26 B URL spruecutworm.com/gebeqf01BNe/62537
IP
File type ASCII text, with no line terminators
Hash 4fc71bf68a1d477bd1523733e34d1e90
15119105cffbe108b6cf290146ab02c9aa8517ba
74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce
GET /gebeqf01BNe/62537 HTTP/1.1
Host: spruecutworm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 14 Aug 2023 03:44:17 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://3hentai.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jU1Sg0AQhSH8RQ1oV3EAj8AQMcnSTVbegZphGhwD06lmQuLtHa3S3fteffVeEASr8hHCJY0husgGnl8aXe97Ve31tsZq34vda9UoIbp6u1PycIA7M7dOqhFdDOt5kuxat8SwGdAim67tSGMOT976a06WrjaGRLG0Oodk8saYQ6aYrjNyGUFs5YSQHQ1jTzdvyE9iiIQQPhvrc1jBiuYyKu4heTf2cis2aVAUaQAP51G6nnhqjfaYDCw1QvgG6046HIi%2FINM4nxydAWjU7b%2F%2Fe5qMP2uQalxM55HcB%2FI3ouZOdQ%3D%3D; expires=Tue, 15-Aug-2023 03:44:17 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIpPjAC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e6R3O; expires=Tue, 15-Aug-2023 03:44:17 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
2 B IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /api/event HTTP/1.1
Host: t.3hentai.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 78
Origin: https://3hentai.net
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 202 Accepted
server: nginx
date: Mon, 14 Aug 2023 03:44:18 GMT
content-type: text/plain; charset=utf-8
content-length: 2
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
x-request-id: F3sjFPu9ILFCr5iwsOeE
X-Firefox-Spdy: h2
827 B URL 3hentai.net/images/loading-animated-small.svg?f3089ca6c0ca709b47bd870da54954f6
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 5c16cede41a80d37b7af2eb6efa6582c
08b68acbe2f08bd065d232737e607e306c3deb9b
14f6c73634c092e1630ca48007679e6021212c4c6e609f60be7a277391647043
GET /images/loading-animated-small.svg?f3089ca6c0ca709b47bd870da54954f6 HTTP/1.1
Host: 3hentai.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/css/main-20220408.css?fezkopt7h8987b8df8
Cookie: XSRF-TOKEN=eyJpdiI6IkhITGZTOHFYbEhldnREbjBrTUJaWWc9PSIsInZhbHVlIjoiNEFnM3lZU0xBeU9EZVg2TmhxQmNDakJTcGcxNFNZKzBkclRYVmIwUWZGNjBtS1dnOW0ycE9wbDNzMFdlSEZPZEQ0SWFMS0J1ZWJzZmZEeENxVGJjMmw2dVRVM292WkNudURkVnlzVlN2NmtDWHlKSmxvK3NqUExsS1ZkMVVWODciLCJtYWMiOiJmYjlmNDY2NmFiMDlhZjRjZWU5NTgxN2QzMmNmZGRlMjk5NWI3MDA0NzhjYTdlNDZjNTI1MzEyMzZkZWM2YmM1IiwidGFnIjoiIn0%3D; hornysess2=eyJpdiI6IndVd3V2Rkp0dGh4Q0V0ZVlmMHJhSHc9PSIsInZhbHVlIjoidFZYRDlSbDc1Zm9PVmlyeDBBMXNpV0pTUEVQNFRpdm9uRUl4Y2ZVckNKc21BUTdrcldsWHBJMjhCSkR0cFdCcWdpL0tvb3lqTnZQUU9oRXJvL0d3Mm1Ca0NqcERHeUFlaGFpQ29GM0JtdHdvU1hPVEZEa0Q2UjZYRHBwN2hpcWYiLCJtYWMiOiI2YWMxMDg0MzY1OTYyMWZmMWFiOWRjOTVmNzk0OTdmODVlYTNjZjc1Y2EzODg4N2E5MTE4NDFmMDdlNjRmY2MyIiwidGFnIjoiIn0%3D; bHCVspY43ICx0gQ0mEcoLg562SC5qnZQ2bQgU1Hn=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; show_modal_warn_adult=0; show_hltadsv1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 14 Aug 2023 03:44:18 GMT
content-type: image/svg+xml
content-length: 827
last-modified: Fri, 16 Dec 2022 10:40:56 GMT
etag: "639c4b38-33b"
strict-transport-security: max-age=15768000
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
accept-ranges: bytes
X-Firefox-Spdy: h2
471 B IP
Hash 8b99462fd88c588a64629537d2e3c1dd
63271c8ea23c36fddb83556bbda1e7dde2ac19b0
08e8e73a2808a84f7853307f6f13c39c15c27d82b47ee99ef53c7bf94191713e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 14 Aug 2023 03:44:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 12 Aug 2023 02:35:30 GMT
Expires: Sat, 19 Aug 2023 02:35:29 GMT
Etag: "63271c8ea23c36fddb83556bbda1e7dde2ac19b0"
Cache-Control: max-age=427533,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7f6632d27c200b4d-OSL
471 B IP
Hash 8b99462fd88c588a64629537d2e3c1dd
63271c8ea23c36fddb83556bbda1e7dde2ac19b0
08e8e73a2808a84f7853307f6f13c39c15c27d82b47ee99ef53c7bf94191713e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 14 Aug 2023 03:44:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 12 Aug 2023 02:35:30 GMT
Expires: Sat, 19 Aug 2023 02:35:29 GMT
Etag: "63271c8ea23c36fddb83556bbda1e7dde2ac19b0"
Cache-Control: max-age=427390,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7f6632d27812b4f9-OSL
471 B IP
Hash 8b99462fd88c588a64629537d2e3c1dd
63271c8ea23c36fddb83556bbda1e7dde2ac19b0
08e8e73a2808a84f7853307f6f13c39c15c27d82b47ee99ef53c7bf94191713e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 14 Aug 2023 03:44:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 12 Aug 2023 02:35:30 GMT
Expires: Sat, 19 Aug 2023 02:35:29 GMT
Etag: "63271c8ea23c36fddb83556bbda1e7dde2ac19b0"
Cache-Control: max-age=427533,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7f6632d27a281c16-OSL
GET s9.3hentai.net/d335153/cover.jpg
200 OK 73 kB URL GET HTTP/2 s9.3hentai.net/d335153/cover.jpg
IP
ASN #49981 WorldStream B.V.
Requested by https://3hentai.net/d/335153
Certificate IssuerBuypass AS-983163327
Subjects9.3hentai.net
Fingerprint48:0A:57:37:89:6F:FE:F9:7D:A9:05:BD:ED:F5:41:EF:03:D1:CE:AB
ValidityThu, 01 Jun 2023 00:29:05 GMT - Mon, 27 Nov 2023 22:59:00 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 700x1000, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3c959d54f5b743a929a1c0d1ed0e5781
53f8225d36747ed52959b187ef3415a000afaec6
d62b95a3203f42fc0afc16ccfb6060896a92480951326d3eb1ccb9e90436071a
GET /d335153/cover.jpg HTTP/1.1
Host: s9.3hentai.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/
Cookie: XSRF-TOKEN=eyJpdiI6IkhITGZTOHFYbEhldnREbjBrTUJaWWc9PSIsInZhbHVlIjoiNEFnM3lZU0xBeU9EZVg2TmhxQmNDakJTcGcxNFNZKzBkclRYVmIwUWZGNjBtS1dnOW0ycE9wbDNzMFdlSEZPZEQ0SWFMS0J1ZWJzZmZEeENxVGJjMmw2dVRVM292WkNudURkVnlzVlN2NmtDWHlKSmxvK3NqUExsS1ZkMVVWODciLCJtYWMiOiJmYjlmNDY2NmFiMDlhZjRjZWU5NTgxN2QzMmNmZGRlMjk5NWI3MDA0NzhjYTdlNDZjNTI1MzEyMzZkZWM2YmM1IiwidGFnIjoiIn0%3D; hornysess2=eyJpdiI6IndVd3V2Rkp0dGh4Q0V0ZVlmMHJhSHc9PSIsInZhbHVlIjoidFZYRDlSbDc1Zm9PVmlyeDBBMXNpV0pTUEVQNFRpdm9uRUl4Y2ZVckNKc21BUTdrcldsWHBJMjhCSkR0cFdCcWdpL0tvb3lqTnZQUU9oRXJvL0d3Mm1Ca0NqcERHeUFlaGFpQ29GM0JtdHdvU1hPVEZEa0Q2UjZYRHBwN2hpcWYiLCJtYWMiOiI2YWMxMDg0MzY1OTYyMWZmMWFiOWRjOTVmNzk0OTdmODVlYTNjZjc1Y2EzODg4N2E5MTE4NDFmMDdlNjRmY2MyIiwidGFnIjoiIn0%3D; bHCVspY43ICx0gQ0mEcoLg562SC5qnZQ2bQgU1Hn=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; show_modal_warn_adult=0; show_hltadsv1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 14 Aug 2023 03:44:18 GMT
content-type: image/webp
content-length: 73188
last-modified: Tue, 21 Sep 2021 14:30:59 GMT
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
strict-transport-security: max-age=15768000
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
34 kB URL s9.3hentai.net/d335153/2t.jpg
IP
ASN #49981 WorldStream B.V.
Certificate IssuerBuypass AS-983163327
Subjects9.3hentai.net
Fingerprint48:0A:57:37:89:6F:FE:F9:7D:A9:05:BD:ED:F5:41:EF:03:D1:CE:AB
ValidityThu, 01 Jun 2023 00:29:05 GMT - Mon, 27 Nov 2023 22:59:00 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x571, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f0292ec93ca144e6f6ea249a2bf7eab2
f510afa2c6345493eb293e2d36b5d7a0e89fe906
fdee3a6d07ba1444b3b235fd90f44282e312f2a530d4418505f5113d7188ba5f
GET /d335153/2t.jpg HTTP/1.1
Host: s9.3hentai.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/
Cookie: XSRF-TOKEN=eyJpdiI6IkhITGZTOHFYbEhldnREbjBrTUJaWWc9PSIsInZhbHVlIjoiNEFnM3lZU0xBeU9EZVg2TmhxQmNDakJTcGcxNFNZKzBkclRYVmIwUWZGNjBtS1dnOW0ycE9wbDNzMFdlSEZPZEQ0SWFMS0J1ZWJzZmZEeENxVGJjMmw2dVRVM292WkNudURkVnlzVlN2NmtDWHlKSmxvK3NqUExsS1ZkMVVWODciLCJtYWMiOiJmYjlmNDY2NmFiMDlhZjRjZWU5NTgxN2QzMmNmZGRlMjk5NWI3MDA0NzhjYTdlNDZjNTI1MzEyMzZkZWM2YmM1IiwidGFnIjoiIn0%3D; hornysess2=eyJpdiI6IndVd3V2Rkp0dGh4Q0V0ZVlmMHJhSHc9PSIsInZhbHVlIjoidFZYRDlSbDc1Zm9PVmlyeDBBMXNpV0pTUEVQNFRpdm9uRUl4Y2ZVckNKc21BUTdrcldsWHBJMjhCSkR0cFdCcWdpL0tvb3lqTnZQUU9oRXJvL0d3Mm1Ca0NqcERHeUFlaGFpQ29GM0JtdHdvU1hPVEZEa0Q2UjZYRHBwN2hpcWYiLCJtYWMiOiI2YWMxMDg0MzY1OTYyMWZmMWFiOWRjOTVmNzk0OTdmODVlYTNjZjc1Y2EzODg4N2E5MTE4NDFmMDdlNjRmY2MyIiwidGFnIjoiIn0%3D; bHCVspY43ICx0gQ0mEcoLg562SC5qnZQ2bQgU1Hn=eyJpdiI6Ikd2QVlGaEpjdGxTMC9vQkNjSlpLR2c9PSIsInZhbHVlIjoiODBaL2RFUkxYOHNIck55WUdtbitmc1poTEx1SjlLamRsL29OcWFFUVVrbnhOVFdxUzNiQlR3QjAzUmUwbVBkeFUyV0tCSjZhSFgxelF4RlpHa2tQWmhTRVdhMlFtR01EY0hKRlR5eUJ1TE1DeHpnRmZ5OGFCbjZ6QlplNkxRclIyNVQ3MG82NEtmd1ZaNC8zTlZlK3Z5Uyt0RjdBc2R1MUk3SGtlSmxEam1iR3FwSkRNNmVyclpoenBTb0JQdHdiTzVySFFxbGFYdVJQeFI2RWc2UW5FZTQ0dnBSempaLzFuZ1lFNk8rbWtDMVJheVo2WTd2dW9IL210QnZjMnRGY3VwQlNHSjc0RkdGdzRiL0NWenlxME8wKzNJZklpaFQ1UGRQY2tLNmRwcUhKSHVDcDlYSVVtWmlKS0c0NjdtUDQyeThhRzB2QWVOS3Vkb2VoQ2xQMHp6SWNRWVFqajV3dzZjSlBYN3ZZYjJsUkIyTExDMHNDcm5aRllUK2trRkhFIiwibWFjIjoiNWFmODZjYTMwMjhiM2U4ODVmOWM3MjgyMGRjNWNjN2Y0OTI5M2I0NTVlZmE0NTk3OWFlNjdkMmQ1NDMzZmE1MyIsInRhZyI6IiJ9; show_modal_warn_adult=0; show_hltadsv1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 14 Aug 2023 03:44:18 GMT
content-type: image/webp
content-length: 34306
last-modified: Tue, 21 Sep 2021 14:30:59 GMT
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
strict-transport-security: max-age=15768000
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
GET s9.3hentai.net/d335153/4t.jpg
200 OK 38 kB URL GET HTTP/2 s9.3hentai.net/d335153/4t.jpg
IP
ASN #49981 WorldStream B.V.
