indian-sextube.com/asian/famous-arpita-boudi-masturbating/
301 Moved Permanently 0 B URL HTTP/1.1 indian-sextube.com/asian/famous-arpita-boudi-masturbating/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /asian/famous-arpita-boudi-masturbating/ HTTP/1.1
Host: indian-sextube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 04 Dec 2022 13:37:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 04 Dec 2022 14:37:07 GMT
Location: https://indian-sextube.com/asian/famous-arpita-boudi-masturbating/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Te985D0Pk%2BBDEoFCRpfiU4uD%2Fvqbgy0t9AEXJA%2F2nT4cU18A6FljHqXc4xlGqHAOLqPNXyEel8ahQ5lu%2BmbJrCkv%2BK805hTYb4BPDhIPNxSvhbJnMSyMVv9l9rEAx3Kwgefgc9A%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7744ef55af0bb527-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15096
Expires: Sun, 04 Dec 2022 17:48:43 GMT
Date: Sun, 04 Dec 2022 13:37:07 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash fb2c0697c6d9a96a5411dd2952947458
79e57f831ec396bbdaa5bfe9472a05e6c9fb31f4
3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2709
Cache-Control: max-age=164359
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 13:37:07 GMT
Etag: "638c76f5-1d7"
Expires: Tue, 06 Dec 2022 11:16:26 GMT
Last-Modified: Sun, 04 Dec 2022 10:31:17 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6099
Expires: Sun, 04 Dec 2022 15:18:46 GMT
Date: Sun, 04 Dec 2022 13:37:07 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 04 Dec 2022 13:20:07 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1020
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: WReKDw8izEwN5iNpxvqBFlcuGI9DAU1JOXYXSdzljTkIremEaa5BxXQlE65KIvAhLbi05egcLe0=
x-amz-request-id: T2P9A88BKY7CVVT0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 04 Dec 2022 12:47:33 GMT
age: 2974
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 13:37:07 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 04 Dec 2022 13:11:19 GMT
cache-control: public,max-age=3600
age: 1549
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 31b129c94a90b1e695b21395cb54e378
a3cae46b48d469cc61ab0581303bcd5f5b654db9
fac3f681be358a20f78958dff10c89b7a91365c5114c81246c1bc34c1362ba1e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2731
Cache-Control: max-age=159314
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 13:37:08 GMT
Etag: "638c632b-1d7"
Expires: Tue, 06 Dec 2022 09:52:22 GMT
Last-Modified: Sun, 04 Dec 2022 09:06:51 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: TwqkrNeTyAabwcQ2D01lIA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: utFtn18CSR3AuHPijY0UB6Ye+sk=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c4319f54a5675ee9acda96c58f97ac6
210ea86db1836d430b321d59b4bd1b016c914f22
cb20ad3ec895ed3a2ae9b1a90dda6b7cc174d8851f3a15ba054a435746cbdc65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 13:37:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-87102525-4
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-87102525-4
IP
File type ASCII text, with very long lines (1921)
Hash 26829976fc1a99286a3a6792f748eced
d95eb6920a48e68bed14bbd6408c5df0fd9d5928
8ff84c459e4b0bfe1692661b91159135a7ae35818e20f498f8438f2980c43d39
GET /gtag/js?id=UA-87102525-4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://indian-sextube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 04 Dec 2022 13:37:09 GMT
expires: Sun, 04 Dec 2022 13:37:09 GMT
cache-control: private, max-age=900
last-modified: Sun, 04 Dec 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43590
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 2.0 kB IP
Hash 2aad3690b1ce0b52714608a1c5093aa8
9e0e97b3df4e3cdcfee5a120bc63687ad862966c
8d2806fe7448eb880af13e6cac7d3968db8c094c30d7031dee41c3f18d1675d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 13:37:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a.realsrv.com/ad-provider.js
200 OK 22 kB URL HTTP/2 a.realsrv.com/ad-provider.js
IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (51260)
Hash 4162cc1bfb182403ac2177ac7a3bd580
761d56fa13492fad320e3866042a219fc74fd642
bc5435bb531678feead22208bbed7a9bcfc78b4d78d566f34bb463f931266c6f
GET /ad-provider.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://indian-sextube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:09 GMT
content-type: application/javascript
etag: W/"f26c91d131ffc1bbddb296d644e"
expires: Fri, 02 Dec 2022 12:50:41 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1670169084
server: CDN77-Turbo
x-77-nzt: AblMCRSQKZX/uQoAAA
x-77-nzt-ray: af585630b99a923c85a28c638a3e5e06
x-cache: HIT
x-age: 2745
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
syndication.realsrv.com/v1/api.php
200 OK 1.2 kB URL HTTP/1.1 syndication.realsrv.com/v1/api.php
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (1635), with no line terminators
Hash adece074ad31fd258e8fa4cbc4c49b03
31c41247934aaf07ecadf818db6a77df032cc078
ccb79d666d8cb7c94ae0158e896cdf60756e4bfb4974bdd0e3219bd92b252454
POST /v1/api.php HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 316
Origin: https://indian-sextube.com
Connection: keep-alive
Referer: https://indian-sextube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 13:37:09 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://indian-sextube.com
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%22638ca285382d21.55727718785518404%22%3B%7D; expires=Tue, 03-Dec-2024 13:37:09 GMT; Max-Age=63072000; path=/; domain=realsrv.com; secure; SameSite=None
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6ccc960e777f58f787016a135917ce71
ea97ac62eca9799548ee545fba13a0efd09b6790
63f09ba1a8db8d043b01d47b993c81cfc3d706656dfca77070b4ac899fab9664
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63F09BA1A8DB8D043B01D47B993C81CFC3D706656DFCA77070B4AC899FAB9664"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6532
Expires: Sun, 04 Dec 2022 15:26:01 GMT
Date: Sun, 04 Dec 2022 13:37:09 GMT
Connection: keep-alive
syndication.realsrv.com/ads-iframe-display.php?idzone=4256462&type=300x250&p=https%3A//indian-sextube.com/asian/famous-arpita-boudi-masturbating/&dt=1670161026807&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
200 OK 1.4 kB URL HTTP/1.1 syndication.realsrv.com/ads-iframe-display.php?idzone=4256462&type=300x250&p=https%3A//indian-sextube.com/asian/famous-arpita-boudi-masturbating/&dt=1670161026807&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1208)
Hash 1a6fc97d406db76f6071535ad6d3d877
5a25749d6beb8aa117c2ec7f6e564a7b0c55a1da
3a15392f248a6480f059129c94886ccb2ead2c6001224219f1802c57a79d3eef
GET /ads-iframe-display.php?idzone=4256462&type=300x250&p=https%3A//indian-sextube.com/asian/famous-arpita-boudi-masturbating/&dt=1670161026807&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://indian-sextube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 13:37:09 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638ca2853bdf09.588705803266173806%22%3B%7D; expires=Tue, 03 Dec 2024 13:37:09 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
impressions=cmmsxrbonxgxameexmllsgeicmmsxaeenxgxameesscrsgeimacslbecnxgxaaabssxamgeislsaroornxgxaallsbmomgeicxbmsbxcnxgxaallaccblgeioslmrxlrnxgxamexxblxmgeiccmmlmlcnxgxamexrbcemgeialbsereanxgxaalrollmegeioslmrxbrnxgxamexsrmoogeicxbmsbcenxgxaallsbmbbgeioslmrxlsnxgxamexcbbecgeicxbmsbocnxgxaallcccaogeicxbmsboenxgxaalbaaamegeiclsmarcanxgxaaallsxlcgeiclsmrrmanxgxaaallsxlcgeirbabxabbnxgxameexmllsgeiccmmlleanxgxameexmerxgeimcrxsbcenxgxaameollsmgeimreaoboenxgxaameollsmgeimcclosscnxgxaalccxmexgeimacslbeenxgxaaboslelageioslmroemnxgxaallsbmbbgeioslmrxbmnxgxamexrbcemgeicaxsscmbnxgxamexrbcemgeicaormlxonxgxaamealeoegeicaormbmcnxgxaamealeoegeimcclsxscnxgxaamsmxlcageimccloscanxgxaallmalxmgeimreaomxenxgxaamelbbsbgeimreaobscnxgxaamelbbsbgeimcclosconxgxaallsbmbbgeimcclsoeonxgxaamxaacblgeimacslbeonxgxaaloesaslgeimcclsxsanxgxaamsmxlcageimcclsxlbnxgxaamssmcolgeimaecseaonxgxaamssmcolgeimaecsxeonxgxaamssmcolgeimaecseronxgxaamssmcolgeimrblelrenxgxaamssmcolgeiccmmllebnxgxameerramageimcclsxlonxgxaamcsebsxgeimcclsoeenxgxaamcrclalgeimcclsxsbnxgxaamcrclalgeimcclossbnxgxaalbexcrageimcclsxlcnxgxaamrscxmxgeimaecseranxgxaabrlemaegeimcclosccnxgxaamrscxmxgeicaormlxcnxgxaalbxrlcegeicaormbmbnxgxaalrexasogeiclsmrbsenxgxaamaxcsxcgeialbserebnxgxamexsrmoogeimcclsxconxgxameexcxlegeimcclsxmenxgxamexrbcemgeialbserxonxgxaalbcxbsageimccloscenxgxaalmlsmmcgeimcclsxxonxgxameexxllrgeimcclsxbcnxgxameexmllsgeicaormlxanxgxaammacmrxgeimcclsxaonxgxameerramageimrblxxxbnxgxaambboecmgeimrblxelcnxgxaambboecmgeimrblxxrbnxgxaambboecmgeialbserxenxgxameerramageimacslbeanxgxaablxaelxgeialbserecnxgxamexrbcemgeiccmmllecnxgxamexsrmoogeisaeeasslnxgxaabrbeccogeimcclossanxgxaabrlemaegeimcclsxronxgxamexrbcemgeimaecseabnxgxaabrlemaegeimrblelrcnxgxaabrlemaegeimrblxemonxgxaabrlemaegeimcclsxcanxgxaalrlccrxgeimaecsxoonxgxaabmalbxxgeircsxcxscnxgxaabbxeomsgeicaormbbenxgxaalexxbcxgeiabeocmconxgxaablxrcmmgeimcclsxxcnxgxaalesmxrsgeimrblxeeanxgxaablsaloageimaecsemanxgxaalmmeabageimaecselonxgxaaloaroaageimcclsxacnxgxameexmllsgeimcclselenxgxameexmllsgeimaecsxronxgxaalxmmoorgeimaecsxsenxgxaalxmmoorgeimaecsercnxgxaalxmmoorgeimaecsembnxgxaalxmmoorgeimaecselenxgxaalxmmoorgeimaecobobnxgxaalsmleergeimaecomoanxgxaalsbbboageimrblxxoenxgxaalsbmacmgeimaecobsbnxgxaalsbbboageimrblxosonxgxaalsbbboageimcclsxmanxgxameexxllcgeimaecsxccnxgxaalmeeamageimrblxeecnxgxaalmeeamageimrblelronxgxaalmeeamageimrblelmonxgxaalmeeamageimaecseacnxgxaalmmeabageimaecsxxcnxgxaalmmeabageicaormbmanxgxaalbxrlcegeimaecsxocnxgxaalbrxssogeicaormlobnxgxaallcccaogeimaecomrenxgxameexxllcgeimrblxxxanxgxameexxllrgeimrblxosbnxgxameexxllrgeimaecomlonxgxameexxllrgeimcclselanxgxameexmllsgeimrblxoxenxgxameexmllsgeimaecomconxgxameexmllsgeimxlbmxlcnogxameelearrgxcceimxlbmxbbnogxameelearagxcceimxeemlxenxgxameelelrxgxcceimmsxaolenxgxameelelrogxcceialbbebrenxgxameelorlrgxcceimxxerrecnxgxameelorlrgxcceialbbebsbnogxameelorlrgxcceimxcbrxscnxgxameelorlrgxcceimxxerreonxgxameelorlrgxcceialrexeoonogxameeloaexgxcceixaoosscrnxgxameeloaexgxcceimemlxmcbnxgxameelscoogxcceimclxlloanxgxameelscoogxcceimmoabamcncgxameelaaccgxcceiocmlslsrnxgxameelaacrgxcceimeembescnxgxameelaabmgxcceixaoossalnxgxamexeoxxsgxcceimeembecenxgxamexesemcgxcceimmxsrbmencgxamexesemcgxcceicmarxbbonsgxamexesemcgxcceimeelaclcncgxamexesemcgxcceimmooobrcnxgxamexesemcgxcceimmooobranxgxamexesemcgxcceimxlbmosenogxamexesemcgxcceimmxsrbabnsgxamexecsasgxcceimxlbmoscnogxamexecsasgxcceicloaxxabnxgxamexealaxgxcceimaoobrbansgxamexemeosgxcceimrbxmxmanxgxamexemxasgxcceimaoobrbcnsgxamexemxacgxcceimxxerrxenxgxamexebsbagxcceimxlbmoconogxamexxberbgxcceimxeoxsacnogxamexxblxmgxcceialbbblmanxgxamexxllaogxcceimxlbmxlenogxamexosombgxcceimeembesonogxamexosombgxcceimaooloranxgxamexosombgxcceialbbbllcnxgxamexoromsgxcceimrbleaebncgxamexobomagxcceimxreaomcnxgxamexoloeagxcceimxlbmosonsgxamexolcrcgxcceimxxerreanxgxamexolcrcgxcceimcssmlrensgxamexolcrcgxcceimmossscencgxamexolasegxcceimxlbmosansgxamexolasegxcceimmsxaolonxgxamexolasegxcceialbbxeeonxgxamexolassgxcceimcssmlrcncgxamexsoaexgxcceicxmecmcanxgxamexsoaecgxcceicloaxxmonxgxamexsobomgxcceialbmbrmanxgxamexsobomgxcceicloaxxxbnxgxamexsobomgxcceimexexabbnxgxamexsobomgxcceialbmbrmcnxgxamexsobomgxcceialbmbrabnxgxamexsobomgxcceimraeelabnxgxamexsobcrgxcceimraeelaanxgxamexsobcrgxcceialcaercenxgxamexsobcrgxcceirreacmsbnxgxamexsobcrgxcceimaoobbebnxgxamexssrrrgxcceimsacexoonxgxamexsrmoogxcceimcoaxmxcncgxamexsrmoogxcceialrexexbnxgxamexcoasogxcceimmosssconmgxamexcoasogxcceimclsaoxbncgxamexcsesrgxcceimrxccosensgxamexcsesrgxcceimxlbmoobnogxamexcsesrgxcceimmsxaobbncgxamexcsesrgxcceimmsxaobenxgxamexcsesrgxcceimmsxaolcnogxamexcsesrgxcceimmsxaobonsgxamexcsesrgxcceimmsxaolbnrgxamexcsesrgxcceimmsxaobansgxamexcsesrgxcceimmsxaseenxgxamexcsesrgxcceimrxsoleonxgxamexcsesagxcceimxcbrxmanogxamexcscbrgxcceimxlbalscnogxamexcsllegxcceimxcbrxmbnxgxamexcsllegxcceimmsoxrlenxgxamexccorsgxcceimmsoxrlonxgxamexccorsgxcceimmsoxrlcnxgxamexccorcgxcceimmxsrbaonsgxamexcrbmrgxcceialbmmbbenxgxamexcbbesgxcceimcssmlronsgxamexcbbecgxcceimxcbrxobnxgxamexcbbecgxcceimrmaobxancgxamexcblmagxcceimmxcxslenxgxamexcblmmgxcceimeelaclonogxamexcblmmgxcceimellbosonxgxamexcblmmgxcceimellboscnxgxamexcblmmgxcceimmxsrbaansgxamexclarlgxcceimasbmxsanxgxamexclarlgxcceimmooobronxgxamexrexxxgxcceiceecmorsnxgxamexrexxxgxcceimaoobseanxgxamexrebxegxcceimrcscrsonxgxamexroxsxgxcceirrmlllronxgxamexroxsxgxcceimclbmrecnxgxamexroraxgxcceimxeoxsbenxgxamexrbcemgxcceimxlbmxlonsgxamexrbcemgxcceimasbmxsenxgxamexrbcebgxcceimmsxrlabnogxamexrbcebgxcceimcoaxmxonrgxamexrbcebgxcceialbbxexenxgxamexrbmcmgxcceimmsxaobcnxgxamexrbmregxcceialxosmbanxgxamexrlaxegxcceimemlxbocnxgxamexrlaxmgxcceixbblrmlanxgxamexaemccgxcceimmomlxlbnxgxamexaemccgxcceicxexraernxgxamexaemcrgxcce; expires=Mon, 05 Dec 2022 13:37:09 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA21OSU4DMRD8Ch8Yqzfb0znDFaSgPGBsz0g5EA4BaZDq8diJyIkutXqvLiGRiWUie6L5oPlADufgFEwCR8Pr2xHGOF/aeblM13X/+i5rqJ8fULOUExLPbLEfcaYZlmcxTXCHZsvkGclTlEFlBAV1SOy3IwtE0ZEJL6cjTu/PveNJIxgmYJe9ey+GBgjBek77YIhLEanNt6WSUeo/bUtei1YtmnMbi/9ppjsCcdfIkL8GlE2lP534URi6EW7j5fpzqcBj/Y54I2Cw2QjQViyvLdWtRtEmsszVExfeYqEt2y+u8HNNbQEAAA==
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA21OSU4DMRD8Ch8Yqzfb0znDFaSgPGBsz0g5EA4BaZDq8diJyIkutXqvLiGRiWUie6L5oPlADufgFEwCR8Pr2xHGOF/aeblM13X/+i5rqJ8fULOUExLPbLEfcaYZlmcxTXCHZsvkGclTlEFlBAV1SOy3IwtE0ZEJL6cjTu/PveNJIxgmYJe9ey+GBgjBek77YIhLEanNt6WSUeo/bUtei1YtmnMbi/9ppjsCcdfIkL8GlE2lP534URi6EW7j5fpzqcBj/Y54I2Cw2QjQViyvLdWtRtEmsszVExfeYqEt2y+u8HNNbQEAAA==
