{"report_id":"7e9e5c40-9d4f-46b3-8943-8edc903cbc40","version":6,"status":"done","tags":[],"date":"2026-01-08T13:40:46Z","url":{"schema":"https","addr":"www.xrares.com/video/2154","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.xrares.com/video/2154","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"title":"fuckd to fuck by bullies [香港][自拍][手機自拍] MOV00423 吉野家 強暴 - Xrares","dom":{"size":29325,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (29325), with no line terminators","md5":"cf8fa20269bf67676c1e9e80beb9d88c","sha1":"25aea33bddf9b71139fd9158cccbf5a9ce9f21a5","sha256":"88807feec18cd87119dd724d8b814b0d16fa881c3a2d45f50675591ad5a25646","sha512":"cb42669c3e9120135e69d57fa863da4d423044179596d6aa0dfbee66e907384f110c094350c6a26ce422309fca7189f379d1832212bb7e9ab3ce7ab41c776a81","ssdeep":"384:XPjIogiO+XeZhDYhChkxqhDrhq9h/gWckEXokax1KvhFtvEjk39:XPjIogtGciEDVqn/X361EatM89","tlshash":"b3d2b6309140063e2a1b4accf618b3dc72c7869df9d29620b6e893e1a7dedd3f664574","dom_hash":"domhash32f6d36ec9c8dffa5f7ef0821deb22ff","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.xrares.com/video/2154","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-12T13:40:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fapchatvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":7,"received_data":204765,"sent_data":3835,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.doppiocdn.com","ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-16","domain_rank":38793,"first_seen":"2025-02-10T15:14:32Z","last_seen":"2026-01-06T08:02:30.458951Z","alert_count":0,"request_count":21,"received_data":193666,"sent_data":9954,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.xrares.com","ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-03-28","domain_rank":133479,"first_seen":"2017-04-17T14:41:09Z","last_seen":"2026-01-08T13:18:24.764572Z","alert_count":0,"request_count":21,"received_data":903951,"sent_data":10585,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:1.11.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]}]},{"fqdn":"cdn.xrares.com","ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-03-28","domain_rank":0,"first_seen":"2021-02-08T22:19:36Z","last_seen":"2026-01-08T13:18:24.520688Z","alert_count":0,"request_count":12,"received_data":75100,"sent_data":5353,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-01-04T22:45:39.840493Z","alert_count":0,"request_count":1,"received_data":96772,"sent_data":444,"comment":"","tags":null,"fingerprints":null},{"fqdn":"go.mnaspm.com","ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-07-05","domain_rank":180461,"first_seen":"2023-10-04T11:16:29Z","last_seen":"2026-01-06T11:15:38.438449Z","alert_count":0,"request_count":5,"received_data":11968,"sent_data":3295,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.youtube.com","ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2026-01-04T23:49:28.803174Z","alert_count":0,"request_count":2,"received_data":35740,"sent_data":871,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fapchatvip.com","ip":{"addr":"194.1.140.1","port":443,"asn":0,"as":"","country":"Slovakia","country_code":"SK"},"domain_registered":"2025-04-23","domain_rank":44916,"first_seen":"2025-07-24T09:14:17.646084Z","last_seen":"2026-01-08T13:18:24.377379Z","alert_count":1,"request_count":1,"received_data":483,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"creative.bluetrafficstream.com","ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-18","domain_rank":0,"first_seen":"2025-11-06T04:51:37.066546Z","last_seen":"2026-01-06T11:15:38.365674Z","alert_count":0,"request_count":21,"received_data":5788565,"sent_data":19408,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.xraress.com","ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"domain_registered":"2022-04-12","domain_rank":0,"first_seen":"2022-04-12T20:55:22Z","last_seen":"2025-08-18T09:26:24.978066Z","alert_count":0,"request_count":1,"received_data":1955,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"go.bluetrafficstream.com","ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-18","domain_rank":0,"first_seen":"2025-10-30T22:51:12.441736Z","last_seen":"2026-01-08T13:18:24.329076Z","alert_count":0,"request_count":25,"received_data":91497,"sent_data":22854,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-04T22:18:41.67311Z","alert_count":0,"request_count":2,"received_data":723866,"sent_data":887,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":2,"received_data":18339,"sent_data":950,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-01-04T22:24:34.159986Z","alert_count":0,"request_count":1,"received_data":1717,"sent_data":424,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-01-04T22:24:22.284555Z","alert_count":0,"request_count":1,"received_data":852763,"sent_data":492,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.xrares.com/video/2154","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"012673d82374d46bbde66489b18b1e95","sha1":"8013eb94d0b10d1ec52bb1024f7bb8ecd00fdef6","sha256":"b5288af6615857f1f7b705eb3841f3776d47486aab5f64445cbdf783d810f9a5","sha512":"e03833f04d7f75510106b695fc09e9b963b737853b87a684560ab65347340ae672e992fcdde7123ed230760260927ae361acaf6a579ba72843712e17f48a91ba","ssdeep":"","tlshash":"acf08439a605588842c009b8a83d2881dc5908d9332dfc98632ee19c175ccdd23fe6a2","size":555,"data":"","first_seen":"2026-01-08T13:38:55.145682Z","last_seen":"2026-01-08T13:41:01.894323Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8d8a3a4c49ac3ad14bbcf5cb31aa456","sha1":"5d54017d31751eb0e48d3a20f11ecbd539ee3163","sha256":"857caaa6ed280d9379e57238f4578f71167961f7ac09d9cac3353c2d7c64cf64","sha512":"1a270ab7ace14fe6a582fe56a5907b8e676c85ea8305ee4c9fdef00393a4ab9a40d6067b72d33b9da3f0edf34567fd7b1421146a72e75e6fad51ca6cbbda537c","ssdeep":"","tlshash":"aeb092cb200856ef86d2e809d4a66bd696782151e1000abadcf5401a5cda6506ec22a0","size":121,"data":"","first_seen":"2023-03-08T13:16:44Z","last_seen":"2026-01-08T13:42:26.001628Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f004fcf512cafa4b61f5950e99315273","sha1":"af163c76f64ed62a1cbce378c8fa9577a71f82ef","sha256":"969b574748cbfe6ee620eccc15b1bb92660da1684637870d1ee332f05722fdca","sha512":"cbb4859610295074d286b56ea71017e0636b1d481129de8e0104c57267e429641fb31ace98bbec6cfb3dead39c84d1248cdde2fbb87a529fe190975ac8b23d85","ssdeep":"","tlshash":"01e02b241b34806f219a205b767143ec7eec51e7ef0d149251de9f3c7a69c53057aca8","size":302,"data":"","first_seen":"2023-03-07T01:43:05Z","last_seen":"2026-04-05T18:13:14.710836Z","times_seen":297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6264faf747172d4118734f941fea2ae5","sha1":"76fa6ea5ec9b6ca6473b13817f7aa73492a25d6b","sha256":"135170b39398df2d60ace8a7899cd85f929b4bdee2aeeba815a4bdcda5f9fe11","sha512":"fc4b130b959198f02d65b3f1d2a5fafb9791c200a64695224fc68eb5619c212656129b697fdbbefde60d415236323a05679f8057c2bdb3c06f748e307684a350","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJf:tRe0Y+AWZTdXYrntI0tPqX2vqDdT5+","tlshash":"423539897756b47646c79146e03f0203f235695a201a905cb3aeecec656ceceb237b37","size":1144541,"data":"","first_seen":"2026-01-08T13:18:31.226447Z","last_seen":"2026-01-13T02:40:20.387872Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-06T11:14:06.641453Z","times_seen":127063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-06T11:14:06.641453Z","times_seen":127063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","size":4930,"data":"","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/iframe_api","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5c005d2442ed34725871390825cbaec","sha1":"885c6e931361202d4415808eb3c5293c3a756ed3","sha256":"ce4023c12700238c416abd879ea09a7440cecb301f7c890f66795937526d7374","sha512":"519ef43125ac5232f3ddcbf8ef20bd76f0f3ad93ffa02df226b7bd06bfabecbb24dd6bbaf0b6398f0e4fc494d927ef66192e1a17737522c2c3551ffad358b7ad","ssdeep":"","tlshash":"7c11ed7b3d84e6398658a4e4a03fd31cf1b224957c51cd9110cde889e65cbcadd2d5bc","size":993,"data":"","first_seen":"2026-01-06T16:30:28.099644Z","last_seen":"2026-01-13T04:56:27.166157Z","times_seen":525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-06T11:14:06.641453Z","times_seen":127063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/js/jquery.voting-video-0.1.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f2af2b97bf00af0c15e2a8019953697","sha1":"7970f72caf38b75c818d14dbb7a8f1a61f36b0d0","sha256":"f16ae6a99564d192347ce6902e6d43f9d040a0711b36a13a9bac6cfe5e35844a","sha512":"ab23b5126849d4b0bfd082fe6e58ae0aed027c2256bb850c98c789a3806e597923f1850fd90daf2c4d564a551ae4654ea1f953a5aaf49dbb56bf7e0eedbefb08","ssdeep":"","tlshash":"91310a5cdb9e5725933f30f92e4f48cc295808b28594c556bc3da9998f04268433eeb6","size":1497,"data":"","first_seen":"2023-03-08T05:34:03Z","last_seen":"2026-02-08T18:07:09.056489Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/media/videojs/js/anyhtm.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2def17f53ffbf570fe77f29349b207b4","sha1":"92445e4d4937aaa12d71f7072f1e934e43f2d879","sha256":"bf92ecc4594938de3bed4d4ff607b744e31a618ceea127408d062e751cf011d7","sha512":"565eafc066d932838830fe70fbc6742c08731b418e1b1a0d911fec1cd8db5c884bc876ee9cab086ebd7d500efa9178083f1438b029cad6ca514c28a3997e8e56","ssdeep":"96:sW+xpCaWNNssLKOL7i8HWJ7i6UStmj8RZE1DG07icVZEBzv57i1xwPFjZZtS7iKk:R+GaWNcrYUZbvootjZ76/Pj7exsvG6G1","tlshash":"94d18283f74a315cc8fe537b644d8295223e492b6c4a8e14e610d3b5396d648ed2e2ff","size":6179,"data":"","first_seen":"2023-03-08T13:16:44Z","last_seen":"2026-01-08T13:42:25.873903Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbc7552d455c220ba1dc7f525e37a1e7","sha1":"7d94c726e11b3e5bc3b42c103255b4a75b9993cd","sha256":"33c8f9117cb0dbd98c7910232ed909587776d95c2e832942ac00de3c6ee9ce94","sha512":"fbad691ef7e7e179ab50aa962618c2c8132aa259a547cc87cdef3e4319d9c16c1169322f16f04e6b64bcf696f8bbb0ed3b3eea9677e24701a9b9074f591bce5e","ssdeep":"","tlshash":"71c02bc8211e0cb181f727008f3ffa00b442321494d96d32480d234d4e20f03e754804","size":154,"data":"","first_seen":"2023-03-08T13:16:44Z","last_seen":"2026-04-05T18:13:14.712173Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-06T11:12:10.03114Z","times_seen":293856,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"224a873b2c5d415e7089550caa121ec8","sha1":"10175f043c97e56982aa8a5184ac441da98c66e0","sha256":"0d653bcd74ba4f9e8a270e1515be770dbeae2b43536d4da7eb48ff15186e1516","sha512":"d3eb97b6ef3750075df6c742ea3f0252c7e562e8b4b43b20965d7b8c6b3689a96ef6a5cfd8403ccc88e661e8f1b97ca4d465812a933d23ea2d66784f071bce92","ssdeep":"","tlshash":"47b012736c89b1bcd2e5468a1a39e233e32458a5d5095444c170922c3c4c0cdfc70652","size":105,"data":"","first_seen":"2025-07-04T04:12:03.049614Z","last_seen":"2026-01-08T13:42:25.984298Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6264faf747172d4118734f941fea2ae5","sha1":"76fa6ea5ec9b6ca6473b13817f7aa73492a25d6b","sha256":"135170b39398df2d60ace8a7899cd85f929b4bdee2aeeba815a4bdcda5f9fe11","sha512":"fc4b130b959198f02d65b3f1d2a5fafb9791c200a64695224fc68eb5619c212656129b697fdbbefde60d415236323a05679f8057c2bdb3c06f748e307684a350","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJf:tRe0Y+AWZTdXYrntI0tPqX2vqDdT5+","tlshash":"423539897756b47646c79146e03f0203f235695a201a905cb3aeecec656ceceb237b37","size":1144541,"data":"","first_seen":"2026-01-08T13:18:31.226447Z","last_seen":"2026-01-13T02:40:20.387872Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc896948e0f5b7752c9f15616b0dc31a","sha1":"59ec2e3879892eab6bdd24997c2da6f60c5a6c5a","sha256":"f900f5265e2eafed7d7d1509807fc84ca47d99425b3b8c67d77db1585e732175","sha512":"d176dc694a7ac8cdc631294c6a33d7d6097e9ab45afa366d2ef06725eec9782ac1549a9c6afec2a980f7e45954f58a5a3f411f589e03557c514a5dd499ee6634","ssdeep":"384:kB0IdIAnRHGWp2qlNyC7XClTwSk6UYUk6UG0F1aAryGDAGs53/XdM+:kB0IdzRHGWp2qlNyC7XClz1aKyGDAGsp","tlshash":"95423e55a7586c3cc6a7ec189f3bd545309bf8479d52dd86f2c6e83484ebea38e31a00","size":12753,"data":"","first_seen":"2026-01-08T13:38:55.148757Z","last_seen":"2026-01-08T13:42:25.988946Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"73e2cdaf87028143a6eff72ecb5938bf","sha1":"8877e8092ff9a5fc200150f011c86c3be5c6cd4c","sha256":"5c944ad38fd7aa5604758ab6b4429b36dc3974bd01082d268c4e9fc45558e5c5","sha512":"d42dde0be015883651bff67687183f84a173a5b88ef972d1d840e1770276141ab2b51babf61643f6585fd9999af4e4e216bec68dfda9e393a8f67f89e133528f","ssdeep":"768:pfMvU/CkEjUJLvn5pTPtzaMU68j+veR1DBevsnZkRNkLMMbfYCF5vU:OmBpztzoj+veR1eAy2B5vU","tlshash":"9e43f818326095be80f701f7b03b4b2571339112d506a218f57afdec6efee85846f6a9","size":59453,"data":"","first_seen":"2023-03-08T13:16:44Z","last_seen":"2026-01-08T13:42:25.999537Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/js/jquery.avs-0.2.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83f4d7283a8cf90e27388ad899629e3b","sha1":"ddc73a63dd3be64f765bb54e3a02b21af585cd3c","sha256":"44da8db1e2ee0e9a7d1b09426e73de8fdf79932b721078753497b8f0ae69e320","sha512":"21275df240eb5f44271f5287bb7268b8275d75bf764e37671d56a478324a429bbe8bf3072e7f904440e9783573ac34b8d1e40761f19808276efb08992fa51008","ssdeep":"192:dbokmTMZiQ+5qsgXO9SQgGJSE3sTfGU37Gh7nb+kSdodb2ZxWeGAuAkADdv:TGOGh7n/+","tlshash":"f462df08a9f351b9123771be1f2f69583a6841576104ef08b82d7ee06f80724d7b6fe6","size":15403,"data":"","first_seen":"2025-07-04T04:12:02.942224Z","last_seen":"2026-04-05T18:13:14.652857Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-97426429-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"478f3513f13d100fdbd261c0f8358898","sha1":"242bc0bfa156b8a434e0d1e45dee92a43d1047d4","sha256":"550dde55b82d2252ea0770a741b8de574cf5861ef7c586424883202a17c72179","sha512":"5ccba12a99d92865f2ae8feea85a83b80ab90d0b03226d15f3b6fab3452c58a104eba19696ed03130fa95be106c8b723ac542f87ad12f08d1d3a85692f0dab58","ssdeep":"3072:Gl8EtrIxV/i4AV0mbKsB67ZKrEv5wtfvvph3rNh8nbzlXJjO67gxMOTkkadYoSp:hNV/yxEh2phZhYRXJjO67YMOTkJdYog","tlshash":"905418cdb7dab46683a36478503f004bb23b79d1e84cc894e186d8d42e74aa94277f7d","size":293098,"data":"","first_seen":"2026-01-08T13:41:01.829288Z","last_seen":"2026-01-08T13:42:25.870271Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/9TiwnJFHeuIw_s0wSd3fiKfN/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"03d9b88f050dca0423663c08a6351d61","sha1":"8a170f34f7390a1926557bb07c336dcabaf8965b","sha256":"64c4f34a5dd84ed645c723c1a6cadcf0e9299060fb2529476752406bbbb31180","sha512":"4f2bf3aff87c7557b7081c3c73ada5578884f9c68432685b53de85c367be5ab97eb0291292ad10de22187c620d0d501c96c92e458b0e90e905f4885b8b07f1ed","ssdeep":"12288:CGl2AF8mhLTGizXGMcK2JKGeD/6r99koATGL2rn0JE:vl2AFfLTGiiE2JKPD/6Z9kNTGL2r0JE","tlshash":"db054bc8b05236b5e323b9f510a7504ea73d9255d4081c2eb29988f93fb4c89717aef7","size":851854,"data":"","first_seen":"2026-01-07T20:19:38.966305Z","last_seen":"2026-04-04T19:22:51.050124Z","times_seen":20094,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"1a8696db1fed2bd243e617b5062e6098","sha1":"d7cec7b6b62600e4bc071e0ecdc6d67c2f2632f7","sha256":"063e9b42f119da0f6984aa49411be9d2218c947fc845b125b8658d151002986c","sha512":"0ea148855b770c4472d1af9c41df2b5e24f5101a2737028fcabc5ec31caeb6ca7ff0207c024bf12316c980d038f12c7b7afa6de24994990a70e5813262f1b49b","ssdeep":"","tlshash":"15a012c31868a07807524700ac323a2263124c558400205880100411254c28ef057b42","size":82,"data":"","first_seen":"2025-07-04T04:12:03.039798Z","last_seen":"2026-04-05T18:13:14.711374Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70684d41bf3d3d2b9f9dffda460049fe","sha1":"4e3dd4efb3a1ad2c773e9d12393d5d62bf26e15a","sha256":"e62e43de286a78af7c6fbb17203c69a52bfa844bb2db9b1cf8b1c07a886a0fe4","sha512":"5a50c27a9f87284a5ee968aa81531d781e6bf42bb6efddd43103d264f7eda5825b288f66f143fdc7483334b6cf58b01dbeba097a3dae79dac93a71b271b188df","ssdeep":"","tlshash":"63a00287ab60c874a9a66b8eb4f058802b2d508785ab0978d15659349ace4553222a9b","size":66,"data":"","first_seen":"2023-03-08T13:16:44Z","last_seen":"2026-01-08T13:42:25.986617Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"479abb82298e82d4be451dd556e1494e","sha1":"4c755cc34626ef3bc9ed51b07ddb9f9a292cefa9","sha256":"24a12e70b44116919825dbf4639802cafdc38e10c536bd4e7577e48f6c41fc65","sha512":"efee14be566e5ac09850ed05129422ba676a67628cd41e7fd60573f3cdc9c5234720038bfe41bef514bb7a61b2b3ac15f3ee62709d7d471afb8b31c4bb1d0329","ssdeep":"","tlshash":"ecf0d456935c37ea1cfc5355be2c9505b5af7622385045c57895a5821f4c70a443d903","size":486,"data":"","first_seen":"2024-10-16T06:27:38.462168Z","last_seen":"2026-04-05T18:13:14.707737Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6264faf747172d4118734f941fea2ae5","sha1":"76fa6ea5ec9b6ca6473b13817f7aa73492a25d6b","sha256":"135170b39398df2d60ace8a7899cd85f929b4bdee2aeeba815a4bdcda5f9fe11","sha512":"fc4b130b959198f02d65b3f1d2a5fafb9791c200a64695224fc68eb5619c212656129b697fdbbefde60d415236323a05679f8057c2bdb3c06f748e307684a350","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJf:tRe0Y+AWZTdXYrntI0tPqX2vqDdT5+","tlshash":"423539897756b47646c79146e03f0203f235695a201a905cb3aeecec656ceceb237b37","size":1144541,"data":"","first_seen":"2026-01-08T13:18:31.226447Z","last_seen":"2026-01-13T02:40:20.387872Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/js/bootstrap.min.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"987facf80adec365394402f2026b943d","sha1":"755f3cfcc389a89194926fef94c7ab250fc71242","sha256":"36a326c783a12f72498d41fb32371da87fe0cbd1595248f3f154fd939f07f10c","sha512":"9e57976ae90df75ede6fca96e4030cebc972908c30056ffc9da09ed6c216b576d4e55d976969e7286822994bd38e6b70da3ddf5a5f38ce67280bec51af245452","ssdeep":"768:2oBFw1wl+WRydWDRQgn8WI0fBQLrX84XCqc:pAr2MRCqc","tlshash":"e2e28446b23031a107dfb2e5515f020b723a6a6de906907c38b999f53db9c48727bf39","size":31824,"data":"","first_seen":"2023-03-07T01:42:29Z","last_seen":"2026-04-05T21:24:32.627622Z","times_seen":941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e82b07bc51448b26c7f89e06b5a06b67","sha1":"0ae9c7f1713300c31d2e89c49baeadae51da6625","sha256":"bbf7f56b4095d8223c59cf6b42050657cf53d14c57584f347634f89ef14356cf","sha512":"83b0539d3866db9ebd09829d6e92187d25d904decfe5af432c303c1b5038e1dcfe14996105f107fe27500660cf2f42d8f50b0f58a6460b67d5b8d4da5fc142b5","ssdeep":"","tlshash":"00a022c30cb8f0bc03a28300ec333b22a32b8cab88002080c20000a0380c3cee0abb82","size":72,"data":"","first_seen":"2025-07-04T04:12:03.048364Z","last_seen":"2026-04-05T18:13:14.709272Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-06T11:14:06.641453Z","times_seen":127063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-06T11:11:56.923269Z","times_seen":94923,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-XL8963DSXG\u0026cx=c\u0026gtm=4e6160","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"82204070e82c3397e5ff356e4163c9c0","sha1":"1bb877d301a98680426333638c90dda3bf6139ba","sha256":"e7be0fda2febde48abc021f1fb566508e439322e9444c71c5685b33286fd6b62","sha512":"696af94c5d410a1152d9aa6b43720d38d70de9d9e40d7e6eb4a5ae86b578452e1e7b48e5439b000ee4af4f4c64ad4a2d6ecbfc881d6695f42436c7aca173b589","ssdeep":"6144:WaQAdAM7ox31lf/6V5AQtNV1qWCEh2phH4lhueXJjO67YM+TkYa+nhul0UY:TnJhwH4nY/TkU","tlshash":"ac94088e73ca74269396e478503f018ba57b29e2b45cc896f1c9cce02d7469a4277f7c","size":429580,"data":"","first_seen":"2026-01-08T13:18:31.067268Z","last_seen":"2026-01-08T13:41:01.770768Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"224a873b2c5d415e7089550caa121ec8","sha1":"10175f043c97e56982aa8a5184ac441da98c66e0","sha256":"0d653bcd74ba4f9e8a270e1515be770dbeae2b43536d4da7eb48ff15186e1516","sha512":"d3eb97b6ef3750075df6c742ea3f0252c7e562e8b4b43b20965d7b8c6b3689a96ef6a5cfd8403ccc88e661e8f1b97ca4d465812a933d23ea2d66784f071bce92","ssdeep":"","tlshash":"47b012736c89b1bcd2e5468a1a39e233e32458a5d5095444c170922c3c4c0cdfc70652","size":105,"data":"","first_seen":"2025-07-04T04:12:03.049614Z","last_seen":"2026-01-08T13:42:25.984298Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-06T11:14:06.641453Z","times_seen":127063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c395f8a01499024aee63031868f989d6","sha1":"393fa7ee6e22a62be01160e8a85ce3e0d7681266","sha256":"2ec6876a08130af4c56b08ade58e4a6f3f306ebafd8dfd49c2110d836db074ae","sha512":"f9677a1716910a8abb623ab02382fbf1792b8c86c951d3b689e92e9519dc447a5b2f39caa2fdd444ad75c115cb950b29e86f61094c962e634c9a8a27f89be3e6","ssdeep":"","tlshash":"1bf05931d13a779c1a2a30210e7d110c4d68c132275ab5e7f35ef46008cacda3ab5998","size":520,"data":"","first_seen":"2026-01-08T13:38:55.135991Z","last_seen":"2026-01-08T13:41:01.936496Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/js/jquery.rotator-0.2.