Requested by https://3hentai.net/d/335153
Certificate IssuerBuypass AS-983163327
Subjects9.3hentai.net
Fingerprint48:0A:57:37:89:6F:FE:F9:7D:A9:05:BD:ED:F5:41:EF:03:D1:CE:AB
ValidityThu, 01 Jun 2023 00:29:05 GMT - Mon, 27 Nov 2023 22:59:00 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x573, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 26ae35cb6d8cb3c219f25a0622b41fb1
d8af0b59dbf10b491db43bed3ce2a9daf1f6da5c
64459ad561120d2e5d9821072f0d047fe7f8cab0eda803f714afb2a7e0b9eaa3
GET /d335153/4t.jpg HTTP/1.1
Host: s9.3hentai.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/
Cookie: XSRF-TOKEN=eyJpdiI6IkhITGZTOHFYbEhldnREbjBrTUJaWWc9PSIsInZhbHVlIjoiNEFnM3lZU0xBeU9EZVg2TmhxQmNDakJTcGcxNFNZKzBkclRYVmIwUWZGNjBtS1dnOW0ycE9wbDNzMFdlSEZPZEQ0SWFMS0J1ZWJzZmZEeENxVGJjMmw2dVRVM292WkNudURkVnlzVlN2NmtDWHlKSmxvK3NqUExsS1ZkMVVWODciLCJtYWMiOiJmYjlmNDY2NmFiMDlhZjRjZWU5NTgxN2QzMmNmZGRlMjk5NWI3MDA0NzhjYTdlNDZjNTI1MzEyMzZkZWM2YmM1IiwidGFnIjoiIn0%3D; hornysess2=eyJpdiI6IndVd3V2Rkp0dGh4Q0V0ZVlmMHJhSHc9PSIsInZhbHVlIjoidFZYRDlSbDc1Zm9PVmlyeDBBMXNpV0pTUEVQNFRpdm9uRUl4Y2ZVckNKc21BUTdrcldsWHBJMjhCSkR0cFdCcWdpL0tvb3lqTnZQUU9oRXJvL0d3Mm1Ca0NqcERHeUFlaGFpQ29GM0JtdHdvU1hPVEZEa0Q2UjZYRHBwN2hpcWYiLCJtYWMiOiI2YWMxMDg0MzY1OTYyMWZmMWFiOWRjOTVmNzk0OTdmODVlYTNjZjc1Y2EzODg4N2E5MTE4NDFmMDdlNjRmY2MyIiwidGFnIjoiIn0%3D; bHCVspY43ICx0gQ0mEcoLg562SC5qnZQ2bQgU1Hn=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; show_modal_warn_adult=0; show_hltadsv1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 14 Aug 2023 03:44:18 GMT
content-type: image/webp
content-length: 37976
last-modified: Tue, 21 Sep 2021 14:30:59 GMT
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
strict-transport-security: max-age=15768000
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
GET s9.3hentai.net/d335153/3t.jpg
200 OK 43 kB URL GET HTTP/2 s9.3hentai.net/d335153/3t.jpg
IP
ASN #49981 WorldStream B.V.
Requested by https://3hentai.net/d/335153
Certificate IssuerBuypass AS-983163327
Subjects9.3hentai.net
Fingerprint48:0A:57:37:89:6F:FE:F9:7D:A9:05:BD:ED:F5:41:EF:03:D1:CE:AB
ValidityThu, 01 Jun 2023 00:29:05 GMT - Mon, 27 Nov 2023 22:59:00 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x572, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e9f25998819fae066adca32900e2465d
33e2439e882237120387140e2b4d66d7aad0be28
5e12517fa94b256581349d749d017a59864d8edda4c0b43680cc243c63624163
GET /d335153/3t.jpg HTTP/1.1
Host: s9.3hentai.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/
Cookie: XSRF-TOKEN=eyJpdiI6IkhITGZTOHFYbEhldnREbjBrTUJaWWc9PSIsInZhbHVlIjoiNEFnM3lZU0xBeU9EZVg2TmhxQmNDakJTcGcxNFNZKzBkclRYVmIwUWZGNjBtS1dnOW0ycE9wbDNzMFdlSEZPZEQ0SWFMS0J1ZWJzZmZEeENxVGJjMmw2dVRVM292WkNudURkVnlzVlN2NmtDWHlKSmxvK3NqUExsS1ZkMVVWODciLCJtYWMiOiJmYjlmNDY2NmFiMDlhZjRjZWU5NTgxN2QzMmNmZGRlMjk5NWI3MDA0NzhjYTdlNDZjNTI1MzEyMzZkZWM2YmM1IiwidGFnIjoiIn0%3D; hornysess2=eyJpdiI6IndVd3V2Rkp0dGh4Q0V0ZVlmMHJhSHc9PSIsInZhbHVlIjoidFZYRDlSbDc1Zm9PVmlyeDBBMXNpV0pTUEVQNFRpdm9uRUl4Y2ZVckNKc21BUTdrcldsWHBJMjhCSkR0cFdCcWdpL0tvb3lqTnZQUU9oRXJvL0d3Mm1Ca0NqcERHeUFlaGFpQ29GM0JtdHdvU1hPVEZEa0Q2UjZYRHBwN2hpcWYiLCJtYWMiOiI2YWMxMDg0MzY1OTYyMWZmMWFiOWRjOTVmNzk0OTdmODVlYTNjZjc1Y2EzODg4N2E5MTE4NDFmMDdlNjRmY2MyIiwidGFnIjoiIn0%3D; bHCVspY43ICx0gQ0mEcoLg562SC5qnZQ2bQgU1Hn=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; show_modal_warn_adult=0; show_hltadsv1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 14 Aug 2023 03:44:18 GMT
content-type: image/webp
content-length: 43298
last-modified: Tue, 21 Sep 2021 14:30:59 GMT
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
strict-transport-security: max-age=15768000
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
35 kB URL s9.3hentai.net/d335153/1t.jpg
IP
ASN #49981 WorldStream B.V.
Certificate IssuerBuypass AS-983163327
Subjects9.3hentai.net
Fingerprint48:0A:57:37:89:6F:FE:F9:7D:A9:05:BD:ED:F5:41:EF:03:D1:CE:AB
ValidityThu, 01 Jun 2023 00:29:05 GMT - Mon, 27 Nov 2023 22:59:00 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x571, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8efed6f2f9916f6986cf7eb32f0cc4d9
ca33e0c5300870a350b345c1587b8e1a5e5ae6ff
2971300434d83518b87db9075d611743099ecc00ad29fee04924edc712e3734e
GET /d335153/1t.jpg HTTP/1.1
Host: s9.3hentai.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/
Cookie: XSRF-TOKEN=eyJpdiI6IkhITGZTOHFYbEhldnREbjBrTUJaWWc9PSIsInZhbHVlIjoiNEFnM3lZU0xBeU9EZVg2TmhxQmNDakJTcGcxNFNZKzBkclRYVmIwUWZGNjBtS1dnOW0ycE9wbDNzMFdlSEZPZEQ0SWFMS0J1ZWJzZmZEeENxVGJjMmw2dVRVM292WkNudURkVnlzVlN2NmtDWHlKSmxvK3NqUExsS1ZkMVVWODciLCJtYWMiOiJmYjlmNDY2NmFiMDlhZjRjZWU5NTgxN2QzMmNmZGRlMjk5NWI3MDA0NzhjYTdlNDZjNTI1MzEyMzZkZWM2YmM1IiwidGFnIjoiIn0%3D; hornysess2=eyJpdiI6IndVd3V2Rkp0dGh4Q0V0ZVlmMHJhSHc9PSIsInZhbHVlIjoidFZYRDlSbDc1Zm9PVmlyeDBBMXNpV0pTUEVQNFRpdm9uRUl4Y2ZVckNKc21BUTdrcldsWHBJMjhCSkR0cFdCcWdpL0tvb3lqTnZQUU9oRXJvL0d3Mm1Ca0NqcERHeUFlaGFpQ29GM0JtdHdvU1hPVEZEa0Q2UjZYRHBwN2hpcWYiLCJtYWMiOiI2YWMxMDg0MzY1OTYyMWZmMWFiOWRjOTVmNzk0OTdmODVlYTNjZjc1Y2EzODg4N2E5MTE4NDFmMDdlNjRmY2MyIiwidGFnIjoiIn0%3D; bHCVspY43ICx0gQ0mEcoLg562SC5qnZQ2bQgU1Hn=eyJpdiI6Ikd2QVlGaEpjdGxTMC9vQkNjSlpLR2c9PSIsInZhbHVlIjoiODBaL2RFUkxYOHNIck55WUdtbitmc1poTEx1SjlLamRsL29OcWFFUVVrbnhOVFdxUzNiQlR3QjAzUmUwbVBkeFUyV0tCSjZhSFgxelF4RlpHa2tQWmhTRVdhMlFtR01EY0hKRlR5eUJ1TE1DeHpnRmZ5OGFCbjZ6QlplNkxRclIyNVQ3MG82NEtmd1ZaNC8zTlZlK3Z5Uyt0RjdBc2R1MUk3SGtlSmxEam1iR3FwSkRNNmVyclpoenBTb0JQdHdiTzVySFFxbGFYdVJQeFI2RWc2UW5FZTQ0dnBSempaLzFuZ1lFNk8rbWtDMVJheVo2WTd2dW9IL210QnZjMnRGY3VwQlNHSjc0RkdGdzRiL0NWenlxME8wKzNJZklpaFQ1UGRQY2tLNmRwcUhKSHVDcDlYSVVtWmlKS0c0NjdtUDQyeThhRzB2QWVOS3Vkb2VoQ2xQMHp6SWNRWVFqajV3dzZjSlBYN3ZZYjJsUkIyTExDMHNDcm5aRllUK2trRkhFIiwibWFjIjoiNWFmODZjYTMwMjhiM2U4ODVmOWM3MjgyMGRjNWNjN2Y0OTI5M2I0NTVlZmE0NTk3OWFlNjdkMmQ1NDMzZmE1MyIsInRhZyI6IiJ9; show_modal_warn_adult=0; show_hltadsv1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 14 Aug 2023 03:44:18 GMT
content-type: image/webp
content-length: 34736
last-modified: Tue, 21 Sep 2021 14:30:59 GMT
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
strict-transport-security: max-age=15768000
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
GET js.wpadmngr.com/static/adManager.m.js
200 OK 59 kB URL GET HTTP/2 js.wpadmngr.com/static/adManager.m.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://3hentai.net/d/335153
Certificate IssuerLet's Encrypt
Subjectjs.wpadmngr.com
Fingerprint94:E5:D3:5F:B7:C1:FE:D3:3F:A8:D2:51:08:90:76:BB:55:97:B5:0A
ValiditySat, 15 Jul 2023 08:02:16 GMT - Fri, 13 Oct 2023 08:02:15 GMT
File type gzip compressed data, from Unix\012- data
Hash 4cdfc8513516fd5a860857114dd9e290
02042b0ef75d1088494410ce7cfe2ddf518889a6
89cd2cd24d47f5ab56176c5160d7c0c88ead92800e017633a1b8c104a74d6077
GET /static/adManager.m.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:18 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 09 Aug 2023 10:24:07 GMT
etag: W/"64d36947-2a138"
content-encoding: gzip
expires: Mon, 14 Aug 2023 03:49:18 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
178 B URL poweredby.jads.co/js/jads.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 14 Aug 2023 03:44:18 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
24 kB URL 3hentai.net/css/main-20220408.css?fezkopt7h8987b8df8
IP
File type gzip compressed data, from Unix\012- data
Hash 78f6efecf5376077558a26baec8eb2ee
934506eb0d6c595ff33b3a1247151d52b316ba2d
88b5d2167ed82174b4f09ecc28038e477fd4ec24612613e74e22da82e15c8532
GET /css/main-20220408.css?fezkopt7h8987b8df8 HTTP/1.1
Host: 3hentai.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/d/335153
Cookie: XSRF-TOKEN=eyJpdiI6IkhITGZTOHFYbEhldnREbjBrTUJaWWc9PSIsInZhbHVlIjoiNEFnM3lZU0xBeU9EZVg2TmhxQmNDakJTcGcxNFNZKzBkclRYVmIwUWZGNjBtS1dnOW0ycE9wbDNzMFdlSEZPZEQ0SWFMS0J1ZWJzZmZEeENxVGJjMmw2dVRVM292WkNudURkVnlzVlN2NmtDWHlKSmxvK3NqUExsS1ZkMVVWODciLCJtYWMiOiJmYjlmNDY2NmFiMDlhZjRjZWU5NTgxN2QzMmNmZGRlMjk5NWI3MDA0NzhjYTdlNDZjNTI1MzEyMzZkZWM2YmM1IiwidGFnIjoiIn0%3D; hornysess2=eyJpdiI6IndVd3V2Rkp0dGh4Q0V0ZVlmMHJhSHc9PSIsInZhbHVlIjoidFZYRDlSbDc1Zm9PVmlyeDBBMXNpV0pTUEVQNFRpdm9uRUl4Y2ZVckNKc21BUTdrcldsWHBJMjhCSkR0cFdCcWdpL0tvb3lqTnZQUU9oRXJvL0d3Mm1Ca0NqcERHeUFlaGFpQ29GM0JtdHdvU1hPVEZEa0Q2UjZYRHBwN2hpcWYiLCJtYWMiOiI2YWMxMDg0MzY1OTYyMWZmMWFiOWRjOTVmNzk0OTdmODVlYTNjZjc1Y2EzODg4N2E5MTE4NDFmMDdlNjRmY2MyIiwidGFnIjoiIn0%3D; bHCVspY43ICx0gQ0mEcoLg562SC5qnZQ2bQgU1Hn=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; show_modal_warn_adult=0; show_hltadsv1=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 14 Aug 2023 03:44:17 GMT
content-type: text/css
last-modified: Fri, 16 Jun 2023 16:31:16 GMT
vary: Accept-Encoding
etag: W/"648c8e54-11ba9"
expires: Mon, 14 Aug 2023 03:45:17 GMT
cache-control: max-age=60
strict-transport-security: max-age=15768000
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
content-encoding: gzip
X-Firefox-Spdy: h2
1.0 kB URL na.nawpush.com/tags/74867?version_name=d
IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (1016), with no line terminators
Hash 9a1c5366ef5a6f2b053cfaaa997e3745
199195d3833821edf01b4f2e88db3334769ecbfc
be1a52a263e95530f94cadfb732e2385fd6a5541411de0b8f2c3b2124f1c0966
GET /tags/74867?version_name=d HTTP/1.1
Host: na.nawpush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://3hentai.net
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:18 GMT
content-type: application/json
content-length: 1016
server: nginx/1.18.0
cache-control: max-age=300, public
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
0 B URL js.capndr.com/advertising.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertising.js HTTP/1.1
Host: js.capndr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:18 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 14 Jul 2023 08:23:25 GMT
etag: "64b105fd-0"
expires: Mon, 14 Aug 2023 03:49:18 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET poweredby.jads.co/js/jads2.js
200 OK 1.7 kB URL GET HTTP/1.1 poweredby.jads.co/js/jads2.js
IP
Requested by https://3hentai.net/d/335153
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (3758), with no line terminators
Hash bc8141c4650030c41f6a98026b12ce80
af5618f7e467a207d4c64627be580283ab5640cd
5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://3hentai.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 14 Aug 2023 03:44:18 GMT
Content-Type: application/x-javascript
Last-Modified: Fri, 21 Apr 2023 20:12:17 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"6442ee21-eae"
Content-Encoding: gzip
GET poweredby.jads.co/js/jads2.js
200 OK 1.7 kB URL GET HTTP/1.1 poweredby.jads.co/js/jads2.js
IP
Requested by https://3hentai.net/d/335153
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (3758), with no line terminators
Hash bc8141c4650030c41f6a98026b12ce80
af5618f7e467a207d4c64627be580283ab5640cd
5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://3hentai.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 14 Aug 2023 03:44:18 GMT
Content-Type: application/x-javascript
Last-Modified: Fri, 21 Apr 2023 20:12:17 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"6442ee21-eae"
Content-Encoding: gzip
GET poweredby.jads.co/js/jads2.js
200 OK 1.7 kB URL GET HTTP/1.1 poweredby.jads.co/js/jads2.js
IP
Requested by https://3hentai.net/d/335153
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (3758), with no line terminators
Hash bc8141c4650030c41f6a98026b12ce80
af5618f7e467a207d4c64627be580283ab5640cd
5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://3hentai.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 14 Aug 2023 03:44:18 GMT
Content-Type: application/x-javascript
Last-Modified: Fri, 21 Apr 2023 20:12:17 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"6442ee21-eae"
Content-Encoding: gzip
5.2 kB URL 3hentai.net/apple-touch-icon.png
IP
File type PNG image data, 180 x 180, 8-bit colormap, non-interlaced\012- data
Hash 0a494525daac3bbe4d980cfed9717c83
ec0bb955ce5842d61e9f46891066571f66703e69
47ebf924972a65dcb7fcc5adbb9d5791fb27f7455ec14525b18783776deefb89
GET /apple-touch-icon.png HTTP/1.1
Host: 3hentai.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/d/335153
Cookie: XSRF-TOKEN=eyJpdiI6IkhITGZTOHFYbEhldnREbjBrTUJaWWc9PSIsInZhbHVlIjoiNEFnM3lZU0xBeU9EZVg2TmhxQmNDakJTcGcxNFNZKzBkclRYVmIwUWZGNjBtS1dnOW0ycE9wbDNzMFdlSEZPZEQ0SWFMS0J1ZWJzZmZEeENxVGJjMmw2dVRVM292WkNudURkVnlzVlN2NmtDWHlKSmxvK3NqUExsS1ZkMVVWODciLCJtYWMiOiJmYjlmNDY2NmFiMDlhZjRjZWU5NTgxN2QzMmNmZGRlMjk5NWI3MDA0NzhjYTdlNDZjNTI1MzEyMzZkZWM2YmM1IiwidGFnIjoiIn0%3D; hornysess2=eyJpdiI6IndVd3V2Rkp0dGh4Q0V0ZVlmMHJhSHc9PSIsInZhbHVlIjoidFZYRDlSbDc1Zm9PVmlyeDBBMXNpV0pTUEVQNFRpdm9uRUl4Y2ZVckNKc21BUTdrcldsWHBJMjhCSkR0cFdCcWdpL0tvb3lqTnZQUU9oRXJvL0d3Mm1Ca0NqcERHeUFlaGFpQ29GM0JtdHdvU1hPVEZEa0Q2UjZYRHBwN2hpcWYiLCJtYWMiOiI2YWMxMDg0MzY1OTYyMWZmMWFiOWRjOTVmNzk0OTdmODVlYTNjZjc1Y2EzODg4N2E5MTE4NDFmMDdlNjRmY2MyIiwidGFnIjoiIn0%3D; bHCVspY43ICx0gQ0mEcoLg562SC5qnZQ2bQgU1Hn=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; show_modal_warn_adult=0; show_hltadsv1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 14 Aug 2023 03:44:18 GMT
content-type: image/png
content-length: 5153
last-modified: Thu, 29 Dec 2022 10:45:57 GMT
etag: "63ad6fe5-1421"
strict-transport-security: max-age=15768000
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
accept-ranges: bytes
X-Firefox-Spdy: h2
GET 3hentai.net/favicon-16x16.png
200 OK 600 B URL GET HTTP/2 3hentai.net/favicon-16x16.png
IP
Requested by https://3hentai.net/d/335153
Certificate IssuerBuypass AS-983163327
Subject3hentai.net
FingerprintD0:F2:6F:6F:97:72:2C:AE:E0:F6:A4:EC:99:7C:36:45:7D:58:2F:34
ValidityTue, 04 Apr 2023 19:49:33 GMT - Sat, 30 Sep 2023 21:59:00 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash bd34fbb278e2e8b15dc05d67d610ddd8
ba3ceca3d03225e5e70af55465e3a30092dce5e8
726f969efe80de9d186d011fbb635c4266a432a4a1ec291b8d1d7adac22a1c88
GET /favicon-16x16.png HTTP/1.1
Host: 3hentai.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/d/335153
Cookie: XSRF-TOKEN=eyJpdiI6IkhITGZTOHFYbEhldnREbjBrTUJaWWc9PSIsInZhbHVlIjoiNEFnM3lZU0xBeU9EZVg2TmhxQmNDakJTcGcxNFNZKzBkclRYVmIwUWZGNjBtS1dnOW0ycE9wbDNzMFdlSEZPZEQ0SWFMS0J1ZWJzZmZEeENxVGJjMmw2dVRVM292WkNudURkVnlzVlN2NmtDWHlKSmxvK3NqUExsS1ZkMVVWODciLCJtYWMiOiJmYjlmNDY2NmFiMDlhZjRjZWU5NTgxN2QzMmNmZGRlMjk5NWI3MDA0NzhjYTdlNDZjNTI1MzEyMzZkZWM2YmM1IiwidGFnIjoiIn0%3D; hornysess2=eyJpdiI6IndVd3V2Rkp0dGh4Q0V0ZVlmMHJhSHc9PSIsInZhbHVlIjoidFZYRDlSbDc1Zm9PVmlyeDBBMXNpV0pTUEVQNFRpdm9uRUl4Y2ZVckNKc21BUTdrcldsWHBJMjhCSkR0cFdCcWdpL0tvb3lqTnZQUU9oRXJvL0d3Mm1Ca0NqcERHeUFlaGFpQ29GM0JtdHdvU1hPVEZEa0Q2UjZYRHBwN2hpcWYiLCJtYWMiOiI2YWMxMDg0MzY1OTYyMWZmMWFiOWRjOTVmNzk0OTdmODVlYTNjZjc1Y2EzODg4N2E5MTE4NDFmMDdlNjRmY2MyIiwidGFnIjoiIn0%3D; bHCVspY43ICx0gQ0mEcoLg562SC5qnZQ2bQgU1Hn=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; show_modal_warn_adult=0; show_hltadsv1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 14 Aug 2023 03:44:18 GMT
content-type: image/png
content-length: 600
last-modified: Thu, 29 Dec 2022 10:45:57 GMT
etag: "63ad6fe5-258"
strict-transport-security: max-age=15768000
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
accept-ranges: bytes
X-Firefox-Spdy: h2
1.5 kB URL poweredby.jads.co/adshow.php?adzone=955224
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (418), with CRLF, LF line terminators
Hash 9403739cd05c2a47d6b154449499663a
e10eb1471cdecbe0732376a489be9826ba804ad0
28e7a266df81f2dec7741a62f97694fc28f7c2050cfa5938a481565928eede15
GET /adshow.php?adzone=955224 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 14 Aug 2023 03:44:19 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=b673aec51d764353b1d8ecc577c19e97; expires=Tue, 13-Aug-2024 03:44:19 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps15054=1; expires=Tue, 15-Aug-2023 03:44:19 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjc1NzM5MDtpOjE2OTIyNDM4NTk7fQ%3D%3D; expires=Thu, 17-Aug-2023 03:44:19 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Thu, 17-Aug-2023 03:44:19 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
GET poweredby.jads.co/adshow.php?adzone=939435
200 OK 1.4 kB URL GET HTTP/1.1 poweredby.jads.co/adshow.php?adzone=939435
IP
Requested by https://3hentai.net/d/335153
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (305), with CRLF, LF line terminators
Hash 76cc43473bd5a9e7c7b3dd4d085be547
9429cdc7f47e631e67b7dc8fa01ba8093ad9f25a
d7234159ba73c9745982c8456ec1b9569fe18c040e76c5a35f604788079a6fc7
GET /adshow.php?adzone=939435 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 14 Aug 2023 03:44:19 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=b673aec51d764353b1d8ecc577c19e97; expires=Tue, 13-Aug-2024 03:44:19 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YTowOnt9; expires=Thu, 17-Aug-2023 03:44:19 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Thu, 17-Aug-2023 03:44:19 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
GET poweredby.jads.co/adshow.php?adzone=929874
200 OK 1.7 kB URL GET HTTP/1.1 poweredby.jads.co/adshow.php?adzone=929874
IP
Requested by https://3hentai.net/d/335153
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1332), with CRLF, LF line terminators
Hash efc217cdff99e201e2c1bbc9c2520abc
dddf9974054f3fec7744b441aaf5674001cbcb33
8ff046e3ae6e39e413e38e6649c2772082089d3fcf2a25d64a1dd5bfc0182826
GET /adshow.php?adzone=929874 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 14 Aug 2023 03:44:19 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=b673aec51d764353b1d8ecc577c19e97; expires=Tue, 13-Aug-2024 03:44:19 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YTowOnt9; expires=Thu, 17-Aug-2023 03:44:19 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Thu, 17-Aug-2023 03:44:19 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
20 kB URL js.capndr.com/popunder-admanager/build.m.js
IP
ASN #39572 DataWeb Global Group B.V.
