannounced-mouthshot.php HTTP/1.1
Host: www.daftporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.22.1
date: Fri, 09 Jun 2023 15:05:28 GMT
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
b-hls-11.doppiocdn.com/hls/115662490/115662490_480p.m3u8
104.18.63.122200 OK 730 B URL GET HTTP/3 b-hls-11.doppiocdn.com/hls/115662490/115662490_480p.m3u8
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (748), with no line terminators
Hash eaadcc7690d1f4d6221d7f077462ac2d
3f750f24bd64d2941260ae6f85b52bd8c53359e5
eb9971b7640c354ec1ffa828160e4f4e5fabb9649c60d10baf65b0b1c7901ab1
GET /hls/115662490/115662490_480p.m3u8 HTTP/1.1
Host: b-hls-11.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:30 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Fri, 09 Jun 2023 15:05:29 GMT
x-proxy-cache: EXPIRED
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 7d4a45ed3eae0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
b-hls-11.doppiocdn.com/hls/115662490/115662490_480p.m3u8
104.18.63.122200 OK 730 B URL GET HTTP/3 b-hls-11.doppiocdn.com/hls/115662490/115662490_480p.m3u8
IP 104.18.63.122:443
Requested by https://creative.xlivrdr.com/widgets/Player?autoplay=all&autoplayForce=1&campaignId=117b2398f5a9b7faa94bfcdf4b5bb5b2986fff5f02e999e8c3e0d856585d23c2&campaignType=smartpop&creativeId=dc8da9c4ce5856da221cd95a6b3258852b1189c305bf251f45c971ede264e4f5&iterationId=216588&masterSmartpopId=0&ruleId=0&showModal=signup&smartpopId=6697&tag=girls%2Fyoung&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5&variationId=28767
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (748), with no line terminators
Hash 5506f9042c1c44e1ed4d79d414bdddfd
b27069ada6aea46643a5f17e991c1dcc42c2c30f
79b060312c26ed060e463e53b734b17ff097a45bffae3089152316fe2f944e47
GET /hls/115662490/115662490_480p.m3u8 HTTP/1.1
Host: b-hls-11.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:38 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Fri, 09 Jun 2023 15:05:37 GMT
x-proxy-cache: EXPIRED
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 7d4a461f4e0a0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.daftporn.com/fluid_icons.svg
37.128.144.49200 OK 8.2 kB URL GET HTTP/2 www.daftporn.com/fluid_icons.svg
IP 37.128.144.49:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerLet's Encrypt
Subjectdaftporn.com
FingerprintDF:6E:A1:AB:14:B0:0C:D7:87:48:15:B3:5C:B6:9D:8E:5B:E2:29:DD
ValidityFri, 21 Apr 2023 04:36:23 GMT - Thu, 20 Jul 2023 04:36:22 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (8550), with no line terminators
Hash c8ccf6a3b49d7d8f1aded23e84f99677
4532c7e4cc1598bdc9a02f8fe9222cec2c2302fb
b548d8a988bd6075aa5d60628edf546bf89ba7ba15e25d6ce1ee159e24826241
GET /fluid_icons.svg HTTP/1.1
Host: www.daftporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.daftporn.com/fluidplayer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.22.1
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: image/svg+xml
last-modified: Sat, 26 May 2018 17:38:21 GMT
vary: Accept-Encoding
cache-control: max-age=2592000
expires: Sun, 09 Jul 2023 15:05:29 GMT
etag: W/"5b099b8d-2011"
content-encoding: gzip
X-Firefox-Spdy: h2
creative.xlivrdr.com/widgets/v4/Universal/main.dd2ec6f4ef5d03277725.js
104.18.59.150200 OK 275 kB URL GET HTTP/3 creative.xlivrdr.com/widgets/v4/Universal/main.dd2ec6f4ef5d03277725.js
IP 104.18.59.150:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectxlivrdr.com
FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Size 275 kB (275081 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /widgets/v4/Universal/main.dd2ec6f4ef5d03277725.js HTTP/1.1
Host: creative.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 07 Jun 2023 12:47:37 GMT