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e38a3d0ef9625af4a0ae17e907c1e5a","sha1":"f62cef879b87536c507ca5e8dc652e288d0a73e6","sha256":"3db2da534cf2cccf21a77fc4e25c3a8436ca4934e4265c828ac5aa3f79cde5ee","sha512":"80382ee3cf388a384b5cf88a49af208cdce075b7ade72ce55952e93f5be85d6640e08362fbc917d82f95736174e0dc284475bfb949d750e5b968861a8cb152d7","ssdeep":"","tlshash":"9241e1850ab2976f5613b2b42f1e05483a9650671140ed083e1ea5a4dfa037d53fabf9","size":1889,"data":"","first_seen":"2025-07-04T04:12:03.031131Z","last_seen":"2026-04-05T18:13:14.590093Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","size":95786,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-06T10:39:21.588384Z","times_seen":45819,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/media//videojs/video.min.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b7cd4bfef76118f4e37d5b0ddaf3c24","sha1":"22515637083d1c077f2abb38525be6f4240c1cfa","sha256":"406fe9f8f931910a9621443786f97ea505727c9e023314475b2f2cdba776de17","sha512":"4a0545de85aafc7e350fbbcd8a89978b1667c9de1311cbca605d77eed40904085be94dd6d83d9f66f0186689a3913dac47fe5e9136315fc0a4dc6c624392ae21","ssdeep":"6144:cSX/GHubMblZyqranNWYWtq9q4kDdpi6T4S2tx6FL5HM6Uvjb55/c0YUIGFqlPyY:cnDyqranNWYWtq9q4kDdpi6T4S2tx6FH","tlshash":"9854fa89f1b4b16642d765908c3b8d0db239b97c901890e8f2fbe4f65ff48594627b38","size":290830,"data":"","first_seen":"2026-01-08T13:38:55.023682Z","last_seen":"2026-01-08T13:42:25.974806Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/js/jquery.video-0.2.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67c93a05af241992cff22a25a4c9f1be","sha1":"d3030938ba2132106da0cc4419b591b0bf735ee8","sha256":"6db1d7f7692985e1d29141770d8789f1307d4cf00c42f61916c78f5808c21b6d","sha512":"b7f61678227f6c13467d00de3d178d8978d4673cd36c0d1c9d4eb2c70243c0c6c27089e19c6d8f528f9390aa25199fe033a1353b9c65d34413f64ea61b48d165","ssdeep":"192:l+eT3dP7Jt7cQWL+6p1W0VqPH6tCWmTCvvvmr66pky+vA6Nc:lfrHjmmuv3mr6PrI6i","tlshash":"7122ac19f6f35aa42677317c1f2f988439a40053a108de08bd1e6de02f81b599776fee","size":10702,"data":"","first_seen":"2025-07-04T04:12:02.989339Z","last_seen":"2026-01-08T13:42:25.954173Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/721caf0b/www-widgetapi.vflset/www-widgetapi.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"212ecade2ccab1d277a4f25252442fce","sha1":"41ebf899a2d00b0d8d28897434894349694ee5d7","sha256":"11aa7946df12674187e45a29c8a083a30cefb5e625985b2405c1d0fb710e56b2","sha512":"af8a2b3f4d9e2c770214917085012643d845d474befeb1cf58290bfb2d5bff1a49953d624eb3b6da4a5a2c44893cc49296277c08b813ae3212860f02ac4664ac","ssdeep":"384:LJrDFJE658O7nfTwu3hZKjDOYjPncmXjVGv+E4aiz2wZBat1CUS6UTGdtmv4nU+g:LpHV5PfnhQjyYJjEV4jLlUS6UKZg","tlshash":"07d2d6cd77b1b431437366b5902f100fb23e98aab40cc999b188d8e16cb49694637f7e","size":30432,"data":"","first_seen":"2025-10-16T17:59:48.894792Z","last_seen":"2026-04-01T04:43:01.189781Z","times_seen":43437,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","size":4930,"data":"","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","size":4930,"data":"","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?hl=en","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40fdf88a04e21eb30f8a7cba11f36503","sha1":"66803134bc759b83f6f50f1d9cb69e46b25dbc70","sha256":"f357d31f579a1b06abde68f76229d4a6a86d59f51284af7b3765133ae710cc53","sha512":"be7c6fc771e32ad6eb8286f949cfcdaae15777f78b52b5d39e4c59227f50c17b706c1d9fa874972dfa823094245cdda2266f9518628ad96589333f402b9424a1","ssdeep":"","tlshash":"b01102771a04a0365b7219e1e2facbb5e492701cb16885e8a512dec81e6accbce14989","size":1017,"data":"","first_seen":"2026-01-07T20:19:38.909175Z","last_seen":"2026-01-15T02:57:18.445944Z","times_seen":3752,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6264faf747172d4118734f941fea2ae5","sha1":"76fa6ea5ec9b6ca6473b13817f7aa73492a25d6b","sha256":"135170b39398df2d60ace8a7899cd85f929b4bdee2aeeba815a4bdcda5f9fe11","sha512":"fc4b130b959198f02d65b3f1d2a5fafb9791c200a64695224fc68eb5619c212656129b697fdbbefde60d415236323a05679f8057c2bdb3c06f748e307684a350","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJf:tRe0Y+AWZTdXYrntI0tPqX2vqDdT5+","tlshash":"423539897756b47646c79146e03f0203f235695a201a905cb3aeecec656ceceb237b37","size":1144541,"data":"","first_seen":"2026-01-08T13:18:31.226447Z","last_seen":"2026-01-13T02:40:20.387872Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/roiejd.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"389df22376f00ab326345155cce982fc","sha1":"ba335ec6da726959b0c22e7b23ae59b2fa3ae84b","sha256":"7eb4d912958c4f9ac34b5042055cf2013e3fcfaa2ce17a85325645b71c8a9e76","sha512":"943049de9a8e01cf56d5ed804dced196bec43fa56a5dea33d801e76678d7a6984dfc553be2894f6251812fd0bdacd1af62ebcf16c6a4d9af4d5a9636fc50fa35","ssdeep":"1536:0+rCqGRCe2boMYdofAPtHv6UnDXn6bSia3NiBiChJxo1WJD8701t7QO2/5aQxtX:NrCqGR9VdpPtCgzTNiQ4n8701l2NtX","tlshash":"03b32e40200748e521e2e67ee56bb0d93c24a813f5e9cda72d05e7c1f8dec99469bde3","size":107796,"data":"","first_seen":"2026-01-08T13:18:31.192Z","last_seen":"2026-04-05T18:13:14.696451Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/media/videojs/nuevo.min.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ca22d74b3990c6412ef8b0de1f3ddf0","sha1":"5c1cdc2a82f85019fda11c967e9aafb97316177f","sha256":"e71acc1b7f76a9762a951815d5873669a1789146353f90e7238bbf046d63e275","sha512":"7aee6a1e8177263d4f3073548824eea7ed62be02896c10576bf63eb56ad44d292444662269e96bd53aa6d1588b5758e8258174aa9bbe50f849a779e2374223b7","ssdeep":"768:f53rYPTCQlWjCKxsfHIlFH5HOHSHB+pEwUzuT2TCgbM4xmB:fWm/TxsfElw3TtgM4sB","tlshash":"f5f219bc14af4b1bab81e15d10ae544c376318aa447f50e0ed96e0eb3c4aadde1db1cd","size":35477,"data":"","first_seen":"2023-03-08T13:16:44Z","last_seen":"2026-01-08T13:42:25.859832Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/sandbox%20eval%20code","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-06T11:11:48.568191Z","times_seen":775558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-06T11:11:48.568731Z","times_seen":774004,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"224a873b2c5d415e7089550caa121ec8","sha1":"10175f043c97e56982aa8a5184ac441da98c66e0","sha256":"0d653bcd74ba4f9e8a270e1515be770dbeae2b43536d4da7eb48ff15186e1516","sha512":"d3eb97b6ef3750075df6c742ea3f0252c7e562e8b4b43b20965d7b8c6b3689a96ef6a5cfd8403ccc88e661e8f1b97ca4d465812a933d23ea2d66784f071bce92","ssdeep":"","tlshash":"47b012736c89b1bcd2e5468a1a39e233e32458a5d5095444c170922c3c4c0cdfc70652","size":105,"data":"","first_seen":"2025-07-04T04:12:03.049614Z","last_seen":"2026-01-08T13:42:25.984298Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","size":4930,"data":"","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","size":4930,"data":"","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6264faf747172d4118734f941fea2ae5","sha1":"76fa6ea5ec9b6ca6473b13817f7aa73492a25d6b","sha256":"135170b39398df2d60ace8a7899cd85f929b4bdee2aeeba815a4bdcda5f9fe11","sha512":"fc4b130b959198f02d65b3f1d2a5fafb9791c200a64695224fc68eb5619c212656129b697fdbbefde60d415236323a05679f8057c2bdb3c06f748e307684a350","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJf:tRe0Y+AWZTdXYrntI0tPqX2vqDdT5+","tlshash":"423539897756b47646c79146e03f0203f235695a201a905cb3aeecec656ceceb237b37","size":1144541,"data":"","first_seen":"2026-01-08T13:18:31.226447Z","last_seen":"2026-01-13T02:40:20.387872Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:40:24.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ecBVlqzEd9lavv7LFW17w2MhKLk0vNAIL%2Bt4%2BLr2nbYWVOyjvDR1rJHvw0T196ox2g5M6ePpcIHZU9JmrYG6UT05mEG80gLcupMa7867IRJqZDrtXTrix%2B44WE%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.0392e0f6c7b6d376d1e1.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2216\r\ncf-cache-status: HIT\r\netag: W/\"6264faf747172d4118734f941fea2ae5\"\r\ncf-ray: 9bac1b450d6b0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1144541,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"38aae49805e8e835d39ca677256ddd3a","sha1":"f6acb5b16b97585c582e77165660ddf22f90dd80","sha256":"c9f21fe56aea40cd8c743dcc96d926514ed046e07bf150efc010fc3b796852bd","sha512":"9e2ae8ae8797283a4921700f90b99bcbb05739c21bea5a435ef10995b433dcbaf28a8479aabcf5d786dbf5caa66f6a7b38eb93eb71aa8935e984dfd0a97461d8","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJT:tRe0Y+AWZTdXYrntI0tPqX2vqDdu","tlshash":"642539897756b47646c69146e03f0203f235699a201a905cb3deecec665ceceb237b37","first_seen":"2026-01-08T13:18:31.205655Z","last_seen":"2026-01-13T02:40:20.342138Z","times_seen":37,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/lang/en.json","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/lang/en.json HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WdTWC8rzjuR%2BOHLNhc0rIjJX4gkyADOpHtFJSXHU%2FWSSbs3yup4PLc4JcEGIQpJ4v3EAeqHL8kgkbbNx6jGbdj1IaMw%2BpjvjkYldXaEXcP3fP2H5p2adTL1TJwA%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2209\r\ncf-cache-status: HIT\r\netag: W/\"69a54638b649d7ce4748bd42c4b6dade\"\r\ncf-ray: 9bac1b48ddb40b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"69a54638b649d7ce4748bd42c4b6dade","sha1":"a2dfe9f8791952fbc5cc44d4757b031a6cee1731","sha256":"0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750","sha512":"1e98b8977577f6daca587310456d38ab870571a0bec392072f38287d274465b3ebc867e6eefe5efd7653c7c0d2a23dabe7636a94c0cfda52321a84fd68d868e3","ssdeep":"","tlshash":"1ac08c09220b0f0389c83c23a223352a0b422bbaeb033730c262c3012c8c1b734e33cc","first_seen":"2023-04-07T07:09:28Z","last_seen":"2026-04-06T07:31:32.390462Z","times_seen":3568,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=8","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=8 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b4aedc80b02-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 08 Jan 2026 13:40:25 GMT\r\ncf-cache-status: MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11575,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c51890c862441f0b6957f582a022983f","sha1":"b4f1dca1b8eab4f7b813f490ac3c4e562b19cd0f","sha256":"601f6dab13311194c22bd57308b83e71a237d10fc549c04cb43b5358ba9a4969","sha512":"85d9ddb57ab474ea991f8cd21923e17a14696047907647595dec249c6357affc59467e8314f288ba24c754dbd1c82a7f40f50450bc9d8cfbdc485cf7ef588c4e","ssdeep":"192:7CLL3tzKzRz3gvpdptzCdzNzWItBeA0datQzzPzyzdnQZDVUzWbzWuzWUP9tzcfI:7wtzKzRzQvZtzCdzNzWItBeJdGQzPzy4","tlshash":"af3231f7c6cc5d7a0f0612c8c94d790cd9672b27a6d9f395c19c9f8642b6dca221ce22","first_seen":"2026-01-08T13:41:01.769713Z","last_seen":"2026-01-08T13:41:01.769713Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-XL8963DSXG\u0026cx=c\u0026gtm=4e6160","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:25.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-XL8963DSXG\u0026cx=c\u0026gtm=4e6160 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\nexpires: Thu, 08 Jan 2026 13:40:25 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 142607\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":429580,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7828)","md5":"82204070e82c3397e5ff356e4163c9c0","sha1":"1bb877d301a98680426333638c90dda3bf6139ba","sha256":"e7be0fda2febde48abc021f1fb566508e439322e9444c71c5685b33286fd6b62","sha512":"696af94c5d410a1152d9aa6b43720d38d70de9d9e40d7e6eb4a5ae86b578452e1e7b48e5439b000ee4af4f4c64ad4a2d6ecbfc881d6695f42436c7aca173b589","ssdeep":"6144:WaQAdAM7ox31lf/6V5AQtNV1qWCEh2phH4lhueXJjO67YM+TkYa+nhul0UY:TnJhwH4nY/TkU","tlshash":"ac94088e73ca74269396e478503f018ba57b29e2b45cc896f1c9cce02d7469a4277f7c","first_seen":"2026-01-08T13:18:31.067268Z","last_seen":"2026-01-08T13:41:01.770768Z","times_seen":2,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Jan 2026 17:56:30 GMT\r\nexpires: Tue, 05 Jan 2027 17:56:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 243835\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-04-06T08:39:59.03899Z","times_seen":6322,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767878700/216642829_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767878700/216642829_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3664\r\ncf-ray: 9bac1b4e1a49a41f-OSL\r\netag: \"1801c062634dce29c3492a6c082a28b5\"\r\nlast-modified: Thu, 08 Jan 2026 13:23:52 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 902\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1801c062634dce29c3492a6c082a28b5","sha1":"249bb8937d28a99ac596682a61bc294b3794cfc4","sha256":"9b06c7005911296910637ae7551038c98699789765f51171cf8549cf81be5e03","sha512":"c249dcc6fd77f0a7f6a38adf04de4544e518b487312ea06ee0340fcbaee9c9231dc264e6d699894082a3e89bde5cab45f80078d91cf4eb3cd77819895993da1c","ssdeep":"","tlshash":"68716da4566c584ed8e2f2a32930f4534c21e0d194450a6db76dcb3a14d8cb56677c52","first_seen":"2026-01-08T13:38:54.982007Z","last_seen":"2026-01-08T13:41:01.773118Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/js/bootstrap.min.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/js/bootstrap.min.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=le5d90b98p71m5iuv6afs4tl9n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Jul 2018 12:19:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=1209600\r\nexpires: Fri, 16 Jan 2026 02:35:27 GMT\r\ncontent-type: application/javascript\r\nage: 558296\r\ncf-cache-status: HIT\r\netag: W/\"7c50-571a9a712eb80\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HKRJzj9ZDf5qg16Hh2FvY1ZfugqNkwfh5SUxlzlHVZxfjisEd7fNZryuO4oHiLqplFQ4C%2BaCqx71ctXOX0dRzNQqP3zIqKxk1b9Q3A%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9bac1b471b2a5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31824,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31650), with CRLF line terminators","md5":"987facf80adec365394402f2026b943d","sha1":"755f3cfcc389a89194926fef94c7ab250fc71242","sha256":"36a326c783a12f72498d41fb32371da87fe0cbd1595248f3f154fd939f07f10c","sha512":"9e57976ae90df75ede6fca96e4030cebc972908c30056ffc9da09ed6c216b576d4e55d976969e7286822994bd38e6b70da3ddf5a5f38ce67280bec51af245452","ssdeep":"768:2oBFw1wl+WRydWDRQgn8WI0fBQLrX84XCqc:pAr2MRCqc","tlshash":"e2e28446b23031a107dfb2e5515f020b723a6a6de906907c38b999f53db9c48727bf39","first_seen":"2023-03-07T01:42:29Z","last_seen":"2026-04-05T21:24:32.627622Z","times_seen":941,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/media/videos/tmb/5490/9.jpg","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /media/videos/tmb/5490/9.jpg HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:40:23 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:50:18 GMT\r\nETag: \"1d43-5bb018d053bf4\"\r\nAccept-Ranges: bytes\r\nContent-Length: 7491\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7491,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x53, segment length 16, baseline, precision 8, 256x144, components 3","md5":"e9a64a733939a90f89cfe6588532c10b","sha1":"2c50534adc8caf903de60dd6818149c37ed73a64","sha256":"1a9d59444aaeb905b495c0555168c3e8d3cf069a99dce2a42f5634738410aa76","sha512":"0013f7d66d8a9a6e55b78df610d47e8a9847dc2a7497e0040ebe1efb7c958f4722f2d35793c2784925f85f9f58bf610909527cf5821f71dce28229673942c985","ssdeep":"192:997B6XB8rycWWBmmdBg+/C7DQuAmG67Zfx:PwXKrydWBhdBg+/i1G67ZJ","tlshash":"26f1a0a261074f6cdf0b963937f7612127af9e4d517083b680c6cfb64327d755254584","first_seen":"2026-01-08T13:38:54.978347Z","last_seen":"2026-01-08T13:41:01.776041Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:40:24.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fpSon3HAHUND2LtwGkZp%2BkZXD7SOb6M9Z3KVhQgZEMmQpOkfJRpvkHQFriawiHYArLMtP46VZolV%2FharsZoMEmlXiTPIAeqqOQMtyikuZrWbTc131QrKOkv7%2F%2B8%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"saretarget.e25d7729d6aa0892d869.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:18 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2220\r\ncf-cache-status: HIT\r\netag: W/\"bf4ad79a8f3c33c2af6b13887462fe86\"\r\ncf-ray: 9bac1b450d6c0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4930,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4930), with no line terminators","md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/js/jquery.voting-video-0.1.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/js/jquery.voting-video-0.1.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=le5d90b98p71m5iuv6afs4tl9n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Jun 2020 08:32:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xfyEtqTnGOWGSIvduIB2tUQmMTP7fT3CRsg2pmnvepjC68QcUG8lExz7sTPf2lZJH%2BM6cjQ%2FlIXzEW0p7pwZo6fiNeGz8NGcU5UQmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Thu, 15 Jan 2026 04:01:51 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 639512\r\ncf-cache-status: HIT\r\netag: W/\"5d9-5a82f6101f200\"\r\ncf-ray: 9bac1b472b2e5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1497,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0f2af2b97bf00af0c15e2a8019953697","sha1":"7970f72caf38b75c818d14dbb7a8f1a61f36b0d0","sha256":"f16ae6a99564d192347ce6902e6d43f9d040a0711b36a13a9bac6cfe5e35844a","sha512":"ab23b5126849d4b0bfd082fe6e58ae0aed027c2256bb850c98c789a3806e597923f1850fd90daf2c4d564a551ae4654ea1f953a5aaf49dbb56bf7e0eedbefb08","ssdeep":"","tlshash":"91310a5cdb9e5725933f30f92e4f48cc295808b28594c556bc3da9998f04268433eeb6","first_seen":"2023-03-08T05:34:03Z","last_seen":"2026-02-08T18:07:09.056489Z","times_seen":58,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/css/bootstrap.css","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/css/bootstrap.css HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=le5d90b98p71m5iuv6afs4tl9n\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:23 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 25 Sep 2014 10:41:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=1209600\r\nexpires: Wed, 14 Jan 2026 05:18:41 GMT\r\ncontent-type: text/css\r\nage: 721301\r\ncf-cache-status: HIT\r\netag: W/\"217f6-503e172e9c080\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RH6GZSec3lFOBVultR%2BVJ5K9471FmVW4T0XRPcjojL%2FiyJ6H56C3wh2CITYU3HtS4woWIyf6SUQn5JdM9Lol9cgWiHJ%2FyD2PtWuZow%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9bac1b402afb5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137206,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (540)","md5":"d57ef8e8e64a9a6b75f6442736232604","sha1":"e7c76b0ce7346db16677264d7fcc73a41d09b9f1","sha256":"058fc3e7644d2b3104a08c1f99be9adeea8498aa82c3cf366c3ed1e5049cbc44","sha512":"a7b23f9285142f142e921861c35c3979d799dd08ae39ab921461e50cb488428b65f4060c7368999f55f85ffaa517401afa93eb1df8ac1ec0accd4040315048c1","ssdeep":"1536:kKLvT5jGG11R3f8XxEQI0BM2d1wTGlx0zPEv8IQwor6/:kG5jGm/P8DIovwTGlx0zPEv8IQwog","tlshash":"67d393d8bab435443223c09835938e92771d9043d41fed79bbe2347cafc95998973b8a","first_seen":"2023-05-10T09:20:02Z","last_seen":"2026-04-05T18:13:14.640414Z","times_seen":35,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767878700/216642829_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767878700/216642829_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3664\r\ncf-ray: 9bac1b4e2a5da41f-OSL\r\netag: \"1801c062634dce29c3492a6c082a28b5\"\r\nlast-modified: Thu, 08 Jan 2026 13:23:52 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 902\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1801c062634dce29c3492a6c082a28b5","sha1":"249bb8937d28a99ac596682a61bc294b3794cfc4","sha256":"9b06c7005911296910637ae7551038c98699789765f51171cf8549cf81be5e03","sha512":"c249dcc6fd77f0a7f6a38adf04de4544e518b487312ea06ee0340fcbaee9c9231dc264e6d699894082a3e89bde5cab45f80078d91cf4eb3cd77819895993da1c","ssdeep":"","tlshash":"68716da4566c584ed8e2f2a32930f4534c21e0d194450a6db76dcb3a14d8cb56677c52","first_seen":"2026-01-08T13:38:54.982007Z","last_seen":"2026-01-08T13:41:01.773118Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/media/videos/tmb/4325/1.jpg","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /media/videos/tmb/4325/1.jpg HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:40:23 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:50:39 GMT\r\nETag: \"1145-5bb018e42d802\"\r\nAccept-Ranges: bytes\r\nContent-Length: 4421\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4421,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 101x320, segment length 16, comment: \"Lavc57.54.100\", baseline, precision 8, 256x144, components 3","md5":"7cf257e345c7c6d46cca8ec25be8d5d7","sha1":"85118eea7d06b91b012ef1f0ab7475d190b1a24f","sha256":"202215bc2d6780f0de28dcab2ace3ade0013f2f2f29924c37d935aa72b2af800","sha512":"0e91ac8855798e6c1181ed3080888dc21752f4e30e44c940d0d3ddbc3f295594e84aedbd405d58dbd13c5c2b5df921984640686899badb58c6024ad8824b67b2","ssdeep":"96:KPzEKWw/9DO8M89hgLsZYLOFA7BIWUL9T8kmPUBnQl49fyI+Z4rE:KrLW69DqohgLCgOFAtIWUZTDmKQlZI+l","tlshash":"05915d6acdd37f117e3d802bc94b662af8672d490760ca1818248b56bb45099197ee2d","first_seen":"2026-01-08T13:41:01.780245Z","last_seen":"2026-01-08T13:41:01.780245Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":50,"dns":3,"connect":45,"send":0,"wait":37,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=le5d90b98p71m5iuv6afs4tl9n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Thu, 08 Jan 2026 14:28:23 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c2srPQaVXZk2bHRZ2HEsvsFpCz0YIIXdMMEP6%2F63YFM8vC5FZjI5lmZPU5S2ohH92LNsy8ssviJjC66gBVifd8melUUzRKuPIktRng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:40:23 GMT\r\ncf-ray: 9bac1b40bb045685-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-06T11:11:56.923269Z","times_seen":94923,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/lang/en.json","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:40:24.