GET www.googletagmanager.com/gtag/js?id=G-1YHDMLRZ8B
200 OK 90 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-1YHDMLRZ8B
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintD0:30:40:C8:C1:4E:8B:97:6C:36:B5:83:34:51:BE:DC:6F:B7:4C:D9
ValidityTue, 02 Jan 2024 13:02:45 GMT - Tue, 26 Mar 2024 13:02:44 GMT
File type JavaScript source, ASCII text, with very long lines (3651)
Hash 3969c9d285d6e7164e0d7b7ac387d052
cb4135cbec88331a737bfd87c95fbf30e10795e4
c4394aa318a590078b494a1ee1be96df2eec1d9ef045e93e22c1f264b325f5d6
GET /gtag/js?id=G-1YHDMLRZ8B HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 27 Jan 2024 21:09:10 GMT
expires: Sat, 27 Jan 2024 21:09:10 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 90544
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET chaturflix.cam/logo.png
200 OK 11 kB IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subjectchaturflix.cam
Fingerprint68:E4:D0:0F:2E:55:A4:43:7F:04:F8:F7:7A:23:FB:AE:FD:CB:54:5C
ValidityTue, 02 Jan 2024 23:17:33 GMT - Mon, 01 Apr 2024 23:17:32 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Hash 3190078ef825782c8c2598fb8d6056e9
1b52c66607f4e801fd9d09b3c61dd406597ff367
ba781b13a0f862844506aa0af4c55625047bbe0f2ee8a43aed1ec96634117f27
GET /logo.png HTTP/1.1
Host: chaturflix.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/performer/bimattk21
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 27 Jan 2024 21:09:10 GMT
content-type: image/png
content-length: 11055
alt-svc: h3=":443"; ma=86400
cache-control: public, max-age=0
etag: W/"2b2f-18b388ad54e"
last-modified: Mon, 16 Oct 2023 12:51:44 GMT
cf-cache-status: EXPIRED
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wBJM3XQkvKJ39xc2zCsYQrcjMHij2NjirDetVSXF9h%2FEoiapE78t8F%2F%2F9fjbsd35XQG3KtphWxNkIm8TacckzagT10jCvbvKCyqLiVezi7MmgD00cuEUBqNcbB4GUzCwDw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84c3f9a5ecb056c5-OSL
GET fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
200 OK 47 kB URL GET HTTP/2 fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint4C:E1:1E:E3:63:49:81:BB:F5:53:CE:44:91:07:8A:14:84:70:7F:66
ValidityTue, 02 Jan 2024 13:09:26 GMT - Tue, 26 Mar 2024 13:09:25 GMT
File type Web Open Font Format (Version 2), TrueType, length 46704, version 1.0
Hash 30a274cd01b6eeb0b082c918b0697f1e
393311bde26b99a4ad935fa55bad1dce7994388b
88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 27 Jan 2024 08:51:49 GMT
expires: Sun, 26 Jan 2025 08:51:49 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 44242
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET chaturflix.cam/_next/static/chunks/webpack-335dccf94a459538.js
200 OK 48 kB URL GET HTTP/3 chaturflix.cam/_next/static/chunks/webpack-335dccf94a459538.js
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subjectchaturflix.cam
Fingerprint68:E4:D0:0F:2E:55:A4:43:7F:04:F8:F7:7A:23:FB:AE:FD:CB:54:5C
ValidityTue, 02 Jan 2024 23:17:33 GMT - Mon, 01 Apr 2024 23:17:32 GMT
File type JavaScript source, ASCII text, with very long lines (1899), with no line terminators
Hash 3f0b7b31f4412c638260a49e6368e236
34be4802e05d2f6f636fadaa9943af149c2e4ae9
ee8052291bb2ea3cde04b34d7bcf72d60dade1f2a7d074ac697a789a0fdb7832
GET /_next/static/chunks/webpack-335dccf94a459538.js HTTP/1.1
Host: chaturflix.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/performer/bimattk21
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 27 Jan 2024 21:09:10 GMT
content-type: application/javascript; charset=UTF-8
cf-bgj: minify
alt-svc: h3=":443"; ma=86400
etag: W/"76b-18bd89b91b5"
