301 Moved Permanently 230 B URL User Request GET HTTP/2 IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c977cf1d58c17310366edae5ba506322
7b066e5f4e71b634d6f1446c8c570b397e623af6
29605437417dc538a26dd0938a53fbfbbd1a2c9e24a4c18dc9e37f5f868ff44d
GET / HTTP/1.1
Host: xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: text/html; charset=iso-8859-1
content-length: 230
location: https://www.xtits.xxx/
X-Firefox-Spdy: h2
www.xtits.xxx/static/styles/jquery.fancybox-white.css?v=7.2
200 OK 5.1 kB URL GET HTTP/2 www.xtits.xxx/static/styles/jquery.fancybox-white.css?v=7.2
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
Hash ccea8fffb5804d0a92790aeb3ac94449
b1b57b9eeba2dc02edbd029258578ca62a2ad5b0
e625f37dbdbdd0b46a2e7eb114a2acbb278903d35632636329fef2cb7dae007a
GET /static/styles/jquery.fancybox-white.css?v=7.2 HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: text/css
content-length: 5070
last-modified: Thu, 22 Jul 2021 13:09:25 GMT
etag: "13ce-5c7b5ff03cb40"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.xtits.xxx/static/styles/nano-scroller.css
200 OK 1.5 kB URL GET HTTP/2 www.xtits.xxx/static/styles/nano-scroller.css
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
Hash 028d32fd09cd13168c88ad80c179b79c
f6800c3eeb72618077fc86dbbc51a32aeaec8d8f
1d00ee28694e7ad5e3a6bc58cbbf49372859474d116c1aeeece7cb2a2601dba0
GET /static/styles/nano-scroller.css HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: text/css
content-length: 1471
last-modified: Thu, 22 Jul 2021 13:09:25 GMT
etag: "5bf-5c7b5ff03cb40"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.xtits.xxx/static/styles/swipe.css
200 OK 19 kB URL GET HTTP/2 www.xtits.xxx/static/styles/swipe.css
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type ASCII text, with very long lines (1470)
Hash 76030eb232d0f9566edf498bdb018495
66dcbbac8f399fce9076ab9b75c56f692188c0b2
036cc7f46e417148c3a080c2d2530ced23b9f33a04e3bc43adb79f2920986ccc
GET /static/styles/swipe.css HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: text/css
content-length: 19253
last-modified: Thu, 22 Jul 2021 13:09:25 GMT
etag: "4b35-5c7b5ff03cb40"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.xtits.xxx/static/styles/datepicker.min.css
200 OK 12 kB URL GET HTTP/2 www.xtits.xxx/static/styles/datepicker.min.css
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type ASCII text, with very long lines (12257), with no line terminators
Hash 4cb7f3de32c1071fae01daeb91d4b7a3
1ba2a16b251d479cff4fe00dfff6a94c9b9f965b
ab4c1983343a46eebbc7ea487bd200cedae7947347c99ba2dc1330a946039e92
GET /static/styles/datepicker.min.css HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: text/css
content-length: 12257
last-modified: Thu, 22 Jul 2021 13:09:25 GMT
etag: "2fe1-5c7b5ff03cb40"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.xtits.xxx/static/styles/select2.css
200 OK 15 kB URL GET HTTP/2 www.xtits.xxx/static/styles/select2.css
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type ASCII text, with very long lines (15179)
Hash af22a7e2bfec4d2a82c4dde613a52fb1
0262303d6ae851521ba206fdb6c5d0578f06b4f4
31e49ff119a0ddbe6a2c59628e7a7193a97e20992247dd7ffd818f0ab0a6a205
GET /static/styles/select2.css HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: text/css
content-length: 15180
last-modified: Thu, 22 Jul 2021 13:09:25 GMT
etag: "3b4c-5c7b5ff03cb40"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.xtits.xxx/static/styles/all.41.css
200 OK 274 kB URL GET HTTP/2 www.xtits.xxx/static/styles/all.41.css
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type CSV text\012- , ASCII text
Size 274 kB (273694 bytes)
Hash 5e3bf8531c014478f3060eb634dc7434
c83d8f26d90ab739a0b09bc91b4017a3ab24483f
6d23ec5b02858a3ca9bc9921ef467366f5bec202960bff014c906a1d5ae52cd4
GET /static/styles/all.41.css HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: text/css
content-length: 273694
last-modified: Thu, 22 Jul 2021 14:03:26 GMT
etag: "42d1e-5c7b6c032826b"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.xtits.xxx/static/js/js.cookie.min.js
200 OK 2.0 kB URL GET HTTP/2 www.xtits.xxx/static/js/js.cookie.min.js
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type ASCII text, with very long lines (1619)
Hash 45f12de4d7b95a193ecdc5cfde664bb9
ee9541cf1a95d2a885f8b143a105caaa08ca9c9d
39b8fe6364621725ff90431a34af0f87976d95c00cbfd1d0f3711a3f1fa1a07b
GET /static/js/js.cookie.min.js HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: application/javascript
content-length: 1951
last-modified: Thu, 22 Jul 2021 13:09:25 GMT
etag: "79f-5c7b5ff03cb40"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.xtits.xxx/static/js/ppndr.41.js
200 OK 5.8 kB URL GET HTTP/2 www.xtits.xxx/static/js/ppndr.41.js
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
Hash 6926aa38aa7a173a834cf8b175ef4273
841ca13f95696cc695e80f6be066b1d2cd72464c
cdff9fa6f7fa9313629736c77799d4f4236291175c6466e7c9de1fed8f37e0ac
GET /static/js/ppndr.41.js HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: application/javascript
content-length: 5783
last-modified: Thu, 12 Oct 2023 11:28:38 GMT
etag: "1697-607833dbf93f4"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.xtits.xxx/static/js/jquery.hoverIntent.min.js
200 OK 1.1 kB URL GET HTTP/2 www.xtits.xxx/static/js/jquery.hoverIntent.min.js
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type ASCII text, with very long lines (1115)
Hash ee50d5f88399496fe7e93503eddc89e6
2f1ecda6276c0f5f93bb1f551e22e9ac45eb2623
f5c124b2622e167604a1956ee5a40b2213d061d71f3981d2a0a677c2a746183a
GET /static/js/jquery.hoverIntent.min.js HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: application/javascript
content-length: 1116
last-modified: Thu, 22 Jul 2021 13:09:25 GMT
etag: "45c-5c7b5ff03cb40"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.xtits.xxx/static/js/kvs.js
200 OK 82 kB URL GET HTTP/2 www.xtits.xxx/static/js/kvs.js
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
Hash 302db307357f6bc569fed1ed68ed08f1
fd21d4065bdf7acd35c15f41323a151f23cfe3cd
8ab6d9ca96c31d2e3b2654e979e1599f0b797762282a944ac82603a85a6bb92e
GET /static/js/kvs.js HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: application/javascript
content-length: 81917
last-modified: Thu, 06 Jan 2022 01:53:05 GMT
etag: "13ffd-5d4e021a829b5"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.xtits.xxx/static/js/custom.js?v=1701666523
200 OK 21 kB URL GET HTTP/2 www.xtits.xxx/static/js/custom.js?v=1701666523
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash d491ec1690443a306f2f79c2602acb9a
0a9087db983e4001d115bbb7a1ffe87e0b309091
08faa0c916f7e96a14ff330aedd8f4d5bbf706c88f30c64e55c0ce1ba49babba
GET /static/js/custom.js?v=1701666523 HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: application/javascript
content-length: 21212
last-modified: Tue, 24 May 2022 09:00:39 GMT
etag: "52dc-5dfbe30d0b8e4"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.xtits.xxx/static/images/logo.png
200 OK 20 kB URL GET HTTP/2 www.xtits.xxx/static/images/logo.png
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type PNG image data, 365 x 125, 8-bit/color RGBA, non-interlaced\012- data
Hash a72dafe4bd02034be26773321f5470ca
075356aedd5fa8a85f86420ac245d1c9a6ae37ff
a073692bab42753445ffcde99b9712724cac52cbca2df5c52f4a56dbc7efdbfc
GET /static/images/logo.png HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: image/png
content-length: 20507
last-modified: Thu, 22 Jul 2021 13:09:25 GMT
etag: "60f96e05-501b"
expires: Thu, 07 Dec 2023 05:13:35 GMT
cache-control: max-age=259200
accept-ranges: bytes
X-Firefox-Spdy: h2
www.xtits.xxx/captcha/signup/?rand=1701666521
200 OK 8.7 kB URL GET HTTP/2 www.xtits.xxx/captcha/signup/?rand=1701666521
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type GIF image data, version 87a, 165 x 68\012- data
Hash a4c7cf68369c73a7a46571be6e022c11
1383007aa9644039f8d04a150eec940a0c353d12
80080cbe6935583381c0e842aa5130c224a0ca3b3afbb78290d3b741c6aad0d7
GET /captcha/signup/?rand=1701666521 HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: image/gif
content-length: 8723
x-powered-by: PHP/7.2.34
x-frame-options: SAMEORIGIN
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
www.xtits.xxx/static/js/main.deps.js?v1
200 OK 222 kB URL GET HTTP/2 www.xtits.xxx/static/js/main.deps.js?v1
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type ASCII text, with very long lines (32089)
Size 222 kB (221685 bytes)
Hash d063f36768a1a1255d86ee5913186ab9
300bd1e4fcaf0ca3d3a82276c14317f882d7a7de
49177d5f3e9639063b229d983b8fa08517ed7f41c2b79fde09059874dda27f82
GET /static/js/main.deps.js?v1 HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: application/javascript
content-length: 221685
last-modified: Tue, 06 Dec 2022 00:23:00 GMT
etag: "361f5-5ef1dce7c48e6"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.xtits.xxx/static/js/acess.js
200 OK 391 kB URL GET HTTP/2 www.xtits.xxx/static/js/acess.js
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type Unicode text, UTF-8 text, with very long lines (32006)
Size 391 kB (391087 bytes)
Hash cf0a127fcd3dcf518a86149807f1ed6d
c2b1943d28b14333a546aad0162a5c9f2aedb701
30d400568c06ae1519aa567f8a7851fb1eee00e2612b0f6045fac1e0744cd23f
GET /static/js/acess.js HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: application/javascript
content-length: 391087
last-modified: Thu, 22 Jul 2021 13:09:25 GMT
etag: "5f7af-5c7b5ff03cb40"
accept-ranges: bytes
X-Firefox-Spdy: h2
xozilla.xxx/images/rta.gif
200 OK 745 B URL GET HTTP/2 xozilla.xxx/images/rta.gif
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectwww.xozilla.xxx
FingerprintE8:92:CC:90:C8:52:28:29:5A:08:9B:F7:5D:0E:8A:1B:20:80:15:3C
ValidityFri, 01 Dec 2023 04:44:25 GMT - Thu, 29 Feb 2024 04:44:24 GMT
File type GIF image data, version 89a, 88 x 31\012- data
Hash 0852d285a79d04f03211161a15b098db
5a38bea21f4837cd7955bac7b50a61eadd96f23d
345048ae5248afb4e9977dd80ba624e8c7ed13b46f334a297176015733138a61
GET /images/rta.gif HTTP/1.1
Host: xozilla.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: image/gif
content-length: 745
last-modified: Sun, 28 May 2023 16:41:34 GMT
etag: "6473843e-2e9"
expires: Wed, 03 Jan 2024 05:13:35 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-3JQ1QZ1ST1
200 OK 80 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-3JQ1QZ1ST1
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash 6a5850f13b8188738338f428a4238e9f
691fa93dcf87ca9f8cbcc60e31d54c3bb8dd752b
f0a8e3dfd75fda3c0143b86288d662669bb8d3bde01ae26422c5efa8c8015588
GET /gtag/js?id=G-3JQ1QZ1ST1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 05:13:35 GMT
expires: Mon, 04 Dec 2023 05:13:35 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 80209
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
newtits.name/qzxQMQd.js
200 OK 87 kB IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
File type Unicode text, UTF-8 text, with very long lines (65503), with no line terminators
Hash 3270f5552a6b219080d466395f99e9dd
e9374c6b5c07c1b6a1e27147e35be9e9447dd49a
7cc379a857e3679e6891d65b543e809a344491b2a1b19927df43a48b25c7cd40
GET /qzxQMQd.js HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: application/javascript
content-length: 86755
last-modified: Thu, 30 Nov 2023 11:46:10 GMT
vary: Accept-Encoding
etag: "65687602-152e3"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 25
cf-ray: 82e2dd72cae9d902-HEL
x-frame-options: DENY
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
newtits.name/vast-im.js
200 OK 87 kB IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
File type Unicode text, UTF-8 text, with very long lines (65503), with no line terminators
Hash 3270f5552a6b219080d466395f99e9dd
e9374c6b5c07c1b6a1e27147e35be9e9447dd49a
7cc379a857e3679e6891d65b543e809a344491b2a1b19927df43a48b25c7cd40
GET /vast-im.js HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: application/javascript
content-length: 86755
last-modified: Thu, 30 Nov 2023 11:46:10 GMT