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/lang/en.json HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FnOCQOwMOpJvXgdH4Q%2F4PX1afPjRXq991OoizHgrMzuDNgKqBfsS8wofl%2BtJBK7iXVoUozqcWY2t8bbUwGSAWsmY%2FBTjQ3Lyr0RiQA8qeF%2FFTZDDSsHDERJfrYM%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2209\r\ncf-cache-status: HIT\r\netag: W/\"69a54638b649d7ce4748bd42c4b6dade\"\r\ncf-ray: 9bac1b478dac0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"69a54638b649d7ce4748bd42c4b6dade","sha1":"a2dfe9f8791952fbc5cc44d4757b031a6cee1731","sha256":"0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750","sha512":"1e98b8977577f6daca587310456d38ab870571a0bec392072f38287d274465b3ebc867e6eefe5efd7653c7c0d2a23dabe7636a94c0cfda52321a84fd68d868e3","ssdeep":"","tlshash":"1ac08c09220b0f0389c83c23a223352a0b422bbaeb033730c262c3012c8c1b734e33cc","first_seen":"2023-04-07T07:09:28Z","last_seen":"2026-04-06T07:31:32.390462Z","times_seen":3568,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=1","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=1 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b4bedca0b02-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 08 Jan 2026 13:40:25 GMT\r\ncf-cache-status: EXPIRED\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1693,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2f33b04eb41576a96a096ce6cddf3f44","sha1":"9d06a02f8bbc56c5503cb21369e3f80a026f2b48","sha256":"75e3703e828b6a4da42be66fce43b2e4fd676c86e723af65a911c5a896466689","sha512":"70e5520ddfb72ae4b551db91bedd8ce4aa9680047120ada20310fc0510a1ba2b6b606088a040977c67f2e60d4792a2fb6b5d749d8fe51dfe4355631ea3cb88f5","ssdeep":"","tlshash":"0d31f0f785ccce7e0f060284d9493c88e5972923a29bbb4490984e5e4ab5cc531dda66","first_seen":"2026-01-08T13:41:01.783487Z","last_seen":"2026-01-08T13:41:01.783487Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767879570/224622499_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767879570/224622499_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11018\r\ncf-ray: 9bac1b4e1a4ba41f-OSL\r\netag: \"a5b3681d39646c3759a5e5c70e6b8001\"\r\nlast-modified: Thu, 08 Jan 2026 13:38:51 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 33\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11018,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a5b3681d39646c3759a5e5c70e6b8001","sha1":"676429c104bb9bbbbe99e5af5fc31c83a6a00741","sha256":"cb41be36edb818915d9277337a816a3c1bf74e4c03437dd76f8035357342473a","sha512":"1062451868a344c4566e883d73e408e686ba11f776685a51448581531816b5539f161e8d6e32cf7b042a7862f34f3e098cef4b18625098d938dfbd5b31e35f7d","ssdeep":"192:zBShE9Mtoq+x86eVU85tixP9TKQw7LzAtpsLo2UzDwWvGP0:59MdJV5oV2Q+L8H2UHG0","tlshash":"5e32c0f1e9851c4e137e1d6765dd29d37bc18d6f8071260c937e560e4330f6c5914b64","first_seen":"2026-01-08T13:41:01.789672Z","last_seen":"2026-01-08T13:41:01.789672Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Jan 2026 17:56:30 GMT\r\nexpires: Tue, 05 Jan 2027 17:56:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 243835\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-04-06T08:39:59.03899Z","times_seen":6322,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/lang/en.json","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/lang/en.json HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l2apaM%2FwHfISTiMGtm%2F8RO%2F1AW7xvhQ%2FZ9HKinDwj2M6wlGyOSQWIWv%2BpnbD4I6kQIXOxAFUoa3Hwjkfu355KW6GNzR%2FBG0EcsQ%2FObOMyzGcxh7ifPMAVo1O9Yg%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2209\r\ncf-cache-status: HIT\r\netag: W/\"69a54638b649d7ce4748bd42c4b6dade\"\r\ncf-ray: 9bac1b482daf0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"69a54638b649d7ce4748bd42c4b6dade","sha1":"a2dfe9f8791952fbc5cc44d4757b031a6cee1731","sha256":"0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750","sha512":"1e98b8977577f6daca587310456d38ab870571a0bec392072f38287d274465b3ebc867e6eefe5efd7653c7c0d2a23dabe7636a94c0cfda52321a84fd68d868e3","ssdeep":"","tlshash":"1ac08c09220b0f0389c83c23a223352a0b422bbaeb033730c262c3012c8c1b734e33cc","first_seen":"2023-04-07T07:09:28Z","last_seen":"2026-04-06T07:31:32.390462Z","times_seen":3568,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026limit=1","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:40:25.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026limit=1 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b4bfdcd0b02-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 08 Jan 2026 13:40:25 GMT\r\ncf-cache-status: HIT\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1662,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5227f5aa7284649dabb47882d3cd83ad","sha1":"a9e9bc273d1a4a832e34deac984d69b10963ad18","sha256":"4774f467f15964ca094f1928f360e98c967c63b31b061a6edd9ce58bca08df41","sha512":"759d654aef6f6fc9eed53cf93a32768315d3ad0e1ff13543bd0320dea0a2aea4195d7f92f3948ab5a560851a4d17aae1c3b447e874bdf53a2ac376c20a736c4b","ssdeep":"","tlshash":"4931e3ab96cc0e760f9512c8d489381adb76171baa89b3d3d29c4f4501779cd330879b","first_seen":"2026-01-08T13:41:01.791733Z","last_seen":"2026-01-08T13:41:01.791733Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=1","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=1 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b4c2dd50b02-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 08 Jan 2026 13:40:25 GMT\r\nage: 0\r\ncf-cache-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1693,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2f33b04eb41576a96a096ce6cddf3f44","sha1":"9d06a02f8bbc56c5503cb21369e3f80a026f2b48","sha256":"75e3703e828b6a4da42be66fce43b2e4fd676c86e723af65a911c5a896466689","sha512":"70e5520ddfb72ae4b551db91bedd8ce4aa9680047120ada20310fc0510a1ba2b6b606088a040977c67f2e60d4792a2fb6b5d749d8fe51dfe4355631ea3cb88f5","ssdeep":"","tlshash":"0d31f0f785ccce7e0f060284d9493c88e5972923a29bbb4490984e5e4ab5cc531dda66","first_seen":"2026-01-08T13:41:01.783487Z","last_seen":"2026-01-08T13:41:01.783487Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33434\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 06 Jan 2026 16:20:50 GMT\r\nexpires: Wed, 06 Jan 2027 16:20:50 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 163174\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95786,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32086)","md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-06T10:39:21.588384Z","times_seen":45819,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":81,"dns":2,"connect":8,"send":0,"wait":9,"receive":8,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767879150/233751993_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767879150/233751993_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5754\r\ncf-ray: 9bac1b4c7b1e56cb-OSL\r\netag: \"f5694abb0ee016e8d71a7f573f0f028a\"\r\nlast-modified: Thu, 08 Jan 2026 13:31:28 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 469\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5754,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f5694abb0ee016e8d71a7f573f0f028a","sha1":"bf11c5baa2fa8ff6bdcddd012273bb6100b36ca9","sha256":"ebae66b82345d2457135e201193df54637a384ee3d141bd1780bbb248c4c4d53","sha512":"b3a68e6b2c50c4efb8ca73582c1b6bba9d58f35930c03c1193c57bee344d6de3651361d78603b0d3b017007244ec462e6fe7e20cf7853db10cc441baf2a0e199","ssdeep":"96:2/ZTc6ztSrFiMLDynFR7bicvnd9bRFQV/rZe9k4gD8RBD:2/ZTc6ztSBLDyHXicPd91KV/8kVD8b","tlshash":"4ec1ae75551b5fe9298367f3884aa9ef8130760234001bccb89c81b83a496d76f4dfce","first_seen":"2026-01-08T13:38:55.043378Z","last_seen":"2026-01-08T13:42:25.937877Z","times_seen":3,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767879360/231824312_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767879360/231824312_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7154\r\ncf-ray: 9bac1b4c7b2356cb-OSL\r\netag: \"b014b67426ec64a1a2af9595ae6a5dfb\"\r\nlast-modified: Thu, 08 Jan 2026 13:35:51 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 226\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7154,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b014b67426ec64a1a2af9595ae6a5dfb","sha1":"8224b9793782cd3891ccfc0828efaf272442b8fe","sha256":"1231fef0c0391fed73bd008a163d160493495f88a6aec33938851ed8b78b35f6","sha512":"55b526067099be3feb2ac27f65a5a45921e3a3b63cc6827cec309f194683f186be26e096f45fcc974287db280229e86821fb5d788a970ccde8e64a9b4f9c3f3a","ssdeep":"96:E9EiOZhzhlYCbwj2d1vr47EO2ERpKdN0fjUxwnxXE8aLOxYL83ByNEUAx:EjOZBhlY8/MaooafBxXVTGL83ByNEUAx","tlshash":"52e1af1a87c384ed9b30fa196b386e6a1dba042907be4b663c210770f99fb05d0d2034","first_seen":"2026-01-08T13:41:01.79839Z","last_seen":"2026-01-08T13:42:25.924178Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Jan 2026 17:56:30 GMT\r\nexpires: Tue, 05 Jan 2027 17:56:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 243835\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-04-06T08:39:59.03899Z","times_seen":6322,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.mnaspm.com/smartpop/ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a?userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45","fqdn":"go.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.mnaspm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 14:45:10 GMT","end":"Mon, 09 Feb 2026 15:45:02 GMT"},"fingerprint":{"sha1":"08:B3:F2:8D:13:1C:EB:A1:77:F3:4F:6D:79:41:EC:E1:F5:51:C8:61","sha256":"75:27:CE:45:8A:C8:5C:F8:FB:5C:83:64:C2:23:8F:FB:69:DE:F7:BB:D5:5B:53:12:BC:CD:68:FF:FF:75:C6:21"}}},"request":{"raw":"GET /smartpop/ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a?userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45 HTTP/1.1\r\nHost: go.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 08 Jan 2026 13:40:23 GMT\r\ncontent-length: 0\r\nlocation: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\ncf-ray: 9bac1b40d837723c-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T11:11:40.092337Z","times_seen":13419940,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:24.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0esNeQy0qYDnQ%2BPrYC3idhqd167RGSjYJS02IB2KjCgyQIEBG1Sy9aRbCxyE%2BTmpgeP%2FcRJyAXAfXp7HjZFVVHpddlUfiOGBxgPyuPYVyQcwgbri3sh9ep6QM4w%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"saretarget.e25d7729d6aa0892d869.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:18 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2220\r\ncf-cache-status: HIT\r\netag: W/\"bf4ad79a8f3c33c2af6b13887462fe86\"\r\ncf-ray: 9bac1b457d760b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4930,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4930), with no line terminators","md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767879570/224622499_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767879570/224622499_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11018\r\ncf-ray: 9bac1b4c5ad056cb-OSL\r\netag: \"a5b3681d39646c3759a5e5c70e6b8001\"\r\nlast-modified: Thu, 08 Jan 2026 13:38:51 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 34\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11018,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a5b3681d39646c3759a5e5c70e6b8001","sha1":"676429c104bb9bbbbe99e5af5fc31c83a6a00741","sha256":"cb41be36edb818915d9277337a816a3c1bf74e4c03437dd76f8035357342473a","sha512":"1062451868a344c4566e883d73e408e686ba11f776685a51448581531816b5539f161e8d6e32cf7b042a7862f34f3e098cef4b18625098d938dfbd5b31e35f7d","ssdeep":"192:zBShE9Mtoq+x86eVU85tixP9TKQw7LzAtpsLo2UzDwWvGP0:59MdJV5oV2Q+L8H2UHG0","tlshash":"5e32c0f1e9851c4e137e1d6765dd29d37bc18d6f8071260c937e560e4330f6c5914b64","first_seen":"2026-01-08T13:41:01.789672Z","last_seen":"2026-01-08T13:41:01.789672Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:24.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F13IB5SdJ32P48CIgkReCWsixm3hkAmyEZ01GSZ0OFa6CiaD%2B%2Fn7gBRD06N4uCy23c1fsWYYImdvTF54j7PyPsIGY0Xb9Mo%2FHcNR%2BxmHWZXu39QJn80bz1JyWCE%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"saretarget.e25d7729d6aa0892d869.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:18 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2220\r\ncf-cache-status: HIT\r\netag: W/\"bf4ad79a8f3c33c2af6b13887462fe86\"\r\ncf-ray: 9bac1b455d710b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4930,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4930), with no line terminators","md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.xrares.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 07 Jan 2026 00:01:19 GMT\r\nexpires: Thu, 07 Jan 2027 00:01:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 135545\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-06T11:10:22.541319Z","times_seen":200839,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":198,"dns":0,"connect":49,"send":0,"wait":17,"receive":8,"ssl":145},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/media/videojs/js/anyhtm.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /media/videojs/js/anyhtm.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=le5d90b98p71m5iuv6afs4tl9n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 25 Nov 2021 18:47:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RFJFMwo%2B9L152Zkldh7DHAnOWfXhG%2Fxq1Tc8sWpaIM%2Fhi%2B377SrYAorXlxiXEAufs0kcLzYKJdqZVmInn2XiZKCxuEcjGIlyRFPYSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Thu, 22 Jan 2026 13:40:24 GMT\r\netag: W/\"1823-5d1a1672e107b\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9bac1b471b2b5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6179,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"2def17f53ffbf570fe77f29349b207b4","sha1":"92445e4d4937aaa12d71f7072f1e934e43f2d879","sha256":"bf92ecc4594938de3bed4d4ff607b744e31a618ceea127408d062e751cf011d7","sha512":"565eafc066d932838830fe70fbc6742c08731b418e1b1a0d911fec1cd8db5c884bc876ee9cab086ebd7d500efa9178083f1438b029cad6ca514c28a3997e8e56","ssdeep":"96:sW+xpCaWNNssLKOL7i8HWJ7i6UStmj8RZE1DG07icVZEBzv57i1xwPFjZZtS7iKk:R+GaWNcrYUZbvootjZ76/Pj7exsvG6G1","tlshash":"94d18283f74a315cc8fe537b644d8295223e492b6c4a8e14e610d3b5396d648ed2e2ff","first_seen":"2023-03-08T13:16:44Z","last_seen":"2026-01-08T13:42:25.873903Z","times_seen":7,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/config?url=https%3A%2F%2Fcreative.bluetrafficstream.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26campaignId%3Dba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a%26campaignType%3Dsmartpop%26creativeId%3De20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e%26hideTitle%3D1%26iterationId%3D893666%26masterSmartpopId%3D0%26ruleId%3D0%26smartpopId%3D12508%26tag%3Dgirls%26trafficType%3DbannerIframeOrJS%26userId%3D20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45%26variationId%3D33889","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"172.67.163.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 09:53:39 GMT","end":"Wed, 11 Feb 2026 10:53:35 GMT"},"fingerprint":{"sha1":"C2:7D:A8:62:E6:F4:E6:F3:7E:AF:2E:53:7F:BF:58:37:C3:8E:2B:73","sha256":"BE:53:14:20:34:91:1E:14:B4:9E:4D:77:E4:2E:12:41:13:5B:E9:F8:08:54:AB:D1:EF:8F:98:B2:29:23:D0:F0"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.bluetrafficstream.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26campaignId%3Dba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a%26campaignType%3Dsmartpop%26creativeId%3De20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e%26hideTitle%3D1%26iterationId%3D893666%26masterSmartpopId%3D0%26ruleId%3D0%26smartpopId%3D12508%26tag%3Dgirls%26trafficType%3DbannerIframeOrJS%26userId%3D20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45%26variationId%3D33889 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: application/json\r\ncf-ray: 9bac1b482cdb4e4c-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7706,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"631cfb4bde911c5bcd28034198af4ae5","sha1":"b414db9abbf5a4d7e051286799a2416ae3927cb5","sha256":"6d61a5c3e4de80aa883322334fb173c3a755e77dacb507d9e200aea75cf3b336","sha512":"648f04a346a6853cc515f06bb00addc8f33396648e2caa01c12609de15ea4bd56017f4c9567fbe4aa42b90404fd992768a13c3279b3d39261c4d1a01b9a5724b","ssdeep":"192:wDy9Zh+9mIWkUU88yMTq74Hh8nyayqh13/7VlloqJIwm13YAyQ13/7VlloqJIw1:V943Wks8yME+lgbeH","tlshash":"0bf165eb8b1d25b30a880d4d7e1d65c86a9c44a75e828debdc8a9834431d7f113fb74d","first_seen":"2026-01-08T13:41:01.80756Z","last_seen":"2026-01-08T13:41:01.80756Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/config?url=https%3A%2F%2Fcreative.bluetrafficstream.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26campaignId%3Dba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a%26campaignType%3Dsmartpop%26creativeId%3De20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e%26hideTitle%3D1%26iterationId%3D893666%26masterSmartpopId%3D0%26ruleId%3D0%26smartpopId%3D12508%26tag%3Dgirls%26trafficType%3DbannerIframeOrJS%26userId%3D20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45%26variationId%3D33889","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.bluetrafficstream.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26campaignId%3Dba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a%26campaignType%3Dsmartpop%26creativeId%3De20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e%26hideTitle%3D1%26iterationId%3D893666%26masterSmartpopId%3D0%26ruleId%3D0%26smartpopId%3D12508%26tag%3Dgirls%26trafficType%3DbannerIframeOrJS%26userId%3D20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45%26variationId%3D33889 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b48cdb20b02-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7706,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"37b417ff52fc33bdd10e1ee66081a5e8","sha1":"673056e258b7dee0f8639e62942cd5d26f7d2dff","sha256":"5040b4f29286fb39747e93e93fdc94f3838b2a0b82a88f8fb4ac17c69cbcafc0","sha512":"ff078b5f005d006250d1ffbba831a5ad8e19606c26ba09622cd8550a7320b19d5fb1e971c41f1e40818e57c1e6d40750d4c754100c9b3d6126ee06ffc78229b7","ssdeep":"192:wDy9Zh+9mIWkUtiED0bPo4Hh8nyayqh13/7VlloqJIwm13YAyQ13/7VlloqJIw1:V943WkAZQzo+lgbeH","tlshash":"e5f165eb8b1d25b30a880d4d7e1d65c86a9c44a75e828debdc8a9834431d7f113fb74d","first_seen":"2026-01-08T13:41:01.808778Z","last_seen":"2026-01-08T13:41:01.808778Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/app/domain-checker/get-check","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"POST /app/domain-checker/get-check HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b4c0dd00b02-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-expose-headers: *\r\nvary: Origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T11:11:40.092337Z","times_seen":13419940,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/app/domain-checker/get-check","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"POST /app/domain-checker/get-check HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b4bfdcf0b02-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-expose-headers: *\r\nvary: Origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T11:11:40.092337Z","times_seen":13419940,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/media//videojs/video.min.