last-modified: Thu, 16 Nov 2023 14:49:15 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 5752431
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tnzn6sGHQNwe29Y%2FbpzlPOPgMKpoc3Bo1Ff8h9MKXxdEl6Ogw6zUJ51Qkm9MIzPLu6L1LMJOPY%2BRUm9X4jOJ6Lb%2BYXY3z9xaZBq%2BghvPb5ToXsk3hoDXpyLl%2BEuLe5FxiA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cache-control: public, max-age=31536000, immutable, max-age=1209600
server: cloudflare
cf-ray: 84c3f9a5cc7256c5-OSL
content-encoding: br
GET fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
200 OK 47 kB URL GET HTTP/2 fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint4C:E1:1E:E3:63:49:81:BB:F5:53:CE:44:91:07:8A:14:84:70:7F:66
ValidityTue, 02 Jan 2024 13:09:26 GMT - Tue, 26 Mar 2024 13:09:25 GMT
File type Web Open Font Format (Version 2), TrueType, length 46704, version 1.0
Hash 30a274cd01b6eeb0b082c918b0697f1e
393311bde26b99a4ad935fa55bad1dce7994388b
88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 27 Jan 2024 08:51:49 GMT
expires: Sun, 26 Jan 2025 08:51:49 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 44242
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
200 OK 47 kB URL GET HTTP/2 fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint4C:E1:1E:E3:63:49:81:BB:F5:53:CE:44:91:07:8A:14:84:70:7F:66
ValidityTue, 02 Jan 2024 13:09:26 GMT - Tue, 26 Mar 2024 13:09:25 GMT
File type Web Open Font Format (Version 2), TrueType, length 46704, version 1.0
Hash 30a274cd01b6eeb0b082c918b0697f1e
393311bde26b99a4ad935fa55bad1dce7994388b
88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 27 Jan 2024 08:51:49 GMT
expires: Sun, 26 Jan 2025 08:51:49 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 44242
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET syndication.realsrv.com/splash.php?idzone=4830684
200 OK 20 B URL GET HTTP/1.1 syndication.realsrv.com/splash.php?idzone=4830684
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
Fingerprint44:2D:DC:FD:4A:2E:1C:BD:23:E3:23:21:E2:45:57:13:37:E2:3F:C8
ValidityMon, 18 Dec 2023 09:34:14 GMT - Sun, 17 Mar 2024 09:34:13 GMT
File type gzip compressed data, max speed, from Unix
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /splash.php?idzone=4830684 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Jan 2024 21:09:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
GET img.doodcdn.co/snaps/hqwfzxrptu4oiuwv.jpg
200 OK 30 kB URL GET HTTP/2 img.doodcdn.co/snaps/hqwfzxrptu4oiuwv.jpg
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerCloudflare, Inc.
Subjectdoodcdn.co
Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3
ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x405, components 3
Hash 61c240e70c339e4613bab5d2b2a878f0
a9e16e35014d01db0eb1a1df0e428d1e3e43223f
92951cfa95b272621e2e47918c4f5ef459cc713590341853d9431a1af07d0809
GET /snaps/hqwfzxrptu4oiuwv.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:11 GMT
content-type: image/jpeg
content-length: 30057
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=30302
etag: "64e9ad66-765e"
expires: Sat, 10 Feb 2024 16:44:22 GMT
last-modified: Sat, 26 Aug 2023 07:44:38 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iqLA0DBaW2IDfD%2B6U0w8lWPFc1Xjy94d1Mj%2FgZKzQVUjETz0aKiMcdIIqk55AAac80v9OOFqz%2Fp9Wc%2FiIfuh9TiTQgkiRd8O3SxAsc%2BQUy59g1UZ%2BCPN8m7LLXW3WSWz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84c3f9aa2bd00afe-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET img.doodcdn.co/snaps/274r3oi9fdu5pskq.jpg
200 OK 32 kB URL GET HTTP/2 img.doodcdn.co/snaps/274r3oi9fdu5pskq.jpg
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerCloudflare, Inc.