vary: Accept-Encoding
etag: "65687602-152e3"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 25
cf-ray: 82e2dd72cae9d902-HEL
x-frame-options: DENY
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,500,700
200 OK 88 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,500,700
IP
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Unicode text, UTF-8 text, with very long lines (57011)
Hash a1ac8026dc0cccaf6c6aa758cfcb5697
e669ef5380ed89e01ab94446c5cd199d0f9636f0
de16ecc121d8284a73ced958a64143ce2358130f6360c8b241f63dd7e7f168a5
GET /css?family=Roboto:300,400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 04 Dec 2023 05:13:35 GMT
date: Mon, 04 Dec 2023 05:13:35 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.xtits.xxx/static/fonts/icomoon.ttf?p4fh8
200 OK 11 kB URL GET HTTP/2 www.xtits.xxx/static/fonts/icomoon.ttf?p4fh8
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash 71e59e640db79d72ef122bf86a286d4e
c00dfb3beb20da86990629e38e8866335020e82f
c74ee90b0764c52a89d0de28e2fba47daf4730b3e8955f61d6e13098ae800b70
GET /static/fonts/icomoon.ttf?p4fh8 HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/static/styles/all.41.css
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:36 GMT
content-type: application/octet-stream
content-length: 10680
last-modified: Thu, 22 Jul 2021 13:09:25 GMT
etag: "60f96e05-29b8"
expires: Thu, 07 Dec 2023 05:13:36 GMT
cache-control: max-age=259200
accept-ranges: bytes
X-Firefox-Spdy: h2
newtits.name/RpHERw7.js
200 OK 76 kB IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
File type Unicode text, UTF-8 text, with very long lines (65503), with no line terminators
Hash 6a761bae4530f6bfb270abfa75b1cb9b
617e8fd84f14b7a601d055c6ff2ad09441e823c6
8e629883ac62697032eb697449e83a2969d69e7e8adb7a624157e6e1a4afc13e
GET /RpHERw7.js HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: application/javascript
content-length: 75986
last-modified: Thu, 30 Nov 2023 11:46:10 GMT
vary: Accept-Encoding
etag: "65687602-128d2"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 59
cf-ray: 82e2de9effc04e1c-HEL
x-frame-options: DENY
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:57:34 GMT
expires: Fri, 29 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 346562
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:13:56 GMT
expires: Thu, 28 Nov 2024 21:13:56 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 374380
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
newtits.name/api/settings/394891
200 OK 525 B URL GET HTTP/2 newtits.name/api/settings/394891
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
File type gzip compressed data, from Unix\012- data
Hash c93a6708470e40e82162d8aac1efd236
8f5da81e280f33dcea7b3f0ad263ae13adbfc32c
2e557e1ddcf2bf675ab6c67ec4c573478289fc771d873b0396a4e9e7a54be940
GET /api/settings/394891 HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:36 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.6 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 9628, version 1.0\012- data
Hash d9ac47c7e500fb7083b8d595eaf6fe12
112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933
495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 12:58:10 GMT
expires: Thu, 28 Nov 2024 12:58:10 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 404126
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.tapioni.com/adgpt.js
200 OK 818 B IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint67:5F:F1:E0:0C:5E:00:4E:6A:BF:B1:5F:40:29:66:0E:3F:9C:24:5F
ValidityWed, 30 Aug 2023 00:00:00 GMT - Thu, 29 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (2028), with no line terminators
Hash b93fe1dfb3b9596da09b9eee17a9006f
89aeae49cadfb3ba7cc66702b3a18403e1ae5b2e
fdf9db0f687a66cd7c0d22c8589cca33edacca3079971d3d1a21675ca5c917bc
GET /adgpt.js HTTP/1.1
Host: cdn.tapioni.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 05:13:36 GMT
content-type: application/javascript
content-length: 818
last-modified: Thu, 30 Nov 2023 11:46:10 GMT
vary: Accept-Encoding
etag: "65687602-332"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 321892
accept-ranges: bytes
server: cloudflare
cf-ray: 83018fa29e450b69-OSL
X-Firefox-Spdy: h2
www.xtits.xxx/favicon.ico
200 OK 198 B URL GET HTTP/2 www.xtits.xxx/favicon.ico
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type MS Windows icon resource - 1 icon, 16x16, 2 colors\012- data
Hash fb829808da70bc927bf3fed5177ddb5d
43df104f3f37662c8fc115ef2a306ce05c83a462
807baf9db1936c35cf37208d7ee732be876b661cd8c7ebef234360baea568718
GET /favicon.ico HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:36 GMT
content-type: image/x-icon
content-length: 198
last-modified: Thu, 22 Jul 2021 13:09:25 GMT
etag: "60f96e05-c6"
expires: Thu, 07 Dec 2023 05:13:36 GMT
cache-control: max-age=259200
accept-ranges: bytes
X-Firefox-Spdy: h2
a.adtng.com/get/10012974?time=1636661583250
200 OK 1.8 kB URL GET HTTP/2 a.adtng.com/get/10012974?time=1636661583250
IP
Certificate IssuerDigiCert Inc
Subject*.adtng.com
FingerprintCB:23:30:19:D2:93:98:35:02:A3:6A:C1:70:5D:B7:1F:C6:E8:1F:0E
ValidityFri, 09 Jun 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 83b4b6d7b1f38302709e29c990e0fb1f
b43cc2d1d22d3a13add116431a514e272e91e9ce
c5719fe8a1b231d0b0bb9a6cdef7fd4fced55ad0fec1db7f94d04ba18a523fb1
GET /get/10012974?time=1636661583250 HTTP/1.1
Host: a.adtng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Mon, 04 Dec 2023 05:13:36 GMT
content-type: text/html
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
content-encoding: gzip
set-cookie: LBSERVERID=ded7078; path=/; HttpOnly; Secure; SameSite=None
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
www.xtits.xxx/contents/videos_screenshots/143000/143366/402x225/5.jpg
200 OK 23 kB URL GET HTTP/2 www.xtits.xxx/contents/videos_screenshots/143000/143366/402x225/5.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 402x225, components 3\012- data
Hash 3555b8b44d9a09c7a1fd5accd34051b0
39ba7c72454284b30f6841b4ccacccd95c2a047d
5ef669df462b04ecc4f3f76419d7ff78c3aa83dbf262c5acc0f0a1f5543ac05c
GET /contents/videos_screenshots/143000/143366/402x225/5.jpg HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:36 GMT
content-type: image/jpeg
content-length: 23270
last-modified: Mon, 20 Nov 2023 00:54:01 GMT
etag: "655aae29-5ae6"
expires: Thu, 07 Dec 2023 05:13:36 GMT
cache-control: max-age=259200
accept-ranges: bytes
X-Firefox-Spdy: h2
newtits.name/api/users/173772?v2=1&fill=0&kw=xtits%2Cxtits.com%2Ctits%20porn%2Cbig%20tits%20porn%2Csmall%20tits%2Csaggy%20tits%2Cperky%20tits%2Cnipples%2Cjapanese%20tits%2Camateur%20tits%2Cbusty%2Cboobs&s1=1000002&i=1&url=https%3A%2F%2Fwww.xtits.xxx%2F
200 OK 16 kB URL GET HTTP/2 newtits.name/api/users/173772?v2=1&fill=0&kw=xtits%2Cxtits.com%2Ctits%20porn%2Cbig%20tits%20porn%2Csmall%20tits%2Csaggy%20tits%2Cperky%20tits%2Cnipples%2Cjapanese%20tits%2Camateur%20tits%2Cbusty%2Cboobs&s1=1000002&i=1&url=https%3A%2F%2Fwww.xtits.xxx%2F
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
File type gzip compressed data, from Unix\012- data
Hash 0650b4213a7b199fc412a59584545be1
a5574135d600145b96c32be2766551b86fb17b30
a47e97241d93efbb26a16267b147c18fd0ab7bc33a4296f79384df42673eaf11
GET /api/users/173772?v2=1&fill=0&kw=xtits%2Cxtits.com%2Ctits%20porn%2Cbig%20tits%20porn%2Csmall%20tits%2Csaggy%20tits%2Cperky%20tits%2Cnipples%2Cjapanese%20tits%2Camateur%20tits%2Cbusty%2Cboobs&s1=1000002&i=1&url=https%3A%2F%2Fwww.xtits.xxx%2F HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Cookie: nauid=810FgpAJtknhElrPCGNi
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:36 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://www.xtits.xxx
access-control-expose-headers: X-Asg-Config, X-t
x-robots-tag: noindex, nofollow
x-t: 0
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
www.xtits.xxx/contents/videos_screenshots/143000/143094/402x225/25.jpg
200 OK 20 kB URL GET HTTP/2 www.xtits.xxx/contents/videos_screenshots/143000/143094/402x225/25.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 402x225, components 3\012- data
Hash 952ce322b4f7a653937665474e05f693
dfef0c3e5774376c787f581a3a50e12c52248b32
986a521ff521d43a22cf4d4e1d9240ee9d808a28eab0c1125bc7fa33ff7b5495
GET /contents/videos_screenshots/143000/143094/402x225/25.jpg HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:36 GMT
content-type: image/jpeg
content-length: 20189
last-modified: Tue, 14 Nov 2023 23:28:04 GMT
etag: "65540284-4edd"
expires: Thu, 07 Dec 2023 05:13:36 GMT
cache-control: max-age=259200
accept-ranges: bytes
X-Firefox-Spdy: h2
www.xtits.xxx/contents/videos_screenshots/142000/142416/402x225/18.jpg
200 OK 17 kB URL GET HTTP/2 www.xtits.xxx/contents/videos_screenshots/142000/142416/402x225/18.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 402x225, components 3\012- data
Hash 116204efb2d3d4b8dc73f756d059da81
c53913539d618a9d00664da02f0f53fcbb4a55f5
16172b71cb384a724a419d1bdbdd48aed41e4eca9ed47b3467b795ec2168faa8
GET /contents/videos_screenshots/142000/142416/402x225/18.jpg HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:36 GMT
content-type: image/jpeg
content-length: 16732
last-modified: Thu, 26 Oct 2023 01:44:01 GMT
etag: "6539c461-415c"
expires: Thu, 07 Dec 2023 05:13:36 GMT
cache-control: max-age=259200
accept-ranges: bytes
X-Firefox-Spdy: h2
www.xtits.xxx/contents/videos_screenshots/142000/142861/402x225/13.jpg
200 OK 11 kB URL GET HTTP/2 www.xtits.xxx/contents/videos_screenshots/142000/142861/402x225/13.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 402x225, components 3\012- data
Hash afe6fd11893102b94e36036c927de88e
e83f225ff974fd23d4e6625404f79dabe7048c7c
6f98b965d5138a3f82c00169ddb18351dedf4f4b932ac85b2e534cbded94cbab
GET /contents/videos_screenshots/142000/142861/402x225/13.jpg HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:36 GMT
content-type: image/jpeg
content-length: 10972
last-modified: Fri, 10 Nov 2023 13:38:02 GMT
etag: "654e323a-2adc"
expires: Thu, 07 Dec 2023 05:13:36 GMT
cache-control: max-age=259200
accept-ranges: bytes
X-Firefox-Spdy: h2
www.xtits.xxx/contents/videos_screenshots/131000/131479/402x225/17.jpg
200 OK 16 kB URL GET HTTP/2 www.xtits.xxx/contents/videos_screenshots/131000/131479/402x225/17.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 402x225, components 3\012- data
Hash 7ee4ca4eed4deae348edb7e66ffcbd62
ccfa386ac929f947c8b28ab37259deae78c6366b
709cf1042840fa7431feb80c7805aeffbca7781e0df3fef60a3f00befa4b23bd
GET /contents/videos_screenshots/131000/131479/402x225/17.jpg HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:36 GMT
content-type: image/jpeg
content-length: 16294
last-modified: Wed, 06 Sep 2023 13:18:01 GMT
etag: "64f87c09-3fa6"
expires: Thu, 07 Dec 2023 05:13:36 GMT
cache-control: max-age=259200
accept-ranges: bytes
X-Firefox-Spdy: h2
www.xtits.xxx/contents/videos_screenshots/118000/118348/402x225/10.jpg
200 OK 16 kB URL GET HTTP/2 www.xtits.xxx/contents/videos_screenshots/118000/118348/402x225/10.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 402x225, components 3\012- data
Hash 3552faba94a4c671de1cefa8f0298d04
55fe0580dc7a2ac3c3b0c54ebbd72c446977bb9f
fad61b6ba64af2362d16b6685ef1b7b748e10e95c71402611136394dfb037f5c
GET /contents/videos_screenshots/118000/118348/402x225/10.jpg HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name; kt_tcookie=1; kt_is_visited=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:36 GMT
content-type: image/jpeg
content-length: 15992
last-modified: Fri, 27 Jan 2023 23:21:04 GMT
etag: "63d45c60-3e78"
expires: Thu, 07 Dec 2023 05:13:36 GMT
cache-control: max-age=259200
accept-ranges: bytes
X-Firefox-Spdy: h2
www.xtits.xxx/contents/videos_screenshots/143000/143683/402x225/13.jpg
200 OK 13 kB URL GET HTTP/2 www.xtits.xxx/contents/videos_screenshots/143000/143683/402x225/13.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 402x225, components 3\012- data
Hash 4a05df0d8262e39367f34b4894b23934