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /media//videojs/video.min.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=le5d90b98p71m5iuv6afs4tl9n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 16 Jan 2020 11:35:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zb1WRg80YyZTkvtxDiaXsoZOpZKJuRLuPjAg9W3HrIzsv58CmclWvynp9tqbCMU2MAgoImrNH8eSDbxsYovTzKuNQgz5GoKX0KQItg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Thu, 22 Jan 2026 13:40:24 GMT\r\netag: W/\"4700e-59c40371c6100\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9bac1b472b2d5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":290830,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"3b7cd4bfef76118f4e37d5b0ddaf3c24","sha1":"22515637083d1c077f2abb38525be6f4240c1cfa","sha256":"406fe9f8f931910a9621443786f97ea505727c9e023314475b2f2cdba776de17","sha512":"4a0545de85aafc7e350fbbcd8a89978b1667c9de1311cbca605d77eed40904085be94dd6d83d9f66f0186689a3913dac47fe5e9136315fc0a4dc6c624392ae21","ssdeep":"6144:cSX/GHubMblZyqranNWYWtq9q4kDdpi6T4S2tx6FL5HM6Uvjb55/c0YUIGFqlPyY:cnDyqranNWYWtq9q4kDdpi6T4S2tx6FH","tlshash":"9854fa89f1b4b16642d765908c3b8d0db239b97c901890e8f2fbe4f65ff48594627b38","first_seen":"2026-01-08T13:38:55.023682Z","last_seen":"2026-01-08T13:42:25.974806Z","times_seen":3,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026limit=1","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:40:25.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026limit=1 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b497dbe0b02-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 08 Jan 2026 13:40:25 GMT\r\ncf-cache-status: EXPIRED\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1662,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5227f5aa7284649dabb47882d3cd83ad","sha1":"a9e9bc273d1a4a832e34deac984d69b10963ad18","sha256":"4774f467f15964ca094f1928f360e98c967c63b31b061a6edd9ce58bca08df41","sha512":"759d654aef6f6fc9eed53cf93a32768315d3ad0e1ff13543bd0320dea0a2aea4195d7f92f3948ab5a560851a4d17aae1c3b447e874bdf53a2ac376c20a736c4b","ssdeep":"","tlshash":"4931e3ab96cc0e760f9512c8d489381adb76171baa89b3d3d29c4f4501779cd330879b","first_seen":"2026-01-08T13:41:01.791733Z","last_seen":"2026-01-08T13:41:01.791733Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.mnaspm.com/smartpop/ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a?userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45","fqdn":"go.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.mnaspm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 14:45:10 GMT","end":"Mon, 09 Feb 2026 15:45:02 GMT"},"fingerprint":{"sha1":"08:B3:F2:8D:13:1C:EB:A1:77:F3:4F:6D:79:41:EC:E1:F5:51:C8:61","sha256":"75:27:CE:45:8A:C8:5C:F8:FB:5C:83:64:C2:23:8F:FB:69:DE:F7:BB:D5:5B:53:12:BC:CD:68:FF:FF:75:C6:21"}}},"request":{"raw":"GET /smartpop/ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a?userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45 HTTP/1.1\r\nHost: go.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 08 Jan 2026 13:40:23 GMT\r\ncontent-length: 0\r\nlocation: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\ncf-ray: 9bac1b40e894723c-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T11:11:40.092337Z","times_seen":13419940,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/media/users/nopic-Male.gif","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /media/users/nopic-Male.gif HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:40:23 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:39:37 GMT\r\nETag: \"e64-5bb0166cd8812\"\r\nAccept-Ranges: bytes\r\nContent-Length: 3684\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3684,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 450 x 450","md5":"040a34aa6bfded35d355f8457304a2cc","sha1":"fb506cbdb0ef3b6caf416fd85a34f8de7dc5ffde","sha256":"e86558ec0e214497d1e95a16125ca9499ae87fe97073bbd7193f0420d2f89647","sha512":"b3aefe657f818a0ef682a2f4b4c465543dbf3c389fe16ef33613fb223c8fe7503b00dc30114efef6b2a27b92084111f645e2b76db12851c7ac53a4603e325701","ssdeep":"","tlshash":"0a716da15f62a5d59dfd832f4028d5de00246c0aa2186692d2a87e4f70b56ba9c5ca31","first_seen":"2023-05-14T08:40:17Z","last_seen":"2026-04-04T21:34:36.061947Z","times_seen":184,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":46,"dns":0,"connect":37,"send":0,"wait":38,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767878700/216642829_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767878700/216642829_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3664\r\ncf-ray: 9bac1b4e1a4aa41f-OSL\r\netag: \"1801c062634dce29c3492a6c082a28b5\"\r\nlast-modified: Thu, 08 Jan 2026 13:23:52 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 902\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1801c062634dce29c3492a6c082a28b5","sha1":"249bb8937d28a99ac596682a61bc294b3794cfc4","sha256":"9b06c7005911296910637ae7551038c98699789765f51171cf8549cf81be5e03","sha512":"c249dcc6fd77f0a7f6a38adf04de4544e518b487312ea06ee0340fcbaee9c9231dc264e6d699894082a3e89bde5cab45f80078d91cf4eb3cd77819895993da1c","ssdeep":"","tlshash":"68716da4566c584ed8e2f2a32930f4534c21e0d194450a6db76dcb3a14d8cb56677c52","first_seen":"2026-01-08T13:38:54.982007Z","last_seen":"2026-01-08T13:41:01.773118Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/fonts/glyphicons-halflings-regular.woff","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/fonts/glyphicons-halflings-regular.woff HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xrares.com/templates/frontend/dark-magenta/css/bootstrap.css\r\nCookie: AVS=le5d90b98p71m5iuv6afs4tl9n\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Jul 2018 12:19:12 GMT\r\netag: \"5b18-571a9a7317000\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Wed, 14 Jan 2026 21:03:14 GMT\r\ncontent-length: 23320\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/font-woff\r\nage: 664630\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OQ0swXKffJYpdd0Hrl6rIdydhZj0ssZq3RR%2FjOoQLQcbdiuF9eXX4gVV8eXaueYcDZ2D3Yk1dFRHo48hpwI%2F8cgKwhhC7bzTXYFqDQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9bac1b46ab235685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23320,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 23320, version 1.0","md5":"68ed1dac06bf0409c18ae7bc62889170","sha1":"22037a3455914e5662fa51a596677bdb329e2c5c","sha256":"fc969dc1c6ff531abcf368089dcbaf5775133b0626ff56b52301a059fc0f9e1e","sha512":"88beda715a3de8ea031048feb71fd3ffff9c695fd9874b06c8b1d31c88c7a8a653c4a67efab3b6f0b1f4dedc3c18a6436a4455984c0abce10a210baca0cb689d","ssdeep":"384:nPImthkcJE4kdRJe7gl601jRx2GbhjBrr7plKUl2yCIvSAF2KFXthj1D:PImth2Je70jxphjZp0UMyPSyhD","tlshash":"1ea2d0e7af93450ff75e1279c384429e368dac09a19b0dc546edac1d91c80bced426f5","first_seen":"2023-04-05T07:13:03Z","last_seen":"2026-04-06T10:09:36.423479Z","times_seen":5167,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/js/jquery.rotator-0.2.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/js/jquery.rotator-0.2.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=le5d90b98p71m5iuv6afs4tl9n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 12 Apr 2022 21:12:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2deiymrkB6GxwPd4vR4EgyEUE597%2Fn5aSZAvYklTZO5gkEpIiPzoEjIVAy3g9g1AVTQDu10hhGM4uelh1jIKaWys22Y35v9FUjnjNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Sat, 17 Jan 2026 04:35:44 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 464680\r\ncf-cache-status: HIT\r\netag: W/\"761-5dc7b84ddc248\"\r\ncf-ray: 9bac1b471b295685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1889,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"9e38a3d0ef9625af4a0ae17e907c1e5a","sha1":"f62cef879b87536c507ca5e8dc652e288d0a73e6","sha256":"3db2da534cf2cccf21a77fc4e25c3a8436ca4934e4265c828ac5aa3f79cde5ee","sha512":"80382ee3cf388a384b5cf88a49af208cdce075b7ade72ce55952e93f5be85d6640e08362fbc917d82f95736174e0dc284475bfb949d750e5b968861a8cb152d7","ssdeep":"","tlshash":"9241e1850ab2976f5613b2b42f1e05483a9650671140ed083e1ea5a4dfa037d53fabf9","first_seen":"2025-07-04T04:12:03.031131Z","last_seen":"2026-04-05T18:13:14.590093Z","times_seen":9,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/config?url=https%3A%2F%2Fcreative.bluetrafficstream.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26campaignId%3Dba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a%26campaignType%3Dsmartpop%26creativeId%3D68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586%26hideTitle%3D1%26iterationId%3D893666%26masterSmartpopId%3D0%26ruleId%3D0%26smartpopId%3D12508%26tag%3Dgirls%252Fteens%26trafficType%3DbannerIframeOrJS%26userId%3D20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45%26variationId%3D33890","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"172.67.163.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:40:24.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 09:53:39 GMT","end":"Wed, 11 Feb 2026 10:53:35 GMT"},"fingerprint":{"sha1":"C2:7D:A8:62:E6:F4:E6:F3:7E:AF:2E:53:7F:BF:58:37:C3:8E:2B:73","sha256":"BE:53:14:20:34:91:1E:14:B4:9E:4D:77:E4:2E:12:41:13:5B:E9:F8:08:54:AB:D1:EF:8F:98:B2:29:23:D0:F0"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.bluetrafficstream.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26campaignId%3Dba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a%26campaignType%3Dsmartpop%26creativeId%3D68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586%26hideTitle%3D1%26iterationId%3D893666%26masterSmartpopId%3D0%26ruleId%3D0%26smartpopId%3D12508%26tag%3Dgirls%252Fteens%26trafficType%3DbannerIframeOrJS%26userId%3D20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45%26variationId%3D33890 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\ncontent-type: application/json\r\ncf-ray: 9bac1b47cb3f4e4c-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7706,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0a4e087690fd0aafb2a1480469766d54","sha1":"58db4d901aaccd1dcc10cf7db590330adbe4cf69","sha256":"320e2b9c1a711032de154e55b316776ee62cddbe152c491011b2f7933b0f8253","sha512":"8a8c7cd5c058940723adaf55dc3c05f8c28d9ebf25b6a4d8991f7f8f07c948504608d16146638a23e9d17a992b8d08bf4d58722890c35b3d97ce760fcd954a98","ssdeep":"192:wDy9Zh+9mIWkUK6wZJM8K4Hh8nyayqh13/7VlloqJIwm13YAyQ13/7VlloqJIw1:V943WkL6cNK+lgbeH","tlshash":"e6f165eb8b1d25b30a880d4d7e1d65c86a9c44a75e828debdc8a9834431d7f113fb74d","first_seen":"2026-01-08T13:41:01.813883Z","last_seen":"2026-01-08T13:41:01.813883Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":35,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/favicon-16x16.png","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:25.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:40:25 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:00:52 GMT\r\nETag: \"495-5bb00dc343b67\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1173\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"818c989ac6e8e032d3c3820d3a1bff48","sha1":"2903f52c29784f03cd86cc10e7350a7e10572c97","sha256":"a575eeb2a3448599cbb890d2ad2fbbd1fdcec30dcbfd0886ea50f249d6712c8d","sha512":"aba1c31e40aeefb87c66e83c117490eb7a711640dace7a338963b20e823b02ad2305a3bbf4e6a9fbdfe32c53079815bc409258dee6686d00b2214ca3a3e2a383","ssdeep":"","tlshash":"382132d1bebbd7abc866c37e62820654b83182556700795e8257c2b82e38b40a755bce","first_seen":"2023-06-15T04:01:20Z","last_seen":"2026-04-05T18:13:14.591624Z","times_seen":14,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/abc.gif?campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.xrares.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1395%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A789%2C%22duration%22%3A94%2C%22transferSize%22%3A266024%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A790%2C%22duration%22%3A41%2C%22transferSize%22%3A2805%7D%5D\u0026mh=-1504648302","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /abc.gif?campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.xrares.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1395%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A789%2C%22duration%22%3A94%2C%22transferSize%22%3A266024%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A790%2C%22duration%22%3A41%2C%22transferSize%22%3A2805%7D%5D\u0026mh=-1504648302 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b49ddc00b02-OSL\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T11:11:40.092337Z","times_seen":13419940,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/abc.gif?campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.xrares.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1404%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A806%2C%22duration%22%3A98%2C%22transferSize%22%3A266022%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A807%2C%22duration%22%3A53%2C%22transferSize%22%3A2807%7D%5D\u0026mh=-1136828393","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /abc.gif?campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.xrares.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1404%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A806%2C%22duration%22%3A98%2C%22transferSize%22%3A266022%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A807%2C%22duration%22%3A53%2C%22transferSize%22%3A2807%7D%5D\u0026mh=-1136828393 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b4a2dc20b02-OSL\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T11:11:40.092337Z","times_seen":13419940,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:40:25.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Jan 2026 17:56:30 GMT\r\nexpires: Tue, 05 Jan 2027 17:56:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 243835\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-04-06T08:39:59.03899Z","times_seen":6322,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767878700/216642829_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767878700/216642829_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3664\r\ncf-ray: 9bac1b4c5aca56cb-OSL\r\netag: \"1801c062634dce29c3492a6c082a28b5\"\r\nlast-modified: Thu, 08 Jan 2026 13:23:52 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 894\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1801c062634dce29c3492a6c082a28b5","sha1":"249bb8937d28a99ac596682a61bc294b3794cfc4","sha256":"9b06c7005911296910637ae7551038c98699789765f51171cf8549cf81be5e03","sha512":"c249dcc6fd77f0a7f6a38adf04de4544e518b487312ea06ee0340fcbaee9c9231dc264e6d699894082a3e89bde5cab45f80078d91cf4eb3cd77819895993da1c","ssdeep":"","tlshash":"68716da4566c584ed8e2f2a32930f4534c21e0d194450a6db76dcb3a14d8cb56677c52","first_seen":"2026-01-08T13:38:54.982007Z","last_seen":"2026-01-08T13:41:01.773118Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/css/responsive.css","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/css/responsive.css HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=le5d90b98p71m5iuv6afs4tl9n\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:23 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Jun 2021 12:32:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vGfsqR0AyzXsrqsiP8N6LMG7qsIXMkV8iltIY7bTlMEt9aAkbnZejV%2FJc3NMXTAU2ZQH5LZg3zVk8giaxD0fjqg7ccS7HPzur0NmkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Fri, 16 Jan 2026 04:29:36 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 551447\r\ncf-cache-status: HIT\r\netag: W/\"90b-5c42c3bc62600\"\r\ncf-ray: 9bac1b403afd5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2315,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"63c9978a2b4c11fb1d1ffb1bf92e0320","sha1":"5bf3d5f96575936c96c752bb5c582ac0cefe6067","sha256":"77e847c82024e95bd16a68d12545094e541a394e07658807d889c764ec9bff9a","sha512":"4c03399fe51a42e61a4f9039ca0fc24f1219922b7888cba925bea1b4cb3fe04a7e76a27a25576a3ce86e872e996506bd80756e84ebed61bba4ed71bc44763f15","ssdeep":"","tlshash":"af41bc93efc2b10c865231664db225a5177728369bdfaecbcd83912cadc039900b6f5c","first_seen":"2025-07-04T04:12:02.972747Z","last_seen":"2026-04-05T18:13:14.644026Z","times_seen":9,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xraress.com/picon.png","fqdn":"cdn.xraress.com","domain":"xraress.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /picon.png HTTP/1.1\r\nHost: cdn.xraress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:40:23 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:00:52 GMT\r\nETag: \"68f-5bb00dc3cedf3\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1679\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced","md5":"d98e1b3a618ad365cb02bd0c33758d8a","sha1":"7ee60562a0aa6c0d6b479f155ce71fe9317f2173","sha256":"62aec2212792b5456014befac66f80dc1924e5f36e8cfe8091a509ec60ac01a5","sha512":"ccbe7a0fc3c5ff2a15b9c421784ae8967ba371aedf28cfc254d61a5e6c0d9715973f06abdf193df83449383b7758f895b154e524c6d181588c3bd0bebca7e835","ssdeep":"","tlshash":"8c314046380cc13b50203d3af94f14a0a8e55650e4b6e34ff3945e92534d60ff8769b3","first_seen":"2023-06-15T04:01:20Z","last_seen":"2026-01-08T13:42:25.966425Z","times_seen":7,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":66,"dns":1,"connect":41,"send":0,"wait":42,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/iframe_api","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:25.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /iframe_api HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, require-trusted-types-for 'script'\r\nexpires: Thu, 08 Jan 2026 13:40:25 GMT\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncache-control: private, max-age=0\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy-report-only: report-uri https://csp.withgoogle.com/csp/youtube_main/strict;base-uri 'self';object-src 'none';script-src 'nonce-SttUNuOVJPSHT0OOVrp0OA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval'\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: __Secure-YNID=14.YT=Zv5f7alDNgs9zsiurJRoNRhoNhU0ngZ2WksNVEEsLP70SwzXizEEPgGAtZAJshdtc2omwD2Rmy4fD69xECxjfDCvBql-mslIYXY2ybGsjsSPyovVUiGBUKG1noM4QRZsHqEoQm3dfFOA3tfqntfI3sr-7iBNHwQK7HqgvAya3nybBV4lSq0qcRixhFB1j4ZxzFrTmzX6ny_A6vvsNpDi5kkrwEgUY-ySnU9JbJyAXDo-0DCYgSc7K-BEfb8VXFSngsbYXN89Ej037i3I_DaP32kjq7woh8B95Zm0S8ymCWKJd2W-aSSD3tu4Y_edt2hxwZYUWFNuWs58zp8xxr6C2w; expires=Tue, 07-Jul-2026 13:40:25 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none\nYSC=L0hNeee741I; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-YEC=; Domain=.youtube.com; Expires=Fri, 14-Apr-2023 13:40:25 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=uNVty9m_d6E; Domain=.youtube.com; Expires=Tue, 07-Jul-2026 13:40:25 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIhEh0SGwsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJiBH; Domain=.youtube.com; Expires=Tue, 07-Jul-2026 13:40:25 GMT; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=COe5k6XAwej6eRDK38_oiPyRAxjK38_oiPyRAw%3D%3D; Domain=youtube.com; Expires=Tue, 07-Jul-2026 13:40:25 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":993,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (501)","md5":"a5c005d2442ed34725871390825cbaec","sha1":"885c6e931361202d4415808eb3c5293c3a756ed3","sha256":"ce4023c12700238c416abd879ea09a7440cecb301f7c890f66795937526d7374","sha512":"519ef43125ac5232f3ddcbf8ef20bd76f0f3ad93ffa02df226b7bd06bfabecbb24dd6bbaf0b6398f0e4fc494d927ef66192e1a17737522c2c3551ffad358b7ad","ssdeep":"","tlshash":"7c11ed7b3d84e6398658a4e4a03fd31cf1b224957c51cd9110cde889e65cbcadd2d5bc","first_seen":"2026-01-06T16:30:28.099644Z","last_seen":"2026-01-13T04:56:27.166157Z","times_seen":525,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":133,"dns":1,"connect":21,"send":0,"wait":44,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:400,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css?family=Open+Sans:400,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xrares.