etag: W/"64807c69-43289"
expires: Fri, 09 Jun 2023 15:05:31 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 1
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45e5aa6db4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Open+Sans:300,400&subset=cyrillic,greek,latin-ext
142.250.74.74200 OK 5.5 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300,400&subset=cyrillic,greek,latin-ext
IP 142.250.74.74:443
Requested by https://www.daftporn.com/extreme-videos/Unannounced-mouthshot.php
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint3F:94:23:08:F7:DB:8B:36:93:90:93:F4:9E:46:A6:6A:93:75:15:C0
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (5648), with no line terminators
Hash 24e86de36097ab3ecf6b9ec640ea544f
67a1d070050481af828a5b1d5af6da5b6f3a6fcb
fc1e530f4bee91e015f468a7561027ffe9a9eacc62f74bfccbaaec677caab28d
GET /css?family=Open+Sans:300,400&subset=cyrillic,greek,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.daftporn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Jun 2023 15:05:28 GMT
date: Fri, 09 Jun 2023 15:05:28 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
go.xlivrdr.com/api/models?tag=girls&forceClient=1&stripcashR=0&limit=2&usePreroll
104.18.59.150200 OK 3.1 kB URL GET HTTP/3 go.xlivrdr.com/api/models?tag=girls&forceClient=1&stripcashR=0&limit=2&usePreroll
IP 104.18.59.150:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectxlivrdr.com
FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (3354), with no line terminators
Hash 1697d9b7a80e38c79f180dbcae5552f6
ae4ac43c2fe4a23bece2e66ca9b88a077508ac94
d79ccca851a29a43d6a9be8306d6db48635ba1e9c459f02fe087882d600c03ed
GET /api/models?tag=girls&forceClient=1&stripcashR=0&limit=2&usePreroll HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Cookie: __cflb=02DiuDFRFiBZBvMSLtr4uyFiEegrSgDACCU82WkFUcuxQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: application/json
access-control-allow-origin: https://creative.xlivrdr.com
access-control-allow-credentials: true
vary: Origin, Accept-Encoding
last-modified: Fri, 09 Jun 2023 13:39:33 GMT
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 7d4a45e81d5fb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
img.strpst.com/thumbs/1686322950/93721974
104.18.63.132200 OK 41 kB URL GET HTTP/2 img.strpst.com/thumbs/1686322950/93721974
IP 104.18.63.132:443
Requested by https://creative.xlivrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&campaignId=headerWidget&domain=stripchat&hideButtonOnSmallSpots=0&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=0&isXhDesign=0&showButton=0&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&tag=girls&thumbSizeKey=big&trackOff=1&userId=5c6bc70a3a6a7fc7288ad875f00853c94a4d138bcd9855206073b5137a9aa9a5
Certificate IssuerCloudflare, Inc.
Subjectimg.strpst.com
FingerprintED:62:74:FE:E4:F5:89:43:B3:49:55:FE:18:19:0D:29:24:96:75:BC
ValidityMon, 03 Apr 2023 00:00:00 GMT - Tue, 02 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 480x360, components 3\012- data
Hash 5921f52eac9581ff885cfe9cc09920a2
284598f4821f26f001a466bafef1dd93672390d9
639819bf0145461a5b40deb508b61464c9706fba7775e6b9eebb62a42fcf8dc8
GET /thumbs/1686322950/93721974 HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 Jun 2023 15:05:29 GMT
content-type: image/jpeg
content-length: 40799
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: public, max-age=1800, s-maxage=1800, stale-while-revalidate=1, max-stale=1, stale-if-error=1
cf-bgj: h2pri
etag: "5921f52eac9581ff885cfe9cc09920a2"
last-modified: Fri, 09 Jun 2023 15:02:23 GMT
cf-cache-status: HIT
age: 131
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4a45e91cbbb51d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2