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA21OSU4DMRD8Ch8Yqzfb0znDFaSgPGBsz0g5EA4BaZDq8diJyIkutXqvLiGRiWUie6L5oPlADufgFEwCR8Pr2xHGOF/aeblM13X/+i5rqJ8fULOUExLPbLEfcaYZlmcxTXCHZsvkGclTlEFlBAV1SOy3IwtE0ZEJL6cjTu/PveNJIxgmYJe9ey+GBgjBek77YIhLEanNt6WSUeo/bUtei1YtmnMbi/9ppjsCcdfIkL8GlE2lP534URi6EW7j5fpzqcBj/Y54I2Cw2QjQViyvLdWtRtEmsszVExfeYqEt2y+u8HNNbQEAAA== HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://indian-sextube.com
Connection: keep-alive
Referer: https://indian-sextube.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638ca2853bdf09.588705803266173806%22%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 13:37:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://indian-sextube.com
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638ca2853bdf09.588705803266173806%22%3B%7D; expires=Tue, 03 Dec 2024 13:37:09 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
__upt=%7B%22v%22%3A1%2C%22id%22%3A%22638ca2853bdf09.588705803266173806%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%2299.0199%22%7D; expires=Tue, 03 Dec 2024 13:37:09 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s3t3d2y8.afcdn.net/library/344676/ac01519765c5a0a2b3a171b51a774cda0a703195.webp
200 OK 6.9 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/344676/ac01519765c5a0a2b3a171b51a774cda0a703195.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 99a3343ac7621ba8206ae4ff9362a24c
ac01519765c5a0a2b3a171b51a774cda0a703195
591ecdfbeeb5ae2809d1410921fcf8c6a2072ff69b6ce1ace9cf04ab0aa56bfa
GET /library/344676/ac01519765c5a0a2b3a171b51a774cda0a703195.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://indian-sextube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:09 GMT
content-type: image/webp
content-length: 6918
last-modified: Mon, 20 Dec 2021 01:13:17 GMT
etag: "61bfd8ad-1b06"
expires: Fri, 30 Jun 2023 18:47:26 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195310
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCRTVcuT/FwXOAA
x-77-nzt-ray: af585630ad90574085a28c631a07881a
x-cache: HIT
x-age: 13501719
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/426059/c1a24994bc881cf022e6d63ef9c1eec8b98cbb02.mp4
206 Partial Content 15 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/426059/c1a24994bc881cf022e6d63ef9c1eec8b98cbb02.mp4
IP
ASN #60068 Datacamp Limited
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 84aab959c68075ee40e677cd10aa257e
c1a24994bc881cf022e6d63ef9c1eec8b98cbb02
84fcda8fecea6427923cfe5641d88565f323d5f1dccf9e1e33d8115ff20cd132
GET /library/426059/c1a24994bc881cf022e6d63ef9c1eec8b98cbb02.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://syndication.realsrv.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 206 Partial Content
date: Sun, 04 Dec 2022 13:37:09 GMT
content-type: video/mp4
content-length: 15306
last-modified: Thu, 11 Aug 2022 15:21:08 GMT
etag: "62f51e64-3bca"
expires: Tue, 28 Nov 2023 15:54:26 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
x-accel-expires: @1701186888
server: CDN77-Turbo
x-77-nzt: AblMCRQZM7b/vcgHAA
x-77-nzt-ray: af585630ad90574085a28c63d553a91a
x-cache: HIT
x-age: 510141
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-15305/15306
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 323841baf7f387897216302b1ac302a7
e7f6b9d8ba5366f9f738268a6eca9422f98e8f0a
aac8346a639fb2f81e20932b9eb6644f7ba025e794aba13b1a94c3d10654375c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AAC8346A639FB2F81E20932B9EB6644F7BA025E794ABA13B1A94C3D10654375C"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17556
Expires: Sun, 04 Dec 2022 18:29:45 GMT
Date: Sun, 04 Dec 2022 13:37:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 44d58ab31438e2e99a70476a6f19af19
f9ab25d6e9d5940788de986b48f2fb1909489478
8e85b30d6b856619f5bde199e4cbbecdd6a3de8f405841df94697c8c4b488d2a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8E85B30D6B856619F5BDE199E4CBBECDD6A3DE8F405841DF94697C8C4B488D2A"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8278
Expires: Sun, 04 Dec 2022 15:55:07 GMT
Date: Sun, 04 Dec 2022 13:37:09 GMT
Connection: keep-alive
pl17680572.profitablegatetocontent.com/f8/e3/bd/f8e3bdb6015d117587e29853f39b31b2.js
200 OK 13 kB URL HTTP/1.1 pl17680572.profitablegatetocontent.com/f8/e3/bd/f8e3bdb6015d117587e29853f39b31b2.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (37134), with no line terminators
Hash 05ea179c239a85ee77680ca1855f26f8
d65b846ebdf3e58483728e0f8b2eb68d72ae953a
8f7502303cc614559fa505c5fefefd3a4494f3a7de7edf0361bfc0be43656765
Analyzer Verdict Alert quad9 Sinkholed
GET /f8/e3/bd/f8e3bdb6015d117587e29853f39b31b2.js HTTP/1.1
Host: pl17680572.profitablegatetocontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://indian-sextube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 04 Dec 2022 13:37:09 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c06dd4cd8f4281d790b20cb19874f0e0
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.highperformancedisplayformat.com/2ace17556ae3e3e553e0f9d4fe02d1cd/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.highperformancedisplayformat.com/2ace17556ae3e3e553e0f9d4fe02d1cd/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (26951), with no line terminators
Hash 064ecd0f8b09812054fb6e6468ae81d1
bef0947280a0f2fb278903e4a67da4aada434d63
e849984280e71fa15f25ef210551cdf0eae1a528aab4c0eb21429bbb90e61d7e
Analyzer Verdict Alert quad9 Sinkholed
GET /2ace17556ae3e3e553e0f9d4fe02d1cd/invoke.js HTTP/1.1
Host: www.highperformancedisplayformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://indian-sextube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 13:37:09 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bb46eaa17eea57e26734ef707ab4aa4c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
syndication.realsrv.com/ads-iframe-display.php?idzone=4256462&type=300x250&p=https%3A//indian-sextube.com/asian/famous-arpita-boudi-masturbating/&dt=1670161027444&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
200 OK 877 B URL HTTP/1.1 syndication.realsrv.com/ads-iframe-display.php?idzone=4256462&type=300x250&p=https%3A//indian-sextube.com/asian/famous-arpita-boudi-masturbating/&dt=1670161027444&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (1810), with no line terminators
Hash 14e819a9d5a318de755ab74cbeef29e6
84dab1eded58fcff86e02803224f9b4acaf0eae6
4e000da57c505560c0627b8e4aa25bfe9425341e6387dce72ee2c86e0d7b8ac9
GET /ads-iframe-display.php?idzone=4256462&type=300x250&p=https%3A//indian-sextube.com/asian/famous-arpita-boudi-masturbating/&dt=1670161027444&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://indian-sextube.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638ca2853bdf09.588705803266173806%22%3B%7D; __upt=%7B%22v%22%3A1%2C%22id%22%3A%22638ca2853bdf09.588705803266173806%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%2299.0199%22%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 13:37:09 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638ca2853bdf09.588705803266173806%22%3B%7D; expires=Tue, 03 Dec 2024 13:37:09 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
impressions=cmmsxrbonxgxameexmllsgeicmmsxaeenxgxameesscrsgeimacslbecnxgxaaabssxamgeislsaroornxgxaallsbmomgeicxbmsbxcnxgxaallaccblgeioslmrxlrnxgxamexxblxmgeiccmmlmlcnxgxamexrbcemgeialbsereanxgxaalrollmegeioslmrxbrnxgxamexsrmoogeicxbmsbcenxgxaallsbmbbgeioslmrxlsnxgxamexcbbecgeicxbmsbocnxgxaallcccaogeicxbmsboenxgxaalbaaamegeiclsmarcanxgxaaallsxlcgeiclsmrrmanxgxaaallsxlcgeirbabxabbnxgxameexmllsgeiccmmlleanxgxameexmerxgeimcrxsbcenxgxaameollsmgeimreaoboenxgxaameollsmgeimcclosscnxgxaalccxmexgeimacslbeenxgxaaboslelageioslmroemnxgxaallsbmbbgeioslmrxbmnxgxamexrbcemgeicaxsscmbnxgxamexrbcemgeicaormlxonxgxaamealeoegeicaormbmcnxgxaamealeoegeimcclsxscnxgxaamsmxlcageimccloscanxgxaallmalxmgeimreaomxenxgxaamelbbsbgeimreaobscnxgxaamelbbsbgeimcclosconxgxaallsbmbbgeimcclsoeonxgxaamxaacblgeimacslbeonxgxaaloesaslgeimcclsxsanxgxaamsmxlcageimcclsxlbnxgxaamssmcolgeimaecseaonxgxaamssmcolgeimaecsxeonxgxaamssmcolgeimaecseronxgxaamssmcolgeimrblelrenxgxaamssmcolgeiccmmllebnxgxameerramageimcclsxlonxgxaamcsebsxgeimcclsoeenxgxaamcrclalgeimcclsxsbnxgxaamcrclalgeimcclossbnxgxaalbexcrageimcclsxlcnxgxaamrscxmxgeimaecseranxgxaabrlemaegeimcclosccnxgxaamrscxmxgeicaormlxcnxgxaalbxrlcegeicaormbmbnxgxaalrexasogeiclsmrbsenxgxaamaxcsxcgeialbserebnxgxamexsrmoogeimcclsxconxgxameexcxlegeimcclsxmenxgxamexrbcemgeialbserxonxgxaalbcxbsageimccloscenxgxaalmlsmmcgeimcclsxxonxgxameexxllrgeimcclsxbcnxgxameexmllsgeicaormlxanxgxaammacmrxgeimcclsxaonxgxameerramageimrblxxxbnxgxaambboecmgeimrblxelcnxgxaambboecmgeimrblxxrbnxgxaambboecmgeialbserxenxgxameerramageimacslbeanxgxaablxaelxgeialbserecnxgxamexrbcemgeiccmmllecnxgxamexsrmoogeisaeeasslnxgxaabrbeccogeimcclossanxgxaabrlemaegeimcclsxronxgxamexrbcemgeimaecseabnxgxaabrlemaegeimrblelrcnxgxaabrlemaegeimrblxemonxgxaabrlemaegeimcclsxcanxgxaalrlccrxgeimaecsxoonxgxaabmalbxxgeircsxcxscnxgxaabbxeomsgeicaormbbenxgxaalexxbcxgeiabeocmconxgxaablxrcmmgeimcclsxxcnxgxaalesmxrsgeimrblxeeanxgxaablsaloageimaecsemanxgxaalmmeabageimaecselonxgxaaloaroaageimcclsxacnxgxameexmllsgeimcclselenxgxameexmllsgeimaecsxronxgxaalxmmoorgeimaecsxsenxgxaalxmmoorgeimaecsercnxgxaalxmmoorgeimaecsembnxgxaalxmmoorgeimaecselenxgxaalxmmoorgeimaecobobnxgxaalsmleergeimaecomoanxgxaalsbbboageimrblxxoenxgxaalsbmacmgeimaecobsbnxgxaalsbbboageimrblxosonxgxaalsbbboageimcclsxmanxgxameexxllcgeimaecsxccnxgxaalmeeamageimrblxeecnxgxaalmeeamageimrblelronxgxaalmeeamageimrblelmonxgxaalmeeamageimaecseacnxgxaalmmeabageimaecsxxcnxgxaalmmeabageicaormbmanxgxaalbxrlcegeimaecsxocnxgxaalbrxssogeicaormlobnxgxaallcccaogeimaecomrenxgxameexxllcgeimrblxxxanxgxameexxllrgeimrblxosbnxgxameexxllrgeimaecomlonxgxameexxllrgeimcclselanxgxameexmllsgeimrblxoxenxgxameexmllsgeimaecomconxgxameexmllsgeimxlbmxlcnogxameelearrgxcceimxlbmxbbnogxameelearagxcceimxeemlxenxgxameelelrxgxcceimmsxaolenxgxameelelrogxcceialbbebrenxgxameelorlrgxcceimxxerrecnxgxameelorlrgxcceialbbebsbnogxameelorlrgxcceimxcbrxscnxgxameelorlrgxcceimxxerreonxgxameelorlrgxcceialrexeoonogxameeloaexgxcceixaoosscrnxgxameeloaexgxcceimemlxmcbnxgxameelscoogxcceimclxlloanxgxameelscoogxcceimmoabamcncgxameelaaccgxcceiocmlslsrnxgxameelaacrgxcceimeembescnxgxameelaabmgxcceixaoossalnxgxamexeoxxsgxcceimeembecenxgxamexesemcgxcceimmxsrbmencgxamexesemcgxcceicmarxbbonsgxamexesemcgxcceimeelaclcncgxamexesemcgxcceimmooobrcnxgxamexesemcgxcceimmooobranxgxamexesemcgxcceimxlbmosenogxamexesemcgxcceimmxsrbabnsgxamexecsasgxcceimxlbmoscnogxamexecsasgxcceicloaxxabnxgxamexealaxgxcceimaoobrbansgxamexemeosgxcceimrbxmxmanxgxamexemxasgxcceimaoobrbcnsgxamexemxacgxcceimxxerrxenxgxamexebsbagxcceimxlbmoconogxamexxberbgxcceimxeoxsacnogxamexxblxmgxcceialbbblmanxgxamexxllaogxcceimxlbmxlenogxamexosombgxcceimeembesonogxamexosombgxcceimaooloranxgxamexosombgxcceialbbbllcnxgxamexoromsgxcceimrbleaebncgxamexobomagxcceimxreaomcnxgxamexoloeagxcceimxlbmosonsgxamexolcrcgxcceimxxerreanxgxamexolcrcgxcceimcssmlrensgxamexolcrcgxcceimmossscencgxamexolasegxcceimxlbmosansgxamexolasegxcceimmsxaolonxgxamexolasegxcceialbbxeeonxgxamexolassgxcceimcssmlrcncgxamexsoaexgxcceicxmecmcanxgxamexsoaecgxcceicloaxxmonxgxamexsobomgxcceialbmbrmanxgxamexsobomgxcceicloaxxxbnxgxamexsobomgxcceimexexabbnxgxamexsobomgxcceialbmbrmcnxgxamexsobomgxcceialbmbrabnxgxamexsobomgxcceimraeelabnxgxamexsobcrgxcceimraeelaanxgxamexsobcrgxcceialcaercenxgxamexsobcrgxcceirreacmsbnxgxamexsobcrgxcceimaoobbebnxgxamexssrrrgxcceimsacexoonxgxamexsrmoogxcceimcoaxmxcncgxamexsrmoogxcceialrexexbnxgxamexcoasogxcceimmosssconmgxamexcoasogxcceimclsaoxbncgxamexcsesrgxcceimrxccosensgxamexcsesrgxcceimxlbmoobnogxamexcsesrgxcceimmsxaobbncgxamexcsesrgxcceimmsxaobenxgxamexcsesrgxcceimmsxaolcnogxamexcsesrgxcceimmsxaobonsgxamexcsesrgxcceimmsxaolbnrgxamexcsesrgxcceimmsxaobansgxamexcsesrgxcceimmsxaseenxgxamexcsesrgxcceimrxsoleonxgxamexcsesagxcceimxcbrxmanogxamexcscbrgxcceimxlbalscnogxamexcsllegxcceimxcbrxmbnxgxamexcsllegxcceimmsoxrlenxgxamexccorsgxcceimmsoxrlonxgxamexccorsgxcceimmsoxrlcnxgxamexccorcgxcceimmxsrbaonsgxamexcrbmrgxcceialbmmbbenxgxamexcbbesgxcceimcssmlronsgxamexcbbecgxcceimxcbrxobnxgxamexcbbecgxcceimrmaobxancgxamexcblmagxcceimmxcxslenxgxamexcblmmgxcceimeelaclonogxamexcblmmgxcceimellbosonxgxamexcblmmgxcceimellboscnxgxamexcblmmgxcceimmxsrbaansgxamexclarlgxcceimasbmxsanxgxamexclarlgxcceimmooobronxgxamexrexxxgxcceiceecmorsnxgxamexrexxxgxcceimaoobseanxgxamexrebxegxcceimrcscrsonxgxamexroxsxgxcceirrmlllronxgxamexroxsxgxcceimclbmrecnxgxamexroraxgxcceimxeoxsbenxgxamexrbcemgxcceimxlbmxlonsgxamexrbcemgxcceimasbmxsenxgxamexrbcebgxcceimmsxrlabnogxamexrbcebgxcceimcoaxmxonrgxamexrbcebgxcceialbbxexenxgxamexrbmcmgxcceimmsxaobcnxgxamexrbmregxcceialxosmbanxgxamexrlaxegxcceimemlxbocnxgxamexrlaxmgxcceixbblrmlanxgxamexaemccgxcceimmomlxlbnxgxamexaemccgxcceicxexraernxgxamexaemcrgxcceialaroxrcnxgxamexaxeolgxcceimrlslsbbnxgxamexaxeolgcbe; expires=Mon, 05 Dec 2022 13:37:09 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2640
Expires: Sun, 04 Dec 2022 14:21:09 GMT
Date: Sun, 04 Dec 2022 13:37:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2640
Expires: Sun, 04 Dec 2022 14:21:09 GMT
Date: Sun, 04 Dec 2022 13:37:09 GMT
Connection: keep-alive
s3t3d2y8.afcdn.net/library/426059/abe8366f90aeda3c433717df3802e10d8a79c862.webp
200 OK 9.5 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/426059/abe8366f90aeda3c433717df3802e10d8a79c862.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e964bddc07278a2dd02cbeffb72337c5
abe8366f90aeda3c433717df3802e10d8a79c862