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 08 Jan 2026 13:40:24 GMT\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11588,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"28e0e3d1db179a6b0b454a6a42a382b7","sha1":"637e0ca2efa06fb7bcdadb1ed0cade98aa6f6c08","sha256":"f1251b5aa44c40639d940adcbebe2d7d88573dfac9a2ba63d71ca06ea67bbad9","sha512":"bfe57657f404dacdef4e7bed130a8a739fcc007f9f6d6a9a81d57f10a25776048b664cf58ddc935c6dcecd6fb7ac373b74b03367ae91be7e9ce4badf853fbd3a","ssdeep":"192:wCAAN21/rqbnbqGIwV4Razq4CZZE2s6rqmnbqGIwV4YfzvY:TjXqY4nU8qY4Z","tlshash":"bc322ba00017185067431de623de7e34ee0fa2657044d0766bfd8b9beedad6963b431d","first_seen":"2025-09-17T00:46:50.629094Z","last_seen":"2026-04-06T11:19:56.04145Z","times_seen":7467,"resource_available":false,"data":null}},"time_used":828,"timings":{"blocked":373,"dns":1,"connect":28,"send":0,"wait":46,"receive":0,"ssl":377},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.mnaspm.com/smartpop/ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a?userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45","fqdn":"go.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.mnaspm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 14:45:10 GMT","end":"Mon, 09 Feb 2026 15:45:02 GMT"},"fingerprint":{"sha1":"08:B3:F2:8D:13:1C:EB:A1:77:F3:4F:6D:79:41:EC:E1:F5:51:C8:61","sha256":"75:27:CE:45:8A:C8:5C:F8:FB:5C:83:64:C2:23:8F:FB:69:DE:F7:BB:D5:5B:53:12:BC:CD:68:FF:FF:75:C6:21"}}},"request":{"raw":"GET /smartpop/ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a?userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45 HTTP/1.1\r\nHost: go.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 08 Jan 2026 13:40:23 GMT\r\ncontent-length: 0\r\nlocation: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\ncf-ray: 9bac1b407ef2723c-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T11:11:40.092337Z","times_seen":13419940,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":38,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/media/videojs/video-js.min.css","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /media/videojs/video-js.min.css HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=le5d90b98p71m5iuv6afs4tl9n\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:23 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Jun 2020 08:32:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gob1e22Ua9QcPHF%2BwrNvVgNtKxoolMaIABlJuc9cFIVa889uU8ilEysMdL%2FD33wLs89fRxMLHlWa%2F8h6MZvSCH4LIl8l8TUdFCRWqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Thu, 22 Jan 2026 13:40:23 GMT\r\netag: W/\"90ed-5a82f609e30fd\"\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9bac1b403b005685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37101,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37101), with no line terminators","md5":"c607037fe4d2ced229e8124a3cbef0f7","sha1":"a21c15b1666f5e82b79fe13fa179254c3a9996a7","sha256":"d772113b920c9947d665417136fe99422b53359f9b0fff62d6c26f0816ee4400","sha512":"34921e1d13bb6fc6a844b2dcc74c9f7c91ab5da4926396e2b179de644b9cd0ea300bc4b86e8d44c3e367d2c74f951259b61dc1f8bca4c3b48ab3439a43cb6d9f","ssdeep":"384:Nde0Ykl3joViNf6KI9fsDzBkIkNrRIM6PeeJEteop7N9KmO:n3UctpZ8MM6PeR4mO","tlshash":"f4f28662f44891eea13fc65169d1a37aa238f116d2220aedf25b777ccfcb1d620572c4","first_seen":"2023-06-15T04:01:20Z","last_seen":"2026-01-08T13:42:25.910411Z","times_seen":7,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:24.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gORgQ5SV4eiOgXCcaiopg56%2FBuDkshO6LWayTHfCrHaU95fAOlJZCxbdmhJk2HYqPGz8KUOTzf67ITECj4dIE81SbJzVqIXmLe%2FPuMGnsS%2Fc1epUFx6SswxDQ7U%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.0392e0f6c7b6d376d1e1.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2216\r\ncf-cache-status: HIT\r\netag: W/\"6264faf747172d4118734f941fea2ae5\"\r\ncf-ray: 9bac1b453d6d0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1144541,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"38aae49805e8e835d39ca677256ddd3a","sha1":"f6acb5b16b97585c582e77165660ddf22f90dd80","sha256":"c9f21fe56aea40cd8c743dcc96d926514ed046e07bf150efc010fc3b796852bd","sha512":"9e2ae8ae8797283a4921700f90b99bcbb05739c21bea5a435ef10995b433dcbaf28a8479aabcf5d786dbf5caa66f6a7b38eb93eb71aa8935e984dfd0a97461d8","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJT:tRe0Y+AWZTdXYrntI0tPqX2vqDdu","tlshash":"642539897756b47646c69146e03f0203f235699a201a905cb3deecec665ceceb237b37","first_seen":"2026-01-08T13:18:31.205655Z","last_seen":"2026-01-13T02:40:20.342138Z","times_seen":37,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:24.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=011D3ri6RJ605kLKl1vMLLH8TsgY8suHgpiqNbG3bDg0sbwTgD0Uv6jGgwyGFGVMBsxBP%2Bt8wM4gpis2mz3gbAoXMuxDpMFF8NqdtLTP1QuhrMDXduEFSas8u28%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"saretarget.e25d7729d6aa0892d869.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:18 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2220\r\ncf-cache-status: HIT\r\netag: W/\"bf4ad79a8f3c33c2af6b13887462fe86\"\r\ncf-ray: 9bac1b457d730b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4930,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4930), with no line terminators","md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-97426429-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=UA-97426429-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\nexpires: Thu, 08 Jan 2026 13:40:24 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 104298\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":293098,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3570)","md5":"478f3513f13d100fdbd261c0f8358898","sha1":"242bc0bfa156b8a434e0d1e45dee92a43d1047d4","sha256":"550dde55b82d2252ea0770a741b8de574cf5861ef7c586424883202a17c72179","sha512":"5ccba12a99d92865f2ae8feea85a83b80ab90d0b03226d15f3b6fab3452c58a104eba19696ed03130fa95be106c8b723ac542f87ad12f08d1d3a85692f0dab58","ssdeep":"3072:Gl8EtrIxV/i4AV0mbKsB67ZKrEv5wtfvvph3rNh8nbzlXJjO67gxMOTkkadYoSp:hNV/yxEh2phZhYRXJjO67YMOTkJdYog","tlshash":"905418cdb7dab46683a36478503f004bb23b79d1e84cc894e186d8d42e74aa94277f7d","first_seen":"2026-01-08T13:41:01.829288Z","last_seen":"2026-01-08T13:42:25.870271Z","times_seen":2,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":114,"dns":1,"connect":20,"send":0,"wait":41,"receive":56,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/config?url=https%3A%2F%2Fcreative.bluetrafficstream.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26campaignId%3Dba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a%26campaignType%3Dsmartpop%26creativeId%3De20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e%26hideTitle%3D1%26iterationId%3D893666%26masterSmartpopId%3D0%26ruleId%3D0%26smartpopId%3D12508%26tag%3Dgirls%26trafficType%3DbannerIframeOrJS%26userId%3D20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45%26variationId%3D33889","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.bluetrafficstream.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26campaignId%3Dba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a%26campaignType%3Dsmartpop%26creativeId%3De20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e%26hideTitle%3D1%26iterationId%3D893666%26masterSmartpopId%3D0%26ruleId%3D0%26smartpopId%3D12508%26tag%3Dgirls%26trafficType%3DbannerIframeOrJS%26userId%3D20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45%26variationId%3D33889 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b48edb50b02-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7706,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e39cacf237c0319f915417e97cdb3abd","sha1":"cd910dc24439b771131618a70fa81621f5536d88","sha256":"84f2c1613beeedc9da5eb0122766d100fcf95e0e3fa7d14ea442b7dbb2c6e40e","sha512":"986e3a8e7b26db92502065f3fbc8a2b86a1e995f0ae910765e6a64e1bb33b6d9a4dd03d6462eed99ea3e2a6613cf8e9a565aa8a233972166599b4f1e7d5854d5","ssdeep":"192:wDy9Zh+9mIWkUftON5hZq4Hh8nyayqh13/7VlloqJIwm13YAyQ13/7VlloqJIw1:V943Wk8O7hM+lgbeH","tlshash":"b9f165eb8b1d25b30a880d4d7e1d65c86a9c44a75e828debdc8a9834431d7f113fb74d","first_seen":"2026-01-08T13:41:01.831111Z","last_seen":"2026-01-08T13:41:01.831111Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=1","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=1 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b4c0dd10b02-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 08 Jan 2026 13:40:25 GMT\r\nage: 0\r\ncf-cache-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1693,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2f33b04eb41576a96a096ce6cddf3f44","sha1":"9d06a02f8bbc56c5503cb21369e3f80a026f2b48","sha256":"75e3703e828b6a4da42be66fce43b2e4fd676c86e723af65a911c5a896466689","sha512":"70e5520ddfb72ae4b551db91bedd8ce4aa9680047120ada20310fc0510a1ba2b6b606088a040977c67f2e60d4792a2fb6b5d749d8fe51dfe4355631ea3cb88f5","ssdeep":"","tlshash":"0d31f0f785ccce7e0f060284d9493c88e5972923a29bbb4490984e5e4ab5cc531dda66","first_seen":"2026-01-08T13:41:01.783487Z","last_seen":"2026-01-08T13:41:01.783487Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:24.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2FzGzLhdSVwXJq9Uplyymijxz4JwqVQMCnA4YxCdYUMX8deoaZP9c9q6te3%2Fmnz0CuAbfNyPL0XqroPe0qZx2fAN46FwqFQG87SM2eATi9BFEBudaRQmqTv7ZjY%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.0392e0f6c7b6d376d1e1.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2216\r\ncf-cache-status: HIT\r\netag: W/\"6264faf747172d4118734f941fea2ae5\"\r\ncf-ray: 9bac1b457d750b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1144541,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"38aae49805e8e835d39ca677256ddd3a","sha1":"f6acb5b16b97585c582e77165660ddf22f90dd80","sha256":"c9f21fe56aea40cd8c743dcc96d926514ed046e07bf150efc010fc3b796852bd","sha512":"9e2ae8ae8797283a4921700f90b99bcbb05739c21bea5a435ef10995b433dcbaf28a8479aabcf5d786dbf5caa66f6a7b38eb93eb71aa8935e984dfd0a97461d8","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJT:tRe0Y+AWZTdXYrntI0tPqX2vqDdu","tlshash":"642539897756b47646c69146e03f0203f235699a201a905cb3deecec665ceceb237b37","first_seen":"2026-01-08T13:18:31.205655Z","last_seen":"2026-01-13T02:40:20.342138Z","times_seen":37,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/config?url=https%3A%2F%2Fcreative.bluetrafficstream.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26campaignId%3Dba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a%26campaignType%3Dsmartpop%26creativeId%3De20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e%26hideTitle%3D1%26iterationId%3D893666%26masterSmartpopId%3D0%26ruleId%3D0%26smartpopId%3D12508%26tag%3Dgirls%26trafficType%3DbannerIframeOrJS%26userId%3D20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45%26variationId%3D33889","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.bluetrafficstream.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26campaignId%3Dba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a%26campaignType%3Dsmartpop%26creativeId%3De20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e%26hideTitle%3D1%26iterationId%3D893666%26masterSmartpopId%3D0%26ruleId%3D0%26smartpopId%3D12508%26tag%3Dgirls%26trafficType%3DbannerIframeOrJS%26userId%3D20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45%26variationId%3D33889 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b48fdb80b02-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7706,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ea9e5851aecda59090d8178454144f3f","sha1":"16cce7582326f0d47c3003415835f379a9e3f6ef","sha256":"021144fd34a819681cdf53bdc25fdf537edb4392447ae7d6dd9f01b00fd825c8","sha512":"9b2fca99e18a268a0c5fc5b4365cc58308e976ac95b9a213a94f6e5f89281163ccaa77e3bfb2e80c0244f4a7f0152e1a774e2e5b65a203ad03340b9ce57aaee1","ssdeep":"192:wDy9Zh+9mIWkUMcYpA9Qs4Hh8nyayqh13/7VlloqJIwm13YAyQ13/7VlloqJIw1:V943WkCYUQs+lgbeH","tlshash":"d5f165eb8b1d25b30a880d4d7e1d65c86a9c44a75e828debdc8a9834431d7f113fb74d","first_seen":"2026-01-08T13:41:01.836546Z","last_seen":"2026-01-08T13:41:01.836546Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767879270/168314364_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767879270/168314364_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15316\r\ncf-ray: 9bac1b4e2a54a41f-OSL\r\netag: \"49ca1ee4e97d42d6ef32d3f48a117a4b\"\r\nlast-modified: Thu, 08 Jan 2026 13:33:48 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 345\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15316,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"49ca1ee4e97d42d6ef32d3f48a117a4b","sha1":"85b89e424e4ca4594810a20343736aa2499dce52","sha256":"268d8331c5bf5c47dff4b4030d8eb6c58a774bcb70d8d0c4c47dc7c466d3e766","sha512":"dff78589eb7b768d8a5a808bcea3cc4539d1690ef606a7502642a0fca9a82cdb8388a6d99cf7b804577a34ecebfe032ce65c728c58c808f6b394d76775209bac","ssdeep":"384:+RqiFPNavGoVgngu0DYo+bspjI/L6rD4vBjWdx:TinqGrgu0DTNU/LY8vBo","tlshash":"f962cf9c6e715d42ba35eb07194268a46023953c4e09bf0e7384cfc67f37867296eb39","first_seen":"2026-01-08T13:38:54.973811Z","last_seen":"2026-01-08T13:42:25.941125Z","times_seen":3,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889 HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 09:21:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gapoOz5sxPzI64zOuZelm6XHTbnMjpHOxLYTA9%2BHfvz6XNjOfdpUSGM3urFg1ehQhL4frSkuxqp9fM9Yzc6WIYaHUO50mwYSXgvshisIVUcP87f2N7RYNPT%2Fgv8%3D\"}]}\r\nexpires: Thu, 08 Jan 2026 13:40:30 GMT\r\ncache-control: max-age=300\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nvary: accept-encoding\r\nage: 293\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9bac1b434e69b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1427), with no line terminators","md5":"bdce4b8365f3e70efa9c2a9411a3c0d5","sha1":"6207ed4e4a3815ac5f43331cbe05971a47a2e7db","sha256":"ef038e4c01e0947177dd9fe69b895f8f1088d940a4a0a02c18432e90c760cd4b","sha512":"89a9c90b3366346e660b737b718835bce0c5cd3a3786fbdf7e9814a9f20bcaebe981ad69243b67996ffc84b38be64a40c2635ee03e93a0bfba6f92269a9c4d33","ssdeep":"","tlshash":"af21cd22d844c44d65b0d276be913239d48f7b1fe620bad0ec2118dff8a8f8a4265d47","first_seen":"2026-01-08T13:18:31.140958Z","last_seen":"2026-01-13T02:40:20.366837Z","times_seen":37,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":21,"dns":0,"connect":1,"send":0,"wait":11,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/fonts/fontawesome-webfont.woff?v=4.1.0","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/fonts/fontawesome-webfont.woff?v=4.1.0 HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xrares.com/templates/frontend/dark-magenta/css/font-awesome.min.css\r\nCookie: AVS=le5d90b98p71m5iuv6afs4tl9n\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Jul 2018 12:19:12 GMT\r\netag: \"14730-571a9a7317000\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Thu, 15 Jan 2026 07:49:25 GMT\r\ncontent-length: 83760\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/font-woff\r\nage: 625858\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YgUR91AgviZYk5c6LqEyuf9EHeiWifsVxTLKhf3RicfqslyqEOLj1T%2Bwu7yelru8MtxVdE0jXn1r4g1969sw%2FoRdHAL0beFPqY80%2Fg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9bac1b46ab245685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83760,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 83760, version 1.0","md5":"fdf491ce5ff5b2da02708cd0e9864719","sha1":"7f2f3c55c2de192387c351b995115f6b79e09173","sha256":"66db52b456efe7e29cec11fa09421d03cb09e37ed1b567307ec0444fd605ce31","sha512":"80fdfde7eabd3e7d74ab6df84ab6c8fea4cce1c1ac27acb7cb92b03424ddba642076c464f09111ddd03e59119a165bf4c131a749c724834c07ab599a32aa5863","ssdeep":"1536:ioGcwJ8Nw/KjI0XbEzFg4CwE34IgCjORCiQw42QrHJB0kY1V8QafpMQADLmwnbpR:io1wSw/KjI+o5js4IgCqvQpbrjY1V+GZ","tlshash":"d08312ef9df3769d8e16602ce2628fbc3ddd974118e3c5681b8c92a0f682152df53650","first_seen":"2023-04-05T11:30:37Z","last_seen":"2026-04-06T09:32:29.641405Z","times_seen":7672,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=6","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=6 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b4bedcb0b02-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 08 Jan 2026 13:40:25 GMT\r\ncf-cache-status: MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8672,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"07f55182a78865f1f6fd278788cbf02b","sha1":"2e619ab7f6baf507db542311d925d622f3d668a7","sha256":"f899402f069708d8c89253313ef0ef1557ed6901a0b6ad699a2d090ad42b735c","sha512":"b9fa164427cbc95b7eedabdadeb7db5bbf1ece8f088f421ba988c0816608b7e75c1cf4ad7fd30e69886bce7c709aca392566c2903a415d8a2c44392bccc6af46","ssdeep":"192:9CLL3tzKzRzz9vpdptzCdzNzWheXo6CdatQzzPzyzdnaZDVUzWbzWuzWU/Itzcff:9wtzKzRzZvZtzCdzNzWheXoBdGQzPzya","tlshash":"ec0263f7c7cc4d3a0f4612c8cd4d790cdaa71b27a689b385919c5f8646b6dca331ca22","first_seen":"2026-01-08T13:41:01.845653Z","last_seen":"2026-01-08T13:41:01.845653Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767878730/208686024_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767878730/208686024_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6636\r\ncf-ray: 9bac1b4c7b3056cb-OSL\r\netag: \"8e2ed8609999049d7145c097da2f39ea\"\r\nlast-modified: Thu, 08 Jan 2026 13:24:33 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 878\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6636,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8e2ed8609999049d7145c097da2f39ea","sha1":"0857b2335c695c0539d116faba155581521d8057","sha256":"06e5b9940be60c3cf736561916fe9524f7ffd2f34397e25715c35af8561d5ab1","sha512":"fd468e922ec46acef55810a22a933e91068ab6d82fb3e9e75a3bd8c5bca184bebb3b83003111885ce17cf6ac0b3c52065c697a032aa42de3b2eb070199c9e654","ssdeep":"96:rEZELhl3z06q0QWKM2o2PgOOKQ0t7CEjoa3Ou7YFHdwK00Ek1R5H09LpUG+CYC1C:hhZYOKM1OnQ0tbVOfw1iRZ0bR3JSie","tlshash":"79d1afca809bd4964875cf1de4f3480868df4261afebc8d9380222c9f9b651c4c745fe","first_seen":"2026-01-08T13:41:01.848681Z","last_seen":"2026-01-08T13:41:01.848681Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/media/videojs/nuevo.min.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /media/videojs/nuevo.min.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=le5d90b98p71m5iuv6afs4tl9n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Jun 2020 08:32:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QXYOhrpyZGGm88tqbIIU5NFdlM%2BQ92ywvS6kpzNIhH3G9VdMY6T1YAMlbunz7fhjacL18gz4364pVuBzu9h9X3qJTBK%2B5SgL3XDgYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Thu, 22 Jan 2026 13:40:24 GMT\r\netag: W/\"8a95-5a82f609e1d75\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9bac1b472b2c5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35477,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35476)","md5":"3ca22d74b3990c6412ef8b0de1f3ddf0","sha1":"5c1cdc2a82f85019fda11c967e9aafb97316177f","sha256":"e71acc1b7f76a9762a951815d5873669a1789146353f90e7238bbf046d63e275","sha512":"7aee6a1e8177263d4f3073548824eea7ed62be02896c10576bf63eb56ad44d292444662269e96bd53aa6d1588b5758e8258174aa9bbe50f849a779e2374223b7","ssdeep":"768:f53rYPTCQlWjCKxsfHIlFH5HOHSHB+pEwUzuT2TCgbM4xmB:fWm/TxsfElw3TtgM4sB","tlshash":"f5f219bc14af4b1bab81e15d10ae544c376318aa447f50e0ed96e0eb3c4aadde1db1cd","first_seen":"2023-03-08T13:16:44Z","last_seen":"2026-01-08T13:42:25.859832Z","times_seen":7,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/js/jquery.video-0.2.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/js/jquery.video-0.2.