File type gzip compressed data, from Unix\012- data
Hash 4f333507c970e473c11042d4f0a40d7c
25146c8b824cd993a33af0d5870f1f83c4380cef
00fe938b59711f85b44ce1d006f334c6d390adf78a010650b4e1ee8e9bdb2d3f
GET /popunder-admanager/build.m.js HTTP/1.1
Host: js.capndr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:19 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 10 Aug 2023 11:17:03 GMT
etag: W/"64d4c72f-dda8"
content-encoding: gzip
expires: Mon, 14 Aug 2023 03:49:19 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET a69i.com/log/count.html
200 OK 96 kB IP
Requested by https://3hentai.net/d/335153
Certificate IssuerLet's Encrypt
Subjecta69i.com
FingerprintCD:3E:72:96:81:E4:DC:B4:A8:B6:90:60:33:4F:78:7D:6F:F6:F5:8B
ValidityWed, 02 Aug 2023 08:36:07 GMT - Tue, 31 Oct 2023 08:36:06 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6172c22f794efb83b4278cf8de796c10
de4ce3047897ffa475b55ea53f948051adf6e5f7
4fd89b82e12f43b08fa4f054065ec981c27720cdd7bcacd8b44ff98f75cd5655
GET /log/count.html HTTP/1.1
Host: a69i.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:18 GMT
content-type: text/html
last-modified: Wed, 09 Aug 2023 05:46:18 GMT
vary: Accept-Encoding
x-request-id: 4491f0d56335dd0d907bc307e9e4192a
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8xeOWGvu%2BAlMfinIF9ekzfySZztCf9A9%2BDoB3l18m7xvQz19Z9wcytNJNF6Xw6TcUpxTBH2AW%2BF0JokbFWpNzluaZatzNK2o9c%2FjuJjIVZGlHRdXaFt8hY5p5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f6632d30e1c250e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
28 kB IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 250x250, components 3\012- data
Hash 2acfb73fd2df022a7dad5595adef5bda
939b803ea641bd427b7599f92a816262e7a5bf48
3d4610a2ab69d08e54685d0d3cfcf03ec663bacff8cc89a1e0a2904a7769e641
GET /1x1.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=b673aec51d764353b1d8ecc577c19e97; imps15054=1; juicy_data_1=YTowOnt9; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:19 GMT
etag: "1478208967"
cache-control: max-age=28293037
content-length: 27460
content-type: image/jpeg
last-modified: Thu, 03 Nov 2016 21:36:07 GMT
accept-ranges: bytes
x-hw: 1691984659.dop213.sk1.t,1691984659.cds262.sk1.hn,1691984659.cds217.sk1.c
X-Firefox-Spdy: h2
POST fp.metricswpsh.com/fp?tag_id=74867
200 OK 0 B URL POST HTTP/1.1 fp.metricswpsh.com/fp?tag_id=74867
IP
ASN #24940 Hetzner Online GmbH
Requested by https://3hentai.net/d/335153
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
Fingerprint27:19:51:03:75:6E:24:9A:6F:DC:8E:F9:AD:60:14:3C:91:EE:9B:E1
ValidityFri, 14 Jul 2023 10:00:37 GMT - Thu, 12 Oct 2023 10:00:36 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=74867 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://3hentai.net/
Origin: https://3hentai.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Mon, 14 Aug 2023 03:44:19 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://3hentai.net
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
GET r.trackwilltrk.com/s1/0821f9f7-b633-4eeb-8b23-65ebf6464b85?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=181979&cv4=268684&cv5=929874&cv6=
200 OK 1.2 kB URL GET HTTP/1.1 r.trackwilltrk.com/s1/0821f9f7-b633-4eeb-8b23-65ebf6464b85?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=181979&cv4=268684&cv5=929874&cv6=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://poweredby.jads.co/adshow.php?adzone=929874
Certificate IssuerLet's Encrypt
Subjectr.trackwilltrk.com
Fingerprint31:35:E7:D5:41:26:47:22:B3:E0:97:96:AF:01:51:DD:B9:AF:CC:9C
ValidityMon, 17 Jul 2023 02:15:49 GMT - Sun, 15 Oct 2023 02:15:48 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (701)
Hash eb3c0d391c30695c7a3edde0b337a03f
2ef9619bfd868887cab440868b09a0f2f38a6ca4
08589d16c3ff8720d6bccdc4c098a26fcd83cd034bab3c13bd70c4e4bbb11ec1
GET /s1/0821f9f7-b633-4eeb-8b23-65ebf6464b85?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=181979&cv4=268684&cv5=929874&cv6= HTTP/1.1
Host: r.trackwilltrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 14 Aug 2023 03:44:19 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: uid=zMZ5_wktM; Path=/; Domain=trackwilltrk.com; Expires=Tue, 15 Aug 2023 03:44:19 GMT; HttpOnly
X-Request-Id: a3770e51-9efe-495b-8547-5883b7818741
Content-Encoding: gzip
POST fp.metricswpsh.com/fp?tag_id=74867
200 OK 60 B URL POST HTTP/1.1 fp.metricswpsh.com/fp?tag_id=74867
IP
ASN #24940 Hetzner Online GmbH
Requested by https://3hentai.net/d/335153
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
Fingerprint27:19:51:03:75:6E:24:9A:6F:DC:8E:F9:AD:60:14:3C:91:EE:9B:E1
ValidityFri, 14 Jul 2023 10:00:37 GMT - Thu, 12 Oct 2023 10:00:36 GMT
File type JSON data\012- , ASCII text
Hash 7b80916fa1c8b18ef0e885a9649deab1
f491dd04214eeca64cb48edc4fe0b0e4bf18ccc6
cfbc2c4fcc67cd800466b094172bc156a1585b568c9a8bf9765307694948a242
POST /fp?tag_id=74867 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 23167
Origin: https://3hentai.net
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 14 Aug 2023 03:44:19 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 60
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://3hentai.net
Set-Cookie: id=17847916457892659267; Expires=Tue, 13 Aug 2024 03:44:19 GMT; Secure; SameSite=None
Vary: Origin
0 B URL a7d44155fc.1f804d7570.com/in/track?data=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
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/track?data=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 HTTP/1.1
Host: a7d44155fc.1f804d7570.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://3hentai.net
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:19 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
472 B IP
Hash 135fbafbe8e67ef5e3e65b793fe4b585
ce16380398bee3e77f8b932eec2a17227eb3b789
1b76bd813355251f7751012b99bd3ab143c09b7a2fff177a8482eb7e16570094
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Aug 2023 03:44:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET go.xlrdr.com/i?campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&tag=girls/asian&sourceId=728asrsasgirlwl&targetDomain=&buttonColor=&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&liveBadgeColor=&showButton=1&showModelName=1&showTitle=1&showLiveBadge=1&isXhDesign=0&actionButtonPlacement=bottom&thumbSizeKey=small&hideButtonOnSmallSpots=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}&landing=WidgetV4Universal
302 Found 0 B URL GET HTTP/2 go.xlrdr.com/i?campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&tag=girls/asian&sourceId=728asrsasgirlwl&targetDomain=&buttonColor=&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&liveBadgeColor=&showButton=1&showModelName=1&showTitle=1&showLiveBadge=1&isXhDesign=0&actionButtonPlacement=bottom&thumbSizeKey=small&hideButtonOnSmallSpots=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}&landing=WidgetV4Universal
IP
Requested by https://r.trackwilltrk.com/s1/0821f9f7-b633-4eeb-8b23-65ebf6464b85?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=181979&cv4=268684&cv5=929874&cv6=
Certificate IssuerCloudflare, Inc.
Subjectxlrdr.com
FingerprintB7:7A:2F:CD:F6:76:0D:74:98:F0:DA:47:69:84:7D:8C:4E:2C:2D:63
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /i?campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&tag=girls/asian&sourceId=728asrsasgirlwl&targetDomain=&buttonColor=&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&liveBadgeColor=&showButton=1&showModelName=1&showTitle=1&showLiveBadge=1&isXhDesign=0&actionButtonPlacement=bottom&thumbSizeKey=small&hideButtonOnSmallSpots=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}&landing=WidgetV4Universal HTTP/1.1
Host: go.xlrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r.trackwilltrk.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 14 Aug 2023 03:44:19 GMT
content-length: 0
location: https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDFRFiBZBvMSLtrtWS5dSf3dTPfP7SEmDCacvChpQ; SameSite=None; Secure; path=/; expires=Tue, 15-Aug-23 03:44:19 GMT; HttpOnly
server: cloudflare
cf-ray: 7f6632daed63b4f9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
0 B URL accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:jUwHzuUfRKMOfPuH2TWAi4vkWI0oEw:HFzdIalMNMKKTjKi; Expires=Wed, 13-Aug-2025 03:44:19 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 14 Aug 2023 03:44:19 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AXo7B7UpYiogu2GmTEyaBYsDA9M_0oylGD-1MzDG4t5gQlfNNUv17fWM8X5ue6Q_BXf5t_b8Ub2rhw
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce--v98sKsTniDSCs0td14i7w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
471 B IP
Hash a69066e1c76aa8cb642e97b692da4fb2
9958f2098cfc97c0dcc3a6327185ad093f0012e7
51d7e21e9594787e6838fd560a59beaa7f58d50de41319a8c8f04e6bade9d1e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Aug 2023 03:44:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
398 B URL accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AXo7B7UpYiogu2GmTEyaBYsDA9M_0oylGD-1MzDG4t5gQlfNNUv17fWM8X5ue6Q_BXf5t_b8Ub2rhw
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (383)
Hash f32dd7a9643b13df531b0dc65e879814
0bc06d67a26de4582c609f6a5ff2fb429277f5c1
703d4ad0a71c1ae93ce2683febbae712ecd31cc50a04231a02fbb2b782eda431
GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AXo7B7UpYiogu2GmTEyaBYsDA9M_0oylGD-1MzDG4t5gQlfNNUv17fWM8X5ue6Q_BXf5t_b8Ub2rhw HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:K8J_DaRBqKRYZ18DM5eRESfmSYcY0w:XQA1YWy0WLMY6S4W;Path=/;Expires=Wed, 13-Aug-2025 03:44:19 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 14 Aug 2023 03:44:19 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AXo7B7UUpMUhunsrlJUOhVbCM_hxtUVlXTu6o4uWKto83eTCaBbMomLvWWQpvjzYxuNCBy-d0FHfUg&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1626578717%3A1691984659774500
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-qyfdl9bfhoSHN9zNnBVuwQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 398
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
6.7 kB URL roomimg.stream.highwebmedia.com/riw/jackmanfantasy.jpg?1691984640
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 959x960, segment length 16, comment: "Lavc58.134.100", baseline, precision 8, 480x270, components 3\012- data
Hash 17c463cc3d321400fc488c8e903d2408
42747bdd731267c9bb4a59f553753b17a663c642
4a8b4b2a07f6dfbe567209348dba153830a05c232bd0a256260b3960a6d79143
GET /riw/jackmanfantasy.jpg?1691984640 HTTP/1.1
Host: roomimg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:20 GMT
content-type: image/jpeg
content-length: 6654
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
cache-control: public, max-age=30
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-frame-options: DENY
x-server-name: CB Jpeg Server
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 17
last-modified: Mon, 14 Aug 2023 03:44:03 GMT
expires: Mon, 14 Aug 2023 03:44:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z3koAdemEzqXJLE%2FaCrb8WQsV3eN8AoJ8YP3WjEff1pkJnHOc1cfczkZGD7HZ29hytz67Y6se3nJoPoQKqGEkZfNzgmn8T0rJFhPqnjzhJP%2BK03A9WZM7H6R1WsQCRzui1XDH5KYDXn9XEhOW5EiSkQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=jWm4iuaffd4XXbp0JVl9qEmFs8GHwhxpludBWsjB7X8-1691984660079-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7f6632dd6ddeb500-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
15 kB URL roomimg.stream.highwebmedia.com/riw/ksensual.jpg?1691984640
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 548x549, segment length 16, comment: "Lavc58.134.100", baseline, precision 8, 480x270, components 3\012- data
Hash aa221242eb297a50068624a020eb89d6
a639975932d55571269c5e2c58e694ec0eed7cd6
38d598e6069029213f9255b7c7bc2d3db13e9c913f29ead1867ae43074329565
GET /riw/ksensual.jpg?1691984640 HTTP/1.1
Host: roomimg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:20 GMT
content-type: image/jpeg
content-length: 14968
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
cache-control: public, max-age=30
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-frame-options: DENY
x-server-name: CB Jpeg Server
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 25
last-modified: Mon, 14 Aug 2023 03:43:55 GMT
expires: Mon, 14 Aug 2023 03:44:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F8JfDzvp1QL4WEVyEdcnC9n8DGRC23CLf%2BstzViLeZDP0iYYWx90Vv9gV9%2BfY2DLshEmPQmyMQe1L1PmODWqQ5%2Bkpvjn20TsJBvMBl5EOHufF8wlU4glTJYOmn23nd2CRekEaicGT83DeKseRVoAGIM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=jWm4iuaffd4XXbp0JVl9qEmFs8GHwhxpludBWsjB7X8-1691984660079-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7f6632dd6de1b500-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET roomimg.stream.highwebmedia.com/riw/cuteanddesesperate.jpg?1691984640
200 OK 14 kB URL GET HTTP/2 roomimg.stream.highwebmedia.com/riw/cuteanddesesperate.jpg?1691984640
IP
Requested by https://chaturbate.com/tours/3/?tour=x1Rd&campaign=HPR7R&c=5&p=0&disable_sound=0
Certificate IssuerDigiCert Inc
Subject*.live.mmcdn.com
Fingerprint34:DF:74:AE:F3:BE:BA:96:2E:BE:92:8E:90:D4:92:67:9F:6B:98:AD
ValiditySat, 04 Mar 2023 00:00:00 GMT - Fri, 08 Mar 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 548x549, segment length 16, progressive, precision 8, 480x270, components 3\012- data
Hash 501ebf720c775950dbec8d6327a71a86
4f8c139277e58c78d234908abee98e89b611f231
9533f1e38cd9ed722ff30a3c9108ee2bb79e0a2261c8b5923e206e8b39427413
GET /riw/cuteanddesesperate.jpg?1691984640 HTTP/1.1
Host: roomimg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:20 GMT
content-type: image/jpeg
content-length: 13591
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
cache-control: public, max-age=30
cf-bgj: imgq:100,h2pri
cf-polished: origSize=13673
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-frame-options: DENY
x-server-name: CB Jpeg Server
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 10
last-modified: Mon, 14 Aug 2023 03:44:10 GMT