a9e0fd45a1f14b3689a5dd8a1004f4d092d168313ba39dbfa5406022141ae7b4
GET /library/426059/abe8366f90aeda3c433717df3802e10d8a79c862.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.realsrv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:09 GMT
content-type: image/webp
content-length: 9542
last-modified: Thu, 22 Sep 2022 15:19:31 GMT
etag: "632c7d03-2546"
expires: Tue, 28 Nov 2023 15:03:47 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
x-accel-expires: @1701671352
server: CDN77-Turbo
x-77-nzt: AblMCRSNew7/TWQAAA
x-77-nzt-ray: af585630ad90574085a28c63faecc034
x-cache: HIT
x-age: 25677
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2640
Expires: Sun, 04 Dec 2022 14:21:09 GMT
Date: Sun, 04 Dec 2022 13:37:09 GMT
Connection: keep-alive
www.highperformancedisplayformat.com/2ace17556ae3e3e553e0f9d4fe02d1cd/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.highperformancedisplayformat.com/2ace17556ae3e3e553e0f9d4fe02d1cd/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (26949), with no line terminators
Hash 2110d7153b493064cd1a9dfaef190af6
f947123d6536a9f49d4a00a34a8ef0eb4feff90f
e9fd21bec879b843e3c72324df2f02061f93eaf706947cfea215122edb367cf8
Analyzer Verdict Alert quad9 Sinkholed
GET /2ace17556ae3e3e553e0f9d4fe02d1cd/invoke.js HTTP/1.1
Host: www.highperformancedisplayformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://indian-sextube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 13:37:09 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4c4c677a23da8b4c0686007a719c9ec6
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c01fe1cccdb3b672bbade6d98217ffe9
a9a529dc9894827f6243a1bf57f81caa4fe88fc2
c43da6212c79a08e22e78e04e99e8f5422e64b4b0a87f30b7907f1b4bc675c71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4666
x-amzn-requestid: 850d341f-5ccb-453c-8adf-a8194f8fbdad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clr_-GiboAMFwww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-766293f2526e637235067aca;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: z5uqgjB-Bsl0U55a8aFi37cpJ65Vnbjm6bJ2GnMpaO7RXsMZsOCbPQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:44:01 GMT
age: 57188
etag: "a9a529dc9894827f6243a1bf57f81caa4fe88fc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14dcca2a9c4792d835ee709bcd947402
1d702df3a64258628f4124eafd580695f2d350af
da01dcd8fef7c50bdb6f7a8a6a4955694092f479df3dba72f7fa69d7280d07b2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16143
x-amzn-requestid: dc86fad4-4e53-42c9-9b0a-5e4d2cfcd087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGyLGqmoAMFnaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851a7-0ea324b31e8c6578098b8ab9;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KHd4ajJWl-8TDH5HGbkuJXI4NL6I83IwSUBKzfq85cxpyRH_LGl6OA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 05:55:20 GMT
age: 27709
etag: "1d702df3a64258628f4124eafd580695f2d350af"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash db1701b7b9d161a0c935bb6e10b17893
22a8c4bd58c729c1abcf794466e8f3231dfb034b
b495524a33e5b1d3ba34cfbe867ada0da956c061370b1fcde06b23a6194a9787
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8315
x-amzn-requestid: f1bcc33b-aad9-4d3b-b1f9-49282f2d4fb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAMGVboAMFfxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-13472a097177d4751c8f7a8c;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JuY0xcLDiERwrVhq33d4PP64liDqFfk9bc9xX1H62o0tOwrt1ek7Pg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:42:39 GMT
age: 57270
etag: "22a8c4bd58c729c1abcf794466e8f3231dfb034b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43309032a892c486f9985ef520df696e
36f4682ca6a33ff80ee02129c77e6f27e996ede0
24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5681
x-amzn-requestid: 8f0d66b8-d532-48d9-9a29-74540cd6ab3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltXnEotIAMFqkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc296-27349a376ff819ab63b04a81;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:41:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vNP2rQwmWTntetjJyjonO8N_YOBqvQuZUm42BWX7c1GoX7jASOIpCg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:49:42 GMT
age: 56847
etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3af2e495-85ff-410f-8418-e683c7f84bcd.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3af2e495-85ff-410f-8418-e683c7f84bcd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 027480c06cd67621f373c6765dafee4d
9f80bb7ca6f699d88eaec2248dec508c589fe994
f69a0d6bd6e79d8fa7f2f15df11237c0a8b04d45af3cd5870eeef86d18f553bf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3af2e495-85ff-410f-8418-e683c7f84bcd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7728
x-amzn-requestid: 9f37e7a6-1f00-4a81-9b14-962fd0b6cdf4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAMEJxoAMFchQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-4a4cce217327b44525ea1e98;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ztC4S0WeA3ft_9JafrL6fInXo4jwkb0cTWUx4Z8L2uz3EWQS-d6F5A==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 22:08:25 GMT
age: 55724
etag: "9f80bb7ca6f699d88eaec2248dec508c589fe994"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2636f91bb8fa4d9bb7bef114c248a9ae
8637105f41058bc0d2b259d462b560881928adb6
3d93fd8fcf1af31d00ccbd453142dbea5f2b91d7f58373095943ed40a31ed1f7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10431
x-amzn-requestid: f79ab5e7-8c1b-4827-a531-aaa19c1d80aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsCGEwxIAMF34g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc073-6358d2950955884c470c0a89;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PQ7xh995cd1UVi3z42EVZGjQjHLLvtAP5BBC-xLEEGr4mEiXS6fC-w==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:47:06 GMT
age: 57003
etag: "8637105f41058bc0d2b259d462b560881928adb6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 9204df3a00b2cb5142b44efc33b9d95d
190e4703d6cee2b562738aac128be6d236f1faed
b2fb39bccee9e6369ff56237783625d4a502664c00f91b5eb084e927401440b8
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 13:37:10 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 18:30:57 GMT
Expires: Fri, 09 Dec 2022 18:30:56 GMT
Etag: "190e4703d6cee2b562738aac128be6d236f1faed"
Cache-Control: max-age=449026,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7744ef654e1e1c06-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3ac233072203aa898099a9f19d5c89f1
49e15a39534a9dadb3a87e90295a1f568e6665d3
025c971b8163c8429372f5be9fed72e934b3c68d6050412f425c08acac55747f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=88175
Date: Sun, 04 Dec 2022 13:37:09 GMT
Etag: "638b4f9a-1d7"
Expires: Mon, 05 Dec 2022 14:06:44 GMT
Last-Modified: Sat, 03 Dec 2022 13:31:06 GMT
Server: ECS (bsa/EB17)
X-Cache: Miss from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: OSGa9F0T8WTmgrvajLZ3BgdXPKTCBivdG42Ocsb7S_jmfHwBc7PM6Q==
Age: 2138
static-lvlt.xhcdn.com/js/jquery-1.9.1.o.min.js
200 OK 37 kB URL HTTP/2 static-lvlt.xhcdn.com/js/jquery-1.9.1.o.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0e9ebbc645a02f230cb6ccf0f54ca630
4193a7bd3778adbab927f41efc0d14e010c1480c
17e39eb253deee51c391d0dbe78a9a528d759de1914437332f8b1b476b3b1ef4
GET /js/jquery-1.9.1.o.min.js HTTP/1.1
Host: static-lvlt.xhcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xhamster.com
Connection: keep-alive
Referer: https://xhamster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:10 GMT
content-type: application/javascript
content-length: 36725
cache-control: max-age=604800
content-encoding: gzip
etag: W/"63304795-178ec"
expires: Thu, 08 Dec 2022 01:52:28 GMT
last-modified: Sun, 25 Sep 2022 12:20:37 GMT
server: Footprint Distributor V6.1.1162
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Accept
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
age: 301483
accept-ranges: bytes
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 4190c26f01184c51aed2d771ad1429ec
35e2db991eaca4dbe44e4158feb9eddbccba0a4c
4dfbbd61f47a45a39622f70938f29114fe41648e5f74c0aad269d4a0252de5e6
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "4DFBBD61F47A45A39622F70938F29114FE41648E5F74C0AAD269D4A0252DE5E6"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2312
Expires: Sun, 04 Dec 2022 14:15:42 GMT
Date: Sun, 04 Dec 2022 13:37:10 GMT
Connection: keep-alive
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash fe010e1ca1f3a252a7d3599971505878
1d3034c0769fc303fda6a8e57c78dde1658ff02b
61153f121dfc60cb5dd6631590da4dbd9d045f0fe586aa47f490f2bc243a1da2
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://indian-sextube.com
Connection: keep-alive
Referer: https://indian-sextube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:10 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://indian-sextube.com
access-control-allow-credentials: true
set-cookie: uid_id2=13ecface-64c7-49ba-af76-939a2a2a21fb:3:1; expires=Wed, 01 Dec 2032 13:37:10 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3ac233072203aa898099a9f19d5c89f1
49e15a39534a9dadb3a87e90295a1f568e6665d3
025c971b8163c8429372f5be9fed72e934b3c68d6050412f425c08acac55747f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=88228
Date: Sun, 04 Dec 2022 13:37:10 GMT
Etag: "638b4f9a-1d7"
Expires: Mon, 05 Dec 2022 14:07:38 GMT
Last-Modified: Sat, 03 Dec 2022 13:31:06 GMT
Server: ECS (nyb/1D32)
X-Cache: Miss from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: RyemI_iBtmWBXUqCPl7LYBeubkpLMGEq2ZRmwsZLR2mxeOcSLRu4hQ==
Age: 2192
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3ac233072203aa898099a9f19d5c89f1
49e15a39534a9dadb3a87e90295a1f568e6665d3
025c971b8163c8429372f5be9fed72e934b3c68d6050412f425c08acac55747f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=88175
Date: Sun, 04 Dec 2022 13:37:10 GMT
Etag: "638b4f9a-1d7"
Expires: Mon, 05 Dec 2022 14:06:45 GMT
Last-Modified: Sat, 03 Dec 2022 13:31:06 GMT
Server: ECS (bsa/EB23)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 2v4UDCAAZiQVi30D2RiBnkqULHbt2D9u0gbtkwXLpT1fKSlSyn1GKQ==
Age: 2139
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 96ba192a3e9d7b062b9bd90f9e3ed7d1
43c5b81d7b2abb01e08e96a58d3b1a03779ba1a3
d1170bf88213e1ff3a613a22826b6f4a25da99e2c17e40ab7516530f04a0b4a7
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://indian-sextube.com
Connection: keep-alive
Referer: https://indian-sextube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:10 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://indian-sextube.com
access-control-allow-credentials: true
set-cookie: uid_id2=1a1e034a-aff4-4b94-b860-edcb65dba4d8:3:1; expires=Wed, 01 Dec 2032 13:37:10 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 50494808172839384a54856fb4802489
f48cb689c71b4363357ba45369d3e379fefbf182
0e2064ce8ddfea56b34370edfb7586a515328e0e2274fd418de4a6ba59fdf751
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://indian-sextube.com
Connection: keep-alive
Referer: https://indian-sextube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:10 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://indian-sextube.com
access-control-allow-credentials: true
set-cookie: uid_id2=4b9b93c9-12b5-424e-9f69-cf3b39fa6e54:3:1; expires=Wed, 01 Dec 2032 13:37:10 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 9204df3a00b2cb5142b44efc33b9d95d
190e4703d6cee2b562738aac128be6d236f1faed
b2fb39bccee9e6369ff56237783625d4a502664c00f91b5eb084e927401440b8
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 13:37:10 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 18:30:57 GMT
Expires: Fri, 09 Dec 2022 18:30:56 GMT
Etag: "190e4703d6cee2b562738aac128be6d236f1faed"
Cache-Control: max-age=449025,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7744ef6559930b51-OSL
xhamster.com/embed/xhPiZgV?xh_proxy=1
301 Moved Permanently 20 kB URL HTTP/2 xhamster.com/embed/xhPiZgV?xh_proxy=1
IP
File type gzip compressed data, from Unix\012- data
Hash 00fbcdf9a0b9f671336702d1074bb7ba
86e888ba8456233f816e41c979cb1b37ba66e19e
39ece66452e612091656c55fa51c3ff7adc062afe063428a1e5ea2c09b14ff89
GET /embed/xhPiZgV?xh_proxy=1 HTTP/1.1
Host: xhamster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://indian-sextube.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sun, 04 Dec 2022 13:37:09 GMT
content-type: text/html; charset=UTF-8
location: https://xhamster.com/embed/xhPiZgV
cache-control: no-cache, no-store, must-revalidate
strict-transport-security: max-age=86400; preload
vary: User-Agent
set-cookie: stats_id=869646; expires=Sun, 11-Dec-2022 13:37:09 GMT; Max-Age=604800; path=/; domain=.xhamster.com; secure; SameSite=None
previous_request_data=%7B%22xh_proxy%22%3A%22xh_proxy%22%7D; expires=Mon, 05-Dec-2022 13:37:09 GMT; Max-Age=86400; path=/; domain=.xhamster.com
stats_uid=638ca28564b6b0.126747497c7; expires=Mon, 04-Dec-2023 13:37:09 GMT; Max-Age=31536000; path=/; domain=.xhamster.com
x_redirect=1; expires=Sun, 04-Dec-2022 13:38:09 GMT; Max-Age=60; path=/; domain=.xhamster.com
x_redirect_prv=https%3A%2F%2Fxhamster.com%2Fembed%2FxhPiZgV; expires=Sun, 04-Dec-2022 13:38:09 GMT; Max-Age=60; path=/; domain=.xhamster.com
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UpoAttwrTSJ4fJB2P7Cw6xODNDb%2FvzMIUItnGbPoPL%2BVJ2ZIkgA2ERdWJwB4jhyaW4FPfZmo5roWsVmrdemCl%2FCUT7JyORYUGxR0dH07X1XAjr34l9E5enBd4Zs30Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7744ef61ae850b51-OSL
X-Firefox-Spdy: h2
anltics.com/piwik.js
200 OK 21 kB IP
ASN #5588 T-Mobile Czech Republic a.s.