Subjectdoodcdn.co
Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3
ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x405, components 3
Hash 682a97e04a3f329d56a4e3f49fc1001d
df46cefc252612ababd8dd5ee0a80b45c7bc7e1f
38339618a036b63ef7b8abe69629e6c070798b223f85c01339614115abb8dbf0
GET /snaps/274r3oi9fdu5pskq.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:11 GMT
content-type: image/jpeg
content-length: 32066
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=32401
etag: "641ffd5a-7e91"
expires: Sat, 10 Feb 2024 16:44:22 GMT
last-modified: Sun, 26 Mar 2023 08:07:54 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q3e7HS%2F8xXQC90eRZyTE5DSU3ihGMNhgBlaTVa7fFx8YCINhF0gkH8wSjRGKJZnwyDUpFlhn9DhEYqjAr%2FpqX4n2D6uUxfdPT%2BKVBIqikXNeJVMKf2hUrwVSyHXx75Bz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84c3f9aa2bd10afe-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET img.doodcdn.co/snaps/d4c7gxbzdotaj7nf.jpg
200 OK 32 kB URL GET HTTP/2 img.doodcdn.co/snaps/d4c7gxbzdotaj7nf.jpg
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerCloudflare, Inc.
Subjectdoodcdn.co
Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3
ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x405, components 3
Hash b8dcbed3bd9c79d7ec60493750ee79c8
483606623c9a9a93462f1fa689266c3130d426b9
71711aa70d4bf9349df92dacdb41da9d8ccbdec5749f65d6be5da653c8a26412
GET /snaps/d4c7gxbzdotaj7nf.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:11 GMT
content-type: image/jpeg
content-length: 32443
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=32979
etag: "64dec487-80d3"
expires: Sat, 10 Feb 2024 16:44:22 GMT
last-modified: Fri, 18 Aug 2023 01:08:23 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TrfQ%2FW6juN3AZ9mjJcvnWxkNkERxHMt0d9y3FIfYV476QAMKgS8V9A2etvXovKPqOL4W4USQh7ZBNunZYYWH7PVRhTZFRAMvYA%2FX8os1TvLu74u9oqeA50yV%2FYu1UUT2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84c3f9aa1bcd0afe-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET chaturflix.cam/apple-touch-icon.png
200 OK 9.9 kB URL GET HTTP/3 chaturflix.cam/apple-touch-icon.png
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subjectchaturflix.cam
Fingerprint68:E4:D0:0F:2E:55:A4:43:7F:04:F8:F7:7A:23:FB:AE:FD:CB:54:5C
ValidityTue, 02 Jan 2024 23:17:33 GMT - Mon, 01 Apr 2024 23:17:32 GMT
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Hash a522bcda4764a3ff209246d3aa00091d
b1a85834b1a6efcfd20f528bd8d5ae93711d1fdc
0dcab3a327ffc62d63da05fff5750a4e63a1dafe1fed183a43ba192b1a9bc435
GET /apple-touch-icon.png HTTP/1.1
Host: chaturflix.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/performer/bimattk21
Cookie: _ga_1YHDMLRZ8B=GS1.1.1706389751.1.0.1706389751.0.0.0; _ga=GA1.1.2000293798.1706389752
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 27 Jan 2024 21:09:11 GMT
content-type: image/png
content-length: 9917
alt-svc: h3=":443"; ma=86400
cache-control: public, max-age=0
etag: W/"26bd-18b388ad54a"
last-modified: Mon, 16 Oct 2023 12:51:44 GMT
cf-cache-status: EXPIRED
accept-ranges: bytes
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tklLhzjvlnZQQsrjXkfbUDGhZ3ikrcwMSiwCxBIU8Xd6OpgxSkQsC%2F1NpcRT7yLsh%2Bgr96AqBJgBzYGpGWR9yCvtz9iIHD%2BXpoUHs%2BCVUS4z8dDDaTaV5wyKZcRpi3Q9mA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84c3f9abff5156c5-OSL