5dde1118b26f3ee90470b9d21c458c6ec4f9c428
c94a5c69837b6ca25040cfcf69c6de22850ef8f8f0916496072619bc16369624
GET /contents/videos_screenshots/143000/143683/402x225/13.jpg HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name; kt_tcookie=1; kt_is_visited=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:36 GMT
content-type: image/jpeg
content-length: 12613
last-modified: Mon, 27 Nov 2023 06:49:02 GMT
etag: "65643bde-3145"
expires: Thu, 07 Dec 2023 05:13:36 GMT
cache-control: max-age=259200
accept-ranges: bytes
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-1982413-21&l=dataLayer&cx=c
200 OK 68 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=UA-1982413-21&l=dataLayer&cx=c
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Hash 354dd1a0d0b56ff930e99dad61fe88d5
fe13db606b32d1ae6fd7b79cadfc3301f073d74e
fb102f45a687dd9af213c7817030874419d504706e5eda505e0d482e19190fbc
GET /gtag/js?id=UA-1982413-21&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 05:13:36 GMT
expires: Mon, 04 Dec 2023 05:13:36 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68136
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
hw-cdn2.adtng.com/delivery/intersection_observer/IntersectionObserver.js
200 OK 17 kB URL GET HTTP/2 hw-cdn2.adtng.com/delivery/intersection_observer/IntersectionObserver.js
IP
Requested by https://a.adtng.com/get/10012974?time=1636661583250
Certificate IssuerDigiCert Inc
Subject*.adtng.com
FingerprintE3:A5:72:2C:70:97:86:2D:8A:21:17:4E:DC:02:6A:84:F1:B3:09:40
ValidityFri, 09 Jun 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (16885), with no line terminators
Hash 48c80c7c28b5b00a8b4ff94a22b72fe3
d57303c2ad2fd5cedc5cb20f264a6965a7819cee
6e9be773031b3234fb9c2d6cf3d9740db1208f4351beca325ec34f76fd38f356
GET /delivery/intersection_observer/IntersectionObserver.js HTTP/1.1
Host: hw-cdn2.adtng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.adtng.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 05:13:36 GMT
content-type: application/javascript
content-length: 16885
last-modified: Tue, 05 Apr 2022 20:54:54 GMT
expires: Sat, 02 Mar 2024 13:27:44 GMT
cache-control: max-age=10670783
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
accept-ranges: bytes
x-cdn-diag: ams5-7403-3-16336-h-0-0---;7099-25-29788----0-0-1
X-Firefox-Spdy: h2
hw-cdn2.ang-content.com/delivery/vortex/vortex-simple-1.0.0.js
200 OK 5.0 kB URL GET HTTP/2 hw-cdn2.ang-content.com/delivery/vortex/vortex-simple-1.0.0.js
IP
Requested by https://a.adtng.com/get/10012974?time=1636661583250
Certificate IssuerDigiCert Inc
Subject*.ang-content.com
Fingerprint8F:AF:2B:1C:B4:3C:45:70:A5:CF:04:7A:0A:D8:CB:5C:2B:32:87:8D
ValidityTue, 17 Oct 2023 00:00:00 GMT - Sat, 16 Nov 2024 23:59:59 GMT
File type ASCII text, with very long lines (5027), with no line terminators
Hash 5e5817bcf4c82c7c85d1d88636d221ce
b5c32cc6c931c33c1297884016e13d3b9a5bf261
6f0e50ac39121175ca0427c4e87cdfa2520b526c8497e23cffbca726eb6ca42c
GET /delivery/vortex/vortex-simple-1.0.0.js HTTP/1.1
Host: hw-cdn2.ang-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.adtng.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 05:13:36 GMT
content-type: application/javascript
content-length: 5027
last-modified: Fri, 02 Nov 2018 14:17:11 GMT
expires: Sun, 30 May 2021 14:46:56 GMT
cache-control: max-age=10700326
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
accept-ranges: bytes
x-cdn-diag: ams5-7736-1-43813-h-0-0---;7099-24-29788----0-0-1
X-Firefox-Spdy: h2
hw-cdn2.ang-content.com/a7/creatives/221/1559/817844/1086244/1086244_banner.gif
200 OK 204 kB URL GET HTTP/2 hw-cdn2.ang-content.com/a7/creatives/221/1559/817844/1086244/1086244_banner.gif
IP
Requested by https://a.adtng.com/get/10012974?time=1636661583250
Certificate IssuerDigiCert Inc
Subject*.ang-content.com
Fingerprint8F:AF:2B:1C:B4:3C:45:70:A5:CF:04:7A:0A:D8:CB:5C:2B:32:87:8D
ValidityTue, 17 Oct 2023 00:00:00 GMT - Sat, 16 Nov 2024 23:59:59 GMT
File type GIF image data, version 89a, 1323 x 110\012- data
Size 204 kB (203683 bytes)
Hash cddeb9ec4733b055301f1e9e435916b8
0f392bac3d4b2bc37688d0df117197a7d888a09f
aef9bcc23e73c3e102ea201cfec18d852b756b572874889bf6a692aef8cb32d4
GET /a7/creatives/221/1559/817844/1086244/1086244_banner.gif HTTP/1.1
Host: hw-cdn2.ang-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.adtng.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 05:13:36 GMT
content-type: image/gif
content-length: 203683
last-modified: Thu, 16 Nov 2023 16:04:42 GMT
expires: Sun, 24 Mar 2024 07:23:27 GMT
cache-control: max-age=10748807
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
accept-ranges: bytes
x-cdn-diag: ams5-7029-2-45273-h-0-0---;7099-24-29788----0-0-1
X-Firefox-Spdy: h2
a.adtng.com/track/adviews/eyJleHRfemlkIjoiIiwiZXh0X2MiOiIiLCJleHRfYWlkIjoiIiwicGlkIjoiMTU1OSIsInNpZCI6IjEwMDEyOTc0IiwibmlkcyI6IjYxMDI3IiwiZHluX2RtbiI6IiIsImNyaWQiOiIxMDg2MjQ0Iiwic3YiOiI1ODkiLCJyZWZfZG1uIjoid3d3Lnh0aXRzLnh4eCIsImV4dF9jaWQiOiIiLCJ0c25hbWUiOiJNQiIsImNyYyI6IjQiLCJjbiI6IjEzMjNYMTEwX1paX0ZSRUVfTVYiLCJuaWQiOiI2MTAyNyIsImV4dF9wdWIiOiIiLCJjcnAiOiIyNSIsInRpZCI6IjEiLCJpdCI6IjA0XC9EZWNcLzIwMjM6MDU6MTM6MzYgKzAwMDAiLCJjYyI6IjEiLCJzbmNpZCI6IjExMDAyOCIsImNpZCI6IjM5NDM5IiwiZXh0X3VpZCI6IiIsImNwIjoiMTAwIiwic25jY2lkIjoiMjI4MDc2MCIsImlpZCI6ImRhMWVlYTRjMDBlN2M3MGE2YjE3NDRmYTgyODQzZDQxIiwiZXh0X2lpZCI6IiJ9?unique_view=1
200 OK 3.5 kB URL GET HTTP/2 a.adtng.com/track/adviews/eyJleHRfemlkIjoiIiwiZXh0X2MiOiIiLCJleHRfYWlkIjoiIiwicGlkIjoiMTU1OSIsInNpZCI6IjEwMDEyOTc0IiwibmlkcyI6IjYxMDI3IiwiZHluX2RtbiI6IiIsImNyaWQiOiIxMDg2MjQ0Iiwic3YiOiI1ODkiLCJyZWZfZG1uIjoid3d3Lnh0aXRzLnh4eCIsImV4dF9jaWQiOiIiLCJ0c25hbWUiOiJNQiIsImNyYyI6IjQiLCJjbiI6IjEzMjNYMTEwX1paX0ZSRUVfTVYiLCJuaWQiOiI2MTAyNyIsImV4dF9wdWIiOiIiLCJjcnAiOiIyNSIsInRpZCI6IjEiLCJpdCI6IjA0XC9EZWNcLzIwMjM6MDU6MTM6MzYgKzAwMDAiLCJjYyI6IjEiLCJzbmNpZCI6IjExMDAyOCIsImNpZCI6IjM5NDM5IiwiZXh0X3VpZCI6IiIsImNwIjoiMTAwIiwic25jY2lkIjoiMjI4MDc2MCIsImlpZCI6ImRhMWVlYTRjMDBlN2M3MGE2YjE3NDRmYTgyODQzZDQxIiwiZXh0X2lpZCI6IiJ9?unique_view=1
IP
Requested by https://a.adtng.com/get/10012974?time=1636661583250
Certificate IssuerDigiCert Inc
Subject*.adtng.com
FingerprintCB:23:30:19:D2:93:98:35:02:A3:6A:C1:70:5D:B7:1F:C6:E8:1F:0E
ValidityFri, 09 Jun 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (1611)
Hash fb0c78c29094c2261106b0f615429457
cdefc724cc5155c2636c4d1ad25b625ecb8463e7
2fe81981ec13322f80f6331ef857d6da7c5e08c1ce4d7df8c23f446d6d09d6de
GET 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?unique_view=1 HTTP/1.1
Host: a.adtng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.adtng.com/get/10012974?time=1636661583250
Cookie: LBSERVERID=ded7078
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 04 Dec 2023 05:13:37 GMT
content-type: text/html
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
content-encoding: gzip
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
newtits.name/api/users/15176552747296779095/2029429?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs
200 OK 3.3 kB URL GET HTTP/2 newtits.name/api/users/15176552747296779095/2029429?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (1595)
Hash 2b18c427ab2244b9cc2a1ba4c6f470f0
fa9886f333a34a3e71289ace701ef24f8027a08a
294b934b3989a8eade851b29de85a0f3432a18f8b2dd16e59ddc5c0b303e3974
GET /api/users/15176552747296779095/2029429?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Cookie: nauid=810FgpAJtknhElrPCGNi
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:37 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://www.xtits.xxx
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
s.magsrv.com/splash.php?idzone=4169010
200 OK 2.5 kB URL GET HTTP/1.1 s.magsrv.com/splash.php?idzone=4169010
IP
ASN #60781 LeaseWeb Netherlands B.V.
Certificate IssuerLet's Encrypt
Subjectmagsrv.com
FingerprintC5:BC:C0:62:0C:DC:A9:D2:61:A6:77:A9:6C:31:19:AD:CD:2E:00:67
ValidityThu, 05 Oct 2023 15:26:28 GMT - Wed, 03 Jan 2024 15:26:27 GMT
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (1583)
Hash 02d6e30a242a680340ff4acfa459956b
71859d91ad7cb0d6f67432a3981e932fda8b6aee
9679b741625e1208a03da5eb9bf6f82a5b069e107d7021517b42bebe4726dfef
GET /splash.php?idzone=4169010 HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 05:13:37 GMT
Content-Type: text/xml;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Headers: X-CH-VALUES
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%22656d60014e0229.01391128236136023%22%3B%7D; expires=Wed, 03 Dec 2025 05:13:37 GMT; path=; domain=.magsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C4169010%7C84865580%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Cxtits.xxx%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1701666817%7Ccdb995f723f2fb83a8474915c111786e%7Cok%22%7D; expires=Tue, 05 Dec 2023 05:13:37 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none
Cache-Control: no-store
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: https://www.xtits.xxx
Access-Control-Allow-Credentials: true
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
go.bbrdbr.com/easy?campaignId=56887531e20ffc8ec4b32f114752cd5e087f0e1a66a28e88fe82ad1f38a4c7c1&userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d&xhVersion=1&skipOffset=00:00:05&memberId=875f268e-c759-4ebd-a6d4-28cced6952b2&sourceId=6289&p1=61346&p2=79550&contentType=video/mp4&no_bb=1
302 Found 0 B URL GET HTTP/2 go.bbrdbr.com/easy?campaignId=56887531e20ffc8ec4b32f114752cd5e087f0e1a66a28e88fe82ad1f38a4c7c1&userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d&xhVersion=1&skipOffset=00:00:05&memberId=875f268e-c759-4ebd-a6d4-28cced6952b2&sourceId=6289&p1=61346&p2=79550&contentType=video/mp4&no_bb=1
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint2A:9F:63:77:CB:A5:1C:FD:6E:10:F5:29:D2:FB:51:F4:7C:EC:36:A2
ValiditySun, 26 Feb 2023 00:00:00 GMT - Sun, 25 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /easy?campaignId=56887531e20ffc8ec4b32f114752cd5e087f0e1a66a28e88fe82ad1f38a4c7c1&userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d&xhVersion=1&skipOffset=00:00:05&memberId=875f268e-c759-4ebd-a6d4-28cced6952b2&sourceId=6289&p1=61346&p2=79550&contentType=video/mp4&no_bb=1 HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 04 Dec 2023 05:13:37 GMT
content-length: 0
location: https://go.bbrdbr.com/api/models/vast?action=sbSignupWithModel&campaignId=56887531e20ffc8ec4b32f114752cd5e087f0e1a66a28e88fe82ad1f38a4c7c1&campaignType=smartpop&contentType=video%2Fmp4&creativeId=0fe634b4ed7128d94852002b593185fc904d0c54974e9bbbec389730ba324b3e&duration=00%3A00%3A30&iterationId=745641&masterSmartpopId=2683&memberId=875f268e-c759-4ebd-a6d4-28cced6952b2&mlView=1&no_bb=1&p1=61346&p2=79550&ruleId=29&skipOffset=00%3A00%3A05&smartpopId=5347&sourceId=6289&usePreroll=true&userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d&variationId=31904&xhVersion=1
access-control-allow-origin: https://www.xtits.xxx
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: _var=67247758.31904_ZTJjNzVhZDk=; Path=/; Expires=Wed, 03 Jan 2024 05:13:37 GMT; HttpOnly; SameSite=Strict
__cflb=02DiuDFRFiBZBvMSLtr4BTSnpWHamtv7JqskpejjmtQHr; SameSite=None; Secure; path=/; expires=Tue, 05-Dec-23 05:13:37 GMT; HttpOnly
server: cloudflare
cf-ray: 83018faa4c3d7130-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
go.xlivrdr.com/smartpop/662caa72b7c524d066b181904a6fe35b35c20b36796cca3110a610b44239cb2f?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&sourceId=594678&memberId=uPSv5iODaGiAK5sdrTw7sbX7z3uJ1xXI29-GvvkcpzVZfAWZTRtRJbybkqkmsEh-fBRMQV2qtNsqeI2X7pVAsNkk3ZvR3jhL_s8xuReZMtMuicQ_gUIDRUi&p1=4349532&ax=0&tag=-girls%2Fmobile
302 Found 0 B URL GET HTTP/2 go.xlivrdr.com/smartpop/662caa72b7c524d066b181904a6fe35b35c20b36796cca3110a610b44239cb2f?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&sourceId=594678&memberId=uPSv5iODaGiAK5sdrTw7sbX7z3uJ1xXI29-GvvkcpzVZfAWZTRtRJbybkqkmsEh-fBRMQV2qtNsqeI2X7pVAsNkk3ZvR3jhL_s8xuReZMtMuicQ_gUIDRUi&p1=4349532&ax=0&tag=-girls%2Fmobile
IP
Certificate IssuerCloudflare, Inc.