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=le5d90b98p71m5iuv6afs4tl9n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Nov 2023 02:19:55 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rvA6qJZz%2B847PIHLLLj7dkSfz11LDgc%2FokSZ4biJfx%2BjAWIHSCAVUBm%2BpVQOcZyNBzR0ShTedbUPv0QqKrveIeL5z50p72jUMqNB2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Fri, 16 Jan 2026 07:07:25 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 541979\r\ncf-cache-status: HIT\r\netag: W/\"29ce-60adc968f2f0c\"\r\ncf-ray: 9bac1b472b2f5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10702,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"67c93a05af241992cff22a25a4c9f1be","sha1":"d3030938ba2132106da0cc4419b591b0bf735ee8","sha256":"6db1d7f7692985e1d29141770d8789f1307d4cf00c42f61916c78f5808c21b6d","sha512":"b7f61678227f6c13467d00de3d178d8978d4673cd36c0d1c9d4eb2c70243c0c6c27089e19c6d8f528f9390aa25199fe033a1353b9c65d34413f64ea61b48d165","ssdeep":"192:l+eT3dP7Jt7cQWL+6p1W0VqPH6tCWmTCvvvmr66pky+vA6Nc:lfrHjmmuv3mr6PrI6i","tlshash":"7122ac19f6f35aa42677317c1f2f988439a40053a108de08bd1e6de02f81b599776fee","first_seen":"2025-07-04T04:12:02.989339Z","last_seen":"2026-01-08T13:42:25.954173Z","times_seen":5,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/lang/en.json","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/lang/en.json HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rw380xUjx3U1NzcL4YjulDhpq1JjGDB99ks17OD5yBIvbFCzEOQaf6xF52bWRe%2F3uSvorYYLto7gx1uH%2Bv6D6CJzR7cnN%2F2fSOiZDLJ4ITBi3Jug8m5hgSBasQc%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2209\r\ncf-cache-status: HIT\r\netag: W/\"69a54638b649d7ce4748bd42c4b6dade\"\r\ncf-ray: 9bac1b48edb70b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"69a54638b649d7ce4748bd42c4b6dade","sha1":"a2dfe9f8791952fbc5cc44d4757b031a6cee1731","sha256":"0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750","sha512":"1e98b8977577f6daca587310456d38ab870571a0bec392072f38287d274465b3ebc867e6eefe5efd7653c7c0d2a23dabe7636a94c0cfda52321a84fd68d868e3","ssdeep":"","tlshash":"1ac08c09220b0f0389c83c23a223352a0b422bbaeb033730c262c3012c8c1b734e33cc","first_seen":"2023-04-07T07:09:28Z","last_seen":"2026-04-06T07:31:32.390462Z","times_seen":3568,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/abc.gif?campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.xrares.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1408%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A826%2C%22duration%22%3A93%2C%22transferSize%22%3A266026%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A827%2C%22duration%22%3A57%2C%22transferSize%22%3A2799%7D%5D\u0026mh=1569244082","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /abc.gif?campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.xrares.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1408%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A826%2C%22duration%22%3A93%2C%22transferSize%22%3A266026%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A827%2C%22duration%22%3A57%2C%22transferSize%22%3A2799%7D%5D\u0026mh=1569244082 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b49ddc10b02-OSL\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T11:11:40.092337Z","times_seen":13419940,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Jan 2026 17:56:30 GMT\r\nexpires: Tue, 05 Jan 2027 17:56:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 243835\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-04-06T08:39:59.03899Z","times_seen":6322,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/css/font-awesome.min.css","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/css/font-awesome.min.css HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=le5d90b98p71m5iuv6afs4tl9n\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:23 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2014 07:25:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QQ2SAn6fclrtUnvQoDEk1OfUdzkBDKqdREYnp3GwK%2F5zkHyLS124rM%2FLnR%2FOlRy%2FM2dlOG69qpn1owNHuosT19MtWbdEOa2JPd%2BR8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Thu, 15 Jan 2026 06:52:08 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 629295\r\ncf-cache-status: HIT\r\netag: W/\"511e-5024c5e27f400\"\r\ncf-ray: 9bac1b403afe5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20766,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20604)","md5":"bbfef9385083d307ad2692c0cf99f611","sha1":"63a234ea4d60f6643a60a4d79e28f291b93c1743","sha256":"b769324e0921f9f649611113e65f528ebae5e140da8a7e63c5d6ea7bc7a33bc0","sha512":"efb922772183246596989d0c54ed02469fba9d181944aebb7eb515051be72f5cc2726730f45902431a431eae7649e6d6f8a5930279ee5f4424dbf3105a8816a1","ssdeep":"192:xq9jjI+ab2edrK/TUKIErArKlcZJVrJ3ee+cR6waWW215Uvf0:+jPyW/TUK1+KlkJ5de2UWWyAf0","tlshash":"c99266f8e54d01c66731c48bff85b36862baf33dd5804d99f11f294c29d22a912c5bba","first_seen":"2023-04-05T10:34:03Z","last_seen":"2026-04-06T09:32:29.639924Z","times_seen":7752,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/media/videos/tmb/7692/1.jpg","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /media/videos/tmb/7692/1.jpg HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:40:23 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:50:38 GMT\r\nETag: \"1735-5bb018e2dcd53\"\r\nAccept-Ranges: bytes\r\nContent-Length: 5941\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5941,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 256x144, components 3","md5":"08c107da10996bd30332e78ec87bd6b4","sha1":"51f84a22e32ed95edc26bcd1af8eb73d6b678940","sha256":"419299bd03c4fb6bfccce6093fbef22460b5afccbc476738254444738e44912d","sha512":"8c1375ab4be3acb42a8a87710c19beaf9ac80964e91c5097441ae47d178527389f1d23cf937c0e3488e1915c8a01ccf664b5a23de2878e6b24bf9fbed9382eaf","ssdeep":"96:wEveNevJOO8XpIVp0/powEjk+XO9y47JqfPqdVCykrZclpjZzBlp+U:waeEvjG+bjkiqJ74fPqj7kapjVBvF","tlshash":"08c18faff18501f072b5b86bab006cf1aaed5293c255600117dc328fc563efa965878d","first_seen":"2026-01-08T13:38:54.986605Z","last_seen":"2026-01-27T22:27:44.435803Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:40:24.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 08 Jan 2026 13:40:24 GMT\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5379,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"56351891ce8fb221bb3590d9841cf0c0","sha1":"29b8c5a1216c54bb8832edcceed2beca6090b98e","sha256":"3515c7b2de099d47b9488f1d37b842c001ec454a998dd51861065b34868cfe8f","sha512":"6953ed577894d470eaa0f379f887b0a02951a8e258c3a929453eccae8ef4e2987028bd664a555fc986a446ec1940db809217f1f018ddad8cc1525398fd55c637","ssdeep":"96:CYgFasyYgFarFZfYgFatYgFafLYgFao3YgFalYgFaZJc+uDYgFaXNTOFaYyOFaWh:XHsnHEHKHf0HoIHCHZVHzYIW62OBSdvz","tlshash":"90b199a1001bd480db870cc277cfbd3aae4e61597445d0baaffe48dcac96c629394b1d","first_seen":"2025-09-09T07:58:30.235801Z","last_seen":"2026-04-06T08:39:59.041658Z","times_seen":3390,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":81,"dns":1,"connect":27,"send":0,"wait":46,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=6","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=6 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b4c0dd30b02-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 08 Jan 2026 13:40:25 GMT\r\ncf-cache-status: HIT\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8672,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"07f55182a78865f1f6fd278788cbf02b","sha1":"2e619ab7f6baf507db542311d925d622f3d668a7","sha256":"f899402f069708d8c89253313ef0ef1557ed6901a0b6ad699a2d090ad42b735c","sha512":"b9fa164427cbc95b7eedabdadeb7db5bbf1ece8f088f421ba988c0816608b7e75c1cf4ad7fd30e69886bce7c709aca392566c2903a415d8a2c44392bccc6af46","ssdeep":"192:9CLL3tzKzRzz9vpdptzCdzNzWheXo6CdatQzzPzyzdnaZDVUzWbzWuzWU/Itzcff:9wtzKzRzZvZtzCdzNzWheXoBdGQzPzya","tlshash":"ec0263f7c7cc4d3a0f4612c8cd4d790cdaa71b27a689b385919c5f8646b6dca331ca22","first_seen":"2026-01-08T13:41:01.845653Z","last_seen":"2026-01-08T13:41:01.845653Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767879150/233751993_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767879150/233751993_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5754\r\ncf-ray: 9bac1b4e2a4da41f-OSL\r\netag: \"f5694abb0ee016e8d71a7f573f0f028a\"\r\nlast-modified: Thu, 08 Jan 2026 13:31:28 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 455\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5754,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f5694abb0ee016e8d71a7f573f0f028a","sha1":"bf11c5baa2fa8ff6bdcddd012273bb6100b36ca9","sha256":"ebae66b82345d2457135e201193df54637a384ee3d141bd1780bbb248c4c4d53","sha512":"b3a68e6b2c50c4efb8ca73582c1b6bba9d58f35930c03c1193c57bee344d6de3651361d78603b0d3b017007244ec462e6fe7e20cf7853db10cc441baf2a0e199","ssdeep":"96:2/ZTc6ztSrFiMLDynFR7bicvnd9bRFQV/rZe9k4gD8RBD:2/ZTc6ztSBLDyHXicPd91KV/8kVD8b","tlshash":"4ec1ae75551b5fe9298367f3884aa9ef8130760234001bccb89c81b83a496d76f4dfce","first_seen":"2026-01-08T13:38:55.043378Z","last_seen":"2026-01-08T13:42:25.937877Z","times_seen":3,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767879360/231824312_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767879360/231824312_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7154\r\ncf-ray: 9bac1b4e2a50a41f-OSL\r\netag: \"b014b67426ec64a1a2af9595ae6a5dfb\"\r\nlast-modified: Thu, 08 Jan 2026 13:35:51 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 218\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7154,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b014b67426ec64a1a2af9595ae6a5dfb","sha1":"8224b9793782cd3891ccfc0828efaf272442b8fe","sha256":"1231fef0c0391fed73bd008a163d160493495f88a6aec33938851ed8b78b35f6","sha512":"55b526067099be3feb2ac27f65a5a45921e3a3b63cc6827cec309f194683f186be26e096f45fcc974287db280229e86821fb5d788a970ccde8e64a9b4f9c3f3a","ssdeep":"96:E9EiOZhzhlYCbwj2d1vr47EO2ERpKdN0fjUxwnxXE8aLOxYL83ByNEUAx:EjOZBhlY8/MaooafBxXVTGL83ByNEUAx","tlshash":"52e1af1a87c384ed9b30fa196b386e6a1dba042907be4b663c210770f99fb05d0d2034","first_seen":"2026-01-08T13:41:01.79839Z","last_seen":"2026-01-08T13:42:25.924178Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.mnaspm.com/smartpop/ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a?userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45","fqdn":"go.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.mnaspm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 14:45:10 GMT","end":"Mon, 09 Feb 2026 15:45:02 GMT"},"fingerprint":{"sha1":"08:B3:F2:8D:13:1C:EB:A1:77:F3:4F:6D:79:41:EC:E1:F5:51:C8:61","sha256":"75:27:CE:45:8A:C8:5C:F8:FB:5C:83:64:C2:23:8F:FB:69:DE:F7:BB:D5:5B:53:12:BC:CD:68:FF:FF:75:C6:21"}}},"request":{"raw":"GET /smartpop/ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a?userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45 HTTP/1.1\r\nHost: go.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 08 Jan 2026 13:40:23 GMT\r\ncontent-length: 0\r\nlocation: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\ncf-ray: 9bac1b40bfc7723c-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T11:11:40.092337Z","times_seen":13419940,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":66,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=le5d90b98p71m5iuv6afs4tl9n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Thu, 08 Jan 2026 14:28:23 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tg7YqyKh40U9kzd1VhkfUZ%2BCuuS0liM8eVRCioNycthBvPJo0EKwwY8Os2pfJ%2BwtBgyLVkZgttSi%2F2LJveDSAJkrLCK8Bd0DDLoM4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:40:23 GMT\r\ncf-ray: 9bac1b40bb035685-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-06T11:12:10.03114Z","times_seen":293856,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889 HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 09:21:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B7VUS6CENCUoBH9uYyRZMgi26brDpmI9r6MZQfweKvbBm5HwffMtRtDsxUy2H%2BWMmhmhUEMWwe2TXtu3m6Is8ezUwrAzAbTk5qDt8yUM%2FrVFORJyuVzztW6lwpM%3D\"}]}\r\nexpires: Thu, 08 Jan 2026 13:40:30 GMT\r\ncache-control: max-age=300\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nvary: accept-encoding\r\nage: 293\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9bac1b43bedbb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1427), with no line terminators","md5":"bdce4b8365f3e70efa9c2a9411a3c0d5","sha1":"6207ed4e4a3815ac5f43331cbe05971a47a2e7db","sha256":"ef038e4c01e0947177dd9fe69b895f8f1088d940a4a0a02c18432e90c760cd4b","sha512":"89a9c90b3366346e660b737b718835bce0c5cd3a3786fbdf7e9814a9f20bcaebe981ad69243b67996ffc84b38be64a40c2635ee03e93a0bfba6f92269a9c4d33","ssdeep":"","tlshash":"af21cd22d844c44d65b0d276be913239d48f7b1fe620bad0ec2118dff8a8f8a4265d47","first_seen":"2026-01-08T13:18:31.140958Z","last_seen":"2026-01-13T02:40:20.366837Z","times_seen":37,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":68,"dns":3,"connect":6,"send":0,"wait":6,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767878700/216642829_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767878700/216642829_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3664\r\ncf-ray: 9bac1b4e2a62a41f-OSL\r\netag: \"1801c062634dce29c3492a6c082a28b5\"\r\nlast-modified: Thu, 08 Jan 2026 13:23:52 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 902\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1801c062634dce29c3492a6c082a28b5","sha1":"249bb8937d28a99ac596682a61bc294b3794cfc4","sha256":"9b06c7005911296910637ae7551038c98699789765f51171cf8549cf81be5e03","sha512":"c249dcc6fd77f0a7f6a38adf04de4544e518b487312ea06ee0340fcbaee9c9231dc264e6d699894082a3e89bde5cab45f80078d91cf4eb3cd77819895993da1c","ssdeep":"","tlshash":"68716da4566c584ed8e2f2a32930f4534c21e0d194450a6db76dcb3a14d8cb56677c52","first_seen":"2026-01-08T13:38:54.982007Z","last_seen":"2026-01-08T13:41:01.773118Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.mnaspm.com/smartpop/ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a?userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45","fqdn":"go.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.mnaspm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 14:45:10 GMT","end":"Mon, 09 Feb 2026 15:45:02 GMT"},"fingerprint":{"sha1":"08:B3:F2:8D:13:1C:EB:A1:77:F3:4F:6D:79:41:EC:E1:F5:51:C8:61","sha256":"75:27:CE:45:8A:C8:5C:F8:FB:5C:83:64:C2:23:8F:FB:69:DE:F7:BB:D5:5B:53:12:BC:CD:68:FF:FF:75:C6:21"}}},"request":{"raw":"GET /smartpop/ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a?userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45 HTTP/1.1\r\nHost: go.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 08 Jan 2026 13:40:23 GMT\r\ncontent-length: 0\r\nlocation: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890\r\ncf-ray: 9bac1b40bfd0723c-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T11:11:40.092337Z","times_seen":13419940,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:24.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OgZ4%2Frh3vbhyKDLtqjCtREOzaHdjdw7KR58RXmkf5sZfgROm20IBRmOjmhISYtThvjX1UaBSF9NSLF5RlgT3IdCx4P%2BT8TY4cSiq7okZAwLkHyIjc51g0UIJGbg%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.0392e0f6c7b6d376d1e1.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2216\r\ncf-cache-status: HIT\r\netag: W/\"6264faf747172d4118734f941fea2ae5\"\r\ncf-ray: 9bac1b455d6f0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1144541,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"38aae49805e8e835d39ca677256ddd3a","sha1":"f6acb5b16b97585c582e77165660ddf22f90dd80","sha256":"c9f21fe56aea40cd8c743dcc96d926514ed046e07bf150efc010fc3b796852bd","sha512":"9e2ae8ae8797283a4921700f90b99bcbb05739c21bea5a435ef10995b433dcbaf28a8479aabcf5d786dbf5caa66f6a7b38eb93eb71aa8935e984dfd0a97461d8","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJT:tRe0Y+AWZTdXYrntI0tPqX2vqDdu","tlshash":"642539897756b47646c69146e03f0203f235699a201a905cb3deecec665ceceb237b37","first_seen":"2026-01-08T13:18:31.205655Z","last_seen":"2026-01-13T02:40:20.342138Z","times_seen":37,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/app/domain-checker/get-check","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"POST /app/domain-checker/get-check HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b4c0dd20b02-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-expose-headers: *\r\nvary: Origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T11:11:40.092337Z","times_seen":13419940,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767878730/220345789_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767878730/220345789_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15070\r\ncf-ray: 9bac1b4c7b2556cb-OSL\r\netag: \"6fe4f6c20a715754058cd4e3aea8dcd3\"\r\nlast-modified: Thu, 08 Jan 2026 13:24:50 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 862\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15070,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6fe4f6c20a715754058cd4e3aea8dcd3","sha1":"c3c63f3ccbdd9f9dfafe6f1e87643cc25d5936e1","sha256":"b91cec9e1a42450ab8a3b4d2ae3fef86d81a999dbc29d5f18df778e85476aee2","sha512":"035cbaf5ba607a8889c6df3e82efcc76e19082f4c995b767efc899a009ddb28a42950f12e6c19b3b6ed1ff4a30697a7a848ca6b9652ebab6a998cf0fde0fd6f1","ssdeep":"384:/5NY3eUknnC8mCqNJNFtNI4mVjrshnB93Nu1tXx8tNMwhn:h+e7mCqNJNu4UCBLu1tXx8XME","tlshash":"c062c052f2e1d3ea32b11660a019a0d36da165d68f4d7db367ed07723084be356f28b4","first_seen":"2026-01-08T13:38:54.985378Z","last_seen":"2026-01-08T13:41:01.85753Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/media/videos/tmb/7693/1.jpg","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /media/videos/tmb/7693/1.jpg HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:40:23 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:50:24 GMT\r\nETag: \"19a7-5bb018d5d6a06\"\r\nAccept-Ranges: bytes\r\nContent-Length: 6567\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6567,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 256x144, components 3","md5":"ca26d6f7a31adc4c3a2bb49e4fdc3b20","sha1":"eeb4307ce5f5b9df8a77d05c39aca23a7e436c6b","sha256":"e95c8bc9433d4728b0696c289a5f122a420cf3ac7ca663b987a0658aaf5d11d4","sha512":"89e937e99376110c847b2bd830c60ce55a5543d49e69a3a60f5d191ef780a59ba9caef78998d35df190718832193c30b6b4cab0b168093429e2d14344dc9f54d","ssdeep":"96:wEKBvVqPqVBYTFUVxYH8iTmuQ4LVgf3N3frTQOBJcBLMf/V5nRkcT24qV5Ai+Sca:whSqVB+UVk8KVnWf3lhJoC/VJRbZtSca","tlshash":"d9d1af8f82ab41e036a1b4af8e142cecc1f856455794279c58fc0559d0f31d0a6f8efd","first_seen":"2026-01-08T13:38:55.09377Z","last_seen":"2026-01-08T13:41:01.859923Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:24.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Bx0A9T3t3WpBchGAXzJ%2Fm%2BEM67ywWO%2FB4VUtdB1FexE84eSeiyod9IPuBdKJCU9gRDOdGr0fHVZ0UOYOpZ38GAIwxDSxn4XNDLY%2BuuvYQebpPcXqPMGf4k9yag%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"saretarget.e25d7729d6aa0892d869.