File type ASCII text, with very long lines (1601)
Hash 240e5bd76d0b238afcd637e9adce055d
8286fe4a6fb4c8e2b86245e4f4eb7fc7f47cfb03
60753bebac30e25430088785ad818c7c8739080fe2aa38bf4f2547d99d88acbe
GET /piwik.js HTTP/1.1
Host: anltics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://indian-sextube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Date: Sun, 04 Dec 2022 13:43:07 GMT
Content-Type: application/javascript
Content-Length: 21441
Connection: keep-alive
Last-Modified: Thu, 27 Oct 2022 22:07:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Strict-Transport-Security: max-age=15768000
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 4190c26f01184c51aed2d771ad1429ec
35e2db991eaca4dbe44e4158feb9eddbccba0a4c
4dfbbd61f47a45a39622f70938f29114fe41648e5f74c0aad269d4a0252de5e6
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "4DFBBD61F47A45A39622F70938F29114FE41648E5F74C0AAD269D4A0252DE5E6"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2312
Expires: Sun, 04 Dec 2022 14:15:42 GMT
Date: Sun, 04 Dec 2022 13:37:10 GMT
Connection: keep-alive
thumb-lvlt.xhcdn.com/a/HsLBqzhQF3cxJI62aYYu3w/022/746/815/2000x2000.1.jpg
200 OK 224 kB URL HTTP/2 thumb-lvlt.xhcdn.com/a/HsLBqzhQF3cxJI62aYYu3w/022/746/815/2000x2000.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 224 kB (223524 bytes)
Hash 55ae19249d786e5093960479801e2563
81cdb10aa0e99806fb4e8d9f77d4d4bd32da7cbf
aa805d2d84c2ea5d21e89611526fceeecb3df3811d56ff7e36d8a1454a1cb59a
GET /a/HsLBqzhQF3cxJI62aYYu3w/022/746/815/2000x2000.1.jpg HTTP/1.1
Host: thumb-lvlt.xhcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xhamster.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:10 GMT
content-type: image/jpeg
content-length: 223524
cache-control: max-age=604800
etag: "6373a5ed-36924"
expires: Thu, 08 Dec 2022 06:57:16 GMT
last-modified: Tue, 15 Nov 2022 14:45:01 GMT
server: nginx/1.14.0 (Ubuntu)
timing-allow-origin: *
x-proxy-cache: MISS,MISS
age: 283195
accept-ranges: bytes
X-Firefox-Spdy: h2
thumb-lvlt.xhcdn.com/a/HJbtqqhmG-gPOmRFmqmmLw/022/760/948/2000x2000.1.jpg
200 OK 97 kB URL HTTP/2 thumb-lvlt.xhcdn.com/a/HJbtqqhmG-gPOmRFmqmmLw/022/760/948/2000x2000.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Hash 09e4cd52316692dd31013db7a80204df
e15cecc2455527206f060f27728cf6616a6c6fb6
84757b023ffda2174d55edf231b6bd5e0372fb12e99a356805a2b45ece809314
GET /a/HJbtqqhmG-gPOmRFmqmmLw/022/760/948/2000x2000.1.jpg HTTP/1.1
Host: thumb-lvlt.xhcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xhamster.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:10 GMT
content-type: image/jpeg
content-length: 97041
cache-control: max-age=604800
etag: "6378e94f-17b11"
expires: Mon, 05 Dec 2022 08:07:11 GMT
last-modified: Sat, 19 Nov 2022 14:33:51 GMT
server: nginx/1.14.0 (Ubuntu)
timing-allow-origin: *
x-proxy-cache: HIT
age: 538199
accept-ranges: bytes
X-Firefox-Spdy: h2
thumb-lvlt.xhcdn.com/a/v28vLNPPZ099UWgdFB9y8A/022/752/014/2000x2000.c.jpg.v1668625068
200 OK 83 kB URL HTTP/2 thumb-lvlt.xhcdn.com/a/v28vLNPPZ099UWgdFB9y8A/022/752/014/2000x2000.c.jpg.v1668625068
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3\012- data
Hash 6405d8333926748dc54f7598b295cf0a
13fd2db122bb861aaf70286f21c358f83535b63b
8f30cb67ea374347bb0714390c6bc8d0545e291baa4baa87cb03509b86cbebea
GET /a/v28vLNPPZ099UWgdFB9y8A/022/752/014/2000x2000.c.jpg.v1668625068 HTTP/1.1
Host: thumb-lvlt.xhcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xhamster.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:10 GMT
content-type: image/jpeg
content-length: 83401
cache-control: max-age=604800
etag: "637532ac-145c9"
expires: Fri, 09 Dec 2022 02:37:35 GMT
last-modified: Wed, 16 Nov 2022 18:57:48 GMT
server: nginx/1.14.0 (Ubuntu)
timing-allow-origin: *
x-proxy-cache: MISS,MISS
age: 212375
accept-ranges: bytes
X-Firefox-Spdy: h2
thumb-lvlt.xhcdn.com/a/e3p-9AG0iiEgAkEGl7aNsg/022/733/743/2000x2000.1.jpg
200 OK 413 kB URL HTTP/2 thumb-lvlt.xhcdn.com/a/e3p-9AG0iiEgAkEGl7aNsg/022/733/743/2000x2000.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 413 kB (413345 bytes)
Hash f9a659a47ee4dbf9d80cc7ee3148e6e7
3a703f69df878fdf7d2f5fdb2e7d26a7051c09e4
bbe4e4927284a0fd046a9344616bfe8cf51b36601ddd10edd6fc1abba828844c
GET /a/e3p-9AG0iiEgAkEGl7aNsg/022/733/743/2000x2000.1.jpg HTTP/1.1
Host: thumb-lvlt.xhcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xhamster.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:10 GMT
content-type: image/jpeg
content-length: 413345
cache-control: max-age=604800
etag: "636d8323-64ea1"
expires: Sat, 10 Dec 2022 12:51:19 GMT
last-modified: Thu, 10 Nov 2022 23:02:59 GMT
server: nginx/1.14.0 (Ubuntu)
timing-allow-origin: *
x-proxy-cache: HIT
age: 89151
accept-ranges: bytes
X-Firefox-Spdy: h2
thumb-lvlt.xhcdn.com/a/mS2U7msp7BQIHepj9w1hHw/022/764/115/2000x2000.c.jpg.v1668974027
200 OK 274 kB URL HTTP/2 thumb-lvlt.xhcdn.com/a/mS2U7msp7BQIHepj9w1hHw/022/764/115/2000x2000.c.jpg.v1668974027
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 1893x1060, components 3\012- data
Size 274 kB (274263 bytes)
Hash 360a43d0d10f6919d817737df4f9ee8f
abbefaa8524a36664fa94db47d3587ce2539c776
30f3f60abb211b32fa0e2b10578da1320d94c739356804acd6124128c0cfdb00
GET /a/mS2U7msp7BQIHepj9w1hHw/022/764/115/2000x2000.c.jpg.v1668974027 HTTP/1.1
Host: thumb-lvlt.xhcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xhamster.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:10 GMT
content-type: image/jpeg
content-length: 274263
cache-control: max-age=604800
etag: "637a85ca-42f57"
expires: Tue, 06 Dec 2022 10:32:30 GMT
last-modified: Sun, 20 Nov 2022 19:53:46 GMT
server: nginx/1.14.0 (Ubuntu)
timing-allow-origin: *
x-proxy-cache: HIT
age: 443080
accept-ranges: bytes
X-Firefox-Spdy: h2
thumb-lvlt.xhcdn.com/a/JKvmuvz-CBiVPVUrw1WcCA/022/723/569/2000x2000.1.jpg
200 OK 325 kB URL HTTP/2 thumb-lvlt.xhcdn.com/a/JKvmuvz-CBiVPVUrw1WcCA/022/723/569/2000x2000.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 325 kB (325418 bytes)
Hash 2b31516bc8b1f6a8b77fdab3decf9ffe
e5ce09339fc488be0c97594be6dcb4456a1a9287
0ba209a4f4427b7e72ee36525a137805adae9cc06b9e232f2148da5c9bc72d2c
GET /a/JKvmuvz-CBiVPVUrw1WcCA/022/723/569/2000x2000.1.jpg HTTP/1.1
Host: thumb-lvlt.xhcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xhamster.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:10 GMT
content-type: image/jpeg
content-length: 325418
cache-control: max-age=604800
etag: "636a6b0d-4f72a"
expires: Thu, 08 Dec 2022 17:34:12 GMT
last-modified: Tue, 08 Nov 2022 14:43:25 GMT
server: nginx/1.14.0 (Ubuntu)
timing-allow-origin: *
x-proxy-cache: MISS,HIT
age: 244978
accept-ranges: bytes
X-Firefox-Spdy: h2
thumb-lvlt.xhcdn.com/a/rEolOTbNdmOGQU4_yNP3Xg/022/757/517/2000x2000.1.jpg
200 OK 167 kB URL HTTP/2 thumb-lvlt.xhcdn.com/a/rEolOTbNdmOGQU4_yNP3Xg/022/757/517/2000x2000.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 167 kB (167145 bytes)
Hash 0b2f01cf226cdfbf98940925b4d88ea8
1b3d931a6435df41bc59189ad84091092d95e7c8
c7b256737f875c6914db11ff29a5771fc7d075655013bb859e343a827f397c1c
GET /a/rEolOTbNdmOGQU4_yNP3Xg/022/757/517/2000x2000.1.jpg HTTP/1.1
Host: thumb-lvlt.xhcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xhamster.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:10 GMT
content-type: image/jpeg
content-length: 167145
cache-control: max-age=604800
etag: "63778c64-28ce9"
expires: Mon, 05 Dec 2022 01:00:36 GMT
last-modified: Fri, 18 Nov 2022 13:45:08 GMT
server: nginx/1.14.0 (Ubuntu)
timing-allow-origin: *
x-proxy-cache: MISS,HIT
age: 563813
accept-ranges: bytes
X-Firefox-Spdy: h2
thumb-lvlt.xhcdn.com/a/0kQp-sDUYiNGF7POD28jOA/022/776/014/2000x2000.c.jpg.v1669236865
200 OK 112 kB URL HTTP/2 thumb-lvlt.xhcdn.com/a/0kQp-sDUYiNGF7POD28jOA/022/776/014/2000x2000.c.jpg.v1669236865
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3\012- data
Size 112 kB (111481 bytes)
Hash 4702329b206a192f7bd94f9a9a1b1c2a
9ff0a8da5fe7b3c8a9b7e48e7f1928fd52f92037
7cd1692755a2fe9d62c9c5445c7789602874a43de4033cc33fcb12ef94843b28
GET /a/0kQp-sDUYiNGF7POD28jOA/022/776/014/2000x2000.c.jpg.v1669236865 HTTP/1.1
Host: thumb-lvlt.xhcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xhamster.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:10 GMT
content-type: image/jpeg
content-length: 111481
cache-control: max-age=604800
etag: "637e8881-1b379"
expires: Fri, 09 Dec 2022 16:34:47 GMT
last-modified: Wed, 23 Nov 2022 20:54:25 GMT
server: nginx/1.14.0 (Ubuntu)
timing-allow-origin: *
x-proxy-cache: MISS,HIT
age: 162144
accept-ranges: bytes
X-Firefox-Spdy: h2
thumb-lvlt.xhcdn.com/a/KR88Gn09toUezhlBWw9qkA/022/734/057/2000x2000.1.jpg
200 OK 250 kB URL HTTP/2 thumb-lvlt.xhcdn.com/a/KR88Gn09toUezhlBWw9qkA/022/734/057/2000x2000.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 250 kB (249802 bytes)
Hash 4b0b932facad5fdbbe3ef1a79e1bfde6
d01367a209044ab450979023d001f0fb11caf915
b1bc3746b0e726e59b226a9490158545867f9f0da19009094493dc7e274c99dc
GET /a/KR88Gn09toUezhlBWw9qkA/022/734/057/2000x2000.1.jpg HTTP/1.1
Host: thumb-lvlt.xhcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xhamster.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:10 GMT
content-type: image/jpeg
content-length: 249802
cache-control: max-age=604800
etag: "636dac60-3cfca"
expires: Sat, 10 Dec 2022 07:39:29 GMT
last-modified: Fri, 11 Nov 2022 01:58:56 GMT
server: nginx/1.14.0 (Ubuntu)
timing-allow-origin: *
x-proxy-cache: MISS,MISS
age: 107861
accept-ranges: bytes
X-Firefox-Spdy: h2
thumb-lvlt.xhcdn.com/a/Y0Q8ViUTqCwNHy-E6f4DxA/022/739/738/2000x2000.1.jpg
200 OK 460 kB URL HTTP/2 thumb-lvlt.xhcdn.com/a/Y0Q8ViUTqCwNHy-E6f4DxA/022/739/738/2000x2000.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 460 kB (459556 bytes)
Hash 8b89d3528e7bf581792bf2c2046dfbaa
d95405f1d3ee43e23052ee8d1fa37634ee8e03db
591e3a0549a9907d2f9460e93dacc2ade3be7e24109f99e4bc404c0f5a0b6e99
GET /a/Y0Q8ViUTqCwNHy-E6f4DxA/022/739/738/2000x2000.1.jpg HTTP/1.1
Host: thumb-lvlt.xhcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xhamster.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:10 GMT
content-type: image/jpeg
content-length: 459556
cache-control: max-age=604800
etag: "636fecdb-70324"
expires: Sun, 04 Dec 2022 21:35:35 GMT
last-modified: Sat, 12 Nov 2022 18:58:35 GMT
server: nginx/1.14.0 (Ubuntu)
timing-allow-origin: *
x-proxy-cache: MISS,MISS
age: 576096
accept-ranges: bytes
X-Firefox-Spdy: h2
thumb-lvlt.xhcdn.com/a/pHlWU0Xzr8UUEMBn9wJwTQ/022/726/786/2000x2000.c.jpg.v1668065947
200 OK 56 kB URL HTTP/2 thumb-lvlt.xhcdn.com/a/pHlWU0Xzr8UUEMBn9wJwTQ/022/726/786/2000x2000.c.jpg.v1668065947
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 47x47, segment length 16, progressive, precision 8, 960x540, components 3\012- data
Hash 25bd654a7a061323720ee8a5c9f6fe12
6f6f5f06860077796c39105263075cf5437157aa
189fef768868086ef44b8cfba128e10e755370f75feb1009ea13bc49c06c4d3d
GET /a/pHlWU0Xzr8UUEMBn9wJwTQ/022/726/786/2000x2000.c.jpg.v1668065947 HTTP/1.1
Host: thumb-lvlt.xhcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xhamster.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:10 GMT
content-type: image/jpeg
content-length: 56464
cache-control: max-age=604800
etag: "636caa9b-dc90"
expires: Sat, 10 Dec 2022 12:17:08 GMT
last-modified: Thu, 10 Nov 2022 07:39:07 GMT
server: nginx/1.14.0 (Ubuntu)
timing-allow-origin: *
x-proxy-cache: HIT
age: 91202
accept-ranges: bytes
X-Firefox-Spdy: h2
thumb-lvlt.xhcdn.com/a/E-CTkxyGXBLDzKsERmaqfQ/022/787/987/2000x2000.1.jpg
200 OK 217 kB URL HTTP/2 thumb-lvlt.xhcdn.com/a/E-CTkxyGXBLDzKsERmaqfQ/022/787/987/2000x2000.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 217 kB (217074 bytes)
Hash a8855af19f5226c4506a7f4a55cd5910
92c60393ca9d47c28315af0885f2af06082acd64
68816351de45ec7d2507541d25d8c81b092fe2f5cb1588d0272492d100538cff
GET /a/E-CTkxyGXBLDzKsERmaqfQ/022/787/987/2000x2000.1.jpg HTTP/1.1
Host: thumb-lvlt.xhcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xhamster.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:10 GMT
content-type: image/jpeg
content-length: 217074
cache-control: max-age=604800
etag: "63834302-34ff2"
expires: Mon, 05 Dec 2022 14:58:28 GMT
last-modified: Sun, 27 Nov 2022 10:59:14 GMT
server: nginx/1.14.0 (Ubuntu)
timing-allow-origin: *
x-proxy-cache: HIT
age: 513688
accept-ranges: bytes
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://indian-sextube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 04 Dec 2022 12:46:55 GMT
expires: Sun, 04 Dec 2022 14:46:55 GMT
cache-control: public, max-age=7200
age: 3015
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
anltics.com/piwik.php?action_name=Famous%20Arpita%20Boudi%20Masturbating&idsite=53&rec=1&r=453910&h=13&m=37&s=7&url=https%3A%2F%2Findian-sextube.com%2Fasian%2Ffamous-arpita-boudi-masturbating%2F&_id=b947abaa0acf73ef&_idn=1&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=8nsx0n&pf_net=41&pf_srv=1121&pf_tfr=1&pf_dm1=1057&uadata=%7B%7D
204 No Response 0 B URL HTTP/1.1 anltics.com/piwik.php?action_name=Famous%20Arpita%20Boudi%20Masturbating&idsite=53&rec=1&r=453910&h=13&m=37&s=7&url=https%3A%2F%2Findian-sextube.com%2Fasian%2Ffamous-arpita-boudi-masturbating%2F&_id=b947abaa0acf73ef&_idn=1&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=8nsx0n&pf_net=41&pf_srv=1121&pf_tfr=1&pf_dm1=1057&uadata=%7B%7D
IP
ASN #5588 T-Mobile Czech Republic a.s.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /piwik.php?action_name=Famous%20Arpita%20Boudi%20Masturbating&idsite=53&rec=1&r=453910&h=13&m=37&s=7&url=https%3A%2F%2Findian-sextube.com%2Fasian%2Ffamous-arpita-boudi-masturbating%2F&_id=b947abaa0acf73ef&_idn=1&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=8nsx0n&pf_net=41&pf_srv=1121&pf_tfr=1&pf_dm1=1057&uadata=%7B%7D HTTP/1.1
Host: anltics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 0
Origin: https://indian-sextube.com
Connection: keep-alive
Referer: https://indian-sextube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Response
Server: nginx/1.14.0 (Ubuntu)
Date: Sun, 04 Dec 2022 13:43:07 GMT
Connection: keep-alive
Access-Control-Allow-Origin: https://indian-sextube.com
Access-Control-Allow-Credentials: true
Strict-Transport-Security: max-age=15768000