Subjectxlivrdr.com
FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smartpop/662caa72b7c524d066b181904a6fe35b35c20b36796cca3110a610b44239cb2f?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&sourceId=594678&memberId=uPSv5iODaGiAK5sdrTw7sbX7z3uJ1xXI29-GvvkcpzVZfAWZTRtRJbybkqkmsEh-fBRMQV2qtNsqeI2X7pVAsNkk3ZvR3jhL_s8xuReZMtMuicQ_gUIDRUi&p1=4349532&ax=0&tag=-girls%2Fmobile HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 04 Dec 2023 05:13:37 GMT
content-length: 0
location: https://go.mnaspm.com/api/models/vast?action=sbSignupWithModel&ax=0&campaignId=662caa72b7c524d066b181904a6fe35b35c20b36796cca3110a610b44239cb2f&campaignType=smartpop&creativeId=0fe634b4ed7128d94852002b593185fc904d0c54974e9bbbec389730ba324b3e&duration=00%3A00%3A30&iterationId=745523&masterSmartpopId=2683&memberId=uPSv5iODaGiAK5sdrTw7sbX7z3uJ1xXI29-GvvkcpzVZfAWZTRtRJbybkqkmsEh-fBRMQV2qtNsqeI2X7pVAsNkk3ZvR3jhL_s8xuReZMtMuicQ_gUIDRUi&mlView=1&p1=4349532&ruleId=29&skipOffset=00%3A00%3A05&smartpopId=3588&sourceId=594678&tag=-girls%2Fmobile&usePreroll=true&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=31904
access-control-allow-origin: https://www.xtits.xxx
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: _var=8684233.31904_ZTJjNzVhZDk=; Path=/; Expires=Wed, 03 Jan 2024 05:13:37 GMT; HttpOnly; SameSite=Strict
__cflb=02DiuDFRFiBZBvMSLtsgHAphT8dt9Y3eYuvCBePMe7fNk; SameSite=None; Secure; path=/; expires=Tue, 05-Dec-23 05:13:37 GMT; HttpOnly
server: cloudflare
cf-ray: 83018faa6aa0b51d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
u3y8v8u4.aucdn.net/library/141372/abdb867bedaf9fe15afffe28dcf88eb396107634.mp4
206 Partial Content 3.5 MB URL GET HTTP/2 u3y8v8u4.aucdn.net/library/141372/abdb867bedaf9fe15afffe28dcf88eb396107634.mp4
IP
ASN #60068 Datacamp Limited
Certificate IssuerLet's Encrypt
Subjectafcdn.net
Fingerprint23:5D:B4:21:E2:4A:BC:A2:81:F9:7D:F8:B1:5C:6C:1D:7D:F3:FC:C8
ValidityThu, 05 Oct 2023 14:56:57 GMT - Wed, 03 Jan 2024 14:56:56 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 3.5 MB (3504302 bytes)
Hash 4b0ad1abde1eeeebae95203e0bf628b3
abdb867bedaf9fe15afffe28dcf88eb396107634
7774ead1b93382a859c05690802ec94416c857e0620c87281dfbf26e50dc4927
GET /library/141372/abdb867bedaf9fe15afffe28dcf88eb396107634.mp4 HTTP/1.1
Host: u3y8v8u4.aucdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Mon, 04 Dec 2023 05:13:37 GMT
content-type: video/mp4
content-length: 3504302
last-modified: Thu, 04 May 2023 14:26:51 GMT
etag: "6453c0ab-3578ae"
expires: Thu, 16 May 2024 10:01:04 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: EQwBuUwJDQH3OLgIAQ
x-77-nzt-ray: c0a4cc28b0f8235801606d657a221a2f
x-accel-expires: @1715854153
x-accel-date: 1684318153
x-cache-lb: HIT
x-age-lb: 17348664
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 17348664
content-range: bytes 0-3504301/3504302
X-Firefox-Spdy: h2
go.mnaspm.com/api/models/vast?action=sbSignupWithModel&ax=0&campaignId=662caa72b7c524d066b181904a6fe35b35c20b36796cca3110a610b44239cb2f&campaignType=smartpop&creativeId=0fe634b4ed7128d94852002b593185fc904d0c54974e9bbbec389730ba324b3e&duration=00%3A00%3A30&iterationId=745523&masterSmartpopId=2683&memberId=uPSv5iODaGiAK5sdrTw7sbX7z3uJ1xXI29-GvvkcpzVZfAWZTRtRJbybkqkmsEh-fBRMQV2qtNsqeI2X7pVAsNkk3ZvR3jhL_s8xuReZMtMuicQ_gUIDRUi&mlView=1&p1=4349532&ruleId=29&skipOffset=00%3A00%3A05&smartpopId=3588&sourceId=594678&tag=-girls%2Fmobile&usePreroll=true&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=31904
200 OK 982 B URL GET HTTP/2 go.mnaspm.com/api/models/vast?action=sbSignupWithModel&ax=0&campaignId=662caa72b7c524d066b181904a6fe35b35c20b36796cca3110a610b44239cb2f&campaignType=smartpop&creativeId=0fe634b4ed7128d94852002b593185fc904d0c54974e9bbbec389730ba324b3e&duration=00%3A00%3A30&iterationId=745523&masterSmartpopId=2683&memberId=uPSv5iODaGiAK5sdrTw7sbX7z3uJ1xXI29-GvvkcpzVZfAWZTRtRJbybkqkmsEh-fBRMQV2qtNsqeI2X7pVAsNkk3ZvR3jhL_s8xuReZMtMuicQ_gUIDRUi&mlView=1&p1=4349532&ruleId=29&skipOffset=00%3A00%3A05&smartpopId=3588&sourceId=594678&tag=-girls%2Fmobile&usePreroll=true&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=31904
IP
Certificate IssuerGoogle Trust Services LLC
Subjectmnaspm.com
FingerprintD2:26:54:49:EC:5C:B3:8E:40:54:41:6D:0E:21:1C:E8:A8:48:BD:EE
ValidityFri, 20 Oct 2023 15:37:06 GMT - Thu, 18 Jan 2024 15:37:05 GMT
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (2235), with no line terminators
Hash 8a15378386fefb51d904256bb63316ca
e471a022f50a507261702adc1527d27a6ba3fd4c
2cbb46c91c39ed8f5c4a8bfac4f7addb5a9971a347b018f50643f29bc7ce537d
GET /api/models/vast?action=sbSignupWithModel&ax=0&campaignId=662caa72b7c524d066b181904a6fe35b35c20b36796cca3110a610b44239cb2f&campaignType=smartpop&creativeId=0fe634b4ed7128d94852002b593185fc904d0c54974e9bbbec389730ba324b3e&duration=00%3A00%3A30&iterationId=745523&masterSmartpopId=2683&memberId=uPSv5iODaGiAK5sdrTw7sbX7z3uJ1xXI29-GvvkcpzVZfAWZTRtRJbybkqkmsEh-fBRMQV2qtNsqeI2X7pVAsNkk3ZvR3jhL_s8xuReZMtMuicQ_gUIDRUi&mlView=1&p1=4349532&ruleId=29&skipOffset=00%3A00%3A05&smartpopId=3588&sourceId=594678&tag=-girls%2Fmobile&usePreroll=true&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=31904 HTTP/1.1
Host: go.mnaspm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: https://www.xtits.xxx/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 05:13:37 GMT
content-type: text/xml; charset=utf-8
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=0H28upDCGznfDm9XVE9Kb8v5TrfcnGAzCwb4zWp4sMn; SameSite=None; Secure; path=/; expires=Tue, 05-Dec-23 05:13:37 GMT; HttpOnly
server: cloudflare
cf-ray: 83018faade237128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
s.magsrv.com/vregister.php?a=vview&errorcode=3&idzone=4232586&dg=6253252-NOR-89281690-3-0-1-0-InLine
200 OK 20 B URL GET HTTP/1.1 s.magsrv.com/vregister.php?a=vview&errorcode=3&idzone=4232586&dg=6253252-NOR-89281690-3-0-1-0-InLine
IP
ASN #60781 LeaseWeb Netherlands B.V.
Certificate IssuerLet's Encrypt
Subjectmagsrv.com
FingerprintC5:BC:C0:62:0C:DC:A9:D2:61:A6:77:A9:6C:31:19:AD:CD:2E:00:67
ValidityThu, 05 Oct 2023 15:26:28 GMT - Wed, 03 Jan 2024 15:26:27 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /vregister.php?a=vview&errorcode=3&idzone=4232586&dg=6253252-NOR-89281690-3-0-1-0-InLine HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%22656d60014e0229.01391128236136023%22%3B%7D; c-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C4169010%7C84865580%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Cxtits.xxx%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1701666817%7Ccdb995f723f2fb83a8474915c111786e%7Cok%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 05:13:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin:
Access-Control-Allow-Credentials: true
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s.magsrv.com/vregister.php?a=vview&errorcode=400&idzone=4232586&dg=6253252-NOR-89281690-3-0-1-0-InLine
200 OK 20 B URL GET HTTP/1.1 s.magsrv.com/vregister.php?a=vview&errorcode=400&idzone=4232586&dg=6253252-NOR-89281690-3-0-1-0-InLine
IP
ASN #60781 LeaseWeb Netherlands B.V.
Certificate IssuerLet's Encrypt
Subjectmagsrv.com
FingerprintC5:BC:C0:62:0C:DC:A9:D2:61:A6:77:A9:6C:31:19:AD:CD:2E:00:67
ValidityThu, 05 Oct 2023 15:26:28 GMT - Wed, 03 Jan 2024 15:26:27 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /vregister.php?a=vview&errorcode=400&idzone=4232586&dg=6253252-NOR-89281690-3-0-1-0-InLine HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%22656d60014e0229.01391128236136023%22%3B%7D; c-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C4169010%7C84865580%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Cxtits.xxx%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1701666817%7Ccdb995f723f2fb83a8474915c111786e%7Cok%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 05:13:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin:
Access-Control-Allow-Credentials: true
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
newtits.name/api/click/11569139317491017095?c=60&data[error]=400
200 OK 0 B URL GET HTTP/2 newtits.name/api/click/11569139317491017095?c=60&data[error]=400
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/11569139317491017095?c=60&data[error]=400 HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: nauid=810FgpAJtknhElrPCGNi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:38 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
newtits.name/api/click/13801471786904903095?c=60&data[error]=3
200 OK 0 B URL GET HTTP/2 newtits.name/api/click/13801471786904903095?c=60&data[error]=3
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/13801471786904903095?c=60&data[error]=3 HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: nauid=810FgpAJtknhElrPCGNi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:38 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
newtits.name/api/click/9033865532686533095?c=60&data[error]=200
200 OK 0 B URL GET HTTP/2 newtits.name/api/click/9033865532686533095?c=60&data[error]=200
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/9033865532686533095?c=60&data[error]=200 HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: nauid=810FgpAJtknhElrPCGNi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:38 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
tsyndicate.com/do2/26814cb365534d1aaa45f160297aa14a/vast?