GET chaturflix.cam/favicon-16x16.png
200 OK 625 B URL GET HTTP/3 chaturflix.cam/favicon-16x16.png
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subjectchaturflix.cam
Fingerprint68:E4:D0:0F:2E:55:A4:43:7F:04:F8:F7:7A:23:FB:AE:FD:CB:54:5C
ValidityTue, 02 Jan 2024 23:17:33 GMT - Mon, 01 Apr 2024 23:17:32 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Hash 3f9aa8b3b9b74172b9e8d2c392a28b90
f0d56a2ec436d12aa9e54a712a6854361010b961
e272c20d556677e89953f1e1c87cf15b994d4cdc9dfe3f9d2db43ce1ea989088
GET /favicon-16x16.png HTTP/1.1
Host: chaturflix.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/performer/bimattk21
Cookie: _ga_1YHDMLRZ8B=GS1.1.1706389751.1.0.1706389751.0.0.0; _ga=GA1.1.2000293798.1706389752
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 27 Jan 2024 21:09:11 GMT
content-type: image/png
content-length: 625
alt-svc: h3=":443"; ma=86400
cache-control: public, max-age=0
etag: W/"271-18b388ad54a"
last-modified: Mon, 16 Oct 2023 12:51:44 GMT
cf-cache-status: EXPIRED
accept-ranges: bytes
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O23DH5oq%2BWve17JBx8v8W8S7eAcDwKhxDIYTyxjuDspspsJYEU8BIel81b4jvKso7KBUy9Oj0s50kIb8mY%2FMCySe5o2T959EQ1bK5w8ny58M1DE0T%2FUCnl9iCSWgt9B6aA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84c3f9abff5356c5-OSL
GET js.capndr.com/advertising.js
200 OK 0 B URL GET HTTP/2 js.capndr.com/advertising.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectjs.capndr.com
FingerprintF0:24:A5:0C:06:85:29:08:4A:D1:00:E7:0E:6D:7E:FA:78:A7:98:84
ValiditySat, 23 Dec 2023 03:00:16 GMT - Fri, 22 Mar 2024 03:00:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertising.js HTTP/1.1
Host: js.capndr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 14 Jul 2023 08:23:25 GMT
etag: "64b105fd-0"
expires: Sat, 27 Jan 2024 21:14:12 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
POST fp.metricswpsh.com/fp?tag_id=57711
200 OK 0 B URL POST HTTP/1.1 fp.metricswpsh.com/fp?tag_id=57711
IP
ASN #24940 Hetzner Online GmbH
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
Fingerprint8B:74:55:50:6A:6F:79:6B:86:E4:A5:4D:00:03:4D:48:01:28:E9:97
ValidityWed, 03 Jan 2024 14:27:33 GMT - Tue, 02 Apr 2024 14:27:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=57711 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://chaturflix.cam/
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Sat, 27 Jan 2024 21:09:12 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://chaturflix.cam
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
POST fp.metricswpsh.com/fp?tag_id=57711
200 OK 58 B URL POST HTTP/1.1 fp.metricswpsh.com/fp?tag_id=57711
IP
ASN #24940 Hetzner Online GmbH
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
Fingerprint8B:74:55:50:6A:6F:79:6B:86:E4:A5:4D:00:03:4D:48:01:28:E9:97
ValidityWed, 03 Jan 2024 14:27:33 GMT - Tue, 02 Apr 2024 14:27:32 GMT
Hash 87385fcd2a67fc74d2fa67366ba68ea2
a604cdbb1d31ce257e8643eee9219c9c724c200c
9307cbb21345500294eae459b18a8ffb2bd2fcccd928a09efbc1e324fa9c9995
POST /fp?tag_id=57711 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1835
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 27 Jan 2024 21:09:12 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 58