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 13933fbecb0f7bbab76eb29293b37a96
5e9c4d3e79bb7f6e4624c311c9715266eaa620ea
d62fe2f1c2cdc8d3e29ee9a811243290a1de73053a16c2dffc53781556366c7a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D62FE2F1C2CDC8D3E29EE9A811243290A1DE73053A16C2DFFC53781556366C7A"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1407
Expires: Sun, 04 Dec 2022 14:00:37 GMT
Date: Sun, 04 Dec 2022 13:37:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1e1a9a27fa5363a2e9b21492101b97cf
4b866eb99708f520a547bfc2054e8920a0871e82
115a36ff6ec059154ac8c8627bb347444fd66d3be50aa0d156dbf63160a5a5bb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "115A36FF6EC059154AC8C8627BB347444FD66D3BE50AA0D156DBF63160A5A5BB"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8733
Expires: Sun, 04 Dec 2022 16:02:43 GMT
Date: Sun, 04 Dec 2022 13:37:10 GMT
Connection: keep-alive
parkingridiculous.com/watch.41300470418.js?key=2ace17556ae3e3e553e0f9d4fe02d1cd&kw=%5B%22famous%22%2C%22arpita%22%2C%22boudi%22%2C%22masturbating%22%5D&refer=https%3A%2F%2Findian-sextube.com%2Fasian%2Ffamous-arpita-boudi-masturbating%2F&tz=0&dev=e&res=12.1055&uuid=13ecface-64c7-49ba-af76-939a2a2a21fb%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 parkingridiculous.com/watch.41300470418.js?key=2ace17556ae3e3e553e0f9d4fe02d1cd&kw=%5B%22famous%22%2C%22arpita%22%2C%22boudi%22%2C%22masturbating%22%5D&refer=https%3A%2F%2Findian-sextube.com%2Fasian%2Ffamous-arpita-boudi-masturbating%2F&tz=0&dev=e&res=12.1055&uuid=13ecface-64c7-49ba-af76-939a2a2a21fb%3A3%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.41300470418.js?key=2ace17556ae3e3e553e0f9d4fe02d1cd&kw=%5B%22famous%22%2C%22arpita%22%2C%22boudi%22%2C%22masturbating%22%5D&refer=https%3A%2F%2Findian-sextube.com%2Fasian%2Ffamous-arpita-boudi-masturbating%2F&tz=0&dev=e&res=12.1055&uuid=13ecface-64c7-49ba-af76-939a2a2a21fb%3A3%3A1 HTTP/1.1
Host: parkingridiculous.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://indian-sextube.com
Connection: keep-alive
Referer: https://indian-sextube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 13:37:10 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://indian-sextube.com
Access-Control-Allow-Origin: https://indian-sextube.com
Access-Control-Allow-Credentials: true
Location: https://parkingridiculous.com/watch.41300470418.js?key=2ace17556ae3e3e553e0f9d4fe02d1cd&kw=%5B%22famous%22%2C%22arpita%22%2C%22boudi%22%2C%22masturbating%22%5D&refer=https%3A%2F%2Findian-sextube.com%2Fasian%2Ffamous-arpita-boudi-masturbating%2F&tz=0&dev=e&res=12.1055&uuid=13ecface-64c7-49ba-af76-939a2a2a21fb%3A3%3A1&shu=2db27e0f3f7d6d3b978487ddb515fa6b34294ca63a5a594e1338dce92a8730a05791e834d3c131b1c5a07667803f547c18da7237343f8b49ae8c7ac461ea8819d735e8f452003124cec53bc3b16d7ea1cb2116f5b308f2ee31a364b11ec03a&pst=1670161090&rmtc=t
Set-Cookie: u_pl=16135862; expires=Mon, 05 Dec 2022 13:37:10 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.6LItjcP60i_lANGNPNBkRmljMq_9GjLR-0aPcIGJbQQ; expires=Sun, 04 Dec 2022 13:38:10 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1cf7454641f5661170708dfd635dcda0
Strict-Transport-Security: max-age=0; includeSubdomains
reproductiontape.com/watch.214037385061.js?key=2ace17556ae3e3e553e0f9d4fe02d1cd&kw=%5B%22famous%22%2C%22arpita%22%2C%22boudi%22%2C%22masturbating%22%5D&refer=https%3A%2F%2Findian-sextube.com%2Fasian%2Ffamous-arpita-boudi-masturbating%2F&tz=0&dev=e&res=12.1055&uuid=4b9b93c9-12b5-424e-9f69-cf3b39fa6e54%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 reproductiontape.com/watch.214037385061.js?key=2ace17556ae3e3e553e0f9d4fe02d1cd&kw=%5B%22famous%22%2C%22arpita%22%2C%22boudi%22%2C%22masturbating%22%5D&refer=https%3A%2F%2Findian-sextube.com%2Fasian%2Ffamous-arpita-boudi-masturbating%2F&tz=0&dev=e&res=12.1055&uuid=4b9b93c9-12b5-424e-9f69-cf3b39fa6e54%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.214037385061.js?key=2ace17556ae3e3e553e0f9d4fe02d1cd&kw=%5B%22famous%22%2C%22arpita%22%2C%22boudi%22%2C%22masturbating%22%5D&refer=https%3A%2F%2Findian-sextube.com%2Fasian%2Ffamous-arpita-boudi-masturbating%2F&tz=0&dev=e&res=12.1055&uuid=4b9b93c9-12b5-424e-9f69-cf3b39fa6e54%3A3%3A1 HTTP/1.1
Host: reproductiontape.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://indian-sextube.com
Connection: keep-alive
Referer: https://indian-sextube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.17.9
Date: Sun, 04 Dec 2022 13:37:10 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://indian-sextube.com
Access-Control-Allow-Origin: https://indian-sextube.com
Access-Control-Allow-Credentials: true
Location: https://reproductiontape.com/watch.214037385061.js?key=2ace17556ae3e3e553e0f9d4fe02d1cd&kw=%5B%22famous%22%2C%22arpita%22%2C%22boudi%22%2C%22masturbating%22%5D&refer=https%3A%2F%2Findian-sextube.com%2Fasian%2Ffamous-arpita-boudi-masturbating%2F&tz=0&dev=e&res=12.1055&uuid=4b9b93c9-12b5-424e-9f69-cf3b39fa6e54%3A3%3A1&shu=2045c4db16e5c83933b2d189b7d931820662a132e386d2cde2dab90cd007708e99c83d67ef2d0e9db0ad3a8acbaef6b3ff8965221c848689257e53341b41cbd2561103fc62c0134e33dc10b2826508276fe5e848&pst=1670161090&rmtc=t
Set-Cookie: u_pl=16135862; expires=Mon, 05 Dec 2022 13:37:10 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.6LItjcP60i_lANGNPNBkRmljMq_9GjLR-0aPcIGJbQQ; expires=Sun, 04 Dec 2022 13:38:10 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 75086389bf51ca764b3d9c0ab0043931
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 84267c4124a242c10daf480297fe4cd9
fa022708ec3446552436c9dc572ae819c299ef2f
a92c49bb89b2da638d938aee615804cf1e46ac98b8a81aa907721bb55fc96530
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A92C49BB89B2DA638D938AEE615804CF1E46AC98B8A81AA907721BB55FC96530"
Last-Modified: Sat, 03 Dec 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7240
Expires: Sun, 04 Dec 2022 15:37:50 GMT
Date: Sun, 04 Dec 2022 13:37:10 GMT
Connection: keep-alive
t1.extreme-dm.com/f.js
200 OK 2.4 kB IP
File type ASCII text, with very long lines (2533)
Hash 34b37f83d81859205331a959cbc40431
093ca9cf38b15985896286e18ccb8a9db88afd77
13b82539f83f7dcfc60cf4d47a98ef8361c2b41aafcc39dcf9cc98049e3c8af9
GET /f.js HTTP/1.1
Host: t1.extreme-dm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://indian-sextube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 13:37:10 GMT
Content-Type: application/javascript
Content-Length: 2430
Last-Modified: Sun, 25 Oct 2020 11:34:48 GMT
Connection: keep-alive
ETag: "5f9562d8-97e"
Content-Encoding: gzip
Expires: Sun, 04 Dec 2022 19:37:10 GMT
Cache-Control: max-age=21600
parkingridiculous.com/watch.41300470418.js?key=2ace17556ae3e3e553e0f9d4fe02d1cd&kw=%5B%22famous%22%2C%22arpita%22%2C%22boudi%22%2C%22masturbating%22%5D&refer=https%3A%2F%2Findian-sextube.com%2Fasian%2Ffamous-arpita-boudi-masturbating%2F&tz=0&dev=e&res=12.1055&uuid=13ecface-64c7-49ba-af76-939a2a2a21fb%3A3%3A1&shu=2db27e0f3f7d6d3b978487ddb515fa6b34294ca63a5a594e1338dce92a8730a05791e834d3c131b1c5a07667803f547c18da7237343f8b49ae8c7ac461ea8819d735e8f452003124cec53bc3b16d7ea1cb2116f5b308f2ee31a364b11ec03a&pst=1670161090&rmtc=t
200 OK 640 B URL HTTP/1.1 parkingridiculous.com/watch.41300470418.js?key=2ace17556ae3e3e553e0f9d4fe02d1cd&kw=%5B%22famous%22%2C%22arpita%22%2C%22boudi%22%2C%22masturbating%22%5D&refer=https%3A%2F%2Findian-sextube.com%2Fasian%2Ffamous-arpita-boudi-masturbating%2F&tz=0&dev=e&res=12.1055&uuid=13ecface-64c7-49ba-af76-939a2a2a21fb%3A3%3A1&shu=2db27e0f3f7d6d3b978487ddb515fa6b34294ca63a5a594e1338dce92a8730a05791e834d3c131b1c5a07667803f547c18da7237343f8b49ae8c7ac461ea8819d735e8f452003124cec53bc3b16d7ea1cb2116f5b308f2ee31a364b11ec03a&pst=1670161090&rmtc=t
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (602)
Hash e5a54e60e36cabbb2e0ae2c7b7c7fdde
c4a49ebc72b80df7f659ae8a2cbc8b1b6bf53541
b689b57407163179fbeab618b0d368fce8a77b51c16337746346b92edc57a446
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.41300470418.js?key=2ace17556ae3e3e553e0f9d4fe02d1cd&kw=%5B%22famous%22%2C%22arpita%22%2C%22boudi%22%2C%22masturbating%22%5D&refer=https%3A%2F%2Findian-sextube.com%2Fasian%2Ffamous-arpita-boudi-masturbating%2F&tz=0&dev=e&res=12.1055&uuid=13ecface-64c7-49ba-af76-939a2a2a21fb%3A3%3A1&shu=2db27e0f3f7d6d3b978487ddb515fa6b34294ca63a5a594e1338dce92a8730a05791e834d3c131b1c5a07667803f547c18da7237343f8b49ae8c7ac461ea8819d735e8f452003124cec53bc3b16d7ea1cb2116f5b308f2ee31a364b11ec03a&pst=1670161090&rmtc=t HTTP/1.1
Host: parkingridiculous.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://indian-sextube.com
Referer: https://indian-sextube.com/
Connection: keep-alive
Cookie: u_pl=16135862; ain=eyJhbGciOiJIUzI1NiJ9.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.6LItjcP60i_lANGNPNBkRmljMq_9GjLR-0aPcIGJbQQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 13:37:10 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://indian-sextube.com
Access-Control-Allow-Origin: https://indian-sextube.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=13ecface-64c7-49ba-af76-939a2a2a21fb:3:1; expires=Sun, 11 Dec 2022 13:37:10 GMT; secure; SameSite=None
iprc350870aceb9e972b621a9fb33765b8cf=2004368; expires=Mon, 05 Dec 2022 15:37:10 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 05 Dec 2022 13:37:10 GMT; secure; SameSite=None
uncs=1; expires=Mon, 05 Dec 2022 13:37:10 GMT; secure; SameSite=None
pdhtkv5=true; expires=Mon, 05 Dec 2022 13:37:10 GMT; secure; SameSite=None
uncs5=1; expires=Mon, 05 Dec 2022 13:37:10 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a1a68ea70db7a3fe323d85129bf1fad4
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
reproductiontape.com/watch.214037385061.js?key=2ace17556ae3e3e553e0f9d4fe02d1cd&kw=%5B%22famous%22%2C%22arpita%22%2C%22boudi%22%2C%22masturbating%22%5D&refer=https%3A%2F%2Findian-sextube.com%2Fasian%2Ffamous-arpita-boudi-masturbating%2F&tz=0&dev=e&res=12.1055&uuid=4b9b93c9-12b5-424e-9f69-cf3b39fa6e54%3A3%3A1&shu=2045c4db16e5c83933b2d189b7d931820662a132e386d2cde2dab90cd007708e99c83d67ef2d0e9db0ad3a8acbaef6b3ff8965221c848689257e53341b41cbd2561103fc62c0134e33dc10b2826508276fe5e848&pst=1670161090&rmtc=t
200 OK 640 B URL HTTP/1.1 reproductiontape.com/watch.214037385061.js?key=2ace17556ae3e3e553e0f9d4fe02d1cd&kw=%5B%22famous%22%2C%22arpita%22%2C%22boudi%22%2C%22masturbating%22%5D&refer=https%3A%2F%2Findian-sextube.com%2Fasian%2Ffamous-arpita-boudi-masturbating%2F&tz=0&dev=e&res=12.1055&uuid=4b9b93c9-12b5-424e-9f69-cf3b39fa6e54%3A3%3A1&shu=2045c4db16e5c83933b2d189b7d931820662a132e386d2cde2dab90cd007708e99c83d67ef2d0e9db0ad3a8acbaef6b3ff8965221c848689257e53341b41cbd2561103fc62c0134e33dc10b2826508276fe5e848&pst=1670161090&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (602)
Hash e5a54e60e36cabbb2e0ae2c7b7c7fdde
c4a49ebc72b80df7f659ae8a2cbc8b1b6bf53541
b689b57407163179fbeab618b0d368fce8a77b51c16337746346b92edc57a446
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.214037385061.js?key=2ace17556ae3e3e553e0f9d4fe02d1cd&kw=%5B%22famous%22%2C%22arpita%22%2C%22boudi%22%2C%22masturbating%22%5D&refer=https%3A%2F%2Findian-sextube.com%2Fasian%2Ffamous-arpita-boudi-masturbating%2F&tz=0&dev=e&res=12.1055&uuid=4b9b93c9-12b5-424e-9f69-cf3b39fa6e54%3A3%3A1&shu=2045c4db16e5c83933b2d189b7d931820662a132e386d2cde2dab90cd007708e99c83d67ef2d0e9db0ad3a8acbaef6b3ff8965221c848689257e53341b41cbd2561103fc62c0134e33dc10b2826508276fe5e848&pst=1670161090&rmtc=t HTTP/1.1
Host: reproductiontape.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://indian-sextube.com
Referer: https://indian-sextube.com/
Connection: keep-alive
Cookie: u_pl=16135862; ain=eyJhbGciOiJIUzI1NiJ9.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.6LItjcP60i_lANGNPNBkRmljMq_9GjLR-0aPcIGJbQQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 04 Dec 2022 13:37:10 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://indian-sextube.com
Access-Control-Allow-Origin: https://indian-sextube.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=4b9b93c9-12b5-424e-9f69-cf3b39fa6e54:3:1; expires=Sun, 11 Dec 2022 13:37:10 GMT; secure; SameSite=None
iprc350870aceb9e972b621a9fb33765b8cf=2004368; expires=Mon, 05 Dec 2022 15:37:10 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 05 Dec 2022 13:37:10 GMT; secure; SameSite=None
uncs=1; expires=Mon, 05 Dec 2022 13:37:10 GMT; secure; SameSite=None
pdhtkv5=true; expires=Mon, 05 Dec 2022 13:37:10 GMT; secure; SameSite=None
uncs5=1; expires=Mon, 05 Dec 2022 13:37:10 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 87f1f0d54f643bf694fad0c045c08d9d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
peacocktypewriter.com/pixel/sbe?t=1&error=timeout
200 OK 0 B URL HTTP/1.1 peacocktypewriter.com/pixel/sbe?t=1&error=timeout
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbe?t=1&error=timeout HTTP/1.1
Host: peacocktypewriter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://indian-sextube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 13:37:11 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1a13d9c721e7f13832668c8edefbd95d
f45b7e666c11f9926b0987ea92832c3b6f7b9935
35ccaf676571586c43a2f5056fddbf0d4f5572807c24075af2a3b0c625fa8013
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35CCAF676571586C43A2F5056FDDBF0D4F5572807C24075AF2A3B0C625FA8013"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6205
Expires: Sun, 04 Dec 2022 15:20:36 GMT
Date: Sun, 04 Dec 2022 13:37:11 GMT
Connection: keep-alive
www.spikereekvelocity.com/pph1aeej?key=7a7c3779889805e2058addecb7e13424&psid=16135862
200 OK 1.2 kB URL HTTP/1.1 www.spikereekvelocity.com/pph1aeej?key=7a7c3779889805e2058addecb7e13424&psid=16135862
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 245bd03d751c05a7c8d9630bdda62671
5c8951194d119ccdea9b16a73a307000b74437a2
bf5cd9c638ddc89471160f267cf87a0a55d8de75eb3d4728e1041bffda027e0b
Analyzer Verdict Alert quad9 Sinkholed
GET /pph1aeej?key=7a7c3779889805e2058addecb7e13424&psid=16135862 HTTP/1.1
Host: www.spikereekvelocity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://indian-sextube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 04 Dec 2022 13:37:11 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=15077602; expires=Mon, 05 Dec 2022 13:37:11 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.RLBxG6HIB1LncpmjaWRd_CD40o_I6R-5CoKv7qoF404; expires=Sun, 04 Dec 2022 13:38:11 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e870024b9fa13f70e72e783d34258404
