Overview

URLwww.4tube.com/videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es
IP 104.20.223.111 ()
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-09 06:06:15 UTC
StatusLoading report..
IDS alerts0
Blocklist alert2
urlquery alerts No alerts detected
Tags None

Domain Summary (39)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
ssl.google-analytics.com (1) 275 2012-10-02 04:58:30 UTC 2022-12-08 17:21:31 UTC 142.250.74.72
ngs-edge-95-128-121-19.dditscdn.com (1) 0 2022-08-09 20:07:59 UTC 2022-12-06 15:57:54 UTC 95.128.121.19 Domain (dditscdn.com) ranked at: 153809
pt-static5.jsmsat.com (3) 56136 2020-07-24 10:16:55 UTC 2022-12-08 19:17:26 UTC 93.93.51.201
ngs-edge-95-128-121-18.dditscdn.com (1) 0 2022-08-10 13:32:05 UTC 2022-12-07 01:03:15 UTC 95.128.121.18 Domain (dditscdn.com) ranked at: 153809
r3.o.lencr.org (16) 344 2020-12-02 08:52:13 UTC 2022-12-08 17:12:06 UTC 23.36.77.32
cdn-channels.4tube.com (1) 0 2022-09-16 10:00:30 UTC 2022-11-24 03:52:25 UTC 54.230.111.65 Domain (4tube.com) ranked at: 200290
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-12-08 17:20:00 UTC 34.223.160.237
syndication.exosrv.com (1) 20827 2017-01-30 06:19:28 UTC 2022-12-08 22:46:48 UTC 95.211.229.246
img-getpocket.cdn.mozilla.net (5) 1631 2017-09-01 03:40:57 UTC 2022-12-08 15:50:00 UTC 34.120.237.76
crmt.livejasmin.com (2) 0 2022-10-04 08:01:49 UTC 2022-12-08 16:47:51 UTC 93.93.51.191 Domain (livejasmin.com) ranked at: 14554
token.4tube.com (1) 0 2019-04-10 10:55:42 UTC 2022-11-24 03:52:26 UTC 54.166.244.100 Domain (4tube.com) ranked at: 200290
cdn.impactserving.com (1) 148426 2019-07-10 11:09:44 UTC 2022-12-05 18:15:07 UTC 104.19.161.92
a.realsrv.com (1) 10080 2019-07-03 16:12:14 UTC 2022-12-08 17:34:06 UTC 185.76.9.22
ads.exoclick.com (2) 32908 2012-11-29 00:05:16 UTC 2022-12-08 18:57:06 UTC 205.185.216.10
www.4tube.com (9) 454264 2014-10-07 22:48:23 UTC 2022-12-07 01:00:32 UTC 104.20.224.111
www.googletagmanager.com (1) 75 2012-10-04 01:07:32 UTC 2022-12-08 17:14:43 UTC 142.250.74.168
ocsp.sectigo.com (1) 487 2018-12-17 11:31:55 UTC 2022-12-08 17:18:07 UTC 172.64.155.188
ocsp.sca1b.amazontrust.com (1) 1015 2016-02-14 02:37:56 UTC 2019-03-27 04:05:54 UTC 54.230.245.118
ukdliketobepa.monster (1) 0 2022-08-03 09:45:11 UTC 2022-11-29 06:48:07 UTC 54.230.111.27 Unknown ranking
pt-static4.jsmsat.com (1) 49485 2020-07-24 10:37:21 UTC 2022-12-08 19:55:22 UTC 93.93.51.201
ngs-edge-95-128-120-40.dditscdn.com (1) 0 2022-11-30 10:31:58 UTC 2022-12-05 09:23:27 UTC 95.128.120.40 Domain (dditscdn.com) ranked at: 153809
lsc-edge-95-128-120-32.dditscdn.com (1) 0 2022-11-17 19:01:20 UTC 2022-12-06 03:53:29 UTC 95.128.120.32 Domain (dditscdn.com) ranked at: 153809
go.xlivrdr.com (1) 0 2021-07-02 10:51:24 UTC 2022-12-08 18:18:10 UTC 104.18.59.150 Unknown ranking
www.4tube.com (9) 454264 2014-10-07 22:48:23 UTC 2022-12-07 01:00:32 UTC 104.20.223.111
ocsp.digicert.com (6) 86 2012-05-21 07:02:23 UTC 2022-12-08 17:15:52 UTC 93.184.220.29
ui.4tube.com (24) 0 2014-10-06 19:48:00 UTC 2022-11-24 03:52:25 UTC 104.20.224.111 Domain (4tube.com) ranked at: 200290
ocsp.r2m01.amazontrust.com (1) 0 2022-10-12 20:43:53 UTC 2022-12-08 17:23:26 UTC 54.230.80.227 Domain (amazontrust.com) ranked at: 581
s3t3d2y8.afcdn.net (9) 0 2022-08-08 22:22:56 UTC 2022-12-08 17:36:31 UTC 185.76.9.18 Unknown ranking
www.google-analytics.com (1) 40 2012-05-21 09:41:50 UTC 2022-12-08 17:20:06 UTC 142.250.74.46
pt-static1.jsmsat.com (1) 52894 2020-07-17 20:01:48 UTC 2022-12-08 18:35:02 UTC 93.93.51.201
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2022-12-08 17:12:32 UTC 35.241.9.150
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-12-08 17:21:04 UTC 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-12-08 17:14:01 UTC 34.117.237.239
cdn-thumbs.4tube.com (4) 591816 2021-07-31 14:46:34 UTC 2022-12-06 09:09:04 UTC 143.204.55.52
ocsp.pki.goog (3) 175 2017-06-14 07:23:31 UTC 2022-12-08 17:12:01 UTC 142.250.74.131
ksehinkitw.hair (5) 0 2022-07-21 06:48:53 UTC 2022-12-08 17:12:19 UTC 54.162.51.18 Unknown ranking
syndication.realsrv.com (10) 9112 2019-07-03 21:39:52 UTC 2022-12-08 17:34:22 UTC 95.211.229.246
api-protected.protoawegw.com (3) 52858 2019-04-02 12:45:46 UTC 2022-12-08 18:35:06 UTC 93.93.51.225
crjpgate.com (1) 0 2022-09-27 12:01:51 UTC 2022-12-08 19:17:25 UTC 93.93.51.223 Unknown ranking

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-09 2 www.4tube.com/sw.js Malware
2022-12-09 2 www.4tube.com/sw.js?V3E4R1EMUw90ZmJECWV9dVMUZWg0QA4lMGUSFXFkYUcVczBmExUmM2B (...) Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 2 reports on IP: 104.20.223.111
Date UQ / IDS / BL URL IP
2022-12-09 06:06:15 +0000 0 - 0 - 2 www.4tube.com/videos/720178/pussy-loving-hott (...) 104.20.223.111
2022-09-03 06:46:44 +0000 0 - 0 - 1 m.4tube.com/videos/509868/czech-euro-teen-bea (...) 104.20.223.111


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-02-03 20:01:29 +0000 0 - 6 - 0 ouo.io/0arZZ5 104.22.22.162
2023-02-03 20:00:52 +0000 0 - 6 - 0 www.binarymark.com/do.aspx?pid=22&t=u&act=uninst 104.21.72.72
2023-02-03 20:00:49 +0000 0 - 3 - 1 adoppop.com/ 188.114.97.1
2023-02-03 20:00:34 +0000 0 - 1 - 0 cdn.discordapp.com/attachments/10497531186084 (...) 162.159.129.233
2023-02-03 19:59:33 +0000 0 - 1 - 0 cdn.discordapp.com/attachments/10711565497472 (...) 162.159.134.233


Last 5 reports on domain: 4tube.com
Date UQ / IDS / BL URL IP
2022-12-09 06:06:15 +0000 0 - 0 - 2 www.4tube.com/videos/720178/pussy-loving-hott (...) 104.20.223.111
2022-11-24 00:48:09 +0000 0 - 0 - 1 www.4tube.com/videos/509291/pussy-cat-kimmy-g (...) 104.20.224.111
2022-09-13 15:04:29 +0000 0 - 0 - 2 4tube.com/ 104.20.224.111
2022-09-03 06:46:44 +0000 0 - 0 - 1 m.4tube.com/videos/509868/czech-euro-teen-bea (...) 104.20.223.111
2022-09-03 06:46:21 +0000 0 - 0 - 2 www.4tube.com/videos/442149/hot-brunette-vane (...) 104.20.224.111


No other reports with similar screenshot

JavaScript

Executed Scripts (58)

Executed Evals (7)
#1 JavaScript::Eval (size: 135) - SHA256: 3c25095be4b1228237a62665648fda858d8c27d76bf8263c44697667206f0ce8
(function() {
    var a = google_tag_manager["GTM-MJ29FD7"].macro(9);
    return srB = a.substr(a.indexOf(".com") + 4, a.length - a.indexOf(".com") - 4)
})();
#2 JavaScript::Eval (size: 136) - SHA256: 249e7ffddff0df139fb3eb815c44a9b10b765326019aa680ed29126e48164577
(function() {
    var a = google_tag_manager["GTM-MJ29FD7"].macro(16);
    return srB = a.substr(a.indexOf(".com") + 4, a.length - a.indexOf(".com") - 4)
})();
#3 JavaScript::Eval (size: 136) - SHA256: f25ad4c0fb31df9b59b0b2c98d4fbbebc6e1a0c1a2e70a0adb3f73fe544e1ce7
(function() {
    var a = google_tag_manager["GTM-MJ29FD7"].macro(19);
    return srB = a.substr(a.indexOf(".com") + 4, a.length - a.indexOf(".com") - 4)
})();
#4 JavaScript::Eval (size: 685) - SHA256: fc53d350c301188f7c6708520bf8eb8fe0073e26e38968aa2b86887f127f94a7
(function() {
    window.InfSkipTriggerClick = true;
    window.InfSkipUserEventPropagation = true;
})();
(function(s, o, l, v, e, d) {
    if (s[o] == null && s[l + e]) {
        s[o] = "loading";
        s[l + e](d, l = function() {
            s[o] = "complete";
            s[v + e](d, l, !1)
        }, !1)
    }
})(document, "readyState", "add", "remove", "EventListener", "DOMContentLoaded");
(function() {
    var s = document.createElement("script");
    s.type = "text/javascript";
    s.async = true;
    s.src = "//cdn.impactserving.com/Scripts/infinity.js.aspx?guid=cc0b9136-0e22-4ced-9fd6-6a84e150a8d7";
    s.id = "infinity";
    s.setAttribute("data-guid", "cc0b9136-0e22-4ced-9fd6-6a84e150a8d7");
    s.setAttribute("data-version", "async");
    var e = document.getElementsByTagName("script")[0];
    e.parentNode.insertBefore(s, e)
})();
#5 JavaScript::Eval (size: 84) - SHA256: b363fddb559a29c54f4cb2a236e7a01c3d4153d995dcbfe3009de3c8660a0daf
(function() {
    var b = 11;
    return function(a) {
        a.set("dimension" + b, a.get("clientId"))
    }
})();
#6 JavaScript::Eval (size: 43) - SHA256: 142c43200587e1ab9862fc27f0238f345cafbc55e9e1a1b1bd1a4c7e8e1aa276
(function() {
    return window === window.top
})();
#7 JavaScript::Eval (size: 136) - SHA256: bb823e79673ebc96f615593ed3adde59eb235b444365e62238612fa0899c83d0
(function() {
    var a = google_tag_manager["GTM-MJ29FD7"].macro(13);
    return srB = a.substr(a.indexOf(".com") + 4, a.length - a.indexOf(".com") - 4)
})();

