| www.4tube.com/videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es |  104.20.223.111 | 301 Moved Permanently | 0 B |
URL HTTP/1.1www.4tube.com/videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es IP104.20.223.111:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es HTTP/1.1
Host: www.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 09 Dec 2022 06:06:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 09 Dec 2022 07:06:04 GMT
Location: https://www.4tube.com/videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 776b8d7b4eacb50c-OSL
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashf2acd891dc6eb1f09f57a2b086791781 1e2088306501a61edcca1ade62c4d54f23b3b083 51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19143
Expires: Fri, 09 Dec 2022 11:25:07 GMT
Date: Fri, 09 Dec 2022 06:06:04 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash388f6fea5bafa378266622b72311a6ee 447f102dc12172ce1ba44c5e94e1d7bb49d43372 a597afb4d4f7f3c82f0f2857322226fc69dc92e099bfd0605f7a0cd562be9d21
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2669
Expires: Fri, 09 Dec 2022 06:50:33 GMT
Date: Fri, 09 Dec 2022 06:06:04 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash14cd9a0afb6ba9a763651d5112760d1e 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 09 Dec 2022 05:08:17 GMT
content-type: application/json
age: 3467
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash4ee537977be9c03702f8ffe0025bf1fe 21637881c4aa34c4add703f8bff4eff573159f45 4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA"
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16420
Expires: Fri, 09 Dec 2022 10:39:44 GMT
Date: Fri, 09 Dec 2022 06:06:04 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hash6dc8e0c6a35fe1d56a9583c67600556b e30c45de81f9290f9ea411253d09df1f8847bf4e 77a55a293b61fdabc49e1aeef21fbfd0f49a6c9b8b625603ca158e0fcc9d67cd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=141862
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 06:06:04 GMT
Etag: "63925772-118"
Expires: Sat, 10 Dec 2022 21:30:26 GMT
Last-Modified: Thu, 08 Dec 2022 21:30:26 GMT
Server: nginx
Content-Length: 280
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash53341dea33f4f3d9b4966f80589f429a 20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: B/o+MK1YDHkrtlZxC/Hhop6LE5B/kk32cAi1R7b6gnZ/He8INdVwsnLh/g11oimqOlE4wF1q8l4=
x-amz-request-id: Z309Z814DXPN7JC5
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 09 Dec 2022 05:48:12 GMT
age: 1072
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 06:06:04 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 09 Dec 2022 05:07:55 GMT
age: 3489
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashfd55f4aaaab6ec40bc7dc10252cd819a a72523f60be265a391fa9edc43e0a93418ad1fd0 bae354b3db14f4fd115311a0c412c9b5e436dd9e0a151afd8b9c18831dd8c2dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5020
Cache-Control: max-age=102267
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 06:06:05 GMT
Etag: "6391a92c-1d7"
Expires: Sat, 10 Dec 2022 10:30:32 GMT
Last-Modified: Thu, 08 Dec 2022 09:06:52 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
|
|
| ui.4tube.com/assets/img/black-d2a0017e14.png | 104.20.224.111 | 200 OK | 67 B |
URL HTTP/2ui.4tube.com/assets/img/black-d2a0017e14.png IP104.20.224.111:0
File typePNG image data, 1 x 1, 8-bit grayscale, non-interlaced\012- data Hashd2a0017e140e1dbb785ca2a1f4aa9cff 5641ef04aa673e52cc8067cde1537a70f646a100 1886d19d7979b86877801b46ae69707309adc38143ab67c3dd2cd36d4db8f23c
GET /assets/img/black-d2a0017e14.png HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: image/png
content-length: 67
cache-control: max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
access-control-allow-origin: *
etag: "43-5ee33736fc1c0"
expires: Sat, 10 Dec 2022 05:41:55 GMT
last-modified: Thu, 24 Nov 2022 08:47:11 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 1450
accept-ranges: bytes
server: cloudflare
cf-ray: 776b8d81d876b517-OSL
X-Firefox-Spdy: h2
|
|
| ui.4tube.com/assets/img/88x31_RTA_b-170f4b1479.gif | 104.20.224.111 | 200 OK | 2.6 kB |
URL HTTP/2ui.4tube.com/assets/img/88x31_RTA_b-170f4b1479.gif IP104.20.224.111:0
File typeGIF image data, version 87a, 88 x 31\012- data Hash170f4b1479d7377bce720fa0a7363cc5 db56f9deb54707a4c75423103d92061786235f78 a0beb1610a9641243df1a74c20e323546d284cbdd75eb6b94f612d9bda2ea4a2
GET /assets/img/88x31_RTA_b-170f4b1479.gif HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: image/gif
content-length: 2624
cache-control: max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
access-control-allow-origin: *
etag: "a40-5ee33736fc1c0"
expires: Sat, 10 Dec 2022 05:41:56 GMT
last-modified: Thu, 24 Nov 2022 08:47:11 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 1449
accept-ranges: bytes
server: cloudflare
cf-ray: 776b8d81d878b517-OSL
X-Firefox-Spdy: h2
|
|
| ads.exoclick.com/ad_track.js | 205.185.216.10 | 200 OK | 221 B |
URL HTTP/1.1ads.exoclick.com/ad_track.js IP205.185.216.10:0
File typeHTML document, ASCII text, with very long lines (368), with no line terminators Hash1aaf2775a48a6417574972dfbbe2797b 8562ab1dc5691c9026e9cdea6e0a84787a48be34 88479a62209f6f242c8f8b93461fa93aadbbaf07fab1152d806fba1b69f99aa1
GET /ad_track.js HTTP/1.1
Host: ads.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 06:06:05 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 221
Content-Type: application/javascript
Accept-Ranges: bytes
Cache-Control: max-age=10800
Server: nginx
etag: W/"3ac21caf363100082c3f8c53986"
X-HW: 1670565965.dop003.sk1.t,1670565965.cds229.sk1.shn,1670565965.dop003.sk1.t,1670565965.cds026.sk1.c
Access-Control-Allow-Origin: *, *
|
|
| ocsp.r2m01.amazontrust.com/ | 54.230.80.227 | 200 OK | 471 B |
URL HTTP/1.1ocsp.r2m01.amazontrust.com/ IP54.230.80.227:0
Hash26507c06bff94cca2c6cd05342b5ecaf 403bb8c5f1ef2beeffd1373166b0c33f59622794 c1409ed09541752aba92cbbd3df90d93efb73eef2175cea04df8f9a82400107c
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=88181
Date: Fri, 09 Dec 2022 06:06:05 GMT
Etag: "63917ab6-1d7"
Expires: Sat, 10 Dec 2022 06:35:46 GMT
Last-Modified: Thu, 08 Dec 2022 05:48:38 GMT
Server: ECS (dcb/7FA7)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: xm5SxitSyN6nY5FxPP8ndPWVBKAtv-gPqkf1zZxa2tBTIUjN8_xLnA==
Age: 2829
|
|
| cdn-channels.4tube.com/image/0/0/0/0/0/0/6/4/7/1459855535_850x80.jpg | 54.230.111.65 | 200 OK | 87 kB |
URL HTTP/2cdn-channels.4tube.com/image/0/0/0/0/0/0/6/4/7/1459855535_850x80.jpg IP54.230.111.65:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 850x80, components 3\012- data Hashafe1add5485805501d1e10de3e26ca82 23e6a3691b6e5b387d12a01ce1dc1780e43c3727 d97e8b8f84e6498af235d80047c3666f95fe787b4fe9b0155ebf0933c5c89f80
GET /image/0/0/0/0/0/0/6/4/7/1459855535_850x80.jpg HTTP/1.1
Host: cdn-channels.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 87286
x-amz-replication-status: COMPLETED
last-modified: Mon, 21 Jun 2021 11:15:51 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: IRVQzxAdl6a2fRCjYPPS5pMdQrduv4DH
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Dec 2022 06:54:33 GMT
etag: "afe1add5485805501d1e10de3e26ca82"
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8cHgxWL4Z2cg_55oTMwT1KNxMgZaQbZlQ8R7xpkWlTb-m6hMI1IUTQ==
age: 83493
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 34.223.160.237 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP34.223.160.237:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 25AF8hDMQKM/X6oK1FGKXQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: S6ghCZq/B7wz9+Hx9suq4wdWK2g=
|
|
| ads.exoclick.com/ad99uip8i.php | 205.185.216.10 | 200 OK | 50 B |
URL HTTP/1.1ads.exoclick.com/ad99uip8i.php IP205.185.216.10:0
File typeASCII text, with no line terminators Hash06d4faa411b83f9b0a030cf2b68ec904 ec633929782d2f0224a127a303023506262226ca d4d18940a5b8abeaf48fd08e6d97a5990ef5ea98070dbca9577585fada3ef826
GET /ad99uip8i.php HTTP/1.1
Host: ads.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 06:06:05 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 50
Content-Type: text/html; charset=UTF-8
Accept-Ranges: bytes
Server: nginx
Cache-Control: max-age=10800
X-HW: 1670565965.dop003.sk1.t,1670565965.cds229.sk1.shn,1670565965.dop003.sk1.t,1670565965.cds262.sk1.c
Access-Control-Allow-Origin: *, *
|
|
| ui.4tube.com/assets/img/loader-white-b05cf8ba8e.gif | 104.20.224.111 | 200 OK | 1.8 kB |
URL HTTP/2ui.4tube.com/assets/img/loader-white-b05cf8ba8e.gif IP104.20.224.111:0
File typeGIF image data, version 89a, 54 x 55\012- data Hashd0bcab706fc49c4274166c07e5775b49 7cc36858cd2418ca23fff222a5083eb5fe580ddd a21b35a2490563818c55a71cb93a848a6c50c2de9b5fb6fa13b65c27b3b87030
GET /assets/img/loader-white-b05cf8ba8e.gif HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ui.4tube.com/assets/styles_4tube-8f857004d5.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: image/gif
content-length: 1805
cache-control: max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origSize=1924
access-control-allow-origin: *
etag: "784-5ee33736fc1c0"
expires: Sat, 10 Dec 2022 05:59:51 GMT
last-modified: Thu, 24 Nov 2022 08:47:11 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 374
accept-ranges: bytes
server: cloudflare
cf-ray: 776b8d850a85b517-OSL
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashf3b0c8305bced51dc62d2c9c31314698 603a9011b9f89755618e38f63294ed4d85f302b2 9bfcb430527d3297e359adb0f71713edd92046e53f743dfc85bd76131cc86fef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BFCB430527D3297E359ADB0F71713EDD92046E53F743DFC85BD76131CC86FEF"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6152
Expires: Fri, 09 Dec 2022 07:48:37 GMT
Date: Fri, 09 Dec 2022 06:06:05 GMT
Connection: keep-alive
|
|
| ui.4tube.com/assets/newrelicKpis-018b5db755.js | 104.20.224.111 | 200 OK | 13 kB |
URL HTTP/2ui.4tube.com/assets/newrelicKpis-018b5db755.js IP104.20.224.111:0
File typeASCII text, with very long lines (623) Hash152e6ef09f69a3a4e3366532c9a565c5 443a0c1850d2fbe8108bf33f3ffad6bdd6c6497b dfd54410118c4ea9d0f8b3a7a29a442ea75b3674660fca84094642160c14d033
GET /assets/newrelicKpis-018b5db755.js HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"2b0-5ee3379eef700-gzip"
expires: Sat, 10 Dec 2022 05:43:34 GMT
last-modified: Thu, 24 Nov 2022 08:49:00 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 1351
server: cloudflare
cf-ray: 776b8d81b859b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn-thumbs.4tube.com/8/0/1/3/9/7/0/9/8/240x180/712.jpeg | 143.204.55.52 | 200 OK | 11 kB |
URL HTTP/2cdn-thumbs.4tube.com/8/0/1/3/9/7/0/9/8/240x180/712.jpeg IP143.204.55.52:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data Hash7c621a7c7b2062938264d9a71586bb9f 2933c48a26197ec4693245b4f12f0db45a25fcd4 4248eb1476a6b4f6c37f00fd7dc9ab9334aaa70d5276d9597369170961fb7b87
GET /8/0/1/3/9/7/0/9/8/240x180/712.jpeg HTTP/1.1
Host: cdn-thumbs.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 11290
last-modified: Wed, 23 Nov 2022 08:24:54 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 09 Dec 2022 01:41:11 GMT
etag: "7c621a7c7b2062938264d9a71586bb9f"
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EJHVvOfvCihsL623lvjWWfF6tDVCpbmO6_Nk6HITiDre2DMIRahbuQ==
age: 16658
cache-contol: max-age=15552000
X-Firefox-Spdy: h2
|
|
| ui.4tube.com/assets/img/layout/4tube-logo-1f503fd81c.png | 104.20.224.111 | 200 OK | 22 kB |
URL HTTP/2ui.4tube.com/assets/img/layout/4tube-logo-1f503fd81c.png IP104.20.224.111:0
File typePNG image data, 172 x 46, 8-bit/color RGBA, non-interlaced\012- data Hash2ce37180aac0a41d4d7d45be522d58d0 2e42cebbf900eeb514bc708590a3d8e6e73e6d15 ee7cdcf54a15b51b2080c337ad3071640d5c3e872f4705abb4dd02d0fbdc83a9
GET /assets/img/layout/4tube-logo-1f503fd81c.png HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: image/png
cache-control: max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origSize=12663
access-control-allow-origin: *
etag: "3177-5ee33736fc1c0"
expires: Sat, 10 Dec 2022 05:41:55 GMT
last-modified: Thu, 24 Nov 2022 08:47:11 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 1450
server: cloudflare
cf-ray: 776b8d81c870b517-OSL
X-Firefox-Spdy: h2
|
|
| cdn-thumbs.4tube.com/8/0/1/3/8/3/6/6/6/240x180/293.jpeg | 143.204.55.52 | 200 OK | 9.7 kB |
URL HTTP/2cdn-thumbs.4tube.com/8/0/1/3/8/3/6/6/6/240x180/293.jpeg IP143.204.55.52:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data Hashcb26668088aac63fe2af6156817dcb09 9f43f210de9d318bf7c68b197b8e63240407ed37 87a7be0ff6b68a2065983e78e1f96d28c56a77aec6cf0df59118b263dd5c956b
GET /8/0/1/3/8/3/6/6/6/240x180/293.jpeg HTTP/1.1
Host: cdn-thumbs.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 9708
last-modified: Mon, 22 Aug 2022 13:18:25 GMT
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Dec 2022 07:08:35 GMT
etag: "cb26668088aac63fe2af6156817dcb09"
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iu0eWg5Imm89FHJl4qGdYPTDPh4aOjtiPmarrcLZvOvx4vlHTEY9Fg==
age: 82776
cache-contol: max-age=15552000
X-Firefox-Spdy: h2
|
|
| ui.4tube.com/assets/base-5e619af4ba.js | 104.20.224.111 | 200 OK | 48 kB |
URL HTTP/2ui.4tube.com/assets/base-5e619af4ba.js IP104.20.224.111:0
File typeASCII text, with very long lines (32007) Hash07d1735b16a269e97fe8c4f7ebb9bb81 d5ec88446e4eb85bd849ae1d6588e0019f166f98 a14abc32e77b04978c4fe2330cfe6224d7468336c88b2c450d874e9e35af6d9c
GET /assets/base-5e619af4ba.js HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"18e35-5ee337ad3d8c0-gzip"
expires: Sat, 10 Dec 2022 05:41:55 GMT
last-modified: Thu, 24 Nov 2022 08:49:15 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 1450
server: cloudflare
cf-ray: 776b8d81b854b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ui.4tube.com/assets/video_player-9842b478da.js | 104.20.224.111 | 200 OK | 79 kB |
URL HTTP/2ui.4tube.com/assets/video_player-9842b478da.js IP104.20.224.111:0
File typeASCII text, with very long lines (32020) Hash84e2cb599b45e697f1c690c04b17d20e f813bc8de3e7c298236912ac3b5070ca35508d77 deaa8ea903c5b5790b5e74e5b565611ec897ea52a78ab5754679d2d32304c88d
GET /assets/video_player-9842b478da.js HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"3daed-5ee337ad3d8c0-gzip"
expires: Sat, 10 Dec 2022 05:59:51 GMT
last-modified: Thu, 24 Nov 2022 08:49:15 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 374
server: cloudflare
cf-ray: 776b8d81b85fb517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn-thumbs.4tube.com/8/0/1/3/9/7/1/0/4/240x180/374.jpeg | 143.204.55.52 | 200 OK | 12 kB |
URL HTTP/2cdn-thumbs.4tube.com/8/0/1/3/9/7/1/0/4/240x180/374.jpeg IP143.204.55.52:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data Hash2522c6f33104686af3caa6d08224001c 1065cb38916e4434def9fa9730c28886328e304b 085ba97f737dfda33643d608bbab19d4512525aa5a7da323f2ef9cf41118f636
GET /8/0/1/3/9/7/1/0/4/240x180/374.jpeg HTTP/1.1
Host: cdn-thumbs.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 12371
last-modified: Wed, 23 Nov 2022 08:09:27 GMT
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Dec 2022 08:56:09 GMT
etag: "2522c6f33104686af3caa6d08224001c"
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wzjqOA-UQYtz7qvv5AWYt7A6UUqq0CpLeWRP1CWH5yWk2XSgjRiJww==
age: 76203
cache-contol: max-age=15552000
X-Firefox-Spdy: h2
|
|
| www.4tube.com/nyordo.js | 104.20.224.111 | 200 OK | 16 kB |
IP104.20.224.111:0
Hash786615003f7059d5a0ec7d707a3257cd 57fe134ec1d024189d951cbcc58360695ddc7581 3ec413db4b15a5ed90366158c9db4f115294632540f9fda65fb9bb5cb1da9f2b
GET /nyordo.js HTTP/1.1
Host: www.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: application/javascript
etag: W/"61a5-5e3b239ebecc0-gzip"
last-modified: Wed, 13 Jul 2022 16:24:59 GMT
vary: Accept-Encoding, Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 425
server: cloudflare
cf-ray: 776b8d81883bb517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ui.4tube.com/assets/styles_4tube-8f857004d5.css | 104.20.224.111 | 200 OK | 36 kB |
URL HTTP/2ui.4tube.com/assets/styles_4tube-8f857004d5.css IP104.20.224.111:0
File typeASCII text, with very long lines (60458) Hashdc067be66a295688b66db7f149dd42e4 5df84a540414237e6c608fcea13046475ccb1251 7c7a4f48fa699167dd56e3589aeb2dad82daf93f191c464f40b774780d56a30c
GET /assets/styles_4tube-8f857004d5.css HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"212a6-5ee337ae31b00-gzip"
expires: Sat, 10 Dec 2022 05:41:55 GMT
last-modified: Thu, 24 Nov 2022 08:49:16 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 1450
server: cloudflare
cf-ray: 776b8d81b852b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash795e67bdfadc3c890a663080413b56b7 fdefde3befb6aceac3c337c34c8d738f5091908c 8375b55cfc13989b0cf96293b7bead2ce5811a993b3445da1776ca7015c36985
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 06:06:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| syndication.realsrv.com/v1/api.php |  95.211.229.246 | 200 OK | 1.0 kB |
URL HTTP/1.1syndication.realsrv.com/v1/api.php IP95.211.229.246:0 ASN#60781 LeaseWeb Netherlands B.V.