200 OK 3.0 kB URL GET HTTP/2 tsyndicate.com/do2/26814cb365534d1aaa45f160297aa14a/vast?
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (5616)
Hash fa0e4537f664e5adae3e49b1119f7f2b
cc0c4fcad23739d051958845b804891e77b363d9
83b9f5a222b0c08ae54ce2e91df07f7bf78b3cac4c9e1ee3ab576c08a65fa0a0
GET /do2/26814cb365534d1aaa45f160297aa14a/vast? HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:37 GMT
content-type: application/xml; charset=utf-8
access-control-allow-origin: https://www.xtits.xxx
access-control-allow-methods: POST, GET, HEAD
access-control-allow-headers: Accept, X-Requested-With, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy
access-control-allow-credentials: true
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
x-vast: 3.0
x-request-id: 141caeec01575da4
set-cookie: ts_uid=32d0fbe7-30b2-4ae2-9b7f-59a4917a1c45; expires=Tue, 04 Jun 2024 05:13:37 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCx5YZNXDAwIGDRhcWIsYU3BLjoYgyE2PcgKGxxgwZGrv0URAQ; expires=Tue, 05 Dec 2023 05:13:37 GMT; domain=.tsyndicate.com; path=/; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
newtits.name/api/click/13801471786904903095?c=60&data[error]=400
200 OK 0 B URL GET HTTP/2 newtits.name/api/click/13801471786904903095?c=60&data[error]=400
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/13801471786904903095?c=60&data[error]=400 HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: nauid=810FgpAJtknhElrPCGNi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:38 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
u3y8v8u4.aucdn.net/library/795798/93b799c2f6ba12c06d00d9cc84b2588e565905de.mp4
206 Partial Content 5.7 MB URL GET HTTP/2 u3y8v8u4.aucdn.net/library/795798/93b799c2f6ba12c06d00d9cc84b2588e565905de.mp4
IP
ASN #60068 Datacamp Limited
Certificate IssuerLet's Encrypt
Subjectafcdn.net
Fingerprint23:5D:B4:21:E2:4A:BC:A2:81:F9:7D:F8:B1:5C:6C:1D:7D:F3:FC:C8
ValidityThu, 05 Oct 2023 14:56:57 GMT - Wed, 03 Jan 2024 14:56:56 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 5.7 MB (5721822 bytes)
Hash bbee4a767f161d3870cb68d6c4eafab8
93b799c2f6ba12c06d00d9cc84b2588e565905de
8e3da179c9636f394fd42295463305213da9071da25e83c947bb4567bf3805b7
GET /library/795798/93b799c2f6ba12c06d00d9cc84b2588e565905de.mp4 HTTP/1.1
Host: u3y8v8u4.aucdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Mon, 04 Dec 2023 05:13:37 GMT
content-type: video/mp4
content-length: 5721822
last-modified: Mon, 09 Oct 2023 09:45:40 GMT
etag: "6523cbc4-574ede"
accept-ch:
expires: Tue, 26 Nov 2024 14:51:40 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-77-nzt: EwwBuUwJDQH3xbIIAAwBuUwKAQH3LwAAAAwB1GY4nAH3EQAAAA
x-77-nzt-ray: c0a4cc28b0f8235801606d6514f5e62e
x-accel-expires: @1732632700
x-accel-date: 1701096764
x-77-cache: HIT
x-77-age: 570117
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 47, 570053
x-77-pop: stockholmSE
content-range: bytes 0-5721821/5721822
X-Firefox-Spdy: h2
twinrdack.com/preroll.engine?id=b403c10b-5893-4391-903d-886c4148378c&zid=56423&cvs={ClientVideoSupport}&time={TimeOffset}&stdtime={StdTimeOffset}&abr={IsAdblockRequest}&pageurl={PageUrl}&tid={TrackingId}&res={Resolution}&bw={BrowserWidth}&bh={BrowserHeight}&kw={Keywords}&referrerUrl={ReferrerUrl}&pw={PlayerWidth}&ph={PlayerHeight}
200 OK 1.5 kB URL GET HTTP/2 twinrdack.com/preroll.engine?id=b403c10b-5893-4391-903d-886c4148378c&zid=56423&cvs={ClientVideoSupport}&time={TimeOffset}&stdtime={StdTimeOffset}&abr={IsAdblockRequest}&pageurl={PageUrl}&tid={TrackingId}&res={Resolution}&bw={BrowserWidth}&bh={BrowserHeight}&kw={Keywords}&referrerUrl={ReferrerUrl}&pw={PlayerWidth}&ph={PlayerHeight}
IP
Certificate IssuerGoogle Trust Services LLC
Subjecttwinrdack.com
Fingerprint1E:F8:EF:EE:AF:E9:AB:8B:B6:3B:9E:16:4B:8A:AF:17:9F:0D:01:75
ValidityMon, 16 Oct 2023 04:04:30 GMT - Sun, 14 Jan 2024 04:04:29 GMT
File type ASCII text, with very long lines (7599), with no line terminators
Hash 9e8085387439bb255908bf7f6eceef7c
dc784f0551c7b4d3d52605d8dde778e51091ac25
352efbde5cb4a192316a9af83ee463db7d730dc3227d2671539571bb23f2ed76
GET /preroll.engine?id=b403c10b-5893-4391-903d-886c4148378c&zid=56423&cvs={ClientVideoSupport}&time={TimeOffset}&stdtime={StdTimeOffset}&abr={IsAdblockRequest}&pageurl={PageUrl}&tid={TrackingId}&res={Resolution}&bw={BrowserWidth}&bh={BrowserHeight}&kw={Keywords}&referrerUrl={ReferrerUrl}&pw={PlayerWidth}&ph={PlayerHeight} HTTP/1.1
Host: twinrdack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 05:13:37 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
cache-control: private, no-transform
access-control-allow-credentials: true
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: https://www.xtits.xxx
set-cookie: IKSR={}; path=/; SameSite=None; secure
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rGr%2BEp5Plce2dZREsw1F95%2Fw3LUtXGYDiKHQx78WaC%2BLc4UmA%2BKapyJtwQbMA6clEpaKr40uukArj%2BYqxBADyMiTXC341xmXSt3s35lsnmBDwvpDRjJ4xuVdwomgSYk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83018fa7ab0d56bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.zblkqa.com/video/6c4b1c61ad18a3e4a012158e2a85c0e9.mp4?cb=1701666638
206 Partial Content 2.2 MB URL GET HTTP/2 cdn.zblkqa.com/video/6c4b1c61ad18a3e4a012158e2a85c0e9.mp4?cb=1701666638
IP
Certificate IssuerSectigo Limited
Subject*.zblkqa.com
Fingerprint78:E7:B2:86:25:92:88:24:6D:8D:51:1E:AC:78:AC:9C:F3:91:E1:EA
ValidityTue, 17 Oct 2023 00:00:00 GMT - Sat, 16 Nov 2024 23:59:59 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 2.2 MB (2217159 bytes)
Hash aea9b60212701818d5e29eaf8e415572
7e0e80e08b232e2a78ba0cca9101c8cc41a16900
ea7688bd781e58529d6f6608073be7c4770a04c1a5f36706d2e7ab1168254eea
GET /video/6c4b1c61ad18a3e4a012158e2a85c0e9.mp4?cb=1701666638 HTTP/1.1
Host: cdn.zblkqa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Mon, 04 Dec 2023 05:13:38 GMT
content-type: binary/octet-stream
content-length: 2217159
etag: "aea9b60212701818d5e29eaf8e415572"
expires: Mon, 04 Dec 2023 06:10:37 GMT
last-modified: Mon, 04 Dec 2023 05:10:37 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: a7480f9f2c3c9aab5bfc75b719d9602dc91f8f43779cf595112d3bd161e444f2
x-amz-request-id: 179D88E246FB85EF
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=28800
cf-cache-status: HIT
server: cloudflare
cf-ray: 83018df28bbc0a4f-AMS
alt-svc: h3=":443"; ma=86400
age: 71
content-range: bytes 0-2217158/2217159
X-Firefox-Spdy: h2
cdn.zblkqa.com/video/6c4b1c61ad18a3e4a012158e2a85c0e9.mp4?cb=1701666638
206 Partial Content 54 kB URL GET HTTP/2 cdn.zblkqa.com/video/6c4b1c61ad18a3e4a012158e2a85c0e9.mp4?cb=1701666638
IP
Certificate IssuerSectigo Limited
Subject*.zblkqa.com
Fingerprint78:E7:B2:86:25:92:88:24:6D:8D:51:1E:AC:78:AC:9C:F3:91:E1:EA
ValidityTue, 17 Oct 2023 00:00:00 GMT - Sat, 16 Nov 2024 23:59:59 GMT
Hash 9f038b8ade0735d9cb16de043cd545c0
8ee57df206cce8bd3b8fe09c51c41c0c5d7a9a54
50dfc62bc9949e862eb951417918822a268181059fe4e96442e8cfff55813627
GET /video/6c4b1c61ad18a3e4a012158e2a85c0e9.mp4?cb=1701666638 HTTP/1.1
Host: cdn.zblkqa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=2162688-
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
date: Mon, 04 Dec 2023 05:13:38 GMT
content-type: binary/octet-stream
content-length: 54471
etag: "aea9b60212701818d5e29eaf8e415572"
expires: Mon, 04 Dec 2023 06:10:37 GMT
last-modified: Mon, 04 Dec 2023 05:10:37 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: a7480f9f2c3c9aab5bfc75b719d9602dc91f8f43779cf595112d3bd161e444f2
x-amz-request-id: 179D88E246FB85EF
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=28800
cf-cache-status: HIT
server: cloudflare
cf-ray: 83018df28bbc0a4f-AMS
alt-svc: h3=":443"; ma=86400
age: 71
content-range: bytes 2162688-2217158/2217159
X-Firefox-Spdy: h2
newtits.name/api/click/12247630078435693095?c=60&data[error]=3
200 OK 0 B URL GET HTTP/2 newtits.name/api/click/12247630078435693095?c=60&data[error]=3
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/12247630078435693095?c=60&data[error]=3 HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: nauid=810FgpAJtknhElrPCGNi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:38 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
cdn.zblkqa.com/video/6c4b1c61ad18a3e4a012158e2a85c0e9.mp4?cb=1701666638
206 Partial Content 54 kB URL GET HTTP/2 cdn.zblkqa.com/video/6c4b1c61ad18a3e4a012158e2a85c0e9.mp4?cb=1701666638
IP
Certificate IssuerSectigo Limited
Subject*.zblkqa.com
Fingerprint78:E7:B2:86:25:92:88:24:6D:8D:51:1E:AC:78:AC:9C:F3:91:E1:EA
ValidityTue, 17 Oct 2023 00:00:00 GMT - Sat, 16 Nov 2024 23:59:59 GMT
Hash 9f038b8ade0735d9cb16de043cd545c0
8ee57df206cce8bd3b8fe09c51c41c0c5d7a9a54
50dfc62bc9949e862eb951417918822a268181059fe4e96442e8cfff55813627
GET /video/6c4b1c61ad18a3e4a012158e2a85c0e9.mp4?cb=1701666638 HTTP/1.1
Host: cdn.zblkqa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=2162688-
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
date: Mon, 04 Dec 2023 05:13:38 GMT
content-type: binary/octet-stream
content-length: 54471
etag: "aea9b60212701818d5e29eaf8e415572"
expires: Mon, 04 Dec 2023 06:10:37 GMT
last-modified: Mon, 04 Dec 2023 05:10:37 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: a7480f9f2c3c9aab5bfc75b719d9602dc91f8f43779cf595112d3bd161e444f2
x-amz-request-id: 179D88E246FB85EF
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=28800
cf-cache-status: HIT
server: cloudflare
cf-ray: 83018df28bbc0a4f-AMS
alt-svc: h3=":443"; ma=86400
age: 71
content-range: bytes 2162688-2217158/2217159
X-Firefox-Spdy: h2
newtits.name/api/click/12247630078435693095?c=60&data[error]=400
200 OK 0 B URL GET HTTP/2 newtits.name/api/click/12247630078435693095?c=60&data[error]=400
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/12247630078435693095?c=60&data[error]=400 HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: nauid=810FgpAJtknhElrPCGNi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:38 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
newtits.name/api/click/11258510064396310095?c=60&data[error]=3
200 OK 0 B URL GET HTTP/2 newtits.name/api/click/11258510064396310095?c=60&data[error]=3
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/11258510064396310095?c=60&data[error]=3 HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: nauid=810FgpAJtknhElrPCGNi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:39 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
newtits.name/api/click/11258510064396310095?c=60&data[error]=400
200 OK 0 B URL GET HTTP/2 newtits.name/api/click/11258510064396310095?c=60&data[error]=400
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/11258510064396310095?c=60&data[error]=400 HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: nauid=810FgpAJtknhElrPCGNi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:39 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
tsyndicate.com/do2/df145283cbf04e569ff16698d148acb4/vast?