Executed Writes (5)
#1 JavaScript::Write (size: 239) - SHA256: ecccfe58129c450818ae984a3f4cfe6bbd00f44a13392ba34d98fc11c2755033
< script async type = "application/javascript"
src = "https://a.realsrv.com/ad-provider.js" > < /script>  < ins class = "adsbyexoclick"
data - zoneid = "4255332" > < /ins>  < script >
    (AdProvider = window.AdProvider || []).push({
        "serve": {}
    }); < /script>
#2 JavaScript::Write (size: 774) - SHA256: a084bff0649974a1166358792e45c81d6bd43c896e267fe455db3516b79b94c6
< div style = "text-align:center" >
    < script async type = "application/javascript"
src = "https://a.realsrv.com/ad-provider.js" > < /script> 

< ins class = "adsbyexoclick"
data - zoneid = "4248790" > < /ins> 

< script >
    (AdProvider = window.AdProvider || []).push({
        "serve": {}
    }); < /script> < script async type = "application/javascript"
src = "https://a.realsrv.com/ad-provider.js" > < /script> 

< ins class = "adsbyexoclick"
data - zoneid = "4248790" > < /ins> 

< script >
    (AdProvider = window.AdProvider || []).push({
        "serve": {}
    }); < /script> < script async type = "application/javascript"
src = "https://a.realsrv.com/ad-provider.js" > < /script> 

< ins class = "adsbyexoclick"
data - zoneid = "4248790" > < /ins> 

< script >
    (AdProvider = window.AdProvider || []).push({
        "serve": {}
    }); < /script> < /div>
#3 JavaScript::Write (size: 243) - SHA256: c03423323f746bc4aaea95108bd5b0a21a9eaba363ef8c7293731991c6499941
< script async type = "application/javascript"
src = "https://a.realsrv.com/ad-provider.js" > < /script> 

< ins class = "adsbyexoclick"
data - zoneid = "4255354" > < /ins> 

< script >
    (AdProvider = window.AdProvider || []).push({
        "serve": {}
    }); < /script>
#4 JavaScript::Write (size: 92) - SHA256: 5be7a855856bbb73c30cdc2e6fd0c9370c6286f8ac03047d868267c37c233d41
< script type = "application/javascript"
src = "https://ads.exoclick.com/ad99uip8i.php" > < /script>
#5 JavaScript::Write (size: 0) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855


HTTP Transactions (126)


Request Response
                                        
                                            GET /videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es HTTP/1.1 
Host: www.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         104.20.223.111
HTTP/1.1 301 Moved Permanently
                                        
Date: Fri, 09 Dec 2022 06:06:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 09 Dec 2022 07:06:04 GMT
Location: https://www.4tube.com/videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 776b8d7b4eacb50c-OSL

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19143
Expires: Fri, 09 Dec 2022 11:25:07 GMT
Date: Fri, 09 Dec 2022 06:06:04 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2669
Expires: Fri, 09 Dec 2022 06:50:33 GMT
Date: Fri, 09 Dec 2022 06:06:04 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 09 Dec 2022 05:08:17 GMT
age: 3467
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA"
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16420
Expires: Fri, 09 Dec 2022 10:39:44 GMT
Date: Fri, 09 Dec 2022 06:06:04 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=141862
Date: Fri, 09 Dec 2022 06:06:04 GMT
Etag: "63925772-118"
Expires: Sat, 10 Dec 2022 21:30:26 GMT
Last-Modified: Thu, 08 Dec 2022 21:30:26 GMT
Server: nginx
Content-Length: 280

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: B/o+MK1YDHkrtlZxC/Hhop6LE5B/kk32cAi1R7b6gnZ/He8INdVwsnLh/g11oimqOlE4wF1q8l4=
x-amz-request-id: Z309Z814DXPN7JC5
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 09 Dec 2022 05:48:12 GMT
age: 1072
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    53341dea33f4f3d9b4966f80589f429a
Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 09 Dec 2022 06:06:04 GMT
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 09 Dec 2022 05:07:55 GMT
age: 3489
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5020
Cache-Control: max-age=102267
Date: Fri, 09 Dec 2022 06:06:05 GMT
Etag: "6391a92c-1d7"
Expires: Sat, 10 Dec 2022 10:30:32 GMT
Last-Modified: Thu, 08 Dec 2022 09:06:52 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /assets/img/black-d2a0017e14.png HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
content-length: 67
cache-control: max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
access-control-allow-origin: *
etag: "43-5ee33736fc1c0"
expires: Sat, 10 Dec 2022 05:41:55 GMT
last-modified: Thu, 24 Nov 2022 08:47:11 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 1450
accept-ranges: bytes
server: cloudflare
cf-ray: 776b8d81d876b517-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1 x 1, 8-bit grayscale, non-interlaced\012- data
Size:   67
Md5:    d2a0017e140e1dbb785ca2a1f4aa9cff
Sha1:   5641ef04aa673e52cc8067cde1537a70f646a100
Sha256: 1886d19d7979b86877801b46ae69707309adc38143ab67c3dd2cd36d4db8f23c
                                        
                                            GET /assets/img/88x31_RTA_b-170f4b1479.gif HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: image/gif
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
content-length: 2624
cache-control: max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
access-control-allow-origin: *
etag: "a40-5ee33736fc1c0"
expires: Sat, 10 Dec 2022 05:41:56 GMT
last-modified: Thu, 24 Nov 2022 08:47:11 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 1449
accept-ranges: bytes
server: cloudflare
cf-ray: 776b8d81d878b517-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 87a, 88 x 31\012- data
Size:   2624
Md5:    170f4b1479d7377bce720fa0a7363cc5
Sha1:   db56f9deb54707a4c75423103d92061786235f78
Sha256: a0beb1610a9641243df1a74c20e323546d284cbdd75eb6b94f612d9bda2ea4a2
                                        
                                            GET /ad_track.js HTTP/1.1 
Host: ads.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 09 Dec 2022 06:06:05 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 221
Accept-Ranges: bytes
Cache-Control: max-age=10800
Server: nginx
etag: W/"3ac21caf363100082c3f8c53986"
X-HW: 1670565965.dop003.sk1.t,1670565965.cds229.sk1.shn,1670565965.dop003.sk1.t,1670565965.cds026.sk1.c
Access-Control-Allow-Origin: *, *


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (368), with no line terminators
Size:   221
Md5:    1aaf2775a48a6417574972dfbbe2797b
Sha1:   8562ab1dc5691c9026e9cdea6e0a84787a48be34
Sha256: 88479a62209f6f242c8f8b93461fa93aadbbaf07fab1152d806fba1b69f99aa1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m01.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=88181
Date: Fri, 09 Dec 2022 06:06:05 GMT
Etag: "63917ab6-1d7"
Expires: Sat, 10 Dec 2022 06:35:46 GMT
Last-Modified: Thu, 08 Dec 2022 05:48:38 GMT
Server: ECS (dcb/7FA7)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: xm5SxitSyN6nY5FxPP8ndPWVBKAtv-gPqkf1zZxa2tBTIUjN8_xLnA==
Age: 2829

                                        
                                            GET /image/0/0/0/0/0/0/6/4/7/1459855535_850x80.jpg HTTP/1.1 
Host: cdn-channels.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

search
                                         54.230.111.65
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 87286
x-amz-replication-status: COMPLETED
last-modified: Mon, 21 Jun 2021 11:15:51 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: IRVQzxAdl6a2fRCjYPPS5pMdQrduv4DH
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Dec 2022 06:54:33 GMT
etag: "afe1add5485805501d1e10de3e26ca82"
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8cHgxWL4Z2cg_55oTMwT1KNxMgZaQbZlQ8R7xpkWlTb-m6hMI1IUTQ==
age: 83493
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 850x80, components 3\012- data
Size:   87286
Md5:    afe1add5485805501d1e10de3e26ca82
Sha1:   23e6a3691b6e5b387d12a01ce1dc1780e43c3727
Sha256: d97e8b8f84e6498af235d80047c3666f95fe787b4fe9b0155ebf0933c5c89f80
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 25AF8hDMQKM/X6oK1FGKXQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         34.223.160.237
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: S6ghCZq/B7wz9+Hx9suq4wdWK2g=

                                        
                                            GET /ad99uip8i.php HTTP/1.1 
Host: ads.exoclick.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 09 Dec 2022 06:06:05 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 50
Accept-Ranges: bytes
Server: nginx
Cache-Control: max-age=10800
X-HW: 1670565965.dop003.sk1.t,1670565965.cds229.sk1.shn,1670565965.dop003.sk1.t,1670565965.cds262.sk1.c
Access-Control-Allow-Origin: *, *


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   50
Md5:    06d4faa411b83f9b0a030cf2b68ec904
Sha1:   ec633929782d2f0224a127a303023506262226ca
Sha256: d4d18940a5b8abeaf48fd08e6d97a5990ef5ea98070dbca9577585fada3ef826
                                        
                                            GET /assets/img/loader-white-b05cf8ba8e.gif HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ui.4tube.com/assets/styles_4tube-8f857004d5.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: image/gif
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
content-length: 1805
cache-control: max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origSize=1924
access-control-allow-origin: *
etag: "784-5ee33736fc1c0"
expires: Sat, 10 Dec 2022 05:59:51 GMT
last-modified: Thu, 24 Nov 2022 08:47:11 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 374
accept-ranges: bytes
server: cloudflare
cf-ray: 776b8d850a85b517-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 55\012- data
Size:   1805
Md5:    d0bcab706fc49c4274166c07e5775b49
Sha1:   7cc36858cd2418ca23fff222a5083eb5fe580ddd
Sha256: a21b35a2490563818c55a71cb93a848a6c50c2de9b5fb6fa13b65c27b3b87030
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9BFCB430527D3297E359ADB0F71713EDD92046E53F743DFC85BD76131CC86FEF"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6152
Expires: Fri, 09 Dec 2022 07:48:37 GMT
Date: Fri, 09 Dec 2022 06:06:05 GMT
Connection: keep-alive

                                        
                                            GET /assets/newrelicKpis-018b5db755.js HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"2b0-5ee3379eef700-gzip"
expires: Sat, 10 Dec 2022 05:43:34 GMT
last-modified: Thu, 24 Nov 2022 08:49:00 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 1351
server: cloudflare
cf-ray: 776b8d81b859b517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (623)
Size:   12988
Md5:    152e6ef09f69a3a4e3366532c9a565c5
Sha1:   443a0c1850d2fbe8108bf33f3ffad6bdd6c6497b
Sha256: dfd54410118c4ea9d0f8b3a7a29a442ea75b3674660fca84094642160c14d033
                                        
                                            GET /8/0/1/3/9/7/0/9/8/240x180/712.jpeg HTTP/1.1 
Host: cdn-thumbs.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

search
                                         143.204.55.52
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 11290
last-modified: Wed, 23 Nov 2022 08:24:54 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 09 Dec 2022 01:41:11 GMT
etag: "7c621a7c7b2062938264d9a71586bb9f"
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EJHVvOfvCihsL623lvjWWfF6tDVCpbmO6_Nk6HITiDre2DMIRahbuQ==
age: 16658
cache-contol: max-age=15552000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Size:   11290
Md5:    7c621a7c7b2062938264d9a71586bb9f
Sha1:   2933c48a26197ec4693245b4f12f0db45a25fcd4
Sha256: 4248eb1476a6b4f6c37f00fd7dc9ab9334aaa70d5276d9597369170961fb7b87
                                        