File typeJSON data\012- , ASCII text, with very long lines (1354), with no line terminators Hash8bc640ef00f8e39e0e001ef012750430 653bb4b52918076c1f279a941c62c92547e29b84 5eff90751b23bcc683f2984f57fbd18bd323d77cc280c45e3f673a68e2e41bea
POST /v1/api.php HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 294
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392d04e080896.486451421035136552%22%3B%7D; expires=Sun, 08-Dec-2024 06:06:06 GMT; Max-Age=63072000; path=/; domain=realsrv.com; secure; SameSite=None
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| ssl.google-analytics.com/ga.js | 142.250.74.72 | 200 OK | 17 kB |
URL HTTP/2ssl.google-analytics.com/ga.js IP142.250.74.72:0
File typeASCII text, with very long lines (1305) Hash01d5892e6e243b52998310c2925b9f3a 58180151b6a6ee4af73583a214b68efb9e8844d4 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: ssl.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Fri, 09 Dec 2022 04:32:37 GMT
expires: Fri, 09 Dec 2022 06:32:37 GMT
cache-control: public, max-age=7200
age: 5609
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| syndication.realsrv.com/v1/api.php | 95.211.229.246 | 200 OK | 1.0 kB |
URL HTTP/1.1syndication.realsrv.com/v1/api.php IP95.211.229.246:0 ASN#60781 LeaseWeb Netherlands B.V.
File typeJSON data\012- , ASCII text, with very long lines (1352), with no line terminators Hash8b65b00513d54c0cd9ab08d7105fac82 659022221f2e3ff1d8ccdf38413bbe042973177c a199000da11241f55ceb046a24dd8a9a2b2910f2a6f6e20c604a8aee65eea152
POST /v1/api.php HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 294
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392d04e073516.192739031190289082%22%3B%7D; expires=Sun, 08-Dec-2024 06:06:06 GMT; Max-Age=63072000; path=/; domain=realsrv.com; secure; SameSite=None
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash795e67bdfadc3c890a663080413b56b7 fdefde3befb6aceac3c337c34c8d738f5091908c 8375b55cfc13989b0cf96293b7bead2ce5811a993b3445da1776ca7015c36985
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 06:06:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ui.4tube.com/assets/img/mobile/play-772d8e8c55.png | 104.20.224.111 | 200 OK | 1.1 kB |
URL HTTP/2ui.4tube.com/assets/img/mobile/play-772d8e8c55.png IP104.20.224.111:0
File typePNG image data, 70 x 71, 8-bit gray+alpha, non-interlaced\012- data Hash8624f71035212390da62a9f380f82d77 cc3660fca41e24107b963b03a1d1333666253c25 49cf687c5f7a7839c27f865116a0b7027e19774bf508f2816c3098a03e30b054
GET /assets/img/mobile/play-772d8e8c55.png HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ui.4tube.com/assets/styles_4tube-8f857004d5.css
Cookie: __utma=196175913.43532277.1670565965.1670565965.1670565965.1; __utmb=196175913.0.10.1670565965; __utmc=196175913; __utmz=196175913.1670565965.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:06 GMT
content-type: image/png
content-length: 1053
cache-control: max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origSize=2833
access-control-allow-origin: *
etag: "b11-5ee33737f0400"
expires: Sat, 10 Dec 2022 05:41:57 GMT
last-modified: Thu, 24 Nov 2022 08:47:12 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 1449
accept-ranges: bytes
server: cloudflare
cf-ray: 776b8d899de1b517-OSL
X-Firefox-Spdy: h2
|
|
| ui.4tube.com/assets/img/4tube/apple-touch-icon-114-93d63b0ef1.png | 104.20.224.111 | 200 OK | 83 kB |
URL HTTP/2ui.4tube.com/assets/img/4tube/apple-touch-icon-114-93d63b0ef1.png IP104.20.224.111:0
File typePNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced\012- data Hash575d12130a6369d07559486118cd0fd5 929c59684e0bd84f6b30d86b9fd86351d2d39a97 21fbfa18ae2ebc4ed37161fed626e655817189c99a1b120b0c5f5e6448686ab0
GET /assets/img/4tube/apple-touch-icon-114-93d63b0ef1.png HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:06 GMT
content-type: image/png
cache-control: max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origSize=5506
access-control-allow-origin: *
etag: "1582-5ee33736fc1c0"
expires: Sat, 10 Dec 2022 06:02:05 GMT
last-modified: Thu, 24 Nov 2022 08:47:11 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 241
server: cloudflare
cf-ray: 776b8d882d14b517-OSL
X-Firefox-Spdy: h2
|
|
| www.4tube.com/sw.js | 104.20.224.111 | 200 OK | 99 kB |
IP104.20.224.111:0
File typeASCII text, with very long lines (65536), with no line terminators Hash1a0fd3ae4b56ded3a92aec5dee9fb4e2 07d3ed6c93141b01c570559db961fc6655954966 ee626a01e94f64b64ef0ff7e548bda48acb606b24e6badc5757ea38bf6b28b7c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /sw.js HTTP/1.1
Host: www.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es
Cookie: 4tube_ad={"ntva":0,"ntvb":0,"footer":0,"listings":0,"playerAd":0,"autoNextAd":0,"adblock-popunder-mediareps":0,"adblock-banner":0,"adblock-notice":0,"adblock-popunder-exoclick":0,"footer-exoclick":2,"listings-exoclick":0,"mobile-below-player-exoclick":0,"mobile-footer-exoclick":0,"mobile-middle-banner-exoclick":0,"mobile-videolist-top-exoclick":0,"non_cpp-exoclick":0,"ntva-exoclick":0,"ntvb-exoclick":0,"playerAd-exoclick":0,"vast-ad":0,"push-notification":0,"pop-up":0,"mobile-popunder":0}; __utma=196175913.43532277.1670565965.1670565965.1670565965.1; __utmb=196175913.0.10.1670565965; __utmc=196175913; __utmz=196175913.1670565965.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:06 GMT
content-type: application/javascript
etag: W/"19285-5eb723e71d580-gzip"
last-modified: Thu, 20 Oct 2022 07:26:30 GMT
vary: Accept-Encoding, Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 425
server: cloudflare
cf-ray: 776b8d88cd74b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA02PTU4DMQyFr8IFZvTs2PlhDVuQinqA/LQ7YEGRivQOT2aKKmxLcWzn84tCdRFdUB4gj4gzWGQtWE1XcePL64EmtMt3O639853BLKZIQRAzStZsiabuIWQ6Mi1HLbOVgJQRlAYGYrr6fLxlKyDOAj4fDzy+Pc1K8eAUKgNwVcfMt9VUcG4hrhtAZAzp1eNorfY6JDd1SRbr+dxC3QD4JxU3X+FJdvZfgVN6UFMucr8Yp4F7u379fHTyPo7b/3zT7jtm4sy2gzi1kIcXy0itd+1ysjFaryVWrcl/ARqKwr1hAQAA | 95.211.229.246 | 200 OK | 20 B |
URL HTTP/1.1syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA02PTU4DMQyFr8IFZvTs2PlhDVuQinqA/LQ7YEGRivQOT2aKKmxLcWzn84tCdRFdUB4gj4gzWGQtWE1XcePL64EmtMt3O639853BLKZIQRAzStZsiabuIWQ6Mi1HLbOVgJQRlAYGYrr6fLxlKyDOAj4fDzy+Pc1K8eAUKgNwVcfMt9VUcG4hrhtAZAzp1eNorfY6JDd1SRbr+dxC3QD4JxU3X+FJdvZfgVN6UFMucr8Yp4F7u379fHTyPo7b/3zT7jtm4sy2gzi1kIcXy0itd+1ysjFaryVWrcl/ARqKwr1hAQAA IP95.211.229.246:0 ASN#60781 LeaseWeb Netherlands B.V.
Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA02PTU4DMQyFr8IFZvTs2PlhDVuQinqA/LQ7YEGRivQOT2aKKmxLcWzn84tCdRFdUB4gj4gzWGQtWE1XcePL64EmtMt3O639853BLKZIQRAzStZsiabuIWQ6Mi1HLbOVgJQRlAYGYrr6fLxlKyDOAj4fDzy+Pc1K8eAUKgNwVcfMt9VUcG4hrhtAZAzp1eNorfY6JDd1SRbr+dxC3QD4JxU3X+FJdvZfgVN6UFMucr8Yp4F7u379fHTyPo7b/3zT7jtm4sy2gzi1kIcXy0itd+1ysjFaryVWrcl/ARqKwr1hAQAA HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392d04e073516.192739031190289082%22%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D; expires=Sun, 08 Dec 2024 06:06:06 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01PSU4DQQz8Ch/IqLz1whmuIAXlATM90zfgQJCCVI+nJ0ERtiUvZZdthepB9ID6AHlEGsYqU8XkOkk4X16PdKGfv5dtap/vNPeUEwUm7pSixTNdI0wLA4VektYBZSAXmNJBI4ZqjOE9mgAJVvD5dOTp7WlUalhQqDTgooER76up4NhCXHaCumI1SdF6lK7rWpdS0XKy1POSbB/Cv1Nx0wlRrtR/Ocflpq48yD1xDgGv8Pz189HIeztu79lOEFca4fh9d0zIi/uWm+Tqslnrc0cKbbn3SLP9Atiw2y1gAQAA | 95.211.229.246 | 200 OK | 20 B |
URL HTTP/1.1syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01PSU4DQQz8Ch/IqLz1whmuIAXlATM90zfgQJCCVI+nJ0ERtiUvZZdthepB9ID6AHlEGsYqU8XkOkk4X16PdKGfv5dtap/vNPeUEwUm7pSixTNdI0wLA4VektYBZSAXmNJBI4ZqjOE9mgAJVvD5dOTp7WlUalhQqDTgooER76up4NhCXHaCumI1SdF6lK7rWpdS0XKy1POSbB/Cv1Nx0wlRrtR/Ocflpq48yD1xDgGv8Pz189HIeztu79lOEFca4fh9d0zIi/uWm+Tqslnrc0cKbbn3SLP9Atiw2y1gAQAA IP95.211.229.246:0 ASN#60781 LeaseWeb Netherlands B.V.
Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA01PSU4DQQz8Ch/IqLz1whmuIAXlATM90zfgQJCCVI+nJ0ERtiUvZZdthepB9ID6AHlEGsYqU8XkOkk4X16PdKGfv5dtap/vNPeUEwUm7pSixTNdI0wLA4VektYBZSAXmNJBI4ZqjOE9mgAJVvD5dOTp7WlUalhQqDTgooER76up4NhCXHaCumI1SdF6lK7rWpdS0XKy1POSbB/Cv1Nx0wlRrtR/Ocflpq48yD1xDgGv8Pz189HIeztu79lOEFca4fh9d0zIi/uWm+Tqslnrc0cKbbn3SLP9Atiw2y1gAQAA HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392d04e073516.192739031190289082%22%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D; expires=Sun, 08 Dec 2024 06:06:06 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| syndication.exosrv.com/splash.php?idzone=3017212 | 95.211.229.246 | 200 OK | 2.6 kB |
URL HTTP/1.1syndication.exosrv.com/splash.php?idzone=3017212 IP95.211.229.246:0 ASN#60781 LeaseWeb Netherlands B.V.