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.spikereekvelocity.com/pph1aeej?shu=d995a66e2dded9013278b0e255ffc2a5de47a8bfcfe916edac6277a9597b90a599f2c9fd4f3016e78941f068a9d11187b7c692a8e61fd2218e56f0447c1ce36a35f48a1f73b53d147620b68a6d12e4660c5cd437&pst=1670161091&rmtc=t&uuid=&pii=&in=false&key=7a7c3779889805e2058addecb7e13424&refer=https%3A%2F%2Findian-sextube.com%2F&psid=16135862
302 Found 0 B URL HTTP/1.1 www.spikereekvelocity.com/pph1aeej?shu=d995a66e2dded9013278b0e255ffc2a5de47a8bfcfe916edac6277a9597b90a599f2c9fd4f3016e78941f068a9d11187b7c692a8e61fd2218e56f0447c1ce36a35f48a1f73b53d147620b68a6d12e4660c5cd437&pst=1670161091&rmtc=t&uuid=&pii=&in=false&key=7a7c3779889805e2058addecb7e13424&refer=https%3A%2F%2Findian-sextube.com%2F&psid=16135862
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pph1aeej?shu=d995a66e2dded9013278b0e255ffc2a5de47a8bfcfe916edac6277a9597b90a599f2c9fd4f3016e78941f068a9d11187b7c692a8e61fd2218e56f0447c1ce36a35f48a1f73b53d147620b68a6d12e4660c5cd437&pst=1670161091&rmtc=t&uuid=&pii=&in=false&key=7a7c3779889805e2058addecb7e13424&refer=https%3A%2F%2Findian-sextube.com%2F&psid=16135862 HTTP/1.1
Host: www.spikereekvelocity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spikereekvelocity.com/pph1aeej?key=9ca601a9f47c735df76d5ca46fa26a66&submetric=15077602
Cookie: u_pl=15077602; ain=eyJhbGciOiJIUzI1NiJ9.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.RLBxG6HIB1LncpmjaWRd_CD40o_I6R-5CoKv7qoF404; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 302 Found
Server: nginx/1.17.6
Date: Sun, 04 Dec 2022 13:37:12 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://www.gaming-adult.com/7204697f-4e8d-41d7-be50-8876231cc9f1?campaign_ID=693838&placement_id=15077602&country_code=NO&cost_cpa=6.000000&externalid=1942bfa73e58698981ef2908febd1ea1
Set-Cookie: pdhtkv=true; expires=Mon, 05 Dec 2022 13:37:11 GMT
uncs=1; expires=Mon, 05 Dec 2022 13:37:11 GMT
pdhtkv28=true; expires=Mon, 05 Dec 2022 13:37:11 GMT
uncs28=1; expires=Mon, 05 Dec 2022 13:37:11 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d363303c02752eee7a09aacd01b7287e
Strict-Transport-Security: max-age=0; includeSubdomains
www.gaming-adult.com/7204697f-4e8d-41d7-be50-8876231cc9f1?campaign_ID=693838&placement_id=15077602&country_code=NO&cost_cpa=6.000000&externalid=1942bfa73e58698981ef2908febd1ea1
302 Found 0 B URL HTTP/2 www.gaming-adult.com/7204697f-4e8d-41d7-be50-8876231cc9f1?campaign_ID=693838&placement_id=15077602&country_code=NO&cost_cpa=6.000000&externalid=1942bfa73e58698981ef2908febd1ea1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /7204697f-4e8d-41d7-be50-8876231cc9f1?campaign_ID=693838&placement_id=15077602&country_code=NO&cost_cpa=6.000000&externalid=1942bfa73e58698981ef2908febd1ea1 HTTP/1.1
Host: www.gaming-adult.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.spikereekvelocity.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sun, 04 Dec 2022 13:37:12 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://www.hentaiheroes.com/?ref_id=1962391&tc1=wh153jep5v2h0dukih05cr8e&tc2=Adsterra-David&tc3=NO&source=96bfc843-3d0a-43e6-983d-914746b3a7f8&campaign=693838&tc5=15077602
pragma: no-cache
set-cookie: 7204697f-4e8d-41d7-be50-8876231cc9f1-v4=l9xd81v72VrDXnuQXpBpwYYx3JlzpEDmItKBLslpVIg; Max-Age=86400; Expires=Mon, 05-Dec-2022 13:37:12 GMT; Domain=www.gaming-adult.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=Bwj3QzoyTZwesD3SoK6BjeyvjFkWs580mSQT%2F0z3hlzFo7rY8OLSB8GD4AGvGNcedkcHiYTb3oUVHNdoaxEPWRGVdu3vgK1uHgvIz4OWeXxL9rwuzunjRFo04Rc36r9otBYx5fHQvESicukH2IMeuQ%3D%3D; Max-Age=31536000; Expires=Mon, 04-Dec-2023 13:37:12 GMT; Domain=www.gaming-adult.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 98a41bbcebf8dbe1787a0edacd0bd2d4
648590f24e0f7dda45c99d24211a328266c546aa
8fd50190b554430bbdfe2fa671c8f15eb33ea7ca8fd3d1c7f25b7ceaa0e788cf
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 13:37:12 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 08:28:37 GMT
Expires: Fri, 09 Dec 2022 08:28:36 GMT
Etag: "648590f24e0f7dda45c99d24211a328266c546aa"
Cache-Control: max-age=412883,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7744ef743b961c06-OSL
www.hentaiheroes.com/?ref_id=1962391&tc1=wh153jep5v2h0dukih05cr8e&tc2=Adsterra-David&tc3=NO&source=96bfc843-3d0a-43e6-983d-914746b3a7f8&campaign=693838&tc5=15077602
200 OK 2.2 kB URL HTTP/2 www.hentaiheroes.com/?ref_id=1962391&tc1=wh153jep5v2h0dukih05cr8e&tc2=Adsterra-David&tc3=NO&source=96bfc843-3d0a-43e6-983d-914746b3a7f8&campaign=693838&tc5=15077602
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 145f7219b2ba7fa9d587f50247b77e66
12ca9710d442d2d9bbffa62e5cdb03241fbaa4cf
ba205d1c385038a2a67a6b268c661a50501ad3606a76f3f28a099527bef22e95
GET /?ref_id=1962391&tc1=wh153jep5v2h0dukih05cr8e&tc2=Adsterra-David&tc3=NO&source=96bfc843-3d0a-43e6-983d-914746b3a7f8&campaign=693838&tc5=15077602 HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.spikereekvelocity.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:12 GMT
server: Apache
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: HH_SESS_13=bdat1o4bbf137n9qu2g803kd5n; expires=Sun, 04-Dec-2022 21:37:12 GMT; Max-Age=28800; path=/; secure; SameSite=None
lang=en; expires=Mon, 04-Dec-2023 13:37:12 GMT; Max-Age=31536000; path=/; secure; SameSite=None
ref_id=1962391; expires=Mon, 04-Dec-2023 13:37:12 GMT; Max-Age=31536000; path=/; secure; SameSite=None
tc1=wh153jep5v2h0dukih05cr8e; expires=Mon, 04-Dec-2023 13:37:12 GMT; Max-Age=31536000; path=/; secure; SameSite=None
tc2=Adsterra-David; expires=Mon, 04-Dec-2023 13:37:12 GMT; Max-Age=31536000; path=/; secure; SameSite=None
tc3=NO; expires=Mon, 04-Dec-2023 13:37:12 GMT; Max-Age=31536000; path=/; secure; SameSite=None
tc5=15077602; expires=Mon, 04-Dec-2023 13:37:12 GMT; Max-Age=31536000; path=/; secure; SameSite=None
source=96bfc843-3d0a-43e6-983d-914746b3a7f8; expires=Mon, 04-Dec-2023 13:37:12 GMT; Max-Age=31536000; path=/; secure; SameSite=None
campaign=693838; expires=Mon, 04-Dec-2023 13:37:12 GMT; Max-Age=31536000; path=/; secure; SameSite=None
HAPBK=web10|Y4yii; path=/; Secure; SameSite=None
strict-transport-security: max-age=31536000
vary: Accept-Encoding
content-encoding: gzip
content-length: 2151
content-type: text/html; charset=UTF-8
X-Firefox-Spdy: h2
www.hentaiheroes.com/js/screenfull.js?v=66997040
200 OK 935 B URL HTTP/2 www.hentaiheroes.com/js/screenfull.js?v=66997040
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with very long lines (2863), with no line terminators
Hash 4dfe9ff40759d6d7316a51d4c38e5f9e
e1e3d4777637e222b1200a6d6bc67135492f9dd0
5ba0c79e328a50335bcd5850178c1f0cb70cd5478e738950a925081d04c49c50
GET /js/screenfull.js?v=66997040 HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/?ref_id=1962391&tc1=wh153jep5v2h0dukih05cr8e&tc2=Adsterra-David&tc3=NO&source=96bfc843-3d0a-43e6-983d-914746b3a7f8&campaign=693838&tc5=15077602
Cookie: HH_SESS_13=bdat1o4bbf137n9qu2g803kd5n; lang=en; ref_id=1962391; tc1=wh153jep5v2h0dukih05cr8e; tc2=Adsterra-David; tc3=NO; tc5=15077602; source=96bfc843-3d0a-43e6-983d-914746b3a7f8; campaign=693838; HAPBK=web10|Y4yii
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:12 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Fri, 02 Dec 2022 08:40:08 GMT
etag: "b2f-5eed449036db1-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 935
content-type: application/javascript
X-Firefox-Spdy: h2
www.hentaiheroes.com/css/chat.css?v=66997038
200 OK 15 kB URL HTTP/2 www.hentaiheroes.com/css/chat.css?v=66997038
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 36c678f83bdb35473b9ca7b60cffea3e
d6e1c0aa9490f6acb63c7ca263da98685833c103
8bd55f9d7cd0dbc923ec33bc23bb91ba660e28e1c2841ddaab0f214c3d570eb2
GET /css/chat.css?v=66997038 HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/?ref_id=1962391&tc1=wh153jep5v2h0dukih05cr8e&tc2=Adsterra-David&tc3=NO&source=96bfc843-3d0a-43e6-983d-914746b3a7f8&campaign=693838&tc5=15077602
Cookie: HH_SESS_13=bdat1o4bbf137n9qu2g803kd5n; lang=en; ref_id=1962391; tc1=wh153jep5v2h0dukih05cr8e; tc2=Adsterra-David; tc3=NO; tc5=15077602; source=96bfc843-3d0a-43e6-983d-914746b3a7f8; campaign=693838; HAPBK=web10|Y4yii
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:12 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Fri, 02 Dec 2022 08:39:47 GMT
etag: "1ed5a-5eed447bb2e9a-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 14842
content-type: text/css
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 13:37:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 13:37:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
200 OK 31 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 7808e0e4b7a714230373852158500533
4a79d18722a68a2f38d52e2d3a11b550bdd30b3c
8ba5796bee6a065b8b31895e7e8d59ba564cfd36d2ce056e327588e67736f054
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 11:24:15 GMT
expires: Tue, 28 Nov 2023 11:24:15 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 526377
last-modified: Wed, 10 Mar 2021 14:28:09 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Carter+One|Kalam:700|Mr+Dafoe|Alegreya+Sans:700i|Marck+Script
200 OK 1.3 kB URL HTTP/2 fonts.googleapis.com/css?family=Carter+One|Kalam:700|Mr+Dafoe|Alegreya+Sans:700i|Marck+Script
IP
Hash f552454024ce809af83d6df60b7e7a80
7eaf0b61613c8df7c1bca8be6147846a81e2aec8
cbca653fe88d4d4c21d53a735d2325d368c53404657303491b0c76abcd3d338c
GET /css?family=Carter+One|Kalam:700|Mr+Dafoe|Alegreya+Sans:700i|Marck+Script HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 04 Dec 2022 13:37:12 GMT
date: Sun, 04 Dec 2022 13:37:12 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 13:37:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.hentaiheroes.com/home.html
200 OK 4.4 kB URL HTTP/2 www.hentaiheroes.com/home.html
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1409)
Hash 60317c30518d11223e63e43451f76bb7
68f14df06f58469b6b549c7a130cae1c7d1aa049
02e3f3c148f1255ef4bfb37f00901ff31128695a6a2c62e01d18cd46b040b70f
GET /home.html HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/?ref_id=1962391&tc1=wh153jep5v2h0dukih05cr8e&tc2=Adsterra-David&tc3=NO&source=96bfc843-3d0a-43e6-983d-914746b3a7f8&campaign=693838&tc5=15077602
Cookie: HH_SESS_13=bdat1o4bbf137n9qu2g803kd5n; lang=en; ref_id=1962391; tc1=wh153jep5v2h0dukih05cr8e; tc2=Adsterra-David; tc3=NO; tc5=15077602; source=96bfc843-3d0a-43e6-983d-914746b3a7f8; campaign=693838; HAPBK=web10|Y4yii
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:12 GMT
server: Apache
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
strict-transport-security: max-age=31536000
vary: Accept-Encoding
content-encoding: gzip
content-length: 4378
content-type: text/html; charset=UTF-8
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 13:37:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/carterone/v17/q5uCsoe5IOB2-pXv9UcNExN8hA.woff2
200 OK 28 kB URL HTTP/2 fonts.gstatic.com/s/carterone/v17/q5uCsoe5IOB2-pXv9UcNExN8hA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 27984, version 1.0\012- data
Hash 9c01ef3c4862a40bf29bd780e7e88da4
54db29d9cf8092d9c50d477c5d9d9e199c944453
dc6d951120092f271275422fbff657a219671695d03bdd251761e05ee9e86589
GET /s/carterone/v17/q5uCsoe5IOB2-pXv9UcNExN8hA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.hentaiheroes.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27984
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Dec 2022 00:07:21 GMT
expires: Sat, 02 Dec 2023 00:07:21 GMT
cache-control: public, max-age=31536000
age: 221391
last-modified: Thu, 21 Apr 2022 17:07:09 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash f77f379ab403eb0f175d3abf51eacc1e
4c0bc75fab7089bb7f0b172bd9c1a93d69b1671f
16e42cd2de65fb2e13c9bff46834ea94ec3038bfe3c958f8297676c920d4225d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 13:37:12 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 15:14:35 GMT
Expires: Thu, 08 Dec 2022 15:14:34 GMT
Etag: "4c0bc75fab7089bb7f0b172bd9c1a93d69b1671f"
Cache-Control: max-age=350841,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7744ef77aa6b0b51-OSL
www.hentaiheroes.com/js/guest.js?v=66997039
200 OK 529 B URL HTTP/2 www.hentaiheroes.com/js/guest.js?v=66997039
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with very long lines (1367), with no line terminators
Hash 7348e55be15dc16f98e50b2826ece833
4186367a3694585077625c655a9c503cdabbd545
ea3aab4a54f71ce834d19887b7b10988bb3ba09ed818f92b80ee64150bf59972
GET /js/guest.js?v=66997039 HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/home.html
Cookie: HH_SESS_13=bdat1o4bbf137n9qu2g803kd5n; lang=en; ref_id=1962391; tc1=wh153jep5v2h0dukih05cr8e; tc2=Adsterra-David; tc3=NO; tc5=15077602; source=96bfc843-3d0a-43e6-983d-914746b3a7f8; campaign=693838; HAPBK=web10|Y4yii
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:12 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Fri, 02 Dec 2022 08:39:53 GMT
etag: "557-5eed4481d632f-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 529
content-type: application/javascript
X-Firefox-Spdy: h2
hh2.hh-content.com/clubs/ic_xCross.png
200 OK 1.3 kB URL HTTP/2 hh2.hh-content.com/clubs/ic_xCross.png
IP
ASN #11019 HAPROXY-TECHNOLOGIES
File type PNG image data, 82 x 74, 8-bit colormap, non-interlaced\012- data
Hash 8ae89c096a2186b9ed393a2baa1e8886
53917bc9a063bc304440ec6ae17fb1c583c8f9c4
02c88820b0f0b1292dfc9a5ad88c8cbbfd7941a41ca69f00b769b41deb198be6
GET /clubs/ic_xCross.png HTTP/1.1
Host: hh2.hh-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: image/png
content-length: 1264
last-modified: Tue, 05 May 2020 14:59:59 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
x-vhost-info: hh
accept-ranges: bytes
x-cdn-diag: ams5-6139-0-3675-h-0-0---;6141-25-48249----0-0-0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 13:37:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hh2.hh-content.com/pictures/design/mob_rotation.gif
200 OK 104 kB URL HTTP/2 hh2.hh-content.com/pictures/design/mob_rotation.gif