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:18 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2220\r\ncf-cache-status: HIT\r\netag: W/\"bf4ad79a8f3c33c2af6b13887462fe86\"\r\ncf-ray: 9bac1b453d6e0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4930,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4930), with no line terminators","md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/media/videojs/js/anyhtm.css","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /media/videojs/js/anyhtm.css HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=le5d90b98p71m5iuv6afs4tl9n\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:23 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Oct 2023 12:54:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sr94iLaLzQlyCbp1vbZxURSS%2Bd3k7nJruTEeeO2hFukt7vyfGPH0VWtuozG1sICPyQ1rjooG95o73nP2%2BVBiGDFpos289ryZNtDDLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Thu, 22 Jan 2026 13:40:23 GMT\r\netag: W/\"ab0-60861b81d9023\"\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9bac1b403b015685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2736,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"428cd89e0b1f32a175c8d6ff979d7ec7","sha1":"9cbeb444f5dfdca0762b730543752f43c6d84bed","sha256":"304518ac805cb6484cc928938464d8b3252bcab67a07bfa5132ba0a34e0fc677","sha512":"137f1c70740fba3c929957e2b0e06292262a4f978434c065fce4616b10063bcefbfdacdc2ac8d533e04caa6cd1d58810f64648d8c085dff2fe0b70749868df06","ssdeep":"","tlshash":"2f510323e540000ce13bd265ba866b7e373c9113aa17597cea6ab761c75a0eb469c342","first_seen":"2025-07-04T04:12:02.968985Z","last_seen":"2026-01-08T13:42:25.918118Z","times_seen":5,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/media/videos/tmb/7802/1.jpg","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /media/videos/tmb/7802/1.jpg HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:40:23 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:50:27 GMT\r\nETag: \"19c5-5bb018d856c24\"\r\nAccept-Ranges: bytes\r\nContent-Length: 6597\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6597,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 256x144, components 3","md5":"9bf269f208162b4d02a35807be4c2b2a","sha1":"96f45c64a0cff65c0bf00fa776daf3c6b157f0ca","sha256":"0fb392d470b768599100d4e43ac1ff3a0da0b2747d4961e752ddb0755a030d1a","sha512":"3c129c2270eb81958cc47f673e729c6be4554baffd5e906030275c337a409a318d3fe42d013e22e614ba9e0235d533ae4882e40d6bc2ae43a44e652028657461","ssdeep":"96:wETYv6XtANcENc9tsqueIK3DQXHJcA1BNycersRVwOzTGvNxvCaO2EK7TLSKEuVH:wYtAC1sWcXpcAly4Rz6Fx6aOs26H","tlshash":"ead18e262b8e5dc0bb15b4d2293a4f81f3fa2d23e9506aafb1cc4c83c166951c20e674","first_seen":"2026-01-08T13:41:01.861722Z","last_seen":"2026-01-08T13:41:01.861722Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":34,"dns":4,"connect":27,"send":0,"wait":28,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/media/videos/tmb/25756/18.jpg","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /media/videos/tmb/25756/18.jpg HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:40:23 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Fri, 12 Nov 2021 05:23:28 GMT\r\nETag: \"4beb-5d090a8be4efa\"\r\nAccept-Ranges: bytes\r\nContent-Length: 19435\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19435,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 256x144, components 3","md5":"671fbb07ec4b12b8396e21a595651577","sha1":"a9668f5d0e524a54fe37c1a17fe0e59d6bcab7ae","sha256":"204279472681809f22442446116d29426dc39a35b5ea776186a1184f62d52b75","sha512":"0754d489022c5e6978cc9885ae6b4e8c065b414a0316fa559fcbf8ded53978fd59a908c101ecba4d63f88ca5ca4190d3cfc705593ee006da3f8ba293aa15ad66","ssdeep":"384:kJJ30lqHvOFmd/fha/wRIZ/lj0ZfnsDdXcRlsZgUpN7IcsY4WAnyydc:kfgqHvHJa/XLj5hIUp2nyyc","tlshash":"9392d0b879a55ef97937eb8691f7cda0c8c6cce620fd08981fc261984893145ed8943d","first_seen":"2026-01-08T13:41:01.863Z","last_seen":"2026-01-08T13:41:01.863Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":38,"dns":4,"connect":31,"send":0,"wait":26,"receive":25,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?hl=en","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:20 GMT","end":"Wed, 25 Feb 2026 15:57:19 GMT"},"fingerprint":{"sha1":"13:5B:80:5A:23:15:61:AE:98:37:1B:0A:3C:F6:E2:BD:63:8E:3B:D6","sha256":"22:03:24:94:F7:E3:5F:66:1B:39:CE:18:75:20:3D:01:AC:FE:93:AA:1A:73:8C:D5:34:98:AB:2B:E5:19:37:12"}}},"request":{"raw":"GET /recaptcha/api.js?hl=en HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Thu, 08 Jan 2026 13:40:25 GMT\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1017,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1017), with no line terminators","md5":"40fdf88a04e21eb30f8a7cba11f36503","sha1":"66803134bc759b83f6f50f1d9cb69e46b25dbc70","sha256":"f357d31f579a1b06abde68f76229d4a6a86d59f51284af7b3765133ae710cc53","sha512":"be7c6fc771e32ad6eb8286f949cfcdaae15777f78b52b5d39e4c59227f50c17b706c1d9fa874972dfa823094245cdda2266f9518628ad96589333f402b9424a1","ssdeep":"","tlshash":"b01102771a04a0365b7219e1e2facbb5e492701cb16885e8a512dec81e6accbce14989","first_seen":"2026-01-07T20:19:38.909175Z","last_seen":"2026-01-15T02:57:18.445944Z","times_seen":3752,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":137,"dns":1,"connect":22,"send":0,"wait":34,"receive":0,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/lang/en.json","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/lang/en.json HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P2q5Pelwytaz2KQH0l8sOxV%2Ff99oJJqQBSRcCpdG6PRHfbLgBDQhComvKXNXZ09qdzpmQ12O1ILDGxsxXtQLu8lG4su788hoEGF2Bg9nTOsc61qN%2FWbWNrBbkcs%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2209\r\ncf-cache-status: HIT\r\netag: W/\"69a54638b649d7ce4748bd42c4b6dade\"\r\ncf-ray: 9bac1b48cdb10b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"69a54638b649d7ce4748bd42c4b6dade","sha1":"a2dfe9f8791952fbc5cc44d4757b031a6cee1731","sha256":"0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750","sha512":"1e98b8977577f6daca587310456d38ab870571a0bec392072f38287d274465b3ebc867e6eefe5efd7653c7c0d2a23dabe7636a94c0cfda52321a84fd68d868e3","ssdeep":"","tlshash":"1ac08c09220b0f0389c83c23a223352a0b422bbaeb033730c262c3012c8c1b734e33cc","first_seen":"2023-04-07T07:09:28Z","last_seen":"2026-04-06T07:31:32.390462Z","times_seen":3568,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767878700/216642829_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767878700/216642829_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3664\r\ncf-ray: 9bac1b4e1a47a41f-OSL\r\netag: \"1801c062634dce29c3492a6c082a28b5\"\r\nlast-modified: Thu, 08 Jan 2026 13:23:52 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 902\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1801c062634dce29c3492a6c082a28b5","sha1":"249bb8937d28a99ac596682a61bc294b3794cfc4","sha256":"9b06c7005911296910637ae7551038c98699789765f51171cf8549cf81be5e03","sha512":"c249dcc6fd77f0a7f6a38adf04de4544e518b487312ea06ee0340fcbaee9c9231dc264e6d699894082a3e89bde5cab45f80078d91cf4eb3cd77819895993da1c","ssdeep":"","tlshash":"68716da4566c584ed8e2f2a32930f4534c21e0d194450a6db76dcb3a14d8cb56677c52","first_seen":"2026-01-08T13:38:54.982007Z","last_seen":"2026-01-08T13:41:01.773118Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-08T13:40:22.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /video/2154 HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: PHP/7.4.33\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: AVS=le5d90b98p71m5iuv6afs4tl9n; path=/\r\nlast-modified: Thu, 08 Jan 2026 13:40:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iTnqw%2FKbPaKZFT89hhsaOCi4quPzs4hyo4RaUXpBcS6DL6nqUL9nx6hFRxcBKhFPB%2BXRPWURdNr5JJi1zbnNueMet7n2PTSUYZ0FGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9bac1b3a8d567127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:1.11.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]}],"data":{"size":34450,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7997)","md5":"ba96db0f115a1db40e01f4e51ac3b84e","sha1":"58e7ef8cd61d76a3293686e8e7622bfa53d459da","sha256":"e250e62f723d069acd567e558713c2f9192183f307ab3d0781a0877c4cb3bc48","sha512":"e57709a944b0e38a43ae0f6495527facada76fb0d7fde1873b54677976e7371ec8753460414c4780d9da801752ff7579dc709c42256cafc3804a5bee07a344c4","ssdeep":"768:6yHsknq8Q99gThZfR6gfzpGnjYN5DE8BH0B1kQHkrh:Rq8Q99qDUgLYj+Y9HMh","tlshash":"acf26030d448ce3b05e3c2ddaa71bb2e62c69276cf234a42b7f5475e0bc6e91cc16665","first_seen":"2026-01-08T13:41:01.869532Z","last_seen":"2026-01-08T13:41:01.869532Z","times_seen":1,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":714,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/media/videos/tmb/6795/1.jpg","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /media/videos/tmb/6795/1.jpg HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:40:23 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:50:35 GMT\r\nETag: \"e49-5bb018e06b1ac\"\r\nAccept-Ranges: bytes\r\nContent-Length: 3657\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3657,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x41, segment length 16, baseline, precision 8, 256x144, components 3","md5":"33b8f59dcfc0cced6d9f5007cb21dfe4","sha1":"cc5518d22a7b8d4606d016d5847de836e274a8a9","sha256":"1890091d71097b31d6a296f028333abf47fff950b5f6252958ade5a759d0f09a","sha512":"08b0464d600bf9d9585a7a2068e7480c3f7d8b29dbf6fb39c9f92a0d83d3de3b0c3b004e0a37da83948f5f3f7e51fb382278640605d5a28975f770514046aacc","ssdeep":"","tlshash":"0f712ababa66bc42c78416f749c134e147bd220258ffed7708431a19762dcf4a556302","first_seen":"2026-01-08T13:41:01.870708Z","last_seen":"2026-01-08T13:41:01.870708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":3,"connect":45,"send":0,"wait":37,"receive":1,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889 HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 09:21:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CZFnbRYB0hqgFf9SlEZsIbm5emt0t6iM6lgWh9fOGI62tNGzB38wS3f5Own0b7JGMGDieQLF8xzVg9yuBUxe1RZNs2yWbXO6xIKW0X37gsj%2BRocoBRRNfogU6dU%3D\"}]}\r\nexpires: Thu, 08 Jan 2026 13:40:30 GMT\r\ncache-control: max-age=300\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nvary: accept-encoding\r\nage: 293\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9bac1b43aed2b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1427), with no line terminators","md5":"bdce4b8365f3e70efa9c2a9411a3c0d5","sha1":"6207ed4e4a3815ac5f43331cbe05971a47a2e7db","sha256":"ef038e4c01e0947177dd9fe69b895f8f1088d940a4a0a02c18432e90c760cd4b","sha512":"89a9c90b3366346e660b737b718835bce0c5cd3a3786fbdf7e9814a9f20bcaebe981ad69243b67996ffc84b38be64a40c2635ee03e93a0bfba6f92269a9c4d33","ssdeep":"","tlshash":"af21cd22d844c44d65b0d276be913239d48f7b1fe620bad0ec2118dff8a8f8a4265d47","first_seen":"2026-01-08T13:18:31.140958Z","last_seen":"2026-01-13T02:40:20.366837Z","times_seen":37,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":67,"dns":1,"connect":1,"send":0,"wait":7,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.xrares.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 07 Jan 2026 00:01:19 GMT\r\nexpires: Thu, 07 Jan 2027 00:01:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 135545\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-06T11:10:22.541319Z","times_seen":200839,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":130,"dns":0,"connect":16,"send":0,"wait":17,"receive":27,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/abc.gif?campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.xrares.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1255%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A783%2C%22duration%22%3A28%2C%22transferSize%22%3A5365%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A784%2C%22duration%22%3A85%2C%22transferSize%22%3A266152%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A784%2C%22duration%22%3A23%2C%22transferSize%22%3A2805%7D%5D\u0026mh=1967282385","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:40:25.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /abc.gif?campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.xrares.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1255%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A783%2C%22duration%22%3A28%2C%22transferSize%22%3A5365%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A784%2C%22duration%22%3A85%2C%22transferSize%22%3A266152%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A784%2C%22duration%22%3A23%2C%22transferSize%22%3A2805%7D%5D\u0026mh=1967282385 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b496dbd0b02-OSL\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T11:11:40.092337Z","times_seen":13419940,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767879270/168314364_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:40:25.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767879270/168314364_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15316\r\ncf-ray: 9bac1b4c1a5156cb-OSL\r\netag: \"49ca1ee4e97d42d6ef32d3f48a117a4b\"\r\nlast-modified: Thu, 08 Jan 2026 13:33:48 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 345\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15316,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"49ca1ee4e97d42d6ef32d3f48a117a4b","sha1":"85b89e424e4ca4594810a20343736aa2499dce52","sha256":"268d8331c5bf5c47dff4b4030d8eb6c58a774bcb70d8d0c4c47dc7c466d3e766","sha512":"dff78589eb7b768d8a5a808bcea3cc4539d1690ef606a7502642a0fca9a82cdb8388a6d99cf7b804577a34ecebfe032ce65c728c58c808f6b394d76775209bac","ssdeep":"384:+RqiFPNavGoVgngu0DYo+bspjI/L6rD4vBjWdx:TinqGrgu0DTNU/LY8vBo","tlshash":"f962cf9c6e715d42ba35eb07194268a46023953c4e09bf0e7384cfc67f37867296eb39","first_seen":"2026-01-08T13:38:54.973811Z","last_seen":"2026-01-08T13:42:25.941125Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":6,"dns":0,"connect":1,"send":0,"wait":53,"receive":1,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890 HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 09:21:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2FFy%2FNNJ9Aqpc5kjqovevKuBiVkoBJXbZTg0CJ9yvYjidncYNISP9JzmajItIkDesoGaP1mX3cwYPlqnG3G4vUW2dhGX9k5cVjHeHvP3gMKiCKmObKRL3SIzVsI%3D\"}]}\r\nexpires: Thu, 08 Jan 2026 13:40:30 GMT\r\ncache-control: max-age=300\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nvary: accept-encoding\r\nage: 293\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9bac1b437e97b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1427), with no line terminators","md5":"bdce4b8365f3e70efa9c2a9411a3c0d5","sha1":"6207ed4e4a3815ac5f43331cbe05971a47a2e7db","sha256":"ef038e4c01e0947177dd9fe69b895f8f1088d940a4a0a02c18432e90c760cd4b","sha512":"89a9c90b3366346e660b737b718835bce0c5cd3a3786fbdf7e9814a9f20bcaebe981ad69243b67996ffc84b38be64a40c2635ee03e93a0bfba6f92269a9c4d33","ssdeep":"","tlshash":"af21cd22d844c44d65b0d276be913239d48f7b1fe620bad0ec2118dff8a8f8a4265d47","first_seen":"2026-01-08T13:18:31.140958Z","last_seen":"2026-01-13T02:40:20.366837Z","times_seen":37,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":42,"dns":1,"connect":1,"send":0,"wait":16,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/apple-touch-icon.png","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:25.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:40:25 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:00:52 GMT\r\nETag: \"1610-5bb00dc312270\"\r\nAccept-Ranges: bytes\r\nContent-Length: 5648\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5648,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"1e867232c4e67bde6a944ba08a59c290","sha1":"bffe3fe365a4642af1dde4991d95c3cac502f5cf","sha256":"3eeef0b9f46422bd1db6a491e6d731edc81742a4fb81b481c8f3c8727b9f3ec5","sha512":"c926aca662dfe0c730804e482458b1059879c92090ab25a6531f95bcc1a2ccbf61c96ddd3185b0daefe5319d41f1a90eb4be75e7b2b3b7fe94b2b12a935e8afc","ssdeep":"96:2UXOKzM+pO++2JZOD3c+Ldk8WQR5y5rSGovS/Z2OZnE0ljR2dgt:RzznpOTT3civW1GGx/hXKU","tlshash":"6bc17d8e0e9883e9ab4e2e56976001f2c03ba3d6637240f4f67ad794c13160e3956bd7","first_seen":"2023-06-15T04:01:20Z","last_seen":"2026-04-05T18:13:14.693433Z","times_seen":14,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapchatvip.com/checkUrl","fqdn":"fapchatvip.com","domain":"fapchatvip.com","tld":"com"},"ip":{"addr":"194.1.140.1","port":443,"asn":0,"as":"","country":"Slovakia","country_code":"SK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:40:25.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapchatvip.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 12:48:14 GMT","end":"Tue, 24 Mar 2026 12:48:13 GMT"},"fingerprint":{"sha1":"A7:E8:EB:53:CE:1E:B7:ED:AE:C5:01:78:73:CE:B4:28:F9:AC:54:75","sha256":"0A:8C:BF:4D:D3:AD:87:AF:97:62:21:A1:96:49:1D:C3:56:CB:FC:E4:35:91:14:81:64:B1:18:44:D5:10:A4:B7"}}},"request":{"raw":"GET /checkUrl HTTP/1.1\r\nHost: fapchatvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvia: 1.1 Caddy\r\ncontent-length: 15\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7fb97eb7c8636552ad068f6d56b5ea34","sha1":"b69679936779fb02503bc0fe1374a737cc762ecb","sha256":"e78008828abaa93c4462e326ef384dcda1443352a0f24bdeedada6a6fdbfd1d5","sha512":"b9a8b6626fe32bc433f46e6726523b51029398d691b76006c2ae7c0aea25e2296dd35587c6e45bb94363de8e30b66667015aa1542d75e0db4eaf3edfe3680d04","ssdeep":"","tlshash":"bc60003c00000003c0c033003f03030000000030cf0000c000c0000000c00000000003","first_seen":"2023-07-14T21:39:19Z","last_seen":"2026-04-06T07:52:28.434672Z","times_seen":7542,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":40,"dns":0,"connect":17,"send":0,"wait":18,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fapchatvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767878700/216642829_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767878700/216642829_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3664\r\ncf-ray: 9bac1b4e2a57a41f-OSL\r\netag: \"1801c062634dce29c3492a6c082a28b5\"\r\nlast-modified: Thu, 08 Jan 2026 13:23:52 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 902\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1801c062634dce29c3492a6c082a28b5","sha1":"249bb8937d28a99ac596682a61bc294b3794cfc4","sha256":"9b06c7005911296910637ae7551038c98699789765f51171cf8549cf81be5e03","sha512":"c249dcc6fd77f0a7f6a38adf04de4544e518b487312ea06ee0340fcbaee9c9231dc264e6d699894082a3e89bde5cab45f80078d91cf4eb3cd77819895993da1c","ssdeep":"","tlshash":"68716da4566c584ed8e2f2a32930f4534c21e0d194450a6db76dcb3a14d8cb56677c52","first_seen":"2026-01-08T13:38:54.982007Z","last_seen":"2026-01-08T13:41:01.773118Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=1","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=1 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b4bfdce0b02-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 08 Jan 2026 13:40:25 GMT\r\nage: 0\r\ncf-cache-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1693,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2f33b04eb41576a96a096ce6cddf3f44","sha1":"9d06a02f8bbc56c5503cb21369e3f80a026f2b48","sha256":"75e3703e828b6a4da42be66fce43b2e4fd676c86e723af65a911c5a896466689","sha512":"70e5520ddfb72ae4b551db91bedd8ce4aa9680047120ada20310fc0510a1ba2b6b606088a040977c67f2e60d4792a2fb6b5d749d8fe51dfe4355631ea3cb88f5","ssdeep":"","tlshash":"0d31f0f785ccce7e0f060284d9493c88e5972923a29bbb4490984e5e4ab5cc531dda66","first_seen":"2026-01-08T13:41:01.783487Z","last_seen":"2026-01-08T13:41:01.783487Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767879270/168314364_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767879270/168314364_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15316\r\ncf-ray: 9bac1b4c7b2856cb-OSL\r\netag: \"49ca1ee4e97d42d6ef32d3f48a117a4b\"\r\nlast-modified: Thu, 08 Jan 2026 13:33:48 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 345\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15316,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"49ca1ee4e97d42d6ef32d3f48a117a4b","sha1":"85b89e424e4ca4594810a20343736aa2499dce52","sha256":"268d8331c5bf5c47dff4b4030d8eb6c58a774bcb70d8d0c4c47dc7c466d3e766","sha512":"dff78589eb7b768d8a5a808bcea3cc4539d1690ef606a7502642a0fca9a82cdb8388a6d99cf7b804577a34ecebfe032ce65c728c58c808f6b394d76775209bac","ssdeep":"384:+RqiFPNavGoVgngu0DYo+bspjI/L6rD4vBjWdx:TinqGrgu0DTNU/LY8vBo","tlshash":"f962cf9c6e715d42ba35eb07194268a46023953c4e09bf0e7384cfc67f37867296eb39","first_seen":"2026-01-08T13:38:54.973811Z","last_seen":"2026-01-08T13:42:25.941125Z","times_seen":3,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767879270/168314364_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:40:25.