File typeXML 1.0 document text\012- XML document, ASCII text, with very long lines (1533) Hash06a1e6f018e164fd3bb4548e44e65374 60644dc4f001ca559d6ce0c651a22f3ff8d5f648 930dc3371b24c4c3971fa3703224b26c7579154fc7a2df75370006e2ce9442d1
GET /splash.php?idzone=3017212 HTTP/1.1
Host: syndication.exosrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Content-Type: text/xml;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%226392d04e6ceb96.37007779117690549%22%3B%7D; expires=Sun, 08 Dec 2024 06:06:06 GMT; path=; domain=.exosrv.com; Secure; SameSite=none
c-tag=%7B%22tag-video%22%3A%22v3%7C%7CNOR%7C3017212%7C59492864%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7C4tube.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Sat, 10 Dec 2022 06:06:06 GMT; path=/; domain=.exosrv.com; Secure; SameSite=none
zone-cap-3017212=1; expires=Fri, 09 Dec 2022 18:06:06 GMT; path=/; domain=.exosrv.com; Secure; SameSite=none
Cache-Control: no-store
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Credentials: true
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 278 B |
IP93.184.220.29:0
Hash361aa366131208557ffe6dc24f3ab55c eede2130a586e197687fa44991862c359b4c61fc d87017c6d67f1fe3130df85a4df5d9c0899fa9a1c52fefdc30f95c4aa13771ac
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3810
Cache-Control: max-age=126980
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 06:06:06 GMT
Etag: "63920e71-116"
Expires: Sat, 10 Dec 2022 17:22:26 GMT
Last-Modified: Thu, 08 Dec 2022 16:18:57 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 278
|
|
| ui.4tube.com/assets/img/friends/fux-0f7d69803b.png | 104.20.224.111 | 200 OK | 31 kB |
URL HTTP/2ui.4tube.com/assets/img/friends/fux-0f7d69803b.png IP104.20.224.111:0
File typePNG image data, 85 x 40, 8-bit/color RGBA, non-interlaced\012- data Hash7c6a3428a1befeab8c8be7fd88718e13 e1947eae1d061be08e1ea0a7c5412ec4876dc83a 0623ceb86c0adf4e4543f97b37b73378d53d80b8de1081918ec68364bb59c728
GET /assets/img/friends/fux-0f7d69803b.png HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ui.4tube.com/assets/styles_4tube-8f857004d5.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: image/png
cache-control: max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
access-control-allow-origin: *
etag: "1b0f-5ee33736fc1c0"
expires: Sat, 10 Dec 2022 06:01:37 GMT
last-modified: Thu, 24 Nov 2022 08:47:11 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 268
server: cloudflare
cf-ray: 776b8d851a8fb517-OSL
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 278 B |
IP93.184.220.29:0
Hash361aa366131208557ffe6dc24f3ab55c eede2130a586e197687fa44991862c359b4c61fc d87017c6d67f1fe3130df85a4df5d9c0899fa9a1c52fefdc30f95c4aa13771ac
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3810
Cache-Control: max-age=126980
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 06:06:06 GMT
Etag: "63920e71-116"
Expires: Sat, 10 Dec 2022 17:22:26 GMT
Last-Modified: Thu, 08 Dec 2022 16:18:57 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 278
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash5aeb5d8356cb1f641dd04b92c4216111 c349a33d3fbeecae680357717b8d5e2f392e6e6e c08554e58f5eeabf6295c9661d7a1d612bc1f4c22bdcfb453bac5b7460b44967
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C08554E58F5EEABF6295C9661D7A1D612BC1F4C22BDCFB453BAC5B7460B44967"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3635
Expires: Fri, 09 Dec 2022 07:06:41 GMT
Date: Fri, 09 Dec 2022 06:06:06 GMT
Connection: keep-alive
|
|
| syndication.realsrv.com/v1/api.php | 95.211.229.246 | 200 OK | 5.3 kB |
URL HTTP/1.1syndication.realsrv.com/v1/api.php IP95.211.229.246:0 ASN#60781 LeaseWeb Netherlands B.V.
File typeJSON data\012- , ASCII text, with very long lines (9372), with no line terminators Hashf9f1e23e186bfddc03c28db9b8500b99 c29d34b14d2468e39a99ad0e42a512a7fefe02af 49efe82ea0438f8396723f48ca67fa19ba679b76e2db34fc37c38c454ca91ce1
POST /v1/api.php HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 374
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392d04e089cc5.020911803595900563%22%3B%7D; expires=Sun, 08-Dec-2024 06:06:06 GMT; Max-Age=63072000; path=/; domain=realsrv.com; secure; SameSite=None
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01Py04DMQz8FX5gV2PHzsac4QpSUT8gTbY34ECRijQfT3aLKmxLHj/HVqhOohPiAfKIPIwhc2A2ncWNL68HmtAu36d1bp/vFAO8UJDEjFK02EJTK0sxOgotiUdRWmjGKNDARAxVT2NkoBkQBvh8PPD49jQS4ckp1JHFVR0Db8xUcJAQ132+n6Nr7+up1nRqnlOPYtmLSiSvsjX+uxQ3nSF5X/0Xcxye1JST3APjEHAv16+fj0be23H7Ljbk+5pBZLY5mlVUaWvLUs6rt1glB0pdFKtK11+sggL2XwEAAA== | 95.211.229.246 | 200 OK | 20 B |
URL HTTP/1.1syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01Py04DMQz8FX5gV2PHzsac4QpSUT8gTbY34ECRijQfT3aLKmxLHj/HVqhOohPiAfKIPIwhc2A2ncWNL68HmtAu36d1bp/vFAO8UJDEjFK02EJTK0sxOgotiUdRWmjGKNDARAxVT2NkoBkQBvh8PPD49jQS4ckp1JHFVR0Db8xUcJAQ132+n6Nr7+up1nRqnlOPYtmLSiSvsjX+uxQ3nSF5X/0Xcxye1JST3APjEHAv16+fj0be23H7Ljbk+5pBZLY5mlVUaWvLUs6rt1glB0pdFKtK11+sggL2XwEAAA== IP95.211.229.246:0 ASN#60781 LeaseWeb Netherlands B.V.
Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA01Py04DMQz8FX5gV2PHzsac4QpSUT8gTbY34ECRijQfT3aLKmxLHj/HVqhOohPiAfKIPIwhc2A2ncWNL68HmtAu36d1bp/vFAO8UJDEjFK02EJTK0sxOgotiUdRWmjGKNDARAxVT2NkoBkQBvh8PPD49jQS4ckp1JHFVR0Db8xUcJAQ132+n6Nr7+up1nRqnlOPYtmLSiSvsjX+uxQ3nSF5X/0Xcxye1JST3APjEHAv16+fj0be23H7Ljbk+5pBZLY5mlVUaWvLUs6rt1glB0pdFKtK11+sggL2XwEAAA== HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392d04e089cc5.020911803595900563%22%3B%7D; __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.029701%22%7D; expires=Sun, 08 Dec 2024 06:06:06 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| s3t3d2y8.afcdn.net/library/428515/afaf6b58a8d6050615369f81598d4bd126bd021e.webp |  185.76.9.18 | 200 OK | 13 kB |
URL HTTP/2s3t3d2y8.afcdn.net/library/428515/afaf6b58a8d6050615369f81598d4bd126bd021e.webp IP185.76.9.18:0 ASN#60068 Datacamp Limited
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 300x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash8da76954e810412b8ec5378d8480ab45 afaf6b58a8d6050615369f81598d4bd126bd021e 4f186cbdc1268f6ab21f0e5bc6dfa6dce0c52fb60dec007a79e2c41d41bc4293
GET /library/428515/afaf6b58a8d6050615369f81598d4bd126bd021e.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:06 GMT
content-type: image/webp
content-length: 13180
last-modified: Fri, 31 Dec 2021 10:19:16 GMT
etag: "61ced924-337c"
expires: Fri, 30 Jun 2023 11:26:51 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195238
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ0zN07/KDPUAA
x-77-nzt-ray: c0a4cc2820a2447c4ed09263de607d2c
x-cache: HIT
x-age: 13906728
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| s3t3d2y8.afcdn.net/library/428515/5ceded664676db96d2b3b5382cb17da5e728eefc.webp | 185.76.9.18 | 200 OK | 12 kB |
URL HTTP/2s3t3d2y8.afcdn.net/library/428515/5ceded664676db96d2b3b5382cb17da5e728eefc.webp IP185.76.9.18:0 ASN#60068 Datacamp Limited
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 300x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hashf873befbe3e52bba71c605062b1ff845 5ceded664676db96d2b3b5382cb17da5e728eefc 480a21117ecb1dac929af83d77cf4e57cb2342a2d424c5b798edf6379d472a41
GET /library/428515/5ceded664676db96d2b3b5382cb17da5e728eefc.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:06 GMT
content-type: image/webp
content-length: 12098
last-modified: Fri, 31 Dec 2021 10:19:16 GMT
etag: "61ced924-2f42"
expires: Fri, 30 Jun 2023 11:13:27 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195274
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ3TTyv/BDPUAA
x-77-nzt-ray: c0a4cc2820a2447c4ed09263dc54a22c
x-cache: HIT
x-age: 13906692
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ui.4tube.com/assets/font/fontello-7ea675e0b8.woff | 104.20.224.111 | 200 OK | 13 kB |
URL HTTP/2ui.4tube.com/assets/font/fontello-7ea675e0b8.woff IP104.20.224.111:0
File typeWeb Open Font Format, TrueType, length 12004, version 1.0\012- data Hash8443ed44aa784976693563bb555eda07 67422b5aa5c9ca8c445ecac43a5e64e93d921123 12cc4e182de42d6f278a4ee618053cc9f344140a84473a74796030aefe9481d0
GET /assets/font/fontello-7ea675e0b8.woff HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://ui.4tube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: application/font-woff
access-control-allow-origin: *
etag: W/"2ee4-5ee33736fc1c0"
last-modified: Thu, 24 Nov 2022 08:47:11 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 424
server: cloudflare
cf-ray: 776b8d852a9eb517-OSL
X-Firefox-Spdy: h2
|
|
| www.4tube.com/comments/650184 | 104.20.224.111 | 200 OK | 397 B |
URL HTTP/2www.4tube.com/comments/650184 IP104.20.224.111:0
Hash11252630cbd0d486c3267d00f06a9af0 5d97972d517ae0dc29eb75c94a0e71355410e266 3f27b2c6b2752af66135839d2339777e37e7e8a50aa5c4785bd039d9326c0357
GET /comments/650184 HTTP/1.1
Host: www.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.4tube.com/videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es
Cookie: 4tube_ad={"ntva":0,"ntvb":0,"footer":0,"listings":0,"playerAd":0,"autoNextAd":0,"adblock-popunder-mediareps":0,"adblock-banner":0,"adblock-notice":0,"adblock-popunder-exoclick":0,"footer-exoclick":2,"listings-exoclick":0,"mobile-below-player-exoclick":0,"mobile-footer-exoclick":0,"mobile-middle-banner-exoclick":0,"mobile-videolist-top-exoclick":0,"non_cpp-exoclick":0,"ntva-exoclick":0,"ntvb-exoclick":0,"playerAd-exoclick":0,"vast-ad":0,"push-notification":0,"pop-up":0,"mobile-popunder":0}
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:06 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=1800
vary: Accept-Encoding, Accept-Encoding
x-powered-by: PHP/5.6.40-63+ubuntu18.04.1+deb.sury.org+2
cf-cache-status: MISS
last-modified: Fri, 09 Dec 2022 06:06:06 GMT
server: cloudflare
cf-ray: 776b8d85db19b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn-thumbs.4tube.com/8/0/1/3/6/1/7/4/4/100x75/1.jpeg | 143.204.55.52 | 200 OK | 3.2 kB |
URL HTTP/2cdn-thumbs.4tube.com/8/0/1/3/6/1/7/4/4/100x75/1.jpeg IP143.204.55.52:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x75, components 3\012- data Hash2a6ef45ae5e685587db6e7b7836469ee a5e151ca932fd25efd9337418185e57413628e22 e57a94b705bbdaa55b299ce7e5976724a54ae09b9b0cfeabe8bd08a8e022f7ce
GET /8/0/1/3/6/1/7/4/4/100x75/1.jpeg HTTP/1.1
Host: cdn-thumbs.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Cookie: __utma=196175913.43532277.1670565965.1670565965.1670565965.1; __utmb=196175913.0.10.1670565965; __utmc=196175913; __utmz=196175913.1670565965.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3247
last-modified: Fri, 28 Jan 2022 11:32:16 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 09 Dec 2022 06:06:07 GMT
etag: "2a6ef45ae5e685587db6e7b7836469ee"
x-cache: RefreshHit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: k2nSrmcSq17bZLiqD0thzHq7QObfKGZ7rHLfCCwZXK5S0zjSXCdyRQ==
cache-contol: max-age=15552000
X-Firefox-Spdy: h2
|
|
| syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01Py07EMAz8FX6gkZ+pzRmuIC3aD0ibcgMOgLRI8/GkXbQizmE8tsdjIZGJZaK8I76nOj6SS1IxKeyGp+cTjGFf38tW1o83mISzg0nZDBwSNg/SYo4Kp4BFdYvATJTVssIIChohrmNkoEJErEjC4/mE88vDoNJ1qEKgRBdxGnjfvU+PNaDLodBfs0vv29KaLqtX7RlWPYRTvfHe+M8rXaNU4npo/xEY3lVMMPEtMYxHOMrt8+d9BW7tdD0wd+SHjKHuDtHWzfuSWnvbIiQ3N+mz1tWicZD8AhSRobVgAQAA | 95.211.229.246 | 200 OK | 20 B |
URL HTTP/1.1syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01Py07EMAz8FX6gkZ+pzRmuIC3aD0ibcgMOgLRI8/GkXbQizmE8tsdjIZGJZaK8I76nOj6SS1IxKeyGp+cTjGFf38tW1o83mISzg0nZDBwSNg/SYo4Kp4BFdYvATJTVssIIChohrmNkoEJErEjC4/mE88vDoNJ1qEKgRBdxGnjfvU+PNaDLodBfs0vv29KaLqtX7RlWPYRTvfHe+M8rXaNU4npo/xEY3lVMMPEtMYxHOMrt8+d9BW7tdD0wd+SHjKHuDtHWzfuSWnvbIiQ3N+mz1tWicZD8AhSRobVgAQAA IP95.211.229.246:0 ASN#60781 LeaseWeb Netherlands B.V.
Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA01Py07EMAz8FX6gkZ+pzRmuIC3aD0ibcgMOgLRI8/GkXbQizmE8tsdjIZGJZaK8I76nOj6SS1IxKeyGp+cTjGFf38tW1o83mISzg0nZDBwSNg/SYo4Kp4BFdYvATJTVssIIChohrmNkoEJErEjC4/mE88vDoNJ1qEKgRBdxGnjfvU+PNaDLodBfs0vv29KaLqtX7RlWPYRTvfHe+M8rXaNU4npo/xEY3lVMMPEtMYxHOMrt8+d9BW7tdD0wd+SHjKHuDtHWzfuSWnvbIiQ3N+mz1tWicZD8AhSRobVgAQAA HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392d04e089cc5.020911803595900563%22%3B%7D; __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.029701%22%7D; expires=Sun, 08 Dec 2024 06:06:06 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01PS07DQAy9ChdI5O+MzRq2VCrqASZJswMWFKlI7/CdpKjCtuTn37MtJDKwDJRPxM9UuiF5TBpNRnbD2+EIY9jlZzqP89cHVNJdwKRsBg4JqzCxqFHgFHDljBBUL0RZCoygoK7i2kc2lITX0xGn9xfQmK4OhkCJruLU8bYVsiEGXffZZc1FluU8tabT7EWXDCsewqne9sZ/V9JdO3eJnfsvgX61igkGfgSGLoS93L5/P2fg0U7313JDvtP0TWabw1plCnfLlLXURlSb93BV12pzTjeecpijXAEAAA== | 95.211.229.246 | 200 OK | 20 B |
URL HTTP/1.1syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01PS07DQAy9ChdI5O+MzRq2VCrqASZJswMWFKlI7/CdpKjCtuTn37MtJDKwDJRPxM9UuiF5TBpNRnbD2+EIY9jlZzqP89cHVNJdwKRsBg4JqzCxqFHgFHDljBBUL0RZCoygoK7i2kc2lITX0xGn9xfQmK4OhkCJruLU8bYVsiEGXffZZc1FluU8tabT7EWXDCsewqne9sZ/V9JdO3eJnfsvgX61igkGfgSGLoS93L5/P2fg0U7313JDvtP0TWabw1plCnfLlLXURlSb93BV12pzTjeecpijXAEAAA== IP95.211.229.246:0 ASN#60781 LeaseWeb Netherlands B.V.
Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA01PS07DQAy9ChdI5O+MzRq2VCrqASZJswMWFKlI7/CdpKjCtuTn37MtJDKwDJRPxM9UuiF5TBpNRnbD2+EIY9jlZzqP89cHVNJdwKRsBg4JqzCxqFHgFHDljBBUL0RZCoygoK7i2kc2lITX0xGn9xfQmK4OhkCJruLU8bYVsiEGXffZZc1FluU8tabT7EWXDCsewqne9sZ/V9JdO3eJnfsvgX61igkGfgSGLoS93L5/P2fg0U7313JDvtP0TWabw1plCnfLlLXURlSb93BV12pzTjeecpijXAEAAA== HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392d04e089cc5.020911803595900563%22%3B%7D; __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.029701%22%7D; expires=Sun, 08 Dec 2024 06:06:06 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| s3t3d2y8.afcdn.net/library/140058/f857eac9936002c25cdf21d42636d417e83adae9.mp4 | 185.76.9.18 | 206 Partial Content | 79 kB |
URL HTTP/2s3t3d2y8.afcdn.net/library/140058/f857eac9936002c25cdf21d42636d417e83adae9.mp4 IP185.76.9.18:0 ASN#60068 Datacamp Limited
File typeISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data Hashc476e00f5232c13a8a971cee804a6277 f857eac9936002c25cdf21d42636d417e83adae9 7d070eb938ac3b2524296c4f51dec3b567c72298b30f35c9c72161544c554da5
GET /library/140058/f857eac9936002c25cdf21d42636d417e83adae9.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Fri, 09 Dec 2022 06:06:06 GMT
content-type: video/mp4
content-length: 78972
last-modified: Fri, 27 Mar 2020 00:09:40 GMT
etag: "5e7d4444-1347c"
expires: Fri, 30 Jun 2023 11:21:21 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195274
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ2lD5z/BDPUAA
x-77-nzt-ray: c0a4cc2820a2447c4ed09263b4fe762e
x-cache: HIT
x-age: 13906692
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-78971/78972
X-Firefox-Spdy: h2
|
|
| syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01PSU7EQAz8Ch9IVN46bc5wBWnQPCDpTG7AAZAGqR5PJ6ARLksuy+VNoTqIDsg7yD1Kd6aMidF1lHA+PZ/oQv/8Wi5je3+laUYoBSbulKrVJ7p6nWphoDJMslblFAXIUumgER0a1lt2luDj+cTzywMxZlhQqDTgqoHO963UnQlxPXrXLVdd18syz7a0KLZm9RJVJS3mQ/jvShyQEah2zMYf+tWmrhzklji7gUd5/vh+a+RNjt/XcmdxjOmb3PfALbxtWsT8sjabpkDOrWxbLc3MBD8q+D1qXAEAAA== | 95.211.229.246 | 200 OK | 20 B |
URL HTTP/1.1syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01PSU7EQAz8Ch9IVN46bc5wBWnQPCDpTG7AAZAGqR5PJ6ARLksuy+VNoTqIDsg7yD1Kd6aMidF1lHA+PZ/oQv/8Wi5je3+laUYoBSbulKrVJ7p6nWphoDJMslblFAXIUumgER0a1lt2luDj+cTzywMxZlhQqDTgqoHO963UnQlxPXrXLVdd18syz7a0KLZm9RJVJS3mQ/jvShyQEah2zMYf+tWmrhzklji7gUd5/vh+a+RNjt/XcmdxjOmb3PfALbxtWsT8sjabpkDOrWxbLc3MBD8q+D1qXAEAAA== IP95.211.229.246:0 ASN#60781 LeaseWeb Netherlands B.V.
Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA01PSU7EQAz8Ch9IVN46bc5wBWnQPCDpTG7AAZAGqR5PJ6ARLksuy+VNoTqIDsg7yD1Kd6aMidF1lHA+PZ/oQv/8Wi5je3+laUYoBSbulKrVJ7p6nWphoDJMslblFAXIUumgER0a1lt2luDj+cTzywMxZlhQqDTgqoHO963UnQlxPXrXLVdd18syz7a0KLZm9RJVJS3mQ/jvShyQEah2zMYf+tWmrhzklji7gUd5/vh+a+RNjt/XcmdxjOmb3PfALbxtWsT8sjabpkDOrWxbLc3MBD8q+D1qXAEAAA== HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392d04e089cc5.020911803595900563%22%3B%7D; __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.029701%22%7D; expires=Sun, 08 Dec 2024 06:06:06 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| s3t3d2y8.afcdn.net/library/428515/ede74c7bceaa7703fd30a60d5d9f04ca5eac5716.mp4 | 185.76.9.18 | 206 Partial Content | 33 kB |
URL HTTP/2s3t3d2y8.afcdn.net/library/428515/ede74c7bceaa7703fd30a60d5d9f04ca5eac5716.mp4 IP185.76.9.18:0 ASN#60068 Datacamp Limited
File typeISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data Hash1413cd1c8cc4a6653851bdfc54fdb32f ede74c7bceaa7703fd30a60d5d9f04ca5eac5716 41f006ad3d3978487383e7cdf609bbd8041bb1fd2af17b81874d80eaad003235
GET /library/428515/ede74c7bceaa7703fd30a60d5d9f04ca5eac5716.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Fri, 09 Dec 2022 06:06:06 GMT
content-type: video/mp4
content-length: 33263
last-modified: Fri, 31 Dec 2021 10:19:17 GMT
etag: "61ced925-81ef"
expires: Fri, 30 Jun 2023 11:26:36 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195204
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ0ruL//SjPUAA
x-77-nzt-ray: c0a4cc2820a2447c4ed09263ad12852e
x-cache: HIT
x-age: 13906762
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-33262/33263
X-Firefox-Spdy: h2
|
|
| s3t3d2y8.afcdn.net/library/329552/761363e798a875a0829c39b12768b2304f80e7e2.mp4 | 185.76.9.18 | 206 Partial Content | 21 kB |
URL HTTP/2s3t3d2y8.afcdn.net/library/329552/761363e798a875a0829c39b12768b2304f80e7e2.mp4 IP185.76.9.18:0 ASN#60068 Datacamp Limited
File typeISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data Hash99a55e7e69987a5dcc2372ce658a8068 761363e798a875a0829c39b12768b2304f80e7e2 8c0ad2bb61f035d8478cb5dc22e4a6c7b26400e6faff5726a06b514a87195593
GET /library/329552/761363e798a875a0829c39b12768b2304f80e7e2.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Fri, 09 Dec 2022 06:06:06 GMT
content-type: video/mp4
content-length: 20718
last-modified: Fri, 02 Sep 2022 12:36:46 GMT
etag: "6311f8de-50ee"
expires: Sat, 02 Sep 2023 13:02:26 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1693659747
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ1H90b/a9GAAA
x-77-nzt-ray: c0a4cc2820a2447c4ed0926321a98f2e
x-cache: HIT
x-age: 8442219
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-20717/20718
X-Firefox-Spdy: h2
|
|
| syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01PSU7EMBD8Ch+IVd3u9sKZuYI0aB4Qx8kNOADSINXjcTJohMuSl+6uRaE6iU6oD5BHpLFZJVQE0yBufH4504T29d3WsHy8sUBNjYIoNo6ixTLHT8kl0VHolkUczFkBhdHASAyoxzECesBpclbwdDnz8vpEhOrRKVRG4KpjXA7pIcChQlwPgr7Vrr2vbZ5jWzzFXoslLyo1+ix74z+rOCABjhs3/jCsx5GCk9wfxrHAozx//rwv5L0dt3x1v/lBoxzhd49cvCB5bUWTtOI9ryZlq62L5q1j+QV6rMxxYQEAAA== | 95.211.229.246 | 200 OK | 20 B |
URL HTTP/1.1syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01PSU7EMBD8Ch+IVd3u9sKZuYI0aB4Qx8kNOADSINXjcTJohMuSl+6uRaE6iU6oD5BHpLFZJVQE0yBufH4504T29d3WsHy8sUBNjYIoNo6ixTLHT8kl0VHolkUczFkBhdHASAyoxzECesBpclbwdDnz8vpEhOrRKVRG4KpjXA7pIcChQlwPgr7Vrr2vbZ5jWzzFXoslLyo1+ix74z+rOCABjhs3/jCsx5GCk9wfxrHAozx//rwv5L0dt3x1v/lBoxzhd49cvCB5bUWTtOI9ryZlq62L5q1j+QV6rMxxYQEAAA== IP95.211.229.246:0 ASN#60781 LeaseWeb Netherlands B.V.
Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA01PSU7EMBD8Ch+IVd3u9sKZuYI0aB4Qx8kNOADSINXjcTJohMuSl+6uRaE6iU6oD5BHpLFZJVQE0yBufH4504T29d3WsHy8sUBNjYIoNo6ixTLHT8kl0VHolkUczFkBhdHASAyoxzECesBpclbwdDnz8vpEhOrRKVRG4KpjXA7pIcChQlwPgr7Vrr2vbZ5jWzzFXoslLyo1+ix74z+rOCABjhs3/jCsx5GCk9wfxrHAozx//rwv5L0dt3x1v/lBoxzhd49cvCB5bUWTtOI9ryZlq62L5q1j+QV6rMxxYQEAAA== HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226392d04e089cc5.020911803595900563%22%3B%7D; __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Dec 2022 06:06:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.4tube.com
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.029701%22%7D; expires=Sun, 08 Dec 2024 06:06:06 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7b8c1870f03a90aac6370fc69516f95f 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20424
Expires: Fri, 09 Dec 2022 11:46:30 GMT
Date: Fri, 09 Dec 2022 06:06:06 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7b8c1870f03a90aac6370fc69516f95f 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20424
Expires: Fri, 09 Dec 2022 11:46:30 GMT
Date: Fri, 09 Dec 2022 06:06:06 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7b8c1870f03a90aac6370fc69516f95f 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20424
Expires: Fri, 09 Dec 2022 11:46:30 GMT
Date: Fri, 09 Dec 2022 06:06:06 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7b8c1870f03a90aac6370fc69516f95f 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20424
Expires: Fri, 09 Dec 2022 11:46:30 GMT
Date: Fri, 09 Dec 2022 06:06:06 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7b1b2f1-0b18-4097-a282-a7ddd9b33b97.jpeg | 34.120.237.76 | 200 OK | 6.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7b1b2f1-0b18-4097-a282-a7ddd9b33b97.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash3cb7655c8fe89a83f0096c51684aa21c 4946fcab2a99d926c45abaecf8f97b6214dee0cd 60a3066f2dcc2f696413ecec56ef1d0c1a9392f6845fac5c4319b8b9e02074fd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7b1b2f1-0b18-4097-a282-a7ddd9b33b97.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6637
x-amzn-requestid: dfcef102-5fc6-4a59-bb21-ff0532c9fdda
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlg4GtVIAMFdTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb605-0c2f58da0ae148fb4d698ecc;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jQs6m8oGHeWNYbOnPM34f-YW75VuH0yNWU-TzoDMOkYcwGa9BfqBhA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 21:51:22 GMT
age: 29684
etag: "4946fcab2a99d926c45abaecf8f97b6214dee0cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| s3t3d2y8.afcdn.net/library/802424/a4d0ad9192cd523343ae4942041e29c4bcf16a99.mp4 | 185.76.9.18 | 206 Partial Content | 447 kB |
URL HTTP/2s3t3d2y8.afcdn.net/library/802424/a4d0ad9192cd523343ae4942041e29c4bcf16a99.mp4 IP185.76.9.18:0 ASN#60068 Datacamp Limited
File typeISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data Size447 kB (447264 bytes) Hash822ebecc3238143e7fec261d97a259dd e0629d354b92a0181324d0907290883585968d17 f2092e3bbeb91aa8fed6b47fd1840e867004220ca72d971d4c1247c1793321b1
GET /library/802424/a4d0ad9192cd523343ae4942041e29c4bcf16a99.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Fri, 09 Dec 2022 06:06:06 GMT
content-type: video/mp4
content-length: 548960
last-modified: Fri, 18 Nov 2022 08:36:01 GMT
etag: "637743f1-86060"
expires: Sat, 18 Nov 2023 08:42:49 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
x-accel-expires: @1700302505
server: CDN77-Turbo
x-77-nzt: AblMCQ0MBOT/JXUbAA
x-77-nzt-ray: c0a4cc2820a2447c4ed0926344ec952e
x-cache: HIT
x-age: 1799461
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-548959/548960
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg | 34.120.237.76 | 200 OK | 5.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashfba9a3854df65740512f96efe7442e58 8fbff7725c842d70e047c635a725723a9dc9c55a 6e639298ebc82343cee9267d2910d15735af55f910e2c3de9218266b7c6fffc9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5188
x-amzn-requestid: afb8cbd2-3674-4dac-9cd9-9ff83618ac0a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ck2-5G9joAMFlPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638b6b92-2979ff216b9028aa70baef8b;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 15:30:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dGxzuQ6zj6wXQbkBuKBnOKxwKJDHUyGoi7PgcugcpdX4QYruNiFxsQ==
via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 21:51:24 GMT
age: 29682
etag: "8fbff7725c842d70e047c635a725723a9dc9c55a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F042317d8-45b6-4c5f-8767-ff9367c24193.jpeg | 34.120.237.76 | 200 OK | 8.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F042317d8-45b6-4c5f-8767-ff9367c24193.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash46275ec87d8221804dbb99f95b035131 c47af4e5770daad212f4290527b00321285105f8 2118ec68c738683d8f7e11b95239ca92fda2b9b5054aa7b128267eec0d0634c5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F042317d8-45b6-4c5f-8767-ff9367c24193.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8803
x-amzn-requestid: e8516be3-5ce9-4f15-b522-c81c1e57a0e2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjtK9GavoAMFjpA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638af579-538cc8f300938698004f2241;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 07:06:33 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MiOdXHxd9Vmeji8Yqd8LG_EqYoMGf0YBy6by9bhfjb12y1OxKVvvqw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 03:56:08 GMT
age: 7798
etag: "c47af4e5770daad212f4290527b00321285105f8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg | 34.120.237.76 | 200 OK | 7.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5de5d319f43d9c9c641419d96655541f cde4c7fa0145d3645af17e34c83c63c08f76a076 fdb114eb142f035c7a54195d16af51b5b423642c312f4bccc0f407d8fcc245aa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7557
x-amzn-requestid: 09204b5e-8af5-4d4b-8186-628443866e0f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctlz5EISoAMFdWw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638ee9b2-357cd4f921c592e1319098dd;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 07:05:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 3KZwQ5HqXa_-tUyDHA5m-65OprogFpFgbbKpEJ65k-Yy3lwoCg8M5w==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 07:15:07 GMT
age: 82259
etag: "cde4c7fa0145d3645af17e34c83c63c08f76a076"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg | 34.120.237.76 | 200 OK | 6.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash8546542f00ea29ef4df6ab8d3c7c2164 5c8ffe91490006a9890188b53f875568c2b6bd8f 7fb11750ac339ac283da62fd370862c6b95a103a585ca5dd8c90038718d818a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6578
x-amzn-requestid: 6392feb9-e33e-42fa-bc10-b5e31e654c9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cw4beGG7oAMF8hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63903aaf-2c890b7b0a16617346a0f7e7;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 07:03:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7DwFYUoAI9x-ruRySpsSAXQZnxrXxUACrXp568TGZ2JSppZ1UC0uWg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 07:09:44 GMT
age: 82582
etag: "5c8ffe91490006a9890188b53f875568c2b6bd8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.118 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.118:0
Hash4d2e21e8800931876c361b3e7986e381 0632849277cee999e2c76c680e73da95a060164a b675d79ec98f0efdac14732b42c4e652c7f5288dd02081e1686b49d4f53bd434
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 09 Dec 2022 06:06:07 GMT
Last-Modified: Fri, 09 Dec 2022 04:24:48 GMT
Server: ECS (dcb/7F83)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Y0_heru1M-aptQN1eDxu-5icUzxNMKpY0xM34TgjK-SS4-yDZAYe1g==
Age: 6079
|
|
| ukdliketobepa.monster/utx?tid=737551&top=www.4tube.com&cb=sSQbYoP3lNwE | 54.230.111.27 | 204 No Content | 0 B |
URL HTTP/2ukdliketobepa.monster/utx?tid=737551&top=www.4tube.com&cb=sSQbYoP3lNwE IP54.230.111.27:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?tid=737551&top=www.4tube.com&cb=sSQbYoP3lNwE HTTP/1.1
Host: ukdliketobepa.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 09 Dec 2022 06:06:07 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://www.4tube.com
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Fri, 09 Dec 2022 06:07:07 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aabvP0AGDtWrsZaZR6SLI657Jxpiv0c1bKwjM1ssz_2rZyFgnIysGg==
X-Firefox-Spdy: h2
|
|
| ksehinkitw.hair/ | 54.162.51.18 | 200 OK | 0 B |
IP54.162.51.18:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: ksehinkitw.hair
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 384
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash623c61495a86cd5a8b05d09652f6d4fb 0b3a5b5eb9b0030d0b5e8804b09bf0cdca50d951 ce19b89c6edcb171393f6ea3de564749abf2e8ef17844ec838e3c34e61394f75
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6253
Cache-Control: max-age=127273
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 06:06:07 GMT
Etag: "6392060b-117"
Expires: Sat, 10 Dec 2022 17:27:20 GMT
Last-Modified: Thu, 08 Dec 2022 15:43:07 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash623c61495a86cd5a8b05d09652f6d4fb 0b3a5b5eb9b0030d0b5e8804b09bf0cdca50d951 ce19b89c6edcb171393f6ea3de564749abf2e8ef17844ec838e3c34e61394f75
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6253
Cache-Control: max-age=127273
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 06:06:07 GMT
Etag: "6392060b-117"
Expires: Sat, 10 Dec 2022 17:27:20 GMT
Last-Modified: Thu, 08 Dec 2022 15:43:07 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 279
|
|
| ksehinkitw.hair/ | 54.162.51.18 | 200 OK | 0 B |
IP54.162.51.18:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: ksehinkitw.hair
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.4tube.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://www.4tube.com
Content-Length: 353
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ksehinkitw.hair/ | 54.162.51.18 | 200 OK | 0 B |
IP54.162.51.18:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: ksehinkitw.hair
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.4tube.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://www.4tube.com
Content-Length: 348
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7c8d82bc4268bea3bf709f683adc2464 6440b1c3feca81d54e29f4e7634cc82c45f1daa0 d2636dafd6ca03dc23ab9455589120eeb2a6d4869cd7a988356b5c0eaab3fdc4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D2636DAFD6CA03DC23AB9455589120EEB2A6D4869CD7A988356B5C0EAAB3FDC4"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4222
Expires: Fri, 09 Dec 2022 07:16:30 GMT
Date: Fri, 09 Dec 2022 06:06:08 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash1383cff6942d1a5e4890ed17f84e6c64 bf1b80f97e427d5eb95beacbca9cf9db20629935 c94785aed97bd5405b207bbb8643ec5ea3ea9c1d052a2020a442722519bca22b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C94785AED97BD5405B207BBB8643EC5EA3EA9C1D052A2020A442722519BCA22B"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2138
Expires: Fri, 09 Dec 2022 06:41:46 GMT
Date: Fri, 09 Dec 2022 06:06:08 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash8674debafbbd0b0fe482f4423bea4d37 191e5e52a9fb633fbacaa4d37a7e54ea2c3bfe5b 80a921c7dc30c16227895553dfab60d52b27c6384a4c507a0cbc3c72f88029f2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "80A921C7DC30C16227895553DFAB60D52B27C6384A4C507A0CBC3C72F88029F2"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9514
Expires: Fri, 09 Dec 2022 08:44:43 GMT
Date: Fri, 09 Dec 2022 06:06:09 GMT
Connection: keep-alive
|
|
| crmt.livejasmin.com/post/play?ms_rnd=1670565968.30565&pstool=400_31&psid=ed_4tubedtint&utm_source=ptb&category=girl&site=jsm&utm_medium=partner&preload=1&origin=www.4tube.com |  93.93.51.191 | 200 OK | 8.0 kB |
URL HTTP/2crmt.livejasmin.com/post/play?ms_rnd=1670565968.30565&pstool=400_31&psid=ed_4tubedtint&utm_source=ptb&category=girl&site=jsm&utm_medium=partner&preload=1&origin=www.4tube.com IP93.93.51.191:0 ASN#34655 DuoDecad IT Services Luxembourg S.a r.l.