expires: Mon, 14 Aug 2023 03:44:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Uv08wJ5Cs8Pmis4IjLdRSz1Yh%2BNVNnDyP9T5gk1mb7DigxtIq%2Bs4HGfcQPowhVeXauXteRZ8xE5TqWSVkkxWR%2Feg3Y5NHDgu%2BFIAsTzFGQ%2BcO1AKZl0um2w8zjfjl1FW6vGqEv2AALa%2BVoAJGYJPMQM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=HKygX6XXK_gAOLp_4LXC1_5BIQSfqCO8h7Sm8dWzkwE-1691984660082-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7f6632dd6de0b500-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
15 kB URL roomimg.stream.highwebmedia.com/riw/demihawks.jpg?1691984640
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 548x549, segment length 16, comment: "Lavc58.134.100", baseline, precision 8, 480x270, components 3\012- data
Hash ee1ec60d74fee5815aff871db375dd9f
6934bbcdde414ea94c89ef707a773a92e91d01dd
7e34fed920bf20d1672390114d5cc9e50454ff72b66a52a48e1b178039f5cbd3
GET /riw/demihawks.jpg?1691984640 HTTP/1.1
Host: roomimg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:20 GMT
content-type: image/jpeg
content-length: 15421
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
cache-control: public, max-age=30
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-frame-options: DENY
x-server-name: CB Jpeg Server
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 14
last-modified: Mon, 14 Aug 2023 03:44:06 GMT
expires: Mon, 14 Aug 2023 03:44:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KDUXNrVIJWnS1lqau%2FXzOa%2Fa3fv7aKuvUeambsLB4YON8e00nEnGIRTF7CAvCXL8GoexhVYBkHcIuClQ1lXvUcHpNdNQx7Vil8b%2F4lq1tWYa1iDJUHl0BuCQyCyFMKt8mqjwE%2FKJ55%2B6WR1zO%2F6sdO8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=HKygX6XXK_gAOLp_4LXC1_5BIQSfqCO8h7Sm8dWzkwE-1691984660082-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7f6632dd6de3b500-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
10 kB URL roomimg.stream.highwebmedia.com/riw/lunaqueeeen.jpg?1691984640
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 548x549, segment length 16, comment: "Lavc58.134.100", baseline, precision 8, 480x270, components 3\012- data
Hash 71ce7c29a9201630e46d8a58ce482ec5
b806d69433a1782a2c24db34a08e0805de640fa5
294a5470decced7350262c72d31e5f9c23ced578e169a66ea43caf38ee375c10
GET /riw/lunaqueeeen.jpg?1691984640 HTTP/1.1
Host: roomimg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:20 GMT
content-type: image/jpeg
content-length: 10541
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
cache-control: public, max-age=30
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-frame-options: DENY
x-server-name: CB Jpeg Server
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 13
last-modified: Mon, 14 Aug 2023 03:44:07 GMT
expires: Mon, 14 Aug 2023 03:44:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Blvigb7TMuvF5lCcqII3CwfVcM8Jst2RsPIM1JiipK6aKfCK1ib3d3d4B%2FNSJIsL5EwC0ExCZDhPqIr%2B3hOq3JFRBC5zNUJayAdQ5Jj974c%2B9InS3D4mNmjuwS%2Bq5pnINfMoFq6cdX831IvwzcAxJnk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=Oy0l_PST0vGf6wr2FUx3hxAUDy_fU8nGeIZWohO0Fiw-1691984660085-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7f6632dd6de2b500-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
472 B IP
Hash 60c2eb043d9f74f5e7e8411eae4428fe
2531685405af8b22ade8fb91d33b783d54defab5
58dac9bdad093018bc1073b517a22b83a242bc2fa9a21e033f3da6135e0de2fc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Aug 2023 03:44:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
549 B URL static-assets.highwebmedia.com/images/ico-cams.png?829027f88094
IP
File type PNG image data, 13 x 15, 8-bit colormap, non-interlaced\012- data
Hash 4437b02e2efeaa0eb69858a7eb957af6
2dfa9c3fa2fc56c7504c043876eaad9526abed62
52dc5730b7afd3f35531dcca2bd7b9984f0271d15c8b449c4b1d425dddf12a33
GET /images/ico-cams.png?829027f88094 HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static-assets.highwebmedia.com/CACHE/css/output.9351446b200f.css
Cookie: _cfuvid=Oy0l_PST0vGf6wr2FUx3hxAUDy_fU8nGeIZWohO0Fiw-1691984660085-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:20 GMT
content-type: image/png
content-length: 549
cache-control: public, max-age=2592000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=1457
etag: "58ecd9d7af4908cce84eccd4cbd6f0d0"
last-modified: Tue, 19 Jan 2021 22:03:22 GMT
x-amz-id-2: xbn92hYr5RJD/P1j3YYONn/FPM0KqoWou2UUK+FA0YzzzE5mWsTZIWh3Re8x5kR83i6eK913Yy8=
x-amz-meta-s3cmd-attrs: md5:58ecd9d7af4908cce84eccd4cbd6f0d0
x-amz-request-id: 0SESAC08P32K4RRE
cf-cache-status: HIT
age: 813303
expires: Wed, 13 Sep 2023 03:44:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6GPwqfnDb17HHhxqKkbfFyjjgiRvK%2Bxtybt2gOjvGWlkbyc2SV85Y5KgBz6IQTYCJrGY02ZamgsiUx%2BuV5PX51m9WS07iLx%2FtGynCrN%2FHCJ8ZfMDs2J3voPk898HYLiAwxE5AZbO3OW9ceYAxFNpEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632df2eaeb50b-OSL
alt-svc: h3=":443"; ma=86400
GET www.googletagmanager.com/gtag/js?id=G-GX0FLQH21P
200 OK 78 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-GX0FLQH21P
IP
Requested by https://chaturbate.com/tours/3/?tour=x1Rd&campaign=HPR7R&c=5&p=0&disable_sound=0
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintB8:00:22:F1:F1:80:E5:11:65:10:02:04:DA:9B:FA:C3:3E:F6:7A:70
ValidityMon, 17 Jul 2023 08:16:31 GMT - Mon, 09 Oct 2023 08:16:30 GMT
File type ASCII text, with very long lines (5857)
Hash 178753db5f70823ed32839ca19ced47b
594d6474515b9b553b82da4ee16040291b82c017
a3acd160754a465e0473656a8335d90cd95435ad62fa55982bf06efaf6468ef0
GET /gtag/js?id=G-GX0FLQH21P HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 14 Aug 2023 03:44:20 GMT
expires: Mon, 14 Aug 2023 03:44:20 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 78052
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
33 kB URL static-assets.highwebmedia.com/fonts/ubuntur-webfont.woff?896a82003cd1
IP
File type Web Open Font Format, TrueType, length 32960, version 1.0\012- data
Hash 30556905d926944a6ada140546bcf5ce
b9346ce355c8259d71707ab65c13e0629d01a48e
896a82003cd1a9134b0404c129bb7b8292e1d8a91298e275141b21086baa8a9d
GET /fonts/ubuntur-webfont.woff?896a82003cd1 HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://chaturbate.com
DNT: 1
Connection: keep-alive
Referer: https://static-assets.highwebmedia.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:20 GMT
content-type: application/font-woff
content-length: 32960
x-amz-id-2: nXElKlQvcSFN4nMFtgMP/yp5tqdekR6XfypZF2QF7eoCVgaM/V6cThmUSSfOybeYmWvYTTqir68=
x-amz-request-id: WKJEZTA1PB9XVXBN
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Tue, 19 Jan 2021 22:07:55 GMT
etag: "30556905d926944a6ada140546bcf5ce"
x-amz-meta-s3cmd-attrs: md5:30556905d926944a6ada140546bcf5ce
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 1588555
expires: Wed, 13 Sep 2023 03:44:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XVWmjJZgqIQY6HBuG%2B4w66vk9uokzOPTdugZiWP8uJS5pR9TQL%2FdnBSqODCkpY9T1LxYf7ekMop5GciouGtM940y0bek7NZtgWkCItIfQZAY4qrlGtQTHL3yIvcN1uQNpLj6D0%2F7vtiMlptWndt45g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: _cfuvid=fKVqKne2BUV3PLA75EUBEssH73KM71lu.i5NKOueARQ-1691984660360-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7f6632df2eb1b50b-OSL
alt-svc: h3=":443"; ma=86400
32 kB URL static-assets.highwebmedia.com/fonts/ubuntum-webfont.woff?a7fc63c36394
IP
File type Web Open Font Format, TrueType, length 31680, version 1.0\012- data
Hash 9968f3d2a16c9ae20a54d0e44ee83d3a
dfd651a49017147b8e8078d530f0930020bfb846
a7fc63c363948d7add8e1dade66045376e2bad22da6697f84d175e5f9a76166e
GET /fonts/ubuntum-webfont.woff?a7fc63c36394 HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://chaturbate.com
DNT: 1
Connection: keep-alive
Referer: https://static-assets.highwebmedia.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:20 GMT
content-type: application/font-woff
content-length: 31680
x-amz-id-2: 2RbzpgSlNRZzPBVkW5yfZlpiTx9wCS0n1VK6AUVGgnYshoGNaI2gDBHWNhrRgLrF1AAF/t5lTtE=
x-amz-request-id: A92K6THC3D5JFWKW
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Tue, 19 Jan 2021 22:07:54 GMT
etag: "9968f3d2a16c9ae20a54d0e44ee83d3a"
x-amz-meta-s3cmd-attrs: md5:9968f3d2a16c9ae20a54d0e44ee83d3a
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 2018071
expires: Wed, 13 Sep 2023 03:44:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q5SqCGW%2FSS2NCVHgeTML4Js7Q5EGA81mgM8%2F9MFSg%2FK5dEJT9%2BjBtDzADqH1wvdCcQ71EvzdkjmwULwSdUbzF7ak08zOW6A5bIpq805cmEf%2BKDZG%2Fcf%2BkVjAfD34YrfGX0aGP0Nud0PbW%2FRBdabqkw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: _cfuvid=3lB8idY2izZoeM.OC55ksPzW2wZPt0eiOyChAlFeV28-1691984660361-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7f6632df3eb3b50b-OSL
alt-svc: h3=":443"; ma=86400
GET video.ktkjmp.com/adsbygoogle.js
200 OK 16 B URL GET HTTP/2 video.ktkjmp.com/adsbygoogle.js
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectvideo.ktkjmp.com
Fingerprint02:C1:75:9D:DD:6A:66:20:9E:A3:46:1B:5E:A4:87:83:5A:09:92:93
ValiditySun, 02 Jul 2023 00:00:00 GMT - Mon, 01 Jul 2024 23:59:59 GMT
Hash 3d7f7a60216d40dea48e495fef6903c9
fecdb5184f55cf012563d78940eb97b10b9cc99b
96d83ac9f20fc0b88404f307f135e212642e02d6ea295c96b28aed0d771a224f
GET /adsbygoogle.js HTTP/1.1
Host: video.ktkjmp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlrdr.com/
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:20 GMT
content-type: application/javascript
content-length: 16
x-amz-id-2: JkCGjUrgnBgB5Ldx8o/A8ASqNLV5nPIAdv57lupABlhL2wyLLTncvB9KXBxRs01tDEzM0AFmFH4=
x-amz-request-id: 3YWDZBTT5KXYP4SY
last-modified: Thu, 10 Mar 2022 13:52:07 GMT
etag: "3d7f7a60216d40dea48e495fef6903c9"
x-amz-meta-s3cmd-attrs: atime:1646920284/ctime:1646920283/gid:20/gname:staff/md5:3d7f7a60216d40dea48e495fef6903c9/mode:33188/mtime:1646920283/uid:501/uname:mikhailchubar
x-amz-version-id: eIgLIBoMMcsEXtxOH6UDjWyfAquRpkIG
access-control-allow-origin: https://creative.xlrdr.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: HIT
age: 6804
expires: Mon, 14 Aug 2023 07:44:20 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632dff9a91c0e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
472 B IP
Hash 60c2eb043d9f74f5e7e8411eae4428fe
2531685405af8b22ade8fb91d33b783d54defab5
58dac9bdad093018bc1073b517a22b83a242bc2fa9a21e033f3da6135e0de2fc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Aug 2023 03:44:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
597 B URL creative.xlrdr.com/widgets/v4/Universal/lang/en.json
IP
File type JSON data\012- , ASCII text
Hash 69a54638b649d7ce4748bd42c4b6dade
a2dfe9f8791952fbc5cc44d4757b031a6cee1731
0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750
GET /widgets/v4/Universal/lang/en.json HTTP/1.1
Host: creative.xlrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
DNT: 1
Connection: keep-alive
Cookie: __cflb=0H28upDCGznfDm9XVDQoiPUVymMcUWiK2h9bTbno3Xr
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:20 GMT
content-type: application/json
last-modified: Thu, 10 Aug 2023 08:54:01 GMT
etag: W/"64d4a5a9-ac"
expires: Mon, 14 Aug 2023 03:44:25 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632df3f521c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
787 B IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with very long lines (787), with no line terminators
Hash 432261094095788d81a1cd2c9ec2af80
498dca2f9bde20c8b5c57f9d0bc5cb62ca129611
88d5ee8a4db3d775dd77e9614371fa4021b3605ad9fcf6370e44feed175e3c6e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /get/ HTTP/1.1
Host: mcpuwpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://3hentai.net/
Content-Type: text/plain;charset=UTF-8
Content-Length: 1153
Origin: https://3hentai.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.0
date: Mon, 14 Aug 2023 03:44:20 GMT
content-type: application/json
content-length: 787
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
22 kB URL img.strpst.com/thumbs/1691984580/26554060_webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 370947797c478c32814dc0a2908933b9
007950b0714f78e416fa075df731e845f95faf7b
1d575641f20439d063f407e1a75eafcdcbf01268941eb7791a0ba88b269e28b1
GET /thumbs/1691984580/26554060_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:20 GMT
content-type: image/webp
content-length: 22446
etag: "370947797c478c32814dc0a2908933b9"
last-modified: Mon, 14 Aug 2023 03:42:35 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 58
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632e1cbe2b4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
32 kB URL static-assets.highwebmedia.com/images/ico-female.svg?818c9c4c368f
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (547)
Hash 304b64c8f4b6c7e0c36c86b419151c45
8c2e14f4e318365ed4c3beefd7eeb4e8d0a4b725
818c9c4c368ff40bbc414f8bb3a80990c7208bcf0b45f9d9aa947f1ea2e1eb93
GET /images/ico-female.svg?818c9c4c368f HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static-assets.highwebmedia.com/CACHE/css/output.9351446b200f.css
Cookie: _cfuvid=Oy0l_PST0vGf6wr2FUx3hxAUDy_fU8nGeIZWohO0Fiw-1691984660085-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:20 GMT
content-type: image/svg+xml
x-amz-id-2: osRybKzTnktBQF4vP0q7fXq1n58yki/dSPXrNoFWWOOzKVVH8bvBlwkKv3hIeJWfZG9MWOdHwKf3Ffs2pB2wYg==
x-amz-request-id: B3JFTCPDR2NBWAKH
last-modified: Tue, 09 Mar 2021 22:37:01 GMT
etag: W/"304b64c8f4b6c7e0c36c86b419151c45"
x-amz-meta-s3cmd-attrs: md5:304b64c8f4b6c7e0c36c86b419151c45
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 2522164
expires: Wed, 13 Sep 2023 03:44:20 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i4NhM9QjKiUGjvoqTEHk94ASNlxx6e2ywBi7wTzEBwErr7sGyY8823IjfDTqM8PqpzyGxP50y8pZIbPmjflZBE%2FXvioqKcA%2BWc3F%2BXe8fbjj%2Bd%2BPqpQIu6sllhMWDLgCKrWa1YqqAXQraM%2B0mLYVJA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632df2eafb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
22 kB URL go.xlrdr.com/api/models?tag=girls%2Fasian&forceClient=1&stripcashR=0&limit=6&usePreroll&webp=1
IP
Certificate IssuerCloudflare, Inc.