                                            GET /assets/img/layout/4tube-logo-1f503fd81c.png HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
cache-control: max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origSize=12663
access-control-allow-origin: *
etag: "3177-5ee33736fc1c0"
expires: Sat, 10 Dec 2022 05:41:55 GMT
last-modified: Thu, 24 Nov 2022 08:47:11 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 1450
server: cloudflare
cf-ray: 776b8d81c870b517-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 172 x 46, 8-bit/color RGBA, non-interlaced\012- data
Size:   22402
Md5:    2ce37180aac0a41d4d7d45be522d58d0
Sha1:   2e42cebbf900eeb514bc708590a3d8e6e73e6d15
Sha256: ee7cdcf54a15b51b2080c337ad3071640d5c3e872f4705abb4dd02d0fbdc83a9
                                        
                                            GET /8/0/1/3/8/3/6/6/6/240x180/293.jpeg HTTP/1.1 
Host: cdn-thumbs.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.52
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 9708
last-modified: Mon, 22 Aug 2022 13:18:25 GMT
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Dec 2022 07:08:35 GMT
etag: "cb26668088aac63fe2af6156817dcb09"
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iu0eWg5Imm89FHJl4qGdYPTDPh4aOjtiPmarrcLZvOvx4vlHTEY9Fg==
age: 82776
cache-contol: max-age=15552000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Size:   9708
Md5:    cb26668088aac63fe2af6156817dcb09
Sha1:   9f43f210de9d318bf7c68b197b8e63240407ed37
Sha256: 87a7be0ff6b68a2065983e78e1f96d28c56a77aec6cf0df59118b263dd5c956b
                                        
                                            GET /assets/base-5e619af4ba.js HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"18e35-5ee337ad3d8c0-gzip"
expires: Sat, 10 Dec 2022 05:41:55 GMT
last-modified: Thu, 24 Nov 2022 08:49:15 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 1450
server: cloudflare
cf-ray: 776b8d81b854b517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32007)
Size:   48387
Md5:    07d1735b16a269e97fe8c4f7ebb9bb81
Sha1:   d5ec88446e4eb85bd849ae1d6588e0019f166f98
Sha256: a14abc32e77b04978c4fe2330cfe6224d7468336c88b2c450d874e9e35af6d9c
                                        
                                            GET /assets/video_player-9842b478da.js HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"3daed-5ee337ad3d8c0-gzip"
expires: Sat, 10 Dec 2022 05:59:51 GMT
last-modified: Thu, 24 Nov 2022 08:49:15 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 374
server: cloudflare
cf-ray: 776b8d81b85fb517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32020)
Size:   79049
Md5:    84e2cb599b45e697f1c690c04b17d20e
Sha1:   f813bc8de3e7c298236912ac3b5070ca35508d77
Sha256: deaa8ea903c5b5790b5e74e5b565611ec897ea52a78ab5754679d2d32304c88d
                                        
                                            GET /8/0/1/3/9/7/1/0/4/240x180/374.jpeg HTTP/1.1 
Host: cdn-thumbs.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

search
                                         143.204.55.52
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 12371
last-modified: Wed, 23 Nov 2022 08:09:27 GMT
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Dec 2022 08:56:09 GMT
etag: "2522c6f33104686af3caa6d08224001c"
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wzjqOA-UQYtz7qvv5AWYt7A6UUqq0CpLeWRP1CWH5yWk2XSgjRiJww==
age: 76203
cache-contol: max-age=15552000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Size:   12371
Md5:    2522c6f33104686af3caa6d08224001c
Sha1:   1065cb38916e4434def9fa9730c28886328e304b
Sha256: 085ba97f737dfda33643d608bbab19d4512525aa5a7da323f2ef9cf41118f636
                                        
                                            GET /nyordo.js HTTP/1.1 
Host: www.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
etag: W/"61a5-5e3b239ebecc0-gzip"
last-modified: Wed, 13 Jul 2022 16:24:59 GMT
vary: Accept-Encoding, Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 425
server: cloudflare
cf-ray: 776b8d81883bb517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  C source, ASCII text
Size:   16039
Md5:    786615003f7059d5a0ec7d707a3257cd
Sha1:   57fe134ec1d024189d951cbcc58360695ddc7581
Sha256: 3ec413db4b15a5ed90366158c9db4f115294632540f9fda65fb9bb5cb1da9f2b
                                        
                                            GET /assets/styles_4tube-8f857004d5.css HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: text/css
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"212a6-5ee337ae31b00-gzip"
expires: Sat, 10 Dec 2022 05:41:55 GMT
last-modified: Thu, 24 Nov 2022 08:49:16 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 1450
server: cloudflare
cf-ray: 776b8d81b852b517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (60458)
Size:   36325
Md5:    dc067be66a295688b66db7f149dd42e4
Sha1:   5df84a540414237e6c608fcea13046475ccb1251
Sha256: 7c7a4f48fa699167dd56e3589aeb2dad82daf93f191c464f40b774780d56a30c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Dec 2022 06:06:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /v1/api.php HTTP/1.1 
Host: syndication.realsrv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 294
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392d04e080896.486451421035136552%22%3B%7D; expires=Sun, 08-Dec-2024 06:06:06 GMT; Max-Age=63072000; path=/; domain=realsrv.com; secure; SameSite=None
X-Robots-Tag: noindex, follow
Content-Encoding: gzip


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (1354), with no line terminators
Size:   1002
Md5:    8bc640ef00f8e39e0e001ef012750430
Sha1:   653bb4b52918076c1f279a941c62c92547e29b84
Sha256: 5eff90751b23bcc683f2984f57fbd18bd323d77cc280c45e3f673a68e2e41bea
                                        
                                            GET /ga.js HTTP/1.1 
Host: ssl.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.72
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Fri, 09 Dec 2022 04:32:37 GMT
expires: Fri, 09 Dec 2022 06:32:37 GMT
cache-control: public, max-age=7200
age: 5609
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1305)
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            POST /v1/api.php HTTP/1.1 
Host: syndication.realsrv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 294
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392d04e073516.192739031190289082%22%3B%7D; expires=Sun, 08-Dec-2024 06:06:06 GMT; Max-Age=63072000; path=/; domain=realsrv.com; secure; SameSite=None
X-Robots-Tag: noindex, follow
Content-Encoding: gzip


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (1352), with no line terminators
Size:   1007
Md5:    8b65b00513d54c0cd9ab08d7105fac82
Sha1:   659022221f2e3ff1d8ccdf38413bbe042973177c
Sha256: a199000da11241f55ceb046a24dd8a9a2b2910f2a6f6e20c604a8aee65eea152
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Dec 2022 06:06:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /assets/img/mobile/play-772d8e8c55.png HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ui.4tube.com/assets/styles_4tube-8f857004d5.css
Cookie: __utma=196175913.43532277.1670565965.1670565965.1670565965.1; __utmb=196175913.0.10.1670565965; __utmc=196175913; __utmz=196175913.1670565965.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 09 Dec 2022 06:06:06 GMT
content-length: 1053
cache-control: max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origSize=2833
access-control-allow-origin: *
etag: "b11-5ee33737f0400"
expires: Sat, 10 Dec 2022 05:41:57 GMT
last-modified: Thu, 24 Nov 2022 08:47:12 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 1449
accept-ranges: bytes
server: cloudflare
cf-ray: 776b8d899de1b517-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 70 x 71, 8-bit gray+alpha, non-interlaced\012- data
Size:   1053
Md5:    8624f71035212390da62a9f380f82d77
Sha1:   cc3660fca41e24107b963b03a1d1333666253c25
Sha256: 49cf687c5f7a7839c27f865116a0b7027e19774bf508f2816c3098a03e30b054
                                        
                                            GET /assets/img/4tube/apple-touch-icon-114-93d63b0ef1.png HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 09 Dec 2022 06:06:06 GMT
cache-control: max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origSize=5506
access-control-allow-origin: *
etag: "1582-5ee33736fc1c0"
expires: Sat, 10 Dec 2022 06:02:05 GMT
last-modified: Thu, 24 Nov 2022 08:47:11 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 241
server: cloudflare
cf-ray: 776b8d882d14b517-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced\012- data
Size:   82898
Md5:    575d12130a6369d07559486118cd0fd5
Sha1:   929c59684e0bd84f6b30d86b9fd86351d2d39a97
Sha256: 21fbfa18ae2ebc4ed37161fed626e655817189c99a1b120b0c5f5e6448686ab0
                                        
                                            GET /sw.js HTTP/1.1 
Host: www.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es
Cookie: 4tube_ad={"ntva":0,"ntvb":0,"footer":0,"listings":0,"playerAd":0,"autoNextAd":0,"adblock-popunder-mediareps":0,"adblock-banner":0,"adblock-notice":0,"adblock-popunder-exoclick":0,"footer-exoclick":2,"listings-exoclick":0,"mobile-below-player-exoclick":0,"mobile-footer-exoclick":0,"mobile-middle-banner-exoclick":0,"mobile-videolist-top-exoclick":0,"non_cpp-exoclick":0,"ntva-exoclick":0,"ntvb-exoclick":0,"playerAd-exoclick":0,"vast-ad":0,"push-notification":0,"pop-up":0,"mobile-popunder":0}; __utma=196175913.43532277.1670565965.1670565965.1670565965.1; __utmb=196175913.0.10.1670565965; __utmc=196175913; __utmz=196175913.1670565965.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 06:06:06 GMT
etag: W/"19285-5eb723e71d580-gzip"
last-modified: Thu, 20 Oct 2022 07:26:30 GMT
vary: Accept-Encoding, Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 425
server: cloudflare
cf-ray: 776b8d88cd74b517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   98649
Md5:    1a0fd3ae4b56ded3a92aec5dee9fb4e2
Sha1:   07d3ed6c93141b01c570559db961fc6655954966
Sha256: ee626a01e94f64b64ef0ff7e548bda48acb606b24e6badc5757ea38bf6b28b7c

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /cimp.php?t=api&data=H4sIAAAAAAAAA02PTU4DMQyFr8IFZvTs2PlhDVuQinqA/LQ7YEGRivQOT2aKKmxLcWzn84tCdRFdUB4gj4gzWGQtWE1XcePL64EmtMt3O639853BLKZIQRAzStZsiabuIWQ6Mi1HLbOVgJQRlAYGYrr6fLxlKyDOAj4fDzy+Pc1K8eAUKgNwVcfMt9VUcG4hrhtAZAzp1eNorfY6JDd1SRbr+dxC3QD4JxU3X+FJdvZfgVN6UFMucr8Yp4F7u379fHTyPo7b/3zT7jtm4sy2gzi1kIcXy0itd+1ysjFaryVWrcl/ARqKwr1hAQAA HTTP/1.1 
Host: syndication.realsrv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392d04e073516.192739031190289082%22%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D; expires=Sun, 08 Dec 2024 06:06:06 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip

                                        
                                            GET /cimp.php?t=api&data=H4sIAAAAAAAAA01PSU4DQQz8Ch/IqLz1whmuIAXlATM90zfgQJCCVI+nJ0ERtiUvZZdthepB9ID6AHlEGsYqU8XkOkk4X16PdKGfv5dtap/vNPeUEwUm7pSixTNdI0wLA4VektYBZSAXmNJBI4ZqjOE9mgAJVvD5dOTp7WlUalhQqDTgooER76up4NhCXHaCumI1SdF6lK7rWpdS0XKy1POSbB/Cv1Nx0wlRrtR/Ocflpq48yD1xDgGv8Pz189HIeztu79lOEFca4fh9d0zIi/uWm+Tqslnrc0cKbbn3SLP9Atiw2y1gAQAA HTTP/1.1 
Host: syndication.realsrv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392d04e073516.192739031190289082%22%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D; expires=Sun, 08 Dec 2024 06:06:06 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip

                                        
                                            GET /splash.php?idzone=3017212 HTTP/1.1 
Host: syndication.exosrv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: text/xml;charset=UTF-8
                                        
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%226392d04e6ceb96.37007779117690549%22%3B%7D; expires=Sun, 08 Dec 2024 06:06:06 GMT; path=; domain=.exosrv.com; Secure; SameSite=none c-tag=%7B%22tag-video%22%3A%22v3%7C%7CNOR%7C3017212%7C59492864%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7C4tube.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Sat, 10 Dec 2022 06:06:06 GMT; path=/; domain=.exosrv.com; Secure; SameSite=none zone-cap-3017212=1; expires=Fri, 09 Dec 2022 18:06:06 GMT; path=/; domain=.exosrv.com; Secure; SameSite=none
Cache-Control: no-store
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Credentials: true
X-Robots-Tag: noindex, follow
Content-Encoding: gzip


--- Additional Info ---
Magic:  XML 1.0 document text\012- XML document, ASCII text, with very long lines (1533)
Size:   2563
Md5:    06a1e6f018e164fd3bb4548e44e65374
Sha1:   60644dc4f001ca559d6ce0c651a22f3ff8d5f648
Sha256: 930dc3371b24c4c3971fa3703224b26c7579154fc7a2df75370006e2ce9442d1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3810
Cache-Control: max-age=126980
Date: Fri, 09 Dec 2022 06:06:06 GMT
Etag: "63920e71-116"
Expires: Sat, 10 Dec 2022 17:22:26 GMT
Last-Modified: Thu, 08 Dec 2022 16:18:57 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 278

                                        
                                            GET /assets/img/friends/fux-0f7d69803b.png HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ui.4tube.com/assets/styles_4tube-8f857004d5.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
cache-control: max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
access-control-allow-origin: *
etag: "1b0f-5ee33736fc1c0"
expires: Sat, 10 Dec 2022 06:01:37 GMT
last-modified: Thu, 24 Nov 2022 08:47:11 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 268
server: cloudflare
cf-ray: 776b8d851a8fb517-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 85 x 40, 8-bit/color RGBA, non-interlaced\012- data
Size:   31332
Md5:    7c6a3428a1befeab8c8be7fd88718e13
Sha1:   e1947eae1d061be08e1ea0a7c5412ec4876dc83a
Sha256: 0623ceb86c0adf4e4543f97b37b73378d53d80b8de1081918ec68364bb59c728
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3810
Cache-Control: max-age=126980
Date: Fri, 09 Dec 2022 06:06:06 GMT
Etag: "63920e71-116"
Expires: Sat, 10 Dec 2022 17:22:26 GMT
Last-Modified: Thu, 08 Dec 2022 16:18:57 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C08554E58F5EEABF6295C9661D7A1D612BC1F4C22BDCFB453BAC5B7460B44967"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3635
Expires: Fri, 09 Dec 2022 07:06:41 GMT
Date: Fri, 09 Dec 2022 06:06:06 GMT
Connection: keep-alive

                                        
                                            POST /v1/api.php HTTP/1.1 
Host: syndication.realsrv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 374
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392d04e089cc5.020911803595900563%22%3B%7D; expires=Sun, 08-Dec-2024 06:06:06 GMT; Max-Age=63072000; path=/; domain=realsrv.com; secure; SameSite=None
X-Robots-Tag: noindex, follow
Content-Encoding: gzip


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (9372), with no line terminators
Size:   5254
Md5:    f9f1e23e186bfddc03c28db9b8500b99
Sha1:   c29d34b14d2468e39a99ad0e42a512a7fefe02af
Sha256: 49efe82ea0438f8396723f48ca67fa19ba679b76e2db34fc37c38c454ca91ce1
                                        
                                            GET /cimp.php?t=api&data=H4sIAAAAAAAAA01Py04DMQz8FX5gV2PHzsac4QpSUT8gTbY34ECRijQfT3aLKmxLHj/HVqhOohPiAfKIPIwhc2A2ncWNL68HmtAu36d1bp/vFAO8UJDEjFK02EJTK0sxOgotiUdRWmjGKNDARAxVT2NkoBkQBvh8PPD49jQS4ckp1JHFVR0Db8xUcJAQ132+n6Nr7+up1nRqnlOPYtmLSiSvsjX+uxQ3nSF5X/0Xcxye1JST3APjEHAv16+fj0be23H7Ljbk+5pBZLY5mlVUaWvLUs6rt1glB0pdFKtK11+sggL2XwEAAA== HTTP/1.1 
Host: syndication.realsrv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392d04e089cc5.020911803595900563%22%3B%7D; __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.029701%22%7D; expires=Sun, 08 Dec 2024 06:06:06 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip

                                        
                                            GET /library/428515/afaf6b58a8d6050615369f81598d4bd126bd021e.webp HTTP/1.1 
Host: s3t3d2y8.afcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.18
HTTP/2 200 OK
content-type: image/webp
                                        
date: Fri, 09 Dec 2022 06:06:06 GMT
content-length: 13180
last-modified: Fri, 31 Dec 2021 10:19:16 GMT
etag: "61ced924-337c"
expires: Fri, 30 Jun 2023 11:26:51 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195238
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ0zN07/KDPUAA
x-77-nzt-ray: c0a4cc2820a2447c4ed09263de607d2c
x-cache: HIT
x-age: 13906728
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 300x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   13180
Md5:    8da76954e810412b8ec5378d8480ab45
Sha1:   afaf6b58a8d6050615369f81598d4bd126bd021e
Sha256: 4f186cbdc1268f6ab21f0e5bc6dfa6dce0c52fb60dec007a79e2c41d41bc4293
                                        
                                            GET /library/428515/5ceded664676db96d2b3b5382cb17da5e728eefc.webp HTTP/1.1 
Host: s3t3d2y8.afcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.18
HTTP/2 200 OK
content-type: image/webp
                                        
date: Fri, 09 Dec 2022 06:06:06 GMT
content-length: 12098
last-modified: Fri, 31 Dec 2021 10:19:16 GMT
etag: "61ced924-2f42"
expires: Fri, 30 Jun 2023 11:13:27 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195274
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ3TTyv/BDPUAA
x-77-nzt-ray: c0a4cc2820a2447c4ed09263dc54a22c
x-cache: HIT
x-age: 13906692
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 300x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   12098
Md5:    f873befbe3e52bba71c605062b1ff845
Sha1:   5ceded664676db96d2b3b5382cb17da5e728eefc
Sha256: 480a21117ecb1dac929af83d77cf4e57cb2342a2d424c5b798edf6379d472a41
                                        
                                            GET /assets/font/fontello-7ea675e0b8.woff HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://ui.4tube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: application/font-woff
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
access-control-allow-origin: *
etag: W/"2ee4-5ee33736fc1c0"
last-modified: Thu, 24 Nov 2022 08:47:11 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 424
server: cloudflare
cf-ray: 776b8d852a9eb517-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 12004, version 1.0\012- data
Size:   12929
Md5:    8443ed44aa784976693563bb555eda07
Sha1:   67422b5aa5c9ca8c445ecac43a5e64e93d921123
Sha256: 12cc4e182de42d6f278a4ee618053cc9f344140a84473a74796030aefe9481d0
                                        
                                            GET /comments/650184 HTTP/1.1 
Host: www.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.4tube.com/videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es
Cookie: 4tube_ad={"ntva":0,"ntvb":0,"footer":0,"listings":0,"playerAd":0,"autoNextAd":0,"adblock-popunder-mediareps":0,"adblock-banner":0,"adblock-notice":0,"adblock-popunder-exoclick":0,"footer-exoclick":2,"listings-exoclick":0,"mobile-below-player-exoclick":0,"mobile-footer-exoclick":0,"mobile-middle-banner-exoclick":0,"mobile-videolist-top-exoclick":0,"non_cpp-exoclick":0,"ntva-exoclick":0,"ntvb-exoclick":0,"playerAd-exoclick":0,"vast-ad":0,"push-notification":0,"pop-up":0,"mobile-popunder":0}
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Fri, 09 Dec 2022 06:06:06 GMT
cache-control: max-age=1800
vary: Accept-Encoding, Accept-Encoding
x-powered-by: PHP/5.6.40-63+ubuntu18.04.1+deb.sury.org+2
cf-cache-status: MISS
last-modified: Fri, 09 Dec 2022 06:06:06 GMT
server: cloudflare
cf-ray: 776b8d85db19b517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   397
Md5:    11252630cbd0d486c3267d00f06a9af0
Sha1:   5d97972d517ae0dc29eb75c94a0e71355410e266
Sha256: 3f27b2c6b2752af66135839d2339777e37e7e8a50aa5c4785bd039d9326c0357
                                        
                                            GET /8/0/1/3/6/1/7/4/4/100x75/1.jpeg HTTP/1.1 
Host: cdn-thumbs.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Cookie: __utma=196175913.43532277.1670565965.1670565965.1670565965.1; __utmb=196175913.0.10.1670565965; __utmc=196175913; __utmz=196175913.1670565965.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.52
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 3247
last-modified: Fri, 28 Jan 2022 11:32:16 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 09 Dec 2022 06:06:07 GMT
etag: "2a6ef45ae5e685587db6e7b7836469ee"
x-cache: RefreshHit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: k2nSrmcSq17bZLiqD0thzHq7QObfKGZ7rHLfCCwZXK5S0zjSXCdyRQ==
cache-contol: max-age=15552000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x75, components 3\012- data
Size:   3247
Md5:    2a6ef45ae5e685587db6e7b7836469ee
Sha1:   a5e151ca932fd25efd9337418185e57413628e22
Sha256: e57a94b705bbdaa55b299ce7e5976724a54ae09b9b0cfeabe8bd08a8e022f7ce
                                        
                                            GET /cimp.php?t=api&data=H4sIAAAAAAAAA01Py07EMAz8FX6gkZ+pzRmuIC3aD0ibcgMOgLRI8/GkXbQizmE8tsdjIZGJZaK8I76nOj6SS1IxKeyGp+cTjGFf38tW1o83mISzg0nZDBwSNg/SYo4Kp4BFdYvATJTVssIIChohrmNkoEJErEjC4/mE88vDoNJ1qEKgRBdxGnjfvU+PNaDLodBfs0vv29KaLqtX7RlWPYRTvfHe+M8rXaNU4npo/xEY3lVMMPEtMYxHOMrt8+d9BW7tdD0wd+SHjKHuDtHWzfuSWnvbIiQ3N+mz1tWicZD8AhSRobVgAQAA HTTP/1.1 
Host: syndication.realsrv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392d04e089cc5.020911803595900563%22%3B%7D; __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.029701%22%7D; expires=Sun, 08 Dec 2024 06:06:06 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip

                                        
                                            GET /cimp.php?t=api&data=H4sIAAAAAAAAA01PS07DQAy9ChdI5O+MzRq2VCrqASZJswMWFKlI7/CdpKjCtuTn37MtJDKwDJRPxM9UuiF5TBpNRnbD2+EIY9jlZzqP89cHVNJdwKRsBg4JqzCxqFHgFHDljBBUL0RZCoygoK7i2kc2lITX0xGn9xfQmK4OhkCJruLU8bYVsiEGXffZZc1FluU8tabT7EWXDCsewqne9sZ/V9JdO3eJnfsvgX61igkGfgSGLoS93L5/P2fg0U7313JDvtP0TWabw1plCnfLlLXURlSb93BV12pzTjeecpijXAEAAA== HTTP/1.1 
Host: syndication.realsrv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392d04e089cc5.020911803595900563%22%3B%7D; __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.029701%22%7D; expires=Sun, 08 Dec 2024 06:06:06 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip

                                        
                                            GET /library/140058/f857eac9936002c25cdf21d42636d417e83adae9.mp4 HTTP/1.1 
Host: s3t3d2y8.afcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.18
HTTP/2 206 Partial Content
content-type: video/mp4
                                        
date: Fri, 09 Dec 2022 06:06:06 GMT
content-length: 78972
last-modified: Fri, 27 Mar 2020 00:09:40 GMT
etag: "5e7d4444-1347c"
expires: Fri, 30 Jun 2023 11:21:21 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195274
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ2lD5z/BDPUAA
x-77-nzt-ray: c0a4cc2820a2447c4ed09263b4fe762e
x-cache: HIT
x-age: 13906692
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-78971/78972
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size:   78972
Md5:    c476e00f5232c13a8a971cee804a6277
Sha1:   f857eac9936002c25cdf21d42636d417e83adae9
Sha256: 7d070eb938ac3b2524296c4f51dec3b567c72298b30f35c9c72161544c554da5
                                        
                                            GET /cimp.php?t=api&data=H4sIAAAAAAAAA01PSU7EQAz8Ch9IVN46bc5wBWnQPCDpTG7AAZAGqR5PJ6ARLksuy+VNoTqIDsg7yD1Kd6aMidF1lHA+PZ/oQv/8Wi5je3+laUYoBSbulKrVJ7p6nWphoDJMslblFAXIUumgER0a1lt2luDj+cTzywMxZlhQqDTgqoHO963UnQlxPXrXLVdd18syz7a0KLZm9RJVJS3mQ/jvShyQEah2zMYf+tWmrhzklji7gUd5/vh+a+RNjt/XcmdxjOmb3PfALbxtWsT8sjabpkDOrWxbLc3MBD8q+D1qXAEAAA== HTTP/1.1 
Host: syndication.realsrv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392d04e089cc5.020911803595900563%22%3B%7D; __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.029701%22%7D; expires=Sun, 08 Dec 2024 06:06:06 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip

                                        
                                            GET /library/428515/ede74c7bceaa7703fd30a60d5d9f04ca5eac5716.mp4 HTTP/1.1 
Host: s3t3d2y8.afcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.18
HTTP/2 206 Partial Content
content-type: video/mp4
                                        
date: Fri, 09 Dec 2022 06:06:06 GMT
content-length: 33263
last-modified: Fri, 31 Dec 2021 10:19:17 GMT
etag: "61ced925-81ef"
expires: Fri, 30 Jun 2023 11:26:36 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195204
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ0ruL//SjPUAA
x-77-nzt-ray: c0a4cc2820a2447c4ed09263ad12852e
x-cache: HIT
x-age: 13906762
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-33262/33263
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size:   33263
Md5:    1413cd1c8cc4a6653851bdfc54fdb32f
Sha1:   ede74c7bceaa7703fd30a60d5d9f04ca5eac5716
Sha256: 41f006ad3d3978487383e7cdf609bbd8041bb1fd2af17b81874d80eaad003235
                                        
                                            GET /library/329552/761363e798a875a0829c39b12768b2304f80e7e2.mp4 HTTP/1.1 
Host: s3t3d2y8.afcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.18
HTTP/2 206 Partial Content
content-type: video/mp4
                                        
date: Fri, 09 Dec 2022 06:06:06 GMT
content-length: 20718
last-modified: Fri, 02 Sep 2022 12:36:46 GMT
etag: "6311f8de-50ee"
expires: Sat, 02 Sep 2023 13:02:26 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1693659747
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ1H90b/a9GAAA
x-77-nzt-ray: c0a4cc2820a2447c4ed0926321a98f2e
x-cache: HIT
x-age: 8442219
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-20717/20718
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size:   20718
Md5:    99a55e7e69987a5dcc2372ce658a8068
Sha1:   761363e798a875a0829c39b12768b2304f80e7e2
Sha256: 8c0ad2bb61f035d8478cb5dc22e4a6c7b26400e6faff5726a06b514a87195593
                                        
                                            GET /cimp.php?t=api&data=H4sIAAAAAAAAA01PSU7EMBD8Ch+IVd3u9sKZuYI0aB4Qx8kNOADSINXjcTJohMuSl+6uRaE6iU6oD5BHpLFZJVQE0yBufH4504T29d3WsHy8sUBNjYIoNo6ixTLHT8kl0VHolkUczFkBhdHASAyoxzECesBpclbwdDnz8vpEhOrRKVRG4KpjXA7pIcChQlwPgr7Vrr2vbZ5jWzzFXoslLyo1+ix74z+rOCABjhs3/jCsx5GCk9wfxrHAozx//rwv5L0dt3x1v/lBoxzhd49cvCB5bUWTtOI9ryZlq62L5q1j+QV6rMxxYQEAAA== HTTP/1.1 
Host: syndication.realsrv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392d04e089cc5.020911803595900563%22%3B%7D; __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.029701%22%7D; expires=Sun, 08 Dec 2024 06:06:06 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20424
Expires: Fri, 09 Dec 2022 11:46:30 GMT
Date: Fri, 09 Dec 2022 06:06:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20424
Expires: Fri, 09 Dec 2022 11:46:30 GMT
Date: Fri, 09 Dec 2022 06:06:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20424
Expires: Fri, 09 Dec 2022 11:46:30 GMT
Date: Fri, 09 Dec 2022 06:06:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20424
Expires: Fri, 09 Dec 2022 11:46:30 GMT
Date: Fri, 09 Dec 2022 06:06:06 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7b1b2f1-0b18-4097-a282-a7ddd9b33b97.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6637
x-amzn-requestid: dfcef102-5fc6-4a59-bb21-ff0532c9fdda
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlg4GtVIAMFdTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb605-0c2f58da0ae148fb4d698ecc;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jQs6m8oGHeWNYbOnPM34f-YW75VuH0yNWU-TzoDMOkYcwGa9BfqBhA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 21:51:22 GMT
age: 29684
etag: "4946fcab2a99d926c45abaecf8f97b6214dee0cd"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6637
Md5:    3cb7655c8fe89a83f0096c51684aa21c
Sha1:   4946fcab2a99d926c45abaecf8f97b6214dee0cd
Sha256: 60a3066f2dcc2f696413ecec56ef1d0c1a9392f6845fac5c4319b8b9e02074fd
                                        
                                            GET /library/802424/a4d0ad9192cd523343ae4942041e29c4bcf16a99.mp4 HTTP/1.1 
Host: s3t3d2y8.afcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.18
HTTP/2 206 Partial Content
content-type: video/mp4
                                        
date: Fri, 09 Dec 2022 06:06:06 GMT
content-length: 548960
last-modified: Fri, 18 Nov 2022 08:36:01 GMT
etag: "637743f1-86060"
expires: Sat, 18 Nov 2023 08:42:49 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
x-accel-expires: @1700302505
server: CDN77-Turbo
x-77-nzt: AblMCQ0MBOT/JXUbAA
x-77-nzt-ray: c0a4cc2820a2447c4ed0926344ec952e
x-cache: HIT
x-age: 1799461
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-548959/548960
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size:   447264
Md5:    822ebecc3238143e7fec261d97a259dd
Sha1:   e0629d354b92a0181324d0907290883585968d17
Sha256: f2092e3bbeb91aa8fed6b47fd1840e867004220ca72d971d4c1247c1793321b1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5188
x-amzn-requestid: afb8cbd2-3674-4dac-9cd9-9ff83618ac0a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ck2-5G9joAMFlPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638b6b92-2979ff216b9028aa70baef8b;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 15:30:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dGxzuQ6zj6wXQbkBuKBnOKxwKJDHUyGoi7PgcugcpdX4QYruNiFxsQ==
via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 21:51:24 GMT
age: 29682
etag: "8fbff7725c842d70e047c635a725723a9dc9c55a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5188
Md5:    fba9a3854df65740512f96efe7442e58
Sha1:   8fbff7725c842d70e047c635a725723a9dc9c55a
Sha256: 6e639298ebc82343cee9267d2910d15735af55f910e2c3de9218266b7c6fffc9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F042317d8-45b6-4c5f-8767-ff9367c24193.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8803
x-amzn-requestid: e8516be3-5ce9-4f15-b522-c81c1e57a0e2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjtK9GavoAMFjpA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638af579-538cc8f300938698004f2241;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 07:06:33 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MiOdXHxd9Vmeji8Yqd8LG_EqYoMGf0YBy6by9bhfjb12y1OxKVvvqw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 03:56:08 GMT
age: 7798
etag: "c47af4e5770daad212f4290527b00321285105f8"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8803
Md5:    46275ec87d8221804dbb99f95b035131
Sha1:   c47af4e5770daad212f4290527b00321285105f8
Sha256: 2118ec68c738683d8f7e11b95239ca92fda2b9b5054aa7b128267eec0d0634c5
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7557
x-amzn-requestid: 09204b5e-8af5-4d4b-8186-628443866e0f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctlz5EISoAMFdWw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638ee9b2-357cd4f921c592e1319098dd;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 07:05:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 3KZwQ5HqXa_-tUyDHA5m-65OprogFpFgbbKpEJ65k-Yy3lwoCg8M5w==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 07:15:07 GMT
age: 82259
etag: "cde4c7fa0145d3645af17e34c83c63c08f76a076"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7557
Md5:    5de5d319f43d9c9c641419d96655541f
Sha1:   cde4c7fa0145d3645af17e34c83c63c08f76a076
Sha256: fdb114eb142f035c7a54195d16af51b5b423642c312f4bccc0f407d8fcc245aa
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6578
x-amzn-requestid: 6392feb9-e33e-42fa-bc10-b5e31e654c9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cw4beGG7oAMF8hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63903aaf-2c890b7b0a16617346a0f7e7;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 07:03:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7DwFYUoAI9x-ruRySpsSAXQZnxrXxUACrXp568TGZ2JSppZ1UC0uWg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 07:09:44 GMT
age: 82582
etag: "5c8ffe91490006a9890188b53f875568c2b6bd8f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6578
Md5:    8546542f00ea29ef4df6ab8d3c7c2164
Sha1:   5c8ffe91490006a9890188b53f875568c2b6bd8f
Sha256: 7fb11750ac339ac283da62fd370862c6b95a103a585ca5dd8c90038718d818a1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.118
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 09 Dec 2022 06:06:07 GMT
Last-Modified: Fri, 09 Dec 2022 04:24:48 GMT
Server: ECS (dcb/7F83)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Y0_heru1M-aptQN1eDxu-5icUzxNMKpY0xM34TgjK-SS4-yDZAYe1g==
Age: 6079

                                        
                                            GET /utx?tid=737551&top=www.4tube.com&cb=sSQbYoP3lNwE HTTP/1.1 
Host: ukdliketobepa.monster
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.27
HTTP/2 204 No Content
                                        
date: Fri, 09 Dec 2022 06:06:07 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://www.4tube.com
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Fri, 09 Dec 2022 06:07:07 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aabvP0AGDtWrsZaZR6SLI657Jxpiv0c1bKwjM1ssz_2rZyFgnIysGg==
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ksehinkitw.hair
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 384
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         54.162.51.18
HTTP/2 200 OK
                                        