IP
ASN #11019 HAPROXY-TECHNOLOGIES
File type GIF image data, version 89a, 500 x 443\012- data
Size 104 kB (104376 bytes)
Hash 56deb21462c0875468e3d21f85bb61f9
97cb9c682beb7c0f9c7396d47472c9e263e0677a
f849636c8b1d9a0fb7fde5dde56795c2428291e5e76a53ce4c53974e6c32afa8
GET /pictures/design/mob_rotation.gif HTTP/1.1
Host: hh2.hh-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: image/gif
content-length: 104376
last-modified: Fri, 12 Mar 2021 15:25:52 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
x-vhost-info: hh
accept-ranges: bytes
x-cdn-diag: ams5-6249-0-43338-h-0-0---;6141-25-48249----0-0-1
X-Firefox-Spdy: h2
hh2.hh-content.com/ic_loading_carrot.svg
200 OK 3.7 kB URL HTTP/2 hh2.hh-content.com/ic_loading_carrot.svg
IP
ASN #11019 HAPROXY-TECHNOLOGIES
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash c7ea21734a64fecf0b2b8f54e582e036
2383ef4319d210f37b256cdd05a6e75de60091bc
bd50e89429493ff3043675f67cbbdeea7da18da0ef2a8e0de870eb39dac8dd25
GET /ic_loading_carrot.svg HTTP/1.1
Host: hh2.hh-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: image/svg+xml
content-length: 3743
last-modified: Tue, 05 May 2020 14:59:59 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
x-vhost-info: hh
vary: Accept-Encoding
accept-ranges: bytes
x-cdn-diag: ams5-6140-0-28237-h-0-0---;6141-25-48249----0-0-1
X-Firefox-Spdy: h2
hh2.hh-content.com/design/ic_login.svg
200 OK 8.7 kB URL HTTP/2 hh2.hh-content.com/design/ic_login.svg
IP
ASN #11019 HAPROXY-TECHNOLOGIES
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 5915a8ebac160e3953e4467dedec30b8
df20474ef16fc034e7c9bf27bb1bff222d106032
fec09101a2dbd6d4956c64c59f4898b448ec8dc884cbc01976ce6e6fa6eeb118
GET /design/ic_login.svg HTTP/1.1
Host: hh2.hh-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: image/svg+xml
content-length: 8722
last-modified: Tue, 05 May 2020 14:59:59 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
x-vhost-info: hh
vary: Accept-Encoding
accept-ranges: bytes
x-cdn-diag: ams5-7619-0-4185-h-0-0---;6141-24-48249----0-0-0
X-Firefox-Spdy: h2
hh2.hh-content.com/design/ic_join.svg
200 OK 1.4 kB URL HTTP/2 hh2.hh-content.com/design/ic_join.svg
IP
ASN #11019 HAPROXY-TECHNOLOGIES
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (401), with CRLF line terminators
Hash 8ba97dba6572f93deebde7fe83bd5b69
f4cda4f98492c210aa990cf6063e8a79590ae011
f5557fa48f8dcff13b38b1b5055d04768470bc01be5a1a0971fd9293042b1b79
GET /design/ic_join.svg HTTP/1.1
Host: hh2.hh-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: image/svg+xml
content-length: 1411
last-modified: Tue, 05 May 2020 14:59:59 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
x-vhost-info: hh
vary: Accept-Encoding
accept-ranges: bytes
x-cdn-diag: ams5-6249-0-43338-h-0-0---;6141-24-48249----0-0-0
X-Firefox-Spdy: h2
hh2.hh-content.com/pictures/design/ic_favicon_32px.png
200 OK 576 B URL HTTP/2 hh2.hh-content.com/pictures/design/ic_favicon_32px.png
IP
ASN #11019 HAPROXY-TECHNOLOGIES
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash f76e95aa42153a9047cd4b8bcca0be00
f67a235e807ec1d016d394d9d3790a95846e89fd
cd37f4f58b91e31ceb237b9470026a39bb96cf967b5886698bb2e38e65bf34e2
GET /pictures/design/ic_favicon_32px.png HTTP/1.1
Host: hh2.hh-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: image/png
content-length: 576
last-modified: Mon, 18 Jun 2018 08:55:04 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
x-vhost-info: hh
accept-ranges: bytes
x-cdn-diag: ams5-6141-0-7899-h-0-0---;6141-24-48249----0-0-0
X-Firefox-Spdy: h2
hh2.hh-content.com/design/ic_legal.svg
200 OK 2.3 kB URL HTTP/2 hh2.hh-content.com/design/ic_legal.svg
IP
ASN #11019 HAPROXY-TECHNOLOGIES
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash e12db90b345490737b33530778cf44ee
e873e0209b1a08f5d87dd0534d6fd3311c9f766f
b8f586101e80adb692675c6b21adaad397a7ba1033d45d61d2f0189b78c6cb91
GET /design/ic_legal.svg HTTP/1.1
Host: hh2.hh-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: image/svg+xml
content-length: 2320
last-modified: Tue, 05 May 2020 14:59:59 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
x-vhost-info: hh
vary: Accept-Encoding
accept-ranges: bytes
x-cdn-diag: ams5-6141-0-7899-h-0-0---;6141-24-48249----0-0-0
X-Firefox-Spdy: h2
images.hh-content.com/hentai/pictures/design/logo-apple-touch-icon.png
200 OK 4.0 kB URL HTTP/2 images.hh-content.com/hentai/pictures/design/logo-apple-touch-icon.png
IP
ASN #11019 HAPROXY-TECHNOLOGIES
File type PNG image data, 150 x 150, 8-bit colormap, non-interlaced\012- data
Hash 4a10bda5a21000b2c5a222d78bcc279b
666fa6f947e14d6404c69058ee3f322d9afba40c
cb1fc8b83789ab447f0e774105cdc070ea28d30c0771497ed0cc1496c8dd5c08
GET /hentai/pictures/design/logo-apple-touch-icon.png HTTP/1.1
Host: images.hh-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: image/png
content-length: 4006
last-modified: Thu, 17 Dec 2020 17:04:14 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
x-vhost-info: images.hh-content.com
accept-ranges: bytes
x-cdn-diag: ams5-6141-0-7899-h-0-0---;6141-24-48249----0-0-0
X-Firefox-Spdy: h2
images.hh-content.com/hentai/pictures/design/logo2.png
200 OK 3.4 kB URL HTTP/2 images.hh-content.com/hentai/pictures/design/logo2.png
IP
ASN #11019 HAPROXY-TECHNOLOGIES
File type PNG image data, 566 x 250, 8-bit colormap, non-interlaced\012- data
Hash bb30651d4829e8d4aa2d2fe1da64b9c9
1607a6cec035df2fc2779732d7505f4c9ecdb5a2
0a9d9b559f56759b74032fa25a5f422cb094864a26e93f7b366a0f0dc8675782
GET /hentai/pictures/design/logo2.png HTTP/1.1
Host: images.hh-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: image/png
content-length: 3449
last-modified: Tue, 23 Mar 2021 12:09:15 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
x-vhost-info: images.hh-content.com
accept-ranges: bytes
x-cdn-diag: ams5-7619-0-4185-h-0-0---;6141-24-48249----0-0-0
X-Firefox-Spdy: h2
hh2.hh-content.com/quest/ic_eyeclosed.svg
200 OK 1.4 kB URL HTTP/2 hh2.hh-content.com/quest/ic_eyeclosed.svg
IP
ASN #11019 HAPROXY-TECHNOLOGIES
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash ee4ad4b4410fcc5898cab08a69780cd6
a8ed6e8ef5b181c240270cbcc7aa155405eb3003
1221af76045abbae2c6505da09d58cdee9ece408c45c084198f4b6646e60cb84
GET /quest/ic_eyeclosed.svg HTTP/1.1
Host: hh2.hh-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: image/svg+xml
content-length: 1424
last-modified: Tue, 05 May 2020 14:59:59 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
x-vhost-info: hh
vary: Accept-Encoding
accept-ranges: bytes
x-cdn-diag: ams5-6140-0-28237-h-0-0---;6141-24-48249----0-0-0
X-Firefox-Spdy: h2
hh2.hh-content.com/quest/ic_eyeopen.svg
200 OK 1.1 kB URL HTTP/2 hh2.hh-content.com/quest/ic_eyeopen.svg
IP
ASN #11019 HAPROXY-TECHNOLOGIES
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash d024138a612c10f6f1f53a59ee5e3dd2
eeaf38bfbcc7b8eb245647db978e61db286bcc30
54dc51810c4190a40a490c712bc60a7a2764e6213f8c1b7230836d83de5de996
GET /quest/ic_eyeopen.svg HTTP/1.1
Host: hh2.hh-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: image/svg+xml
content-length: 1142
last-modified: Tue, 05 May 2020 14:59:59 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
x-vhost-info: hh
vary: Accept-Encoding
accept-ranges: bytes
x-cdn-diag: ams5-7846-0-3622-h-0-0---;6141-24-48249----0-0-0
X-Firefox-Spdy: h2
hh2.hh-content.com/design/ic_fullscreen.svg
200 OK 9.1 kB URL HTTP/2 hh2.hh-content.com/design/ic_fullscreen.svg
IP
ASN #11019 HAPROXY-TECHNOLOGIES
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 0831c44a1a21d67c02ef25bc69e5b889
b160e53081718dfbde5d57fc71d3d09e7d263eac
ceb0ca832f16fdb1647cbf5d34d6c095dd6ad6b8b842dc2cf7317f15dcbe2f76
GET /design/ic_fullscreen.svg HTTP/1.1
Host: hh2.hh-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: image/svg+xml
content-length: 9108
last-modified: Tue, 05 May 2020 14:59:59 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
x-vhost-info: hh
vary: Accept-Encoding
accept-ranges: bytes
x-cdn-diag: ams5-7619-0-4185-h-0-0---;6141-23-48249----0-0-0
X-Firefox-Spdy: h2
hh2.hh-content.com/design/menu/sound_on.svg
200 OK 2.3 kB URL HTTP/2 hh2.hh-content.com/design/menu/sound_on.svg
IP
ASN #11019 HAPROXY-TECHNOLOGIES
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash c89b911deef6444f334ee6bec8b70bae
8e9121d4a8eb7cac274a7cc6b9665531d908e604
7c114f2ad2ce1fb762d9a537d35c75de9901a6885e00a77aa1b9486dd8169c8f
GET /design/menu/sound_on.svg HTTP/1.1
Host: hh2.hh-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: image/svg+xml
content-length: 2269
last-modified: Tue, 05 May 2020 14:59:59 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
x-vhost-info: hh
vary: Accept-Encoding
accept-ranges: bytes
x-cdn-diag: ams5-6249-0-43340-h-0-0---;6141-23-48249----0-0-0
X-Firefox-Spdy: h2
hh2.hh-content.com/design/quest_fullscreen/quest_exit_fullscreen.png
200 OK 500 B URL HTTP/2 hh2.hh-content.com/design/quest_fullscreen/quest_exit_fullscreen.png
IP
ASN #11019 HAPROXY-TECHNOLOGIES
File type PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 0be950aa354017dc58d2523c5d7bb687
d0fc1a220cdc3975fa92ac6f5f7b118048c54902
10bc9639649542c420fdec036e7aceedb3b16a0081c33fc97125c07b90f2b6b8
GET /design/quest_fullscreen/quest_exit_fullscreen.png HTTP/1.1
Host: hh2.hh-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: image/png
content-length: 500
last-modified: Fri, 23 Sep 2022 06:45:28 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
x-vhost-info: hh
accept-ranges: bytes
x-cdn-diag: ams5-7619-0-4185-h-0-0---;6141-23-48249----0-0-0
X-Firefox-Spdy: h2
hh2.hh-content.com/pictures/design/form/ic_XP.png
200 OK 4.4 kB URL HTTP/2 hh2.hh-content.com/pictures/design/form/ic_XP.png
IP
ASN #11019 HAPROXY-TECHNOLOGIES
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash 5a8d57bde80c34a9a0f49ae67eeba882
e7112c1c1ba4b0013ae4089568ba14390a304bbf
645ef1f9c9ef97db46d9ff931b84312e6853df6c6a5e5406677b370d391aa8ad
GET /pictures/design/form/ic_XP.png HTTP/1.1
Host: hh2.hh-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: image/png
content-length: 4352
last-modified: Tue, 29 May 2018 11:40:00 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
x-vhost-info: hh
accept-ranges: bytes
x-cdn-diag: ams5-7619-0-4185-h-0-0---;6141-23-48249----0-0-0
X-Firefox-Spdy: h2
fonts.gstatic.com/s/kalam/v16/YA9Qr0Wd4kDdMtDqHTLMkiQ.woff2
200 OK 22 kB URL HTTP/2 fonts.gstatic.com/s/kalam/v16/YA9Qr0Wd4kDdMtDqHTLMkiQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22144, version 1.0\012- data
Hash f3ad3b3081bb38a18628d88ddf39b8b6
befa33190a885871d06ebf259dc12d0d325fd74c
252063af6ade8b9a744cde4ddad0fc21ea53b8ba711eed121a0c2e8610ea9c93
GET /s/kalam/v16/YA9Qr0Wd4kDdMtDqHTLMkiQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.hentaiheroes.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22144
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Dec 2022 14:44:16 GMT
expires: Sun, 03 Dec 2023 14:44:16 GMT
cache-control: public, max-age=31536000
age: 82377
last-modified: Tue, 26 Apr 2022 15:48:21 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
hh2.hh-content.com/pictures/design/ic_soft_currency.png
200 OK 4.8 kB URL HTTP/2 hh2.hh-content.com/pictures/design/ic_soft_currency.png
IP
ASN #11019 HAPROXY-TECHNOLOGIES
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash 628032e842e346860ba4132a5b66fe93
d441605bb3c43621520525758d75b9c9bc99831a
1fbde569f6ce61dc1302f088318f2d1acdc24b85475e998bda540fc131c4f04a
GET /pictures/design/ic_soft_currency.png HTTP/1.1
Host: hh2.hh-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: image/png
content-length: 4783
last-modified: Wed, 13 Mar 2019 16:03:42 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
x-vhost-info: hh
accept-ranges: bytes
x-cdn-diag: ams5-7619-0-4185-h-0-0---;6141-23-48249----0-0-0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1f6c29d2614c040ce4ce2490af68e29c
b7f56d2ac1bdc74762058f4bd2ce82aee3ab433f
8b1e4725f39b440924b2c5b984e0cb182d0798f476b3034031af25cf3d81439c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B1E4725F39B440924B2C5B984E0CB182D0798F476B3034031AF25CF3D81439C"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1950
Expires: Sun, 04 Dec 2022 14:09:43 GMT
Date: Sun, 04 Dec 2022 13:37:13 GMT
Connection: keep-alive
www.hentaiheroes.com/ajax.php
200 OK 16 B URL HTTP/2 www.hentaiheroes.com/ajax.php
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash 7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
POST /ajax.php HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 60
Origin: https://www.hentaiheroes.com
Connection: keep-alive
Referer: https://www.hentaiheroes.com/home.html
Cookie: HH_SESS_13=bdat1o4bbf137n9qu2g803kd5n; lang=en; ref_id=1962391; tc1=wh153jep5v2h0dukih05cr8e; tc2=Adsterra-David; tc3=NO; tc5=15077602; source=96bfc843-3d0a-43e6-983d-914746b3a7f8; campaign=693838; HAPBK=web10|Y4yii
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:13 GMT
server: Apache
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
strict-transport-security: max-age=31536000
content-length: 16
content-type: application/json; charset=utf-8
set-cookie: HAPBK=web10|Y4yij; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
hh2.hh-content.com/pictures/audio/bg_music_2.ogg
206 Partial Content 326 kB URL HTTP/2 hh2.hh-content.com/pictures/audio/bg_music_2.ogg
IP
ASN #11019 HAPROXY-TECHNOLOGIES
File type Ogg data, Vorbis audio, stereo, 44100 Hz, ~48000 bps\012- data
Size 326 kB (325832 bytes)
Hash a4db0590a18b6dc4b99a2136b91abe2a
694c7c07200827aebad33513a0138d2bb533a1bb
9855fad3058dd4c1269df45f752df3f3dc47b727faeea9903a1d8a763755aba6
GET /pictures/audio/bg_music_2.ogg HTTP/1.1
Host: hh2.hh-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.hentaiheroes.com/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: audio/ogg
content-length: 1833608
last-modified: Mon, 22 Feb 2021 09:58:57 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
x-vhost-info: hh
content-range: bytes 0-1833607/1833608
x-cdn-diag: ams5-7846-0-3622-h-0-0---;6141-29-48249----0-0-1
X-Firefox-Spdy: h2
www.hentaiheroes.com/js/default.js?v=66997040
200 OK 445 kB URL HTTP/2 www.hentaiheroes.com/js/default.js?v=66997040
IP
ASN #60781 LeaseWeb Netherlands B.V.