Subjectxlrdr.com
FingerprintB7:7A:2F:CD:F6:76:0D:74:98:F0:DA:47:69:84:7D:8C:4E:2C:2D:63
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (9447), with no line terminators
Hash 332d2a65908abcbecd4bb23363289dfe
082380d6425c8a2d1b90578c9749aed3785158b7
bece588890e435ab23fa0e7914b5f5dccb44db2f49cf642e1e008d7e32c637ac
GET /api/models?tag=girls%2Fasian&forceClient=1&stripcashR=0&limit=6&usePreroll&webp=1 HTTP/1.1
Host: go.xlrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlrdr.com/
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Cookie: __cflb=02DiuDFRFiBZBvMSLtrtWS5dSf3dTPfP7SEmDCacvChpQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:20 GMT
content-type: application/json
access-control-allow-origin: https://creative.xlrdr.com
access-control-allow-credentials: true
vary: Origin, Accept-Encoding
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
last-modified: Mon, 14 Aug 2023 03:32:15 GMT
cf-cache-status: HIT
age: 9
server: cloudflare
cf-ray: 7f6632e11fd71c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET creative.xlrdr.com/widgets/v4/Universal/main.5407048618b688171034.js
200 OK 90 kB URL GET HTTP/3 creative.xlrdr.com/widgets/v4/Universal/main.5407048618b688171034.js
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectxlrdr.com
FingerprintB7:7A:2F:CD:F6:76:0D:74:98:F0:DA:47:69:84:7D:8C:4E:2C:2D:63
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (32011), with LF, NEL line terminators
Hash 1a313236b530b60686f4a905457ea817
fec31f62c71412354097db70541fa8473be8b09d
d1749a95f2c61e42977aa814e4f99d35113b7e29525a5a30f3b8e0b3b1780e44
GET /widgets/v4/Universal/main.5407048618b688171034.js HTTP/1.1
Host: creative.xlrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Cookie: __cflb=0H28upDCGznfDm9XVDQoiPUVymMcUWiK2h9bTbno3Xr
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:20 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 10 Aug 2023 08:55:31 GMT
etag: W/"64d4a603-441c5"
expires: Mon, 14 Aug 2023 03:44:23 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 1
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632dd2e8c1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
12 kB URL img.strpst.com/thumbs/1691984580/110465360_webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6b80380ad2882491577ea3b08e2b4638
503ad43fd0ae1b1cc69d2ed38eb8a217acfeed22
594ed64b3a80c9507c60711411511fb5615421d90cb4cd573e794a9347f4ac86
GET /thumbs/1691984580/110465360_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:20 GMT
content-type: image/webp
content-length: 11460
etag: "6b80380ad2882491577ea3b08e2b4638"
last-modified: Mon, 14 Aug 2023 03:42:49 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 39
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632e1ebf2b4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
19 kB URL img.strpst.com/thumbs/1691984580/122736628_webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash aea17c20f519a62b10b1e2ce89f31fca
63d4065770c31c08014649ad675b8441e513f703
47cbede31ebc268990f873e1dc7db5007af75e7273ca8d197867384c787c57d3
GET /thumbs/1691984580/122736628_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:20 GMT
content-type: image/webp
content-length: 18920
etag: "aea17c20f519a62b10b1e2ce89f31fca"
last-modified: Mon, 14 Aug 2023 03:42:42 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 68
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632e21c11b4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET xlivesex.com/checkUrl
200 OK 15 B IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectxlivesex.com
Fingerprint41:AE:80:0B:F2:EF:54:C7:BA:5D:B6:E0:3C:30:C3:E8:32:2A:4F:26
ValidityMon, 06 Mar 2023 00:00:00 GMT - Mon, 04 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7fb97eb7c8636552ad068f6d56b5ea34
b69679936779fb02503bc0fe1374a737cc762ecb
e78008828abaa93c4462e326ef384dcda1443352a0f24bdeedada6a6fdbfd1d5
GET /checkUrl HTTP/1.1
Host: xlivesex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlrdr.com/
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:21 GMT
content-type: application/json
content-length: 15
access-control-allow-origin: https://creative.xlrdr.com
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=NMqTYK0eiLZOUrnAnEs6Qj1Nn0dLqYX2xvMb9C2TXZc-1691984661-0-AayJh3I9fc1WNgoIfw+VOl7Rzdf00K0ClQawLfjvYyUOBgiYVYklbSghrEsudgMTUeu5meGJdYdiVL+dmcHNmo4=; path=/; expires=Mon, 14-Aug-23 04:14:21 GMT; domain=.xlivesex.com; HttpOnly; Secure; SameSite=None
__cflb=02DiuFLvK1H1SdXppSyXvQFB4og8PDbyjy343LVnT3yCQ; SameSite=None; Secure; path=/; expires=Tue, 15-Aug-23 02:44:21 GMT; HttpOnly
_cfuvid=0mDpAqaCWv9xd2Esmn4M1K9yG4.KpGpz9_WBhBQVPZQ-1691984661048-0-604800000; path=/; domain=.xlivesex.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7f6632e35d460b69-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
0 B URL go.xlrdr.com/checkDomainResult
IP
Certificate IssuerCloudflare, Inc.
Subjectxlrdr.com
FingerprintB7:7A:2F:CD:F6:76:0D:74:98:F0:DA:47:69:84:7D:8C:4E:2C:2D:63
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /checkDomainResult HTTP/1.1
Host: go.xlrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlrdr.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 171
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Mon, 14 Aug 2023 03:44:21 GMT
access-control-allow-origin: https://creative.xlrdr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDFRFiBZBvMSLtrsn3TfoaR3cJptscStgZAzEBykg; SameSite=None; Secure; path=/; expires=Tue, 15-Aug-23 03:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 7f6632e3d8921c0a-OSL
alt-svc: h3=":443"; ma=86400
1.2 kB URL b-hls-09.doppiocdn.com/hls/68330290/68330290_480p_init_N81LrTWOeannGO5V.mp4
IP
File type ISO Media, MP4 Base Media v5 \012- data
Hash fd27716a39356fc9711dc01b7c944cb5
f6776d02ef8627ea145a52398f731ab27053d86b
6a2cfa5c14c07db233340728a645402e0344fc9b5dd47623bc2a0bbc2e0b03a7
GET /hls/68330290/68330290_480p_init_N81LrTWOeannGO5V.mp4 HTTP/1.1
Host: b-hls-09.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:21 GMT
content-type: video/mp4
content-length: 1218
last-modified: Mon, 14 Aug 2023 03:38:20 GMT
etag: "64d9a1ac-4c2"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 32
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632e44e80b529-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
311 kB URL b-hls-09.doppiocdn.com/hls/68330290/68330290_480p_175_PFdXDZcRFmnGtMCg_1691984650.mp4
IP
Size 311 kB (311077 bytes)
Hash b7a88771c180795c9a846e8606bce7b1
26ed2fb3374bfe69def8b88091a6396ba1dfddb5
b456d2b10cb5da80dc82b49bc219a55fa4c8a13c7db9834a8e9f341cf1be04a7
GET /hls/68330290/68330290_480p_175_PFdXDZcRFmnGtMCg_1691984650.mp4 HTTP/1.1
Host: b-hls-09.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:21 GMT
content-type: video/mp4
content-length: 311077
last-modified: Mon, 14 Aug 2023 03:44:12 GMT
etag: "64d9a30c-4bf25"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 5
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632e45e88b529-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
329 kB URL b-hls-09.doppiocdn.com/hls/68330290/68330290_480p_176_fT4euLyDWziI3UBo_1691984652.mp4
IP
Size 329 kB (328599 bytes)
Hash 2bfe37f65eff3710499e96dfb515720c
b8a3a5fa61ffaa925dfd4c67df295dee72318cad
7bc780f47fd56471c605f946f8baeaf3decd63ae6de19b03fdcead7b2654f37a
GET /hls/68330290/68330290_480p_176_fT4euLyDWziI3UBo_1691984652.mp4 HTTP/1.1
Host: b-hls-09.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:21 GMT
content-type: video/mp4
content-length: 328599
last-modified: Mon, 14 Aug 2023 03:44:14 GMT
etag: "64d9a30e-50397"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 3
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632e4b9dbb4f4-OSL
alt-svc: h3=":443"; ma=86400
GET b-hls-18.doppiocdn.com/hls/86249010/86249010_480p_init_7XnW4DshWBLpR81G.mp4
200 OK 1.2 kB URL GET HTTP/3 b-hls-18.doppiocdn.com/hls/86249010/86249010_480p_init_7XnW4DshWBLpR81G.mp4
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type ISO Media, MP4 Base Media v5 \012- data
Hash fd27716a39356fc9711dc01b7c944cb5
f6776d02ef8627ea145a52398f731ab27053d86b
6a2cfa5c14c07db233340728a645402e0344fc9b5dd47623bc2a0bbc2e0b03a7
GET /hls/86249010/86249010_480p_init_7XnW4DshWBLpR81G.mp4 HTTP/1.1
Host: b-hls-18.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:21 GMT
content-type: video/mp4
content-length: 1218
last-modified: Mon, 14 Aug 2023 01:57:41 GMT
etag: "64d98a15-4c2"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 21
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632e54a2db4f4-OSL
alt-svc: h3=":443"; ma=86400
318 kB URL b-hls-18.doppiocdn.com/hls/86249010/86249010_480p_3195_eB7dsAiG6ys2tUtw_1691984652.mp4
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
Size 318 kB (318407 bytes)
Hash 8cd46eb58b6bca7bc181d6ac4f13fc95
a12e3f503608e661d252ef0c869f6cc6972df034
da92a87d8b609b08563fbf4e040184e4617f835582b46a5cf9c4e1924b174124
GET /hls/86249010/86249010_480p_3195_eB7dsAiG6ys2tUtw_1691984652.mp4 HTTP/1.1
Host: b-hls-18.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:21 GMT
content-type: video/mp4
content-length: 318407
last-modified: Mon, 14 Aug 2023 03:44:14 GMT
etag: "64d9a30e-4dbc7"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 5
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632e56a42b4f4-OSL
alt-svc: h3=":443"; ma=86400
307 kB URL b-hls-18.doppiocdn.com/hls/86249010/86249010_480p_3196_jI4ABW8HFtKIshCr_1691984654.mp4
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
Size 307 kB (306667 bytes)
Hash ba966feb8605c084f40a6185924ad8c5
38fb29e7107da1ffea71f7ec4998e6fd9d472594
0dcab09262b9ee9156e83c2e60499bd339b728113b17d13acf96835a4552d9e5
GET /hls/86249010/86249010_480p_3196_jI4ABW8HFtKIshCr_1691984654.mp4 HTTP/1.1
Host: b-hls-18.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:21 GMT
content-type: video/mp4
content-length: 306667
last-modified: Mon, 14 Aug 2023 03:44:16 GMT
etag: "64d9a310-4adeb"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 2
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632e5ba70b4f4-OSL
alt-svc: h3=":443"; ma=86400
GET b-hls-05.doppiocdn.com/hls/26554060/26554060_480p_init_k3yCEaagEtLWtUHW.mp4
200 OK 1.2 kB URL GET HTTP/3 b-hls-05.doppiocdn.com/hls/26554060/26554060_480p_init_k3yCEaagEtLWtUHW.mp4
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type ISO Media, MP4 Base Media v5 \012- data
Hash fd27716a39356fc9711dc01b7c944cb5
f6776d02ef8627ea145a52398f731ab27053d86b
6a2cfa5c14c07db233340728a645402e0344fc9b5dd47623bc2a0bbc2e0b03a7
GET /hls/26554060/26554060_480p_init_k3yCEaagEtLWtUHW.mp4 HTTP/1.1
Host: b-hls-05.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:21 GMT
content-type: video/mp4
content-length: 1218
last-modified: Mon, 14 Aug 2023 03:02:42 GMT
etag: "64d99952-4c2"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 58
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632e66adbb4f4-OSL
alt-svc: h3=":443"; ma=86400
GET b-hls-05.doppiocdn.com/hls/26554060/26554060_480p_1246_MIC5SeuIjYRPsfFt_1691984654.mp4
200 OK 315 kB URL GET HTTP/3 b-hls-05.doppiocdn.com/hls/26554060/26554060_480p_1246_MIC5SeuIjYRPsfFt_1691984654.mp4
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
Size 315 kB (314849 bytes)
Hash 3eed6bcd8b6b617853d31bcec6a9537f
66243f75a2d477e6b008107055c446a64be3ebf1
330b94ca909473981740b609a3280a611796111e281e11be2a333423c344f8bc
GET /hls/26554060/26554060_480p_1246_MIC5SeuIjYRPsfFt_1691984654.mp4 HTTP/1.1
Host: b-hls-05.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:21 GMT
content-type: video/mp4
content-length: 314849
last-modified: Mon, 14 Aug 2023 03:44:16 GMT
etag: "64d9a310-4cde1"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 4
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632e68aebb4f4-OSL
alt-svc: h3=":443"; ma=86400
320 kB URL b-hls-05.doppiocdn.com/hls/26554060/26554060_480p_1247_jFy3HRWaj338pBQa_1691984656.mp4
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
Size 320 kB (320140 bytes)
Hash 19a5897e6615309a6bef2ce6214f6368
6a2dbe7fd7f9f96cc511281219fcce7ca45c6989
7ddb3eb6ba1a4b18e1c7873e0d0fcf99fa0af70060c9cf431ab1881d4c074080
GET /hls/26554060/26554060_480p_1247_jFy3HRWaj338pBQa_1691984656.mp4 HTTP/1.1
Host: b-hls-05.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:21 GMT
content-type: video/mp4
content-length: 320140
last-modified: Mon, 14 Aug 2023 03:44:18 GMT
etag: "64d9a312-4e28c"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 2