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6253
Cache-Control: max-age=127273
Date: Fri, 09 Dec 2022 06:06:07 GMT
Etag: "6392060b-117"
Expires: Sat, 10 Dec 2022 17:27:20 GMT
Last-Modified: Thu, 08 Dec 2022 15:43:07 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6253
Cache-Control: max-age=127273
Date: Fri, 09 Dec 2022 06:06:07 GMT
Etag: "6392060b-117"
Expires: Sat, 10 Dec 2022 17:27:20 GMT
Last-Modified: Thu, 08 Dec 2022 15:43:07 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ksehinkitw.hair
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.4tube.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://www.4tube.com
Content-Length: 353
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.162.51.18
HTTP/2 200 OK
                                        
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ksehinkitw.hair
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.4tube.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://www.4tube.com
Content-Length: 348
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.162.51.18
HTTP/2 200 OK
                                        
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D2636DAFD6CA03DC23AB9455589120EEB2A6D4869CD7A988356B5C0EAAB3FDC4"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4222
Expires: Fri, 09 Dec 2022 07:16:30 GMT
Date: Fri, 09 Dec 2022 06:06:08 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C94785AED97BD5405B207BBB8643EC5EA3EA9C1D052A2020A442722519BCA22B"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2138
Expires: Fri, 09 Dec 2022 06:41:46 GMT
Date: Fri, 09 Dec 2022 06:06:08 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "80A921C7DC30C16227895553DFAB60D52B27C6384A4C507A0CBC3C72F88029F2"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9514
Expires: Fri, 09 Dec 2022 08:44:43 GMT
Date: Fri, 09 Dec 2022 06:06:09 GMT
Connection: keep-alive

                                        
                                            GET /post/play?ms_rnd=1670565968.30565&pstool=400_31&psid=ed_4tubedtint&utm_source=ptb&category=girl&site=jsm&utm_medium=partner&preload=1&origin=www.4tube.com HTTP/1.1 
Host: crmt.livejasmin.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crjpgate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         93.93.51.191
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
vary: Accept-Encoding
cache-control: no-cache
date: Fri, 09 Dec 2022 06:06:08 GMT
server: unknown
set-cookie: psui=a59f007fbf3384ccc33cc586d5d348f0; Path=/; Expires=Sun, 08-Jan-23 06:06:08 GMT; SameSite=None; Secure
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   8000
Md5:    c9d002273ee503b2bf529a6ff4e5a9ff
Sha1:   6fece6098ff3300f1a3836c06a52c9b2a2bc12e9
Sha256: e5135fb03f847409546a63af2b31ba44240111cc6472986b6910cf4eb33e9d6a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "80A921C7DC30C16227895553DFAB60D52B27C6384A4C507A0CBC3C72F88029F2"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9514
Expires: Fri, 09 Dec 2022 08:44:43 GMT
Date: Fri, 09 Dec 2022 06:06:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix\012- data
Size:   51922
Md5:    5ded38ff4edb06f63d2a9ee7747f8d71
Sha1:   e8539563dcef0960536203b18f2b0251b3fc300a
Sha256: ee4a4ef99b4d9b155755b2f0261f9849c61b155ddc5957e1dbb31d85a8d95f43
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "80A921C7DC30C16227895553DFAB60D52B27C6384A4C507A0CBC3C72F88029F2"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9514
Expires: Fri, 09 Dec 2022 08:44:43 GMT
Date: Fri, 09 Dec 2022 06:06:09 GMT
Connection: keep-alive

                                        
                                            GET /npe/_common/script/adblock/advertisement-v828265.js HTTP/1.1 
Host: pt-static5.jsmsat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crmt.livejasmin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         93.93.51.201
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 06:06:09 GMT
content-length: 21
last-modified: Thu, 08 Dec 2022 15:19:42 GMT
etag: "6392008e-15"
access-control-allow-origin: *
server: unknown
x-cdn-node: sesto
x-cache-status: R-HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   21
Md5:    01c6e7ecb819ef28b0c9b962513a1596
Sha1:   1a49f493db7b91ed34a7040d36732352b9a5dc39
Sha256: e97a9988dce8067f81f57557b349dd481e0335e75175179b6b01322be2ff13a5
                                        
                                            GET /gtm.js?id=GTM-MJ29FD7 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crmt.livejasmin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 09 Dec 2022 06:06:09 GMT
expires: Fri, 09 Dec 2022 06:06:09 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79716
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (57122)
Size:   79716
Md5:    29d4d32f135cd7c59084a1041749c996
Sha1:   3aff48fcf5c56e159d85d8fc9937aa8c9748eb85
Sha256: a80384dcf2019e4eeb9fc63f1375c78afd70377a47fe036b99a3217dc5a526a7
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C60735A3EFEC92EE184496865B34F8A33816C7168F6E777F462D21E70608C532"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3496
Expires: Fri, 09 Dec 2022 07:04:25 GMT
Date: Fri, 09 Dec 2022 06:06:09 GMT
Connection: keep-alive

                                        
                                            GET /npe/bonuscredit/css/bonuscredit-v828265.css HTTP/1.1 
Host: pt-static4.jsmsat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crmt.livejasmin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         93.93.51.201
HTTP/2 200 OK
content-type: text/css
                                        
date: Fri, 09 Dec 2022 06:06:09 GMT
last-modified: Thu, 08 Dec 2022 15:19:42 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"6392008e-961"
access-control-allow-origin: *
server: unknown
x-cdn-node: sesto
x-cache-status: R-HIT
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   9288
Md5:    19700c486181aac835ce16db0090b12d
Sha1:   119969784d122b8dbba873fbac558c0777ef9342
Sha256: 9f70a11750b502ba5dbfa74ef9ac3dc28ffd384a366745b2d7ed1f065532c03d
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D3B0FDA566E7A2975EEE59394C4FC978ED7E2EBE18798F2C537C94409268FFD4"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4545
Expires: Fri, 09 Dec 2022 07:21:54 GMT
Date: Fri, 09 Dec 2022 06:06:09 GMT
Connection: keep-alive

                                        
                                            GET /post/fslf?ms_rnd=1670565968.30565&pstool=400_18&psid=ed_4tubedtint&utm_source=ptb&site=jsm&utm_medium=partner&preload=1&origin=www.4tube.com&categoryName=girl&vp%5BautoPlay%5D=0&rrc=3 HTTP/1.1 
Host: crmt.livejasmin.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crmt.livejasmin.com/post/play?ms_rnd=1670565968.30565&pstool=400_31&psid=ed_4tubedtint&utm_source=ptb&category=girl&site=jsm&utm_medium=partner&preload=1&origin=www.4tube.com
Cookie: psui=a59f007fbf3384ccc33cc586d5d348f0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         93.93.51.191
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
vary: Accept-Encoding
cache-control: no-cache
date: Fri, 09 Dec 2022 06:06:09 GMT
server: unknown
set-cookie: psui=a59f007fbf3384ccc33cc586d5d348f0; Path=/; Expires=Sun, 08-Jan-23 06:06:09 GMT; SameSite=None; Secure
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   82840
Md5:    b33136fe95a690e82f2d678961fd622e
Sha1:   8afa9d206d0eda24170bb54521159a0779c7ee2a
Sha256: 3687b068e4fe39135505dec212186df9869cd4decab5112ff5b361d12cbcd635
                                        
                                            GET /npe/bonuscredit/bonuscredit-v828265.js HTTP/1.1 
Host: pt-static5.jsmsat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crmt.livejasmin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         93.93.51.201
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 06:06:09 GMT
last-modified: Thu, 08 Dec 2022 15:19:42 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"6392008e-61a9"
access-control-allow-origin: *
server: unknown
x-cdn-node: sesto
x-cache-status: R-HIT
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   9740
Md5:    8ec41c79faf3246379006738307f7df9
Sha1:   addb0118b8c167746fd09be4f916490c835f703a
Sha256: ac276cb68ba4eb145e78f1d953700163662e45762b47302ce215023a5e8c70a3
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crmt.livejasmin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.46
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 09 Dec 2022 04:46:55 GMT
expires: Fri, 09 Dec 2022 06:46:55 GMT
cache-control: public, max-age=7200
age: 4755
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Dec 2022 06:06:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Dec 2022 06:06:10 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 07:51:00 GMT
Expires: Tue, 13 Dec 2022 07:50:59 GMT
Etag: "cfd6116f1a295888a3f54273584a0ea487d79149"
Cache-Control: max-age=351288,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 776b8da08dd0b4f7-OSL

                                        
                                            GET /memberChat/jasminAdaQuinn5276637abb175b76f12fce7e1fcdf1ec?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkb2NsZXIubHNjLmFwaSIsImF1ZCI6Ijk1LjEyOC4xMjAuMzIiLCJuaWNrIjoiQWRhUXVpbm4iLCJoYXNoIjoiNTI3NjYzN2FiYjE3NWI3NmYxMmZjZTdlMWZjZGYxZWMiLCJqdGkiOjI0ODg3NzM2MjA4MTgyMjUsImlhdCI6MTY3MDU2NTk2OSwiZXhwIjoxNjcwNTY2MDI5fQ.Qzo3YY6p5lMPEDV3-sXZs59_hf_lDZuGLJa4hnqz_vQ HTTP/1.1 
Host: lsc-edge-95-128-120-32.dditscdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://crmt.livejasmin.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: OYpKFrXwIs0rapt1JkXVAA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         95.128.120.32
HTTP/1.1 101 Switching Protocols
                                        
Date: Fri, 09 Dec 2022 06:06:10 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ioAGexqiEPRMFR1DxQUQg9Vwt/M=
Server: unknown

                                        
                                            GET /eyJhbGciOiJIUzI1NiJ9.eyJhbGxvd0g1TGl2ZVByb3h5Ijp0cnVlLCJvcmlnaW4iOiIqIiwic2VydmVyIjoid3NzOi8vbmdzLWVkZ2UtOTUtMTI4LTEyMS0xOC5kZGl0c2Nkbi5jb20iLCJ0b2tlbklkIjoiTUN4aE5EUmpaalUwTWkwMVpHWmxMVFE1WlRBdE9UbGpOQzA1WkRVd01ERm1Nemd3WmpRc01TdzFaamd3TnpreE1peEVUakppU0U0M1YwWXZlalk0UWpaalFrbEtURlIwVGtkbWFuTTkiLCJzdHJlYW1JZCI6IjA1NTExZDY2LWFlZmQtNGQyNi1hMjZjLWI1NGM0ODZhYzFjNyIsImNJZCI6IjFnajhuZWhuMG81bDNsdDQiLCJhdWQiOiJ2aWV3ZXIiLCJpc3MiOiJkb2NsZXIuc3RyZWFtaW5nLnN0cmVhbWNvbnRyb2xsZXIiLCJpYXQiOjE2NzA1NjU5NzAsImV4cCI6MTY3MDU2NjAzMH0.s-6HcydSiifoOeX_b5_1xgEZyn_5Mxue-LQmfw5tiCM? HTTP/1.1 
Host: ngs-edge-95-128-121-18.dditscdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://crmt.livejasmin.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: KCKmJr0YRjXSoJpjkvs2dA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         95.128.121.18
HTTP/1.1 101 Switching Protocols
                                        
Date: Fri, 09 Dec 2022 06:06:10 GMT
Connection: upgrade
server: ngs-h5live-proxy
Upgrade: websocket
Sec-WebSocket-Accept: Fs4zIq/4/sBuads1f8+5hZeCovo=