200 OK 289 kB URL GET HTTP/2 tsyndicate.com/do2/df145283cbf04e569ff16698d148acb4/vast?
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type gzip compressed data, from Unix\012- data
Size 289 kB (288952 bytes)
Hash 0e6e2ab4ac29d97ca338020d8f1923cc
ec731b57da4e502eda6f009095fe419a175336da
06032fd497b5ae0b2ab9e24459e377752ae6f518699a8acf38f524213bc31b5d
GET /do2/df145283cbf04e569ff16698d148acb4/vast? HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:37 GMT
content-type: application/xml; charset=utf-8
access-control-allow-origin: https://www.xtits.xxx
access-control-allow-methods: POST, GET, HEAD
access-control-allow-headers: Accept, X-Requested-With, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy
access-control-allow-credentials: true
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
x-vast: 3.0
x-request-id: d79ebf1ec77dd4c0
set-cookie: ts_uid=ac415fa8-dafc-4b5c-9246-dc013c4902c4; expires=Tue, 04 Jun 2024 05:13:37 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCx5YZNWzUuAFDRhcWIsYU3BLjoYgyE2Mw1FhjhgyNXfoo; expires=Tue, 05 Dec 2023 05:13:37 GMT; domain=.tsyndicate.com; path=/; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/error?errorcode=400&p=APeICDOGjggdMFgMhAPnYI4cMxKKGNOmoY4aOWjYuIFDoRg3bg7OqIEDBg4cNBTSaXMwxg0YMWzIxOFSZRsZLV_GnOmSRg0ZCuGwGXNQ4pgzRfsoCAg%3D&s=f93bb27f26fc57672f967188ef2d28ef8a2c2990e48598d149fdbf28db1870f71701666817
200 OK 0 B URL GET HTTP/2 pxl.tsyndicate.com/api/v1/error?errorcode=400&p=APeICDOGjggdMFgMhAPnYI4cMxKKGNOmoY4aOWjYuIFDoRg3bg7OqIEDBg4cNBTSaXMwxg0YMWzIxOFSZRsZLV_GnOmSRg0ZCuGwGXNQ4pgzRfsoCAg%3D&s=f93bb27f26fc57672f967188ef2d28ef8a2c2990e48598d149fdbf28db1870f71701666817
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/error?errorcode=400&p=APeICDOGjggdMFgMhAPnYI4cMxKKGNOmoY4aOWjYuIFDoRg3bg7OqIEDBg4cNBTSaXMwxg0YMWzIxOFSZRsZLV_GnOmSRg0ZCuGwGXNQ4pgzRfsoCAg%3D&s=f93bb27f26fc57672f967188ef2d28ef8a2c2990e48598d149fdbf28db1870f71701666817 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: ts_uid=ac415fa8-dafc-4b5c-9246-dc013c4902c4; bfq=APeIECNCx5YZNWzUuAFDRhcWIsYU3BLjoYgyE2Mw1FhjhgyNXfoo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:39 GMT
content-length: 0
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
newtits.name/api/users/6815781074785881095/187378?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs
200 OK 2.0 kB URL GET HTTP/2 newtits.name/api/users/6815781074785881095/187378?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
File type XML document, ASCII text, with very long lines (2068), with no line terminators
Hash e82ddbb4149720c2556791385ebe7280
42429fc14f9d7a1e893a43c0023a63f8ebcd7aa5
01f8555cffea2f3b8c08d32de4a64d24b8f49874c8418bb5cd0be1e5ab3233a7
GET /api/users/6815781074785881095/187378?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Cookie: nauid=810FgpAJtknhElrPCGNi
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:37 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://www.xtits.xxx
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
vast.livejasmin.com/?psid=ed_exo0vb0no&subaffid=679288&ms_notrack=1&pstour=t1&psprogram=REVS&utm_source=exo&site=jsm&utm_medium=network&categoryName=girl
200 OK 3.2 kB URL GET HTTP/2 vast.livejasmin.com/?psid=ed_exo0vb0no&subaffid=679288&ms_notrack=1&pstour=t1&psprogram=REVS&utm_source=exo&site=jsm&utm_medium=network&categoryName=girl
IP
ASN #34655 DuoDecad IT Services Luxembourg S.a r.l.
Certificate IssuerLet's Encrypt
Subjectlubet.vast.livejasmin.com
FingerprintE5:4D:69:59:60:D2:67:4A:5E:8D:F1:D6:98:35:85:B6:EF:47:B3:71
ValidityWed, 18 Oct 2023 17:01:04 GMT - Tue, 16 Jan 2024 17:01:03 GMT
File type ASCII text, with very long lines (3255), with no line terminators
Hash 563e8a16847c387a0f7e1b9ebe9260b4
9ff43379cc0f6e3a46d9c54e95e65f461b587ce5
94a895cac58ff73d4dd4ad5927106e9b559c76a7fbd78db6742891edf182ce18
GET /?psid=ed_exo0vb0no&subaffid=679288&ms_notrack=1&pstour=t1&psprogram=REVS&utm_source=exo&site=jsm&utm_medium=network&categoryName=girl HTTP/1.1
Host: vast.livejasmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 05:13:37 GMT
content-type: text/xml; charset=utf-8
x-target-pstool: 401_16
x-ud-id: zcTH2/DB5
access-control-allow-origin: https://www.xtits.xxx
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
access-control-allow-methods: OPTIONS, GET
server: unknown
set-cookie: psui=a59f007fbf3384ccc33cc586d5d348f0; Path=/; Expires=Wed, 03-Jan-24 05:13:37 GMT; SameSite=None; Secure
X-Firefox-Spdy: h2
newtits.name/api/users/2858289378402874095/928401?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs
200 OK 1.6 kB URL GET HTTP/2 newtits.name/api/users/2858289378402874095/928401?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
File type XML document, ASCII text, with very long lines (1598), with no line terminators
Hash 8aec8bf7d96bde8a25644c6dbd645f7c
230674d769af09e1d057d9d2a788e5db9c097adb
42a45b7cf92d8dbe0c66d28586467b6295927fd76bd21aafea980e3364ffab02
GET /api/users/2858289378402874095/928401?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Cookie: nauid=810FgpAJtknhElrPCGNi
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:37 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://www.xtits.xxx
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
vast.livejasmin.com/?psid=ed_dpronvbdtno&utm_source=tr&ms_notrack=1&pstour=t1&psprogram=REVS&site=jsm&utm_medium=network&categoryName=girl&subAffId=1355&sub_source=xozilla.com
200 OK 3.4 kB URL GET HTTP/2 vast.livejasmin.com/?psid=ed_dpronvbdtno&utm_source=tr&ms_notrack=1&pstour=t1&psprogram=REVS&site=jsm&utm_medium=network&categoryName=girl&subAffId=1355&sub_source=xozilla.com
IP
ASN #34655 DuoDecad IT Services Luxembourg S.a r.l.
Certificate IssuerLet's Encrypt
Subjectlubet.vast.livejasmin.com
FingerprintE5:4D:69:59:60:D2:67:4A:5E:8D:F1:D6:98:35:85:B6:EF:47:B3:71
ValidityWed, 18 Oct 2023 17:01:04 GMT - Tue, 16 Jan 2024 17:01:03 GMT
File type ASCII text, with very long lines (3433), with no line terminators
Hash 991fb91e7f3035f25322e078809a8bad
d316e5988550fb772b4250950686f00cdbbf851a
abb03e514312e208cf3cb77da714a958569339fe61086441e699dd6b4d95b3a5
GET /?psid=ed_dpronvbdtno&utm_source=tr&ms_notrack=1&pstour=t1&psprogram=REVS&site=jsm&utm_medium=network&categoryName=girl&subAffId=1355&sub_source=xozilla.com HTTP/1.1
Host: vast.livejasmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 05:13:37 GMT
content-type: text/xml; charset=utf-8
x-target-pstool: 401_122
x-ud-id: pr5lb/IyV
access-control-allow-origin: https://www.xtits.xxx
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
access-control-allow-methods: OPTIONS, GET
server: unknown
set-cookie: psui=a59f007fbf3384ccc33cc586d5d348f0; Path=/; Expires=Wed, 03-Jan-24 05:13:37 GMT; SameSite=None; Secure
X-Firefox-Spdy: h2
newtits.name/api/users/15176552747296779095/1839858?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs
200 OK 1.9 kB URL GET HTTP/2 newtits.name/api/users/15176552747296779095/1839858?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
File type XML document, ASCII text, with very long lines (1909), with no line terminators
Hash da0f4710c9c266a8f7da5a7632f0de25
653f5fcbc1031d928f40547b82a468501cc5ed01
c925ba3f993274ceefedf29ede12c9d9fdb69bfe80fde9ed23c30da99c56fcaf
GET /api/users/15176552747296779095/1839858?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Cookie: nauid=810FgpAJtknhElrPCGNi
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:37 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://www.xtits.xxx
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
twinrdack.com/preroll.engine?id=fe5eb684-79bd-48d8-95cf-591b420fa46b&zid=7733&cvs={ClientVideoSupport}&time={TimeOffset}&stdtime={StdTimeOffset}&abr={IsAdblockRequest}&pageurl=https%3A%2F%2Fwww.xtits.xxx%2F&tid={TrackingId}&res={Resolution}&bw={BrowserWidth}&bh={BrowserHeight}&kw=xtits%2Cxtits.com%2Ctits+porn%2Cbig+tits+porn%2Csmall+tits%2Csaggy+tits%2Cperky+tits%2Cnipples%2Cjapanese+tits%2Camateur+tits%2Cbusty%2Cboobs&referrerUrl=https%3A%2F%2Fwww.xtits.xxx%2F&pw={PlayerWidth}&ph={PlayerHeight}
200 OK 6.2 kB URL GET HTTP/2 twinrdack.com/preroll.engine?id=fe5eb684-79bd-48d8-95cf-591b420fa46b&zid=7733&cvs={ClientVideoSupport}&time={TimeOffset}&stdtime={StdTimeOffset}&abr={IsAdblockRequest}&pageurl=https%3A%2F%2Fwww.xtits.xxx%2F&tid={TrackingId}&res={Resolution}&bw={BrowserWidth}&bh={BrowserHeight}&kw=xtits%2Cxtits.com%2Ctits+porn%2Cbig+tits+porn%2Csmall+tits%2Csaggy+tits%2Cperky+tits%2Cnipples%2Cjapanese+tits%2Camateur+tits%2Cbusty%2Cboobs&referrerUrl=https%3A%2F%2Fwww.xtits.xxx%2F&pw={PlayerWidth}&ph={PlayerHeight}
IP
Certificate IssuerGoogle Trust Services LLC
Subjecttwinrdack.com
Fingerprint1E:F8:EF:EE:AF:E9:AB:8B:B6:3B:9E:16:4B:8A:AF:17:9F:0D:01:75
ValidityMon, 16 Oct 2023 04:04:30 GMT - Sun, 14 Jan 2024 04:04:29 GMT
File type ASCII text, with very long lines (6424), with no line terminators
Hash 13b118307dd07a21f389ea0f13de03f1
857ebc2431943f59673486c3883fdd1ea5fe5608
cd3134d06590405d99ec080cfa8f0bf1406656872b5ec2373aa5758a1e5793fa
GET /preroll.engine?id=fe5eb684-79bd-48d8-95cf-591b420fa46b&zid=7733&cvs={ClientVideoSupport}&time={TimeOffset}&stdtime={StdTimeOffset}&abr={IsAdblockRequest}&pageurl=https%3A%2F%2Fwww.xtits.xxx%2F&tid={TrackingId}&res={Resolution}&bw={BrowserWidth}&bh={BrowserHeight}&kw=xtits%2Cxtits.com%2Ctits+porn%2Cbig+tits+porn%2Csmall+tits%2Csaggy+tits%2Cperky+tits%2Cnipples%2Cjapanese+tits%2Camateur+tits%2Cbusty%2Cboobs&referrerUrl=https%3A%2F%2Fwww.xtits.xxx%2F&pw={PlayerWidth}&ph={PlayerHeight} HTTP/1.1
Host: twinrdack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 05:13:37 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
cache-control: private, no-transform
access-control-allow-credentials: true
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: https://www.xtits.xxx
set-cookie: IKSR={}; path=/; SameSite=None; secure
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pn0Co7qLrbdrLM5r15ItM7b2hzFqrSrRcwtNlw8TJDpsaQPR7QvGTphUDf9srfqBWm0mUSWOROg8UIpiMHRM0B1qjudwvRHxRFLBiCW7SBRMyCX4gJH9kVe9JvU3x28%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83018fa7cb1356bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
newtits.name/api/users/303849?host=www.xtits.xxx&ev=211&wh=1024&ww=1280&uuid=&url=https%3A%2F%2Fwww.xtits.xxx%2F&i=1&kw=xtits%2Cxtits.com%2Ctits%20porn%2Cbig%20tits%20porn%2Csmall%20tits%2Csaggy%20tits%2Cperky%20tits%2Cnipples%2Cjapanese%20tits%2Camateur%20tits%2Cbusty%2Cboobs&s1=1000002
200 OK 617 B URL GET HTTP/2 newtits.name/api/users/303849?host=www.xtits.xxx&ev=211&wh=1024&ww=1280&uuid=&url=https%3A%2F%2Fwww.xtits.xxx%2F&i=1&kw=xtits%2Cxtits.com%2Ctits%20porn%2Cbig%20tits%20porn%2Csmall%20tits%2Csaggy%20tits%2Cperky%20tits%2Cnipples%2Cjapanese%20tits%2Camateur%20tits%2Cbusty%2Cboobs&s1=1000002
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
File type ASCII text, with very long lines (691), with no line terminators
Hash d37a6b2f2e67cd1a89af9f5550e275e0
10d4a12cdadf7a9527072af0d02d8d5a30c6e13f
10fdf22937e20f5aacb1b42739f63c5465a380c84499cb40ea9c5db987fce059
GET /api/users/303849?host=www.xtits.xxx&ev=211&wh=1024&ww=1280&uuid=&url=https%3A%2F%2Fwww.xtits.xxx%2F&i=1&kw=xtits%2Cxtits.com%2Ctits%20porn%2Cbig%20tits%20porn%2Csmall%20tits%2Csaggy%20tits%2Cperky%20tits%2Cnipples%2Cjapanese%20tits%2Camateur%20tits%2Cbusty%2Cboobs&s1=1000002 HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: nauid=810FgpAJtknhElrPCGNi
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:37 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
s.magsrv.com/vregister.php?a=vview&errorcode=400&idzone=4996940&dg=5786572-NOR-82332902-3-0-1-0-InLine
200 OK 0 B URL GET HTTP/1.1 s.magsrv.com/vregister.php?a=vview&errorcode=400&idzone=4996940&dg=5786572-NOR-82332902-3-0-1-0-InLine
IP
ASN #60781 LeaseWeb Netherlands B.V.