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632e6cb0eb4f4-OSL
alt-svc: h3=":443"; ma=86400
GET edge-hls.doppiocdn.com/hls/93944140/master/93944140_480p.m3u8
200 OK 1.4 kB URL GET HTTP/3 edge-hls.doppiocdn.com/hls/93944140/master/93944140_480p.m3u8
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
Hash fe76ef3b64f5d1570364332eb69c987f
cec1de4249339de1b4bf83015ed9d7ce5aed308a
5246498dcbb95fdaec3cbfe822c1b8c338d01a3e5da15a21b272ecc8d8cefd6f
GET /hls/93944140/master/93944140_480p.m3u8 HTTP/1.1
Host: edge-hls.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:21 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Mon, 14 Aug 2023 03:44:21 GMT
x-proxy-cache: MISS
cache-control: public, max-age=3, s-maxage=3
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
set-cookie: __cflb=02DiuDqTDHWLb7zSddG9z9dnCh3o3hTZTVYc63o13t2B6; SameSite=None; Secure; path=/; expires=Tue, 15-Aug-23 03:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 7f6632e6cb0fb4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
310 kB URL b-hls-24.doppiocdn.com/hls/93944140/93944140_480p_3396_ZvqoqlToNI5Y1WQc_1691984651.mp4
IP
Size 310 kB (309777 bytes)
Hash e247619fac92fd5871c2eaf9f3fca0fd
a4cf086db9e16dc07184389b303a4b9a18aead70
ee0f427a3cc1887c8f2d58d96622eb2228ce5dfd300d0a6bd30fadbc9695d7ad
GET /hls/93944140/93944140_480p_3396_ZvqoqlToNI5Y1WQc_1691984651.mp4 HTTP/1.1
Host: b-hls-24.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:21 GMT
content-type: video/mp4
content-length: 309777
last-modified: Mon, 14 Aug 2023 03:44:13 GMT
etag: "64d9a30d-4ba11"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 5
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632e7eb82b4f4-OSL
alt-svc: h3=":443"; ma=86400
GET b-hls-24.doppiocdn.com/hls/93944140/93944140_480p_3397_5sevNf9UNgP6PI7r_1691984653.mp4
200 OK 329 kB URL GET HTTP/3 b-hls-24.doppiocdn.com/hls/93944140/93944140_480p_3397_5sevNf9UNgP6PI7r_1691984653.mp4
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
Size 329 kB (328706 bytes)
Hash 53b905cdcd682cf92002d0071b253a80
edbfa044fe66e03bc8fe3d87b2fa05e06bdadaf2
186a15fe673dab7892f1abafa6ebfbacb6abdca90a70a6ce727df97c9f45bc32
GET /hls/93944140/93944140_480p_3397_5sevNf9UNgP6PI7r_1691984653.mp4 HTTP/1.1
Host: b-hls-24.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:21 GMT
content-type: video/mp4
content-length: 328706
last-modified: Mon, 14 Aug 2023 03:44:15 GMT
etag: "64d9a30f-50402"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 3
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632e84bbfb4f4-OSL
alt-svc: h3=":443"; ma=86400
1.2 kB URL b-hls-14.doppiocdn.com/hls/122736628/122736628_480p_init_ltS8SQy7K9fwkdAg.mp4
IP
File type ISO Media, MP4 Base Media v5 \012- data
Hash fd27716a39356fc9711dc01b7c944cb5
f6776d02ef8627ea145a52398f731ab27053d86b
6a2cfa5c14c07db233340728a645402e0344fc9b5dd47623bc2a0bbc2e0b03a7
GET /hls/122736628/122736628_480p_init_ltS8SQy7K9fwkdAg.mp4 HTTP/1.1
Host: b-hls-14.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:21 GMT
content-type: video/mp4
content-length: 1218
last-modified: Mon, 14 Aug 2023 01:36:20 GMT
etag: "64d98514-4c2"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 22
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632e8dbf4b4f4-OSL
alt-svc: h3=":443"; ma=86400
312 kB URL b-hls-14.doppiocdn.com/hls/122736628/122736628_480p_3836_FFNfQPA0pPKkiCeZ_1691984653.mp4
IP
Size 312 kB (311972 bytes)
Hash 55bd92a3d9ed58ef7ca7ab39c9e661d6
795d783c6384bcd57c518659cd8c8becaea1ef08
9803107f3026de6721c92cc266f153e4a90fab9244ee82e8dd9f2c4435910fa0
GET /hls/122736628/122736628_480p_3836_FFNfQPA0pPKkiCeZ_1691984653.mp4 HTTP/1.1
Host: b-hls-14.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:21 GMT
content-type: video/mp4
content-length: 311972
last-modified: Mon, 14 Aug 2023 03:44:15 GMT
etag: "64d9a30f-4c2a4"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 3
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632e8fc05b4f4-OSL
alt-svc: h3=":443"; ma=86400
313 kB URL b-hls-14.doppiocdn.com/hls/122736628/122736628_480p_3837_UwVuFLnLw6iXxAMO_1691984655.mp4
IP
Size 313 kB (313242 bytes)
Hash 1247b4ce0d581c7129d8f00b86c8f165
5f2def5ebc44c0784b35e6a515117f9dba1d4d6e
053450553ac6239c059839a15ce2a314bc1394ea514da70ef71384abe85ff771
GET /hls/122736628/122736628_480p_3837_UwVuFLnLw6iXxAMO_1691984655.mp4 HTTP/1.1
Host: b-hls-14.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:21 GMT
content-type: video/mp4
content-length: 313242
last-modified: Mon, 14 Aug 2023 03:44:17 GMT
etag: "64d9a311-4c79a"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632e93c27b4f4-OSL
alt-svc: h3=":443"; ma=86400
1.2 kB URL b-hls-24.doppiocdn.com/hls/110465360/110465360_480p_init_X14ofaHIT8uLJrqS.mp4
IP
File type ISO Media, MP4 Base Media v5 \012- data
Hash fd27716a39356fc9711dc01b7c944cb5
f6776d02ef8627ea145a52398f731ab27053d86b
6a2cfa5c14c07db233340728a645402e0344fc9b5dd47623bc2a0bbc2e0b03a7
GET /hls/110465360/110465360_480p_init_X14ofaHIT8uLJrqS.mp4 HTTP/1.1
Host: b-hls-24.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:22 GMT
content-type: video/mp4
content-length: 1218
last-modified: Mon, 14 Aug 2023 03:05:36 GMT
etag: "64d99a00-4c2"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 9
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632e9ec74b4f4-OSL
alt-svc: h3=":443"; ma=86400
272 kB URL b-hls-24.doppiocdn.com/hls/110465360/110465360_480p_1165_Lm1Pxca5zkqvLHVA_1691984654.mp4
IP
Size 272 kB (272233 bytes)
Hash 03eb0eba3c39a08b617a6312de2d12bf
48d13a81f9ba6978da50e0649824c2412c3ff650
46840da14dd6fba3080247f58e499f2509619ba78ee98713b70023013ab1e286
GET /hls/110465360/110465360_480p_1165_Lm1Pxca5zkqvLHVA_1691984654.mp4 HTTP/1.1
Host: b-hls-24.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:22 GMT
content-type: video/mp4
content-length: 272233
last-modified: Mon, 14 Aug 2023 03:44:16 GMT
etag: "64d9a310-42769"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632e9fc84b4f4-OSL
alt-svc: h3=":443"; ma=86400
GET b-hls-24.doppiocdn.com/hls/110465360/110465360_480p_1166_AvsEL9iIADSpJdcr_1691984656.mp4
200 OK 376 kB URL GET HTTP/3 b-hls-24.doppiocdn.com/hls/110465360/110465360_480p_1166_AvsEL9iIADSpJdcr_1691984656.mp4
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
Size 376 kB (375673 bytes)
Hash bce195100226aedf05510669f8f9ebaf
7daea32b1fd5a47c8f6966c2ca824758709ae9ac
e8af21c67c6e23bdd8700d536190047476888dd7a02a967ad74ebad0aaf25695
GET /hls/110465360/110465360_480p_1166_AvsEL9iIADSpJdcr_1691984656.mp4 HTTP/1.1
Host: b-hls-24.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:22 GMT
content-type: video/mp4
content-length: 375673
last-modified: Mon, 14 Aug 2023 03:44:18 GMT
etag: "64d9a312-5bb79"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632eb2d19b4f4-OSL
alt-svc: h3=":443"; ma=86400
GET b-hls-05.doppiocdn.com/hls/26554060/26554060_480p.m3u8
200 OK 726 B URL GET HTTP/3 b-hls-05.doppiocdn.com/hls/26554060/26554060_480p.m3u8
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (744), with no line terminators
Hash 8ec4da6f9fcdfbf7c676cd2eb8bff0b2
bfc89b97411188dab41a188b827aaf1824550ba2
090474428ab65587f2be0f500edd16a6a3631e973f556eb69d5b6c534f9d0e8c
GET /hls/26554060/26554060_480p.m3u8 HTTP/1.1
Host: b-hls-05.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:25 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Mon, 14 Aug 2023 03:44:25 GMT
x-proxy-cache: MISS
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
server: cloudflare
cf-ray: 7f6632ff1fc5b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET b-hls-14.doppiocdn.com/hls/122736628/122736628_480p.m3u8
200 OK 734 B URL GET HTTP/3 b-hls-14.doppiocdn.com/hls/122736628/122736628_480p.m3u8
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (752), with no line terminators
Hash 5bde3c072cd475624843c53aee5dfadc
6610b480a067268b329ba75c3ddd6e26c2837de0
8c52cee619c4f2287c0cd2ad8f4d184beb94830c0f57092c1c0b469c395fcae4
GET /hls/122736628/122736628_480p.m3u8 HTTP/1.1
Host: b-hls-14.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:31 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Mon, 14 Aug 2023 03:44:30 GMT
x-proxy-cache: HIT
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 7f6633273d5cb4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET b-hls-24.doppiocdn.com/hls/93944140/93944140_480p.m3u8
200 OK 726 B URL GET HTTP/3 b-hls-24.doppiocdn.com/hls/93944140/93944140_480p.m3u8
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (744), with no line terminators
Hash 362c1164a7245e2ff1bbca9d2f331554
5193be2a9ead0979a1f25f25e371d73ad97a768a
71dee1d4b9a47841bfb248f1acaa7f155d652f121fdd31152330e61771ff2f8a
GET /hls/93944140/93944140_480p.m3u8 HTTP/1.1
Host: b-hls-24.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:23 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Mon, 14 Aug 2023 03:44:21 GMT
x-proxy-cache: MISS
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 7f6632f3a9c1b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET b-hls-05.doppiocdn.com/hls/26554060/26554060_480p.m3u8
200 OK 726 B URL GET HTTP/3 b-hls-05.doppiocdn.com/hls/26554060/26554060_480p.m3u8
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (744), with no line terminators
Hash 2f442f4a22a16e446c3d27a6c4dc5cca
63bfa5fe9186d6e483f612b48dcf4150d2918443
dbf2d530b00d4aa47608bdf6a5106ed6a1dbcfa3e37e64b7d2ac43337dd7d62e
GET /hls/26554060/26554060_480p.m3u8 HTTP/1.1
Host: b-hls-05.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:31 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Mon, 14 Aug 2023 03:44:31 GMT
x-proxy-cache: HIT
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
server: cloudflare
cf-ray: 7f6633249c04b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
POST go.xlrdr.com/thumbs/view
200 OK 577 B IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectxlrdr.com
FingerprintB7:7A:2F:CD:F6:76:0D:74:98:F0:DA:47:69:84:7D:8C:4E:2C:2D:63
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (666), with no line terminators
Hash d20bc8613c147d8ba69bcc42cac5f04b
26ab36c819c91e69c9710fbf0f3294e58a41da51
27e846efcc61238300e12672e60bbcf2b34a596c6cd6415ebb9ecfc056f3b75f
POST /thumbs/view HTTP/1.1
Host: go.xlrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlrdr.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 430
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:20 GMT
content-type: application/json
access-control-allow-origin: https://creative.xlrdr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDFRFiBZBvMSLtsgHAphT8dt9Y3eZ9xo98Dm5JNAY; SameSite=None; Secure; path=/; expires=Tue, 15-Aug-23 03:44:20 GMT; HttpOnly
server: cloudflare
cf-ray: 7f6632e2f8511c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET img.strpst.com/thumbs/1691984580/93944140_webp
200 OK 21 kB URL GET HTTP/2 img.strpst.com/thumbs/1691984580/93944140_webp
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectimg.strpst.com
FingerprintED:62:74:FE:E4:F5:89:43:B3:49:55:FE:18:19:0D:29:24:96:75:BC
ValidityMon, 03 Apr 2023 00:00:00 GMT - Tue, 02 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash af9b1cb18c9935f18ac6b948056a8f29
85478a103c38b4d26174949ef0a056eab6383edd
e6bc656d4c312d5301de639c3eef49631de635138eefd03c263c828921fea8e2
GET /thumbs/1691984580/93944140_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:20 GMT
content-type: image/webp
content-length: 21082
etag: "af9b1cb18c9935f18ac6b948056a8f29"
last-modified: Mon, 14 Aug 2023 03:42:29 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 60
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632e1dbe8b4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET b-hls-14.doppiocdn.com/hls/122736628/122736628_480p.m3u8
200 OK 734 B URL GET HTTP/3 b-hls-14.doppiocdn.com/hls/122736628/122736628_480p.m3u8
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (752), with no line terminators
Hash 29c002680e5c3c9917ee4503dee1175d
704772649f6a7b69f1332d4d92cbf327f28341aa
6d6dac601b61a5df9ed821e5587aef8c135bb7446d435facf18a6d18215ab0a2
GET /hls/122736628/122736628_480p.m3u8 HTTP/1.1
Host: b-hls-14.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:29 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Mon, 14 Aug 2023 03:44:28 GMT
x-proxy-cache: MISS
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 7f66331abf0cb4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET 3hentai.net/js/trace-20210711.js?fezkopt7h8987b8df8