Hashc9d002273ee503b2bf529a6ff4e5a9ff 6fece6098ff3300f1a3836c06a52c9b2a2bc12e9 e5135fb03f847409546a63af2b31ba44240111cc6472986b6910cf4eb33e9d6a
GET /post/play?ms_rnd=1670565968.30565&pstool=400_31&psid=ed_4tubedtint&utm_source=ptb&category=girl&site=jsm&utm_medium=partner&preload=1&origin=www.4tube.com HTTP/1.1
Host: crmt.livejasmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crjpgate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: no-cache
date: Fri, 09 Dec 2022 06:06:08 GMT
server: unknown
set-cookie: psui=a59f007fbf3384ccc33cc586d5d348f0; Path=/; Expires=Sun, 08-Jan-23 06:06:08 GMT; SameSite=None; Secure
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 52 kB |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
File typegzip compressed data, from Unix\012- data Hash5ded38ff4edb06f63d2a9ee7747f8d71 e8539563dcef0960536203b18f2b0251b3fc300a ee4a4ef99b4d9b155755b2f0261f9849c61b155ddc5957e1dbb31d85a8d95f43
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "80A921C7DC30C16227895553DFAB60D52B27C6384A4C507A0CBC3C72F88029F2"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9514
Expires: Fri, 09 Dec 2022 08:44:43 GMT
Date: Fri, 09 Dec 2022 06:06:09 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash8674debafbbd0b0fe482f4423bea4d37 191e5e52a9fb633fbacaa4d37a7e54ea2c3bfe5b 80a921c7dc30c16227895553dfab60d52b27c6384a4c507a0cbc3c72f88029f2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "80A921C7DC30C16227895553DFAB60D52B27C6384A4C507A0CBC3C72F88029F2"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9514
Expires: Fri, 09 Dec 2022 08:44:43 GMT
Date: Fri, 09 Dec 2022 06:06:09 GMT
Connection: keep-alive
|
|
| pt-static5.jsmsat.com/npe/_common/script/adblock/advertisement-v828265.js | 93.93.51.201 | 200 OK | 21 B |
URL HTTP/2pt-static5.jsmsat.com/npe/_common/script/adblock/advertisement-v828265.js IP93.93.51.201:0 ASN#34655 DuoDecad IT Services Luxembourg S.a r.l.
File typeASCII text, with no line terminators Hash01c6e7ecb819ef28b0c9b962513a1596 1a49f493db7b91ed34a7040d36732352b9a5dc39 e97a9988dce8067f81f57557b349dd481e0335e75175179b6b01322be2ff13a5
GET /npe/_common/script/adblock/advertisement-v828265.js HTTP/1.1
Host: pt-static5.jsmsat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crmt.livejasmin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:09 GMT
content-type: application/javascript
content-length: 21
last-modified: Thu, 08 Dec 2022 15:19:42 GMT
etag: "6392008e-15"
access-control-allow-origin: *
server: unknown
x-cdn-node: sesto
x-cache-status: R-HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-MJ29FD7 | 142.250.74.168 | 200 OK | 80 kB |
URL HTTP/2www.googletagmanager.com/gtm.js?id=GTM-MJ29FD7 IP142.250.74.168:0
File typeASCII text, with very long lines (57122) Hash29d4d32f135cd7c59084a1041749c996 3aff48fcf5c56e159d85d8fc9937aa8c9748eb85 a80384dcf2019e4eeb9fc63f1375c78afd70377a47fe036b99a3217dc5a526a7
GET /gtm.js?id=GTM-MJ29FD7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crmt.livejasmin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 09 Dec 2022 06:06:09 GMT
expires: Fri, 09 Dec 2022 06:06:09 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79716
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash053d5ee3a73d4a79d8f7a3a4627dccf2 972534bab0b8e3672e66ffc199d187dc7313d1db c60735a3efec92ee184496865b34f8a33816c7168f6e777f462d21e70608c532
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C60735A3EFEC92EE184496865B34F8A33816C7168F6E777F462D21E70608C532"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3496
Expires: Fri, 09 Dec 2022 07:04:25 GMT
Date: Fri, 09 Dec 2022 06:06:09 GMT
Connection: keep-alive
|
|
| pt-static4.jsmsat.com/npe/bonuscredit/css/bonuscredit-v828265.css | 93.93.51.201 | 200 OK | 9.3 kB |
URL HTTP/2pt-static4.jsmsat.com/npe/bonuscredit/css/bonuscredit-v828265.css IP93.93.51.201:0 ASN#34655 DuoDecad IT Services Luxembourg S.a r.l.
Hash19700c486181aac835ce16db0090b12d 119969784d122b8dbba873fbac558c0777ef9342 9f70a11750b502ba5dbfa74ef9ac3dc28ffd384a366745b2d7ed1f065532c03d
GET /npe/bonuscredit/css/bonuscredit-v828265.css HTTP/1.1
Host: pt-static4.jsmsat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crmt.livejasmin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:09 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 15:19:42 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"6392008e-961"
access-control-allow-origin: *
server: unknown
x-cdn-node: sesto
x-cache-status: R-HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash4cc4d28cc2c9625dc06a1c1b303729b1 07d6ab32eb4f461098d29e5be3e81a2c6118b1df d3b0fda566e7a2975eee59394c4fc978ed7e2ebe18798f2c537c94409268ffd4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3B0FDA566E7A2975EEE59394C4FC978ED7E2EBE18798F2C537C94409268FFD4"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4545
Expires: Fri, 09 Dec 2022 07:21:54 GMT
Date: Fri, 09 Dec 2022 06:06:09 GMT
Connection: keep-alive
|
|
| crmt.livejasmin.com/post/fslf?ms_rnd=1670565968.30565&pstool=400_18&psid=ed_4tubedtint&utm_source=ptb&site=jsm&utm_medium=partner&preload=1&origin=www.4tube.com&categoryName=girl&vp%5BautoPlay%5D=0&rrc=3 | 93.93.51.191 | 200 OK | 83 kB |
URL HTTP/2crmt.livejasmin.com/post/fslf?ms_rnd=1670565968.30565&pstool=400_18&psid=ed_4tubedtint&utm_source=ptb&site=jsm&utm_medium=partner&preload=1&origin=www.4tube.com&categoryName=girl&vp%5BautoPlay%5D=0&rrc=3 IP93.93.51.191:0 ASN#34655 DuoDecad IT Services Luxembourg S.a r.l.
Hashb33136fe95a690e82f2d678961fd622e 8afa9d206d0eda24170bb54521159a0779c7ee2a 3687b068e4fe39135505dec212186df9869cd4decab5112ff5b361d12cbcd635
GET /post/fslf?ms_rnd=1670565968.30565&pstool=400_18&psid=ed_4tubedtint&utm_source=ptb&site=jsm&utm_medium=partner&preload=1&origin=www.4tube.com&categoryName=girl&vp%5BautoPlay%5D=0&rrc=3 HTTP/1.1
Host: crmt.livejasmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crmt.livejasmin.com/post/play?ms_rnd=1670565968.30565&pstool=400_31&psid=ed_4tubedtint&utm_source=ptb&category=girl&site=jsm&utm_medium=partner&preload=1&origin=www.4tube.com
Cookie: psui=a59f007fbf3384ccc33cc586d5d348f0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: no-cache
date: Fri, 09 Dec 2022 06:06:09 GMT
server: unknown
set-cookie: psui=a59f007fbf3384ccc33cc586d5d348f0; Path=/; Expires=Sun, 08-Jan-23 06:06:09 GMT; SameSite=None; Secure
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| pt-static5.jsmsat.com/npe/bonuscredit/bonuscredit-v828265.js | 93.93.51.201 | 200 OK | 9.7 kB |
URL HTTP/2pt-static5.jsmsat.com/npe/bonuscredit/bonuscredit-v828265.js IP93.93.51.201:0 ASN#34655 DuoDecad IT Services Luxembourg S.a r.l.
Hash8ec41c79faf3246379006738307f7df9 addb0118b8c167746fd09be4f916490c835f703a ac276cb68ba4eb145e78f1d953700163662e45762b47302ce215023a5e8c70a3
GET /npe/bonuscredit/bonuscredit-v828265.js HTTP/1.1
Host: pt-static5.jsmsat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crmt.livejasmin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:09 GMT
content-type: application/javascript
last-modified: Thu, 08 Dec 2022 15:19:42 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"6392008e-61a9"
access-control-allow-origin: *
server: unknown
x-cdn-node: sesto
x-cache-status: R-HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.46 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.46:0
File typeASCII text, with very long lines (1325) Hash47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crmt.livejasmin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 09 Dec 2022 04:46:55 GMT
expires: Fri, 09 Dec 2022 06:46:55 GMT
cache-control: public, max-age=7200
age: 4755
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashbf8858fa52de668b0013cf9ce66d290c 9c319173ee6a48c6e717e9e8764008564aabe7ba 93df528ead5887cbbcf51f83c9e6ffa451861ae3145296ab3dfc269067080933
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 06:06:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 472 B |
IP172.64.155.188:0
Hash76c07b38421dbd540f99d468379a9312 cfd6116f1a295888a3f54273584a0ea487d79149 4ecacf6c2d8d80d8f470b6a830beda50a1f7cd115d39d6596b0202d5a927f1ef
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 06:06:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 07:51:00 GMT
Expires: Tue, 13 Dec 2022 07:50:59 GMT
Etag: "cfd6116f1a295888a3f54273584a0ea487d79149"
Cache-Control: max-age=351288,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 776b8da08dd0b4f7-OSL
|
|
| lsc-edge-95-128-120-32.dditscdn.com/memberChat/jasminAdaQuinn5276637abb175b76f12fce7e1fcdf1ec?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkb2NsZXIubHNjLmFwaSIsImF1ZCI6Ijk1LjEyOC4xMjAuMzIiLCJuaWNrIjoiQWRhUXVpbm4iLCJoYXNoIjoiNTI3NjYzN2FiYjE3NWI3NmYxMmZjZTdlMWZjZGYxZWMiLCJqdGkiOjI0ODg3NzM2MjA4MTgyMjUsImlhdCI6MTY3MDU2NTk2OSwiZXhwIjoxNjcwNTY2MDI5fQ.Qzo3YY6p5lMPEDV3-sXZs59_hf_lDZuGLJa4hnqz_vQ | 95.128.120.32 | 101 Switching Protocols | 0 B |