                                        
                                            GET /v2/player/performer/search?noRedirect=1&mitigable=1&includeTestAccounts=0&product=livejasmin&presets=&certified=0&hotDeal=0&preVipShow=0&ngs=1&pstool=400_18&psid=ed_4tubedtint&streamType=rtmp&category=girl&bannedPerformers[]=AdaQuinn&bannedPerformers[]=ChrissyBlair&bannedPerformers[]=2386e5ee-8819-4022-bd0c-c1ffe3abaaac&bannedPerformers[]=fb115f83-3f4e-4e13-818d-f1bded4d5ad5&bannedPerformers[]=LillieNoir&bannedPerformers[]=MyaBecker HTTP/1.1 
Host: api-protected.protoawegw.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://crmt.livejasmin.com/
Origin: https://crmt.livejasmin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         93.93.51.225
HTTP/2 200 OK
content-type: application/json
                                        
date: Fri, 09 Dec 2022 06:06:10 GMT
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
access-control-allow-methods: OPTIONS, GET, POST, PUT, DELETE, PATCH
server: unknown
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (815), with no line terminators
Size:   600
Md5:    102fc4071d873d89d86de2a0bbdf3bda
Sha1:   00c01d83c5d008195fb0e89703f206ebafe7d437
Sha256: 836939bf016b0f07d8413d1eab14089427e0ddc8bdfffe9ae89cd444f0fb4a86
                                        
                                            GET /eyJhbGciOiJIUzI1NiJ9.eyJhbGxvd0g1TGl2ZVByb3h5Ijp0cnVlLCJvcmlnaW4iOiIqIiwic2VydmVyIjoid3NzOi8vbmdzLWVkZ2UtOTUtMTI4LTEyMS0xOS5kZGl0c2Nkbi5jb20iLCJ0b2tlbklkIjoiTUN4bU9HWmpNRFl3T1MxaVpXWTBMVFF3WlRBdE9HSTJZUzA0TmpZNE1tWXdOekl3WVdFc01TdzFaamd3TnpreE15eDROMGg0VDJWUGRsWTBkRTltZG5CU1ducEdabTE2UTNNdksxazkiLCJzdHJlYW1JZCI6IjAxN2FiZDI4LTdlMTMtNDVkOS04YWU1LWYzZDczODEzYzk4MiIsImNJZCI6InV5emJoeTBpZ2RpaHB5NXkiLCJhdWQiOiJ2aWV3ZXIiLCJpc3MiOiJkb2NsZXIuc3RyZWFtaW5nLnN0cmVhbWNvbnRyb2xsZXIiLCJpYXQiOjE2NzA1NjU5NzEsImV4cCI6MTY3MDU2NjAzMX0.WFkP445s2QSfJ3Qnd_ToUUXtHGlggtFQ0e86qVFT4pQ? HTTP/1.1 
Host: ngs-edge-95-128-121-19.dditscdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://crmt.livejasmin.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: C/sD3uc5wXwhtqkJ15EIxg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         95.128.121.19
HTTP/1.1 101 Switching Protocols
                                        
Date: Fri, 09 Dec 2022 06:06:11 GMT
Connection: upgrade
server: ngs-h5live-proxy
Upgrade: websocket
Sec-WebSocket-Accept: wY7bt5LhT9W6GU73OlVK5jsK31w=

                                        
                                            GET /v2/player/performer/search?noRedirect=1&mitigable=1&includeTestAccounts=0&product=livejasmin&presets=&certified=0&hotDeal=0&preVipShow=0&ngs=1&pstool=400_18&psid=ed_4tubedtint&streamType=rtmp&category=girl&bannedPerformers[]=AdaQuinn&bannedPerformers[]=ChrissyBlair&bannedPerformers[]=2386e5ee-8819-4022-bd0c-c1ffe3abaaac&bannedPerformers[]=fb115f83-3f4e-4e13-818d-f1bded4d5ad5&bannedPerformers[]=LillieNoir&bannedPerformers[]=MyaBecker HTTP/1.1 
Host: api-protected.protoawegw.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://crmt.livejasmin.com/
Origin: https://crmt.livejasmin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         93.93.51.225
HTTP/2 200 OK
content-type: application/json
                                        
date: Fri, 09 Dec 2022 06:06:11 GMT
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
access-control-allow-methods: OPTIONS, GET, POST, PUT, DELETE, PATCH
server: unknown
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (782), with no line terminators
Size:   578
Md5:    493e25ddc475943f748aaf2178098f83
Sha1:   2da69c096219127cbc2bc0b0048cc0ac61c118e7
Sha256: 68def83e51c67d570259b927a22d96d96cb9fc910226c121b6accccc6c8c89ff
                                        
                                            GET /eyJhbGciOiJIUzI1NiJ9.eyJhbGxvd0g1TGl2ZVByb3h5Ijp0cnVlLCJvcmlnaW4iOiIqIiwic2VydmVyIjoid3NzOi8vbmdzLWVkZ2UtOTUtMTI4LTEyMC00MC5kZGl0c2Nkbi5jb20iLCJ0b2tlbklkIjoiTUN3Mk1qTXpZekF5T1MwMk5EbGtMVFEwT0dVdFlqRTVOeTB4WXpZM01EVXpPVE0xT1RVc01TdzFaamd3TnpneU9DdzNhaTlrU0hKVFpXVmxOeTlwTDA1dWJraEZkbmRRTDBoRVVITTkiLCJzdHJlYW1JZCI6IjY2ODQzMGIxLWQxODItNGM1MS1iMDkxLTk4NDA3ODU3YmY2ZiIsImNJZCI6IjYyeGpzNHdnOTVoemkxNGwiLCJhdWQiOiJ2aWV3ZXIiLCJpc3MiOiJkb2NsZXIuc3RyZWFtaW5nLnN0cmVhbWNvbnRyb2xsZXIiLCJpYXQiOjE2NzA1NjU5NzIsImV4cCI6MTY3MDU2NjAzMn0.T76qS1tYqPfMbQnobEew1w4C5SYEaWbBi5139sCa1JM? HTTP/1.1 
Host: ngs-edge-95-128-120-40.dditscdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://crmt.livejasmin.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +2nxspzLC0rS17xET8f0tg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         95.128.120.40
HTTP/1.1 101 Switching Protocols
                                        
Date: Fri, 09 Dec 2022 06:06:12 GMT
Connection: upgrade
server: ngs-h5live-proxy
Upgrade: websocket
Sec-WebSocket-Accept: f9htJyUOAOeoQw9ajW+vgBqYe/k=

                                        
                                            GET /assets/base_footer-75a53cbdb8.js HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"16818-5ee337ad3d8c0-gzip"
expires: Sat, 10 Dec 2022 06:04:04 GMT
last-modified: Thu, 24 Nov 2022 08:49:15 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 121
server: cloudflare
cf-ray: 776b8d81b85eb517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /ad-provider.js HTTP/1.1 
Host: a.realsrv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         185.76.9.22
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
etag: W/"f26c91d131ffc1bbddb296d644e"
expires: Thu, 08 Dec 2022 12:51:43 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1670568778
server: CDN77-Turbo
x-77-nzt: AblMCRTOCEP/Mx8AAA
x-77-nzt-ray: af585630216f12044dd0926385edf933
x-cache: HIT
x-age: 7987
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /api/models/vast?campaignId=165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af&campaignType=smartpop&creativeId=b1e02e2720203f684f246d97afe36747c347d0383f37e85772df9f975015b451&duration=00%3A00%3A30&endpoint=room&iterationId=257107&masterSmartpopId=2683&memberId=ooc4ASOolmsnmndVdTdPbXS6VzqpbXUzOodTK6V0rpXT1UU0uomponpndRNTRPTS6V0zpXSuldK6Z0rpXTOc6V1Jj6bx6h_c50rpXSuldK6V0rpXSuD7&p1=4581406&ruleId=157&skipOffset=00%3A00%3A05&smartpopId=3564&sourceId=3017212&tag=-girls%2Findian&userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&variationId=29475&videosList=oil-show11 HTTP/1.1 
Host: go.xlivrdr.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Referer: https://www.4tube.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.18.59.150
HTTP/2 200 OK
content-type: text/xml; charset=utf-8
                                        
date: Fri, 09 Dec 2022 06:06:06 GMT
access-control-allow-origin: https://www.4tube.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: DYNAMIC
set-cookie: __cflb=0H28uukSkGJRy5UBr1u9iAwwBfboBLDxauv7JELhTVv; SameSite=None; Secure; path=/; expires=Sat, 10-Dec-22 05:06:06 GMT; HttpOnly
server: cloudflare
cf-ray: 776b8d8b1d61b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /js/player/web/720178.js?hl=es HTTP/1.1 
Host: www.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
cache-control: public, max-age=1800, s-maxage=600, x-grace=900
surrogate-capability: abc="ESI/1.0"
vary: Accept-Encoding, Accept-Encoding
x-powered-by: PHP/5.6.40-63+ubuntu18.04.1+deb.sury.org+2
cf-cache-status: MISS
last-modified: Fri, 09 Dec 2022 06:06:05 GMT
server: cloudflare
cf-ray: 776b8d819840b517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /Y1JKa1M4cH1YZFZne0l%2EQXBmSWoAY3wJMlExZ11mVWRnXzJSMGcKMVRqZ1tqVDN8XjBRY3NcMEF%2BaFxkB2YoW2JSfy9fMgJ%2EflJjVX9zWDdSf3JfNVZlLgliUWYpXXFPcDkccU9wIRg2CzskADoXJWQDMgogaEdxUmJkXnFPNCsHIAZ%2BLAo%2EEDdmDTIPIS82 HTTP/1.1 
Host: ksehinkitw.hair
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

search
                                         54.162.51.18
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
set-cookie: f0e8f2e26b884e7f71854957a44961dc=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
cache-control: public, max-age=86400
etag: W/"8445-kSxMqACjXOh+lac1QPNB9xOK7xw"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /npe/pu/play/css/play-v828265.css HTTP/1.1 
Host: pt-static5.jsmsat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crmt.livejasmin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         93.93.51.201
HTTP/2 200 OK
content-type: text/css
                                        
date: Fri, 09 Dec 2022 06:06:09 GMT
last-modified: Thu, 08 Dec 2022 15:19:42 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"6392008e-13478"
access-control-allow-origin: *
server: unknown
x-cdn-node: sesto
x-cache-status: R-HIT
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /npe/pu/fslf/jsm/script/pu.fslf-v828265.js HTTP/1.1 
Host: pt-static1.jsmsat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crmt.livejasmin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         93.93.51.201
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 06:06:09 GMT
last-modified: Thu, 08 Dec 2022 15:19:42 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"6392008e-6cbec"
access-control-allow-origin: *
server: unknown
x-cdn-node: sesto
x-cache-status: R-HIT
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /assets/loadcomments-d7f211c111.js HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"168-5ee337ad3d8c0-gzip"
expires: Sat, 10 Dec 2022 05:59:51 GMT
last-modified: Thu, 24 Nov 2022 08:49:15 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 374
server: cloudflare
cf-ray: 776b8d81b85bb517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /library/344676/d9fc7882248dd45554c7b2784475f00936fb6e08.mp4 HTTP/1.1 
Host: s3t3d2y8.afcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         185.76.9.18
HTTP/2 206 Partial Content
content-type: video/mp4
                                        