200 OK 99 kB URL GET HTTP/2 3hentai.net/js/trace-20210711.js?fezkopt7h8987b8df8
IP
Requested by https://3hentai.net/d/335153
Certificate IssuerBuypass AS-983163327
Subject3hentai.net
FingerprintD0:F2:6F:6F:97:72:2C:AE:E0:F6:A4:EC:99:7C:36:45:7D:58:2F:34
ValidityTue, 04 Apr 2023 19:49:33 GMT - Sat, 30 Sep 2023 21:59:00 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 75e1ac3418f61e0f36c6175ce989623c
1b698a53acd8ba7d487db741c45b771d8b7d0c1e
fd26378fda99347431f553d10dc1ae3e8feba02876edfdd9df55b4cee83349e2
GET /js/trace-20210711.js?fezkopt7h8987b8df8 HTTP/1.1
Host: 3hentai.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3hentai.net/d/335153
Cookie: XSRF-TOKEN=eyJpdiI6IkhITGZTOHFYbEhldnREbjBrTUJaWWc9PSIsInZhbHVlIjoiNEFnM3lZU0xBeU9EZVg2TmhxQmNDakJTcGcxNFNZKzBkclRYVmIwUWZGNjBtS1dnOW0ycE9wbDNzMFdlSEZPZEQ0SWFMS0J1ZWJzZmZEeENxVGJjMmw2dVRVM292WkNudURkVnlzVlN2NmtDWHlKSmxvK3NqUExsS1ZkMVVWODciLCJtYWMiOiJmYjlmNDY2NmFiMDlhZjRjZWU5NTgxN2QzMmNmZGRlMjk5NWI3MDA0NzhjYTdlNDZjNTI1MzEyMzZkZWM2YmM1IiwidGFnIjoiIn0%3D; hornysess2=eyJpdiI6IndVd3V2Rkp0dGh4Q0V0ZVlmMHJhSHc9PSIsInZhbHVlIjoidFZYRDlSbDc1Zm9PVmlyeDBBMXNpV0pTUEVQNFRpdm9uRUl4Y2ZVckNKc21BUTdrcldsWHBJMjhCSkR0cFdCcWdpL0tvb3lqTnZQUU9oRXJvL0d3Mm1Ca0NqcERHeUFlaGFpQ29GM0JtdHdvU1hPVEZEa0Q2UjZYRHBwN2hpcWYiLCJtYWMiOiI2YWMxMDg0MzY1OTYyMWZmMWFiOWRjOTVmNzk0OTdmODVlYTNjZjc1Y2EzODg4N2E5MTE4NDFmMDdlNjRmY2MyIiwidGFnIjoiIn0%3D; bHCVspY43ICx0gQ0mEcoLg562SC5qnZQ2bQgU1Hn=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; show_modal_warn_adult=0; show_hltadsv1=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 14 Aug 2023 03:44:17 GMT
content-type: application/javascript
last-modified: Tue, 02 May 2023 14:35:52 GMT
vary: Accept-Encoding
etag: W/"64511fc8-183d0"
expires: Mon, 14 Aug 2023 03:45:17 GMT
cache-control: max-age=60
strict-transport-security: max-age=15768000
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
content-encoding: gzip
X-Firefox-Spdy: h2
GET b-hls-09.doppiocdn.com/hls/68330290/68330290_480p.m3u8
200 OK 722 B URL GET HTTP/3 b-hls-09.doppiocdn.com/hls/68330290/68330290_480p.m3u8
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (740), with no line terminators
Hash 27aa00f2813b614ef6ab364b71d4062b
a2f28e1d5687049b51e212cd9295f47d3a265ebe
5b21ef35254843f6a467e7682c53e56cd53906e15b5196d56e6851ee19f52e3c
GET /hls/68330290/68330290_480p.m3u8 HTTP/1.1
Host: b-hls-09.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:31 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Mon, 14 Aug 2023 03:44:28 GMT
x-proxy-cache: HIT
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 7f663322ab0fb4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET b-hls-24.doppiocdn.com/hls/93944140/93944140_480p.m3u8
200 OK 726 B URL GET HTTP/3 b-hls-24.doppiocdn.com/hls/93944140/93944140_480p.m3u8
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (744), with no line terminators
Hash c37836cb9cc1d8cf4e4e290bae04f129
fb4f7041626b9633988bfdefe1cff8eeda544cfc
3878c4468561e85013abbe85a556ca1f5604ca2750eb495fcdf76196d5828de4
GET /hls/93944140/93944140_480p.m3u8 HTTP/1.1
Host: b-hls-24.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:31 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Mon, 14 Aug 2023 03:44:29 GMT
x-proxy-cache: MISS
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 7f663325ac88b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET i.jads.co/network/user11509/15054-1555260376-0626784001555260376.jpg
200 OK 96 kB URL GET HTTP/2 i.jads.co/network/user11509/15054-1555260376-0626784001555260376.jpg
IP
Requested by https://poweredby.jads.co/adshow.php?adzone=955224
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 728x90, components 3\012- data
Hash 39f940a79b70cd2a9d4dc5f2444d1d8f
64afc92789b4b1e881633dd680693dd58f8cc2eb
c21256f076128c36e851a304a101d5861e975df2f2f8a5931b930f4c6a5e41f0
GET /network/user11509/15054-1555260376-0626784001555260376.jpg HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=b673aec51d764353b1d8ecc577c19e97; imps15054=1; juicy_data_1=YTowOnt9; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:19 GMT
etag: "1555260376"
cache-control: max-age=19399862
content-length: 95605
content-type: image/jpeg
last-modified: Sun, 14 Apr 2019 16:46:16 GMT
accept-ranges: bytes
x-hw: 1691984659.dop213.sk1.t,1691984659.cds262.sk1.hn,1691984659.cds259.sk1.c
X-Firefox-Spdy: h2
GET b-hls-09.doppiocdn.com/hls/68330290/68330290_480p.m3u8
200 OK 722 B URL GET HTTP/2 b-hls-09.doppiocdn.com/hls/68330290/68330290_480p.m3u8
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (740), with no line terminators
Hash ca9acb1d31a7855c387d514e62802347
314f5466655467abb0c86274622cc9995886ccd8
a3c765a0fbe180ae28cbfd77776585211917cb2f698a4e4e5eb7055761245420
GET /hls/68330290/68330290_480p.m3u8 HTTP/1.1
Host: b-hls-09.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 14 Aug 2023 03:44:21 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Mon, 14 Aug 2023 03:44:18 GMT
x-proxy-cache: MISS
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 7f6632e42e73b529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET b-hls-09.doppiocdn.com/hls/68330290/68330290_480p.m3u8
200 OK 722 B URL GET HTTP/3 b-hls-09.doppiocdn.com/hls/68330290/68330290_480p.m3u8
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (740), with no line terminators
Hash c9745b1eceb218ec6d3f19e2de5a0841
b009e310625ae98e9bcbfc272fa81cb7e49f8be9
6c552170c04780b1cf6a7ce27880bb3b2aeea9d705930970d4e7dca29e4b2123
GET /hls/68330290/68330290_480p.m3u8 HTTP/1.1
Host: b-hls-09.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:23 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Mon, 14 Aug 2023 03:44:20 GMT
x-proxy-cache: MISS
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 7f6632f0a823b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET static-assets.highwebmedia.com/images/ico-couple.svg?b74df354b80e
200 OK 15 kB URL GET HTTP/3 static-assets.highwebmedia.com/images/ico-couple.svg?b74df354b80e
IP
Requested by https://chaturbate.com/tours/3/?tour=x1Rd&campaign=HPR7R&c=5&p=0&disable_sound=0
Certificate IssuerDigiCert Inc
Subject*.highwebmedia.com
Fingerprint83:97:37:B3:3F:41:E5:4E:BD:77:54:C7:68:14:45:E6:A6:80:97:53
ValidityMon, 03 Oct 2022 00:00:00 GMT - Thu, 05 Oct 2023 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1049)
Hash 6886f061565cefb644a7577fa5993044
b3eb02181f370bf26ea9e7d134730d54406e10d8
b74df354b80e250dc83e4f231ae2416d34e0a72323f20fec5d1c54c67fb3e79a
GET /images/ico-couple.svg?b74df354b80e HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static-assets.highwebmedia.com/CACHE/css/output.9351446b200f.css
Cookie: _cfuvid=Oy0l_PST0vGf6wr2FUx3hxAUDy_fU8nGeIZWohO0Fiw-1691984660085-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:20 GMT
content-type: image/svg+xml
x-amz-id-2: AeJvwcD50KqIUkjqlNqUJmaqsQgX171KjZn3yHL4YzO3GdCTRHdSgtd43fr/FJ8fMeMBOqMWrOE=
x-amz-request-id: B650M98HEBTWVHFJ
last-modified: Tue, 09 Mar 2021 22:37:01 GMT
etag: W/"6886f061565cefb644a7577fa5993044"
x-amz-meta-s3cmd-attrs: md5:6886f061565cefb644a7577fa5993044
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 1640317
expires: Wed, 13 Sep 2023 03:44:20 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P613F7dcuctrGdOWzExzOVrKSuMC7vmKkkxzBhE2QuB53AkeAb6yq6OeF%2BUpmYl0dFyB2M2QCL60k7CpWQ8DVPZtlgx6KfblyRDWoNuFNbzu4Drkb1kKByrmrV2cBf02Ge5p8hyly%2BIm8kSOOKPAOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632df2eacb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET b-hls-24.doppiocdn.com/hls/110465360/110465360_480p.m3u8
200 OK 735 B URL GET HTTP/3 b-hls-24.doppiocdn.com/hls/110465360/110465360_480p.m3u8
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (753), with no line terminators
Hash 0b08160e599ba4ebd89aa3d85ec67fb7
b6fcdf0d4d826b50075dc7c7c886fc6ec76c8b61
69ae6aee2fdf148c12d7e9854ece390c42b658cc66861fa1686a48d9949e92b7
GET /hls/110465360/110465360_480p.m3u8 HTTP/1.1
Host: b-hls-24.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:24 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Mon, 14 Aug 2023 03:44:23 GMT
x-proxy-cache: MISS
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
server: cloudflare
cf-ray: 7f6632f60b16b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET b-hls-14.doppiocdn.com/hls/122736628/122736628_480p.m3u8
200 OK 734 B URL GET HTTP/3 b-hls-14.doppiocdn.com/hls/122736628/122736628_480p.m3u8
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (752), with no line terminators
Hash bde495760d9b795a94cc2b531c3e616d
970154b2145296cb04ea84296e5f8fcebe0b895d
6ef5557a3e4508eabff3664d9b9f3ffefd3399659be7c8c942694fbbc0a37ca3
GET /hls/122736628/122736628_480p.m3u8 HTTP/1.1
Host: b-hls-14.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:27 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Mon, 14 Aug 2023 03:44:26 GMT
x-proxy-cache: MISS
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 7f66330e3f4ab4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
200 OK 852 B URL GET HTTP/3 creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
IP
Requested by https://r.trackwilltrk.com/s1/0821f9f7-b633-4eeb-8b23-65ebf6464b85?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=181979&cv4=268684&cv5=929874&cv6=
Certificate IssuerCloudflare, Inc.
Subjectxlrdr.com
FingerprintB7:7A:2F:CD:F6:76:0D:74:98:F0:DA:47:69:84:7D:8C:4E:2C:2D:63
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (918), with no line terminators
Hash 2c48370e3f39be1015f8c0b17663d5b0
fbd4abe3a24a9506c79a499006758ef1bf815a20
9486d1eca0f639aa9d70c29fcc3ead479526c383d0d665829e69d53a55ac7a02
GET /widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d HTTP/1.1
Host: creative.xlrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://r.trackwilltrk.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:19 GMT
content-type: text/html
last-modified: Thu, 10 Aug 2023 08:54:01 GMT
expires: Mon, 14 Aug 2023 03:44:24 GMT
cache-control: max-age=10
strict-transport-security: max-age=15768000
pragma: public
report-to: { "endpoints":[{ "url": "https://go.stripchat.com/report" }], "group": "default", "max_age": 1048576 }
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: HIT
set-cookie: __cflb=0H28upDCGznfDm9XVDQoiPUVymMcUWiK2h9bTbno3Xr; SameSite=None; Secure; path=/; expires=Tue, 15-Aug-23 03:44:19 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f6632db6e1a1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET b-hls-24.doppiocdn.com/hls/93944140/93944140_480p.m3u8
200 OK 726 B URL GET HTTP/3 b-hls-24.doppiocdn.com/hls/93944140/93944140_480p.m3u8
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (744), with no line terminators
Hash e697b003463b3fecf10312e8f5230926
dbf2fe60d82714020cc1d75405d7a3e00ee7c456
343c79ebe6d5a3af0a7cc61c238472c902edda5b598b9df68484b1451024b395
GET /hls/93944140/93944140_480p.m3u8 HTTP/1.1
Host: b-hls-24.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:27 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Mon, 14 Aug 2023 03:44:25 GMT
x-proxy-cache: HIT
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 7f66330cae72b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET b-hls-09.doppiocdn.com/hls/68330290/68330290_480p.m3u8
200 OK 722 B URL GET HTTP/3 b-hls-09.doppiocdn.com/hls/68330290/68330290_480p.m3u8
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&autoplay=all&autoplayForce=1&buttonColor=&campaignId=728asrsasgirlwl&creativeId=728asrsasgirlwl&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=1&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=&memberId=%7Bclickid%7D&showButton=1&showLiveBadge=1&showModal=signup&showModelName=1&showTitle=1&sound=off&sourceId=728asrsasgirlwl&tag=girls%2Fasian&targetDomain=&thumbSizeKey=small&trackOff=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (740), with no line terminators
Hash 32f861f9ead6580eba03f95bd5a2ebe2
b4d4a51afaceaafcfde06671a07449a40c4d21af
47894746c6ccacbfb8cc1f0a51cb32698a066462971430d7aa6784601fe54c94
GET /hls/68330290/68330290_480p.m3u8 HTTP/1.1
Host: b-hls-09.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 14 Aug 2023 03:44:25 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Mon, 14 Aug 2023 03:44:22 GMT
x-proxy-cache: MISS
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 7f6632fd2eaeb4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
51.83.143.134
142.250.74.168
104.18.63.134
157.90.84.242
185.196.197.35
23.109.87.129
0.0.0.0