Certificate IssuerLet's Encrypt
Subjectmagsrv.com
FingerprintC5:BC:C0:62:0C:DC:A9:D2:61:A6:77:A9:6C:31:19:AD:CD:2E:00:67
ValidityThu, 05 Oct 2023 15:26:28 GMT - Wed, 03 Jan 2024 15:26:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /vregister.php?a=vview&errorcode=400&idzone=4996940&dg=5786572-NOR-82332902-3-0-1-0-InLine HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%22656d60014e0229.01391128236136023%22%3B%7D; c-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C4169010%7C84865580%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Cxtits.xxx%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1701666817%7Ccdb995f723f2fb83a8474915c111786e%7Cok%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 05:13:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin:
Access-Control-Allow-Credentials: true
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
newtits.name/api/users/2858289378402874095/928400?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs
200 OK 2.0 kB URL GET HTTP/2 newtits.name/api/users/2858289378402874095/928400?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
File type XML document, ASCII text, with very long lines (2039), with no line terminators
Hash 98977aa971513daefb6ae95907978c6b
ed33dae7d72aa63580309604dfff97c8f37ae1da
72f0f3deaa8a21d41e69e1e3e3cf0f102c461057a946eceb756724888c4a93f2
GET /api/users/2858289378402874095/928400?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Cookie: nauid=810FgpAJtknhElrPCGNi
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:37 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://www.xtits.xxx
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
newtits.name/api/users/15176552747296779095/1840960?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs
200 OK 1.7 kB URL GET HTTP/2 newtits.name/api/users/15176552747296779095/1840960?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
File type XML document, ASCII text, with very long lines (1767), with no line terminators
Hash 007d9fb83083c43f64db51be9c7a6d8f
b2d91ba7313b1fe8901aef926d2d1439c972c3d0
a8d371562cbf6e7df48d988fa30cbd3e7a9f6599603aa7dc0ae20923d73c6861
GET /api/users/15176552747296779095/1840960?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Cookie: nauid=810FgpAJtknhElrPCGNi
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:37 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://www.xtits.xxx
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
s.magsrv.com/splash.php?idzone=4996940&sub=1000002&tags=xtits%2Cxtits.com%2Ctits+porn%2Cbig+tits+porn%2Csmall+tits%2Csaggy+tits%2Cperky+tits%2Cnipples%2Cjapanese+tits%2Camateur+tits%2Cbusty%2Cboobs
200 OK 6.0 kB URL GET HTTP/1.1 s.magsrv.com/splash.php?idzone=4996940&sub=1000002&tags=xtits%2Cxtits.com%2Ctits+porn%2Cbig+tits+porn%2Csmall+tits%2Csaggy+tits%2Cperky+tits%2Cnipples%2Cjapanese+tits%2Camateur+tits%2Cbusty%2Cboobs
IP
ASN #60781 LeaseWeb Netherlands B.V.
Certificate IssuerLet's Encrypt
Subjectmagsrv.com
FingerprintC5:BC:C0:62:0C:DC:A9:D2:61:A6:77:A9:6C:31:19:AD:CD:2E:00:67
ValidityThu, 05 Oct 2023 15:26:28 GMT - Wed, 03 Jan 2024 15:26:27 GMT
File type XML document, ASCII text, with very long lines (6107), with no line terminators
Hash cca275bbc7843e246a3cd82bbe856cf4
f9e2d78346b3966aeff6599413eada419836d615
92df8ba86de1c94fd56f6a368bf0123011c0e7a1f930653fe06bd2e431bcd73a
GET /splash.php?idzone=4996940&sub=1000002&tags=xtits%2Cxtits.com%2Ctits+porn%2Cbig+tits+porn%2Csmall+tits%2Csaggy+tits%2Cperky+tits%2Cnipples%2Cjapanese+tits%2Camateur+tits%2Cbusty%2Cboobs HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 05:13:37 GMT
Content-Type: text/xml;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Headers: X-CH-VALUES
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%22656d60014a8819.16141277800115426%22%3B%7D; expires=Wed, 03 Dec 2025 05:13:37 GMT; path=; domain=.magsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C4996940%7C82332902%7C0%7C%7C510%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C1000002%7Cxtits.xxx%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1701666817%7Cb12f05eb700e31c04b5ed41b8913e6fc%7Cok%22%7D; expires=Tue, 05 Dec 2023 05:13:37 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none
Cache-Control: no-store
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: https://www.xtits.xxx
Access-Control-Allow-Credentials: true
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s.magsrv.com/vregister.php?a=vview&errorcode=3&idzone=4996940&dg=5786572-NOR-82332902-3-0-1-0-InLine
200 OK 0 B URL GET HTTP/1.1 s.magsrv.com/vregister.php?a=vview&errorcode=3&idzone=4996940&dg=5786572-NOR-82332902-3-0-1-0-InLine
IP
ASN #60781 LeaseWeb Netherlands B.V.
Certificate IssuerLet's Encrypt
Subjectmagsrv.com
FingerprintC5:BC:C0:62:0C:DC:A9:D2:61:A6:77:A9:6C:31:19:AD:CD:2E:00:67
ValidityThu, 05 Oct 2023 15:26:28 GMT - Wed, 03 Jan 2024 15:26:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /vregister.php?a=vview&errorcode=3&idzone=4996940&dg=5786572-NOR-82332902-3-0-1-0-InLine HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%22656d60014e0229.01391128236136023%22%3B%7D; c-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C4169010%7C84865580%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Cxtits.xxx%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1701666817%7Ccdb995f723f2fb83a8474915c111786e%7Cok%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 05:13:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin:
Access-Control-Allow-Credentials: true
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
200 OK 428 kB URL User Request GET HTTP/2 IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
Size 428 kB (428060 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: text/html; charset=utf-8
x-powered-by: PHP/7.2.34
x-frame-options: SAMEORIGIN
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; path=/; samesite=None; Secure; domain=.xtits.xxx
zilla_subid=zilla.2; path=/
utm_source=zilla.2; path=/
kt_rt_ad_domain=newtits.name; expires=Thu, 28-Nov-2024 05:13:35 GMT; Max-Age=31104000; path=/; samesite=None; Secure; domain=.xtits.xxx
X-Firefox-Spdy: h2
newtits.name/api/users/6815781074785881095/2011703?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs
200 OK 1.7 kB URL GET HTTP/2 newtits.name/api/users/6815781074785881095/2011703?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
File type XML document, ASCII text, with very long lines (1774), with no line terminators
Hash ce9c5cb009b3bcd5f99361579770019e
0f9a8102c991268eba48bad916545998af9ad287
3d6ac690a4e34ee3c442b9c23401d5589984664239ead33c4bf4d58a572b17c4
GET /api/users/6815781074785881095/2011703?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Cookie: nauid=810FgpAJtknhElrPCGNi
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:37 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://www.xtits.xxx
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
www.xtits.xxx/contents/videos_screenshots/140000/140980/402x225/2.jpg
200 OK 16 kB URL GET HTTP/2 www.xtits.xxx/contents/videos_screenshots/140000/140980/402x225/2.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 402x225, components 3\012- data
Hash 7e1ecfa21a792decd1181402ab07d890
340e3fb5817e6c4d448ebd37732ec76c33fb9209
bf416bfee48e70b6e7ac2b024f9bd7c141ddfef0bb8e1be865c8b8cbea9a1ddb
GET /contents/videos_screenshots/140000/140980/402x225/2.jpg HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:36 GMT
content-type: image/jpeg
content-length: 15774
last-modified: Fri, 06 Oct 2023 23:12:01 GMT
etag: "65209441-3d9e"
expires: Thu, 07 Dec 2023 05:13:36 GMT
cache-control: max-age=259200
accept-ranges: bytes
X-Firefox-Spdy: h2
newtits.name/api/users/394891?v2=1&fill=0&kw=xtits%2Cxtits.com%2Ctits%20porn%2Cbig%20tits%20porn%2Csmall%20tits%2Csaggy%20tits%2Cperky%20tits%2Cnipples%2Cjapanese%20tits%2Camateur%20tits%2Cbusty%2Cboobs&s1=%25subid1%25&s2=%25subid2%25&i=1&url=https%3A%2F%2Fwww.xtits.xxx%2F
200 OK 3.3 kB URL GET HTTP/2 newtits.name/api/users/394891?v2=1&fill=0&kw=xtits%2Cxtits.com%2Ctits%20porn%2Cbig%20tits%20porn%2Csmall%20tits%2Csaggy%20tits%2Cperky%20tits%2Cnipples%2Cjapanese%20tits%2Camateur%20tits%2Cbusty%2Cboobs&s1=%25subid1%25&s2=%25subid2%25&i=1&url=https%3A%2F%2Fwww.xtits.xxx%2F
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
File type XML document, ASCII text, with very long lines (3435), with no line terminators
Hash 686bd6b4bcbdc07c559569421354340c
4b258a43d968473af6a01b06f4c01a65971af248
d07e9bc94addc6614b7f45ae8883f6039bf0353003c1e91cc5d50545c2d36621
GET /api/users/394891?v2=1&fill=0&kw=xtits%2Cxtits.com%2Ctits%20porn%2Cbig%20tits%20porn%2Csmall%20tits%2Csaggy%20tits%2Cperky%20tits%2Cnipples%2Cjapanese%20tits%2Camateur%20tits%2Cbusty%2Cboobs&s1=%25subid1%25&s2=%25subid2%25&i=1&url=https%3A%2F%2Fwww.xtits.xxx%2F HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:36 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://www.xtits.xxx
access-control-expose-headers: X-Asg-Config, X-t
set-cookie: nauid=810FgpAJtknhElrPCGNi; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
x-robots-tag: noindex, nofollow
x-t: 0
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
s.magsrv.com/splash.php?idzone=4232586&sub=&tags=xtits%2Cxtits.com%2Ctits+porn%2Cbig+tits+porn%2Csmall+tits%2Csaggy+tits%2Cperky+tits%2Cnipples%2Cjapanese+tits%2Camateur+tits%2Cbusty%2Cboobs
200 OK 6.1 kB URL GET HTTP/1.1 s.magsrv.com/splash.php?idzone=4232586&sub=&tags=xtits%2Cxtits.com%2Ctits+porn%2Cbig+tits+porn%2Csmall+tits%2Csaggy+tits%2Cperky+tits%2Cnipples%2Cjapanese+tits%2Camateur+tits%2Cbusty%2Cboobs
IP
ASN #60781 LeaseWeb Netherlands B.V.