URL HTTP/1.1lsc-edge-95-128-120-32.dditscdn.com/memberChat/jasminAdaQuinn5276637abb175b76f12fce7e1fcdf1ec?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkb2NsZXIubHNjLmFwaSIsImF1ZCI6Ijk1LjEyOC4xMjAuMzIiLCJuaWNrIjoiQWRhUXVpbm4iLCJoYXNoIjoiNTI3NjYzN2FiYjE3NWI3NmYxMmZjZTdlMWZjZGYxZWMiLCJqdGkiOjI0ODg3NzM2MjA4MTgyMjUsImlhdCI6MTY3MDU2NTk2OSwiZXhwIjoxNjcwNTY2MDI5fQ.Qzo3YY6p5lMPEDV3-sXZs59_hf_lDZuGLJa4hnqz_vQ IP95.128.120.32:0 ASN#34655 DuoDecad IT Services Luxembourg S.a r.l.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /memberChat/jasminAdaQuinn5276637abb175b76f12fce7e1fcdf1ec?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkb2NsZXIubHNjLmFwaSIsImF1ZCI6Ijk1LjEyOC4xMjAuMzIiLCJuaWNrIjoiQWRhUXVpbm4iLCJoYXNoIjoiNTI3NjYzN2FiYjE3NWI3NmYxMmZjZTdlMWZjZGYxZWMiLCJqdGkiOjI0ODg3NzM2MjA4MTgyMjUsImlhdCI6MTY3MDU2NTk2OSwiZXhwIjoxNjcwNTY2MDI5fQ.Qzo3YY6p5lMPEDV3-sXZs59_hf_lDZuGLJa4hnqz_vQ HTTP/1.1
Host: lsc-edge-95-128-120-32.dditscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://crmt.livejasmin.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: OYpKFrXwIs0rapt1JkXVAA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Fri, 09 Dec 2022 06:06:10 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ioAGexqiEPRMFR1DxQUQg9Vwt/M=
Server: unknown
|
|
| ngs-edge-95-128-121-18.dditscdn.com/eyJhbGciOiJIUzI1NiJ9.eyJhbGxvd0g1TGl2ZVByb3h5Ijp0cnVlLCJvcmlnaW4iOiIqIiwic2VydmVyIjoid3NzOi8vbmdzLWVkZ2UtOTUtMTI4LTEyMS0xOC5kZGl0c2Nkbi5jb20iLCJ0b2tlbklkIjoiTUN4aE5EUmpaalUwTWkwMVpHWmxMVFE1WlRBdE9UbGpOQzA1WkRVd01ERm1Nemd3WmpRc01TdzFaamd3TnpreE1peEVUakppU0U0M1YwWXZlalk0UWpaalFrbEtURlIwVGtkbWFuTTkiLCJzdHJlYW1JZCI6IjA1NTExZDY2LWFlZmQtNGQyNi1hMjZjLWI1NGM0ODZhYzFjNyIsImNJZCI6IjFnajhuZWhuMG81bDNsdDQiLCJhdWQiOiJ2aWV3ZXIiLCJpc3MiOiJkb2NsZXIuc3RyZWFtaW5nLnN0cmVhbWNvbnRyb2xsZXIiLCJpYXQiOjE2NzA1NjU5NzAsImV4cCI6MTY3MDU2NjAzMH0.s-6HcydSiifoOeX_b5_1xgEZyn_5Mxue-LQmfw5tiCM? | 95.128.121.18 | 101 Switching Protocols | 0 B |
URL HTTP/1.1ngs-edge-95-128-121-18.dditscdn.com/eyJhbGciOiJIUzI1NiJ9.eyJhbGxvd0g1TGl2ZVByb3h5Ijp0cnVlLCJvcmlnaW4iOiIqIiwic2VydmVyIjoid3NzOi8vbmdzLWVkZ2UtOTUtMTI4LTEyMS0xOC5kZGl0c2Nkbi5jb20iLCJ0b2tlbklkIjoiTUN4aE5EUmpaalUwTWkwMVpHWmxMVFE1WlRBdE9UbGpOQzA1WkRVd01ERm1Nemd3WmpRc01TdzFaamd3TnpreE1peEVUakppU0U0M1YwWXZlalk0UWpaalFrbEtURlIwVGtkbWFuTTkiLCJzdHJlYW1JZCI6IjA1NTExZDY2LWFlZmQtNGQyNi1hMjZjLWI1NGM0ODZhYzFjNyIsImNJZCI6IjFnajhuZWhuMG81bDNsdDQiLCJhdWQiOiJ2aWV3ZXIiLCJpc3MiOiJkb2NsZXIuc3RyZWFtaW5nLnN0cmVhbWNvbnRyb2xsZXIiLCJpYXQiOjE2NzA1NjU5NzAsImV4cCI6MTY3MDU2NjAzMH0.s-6HcydSiifoOeX_b5_1xgEZyn_5Mxue-LQmfw5tiCM? IP95.128.121.18:0 ASN#34655 DuoDecad IT Services Luxembourg S.a r.l.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eyJhbGciOiJIUzI1NiJ9.eyJhbGxvd0g1TGl2ZVByb3h5Ijp0cnVlLCJvcmlnaW4iOiIqIiwic2VydmVyIjoid3NzOi8vbmdzLWVkZ2UtOTUtMTI4LTEyMS0xOC5kZGl0c2Nkbi5jb20iLCJ0b2tlbklkIjoiTUN4aE5EUmpaalUwTWkwMVpHWmxMVFE1WlRBdE9UbGpOQzA1WkRVd01ERm1Nemd3WmpRc01TdzFaamd3TnpreE1peEVUakppU0U0M1YwWXZlalk0UWpaalFrbEtURlIwVGtkbWFuTTkiLCJzdHJlYW1JZCI6IjA1NTExZDY2LWFlZmQtNGQyNi1hMjZjLWI1NGM0ODZhYzFjNyIsImNJZCI6IjFnajhuZWhuMG81bDNsdDQiLCJhdWQiOiJ2aWV3ZXIiLCJpc3MiOiJkb2NsZXIuc3RyZWFtaW5nLnN0cmVhbWNvbnRyb2xsZXIiLCJpYXQiOjE2NzA1NjU5NzAsImV4cCI6MTY3MDU2NjAzMH0.s-6HcydSiifoOeX_b5_1xgEZyn_5Mxue-LQmfw5tiCM? HTTP/1.1
Host: ngs-edge-95-128-121-18.dditscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://crmt.livejasmin.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: KCKmJr0YRjXSoJpjkvs2dA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Fri, 09 Dec 2022 06:06:10 GMT
Connection: upgrade
server: ngs-h5live-proxy
Upgrade: websocket
Sec-WebSocket-Accept: Fs4zIq/4/sBuads1f8+5hZeCovo=
|
|
| api-protected.protoawegw.com/v2/player/performer/search?noRedirect=1&mitigable=1&includeTestAccounts=0&product=livejasmin&presets=&certified=0&hotDeal=0&preVipShow=0&ngs=1&pstool=400_18&psid=ed_4tubedtint&streamType=rtmp&category=girl&bannedPerformers[]=AdaQuinn&bannedPerformers[]=ChrissyBlair&bannedPerformers[]=2386e5ee-8819-4022-bd0c-c1ffe3abaaac&bannedPerformers[]=fb115f83-3f4e-4e13-818d-f1bded4d5ad5&bannedPerformers[]=LillieNoir&bannedPerformers[]=MyaBecker | 93.93.51.225 | 200 OK | 600 B |
URL HTTP/2api-protected.protoawegw.com/v2/player/performer/search?noRedirect=1&mitigable=1&includeTestAccounts=0&product=livejasmin&presets=&certified=0&hotDeal=0&preVipShow=0&ngs=1&pstool=400_18&psid=ed_4tubedtint&streamType=rtmp&category=girl&bannedPerformers[]=AdaQuinn&bannedPerformers[]=ChrissyBlair&bannedPerformers[]=2386e5ee-8819-4022-bd0c-c1ffe3abaaac&bannedPerformers[]=fb115f83-3f4e-4e13-818d-f1bded4d5ad5&bannedPerformers[]=LillieNoir&bannedPerformers[]=MyaBecker IP93.93.51.225:0 ASN#34655 DuoDecad IT Services Luxembourg S.a r.l.
File typeJSON data\012- , ASCII text, with very long lines (815), with no line terminators Hash102fc4071d873d89d86de2a0bbdf3bda 00c01d83c5d008195fb0e89703f206ebafe7d437 836939bf016b0f07d8413d1eab14089427e0ddc8bdfffe9ae89cd444f0fb4a86
GET /v2/player/performer/search?noRedirect=1&mitigable=1&includeTestAccounts=0&product=livejasmin&presets=&certified=0&hotDeal=0&preVipShow=0&ngs=1&pstool=400_18&psid=ed_4tubedtint&streamType=rtmp&category=girl&bannedPerformers[]=AdaQuinn&bannedPerformers[]=ChrissyBlair&bannedPerformers[]=2386e5ee-8819-4022-bd0c-c1ffe3abaaac&bannedPerformers[]=fb115f83-3f4e-4e13-818d-f1bded4d5ad5&bannedPerformers[]=LillieNoir&bannedPerformers[]=MyaBecker HTTP/1.1
Host: api-protected.protoawegw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://crmt.livejasmin.com/
Origin: https://crmt.livejasmin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:10 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
access-control-allow-methods: OPTIONS, GET, POST, PUT, DELETE, PATCH
server: unknown
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ngs-edge-95-128-121-19.dditscdn.com/eyJhbGciOiJIUzI1NiJ9.eyJhbGxvd0g1TGl2ZVByb3h5Ijp0cnVlLCJvcmlnaW4iOiIqIiwic2VydmVyIjoid3NzOi8vbmdzLWVkZ2UtOTUtMTI4LTEyMS0xOS5kZGl0c2Nkbi5jb20iLCJ0b2tlbklkIjoiTUN4bU9HWmpNRFl3T1MxaVpXWTBMVFF3WlRBdE9HSTJZUzA0TmpZNE1tWXdOekl3WVdFc01TdzFaamd3TnpreE15eDROMGg0VDJWUGRsWTBkRTltZG5CU1ducEdabTE2UTNNdksxazkiLCJzdHJlYW1JZCI6IjAxN2FiZDI4LTdlMTMtNDVkOS04YWU1LWYzZDczODEzYzk4MiIsImNJZCI6InV5emJoeTBpZ2RpaHB5NXkiLCJhdWQiOiJ2aWV3ZXIiLCJpc3MiOiJkb2NsZXIuc3RyZWFtaW5nLnN0cmVhbWNvbnRyb2xsZXIiLCJpYXQiOjE2NzA1NjU5NzEsImV4cCI6MTY3MDU2NjAzMX0.WFkP445s2QSfJ3Qnd_ToUUXtHGlggtFQ0e86qVFT4pQ? | 95.128.121.19 | 101 Switching Protocols | 0 B |
URL HTTP/1.1ngs-edge-95-128-121-19.dditscdn.com/eyJhbGciOiJIUzI1NiJ9.eyJhbGxvd0g1TGl2ZVByb3h5Ijp0cnVlLCJvcmlnaW4iOiIqIiwic2VydmVyIjoid3NzOi8vbmdzLWVkZ2UtOTUtMTI4LTEyMS0xOS5kZGl0c2Nkbi5jb20iLCJ0b2tlbklkIjoiTUN4bU9HWmpNRFl3T1MxaVpXWTBMVFF3WlRBdE9HSTJZUzA0TmpZNE1tWXdOekl3WVdFc01TdzFaamd3TnpreE15eDROMGg0VDJWUGRsWTBkRTltZG5CU1ducEdabTE2UTNNdksxazkiLCJzdHJlYW1JZCI6IjAxN2FiZDI4LTdlMTMtNDVkOS04YWU1LWYzZDczODEzYzk4MiIsImNJZCI6InV5emJoeTBpZ2RpaHB5NXkiLCJhdWQiOiJ2aWV3ZXIiLCJpc3MiOiJkb2NsZXIuc3RyZWFtaW5nLnN0cmVhbWNvbnRyb2xsZXIiLCJpYXQiOjE2NzA1NjU5NzEsImV4cCI6MTY3MDU2NjAzMX0.WFkP445s2QSfJ3Qnd_ToUUXtHGlggtFQ0e86qVFT4pQ? IP95.128.121.19:0 ASN#34655 DuoDecad IT Services Luxembourg S.a r.l.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eyJhbGciOiJIUzI1NiJ9.eyJhbGxvd0g1TGl2ZVByb3h5Ijp0cnVlLCJvcmlnaW4iOiIqIiwic2VydmVyIjoid3NzOi8vbmdzLWVkZ2UtOTUtMTI4LTEyMS0xOS5kZGl0c2Nkbi5jb20iLCJ0b2tlbklkIjoiTUN4bU9HWmpNRFl3T1MxaVpXWTBMVFF3WlRBdE9HSTJZUzA0TmpZNE1tWXdOekl3WVdFc01TdzFaamd3TnpreE15eDROMGg0VDJWUGRsWTBkRTltZG5CU1ducEdabTE2UTNNdksxazkiLCJzdHJlYW1JZCI6IjAxN2FiZDI4LTdlMTMtNDVkOS04YWU1LWYzZDczODEzYzk4MiIsImNJZCI6InV5emJoeTBpZ2RpaHB5NXkiLCJhdWQiOiJ2aWV3ZXIiLCJpc3MiOiJkb2NsZXIuc3RyZWFtaW5nLnN0cmVhbWNvbnRyb2xsZXIiLCJpYXQiOjE2NzA1NjU5NzEsImV4cCI6MTY3MDU2NjAzMX0.WFkP445s2QSfJ3Qnd_ToUUXtHGlggtFQ0e86qVFT4pQ? HTTP/1.1
Host: ngs-edge-95-128-121-19.dditscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://crmt.livejasmin.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: C/sD3uc5wXwhtqkJ15EIxg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Fri, 09 Dec 2022 06:06:11 GMT
Connection: upgrade
server: ngs-h5live-proxy
Upgrade: websocket
Sec-WebSocket-Accept: wY7bt5LhT9W6GU73OlVK5jsK31w=
|
|
| api-protected.protoawegw.com/v2/player/performer/search?noRedirect=1&mitigable=1&includeTestAccounts=0&product=livejasmin&presets=&certified=0&hotDeal=0&preVipShow=0&ngs=1&pstool=400_18&psid=ed_4tubedtint&streamType=rtmp&category=girl&bannedPerformers[]=AdaQuinn&bannedPerformers[]=ChrissyBlair&bannedPerformers[]=2386e5ee-8819-4022-bd0c-c1ffe3abaaac&bannedPerformers[]=fb115f83-3f4e-4e13-818d-f1bded4d5ad5&bannedPerformers[]=LillieNoir&bannedPerformers[]=MyaBecker | 93.93.51.225 | 200 OK | 578 B |
URL HTTP/2api-protected.protoawegw.com/v2/player/performer/search?noRedirect=1&mitigable=1&includeTestAccounts=0&product=livejasmin&presets=&certified=0&hotDeal=0&preVipShow=0&ngs=1&pstool=400_18&psid=ed_4tubedtint&streamType=rtmp&category=girl&bannedPerformers[]=AdaQuinn&bannedPerformers[]=ChrissyBlair&bannedPerformers[]=2386e5ee-8819-4022-bd0c-c1ffe3abaaac&bannedPerformers[]=fb115f83-3f4e-4e13-818d-f1bded4d5ad5&bannedPerformers[]=LillieNoir&bannedPerformers[]=MyaBecker IP93.93.51.225:0 ASN#34655 DuoDecad IT Services Luxembourg S.a r.l.