date: Fri, 09 Dec 2022 06:06:06 GMT
content-length: 34846
last-modified: Thu, 20 Jan 2022 15:19:55 GMT
etag: "61e97d9b-881e"
expires: Fri, 30 Jun 2023 12:01:37 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195288
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ14tXv/9jLUAA
x-77-nzt-ray: c0a4cc2820a2447c4ed092637be8431e
x-cache: HIT
x-age: 13906678
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-34845/34846
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /assets/ad-bc506b1f9f.js HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"3dc-5ee337ad3d8c0-gzip"
expires: Sat, 10 Dec 2022 06:04:04 GMT
last-modified: Thu, 24 Nov 2022 08:49:15 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 121
server: cloudflare
cf-ray: 776b8d81b85db517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /assets/adn-9d73ecb0eb.js HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"199-5ee337ad3d8c0-gzip"
expires: Sat, 10 Dec 2022 06:04:04 GMT
last-modified: Thu, 24 Nov 2022 08:49:15 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 121
server: cloudflare
cf-ray: 776b8d81c862b517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es HTTP/1.1 
Host: www.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Fri, 09 Dec 2022 06:06:04 GMT
cache-control: public, max-age=7200, s-maxage=600, x-grace=900
surrogate-capability: abc="ESI/1.0"
vary: Accept-Encoding, Accept-Encoding
x-powered-by: PHP/5.6.40-63+ubuntu18.04.1+deb.sury.org+2
cf-cache-status: MISS
last-modified: Fri, 09 Dec 2022 06:06:04 GMT
server: cloudflare
cf-ray: 776b8d7dee0fb517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /assets/adf-8f47ebf083.js HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"217-5ee337ad3d8c0-gzip"
expires: Sat, 10 Dec 2022 06:04:04 GMT
last-modified: Thu, 24 Nov 2022 08:49:15 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 121
server: cloudflare
cf-ray: 776b8d81b860b517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /assets/font/sourcesanspro-regular-webfont-f57d6cd73b.woff2 HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://ui.4tube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: font/woff2
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
access-control-allow-origin: *
etag: W/"5d30-5ee33736fc1c0"
last-modified: Thu, 24 Nov 2022 08:47:11 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 424
server: cloudflare
cf-ray: 776b8d852a9bb517-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /library/344676/d9fc7882248dd45554c7b2784475f00936fb6e08.mp4 HTTP/1.1 
Host: s3t3d2y8.afcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         185.76.9.18
HTTP/2 206 Partial Content
content-type: video/mp4
                                        
date: Fri, 09 Dec 2022 06:06:06 GMT
content-length: 34846
last-modified: Thu, 20 Jan 2022 15:19:55 GMT
etag: "61e97d9b-881e"
expires: Fri, 30 Jun 2023 12:01:37 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195288
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ3rsvf/9jLUAA
x-77-nzt-ray: c0a4cc2820a2447c4ed09263ca484a1e
x-cache: HIT
x-age: 13906678
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-34845/34846
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /assets/abExperiments-fba113e07a.js HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"40e-5ee3379842740-gzip"
expires: Sat, 10 Dec 2022 05:41:55 GMT
last-modified: Thu, 24 Nov 2022 08:48:53 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 1450
server: cloudflare
cf-ray: 776b8d81b856b517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            POST /0000000801361744/desktop/1080+720+480+360+240 HTTP/1.1 
Host: token.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Content-Length: 0

search
                                         54.166.244.100
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
access-control-allow-origin: https://www.4tube.com
content-encoding: gzip
date: Fri, 09 Dec 2022 06:06:05 GMT
etag: W/"e6d-tVI5uSrk0iR6n71W8skCtU7MVfo"
vary: Origin, Accept-Encoding
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /sw.js?V3E4R1EMUw90ZmJECWV9dVMUZWg0QA4lMGUSFXFkYUcVczBmExUmM2BJFXdoYBAOcjJlQAFwMnVdGnBmM0Vad2BmXF1zMDZcDH5hYVwBdDVmXABzN2JGXCVgZUVbcXN7U0swc3tTUzQ0PxhWLDgjBhYvMD4DGmtzZkEWcnN7F1krIjJdXiY9JBQUITA7Al0a HTTP/1.1 
Host: www.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: 4tube_ad={"ntva":0,"ntvb":0,"footer":0,"listings":0,"playerAd":0,"autoNextAd":0,"adblock-popunder-mediareps":0,"adblock-banner":0,"adblock-notice":0,"adblock-popunder-exoclick":0,"footer-exoclick":2,"listings-exoclick":0,"mobile-below-player-exoclick":0,"mobile-footer-exoclick":0,"mobile-middle-banner-exoclick":0,"mobile-videolist-top-exoclick":0,"non_cpp-exoclick":0,"ntva-exoclick":0,"ntvb-exoclick":0,"playerAd-exoclick":0,"vast-ad":0,"push-notification":0,"pop-up":0,"mobile-popunder":0}; __utma=196175913.43532277.1670565965.1670565965.1670565965.1; __utmb=196175913.0.10.1670565965; __utmc=196175913; __utmz=196175913.1670565965.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); player-vast=1
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 06:06:07 GMT
etag: W/"19285-5eb723e71d580-gzip"
last-modified: Thu, 20 Oct 2022 07:26:30 GMT
vary: Accept-Encoding, Accept-Encoding
cache-control: max-age=1800
cf-cache-status: MISS
server: cloudflare
cf-ray: 776b8d8da8a5b517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /assets/img/friends/porntube-f037f07fba.png HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ui.4tube.com/assets/styles_4tube-8f857004d5.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
cache-control: max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origSize=10888
access-control-allow-origin: *
etag: "2a88-5ee33736fc1c0"
expires: Sat, 10 Dec 2022 06:06:05 GMT
last-modified: Thu, 24 Nov 2022 08:47:11 GMT
vary: Accept-Encoding
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 776b8d852a91b517-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /Scripts/infinity.js.aspx?guid=cc0b9136-0e22-4ced-9fd6-6a84e150a8d7 HTTP/1.1 
Host: cdn.impactserving.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.19.161.92
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
date: Fri, 09 Dec 2022 06:06:07 GMT
vary: Accept-Encoding
cache-control: public, no-transform, max-age=900
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: *
last-modified: Fri, 09 Dec 2022 06:02:55 GMT
cf-cache-status: HIT
age: 123
server: cloudflare
cf-ray: 776b8d925c1fb517-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /pu/?psid=ed_4tubedtint&utm_source=ptb&ms_notrack=1&category=girl&site=jsm&target=postrttr&utm_medium=partner&preload=1 HTTP/1.1 
Host: crjpgate.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         93.93.51.223
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Fri, 09 Dec 2022 06:06:08 GMT
vary: Accept-Encoding
x-target-pstool: 400_31
server: unknown
set-cookie: psui=a59f007fbf3384ccc33cc586d5d348f0; Path=/; Expires=Sun, 08-Jan-23 06:06:08 GMT
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /assets/img/4tube/favicon-06b7221b58.ico HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
                                        
date: Fri, 09 Dec 2022 06:06:06 GMT
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"e73-5ee33736fc1c0"
expires: Sat, 10 Dec 2022 06:04:05 GMT
last-modified: Thu, 24 Nov 2022 08:47:11 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 121
server: cloudflare
cf-ray: 776b8d882d15b517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /ad_detail.html?ad=ntvb HTTP/1.1 
Host: www.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es
Cookie: 4tube_ad={"ntva":0,"ntvb":0,"footer":0,"listings":0,"playerAd":0,"autoNextAd":0,"adblock-popunder-mediareps":0,"adblock-banner":0,"adblock-notice":0,"adblock-popunder-exoclick":0,"footer-exoclick":2,"listings-exoclick":0,"mobile-below-player-exoclick":0,"mobile-footer-exoclick":0,"mobile-middle-banner-exoclick":0,"mobile-videolist-top-exoclick":0,"non_cpp-exoclick":0,"ntva-exoclick":0,"ntvb-exoclick":0,"playerAd-exoclick":0,"vast-ad":0,"push-notification":0,"pop-up":0,"mobile-popunder":0}
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: text/html
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
last-modified: Wed, 13 Jul 2022 16:24:59 GMT
vary: Accept-Encoding, Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 779
server: cloudflare
cf-ray: 776b8d857ae9b517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /library/329552/37c525af1d11590ab1229c25c3d3fb34e5de7437.mp4 HTTP/1.1 
Host: s3t3d2y8.afcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.18
HTTP/2 206 Partial Content
content-type: video/mp4
                                        
date: Fri, 09 Dec 2022 06:06:06 GMT
content-length: 58232
last-modified: Fri, 02 Sep 2022 12:30:36 GMT
etag: "6311f76c-e378"
expires: Sat, 02 Sep 2023 13:03:15 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1693659814
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ3XNbH/KNGAAA
x-77-nzt-ray: c0a4cc2820a2447c4ed092633c408b2e
x-cache: HIT
x-age: 8442152
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-58231/58232
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /WXBwV3giUgMgJywCHHVCexgEIwgqSl94Dy4HXmMMLBIVeRs2HV8kD3caA3VUewMdMVpjQVx1CzQGUm1abV5DdVR7BBEwJzAUUm1abkNHYk1oUlx1CywSLz4ca1JKdUE6QUY1GWsTXWFNb0ZdYxloEl02Gm5IXWdBbhFGYhtrQUlgG3sN HTTP/1.1 
Host: ksehinkitw.hair
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.162.51.18
HTTP/2 502 Bad Gateway
                                        
set-cookie: bba871bfbc45fbfcaabe7d0061abca2f=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /v2/player/performer/search?noRedirect=1&mitigable=1&includeTestAccounts=0&product=livejasmin&presets=&certified=0&hotDeal=0&preVipShow=0&ngs=1&pstool=400_18&psid=ed_4tubedtint&streamType=rtmp&category=girl&bannedPerformers[]=AdaQuinn&bannedPerformers[]=ChrissyBlair&bannedPerformers[]=2386e5ee-8819-4022-bd0c-c1ffe3abaaac&bannedPerformers[]=fb115f83-3f4e-4e13-818d-f1bded4d5ad5&bannedPerformers[]=LillieNoir&bannedPerformers[]=MyaBecker HTTP/1.1 
Host: api-protected.protoawegw.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://crmt.livejasmin.com/
Origin: https://crmt.livejasmin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         93.93.51.225
HTTP/2 200 OK
content-type: application/json
                                        
date: Fri, 09 Dec 2022 06:06:13 GMT
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
access-control-allow-methods: OPTIONS, GET, POST, PUT, DELETE, PATCH
server: unknown
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /assets/newrelicKpisFooter-a4a3d6ff76.js HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"c2-5ee337a4a8480-gzip"
expires: Sat, 10 Dec 2022 05:43:34 GMT
last-modified: Thu, 24 Nov 2022 08:49:06 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 1351
server: cloudflare
cf-ray: 776b8d81b85cb517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /assets/padb-7a7ab25c1f.js HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"1f7-5ee337ad3d8c0-gzip"
expires: Sat, 10 Dec 2022 06:04:04 GMT
last-modified: Thu, 24 Nov 2022 08:49:15 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 121
server: cloudflare
cf-ray: 776b8d81c861b517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /assets/abpe-55f5e25fc6.js HTTP/1.1 
Host: ui.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"287-5ee337ad3d8c0-gzip"
expires: Sat, 10 Dec 2022 05:41:55 GMT
last-modified: Thu, 24 Nov 2022 08:49:15 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 1450
server: cloudflare
cf-ray: 776b8d81c86fb517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /51edf0964f/dynamic_js_es.js?d=2784277&hl=es HTTP/1.1 
Host: www.4tube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.20.224.111
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 06:06:05 GMT
cache-control: public, max-age=1800
vary: Accept-Encoding, Accept-Encoding
x-powered-by: PHP/5.6.40-63+ubuntu18.04.1+deb.sury.org+2
cf-cache-status: MISS
last-modified: Fri, 09 Dec 2022 06:06:05 GMT
server: cloudflare
cf-ray: 776b8d818837b517-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---