Certificate IssuerLet's Encrypt
Subjectmagsrv.com
FingerprintC5:BC:C0:62:0C:DC:A9:D2:61:A6:77:A9:6C:31:19:AD:CD:2E:00:67
ValidityThu, 05 Oct 2023 15:26:28 GMT - Wed, 03 Jan 2024 15:26:27 GMT
File type XML document, ASCII text, with very long lines (6134), with no line terminators
Hash 62a66742a6524fadad0a22ecff89997b
96aa8e1c59a1a2dbb83a39da43aa74f017a1da17
f3e4aec6291c552097b536427d8654e887314508d4e8a482a359292fc4bf930c
GET /splash.php?idzone=4232586&sub=&tags=xtits%2Cxtits.com%2Ctits+porn%2Cbig+tits+porn%2Csmall+tits%2Csaggy+tits%2Cperky+tits%2Cnipples%2Cjapanese+tits%2Camateur+tits%2Cbusty%2Cboobs HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 05:13:37 GMT
Content-Type: text/xml;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Headers: X-CH-VALUES
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22656d6001411400.023871332105328161%22%3B%7D; expires=Wed, 03 Dec 2025 05:13:37 GMT; path=; domain=.magsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C4232586%7C89281690%7C0%7C%7C510%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Cxtits.xxx%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1701666817%7C5231743f36de5dc8212495347e3b69a8%7Cok%22%7D; expires=Tue, 05 Dec 2023 05:13:37 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none
Cache-Control: no-store
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: https://www.xtits.xxx
Access-Control-Allow-Credentials: true
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
pxl.tsyndicate.com/api/v1/error?errorcode=3&p=APeICDOGjggdMFgMhAPnYI4cMxKKGNOmoY4aOWjYuIFDoRg3bg7OqIEDBg4cNBTSaXMwxg0YMWzIxOFSZRsZLV_GnOmSRg0ZCuGwGXNQ4pgzRfsoCAg%3D&s=f93bb27f26fc57672f967188ef2d28ef8a2c2990e48598d149fdbf28db1870f71701666817
200 OK 0 B URL GET HTTP/2 pxl.tsyndicate.com/api/v1/error?errorcode=3&p=APeICDOGjggdMFgMhAPnYI4cMxKKGNOmoY4aOWjYuIFDoRg3bg7OqIEDBg4cNBTSaXMwxg0YMWzIxOFSZRsZLV_GnOmSRg0ZCuGwGXNQ4pgzRfsoCAg%3D&s=f93bb27f26fc57672f967188ef2d28ef8a2c2990e48598d149fdbf28db1870f71701666817
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/error?errorcode=3&p=APeICDOGjggdMFgMhAPnYI4cMxKKGNOmoY4aOWjYuIFDoRg3bg7OqIEDBg4cNBTSaXMwxg0YMWzIxOFSZRsZLV_GnOmSRg0ZCuGwGXNQ4pgzRfsoCAg%3D&s=f93bb27f26fc57672f967188ef2d28ef8a2c2990e48598d149fdbf28db1870f71701666817 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: ts_uid=ac415fa8-dafc-4b5c-9246-dc013c4902c4; bfq=APeIECNCx5YZNWzUuAFDRhcWIsYU3BLjoYgyE2Mw1FhjhgyNXfoo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:39 GMT
content-length: 0
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
go.bbrdbr.com/api/models/vast?action=sbSignupWithModel&campaignId=56887531e20ffc8ec4b32f114752cd5e087f0e1a66a28e88fe82ad1f38a4c7c1&campaignType=smartpop&contentType=video%2Fmp4&creativeId=0fe634b4ed7128d94852002b593185fc904d0c54974e9bbbec389730ba324b3e&duration=00%3A00%3A30&iterationId=745641&masterSmartpopId=2683&memberId=875f268e-c759-4ebd-a6d4-28cced6952b2&mlView=1&no_bb=1&p1=61346&p2=79550&ruleId=29&skipOffset=00%3A00%3A05&smartpopId=5347&sourceId=6289&usePreroll=true&userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d&variationId=31904&xhVersion=1
200 OK 2.0 kB URL GET HTTP/2 go.bbrdbr.com/api/models/vast?action=sbSignupWithModel&campaignId=56887531e20ffc8ec4b32f114752cd5e087f0e1a66a28e88fe82ad1f38a4c7c1&campaignType=smartpop&contentType=video%2Fmp4&creativeId=0fe634b4ed7128d94852002b593185fc904d0c54974e9bbbec389730ba324b3e&duration=00%3A00%3A30&iterationId=745641&masterSmartpopId=2683&memberId=875f268e-c759-4ebd-a6d4-28cced6952b2&mlView=1&no_bb=1&p1=61346&p2=79550&ruleId=29&skipOffset=00%3A00%3A05&smartpopId=5347&sourceId=6289&usePreroll=true&userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d&variationId=31904&xhVersion=1
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint2A:9F:63:77:CB:A5:1C:FD:6E:10:F5:29:D2:FB:51:F4:7C:EC:36:A2
ValiditySun, 26 Feb 2023 00:00:00 GMT - Sun, 25 Feb 2024 23:59:59 GMT
File type XML document, ASCII text, with very long lines (2079), with no line terminators
Hash 3ccf12a6a6b11c6720b1ebb16e588b15
d0a075f8174b2c3bbf5b8a632602a47dfea6da5b
2fb815b36ef30dd680804bee0b769031761e969e70ece88cbf0fbfb825eff5d2
GET /api/models/vast?action=sbSignupWithModel&campaignId=56887531e20ffc8ec4b32f114752cd5e087f0e1a66a28e88fe82ad1f38a4c7c1&campaignType=smartpop&contentType=video%2Fmp4&creativeId=0fe634b4ed7128d94852002b593185fc904d0c54974e9bbbec389730ba324b3e&duration=00%3A00%3A30&iterationId=745641&masterSmartpopId=2683&memberId=875f268e-c759-4ebd-a6d4-28cced6952b2&mlView=1&no_bb=1&p1=61346&p2=79550&ruleId=29&skipOffset=00%3A00%3A05&smartpopId=5347&sourceId=6289&usePreroll=true&userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d&variationId=31904&xhVersion=1 HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.xtits.xxx
Referer: https://www.xtits.xxx/
DNT: 1
Connection: keep-alive
Cookie: __cflb=02DiuDFRFiBZBvMSLtr4BTSnpWHamtv7JqskpejjmtQHr
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 05:13:37 GMT
content-type: text/xml; charset=utf-8
access-control-allow-origin: https://www.xtits.xxx
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 83018faa9c607130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
newtits.name/hiJKMgb.js
200 OK 306 kB IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
Size 306 kB (305915 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hiJKMgb.js HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:35 GMT
content-type: application/javascript
content-length: 86755
last-modified: Thu, 30 Nov 2023 11:46:10 GMT
vary: Accept-Encoding
etag: "65687602-152e3"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 25
cf-ray: 82e2dd72cae9d902-HEL
x-frame-options: DENY
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
newtits.name/api/users/2858289378402874095/928399?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs
200 OK 1.6 kB URL GET HTTP/2 newtits.name/api/users/2858289378402874095/928399?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
File type XML document, ASCII text, with very long lines (1625), with no line terminators
Hash 65e4e2f98dd9a3970c2191dca268f555
616c8c3de556ee333aa943f0ad3bdb739f09108a
7b434cbb8671313e962a7c638ce9260642bad561e23528a6bc4c6575eb0d761c
GET /api/users/2858289378402874095/928399?fill=0&kw=xtits,xtits.com,tits%20porn,big%20tits%20porn,small%20tits,saggy%20tits,perky%20tits,nipples,japanese%20tits,amateur%20tits,busty,boobs HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Cookie: nauid=810FgpAJtknhElrPCGNi
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:37 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://www.xtits.xxx
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
twinrdack.com/preroll.engine?id=fe5eb684-79bd-48d8-95cf-591b420fa46b&zid=36412&cvs={ClientVideoSupport}&time={TimeOffset}&stdtime={StdTimeOffset}&abr={IsAdblockRequest}&pageurl={PageUrl}&tid={TrackingId}&res={Resolution}&bw={BrowserWidth}&bh={BrowserHeight}&kw=xtits%2Cxtits.com%2Ctits+porn%2Cbig+tits+porn%2Csmall+tits%2Csaggy+tits%2Cperky+tits%2Cnipples%2Cjapanese+tits%2Camateur+tits%2Cbusty%2Cboobs&referrerUrl={ReferrerUrl}&pw={PlayerWidth}&ph={PlayerHeight}
200 OK 7.5 kB URL GET HTTP/2 twinrdack.com/preroll.engine?id=fe5eb684-79bd-48d8-95cf-591b420fa46b&zid=36412&cvs={ClientVideoSupport}&time={TimeOffset}&stdtime={StdTimeOffset}&abr={IsAdblockRequest}&pageurl={PageUrl}&tid={TrackingId}&res={Resolution}&bw={BrowserWidth}&bh={BrowserHeight}&kw=xtits%2Cxtits.com%2Ctits+porn%2Cbig+tits+porn%2Csmall+tits%2Csaggy+tits%2Cperky+tits%2Cnipples%2Cjapanese+tits%2Camateur+tits%2Cbusty%2Cboobs&referrerUrl={ReferrerUrl}&pw={PlayerWidth}&ph={PlayerHeight}
IP
Certificate IssuerGoogle Trust Services LLC
Subjecttwinrdack.com
Fingerprint1E:F8:EF:EE:AF:E9:AB:8B:B6:3B:9E:16:4B:8A:AF:17:9F:0D:01:75
ValidityMon, 16 Oct 2023 04:04:30 GMT - Sun, 14 Jan 2024 04:04:29 GMT
File type ASCII text, with very long lines (7480), with no line terminators
Hash ce9ad1b61017635f98ce60c88217aaef
82cae1e2ee584b35effec5eb6f20998df62af318
f8c713eb5fbf138d4e0c72d2fb7336c5210d267bc6a58514d99394b9a060e682
GET /preroll.engine?id=fe5eb684-79bd-48d8-95cf-591b420fa46b&zid=36412&cvs={ClientVideoSupport}&time={TimeOffset}&stdtime={StdTimeOffset}&abr={IsAdblockRequest}&pageurl={PageUrl}&tid={TrackingId}&res={Resolution}&bw={BrowserWidth}&bh={BrowserHeight}&kw=xtits%2Cxtits.com%2Ctits+porn%2Cbig+tits+porn%2Csmall+tits%2Csaggy+tits%2Cperky+tits%2Cnipples%2Cjapanese+tits%2Camateur+tits%2Cbusty%2Cboobs&referrerUrl={ReferrerUrl}&pw={PlayerWidth}&ph={PlayerHeight} HTTP/1.1
Host: twinrdack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 05:13:37 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
cache-control: private, no-transform
access-control-allow-credentials: true
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: https://www.xtits.xxx
set-cookie: IKSR={}; path=/; SameSite=None; secure
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QGCK4GcCAL73cw%2FDKN93vCst%2Fee0q64LkFklBNRdR6lU7oZFfcrKVPn7%2BAMLPeT0Tnp%2Bj2ADahRs0uaWUA79E5f2Uw8KA%2BLj233XjhrcIanqwUSPbXGccg6RYfERl0M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83018fa7cb1556bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
newtits.name/api/click/11569139317491017095?c=60&data[error]=3
200 OK 0 B URL GET HTTP/2 newtits.name/api/click/11569139317491017095?c=60&data[error]=3
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/11569139317491017095?c=60&data[error]=3 HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: nauid=810FgpAJtknhElrPCGNi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:38 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
www.xtits.xxx/?mode=async&action=js_stats&rand=1701666821974
200 OK 43 B URL GET HTTP/2 www.xtits.xxx/?mode=async&action=js_stats&rand=1701666821974
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxtits.xxx
Fingerprint65:62:8F:73:C9:E0:A6:B6:C4:43:F7:B2:16:6D:BA:B6:0D:B4:1B:7B
ValidityTue, 14 Nov 2023 04:46:04 GMT - Mon, 12 Feb 2024 04:46:03 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /?mode=async&action=js_stats&rand=1701666821974 HTTP/1.1
Host: www.xtits.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.xtits.xxx/
Cookie: PHPSESSID=euqa6i0br33j4tm8qlotrv6bso; zilla_subid=zilla.2; utm_source=zilla.2; kt_rt_ad_domain=newtits.name; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Mon, 04 Dec 2023 05:13:36 GMT
content-type: image/gif
content-length: 43
x-powered-by: PHP/7.2.34
x-frame-options: SAMEORIGIN
set-cookie: kt_is_visited=1; expires=Tue, 05-Dec-2023 05:13:36 GMT; Max-Age=86400; path=/; samesite=Lax; domain=.xtits.xxx
X-Firefox-Spdy: h2
newtits.name/api/users/315052?v2=1&fill=0&kw=xtits%2Cxtits.com%2Ctits%20porn%2Cbig%20tits%20porn%2Csmall%20tits%2Csaggy%20tits%2Cperky%20tits%2Cnipples%2Cjapanese%20tits%2Camateur%20tits%2Cbusty%2Cboobs&s1=1000002&i=1&url=https%3A%2F%2Fwww.xtits.xxx%2F
200 OK 2.5 kB URL GET HTTP/2 newtits.name/api/users/315052?v2=1&fill=0&kw=xtits%2Cxtits.com%2Ctits%20porn%2Cbig%20tits%20porn%2Csmall%20tits%2Csaggy%20tits%2Cperky%20tits%2Cnipples%2Cjapanese%20tits%2Camateur%20tits%2Cbusty%2Cboobs&s1=1000002&i=1&url=https%3A%2F%2Fwww.xtits.xxx%2F
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject0.101tubeporn.com
Fingerprint6E:1E:8C:C2:B3:74:21:E5:F2:76:63:AE:7D:51:4D:9F:03:3F:2D:34
ValidityWed, 15 Nov 2023 23:27:07 GMT - Tue, 13 Feb 2024 23:27:06 GMT
File type XML document, ASCII text, with very long lines (2574), with no line terminators
Hash f00dfcbb9286252210f33d866f2cdf63
701d866cb33dc415027334b4bf515ebcf2c3b5ee
d2f809d6a7133b5882d727415dfb78bfd51ea22e47ce224ae45d8a2a8a6c436c
GET /api/users/315052?v2=1&fill=0&kw=xtits%2Cxtits.com%2Ctits%20porn%2Cbig%20tits%20porn%2Csmall%20tits%2Csaggy%20tits%2Cperky%20tits%2Cnipples%2Cjapanese%20tits%2Camateur%20tits%2Cbusty%2Cboobs&s1=1000002&i=1&url=https%3A%2F%2Fwww.xtits.xxx%2F HTTP/1.1
Host: newtits.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.xtits.xxx/
Origin: https://www.xtits.xxx
DNT: 1
Connection: keep-alive
Cookie: nauid=810FgpAJtknhElrPCGNi
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:13:36 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://www.xtits.xxx
access-control-expose-headers: X-Asg-Config, X-t
x-robots-tag: noindex, nofollow
x-t: 0
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
88.208.52.175
142.250.74.106
185.76.9.15
104.18.51.106
135.181.208.216
94.130.164.161
93.93.51.191
0.0.0.0