File typeJSON data\012- , ASCII text, with very long lines (782), with no line terminators Hash493e25ddc475943f748aaf2178098f83 2da69c096219127cbc2bc0b0048cc0ac61c118e7 68def83e51c67d570259b927a22d96d96cb9fc910226c121b6accccc6c8c89ff
GET /v2/player/performer/search?noRedirect=1&mitigable=1&includeTestAccounts=0&product=livejasmin&presets=&certified=0&hotDeal=0&preVipShow=0&ngs=1&pstool=400_18&psid=ed_4tubedtint&streamType=rtmp&category=girl&bannedPerformers[]=AdaQuinn&bannedPerformers[]=ChrissyBlair&bannedPerformers[]=2386e5ee-8819-4022-bd0c-c1ffe3abaaac&bannedPerformers[]=fb115f83-3f4e-4e13-818d-f1bded4d5ad5&bannedPerformers[]=LillieNoir&bannedPerformers[]=MyaBecker HTTP/1.1
Host: api-protected.protoawegw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://crmt.livejasmin.com/
Origin: https://crmt.livejasmin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:11 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
access-control-allow-methods: OPTIONS, GET, POST, PUT, DELETE, PATCH
server: unknown
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ngs-edge-95-128-120-40.dditscdn.com/eyJhbGciOiJIUzI1NiJ9.eyJhbGxvd0g1TGl2ZVByb3h5Ijp0cnVlLCJvcmlnaW4iOiIqIiwic2VydmVyIjoid3NzOi8vbmdzLWVkZ2UtOTUtMTI4LTEyMC00MC5kZGl0c2Nkbi5jb20iLCJ0b2tlbklkIjoiTUN3Mk1qTXpZekF5T1MwMk5EbGtMVFEwT0dVdFlqRTVOeTB4WXpZM01EVXpPVE0xT1RVc01TdzFaamd3TnpneU9DdzNhaTlrU0hKVFpXVmxOeTlwTDA1dWJraEZkbmRRTDBoRVVITTkiLCJzdHJlYW1JZCI6IjY2ODQzMGIxLWQxODItNGM1MS1iMDkxLTk4NDA3ODU3YmY2ZiIsImNJZCI6IjYyeGpzNHdnOTVoemkxNGwiLCJhdWQiOiJ2aWV3ZXIiLCJpc3MiOiJkb2NsZXIuc3RyZWFtaW5nLnN0cmVhbWNvbnRyb2xsZXIiLCJpYXQiOjE2NzA1NjU5NzIsImV4cCI6MTY3MDU2NjAzMn0.T76qS1tYqPfMbQnobEew1w4C5SYEaWbBi5139sCa1JM? | 95.128.120.40 | 101 Switching Protocols | 0 B |
URL HTTP/1.1ngs-edge-95-128-120-40.dditscdn.com/eyJhbGciOiJIUzI1NiJ9.eyJhbGxvd0g1TGl2ZVByb3h5Ijp0cnVlLCJvcmlnaW4iOiIqIiwic2VydmVyIjoid3NzOi8vbmdzLWVkZ2UtOTUtMTI4LTEyMC00MC5kZGl0c2Nkbi5jb20iLCJ0b2tlbklkIjoiTUN3Mk1qTXpZekF5T1MwMk5EbGtMVFEwT0dVdFlqRTVOeTB4WXpZM01EVXpPVE0xT1RVc01TdzFaamd3TnpneU9DdzNhaTlrU0hKVFpXVmxOeTlwTDA1dWJraEZkbmRRTDBoRVVITTkiLCJzdHJlYW1JZCI6IjY2ODQzMGIxLWQxODItNGM1MS1iMDkxLTk4NDA3ODU3YmY2ZiIsImNJZCI6IjYyeGpzNHdnOTVoemkxNGwiLCJhdWQiOiJ2aWV3ZXIiLCJpc3MiOiJkb2NsZXIuc3RyZWFtaW5nLnN0cmVhbWNvbnRyb2xsZXIiLCJpYXQiOjE2NzA1NjU5NzIsImV4cCI6MTY3MDU2NjAzMn0.T76qS1tYqPfMbQnobEew1w4C5SYEaWbBi5139sCa1JM? IP95.128.120.40:0 ASN#34655 DuoDecad IT Services Luxembourg S.a r.l.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eyJhbGciOiJIUzI1NiJ9.eyJhbGxvd0g1TGl2ZVByb3h5Ijp0cnVlLCJvcmlnaW4iOiIqIiwic2VydmVyIjoid3NzOi8vbmdzLWVkZ2UtOTUtMTI4LTEyMC00MC5kZGl0c2Nkbi5jb20iLCJ0b2tlbklkIjoiTUN3Mk1qTXpZekF5T1MwMk5EbGtMVFEwT0dVdFlqRTVOeTB4WXpZM01EVXpPVE0xT1RVc01TdzFaamd3TnpneU9DdzNhaTlrU0hKVFpXVmxOeTlwTDA1dWJraEZkbmRRTDBoRVVITTkiLCJzdHJlYW1JZCI6IjY2ODQzMGIxLWQxODItNGM1MS1iMDkxLTk4NDA3ODU3YmY2ZiIsImNJZCI6IjYyeGpzNHdnOTVoemkxNGwiLCJhdWQiOiJ2aWV3ZXIiLCJpc3MiOiJkb2NsZXIuc3RyZWFtaW5nLnN0cmVhbWNvbnRyb2xsZXIiLCJpYXQiOjE2NzA1NjU5NzIsImV4cCI6MTY3MDU2NjAzMn0.T76qS1tYqPfMbQnobEew1w4C5SYEaWbBi5139sCa1JM? HTTP/1.1
Host: ngs-edge-95-128-120-40.dditscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://crmt.livejasmin.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +2nxspzLC0rS17xET8f0tg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Fri, 09 Dec 2022 06:06:12 GMT
Connection: upgrade
server: ngs-h5live-proxy
Upgrade: websocket
Sec-WebSocket-Accept: f9htJyUOAOeoQw9ajW+vgBqYe/k=
|
|
| ui.4tube.com/assets/base_footer-75a53cbdb8.js | 104.20.224.111 | 200 OK | 0 B |
URL HTTP/2ui.4tube.com/assets/base_footer-75a53cbdb8.js IP104.20.224.111:0
GET /assets/base_footer-75a53cbdb8.js HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"16818-5ee337ad3d8c0-gzip"
expires: Sat, 10 Dec 2022 06:04:04 GMT
last-modified: Thu, 24 Nov 2022 08:49:15 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 121
server: cloudflare
cf-ray: 776b8d81b85eb517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| a.realsrv.com/ad-provider.js | 185.76.9.22 | 200 OK | 0 B |
URL HTTP/2a.realsrv.com/ad-provider.js IP185.76.9.22:0 ASN#60068 Datacamp Limited
GET /ad-provider.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: application/javascript
etag: W/"f26c91d131ffc1bbddb296d644e"
expires: Thu, 08 Dec 2022 12:51:43 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1670568778
server: CDN77-Turbo
x-77-nzt: AblMCRTOCEP/Mx8AAA
x-77-nzt-ray: af585630216f12044dd0926385edf933
x-cache: HIT
x-age: 7987
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
|
|
| go.xlivrdr.com/api/models/vast?campaignId=165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af&campaignType=smartpop&creativeId=b1e02e2720203f684f246d97afe36747c347d0383f37e85772df9f975015b451&duration=00%3A00%3A30&endpoint=room&iterationId=257107&masterSmartpopId=2683&memberId=ooc4ASOolmsnmndVdTdPbXS6VzqpbXUzOodTK6V0rpXT1UU0uomponpndRNTRPTS6V0zpXSuldK6Z0rpXTOc6V1Jj6bx6h_c50rpXSuldK6V0rpXSuD7&p1=4581406&ruleId=157&skipOffset=00%3A00%3A05&smartpopId=3564&sourceId=3017212&tag=-girls%2Findian&userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&variationId=29475&videosList=oil-show11 | 104.18.59.150 | 200 OK | 0 B |
URL HTTP/2go.xlivrdr.com/api/models/vast?campaignId=165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af&campaignType=smartpop&creativeId=b1e02e2720203f684f246d97afe36747c347d0383f37e85772df9f975015b451&duration=00%3A00%3A30&endpoint=room&iterationId=257107&masterSmartpopId=2683&memberId=ooc4ASOolmsnmndVdTdPbXS6VzqpbXUzOodTK6V0rpXT1UU0uomponpndRNTRPTS6V0zpXSuldK6Z0rpXTOc6V1Jj6bx6h_c50rpXSuldK6V0rpXSuD7&p1=4581406&ruleId=157&skipOffset=00%3A00%3A05&smartpopId=3564&sourceId=3017212&tag=-girls%2Findian&userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&variationId=29475&videosList=oil-show11 IP104.18.59.150:0
GET /api/models/vast?campaignId=165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af&campaignType=smartpop&creativeId=b1e02e2720203f684f246d97afe36747c347d0383f37e85772df9f975015b451&duration=00%3A00%3A30&endpoint=room&iterationId=257107&masterSmartpopId=2683&memberId=ooc4ASOolmsnmndVdTdPbXS6VzqpbXUzOodTK6V0rpXT1UU0uomponpndRNTRPTS6V0zpXSuldK6Z0rpXTOc6V1Jj6bx6h_c50rpXSuldK6V0rpXSuD7&p1=4581406&ruleId=157&skipOffset=00%3A00%3A05&smartpopId=3564&sourceId=3017212&tag=-girls%2Findian&userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&variationId=29475&videosList=oil-show11 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Referer: https://www.4tube.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:06 GMT
content-type: text/xml; charset=utf-8
access-control-allow-origin: https://www.4tube.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: DYNAMIC
set-cookie: __cflb=0H28uukSkGJRy5UBr1u9iAwwBfboBLDxauv7JELhTVv; SameSite=None; Secure; path=/; expires=Sat, 10-Dec-22 05:06:06 GMT; HttpOnly
server: cloudflare
cf-ray: 776b8d8b1d61b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.4tube.com/js/player/web/720178.js?hl=es | 104.20.224.111 | 200 OK | 0 B |
URL HTTP/2www.4tube.com/js/player/web/720178.js?hl=es IP104.20.224.111:0
GET /js/player/web/720178.js?hl=es HTTP/1.1
Host: www.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: application/javascript
cache-control: public, max-age=1800, s-maxage=600, x-grace=900
surrogate-capability: abc="ESI/1.0"
vary: Accept-Encoding, Accept-Encoding
x-powered-by: PHP/5.6.40-63+ubuntu18.04.1+deb.sury.org+2
cf-cache-status: MISS
last-modified: Fri, 09 Dec 2022 06:06:05 GMT
server: cloudflare
cf-ray: 776b8d819840b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ksehinkitw.hair/Y1JKa1M4cH1YZFZne0l%2EQXBmSWoAY3wJMlExZ11mVWRnXzJSMGcKMVRqZ1tqVDN8XjBRY3NcMEF%2BaFxkB2YoW2JSfy9fMgJ%2EflJjVX9zWDdSf3JfNVZlLgliUWYpXXFPcDkccU9wIRg2CzskADoXJWQDMgogaEdxUmJkXnFPNCsHIAZ%2BLAo%2EEDdmDTIPIS82 | 54.162.51.18 | 200 OK | 0 B |
URL HTTP/2ksehinkitw.hair/Y1JKa1M4cH1YZFZne0l%2EQXBmSWoAY3wJMlExZ11mVWRnXzJSMGcKMVRqZ1tqVDN8XjBRY3NcMEF%2BaFxkB2YoW2JSfy9fMgJ%2EflJjVX9zWDdSf3JfNVZlLgliUWYpXXFPcDkccU9wIRg2CzskADoXJWQDMgogaEdxUmJkXnFPNCsHIAZ%2BLAo%2EEDdmDTIPIS82 IP54.162.51.18:0
GET /Y1JKa1M4cH1YZFZne0l%2EQXBmSWoAY3wJMlExZ11mVWRnXzJSMGcKMVRqZ1tqVDN8XjBRY3NcMEF%2BaFxkB2YoW2JSfy9fMgJ%2EflJjVX9zWDdSf3JfNVZlLgliUWYpXXFPcDkccU9wIRg2CzskADoXJWQDMgogaEdxUmJkXnFPNCsHIAZ%2BLAo%2EEDdmDTIPIS82 HTTP/1.1
Host: ksehinkitw.hair
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
set-cookie: f0e8f2e26b884e7f71854957a44961dc=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
cache-control: public, max-age=86400
etag: W/"8445-kSxMqACjXOh+lac1QPNB9xOK7xw"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| pt-static5.jsmsat.com/npe/pu/play/css/play-v828265.css | 93.93.51.201 | 200 OK | 0 B |
URL HTTP/2pt-static5.jsmsat.com/npe/pu/play/css/play-v828265.css IP93.93.51.201:0 ASN#34655 DuoDecad IT Services Luxembourg S.a r.l.
GET /npe/pu/play/css/play-v828265.css HTTP/1.1
Host: pt-static5.jsmsat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crmt.livejasmin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:09 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 15:19:42 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"6392008e-13478"
access-control-allow-origin: *
server: unknown
x-cdn-node: sesto
x-cache-status: R-HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| pt-static1.jsmsat.com/npe/pu/fslf/jsm/script/pu.fslf-v828265.js | 93.93.51.201 | 200 OK | 0 B |
URL HTTP/2pt-static1.jsmsat.com/npe/pu/fslf/jsm/script/pu.fslf-v828265.js IP93.93.51.201:0 ASN#34655 DuoDecad IT Services Luxembourg S.a r.l.
GET /npe/pu/fslf/jsm/script/pu.fslf-v828265.js HTTP/1.1
Host: pt-static1.jsmsat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crmt.livejasmin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:09 GMT
content-type: application/javascript
last-modified: Thu, 08 Dec 2022 15:19:42 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"6392008e-6cbec"
access-control-allow-origin: *
server: unknown
x-cdn-node: sesto
x-cache-status: R-HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ui.4tube.com/assets/loadcomments-d7f211c111.js | 104.20.224.111 | 200 OK | 0 B |
URL HTTP/2ui.4tube.com/assets/loadcomments-d7f211c111.js IP104.20.224.111:0
GET /assets/loadcomments-d7f211c111.js HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"168-5ee337ad3d8c0-gzip"
expires: Sat, 10 Dec 2022 05:59:51 GMT
last-modified: Thu, 24 Nov 2022 08:49:15 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 374
server: cloudflare
cf-ray: 776b8d81b85bb517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| s3t3d2y8.afcdn.net/library/344676/d9fc7882248dd45554c7b2784475f00936fb6e08.mp4 | 185.76.9.18 | 206 Partial Content | 0 B |
URL HTTP/2s3t3d2y8.afcdn.net/library/344676/d9fc7882248dd45554c7b2784475f00936fb6e08.mp4 IP185.76.9.18:0 ASN#60068 Datacamp Limited
GET /library/344676/d9fc7882248dd45554c7b2784475f00936fb6e08.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 206 Partial Content
date: Fri, 09 Dec 2022 06:06:06 GMT
content-type: video/mp4
content-length: 34846
last-modified: Thu, 20 Jan 2022 15:19:55 GMT
etag: "61e97d9b-881e"
expires: Fri, 30 Jun 2023 12:01:37 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195288
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ14tXv/9jLUAA
x-77-nzt-ray: c0a4cc2820a2447c4ed092637be8431e
x-cache: HIT
x-age: 13906678
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-34845/34846
X-Firefox-Spdy: h2
|
|
| ui.4tube.com/assets/ad-bc506b1f9f.js | 104.20.224.111 | 200 OK | 0 B |
URL HTTP/2ui.4tube.com/assets/ad-bc506b1f9f.js IP104.20.224.111:0
GET /assets/ad-bc506b1f9f.js HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"3dc-5ee337ad3d8c0-gzip"
expires: Sat, 10 Dec 2022 06:04:04 GMT
last-modified: Thu, 24 Nov 2022 08:49:15 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 121
server: cloudflare
cf-ray: 776b8d81b85db517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ui.4tube.com/assets/adn-9d73ecb0eb.js | 104.20.224.111 | 200 OK | 0 B |
URL HTTP/2ui.4tube.com/assets/adn-9d73ecb0eb.js IP104.20.224.111:0
GET /assets/adn-9d73ecb0eb.js HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"199-5ee337ad3d8c0-gzip"
expires: Sat, 10 Dec 2022 06:04:04 GMT
last-modified: Thu, 24 Nov 2022 08:49:15 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 121
server: cloudflare
cf-ray: 776b8d81c862b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.4tube.com/videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es | 104.20.224.111 | 200 OK | 0 B |
URL HTTP/2www.4tube.com/videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es IP104.20.224.111:0
GET /videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es HTTP/1.1
Host: www.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:04 GMT
content-type: text/html; charset=UTF-8
cache-control: public, max-age=7200, s-maxage=600, x-grace=900
surrogate-capability: abc="ESI/1.0"
vary: Accept-Encoding, Accept-Encoding
x-powered-by: PHP/5.6.40-63+ubuntu18.04.1+deb.sury.org+2
cf-cache-status: MISS
last-modified: Fri, 09 Dec 2022 06:06:04 GMT
server: cloudflare
cf-ray: 776b8d7dee0fb517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ui.4tube.com/assets/adf-8f47ebf083.js | 104.20.224.111 | 200 OK | 0 B |
URL HTTP/2ui.4tube.com/assets/adf-8f47ebf083.js IP104.20.224.111:0
GET /assets/adf-8f47ebf083.js HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"217-5ee337ad3d8c0-gzip"
expires: Sat, 10 Dec 2022 06:04:04 GMT
last-modified: Thu, 24 Nov 2022 08:49:15 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 121
server: cloudflare
cf-ray: 776b8d81b860b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ui.4tube.com/assets/font/sourcesanspro-regular-webfont-f57d6cd73b.woff2 | 104.20.224.111 | 200 OK | 0 B |
URL HTTP/2ui.4tube.com/assets/font/sourcesanspro-regular-webfont-f57d6cd73b.woff2 IP104.20.224.111:0
GET /assets/font/sourcesanspro-regular-webfont-f57d6cd73b.woff2 HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://ui.4tube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: font/woff2
access-control-allow-origin: *
etag: W/"5d30-5ee33736fc1c0"