Size 445 kB (444924 bytes)
Hash edb6534c79cc334c19c4958cad4c8343
240031c4ed715f8ea3a350300b68b155143cbbba
97cf17fbc1a139e79827155bc24e5b5bff841521d8e313bcaef9435c230a0568
GET /js/default.js?v=66997040 HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/home.html
Cookie: HH_SESS_13=bdat1o4bbf137n9qu2g803kd5n; lang=en; ref_id=1962391; tc1=wh153jep5v2h0dukih05cr8e; tc2=Adsterra-David; tc3=NO; tc5=15077602; source=96bfc843-3d0a-43e6-983d-914746b3a7f8; campaign=693838; HAPBK=web10|Y4yii
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:12 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Fri, 02 Dec 2022 08:40:04 GMT
etag: "1ca4c8-5eed448b82c1c-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
X-Firefox-Spdy: h2
use.typekit.net/lfu1uah.css
200 OK 827 B URL HTTP/2 use.typekit.net/lfu1uah.css
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (516)
Hash 23cb3bd0e9baa58586be8877ed1fa4cf
4ba80bb386eced49c48a45d0f1760810178e4fbe
9170aa9c3289e5e5d09f40bc0941d772e3d4cde22e5f145eafdfa7b68118ad69
GET /lfu1uah.css HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eggs-ext.kinkoid.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: private, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 827
date: Sun, 04 Dec 2022 13:37:13 GMT
X-Firefox-Spdy: h2
eggs-content.kinkoid.com/authentication/hide.svg
200 OK 748 B URL HTTP/2 eggs-content.kinkoid.com/authentication/hide.svg
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (748), with no line terminators
Hash cad59edc70e2ae6387ab04e4f961528f
c7bb66aa521e859f4d8a35b6b8da847862e24413
51bdb6a686feff9b34838a4e975c4ed30fb665543036b1f8adc6036be0764192
GET /authentication/hide.svg HTTP/1.1
Host: eggs-content.kinkoid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eggs-ext.kinkoid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.2
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: image/svg+xml
content-length: 748
last-modified: Tue, 14 Jul 2020 06:31:25 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
eggs-content.kinkoid.com/authentication/hentai/logo.png
200 OK 3.4 kB URL HTTP/2 eggs-content.kinkoid.com/authentication/hentai/logo.png
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 270 x 123, 8-bit colormap, non-interlaced\012- data
Hash 646617323d6d9e7cc959c516687af6d2
692b46ea8a5edbe527788e6b4e497363699cad5d
c95f6a0e76f202044aaf647ad9894d5822b322adf586f3b656c99aabcab6ee4e
GET /authentication/hentai/logo.png HTTP/1.1
Host: eggs-content.kinkoid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eggs-ext.kinkoid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.2
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: image/png
content-length: 3379
last-modified: Tue, 14 Jul 2020 06:31:34 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
eggs-content.kinkoid.com/authentication/hentai/forgotten_password.png
200 OK 223 kB URL HTTP/2 eggs-content.kinkoid.com/authentication/hentai/forgotten_password.png
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 1200 x 3000, 8-bit colormap, non-interlaced\012- data
Size 223 kB (222857 bytes)
Hash 8ca851d27cfc171809a2df1bcda0d298
4195c1ea0fe0be41c6611f7ac2d3ad04d0c0496f
cb7c3470a20fb0ca125356f550da9f2404aabcba21b595be4b0a147ff8dc542e
GET /authentication/hentai/forgotten_password.png HTTP/1.1
Host: eggs-content.kinkoid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eggs-ext.kinkoid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.2
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: image/png
content-length: 222857
last-modified: Tue, 14 Jul 2020 04:40:20 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
eggs-content.kinkoid.com/authentication/hentai/authenticate.png
200 OK 376 kB URL HTTP/2 eggs-content.kinkoid.com/authentication/hentai/authenticate.png
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 1200 x 3000, 8-bit colormap, non-interlaced\012- data
Size 376 kB (375725 bytes)
Hash aab6e513d0b432bdcf6dad47cd4bc8ed
fddf92ae7fc344fb7840184cd4f754b41a6adf6c
b6880722169342e566a36393a92ceefac70f35020bb5193f9872e1e0dd8a905b
GET /authentication/hentai/authenticate.png HTTP/1.1
Host: eggs-content.kinkoid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eggs-ext.kinkoid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.2
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: image/png
content-length: 375725
last-modified: Tue, 14 Jul 2020 04:40:20 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
eggs-content.kinkoid.com/authentication/hentai/register.png
200 OK 657 kB URL HTTP/2 eggs-content.kinkoid.com/authentication/hentai/register.png
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type gzip compressed data, max compression\012- data
Size 657 kB (657372 bytes)
Hash 79164ba5b1e10ef7a0075eb08ea22e7a
e3baadca5cb9116ffbec2e2bcd8695b03420ef75
a37e5c27bfd51cd3415a9247942fa6f9c92d78db05a6184f30ab18a309626aff
GET /authentication/hentai/register.png HTTP/1.1
Host: eggs-content.kinkoid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eggs-ext.kinkoid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.2
date: Sun, 04 Dec 2022 13:37:13 GMT
content-type: image/png
content-length: 657088
last-modified: Tue, 14 Jul 2020 04:40:20 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
p.typekit.net/p.css?s=1&k=lfu1uah&ht=tk&f=34212.34213.34214.34215.34216.34217&a=13331608&app=typekit&e=css
200 OK 5 B URL HTTP/2 p.typekit.net/p.css?s=1&k=lfu1uah&ht=tk&f=34212.34213.34214.34215.34216.34217&a=13331608&app=typekit&e=css
IP
ASN #20940 Akamai International B.V.
Hash 83d24d4b43cc7eef2b61e66c95f3d158
f0cafc285ee23bb6c28c5166f305493c4331c84d
1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb
GET /p.css?s=1&k=lfu1uah&ht=tk&f=34212.34213.34214.34215.34216.34217&a=13331608&app=typekit&e=css HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=604800
content-type: text/css
cross-origin-resource-policy: cross-origin
etag: "613bee4d-5"
last-modified: Fri, 10 Sep 2021 23:46:21 GMT
server: nginx
content-length: 5
date: Sun, 04 Dec 2022 13:37:13 GMT
X-Firefox-Spdy: h2
indian-sextube.com/asian/famous-arpita-boudi-masturbating/
200 OK 0 B URL HTTP/2 indian-sextube.com/asian/famous-arpita-boudi-masturbating/
IP
GET /asian/famous-arpita-boudi-masturbating/ HTTP/1.1
Host: indian-sextube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:08 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/5.5.9-1ubuntu4.14
set-cookie: PHPSESSID=l510h2kovhlrddt9ip5a1mvub4; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: private, proxy-revalidate, s-maxage=0
pragma: no-cache
link: <https://indian-sextube.com/wp-json/>; rel="https://api.w.org/", <https://indian-sextube.com/?p=160673>; rel=shortlink
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1pojMPn3%2FrIus5imuq%2BX9WhxgAHNR45Ea%2F7vXZ9WA0kJ94dpGSJBTWzZoYmorndxlFJrfF%2BCGi19WQJbqbfIrHRVom7iIc6h6%2FeT2Z%2FqjwjqYX2eHSCljPyaBs5j7AMV1ZJWGKg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7744ef57595afac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
a.realsrv.com/ads.js
200 OK 0 B IP
ASN #60068 Datacamp Limited
GET /ads.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://indian-sextube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:09 GMT
content-type: application/javascript
etag: W/"f4fddb85b686269b678e3caf766"
expires: Fri, 02 Dec 2022 12:50:41 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1670169084
server: CDN77-Turbo
x-77-nzt: AblMCRQ/Tif/uQoAAA
x-77-nzt-ray: af585630b99a923c85a28c63e405d106
x-cache: HIT
x-age: 2745
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
xhamster.com/embed/xhPiZgV
410 Gone 0 B URL HTTP/2 xhamster.com/embed/xhPiZgV
IP
GET /embed/xhPiZgV HTTP/1.1
Host: xhamster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://indian-sextube.com/
Connection: keep-alive
Cookie: stats_id=869646
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 410 Gone
date: Sun, 04 Dec 2022 13:37:09 GMT
content-type: text/html; charset=UTF-8
set-cookie: stats_uid=638ca2856ff441.14023771067; expires=Mon, 04-Dec-2023 13:37:09 GMT; Max-Age=31536000; path=/; domain=.xhamster.com
stats_src_last=indian-sextube.com; expires=Mon, 05-Dec-2022 13:37:09 GMT; Max-Age=86400; path=/; domain=.xhamster.com; secure; SameSite=None
stats_ssn=1670161029%3B2060eb7e12580f58f15855e6ec2fcba46c6b24bf; expires=Sun, 04-Dec-2022 16:37:09 GMT; Max-Age=10800; path=/; domain=.xhamster.com
lang=en; expires=Tue, 03-Jan-2023 13:37:09 GMT; Max-Age=2592000; path=/; domain=.xhamster.com
x_fst_ts=1670161029; expires=Wed, 01-Dec-2032 13:37:09 GMT; Max-Age=315360000; path=/; domain=.xhamster.com
contest_region=europe; expires=Tue, 03-Jan-2023 13:37:09 GMT; Max-Age=2592000; path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pfrZLqoKdB22iKg0wY%2Fy0hHVNwecsr5dNVkhX84TGN5kxEl373KNL9BDOJg5V2qOagylJKvjRL%2F294dAq54xXBf0a5ZwTI5K1Ed1VqDhspcWxPg80ae7ddf7gPC9Ew%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7744ef61feca0b51-OSL
X-Firefox-Spdy: h2
eggs-ext.kinkoid.com/authentication/start_authentication?product_id=1&language=en&purpose=authenticate
200 OK 0 B URL HTTP/2 eggs-ext.kinkoid.com/authentication/start_authentication?product_id=1&language=en&purpose=authenticate
IP
ASN #60781 LeaseWeb Netherlands B.V.
GET /authentication/start_authentication?product_id=1&language=en&purpose=authenticate HTTP/1.1
Host: eggs-ext.kinkoid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: OPTIONS, POST, GET
access-control-max-age: 2592000
access-control-allow-headers: protocol
content-type: text/html; charset=utf-8
date: Sun, 04 Dec 2022 13:37:13 GMT
X-Firefox-Spdy: h2
xh.video/e/7hyQB
302 Found 0 B IP
ASN #39572 DataWeb Global Group B.V.
GET /e/7hyQB HTTP/1.1
Host: xh.video
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://indian-sextube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sun, 04 Dec 2022 13:37:09 GMT
content-type: text/html; charset=UTF-8
location: https://xhamster.com/embed/xhPiZgV?xh_proxy=1
x-robots-tag: noindex
cache-control: no-cache, no-store, must-revalidate
etag: 0be0aa12a2642ec1b6b193f0e1a4652c
vary: User-Agent
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
set-cookie: stats_id=946471; expires=Sun, 11-Dec-2022 13:37:09 GMT; Max-Age=604800; path=/; domain=.xh.video; secure; SameSite=None
stats_uid=638ca2854fa919.78073285e4b; expires=Mon, 04-Dec-2023 13:37:09 GMT; Max-Age=31536000; path=/; domain=.xh.video
x_redirect=1; expires=Sun, 04-Dec-2022 13:38:09 GMT; Max-Age=60; path=/; domain=.xh.video
x_redirect_prv=https%3A%2F%2Fxhamster.com%2Fembed%2FxhPiZgV%3Fxh_proxy%3D1; expires=Sun, 04-Dec-2022 13:38:09 GMT; Max-Age=60; path=/; domain=.xh.video
X-Firefox-Spdy: h2
www.hentaiheroes.com/css/default.css?v=66997038
200 OK 0 B URL HTTP/2 www.hentaiheroes.com/css/default.css?v=66997038
IP
ASN #60781 LeaseWeb Netherlands B.V.
GET /css/default.css?v=66997038 HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/home.html
Cookie: HH_SESS_13=bdat1o4bbf137n9qu2g803kd5n; lang=en; ref_id=1962391; tc1=wh153jep5v2h0dukih05cr8e; tc2=Adsterra-David; tc3=NO; tc5=15077602; source=96bfc843-3d0a-43e6-983d-914746b3a7f8; campaign=693838; HAPBK=web10|Y4yii
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:12 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Fri, 02 Dec 2022 08:39:45 GMT
etag: "1a002d-5eed4479c4c5e-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 0 B URL HTTP/2 friendshipmale.com/sfp.js
IP
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://indian-sextube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:10 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 830b06900b325809d5dd29d6495c5b80
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sun, 04 Dec 2022 13:37:09 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pzMdyCZBDmJ%2BiZKdv7I937Kvy1lO%2Bg0wlI1V62ccaeaZzzPb2vsFC%2B2i%2F4BS24QZj9i5OmyopqY6iD0IY0yN3cpuAcYEdAewEFiBTQtE97SGYGc1dX5nSYYtB1POlqFYDXyFCg4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7744ef65c8700726-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.hentaiheroes.com/phoenix-tr_labels-en-1412.js
200 OK 0 B URL HTTP/2 www.hentaiheroes.com/phoenix-tr_labels-en-1412.js
IP
ASN #60781 LeaseWeb Netherlands B.V.
GET /phoenix-tr_labels-en-1412.js HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/home.html
Cookie: HH_SESS_13=bdat1o4bbf137n9qu2g803kd5n; lang=en; ref_id=1962391; tc1=wh153jep5v2h0dukih05cr8e; tc2=Adsterra-David; tc3=NO; tc5=15077602; source=96bfc843-3d0a-43e6-983d-914746b3a7f8; campaign=693838; HAPBK=web10|Y4yii
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:12 GMT
server: Apache
content-encoding: gzip
cache-control: private, max-age=604800, pre-check=604800
pragma: private
expires: Thu, 08 Jan 70 01:00:00 +0100
strict-transport-security: max-age=31536000
content-type: application/javascript; charset=utf-8;
X-Firefox-Spdy: h2
www.hentaiheroes.com/js/chat.js?v=66997040
200 OK 0 B URL HTTP/2 www.hentaiheroes.com/js/chat.js?v=66997040
IP
ASN #60781 LeaseWeb Netherlands B.V.
GET /js/chat.js?v=66997040 HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/?ref_id=1962391&tc1=wh153jep5v2h0dukih05cr8e&tc2=Adsterra-David&tc3=NO&source=96bfc843-3d0a-43e6-983d-914746b3a7f8&campaign=693838&tc5=15077602
Cookie: HH_SESS_13=bdat1o4bbf137n9qu2g803kd5n; lang=en; ref_id=1962391; tc1=wh153jep5v2h0dukih05cr8e; tc2=Adsterra-David; tc3=NO; tc5=15077602; source=96bfc843-3d0a-43e6-983d-914746b3a7f8; campaign=693838; HAPBK=web10|Y4yii
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:12 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Fri, 02 Dec 2022 08:40:07 GMT
etag: "65b72-5eed448f28595-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
X-Firefox-Spdy: h2
www.hentaiheroes.com/js/quest.js?v=66997040
200 OK 0 B URL HTTP/2 www.hentaiheroes.com/js/quest.js?v=66997040
IP
ASN #60781 LeaseWeb Netherlands B.V.
GET /js/quest.js?v=66997040 HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/home.html
Cookie: HH_SESS_13=bdat1o4bbf137n9qu2g803kd5n; lang=en; ref_id=1962391; tc1=wh153jep5v2h0dukih05cr8e; tc2=Adsterra-David; tc3=NO; tc5=15077602; source=96bfc843-3d0a-43e6-983d-914746b3a7f8; campaign=693838; HAPBK=web10|Y4yii
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:12 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Fri, 02 Dec 2022 08:40:05 GMT
etag: "7931-5eed448d20d19-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7571
content-type: application/javascript
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/images/close-icon.svg
200 OK 0 B URL HTTP/2 s3t3d2y8.afcdn.net/images/close-icon.svg
IP
ASN #60068 Datacamp Limited
GET /images/close-icon.svg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://indian-sextube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:09 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Jun 2022 13:13:10 GMT
etag: W/"62bc4fe6-109"
expires: Fri, 30 Jun 2023 18:46:40 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195204
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCRQkLf7/gQXOAA
x-77-nzt-ray: af585630ad90574085a28c63cd099f1a
x-cache: HIT
x-age: 13501825
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
www.hentaiheroes.com/img/quests/1/1/1600x/p1a.jpg
200 OK 0 B URL HTTP/2 www.hentaiheroes.com/img/quests/1/1/1600x/p1a.jpg
IP
ASN #60781 LeaseWeb Netherlands B.V.
GET /img/quests/1/1/1600x/p1a.jpg HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/home.html
Cookie: HH_SESS_13=bdat1o4bbf137n9qu2g803kd5n; lang=en; ref_id=1962391; tc1=wh153jep5v2h0dukih05cr8e; tc2=Adsterra-David; tc3=NO; tc5=15077602; source=96bfc843-3d0a-43e6-983d-914746b3a7f8; campaign=693838; HAPBK=web10|Y4yii
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 13:37:12 GMT
server: Apache
cache-control: private, max-age=2629000, pre-check=2629000
pragma: private
expires: Sat, 31 Jan 70 11:16:40 +0100
strict-transport-security: max-age=31536000
content-type: image/jpg
X-Firefox-Spdy: h2
172.67.169.42
18.194.134.212
94.75.250.120
185.76.9.26
95.101.11.115
185.207.236.119
195.56.148.197
104.18.156.3
93.184.220.29