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767879270/168314364_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15316\r\ncf-ray: 9bac1b4e1a3ba41f-OSL\r\netag: \"49ca1ee4e97d42d6ef32d3f48a117a4b\"\r\nlast-modified: Thu, 08 Jan 2026 13:33:48 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 345\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15316,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"49ca1ee4e97d42d6ef32d3f48a117a4b","sha1":"85b89e424e4ca4594810a20343736aa2499dce52","sha256":"268d8331c5bf5c47dff4b4030d8eb6c58a774bcb70d8d0c4c47dc7c466d3e766","sha512":"dff78589eb7b768d8a5a808bcea3cc4539d1690ef606a7502642a0fca9a82cdb8388a6d99cf7b804577a34ecebfe032ce65c728c58c808f6b394d76775209bac","ssdeep":"384:+RqiFPNavGoVgngu0DYo+bspjI/L6rD4vBjWdx:TinqGrgu0DTNU/LY8vBo","tlshash":"f962cf9c6e715d42ba35eb07194268a46023953c4e09bf0e7384cfc67f37867296eb39","first_seen":"2026-01-08T13:38:54.973811Z","last_seen":"2026-01-08T13:42:25.941125Z","times_seen":3,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767878730/220345789_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767878730/220345789_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15070\r\ncf-ray: 9bac1b4e2a52a41f-OSL\r\netag: \"6fe4f6c20a715754058cd4e3aea8dcd3\"\r\nlast-modified: Thu, 08 Jan 2026 13:24:50 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 856\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15070,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6fe4f6c20a715754058cd4e3aea8dcd3","sha1":"c3c63f3ccbdd9f9dfafe6f1e87643cc25d5936e1","sha256":"b91cec9e1a42450ab8a3b4d2ae3fef86d81a999dbc29d5f18df778e85476aee2","sha512":"035cbaf5ba607a8889c6df3e82efcc76e19082f4c995b767efc899a009ddb28a42950f12e6c19b3b6ed1ff4a30697a7a848ca6b9652ebab6a998cf0fde0fd6f1","ssdeep":"384:/5NY3eUknnC8mCqNJNFtNI4mVjrshnB93Nu1tXx8tNMwhn:h+e7mCqNJNu4UCBLu1tXx8XME","tlshash":"c062c052f2e1d3ea32b11660a019a0d36da165d68f4d7db367ed07723084be356f28b4","first_seen":"2026-01-08T13:38:54.985378Z","last_seen":"2026-01-08T13:41:01.85753Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889 HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 09:21:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OaWsWgPAesur3vAe5V8617l3mAdAK1BPv28LDEESu99jAWZ%2FLdRgl6EWlPTRMfgA7bx1VeRBs5%2F0yfz89mbsSMqd2Wky5OVFbVYY2cNUliXkFUOLWhVk0riiaO8%3D\"}]}\r\nexpires: Thu, 08 Jan 2026 13:40:30 GMT\r\ncache-control: max-age=300\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nvary: accept-encoding\r\nage: 293\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9bac1b43aed9b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1427), with no line terminators","md5":"bdce4b8365f3e70efa9c2a9411a3c0d5","sha1":"6207ed4e4a3815ac5f43331cbe05971a47a2e7db","sha256":"ef038e4c01e0947177dd9fe69b895f8f1088d940a4a0a02c18432e90c760cd4b","sha512":"89a9c90b3366346e660b737b718835bce0c5cd3a3786fbdf7e9814a9f20bcaebe981ad69243b67996ffc84b38be64a40c2635ee03e93a0bfba6f92269a9c4d33","ssdeep":"","tlshash":"af21cd22d844c44d65b0d276be913239d48f7b1fe620bad0ec2118dff8a8f8a4265d47","first_seen":"2026-01-08T13:18:31.140958Z","last_seen":"2026-01-13T02:40:20.366837Z","times_seen":37,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":68,"dns":1,"connect":2,"send":0,"wait":7,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/js/jquery.avs-0.2.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/js/jquery.avs-0.2.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=le5d90b98p71m5iuv6afs4tl9n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Nov 2023 01:32:59 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sbgbZRBnQaYOqxK7diEc2D1oblZCtZbBrVS53KJ8Z%2FpmDCQSXz1GGWvDvRXEx5LXtaAnfknN%2FjXxDOz9mF3IIl5%2Fpws2vW6opAG3xQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Fri, 16 Jan 2026 07:13:10 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 541633\r\ncf-cache-status: HIT\r\netag: W/\"3c2b-60adbeeba3442\"\r\ncf-ray: 9bac1b471b285685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15403,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"83f4d7283a8cf90e27388ad899629e3b","sha1":"ddc73a63dd3be64f765bb54e3a02b21af585cd3c","sha256":"44da8db1e2ee0e9a7d1b09426e73de8fdf79932b721078753497b8f0ae69e320","sha512":"21275df240eb5f44271f5287bb7268b8275d75bf764e37671d56a478324a429bbe8bf3072e7f904440e9783573ac34b8d1e40761f19808276efb08992fa51008","ssdeep":"192:dbokmTMZiQ+5qsgXO9SQgGJSE3sTfGU37Gh7nb+kSdodb2ZxWeGAuAkADdv:TGOGh7n/+","tlshash":"f462df08a9f351b9123771be1f2f69583a6841576104ef08b82d7ee06f80724d7b6fe6","first_seen":"2025-07-04T04:12:02.942224Z","last_seen":"2026-04-05T18:13:14.652857Z","times_seen":9,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/css/style.css","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/css/style.css HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=le5d90b98p71m5iuv6afs4tl9n\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:23 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 12 Apr 2022 21:51:03 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cRvac50eFkA7Cqruag2md9a06brJtaFkQMkcNH%2FmHZsb5PPEJ2tbeHfgQdthZHXJDgifjhqssOovB7MGXk8F2%2FTFRJKiwT%2FXdpvG%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Fri, 16 Jan 2026 06:48:36 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 543107\r\ncf-cache-status: HIT\r\netag: W/\"4975-5dc7c0ea1d289\"\r\ncf-ray: 9bac1b403afc5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18805,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (321)","md5":"e8aab69a9241ddc33d133d4c73006acf","sha1":"aeee21817e1747d86d981d52c6714bc4fea18803","sha256":"7fc1cfeb78cd4cf05fb40c97b931dc3dd5c7ead85dacbec7a28444f36e20d4e0","sha512":"d88ba5454c3411daa2cb644426e3e5ab67ff17b5f16552e65f16adab34ed1a7585e4151b3744124fc71e7bf712f39f96b55578f411a0222820572c6f991ad982","ssdeep":"384:Lnihi0fl8EbOWL8irb4ktl+qrDTnJ9/D4Zy:Lnihi0fldL8iYktl+qrDDJ9b4y","tlshash":"cf826377be681804a02fe498ae51efe6a72f0153d74f8ca5b5d4342cd782be90563e4c","first_seen":"2025-07-04T04:12:02.95005Z","last_seen":"2026-04-05T18:13:14.597552Z","times_seen":9,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/css/colors.css","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/css/colors.css HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=le5d90b98p71m5iuv6afs4tl9n\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:23 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 27 Dec 2015 14:31:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LNAsazUiJ3y9LAbFYn9UDnms7emMcYWU28AUveN29zy7%2FmttKS0ZnUy8VmLon8SeVMlNasqnBOUxlEj2hcRcPFPxsKyfHi6WnSDOTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Sat, 17 Jan 2026 02:28:57 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 472286\r\ncf-cache-status: HIT\r\netag: W/\"33b1-527e20a45ec00\"\r\ncf-ray: 9bac1b403aff5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13233,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"6c3dd0164a4630d09e17db0a3fc65a0e","sha1":"4782842ba85edceffbe5dd86c6cb281f65d49af3","sha256":"a77dfcfe0dd0113138522f9675e26c3fce2c62153442d5b5403f65dfa430738b","sha512":"6413ecad4cca15e2f7fb64169f266b8c7bc9294b22ad0818f962803c3499d82263988e88912cfbdb82696146f64476c1692f0bfd04d4be2c9a21888fcddb33e4","ssdeep":"192:Qby9V0uRHt2rVsFWwu5R8e1c/vP9O0I2yBv9Qd5fnV0Ve30PTuLKs1UdYNUltSj:esSPaOsqui7G","tlshash":"ca5201edf242704b3623999d51b3c9928fa961d4cc090f3e796541b4138e4e8bf39dae","first_seen":"2025-07-03T23:27:00.07796Z","last_seen":"2026-04-05T18:13:14.624679Z","times_seen":10,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/logo.png","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:40:23 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:00:51 GMT\r\nETag: \"a8b-5bb00dc2b07f3\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2699\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2699,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 179 x 32, 8-bit/color RGBA, non-interlaced","md5":"f1e8ede9333c8bcafcd8fdec2ad72f40","sha1":"8f68daadc94d3497b04877ab9e598fe7dff230cf","sha256":"fc45e859185deb9e0b866a1718acf24cb0f3f4fc17c5d2b1e751bae1cf61cbbc","sha512":"4ab21e58d216d10ee023f53b1cf6efe54fa685fa1d9f54050639dbd22688dcc6255a64b7eacd1580441a1b5d5fc584beea38644e3e128e9e41bcf2554acaa81b","ssdeep":"","tlshash":"10514c9c6af1161dc242ba4fff3829b1394d1a9715b5db34805763702b55539f2f00ac","first_seen":"2023-06-15T04:01:20Z","last_seen":"2026-04-05T18:13:14.690626Z","times_seen":14,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":57,"dns":4,"connect":37,"send":0,"wait":30,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.07e699c4152364e49f36.css","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:40:24.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/main.07e699c4152364e49f36.css HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jhp2%2BvUO8OceOEnEUGWNBHITZKy%2F%2FX6z5ZWeVC%2F2%2FxtYxut27x8KFjdAzI%2FrYxVfRjPSRXsYdmeGLb2n09%2BXSWUkPN7wbzVFjDhA5luoT%2Fn3xF7Oe%2BYzGuT7tP8%3D\"}]}\r\npriority: u=2,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.07e699c4152364e49f36.css\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2221\r\ncf-cache-status: HIT\r\netag: W/\"60110d98346f0ea28e6d2ee459b321ae\"\r\ncf-ray: 9bac1b450d6a0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14479,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14479), with no line terminators","md5":"60110d98346f0ea28e6d2ee459b321ae","sha1":"737dbaace53a76f2cd33165f6a81c4fd22412469","sha256":"2a144b35a80dd5fd70e0183d3ffce80d5c416a48360cd1ab8402d323cfb7141b","sha512":"c756fa5e05ae040bc716efe70e126add1057285ce37a2228e9d1ed3c247df7ec87a6efe1c2b7c2f5925129803fa583115de6bdb022bb385aa76609dfcb1554b7","ssdeep":"192:LXDldVstnXOVXqeXS3N1baTIHnACMm6+FBuHVAjV9wwL+Yz:DDkOERHnACA+FgHVAjVyi7","tlshash":"3f52b83356612618f41bcd2167a527dba268c417e11227fced527a39cbcb4870fb618e","first_seen":"2026-01-08T13:18:31.217114Z","last_seen":"2026-01-13T02:40:20.370898Z","times_seen":37,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:24.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TBgUgo60CuEAeW51WYD%2FnMjaKw6nWtDfhtPt6VlMWMGAbKiwGjU7JtyXFejTx0%2BivGl7jFLnLhFeubHxIPwEb6VyOXwXZsB%2BYRKMLTfKCC1ao%2FRnRTOP9HqLago%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.0392e0f6c7b6d376d1e1.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2216\r\ncf-cache-status: HIT\r\netag: W/\"6264faf747172d4118734f941fea2ae5\"\r\ncf-ray: 9bac1b457d740b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1144541,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"38aae49805e8e835d39ca677256ddd3a","sha1":"f6acb5b16b97585c582e77165660ddf22f90dd80","sha256":"c9f21fe56aea40cd8c743dcc96d926514ed046e07bf150efc010fc3b796852bd","sha512":"9e2ae8ae8797283a4921700f90b99bcbb05739c21bea5a435ef10995b433dcbaf28a8479aabcf5d786dbf5caa66f6a7b38eb93eb71aa8935e984dfd0a97461d8","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJT:tRe0Y+AWZTdXYrntI0tPqX2vqDdu","tlshash":"642539897756b47646c69146e03f0203f235699a201a905cb3deecec665ceceb237b37","first_seen":"2026-01-08T13:18:31.205655Z","last_seen":"2026-01-13T02:40:20.342138Z","times_seen":37,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/9TiwnJFHeuIw_s0wSd3fiKfN/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:25.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /recaptcha/releases/9TiwnJFHeuIw_s0wSd3fiKfN/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nOrigin: https://www.xrares.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 363821\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Jan 2026 23:19:37 GMT\r\nexpires: Tue, 05 Jan 2027 23:19:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 05 Jan 2026 05:02:41 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 224448\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":851854,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (582)","md5":"03d9b88f050dca0423663c08a6351d61","sha1":"8a170f34f7390a1926557bb07c336dcabaf8965b","sha256":"64c4f34a5dd84ed645c723c1a6cadcf0e9299060fb2529476752406bbbb31180","sha512":"4f2bf3aff87c7557b7081c3c73ada5578884f9c68432685b53de85c367be5ab97eb0291292ad10de22187c620d0d501c96c92e458b0e90e905f4885b8b07f1ed","ssdeep":"12288:CGl2AF8mhLTGizXGMcK2JKGeD/6r99koATGL2rn0JE:vl2AFfLTGiiE2JKPD/6Z9kNTGL2r0JE","tlshash":"db054bc8b05236b5e323b9f510a7504ea73d9255d4081c2eb29988f93fb4c89717aef7","first_seen":"2026-01-07T20:19:38.966305Z","last_seen":"2026-04-04T19:22:51.050124Z","times_seen":20094,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":52,"dns":1,"connect":15,"send":0,"wait":15,"receive":68,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/app/domain-checker/get-check","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"POST /app/domain-checker/get-check HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b4c1dd40b02-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-expose-headers: *\r\nvary: Origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T11:11:40.092337Z","times_seen":13419940,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/721caf0b/www-widgetapi.vflset/www-widgetapi.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:25.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /s/player/721caf0b/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 10138\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 06 Jan 2026 08:31:49 GMT\r\nexpires: Wed, 06 Jan 2027 08:31:49 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 06 Jan 2026 05:33:44 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 191316\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30432,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (570)","md5":"212ecade2ccab1d277a4f25252442fce","sha1":"41ebf899a2d00b0d8d28897434894349694ee5d7","sha256":"11aa7946df12674187e45a29c8a083a30cefb5e625985b2405c1d0fb710e56b2","sha512":"af8a2b3f4d9e2c770214917085012643d845d474befeb1cf58290bfb2d5bff1a49953d624eb3b6da4a5a2c44893cc49296277c08b813ae3212860f02ac4664ac","ssdeep":"384:LJrDFJE658O7nfTwu3hZKjDOYjPncmXjVGv+E4aiz2wZBat1CUS6UTGdtmv4nU+g:LpHV5PfnhQjyYJjEV4jLlUS6UKZg","tlshash":"07d2d6cd77b1b431437366b5902f100fb23e98aab40cc999b188d8e16cb49694637f7e","first_seen":"2025-10-16T17:59:48.894792Z","last_seen":"2026-04-01T04:43:01.189781Z","times_seen":43437,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/media/videos/tmb/3085/4.jpg","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:23.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /media/videos/tmb/3085/4.jpg HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:40:23 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:50:32 GMT\r\nETag: \"1170-5bb018dd71259\"\r\nAccept-Ranges: bytes\r\nContent-Length: 4464\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4464,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 256x144, components 3","md5":"50a8786655dcb1c009253a265f636d68","sha1":"6902463dd3363aefbd98916cde7c45b821808387","sha256":"bfeab53a8d8809ea5173e821ead841aaa9b57b7c2429a4a3b311181d58210dc9","sha512":"f206a1c3849816c32933317424a6a91b3acbfea88f3ae4404cd3231847e6d8811d209904a224d5b9dcd32516628f0476374c00fdf836bf2f6d9ddaad337523d3","ssdeep":"96:FgZzEPsB57u2nMuNqrSShY8bb0EfrFGjNuwvbmPgG:F2Ae5y2TNgq0b0kRbwO","tlshash":"1a919eaebb632341c60289bf4e421fdba119d44672987852c6a7c33fce04a42de1a185","first_seen":"2026-01-08T13:38:54.983367Z","last_seen":"2026-01-08T13:41:01.890637Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/roiejd.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"104.21.28.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154","date":"2026-01-08T13:40:24.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /roiejd.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=le5d90b98p71m5iuv6afs4tl9n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:24 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Dec 2025 13:13:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0uQovMXsHCM6YZ%2BWz50Z1XCJsi03rO1t9VJAqR4fhFJeUrReJ7PMhVdz4Rh%2BqDVOLKsYPG8CeZcrnz3XSafD7zlRiMmluiBK%2FrEdoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Sat, 17 Jan 2026 13:22:20 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 433084\r\ncf-cache-status: HIT\r\netag: W/\"1a514-6454852b60e21\"\r\ncf-ray: 9bac1b470b275685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107796,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"389df22376f00ab326345155cce982fc","sha1":"ba335ec6da726959b0c22e7b23ae59b2fa3ae84b","sha256":"7eb4d912958c4f9ac34b5042055cf2013e3fcfaa2ce17a85325645b71c8a9e76","sha512":"943049de9a8e01cf56d5ed804dced196bec43fa56a5dea33d801e76678d7a6984dfc553be2894f6251812fd0bdacd1af62ebcf16c6a4d9af4d5a9636fc50fa35","ssdeep":"1536:0+rCqGRCe2boMYdofAPtHv6UnDXn6bSia3NiBiChJxo1WJD8701t7QO2/5aQxtX:NrCqGR9VdpPtCgzTNiQ4n8701l2NtX","tlshash":"03b32e40200748e521e2e67ee56bb0d93c24a813f5e9cda72d05e7c1f8dec99469bde3","first_seen":"2026-01-08T13:18:31.192Z","last_seen":"2026-04-05T18:13:14.696451Z","times_seen":6,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/abc.gif?campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.xrares.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1406%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A813%2C%22duration%22%3A58%2C%22transferSize%22%3A2803%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A813%2C%22duration%22%3A101%2C%22transferSize%22%3A266022%7D%5D\u0026mh=-1470193040","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /abc.gif?campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.xrares.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_75\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1406%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A813%2C%22duration%22%3A58%2C%22transferSize%22%3A2803%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A813%2C%22duration%22%3A101%2C%22transferSize%22%3A266022%7D%5D\u0026mh=-1470193040 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b49cdbf0b02-OSL\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T11:11:40.092337Z","times_seen":13419940,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/app/domain-checker/get-check","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:40:25.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"POST /app/domain-checker/get-check HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b4bfdcc0b02-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-expose-headers: *\r\nvary: Origin, accept-encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dadbb63c3e9821696aa71674036ec939","sha1":"95e8d68f11f3ba4e4ab6b5ed2ef659117115f16a","sha256":"995bf4641e67f40049e49e5f1bb1eab585d2e49617594c0eaf7b8bd5a60e251c","sha512":"f4a1a3a2ddf24ec213fa1a4b01a439b8adf266d973ad1bcafe30eb4440690a0b05bad9259acc27e1367beae3080b807a2e1a3e25a2300556d8e3a7f84fbaf150","ssdeep":"","tlshash":"fbd0221b410cb203c1c4c2c03e3f6584180428a04d018cf08ecc70acc0dc2340d33a11","first_seen":"2026-01-08T13:41:01.891813Z","last_seen":"2026-01-08T13:41:01.891813Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767879150/182984051_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:40:25.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767879150/182984051_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:40:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11088\r\ncf-ray: 9bac1b4c7b2e56cb-OSL\r\netag: \"03f49bd0964d00eca14431ab84b773dc\"\r\nlast-modified: Thu, 08 Jan 2026 13:31:48 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 468\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11088,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"03f49bd0964d00eca14431ab84b773dc","sha1":"8d58a37caee6131d445ab04579dd90afb5d39693","sha256":"ea3933d49f7596a0e77939f7ded8773528a982348b3add282bbfd45e1a0f848d","sha512":"e6db73141b84c2a2e0b9a1cbb63095dc30b79fbb85ce67284069dada9540721b0a49271546e72f739c1d2f03cb3d2ebcfb04954beab6de6cf719e2539ee836c6","ssdeep":"192:f6s5OBU8wU+UVNz47gfJ6LDLWilmeENuWWX/3lQyTgB5NbeJPI8k5MzhmWjuMeAD:DI6rGNz2tXFlbENHWXvlbTKwydMqMeLO","tlshash":"3a32cfb1dfb111b619c52a583e4fd801fb7de8c2098a87ea0b2a72c4111b66cadd4f0d","first_seen":"2026-01-08T13:38:55.054419Z","last_seen":"2026-01-08T13:41:01.893151Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/app/domain-checker/check-result","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:40:26.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"POST /app/domain-checker/check-result HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 249\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":249,"data":"{\"checkId\":97,\"result\":\"success\",\"currentDomain\":\"go.bluetrafficstream.com\",\"requestSignature\":\"1767879625-81676f8164e229e44f684ae7181e29ff\",\"configLoadTimeMs\":96,\"checkPerformTimeMs\":280,\"resultResponse\":\"{\\\"it\\\":\\\"works\\\"}\",\"resultStatusCode\":200}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 08 Jan 2026 13:40:26 GMT\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1b4eddd90b02-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-expose-headers: *\r\nvary: Origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T11:11:40.092337Z","times_seen":13419940,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}