last-modified: Thu, 24 Nov 2022 08:47:11 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 424
server: cloudflare
cf-ray: 776b8d852a9bb517-OSL
X-Firefox-Spdy: h2
|
|
| s3t3d2y8.afcdn.net/library/344676/d9fc7882248dd45554c7b2784475f00936fb6e08.mp4 | 185.76.9.18 | 206 Partial Content | 0 B |
URL HTTP/2s3t3d2y8.afcdn.net/library/344676/d9fc7882248dd45554c7b2784475f00936fb6e08.mp4 IP185.76.9.18:0 ASN#60068 Datacamp Limited
GET /library/344676/d9fc7882248dd45554c7b2784475f00936fb6e08.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 206 Partial Content
date: Fri, 09 Dec 2022 06:06:06 GMT
content-type: video/mp4
content-length: 34846
last-modified: Thu, 20 Jan 2022 15:19:55 GMT
etag: "61e97d9b-881e"
expires: Fri, 30 Jun 2023 12:01:37 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195288
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ3rsvf/9jLUAA
x-77-nzt-ray: c0a4cc2820a2447c4ed09263ca484a1e
x-cache: HIT
x-age: 13906678
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-34845/34846
X-Firefox-Spdy: h2
|
|
| ui.4tube.com/assets/abExperiments-fba113e07a.js | 104.20.224.111 | 200 OK | 0 B |
URL HTTP/2ui.4tube.com/assets/abExperiments-fba113e07a.js IP104.20.224.111:0
GET /assets/abExperiments-fba113e07a.js HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"40e-5ee3379842740-gzip"
expires: Sat, 10 Dec 2022 05:41:55 GMT
last-modified: Thu, 24 Nov 2022 08:48:53 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 1450
server: cloudflare
cf-ray: 776b8d81b856b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| token.4tube.com/0000000801361744/desktop/1080+720+480+360+240 | 54.166.244.100 | 200 OK | 0 B |
URL HTTP/2token.4tube.com/0000000801361744/desktop/1080+720+480+360+240 IP54.166.244.100:0
POST /0000000801361744/desktop/1080+720+480+360+240 HTTP/1.1
Host: token.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.4tube.com
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Content-Length: 0
HTTP/2 200 OK
access-control-allow-origin: https://www.4tube.com
content-encoding: gzip
content-type: application/json; charset=utf-8
date: Fri, 09 Dec 2022 06:06:05 GMT
etag: W/"e6d-tVI5uSrk0iR6n71W8skCtU7MVfo"
vary: Origin, Accept-Encoding
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.4tube.com/sw.js?V3E4R1EMUw90ZmJECWV9dVMUZWg0QA4lMGUSFXFkYUcVczBmExUmM2BJFXdoYBAOcjJlQAFwMnVdGnBmM0Vad2BmXF1zMDZcDH5hYVwBdDVmXABzN2JGXCVgZUVbcXN7U0swc3tTUzQ0PxhWLDgjBhYvMD4DGmtzZkEWcnN7F1krIjJdXiY9JBQUITA7Al0a | 104.20.224.111 | 200 OK | 0 B |
URL HTTP/2www.4tube.com/sw.js?V3E4R1EMUw90ZmJECWV9dVMUZWg0QA4lMGUSFXFkYUcVczBmExUmM2BJFXdoYBAOcjJlQAFwMnVdGnBmM0Vad2BmXF1zMDZcDH5hYVwBdDVmXABzN2JGXCVgZUVbcXN7U0swc3tTUzQ0PxhWLDgjBhYvMD4DGmtzZkEWcnN7F1krIjJdXiY9JBQUITA7Al0a IP104.20.224.111:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /sw.js?V3E4R1EMUw90ZmJECWV9dVMUZWg0QA4lMGUSFXFkYUcVczBmExUmM2BJFXdoYBAOcjJlQAFwMnVdGnBmM0Vad2BmXF1zMDZcDH5hYVwBdDVmXABzN2JGXCVgZUVbcXN7U0swc3tTUzQ0PxhWLDgjBhYvMD4DGmtzZkEWcnN7F1krIjJdXiY9JBQUITA7Al0a HTTP/1.1
Host: www.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: 4tube_ad={"ntva":0,"ntvb":0,"footer":0,"listings":0,"playerAd":0,"autoNextAd":0,"adblock-popunder-mediareps":0,"adblock-banner":0,"adblock-notice":0,"adblock-popunder-exoclick":0,"footer-exoclick":2,"listings-exoclick":0,"mobile-below-player-exoclick":0,"mobile-footer-exoclick":0,"mobile-middle-banner-exoclick":0,"mobile-videolist-top-exoclick":0,"non_cpp-exoclick":0,"ntva-exoclick":0,"ntvb-exoclick":0,"playerAd-exoclick":0,"vast-ad":0,"push-notification":0,"pop-up":0,"mobile-popunder":0}; __utma=196175913.43532277.1670565965.1670565965.1670565965.1; __utmb=196175913.0.10.1670565965; __utmc=196175913; __utmz=196175913.1670565965.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); player-vast=1
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:07 GMT
content-type: application/javascript
etag: W/"19285-5eb723e71d580-gzip"
last-modified: Thu, 20 Oct 2022 07:26:30 GMT
vary: Accept-Encoding, Accept-Encoding
cache-control: max-age=1800
cf-cache-status: MISS
server: cloudflare
cf-ray: 776b8d8da8a5b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ui.4tube.com/assets/img/friends/porntube-f037f07fba.png | 104.20.224.111 | 200 OK | 0 B |
URL HTTP/2ui.4tube.com/assets/img/friends/porntube-f037f07fba.png IP104.20.224.111:0
GET /assets/img/friends/porntube-f037f07fba.png HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ui.4tube.com/assets/styles_4tube-8f857004d5.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: image/png
cache-control: max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origSize=10888
access-control-allow-origin: *
etag: "2a88-5ee33736fc1c0"
expires: Sat, 10 Dec 2022 06:06:05 GMT
last-modified: Thu, 24 Nov 2022 08:47:11 GMT
vary: Accept-Encoding
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 776b8d852a91b517-OSL
X-Firefox-Spdy: h2
|
|
| cdn.impactserving.com/Scripts/infinity.js.aspx?guid=cc0b9136-0e22-4ced-9fd6-6a84e150a8d7 | 104.19.161.92 | 200 OK | 0 B |
URL HTTP/2cdn.impactserving.com/Scripts/infinity.js.aspx?guid=cc0b9136-0e22-4ced-9fd6-6a84e150a8d7 IP104.19.161.92:0
GET /Scripts/infinity.js.aspx?guid=cc0b9136-0e22-4ced-9fd6-6a84e150a8d7 HTTP/1.1
Host: cdn.impactserving.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:07 GMT
content-type: application/x-javascript; charset=utf-8
vary: Accept-Encoding
cache-control: public, no-transform, max-age=900
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: *
last-modified: Fri, 09 Dec 2022 06:02:55 GMT
cf-cache-status: HIT
age: 123
server: cloudflare
cf-ray: 776b8d925c1fb517-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| crjpgate.com/pu/?psid=ed_4tubedtint&utm_source=ptb&ms_notrack=1&category=girl&site=jsm&target=postrttr&utm_medium=partner&preload=1 | 93.93.51.223 | 200 OK | 0 B |
URL HTTP/2crjpgate.com/pu/?psid=ed_4tubedtint&utm_source=ptb&ms_notrack=1&category=girl&site=jsm&target=postrttr&utm_medium=partner&preload=1 IP93.93.51.223:0 ASN#34655 DuoDecad IT Services Luxembourg S.a r.l.
GET /pu/?psid=ed_4tubedtint&utm_source=ptb&ms_notrack=1&category=girl&site=jsm&target=postrttr&utm_medium=partner&preload=1 HTTP/1.1
Host: crjpgate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:08 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-target-pstool: 400_31
server: unknown
set-cookie: psui=a59f007fbf3384ccc33cc586d5d348f0; Path=/; Expires=Sun, 08-Jan-23 06:06:08 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ui.4tube.com/assets/img/4tube/favicon-06b7221b58.ico | 104.20.224.111 | 200 OK | 0 B |
URL HTTP/2ui.4tube.com/assets/img/4tube/favicon-06b7221b58.ico IP104.20.224.111:0
GET /assets/img/4tube/favicon-06b7221b58.ico HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:06 GMT
content-type: image/vnd.microsoft.icon
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"e73-5ee33736fc1c0"
expires: Sat, 10 Dec 2022 06:04:05 GMT
last-modified: Thu, 24 Nov 2022 08:47:11 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 121
server: cloudflare
cf-ray: 776b8d882d15b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.4tube.com/ad_detail.html?ad=ntvb | 104.20.224.111 | 200 OK | 0 B |
URL HTTP/2www.4tube.com/ad_detail.html?ad=ntvb IP104.20.224.111:0
GET /ad_detail.html?ad=ntvb HTTP/1.1
Host: www.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es
Cookie: 4tube_ad={"ntva":0,"ntvb":0,"footer":0,"listings":0,"playerAd":0,"autoNextAd":0,"adblock-popunder-mediareps":0,"adblock-banner":0,"adblock-notice":0,"adblock-popunder-exoclick":0,"footer-exoclick":2,"listings-exoclick":0,"mobile-below-player-exoclick":0,"mobile-footer-exoclick":0,"mobile-middle-banner-exoclick":0,"mobile-videolist-top-exoclick":0,"non_cpp-exoclick":0,"ntva-exoclick":0,"ntvb-exoclick":0,"playerAd-exoclick":0,"vast-ad":0,"push-notification":0,"pop-up":0,"mobile-popunder":0}
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: text/html
last-modified: Wed, 13 Jul 2022 16:24:59 GMT
vary: Accept-Encoding, Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 779
server: cloudflare
cf-ray: 776b8d857ae9b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| s3t3d2y8.afcdn.net/library/329552/37c525af1d11590ab1229c25c3d3fb34e5de7437.mp4 | 185.76.9.18 | 206 Partial Content | 0 B |
URL HTTP/2s3t3d2y8.afcdn.net/library/329552/37c525af1d11590ab1229c25c3d3fb34e5de7437.mp4 IP185.76.9.18:0 ASN#60068 Datacamp Limited
GET /library/329552/37c525af1d11590ab1229c25c3d3fb34e5de7437.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Fri, 09 Dec 2022 06:06:06 GMT
content-type: video/mp4
content-length: 58232
last-modified: Fri, 02 Sep 2022 12:30:36 GMT
etag: "6311f76c-e378"
expires: Sat, 02 Sep 2023 13:03:15 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1693659814
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ3XNbH/KNGAAA
x-77-nzt-ray: c0a4cc2820a2447c4ed092633c408b2e
x-cache: HIT
x-age: 8442152
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-58231/58232
X-Firefox-Spdy: h2
|
|
| ksehinkitw.hair/WXBwV3giUgMgJywCHHVCexgEIwgqSl94Dy4HXmMMLBIVeRs2HV8kD3caA3VUewMdMVpjQVx1CzQGUm1abV5DdVR7BBEwJzAUUm1abkNHYk1oUlx1CywSLz4ca1JKdUE6QUY1GWsTXWFNb0ZdYxloEl02Gm5IXWdBbhFGYhtrQUlgG3sN | 54.162.51.18 | 502 Bad Gateway | 0 B |
URL HTTP/2ksehinkitw.hair/WXBwV3giUgMgJywCHHVCexgEIwgqSl94Dy4HXmMMLBIVeRs2HV8kD3caA3VUewMdMVpjQVx1CzQGUm1abV5DdVR7BBEwJzAUUm1abkNHYk1oUlx1CywSLz4ca1JKdUE6QUY1GWsTXWFNb0ZdYxloEl02Gm5IXWdBbhFGYhtrQUlgG3sN IP54.162.51.18:0
GET /WXBwV3giUgMgJywCHHVCexgEIwgqSl94Dy4HXmMMLBIVeRs2HV8kD3caA3VUewMdMVpjQVx1CzQGUm1abV5DdVR7BBEwJzAUUm1abkNHYk1oUlx1CywSLz4ca1JKdUE6QUY1GWsTXWFNb0ZdYxloEl02Gm5IXWdBbhFGYhtrQUlgG3sN HTTP/1.1
Host: ksehinkitw.hair
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 502 Bad Gateway
set-cookie: bba871bfbc45fbfcaabe7d0061abca2f=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
X-Firefox-Spdy: h2
|
|
| api-protected.protoawegw.com/v2/player/performer/search?noRedirect=1&mitigable=1&includeTestAccounts=0&product=livejasmin&presets=&certified=0&hotDeal=0&preVipShow=0&ngs=1&pstool=400_18&psid=ed_4tubedtint&streamType=rtmp&category=girl&bannedPerformers[]=AdaQuinn&bannedPerformers[]=ChrissyBlair&bannedPerformers[]=2386e5ee-8819-4022-bd0c-c1ffe3abaaac&bannedPerformers[]=fb115f83-3f4e-4e13-818d-f1bded4d5ad5&bannedPerformers[]=LillieNoir&bannedPerformers[]=MyaBecker | 93.93.51.225 | 200 OK | 0 B |
URL HTTP/2api-protected.protoawegw.com/v2/player/performer/search?noRedirect=1&mitigable=1&includeTestAccounts=0&product=livejasmin&presets=&certified=0&hotDeal=0&preVipShow=0&ngs=1&pstool=400_18&psid=ed_4tubedtint&streamType=rtmp&category=girl&bannedPerformers[]=AdaQuinn&bannedPerformers[]=ChrissyBlair&bannedPerformers[]=2386e5ee-8819-4022-bd0c-c1ffe3abaaac&bannedPerformers[]=fb115f83-3f4e-4e13-818d-f1bded4d5ad5&bannedPerformers[]=LillieNoir&bannedPerformers[]=MyaBecker IP93.93.51.225:0 ASN#34655 DuoDecad IT Services Luxembourg S.a r.l.
GET /v2/player/performer/search?noRedirect=1&mitigable=1&includeTestAccounts=0&product=livejasmin&presets=&certified=0&hotDeal=0&preVipShow=0&ngs=1&pstool=400_18&psid=ed_4tubedtint&streamType=rtmp&category=girl&bannedPerformers[]=AdaQuinn&bannedPerformers[]=ChrissyBlair&bannedPerformers[]=2386e5ee-8819-4022-bd0c-c1ffe3abaaac&bannedPerformers[]=fb115f83-3f4e-4e13-818d-f1bded4d5ad5&bannedPerformers[]=LillieNoir&bannedPerformers[]=MyaBecker HTTP/1.1
Host: api-protected.protoawegw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://crmt.livejasmin.com/
Origin: https://crmt.livejasmin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:13 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
access-control-allow-methods: OPTIONS, GET, POST, PUT, DELETE, PATCH
server: unknown
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ui.4tube.com/assets/newrelicKpisFooter-a4a3d6ff76.js | 104.20.224.111 | 200 OK | 0 B |
URL HTTP/2ui.4tube.com/assets/newrelicKpisFooter-a4a3d6ff76.js IP104.20.224.111:0
GET /assets/newrelicKpisFooter-a4a3d6ff76.js HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"c2-5ee337a4a8480-gzip"
expires: Sat, 10 Dec 2022 05:43:34 GMT
last-modified: Thu, 24 Nov 2022 08:49:06 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 1351
server: cloudflare
cf-ray: 776b8d81b85cb517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ui.4tube.com/assets/padb-7a7ab25c1f.js | 104.20.224.111 | 200 OK | 0 B |
URL HTTP/2ui.4tube.com/assets/padb-7a7ab25c1f.js IP104.20.224.111:0
GET /assets/padb-7a7ab25c1f.js HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"1f7-5ee337ad3d8c0-gzip"
expires: Sat, 10 Dec 2022 06:04:04 GMT
last-modified: Thu, 24 Nov 2022 08:49:15 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 121
server: cloudflare
cf-ray: 776b8d81c861b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ui.4tube.com/assets/abpe-55f5e25fc6.js | 104.20.224.111 | 200 OK | 0 B |
URL HTTP/2ui.4tube.com/assets/abpe-55f5e25fc6.js IP104.20.224.111:0
GET /assets/abpe-55f5e25fc6.js HTTP/1.1
Host: ui.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: max-age=86400
etag: W/"287-5ee337ad3d8c0-gzip"
expires: Sat, 10 Dec 2022 05:41:55 GMT
last-modified: Thu, 24 Nov 2022 08:49:15 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 1450
server: cloudflare
cf-ray: 776b8d81c86fb517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.4tube.com/51edf0964f/dynamic_js_es.js?d=2784277&hl=es | 104.20.224.111 | 200 OK | 0 B |
URL HTTP/2www.4tube.com/51edf0964f/dynamic_js_es.js?d=2784277&hl=es IP104.20.224.111:0
GET /51edf0964f/dynamic_js_es.js?d=2784277&hl=es HTTP/1.1
Host: www.4tube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.4tube.com/videos/720178/pussy-loving-hotties-angel-youngs-leana-lovings?hl=es
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 06:06:05 GMT
content-type: application/javascript
cache-control: public, max-age=1800
vary: Accept-Encoding, Accept-Encoding
x-powered-by: PHP/5.6.40-63+ubuntu18.04.1+deb.sury.org+2
cf-cache-status: MISS
last-modified: Fri, 09 Dec 2022 06:06:05 GMT
server: cloudflare
cf-ray: 776b8d818837b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
104.20.223.111