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://chaturflix.cam
Set-Cookie: id=742672510434180899; Expires=Sun, 26 Jan 2025 21:09:12 GMT; Secure; SameSite=None
Vary: Origin
GET storage.multstorage.com/log/count.html
200 OK 7.3 kB URL GET HTTP/2 storage.multstorage.com/log/count.html
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subjectmultstorage.com
Fingerprint85:2F:46:5C:CA:F9:F8:C2:40:0F:06:C8:34:77:E5:3B:16:08:64:22
ValidityThu, 18 Jan 2024 09:24:31 GMT - Wed, 17 Apr 2024 09:24:30 GMT
File type HTML document, ASCII text, with very long lines (700)
Hash b728ca9cd183d1b7c3f72116b19b22a3
c1fd73f6b02cf00b8bc60b09cc99495e8494b739
8a7b1ca4bbf273b32ea865d4785a1944d1b2b133678d9b5fe7ee0406f6fd64b2
GET /log/count.html HTTP/1.1
Host: storage.multstorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:12 GMT
content-type: text/html
last-modified: Mon, 18 Sep 2023 14:39:06 GMT
vary: Accept-Encoding
x-request-id: 39a408d0bf0365424fb3e8582742a92c
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fUQ%2BNLUA6K%2FYLVyC%2Ba7j%2Bpl881gifXjnfW1hKRyJkC6NuOeWenyFHbctKZ8G83Pfw%2BlRUeQlnOnolr9fj8rmXD6eHwGa2vUmIMHx8HcmMK3DDuFGQjNm8PHAccXgR%2BDddamPOjCKhxXlzQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 84c3f9afdc6d569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET chaturflix.cam/_next/static/chunks/main-a82dbdedafde9961.js
200 OK 42 kB URL GET HTTP/3 chaturflix.cam/_next/static/chunks/main-a82dbdedafde9961.js
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subjectchaturflix.cam
Fingerprint68:E4:D0:0F:2E:55:A4:43:7F:04:F8:F7:7A:23:FB:AE:FD:CB:54:5C
ValidityTue, 02 Jan 2024 23:17:33 GMT - Mon, 01 Apr 2024 23:17:32 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 6c4b6e001759ef712d247e69609d9a26
f7d469b9ef08838dd009f6fba1e4d7743a7b433e
a3fe9be877810cb3228710aa9793d3ef632402b8ca5a1209575aadbc3e2542f6
GET /_next/static/chunks/main-a82dbdedafde9961.js HTTP/1.1
Host: chaturflix.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/performer/bimattk21
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 27 Jan 2024 21:09:10 GMT
content-type: application/javascript; charset=UTF-8
cf-bgj: minify
cf-polished: origSize=115081
alt-svc: h3=":443"; ma=86400
etag: W/"1c189-18c8b2df63e"
last-modified: Thu, 21 Dec 2023 07:01:34 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 3245595
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AKPOvIWPUM3QcPXNDF47pLxToOO%2F37OCyFlHY5tnSdQ1smiK2U%2BdL9JrlXRG5CcSh5p1r4abt6%2F%2B01089rbVyYMKTu1vFuNAWLgQVWV7DZOd0K8Ph%2BmirNSAYwdeLVmN0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cache-control: public, max-age=31536000, immutable, max-age=1209600
server: cloudflare
cf-ray: 84c3f9a5cc7756c5-OSL
content-encoding: br
GET chaturflix.cam/_next/static/chunks/framework-0c7baedefba6b077.js
200 OK 53 kB URL GET HTTP/3 chaturflix.cam/_next/static/chunks/framework-0c7baedefba6b077.js
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subjectchaturflix.cam
Fingerprint68:E4:D0:0F:2E:55:A4:43:7F:04:F8:F7:7A:23:FB:AE:FD:CB:54:5C
ValidityTue, 02 Jan 2024 23:17:33 GMT - Mon, 01 Apr 2024 23:17:32 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 4187276f69ee7350480bb766d7a89d70
08e04e5de85533a0fba6e18c596eaff7de4211cc
bdfcaadb4a6f1b461c53d09cbbecbdaa0464497f889b3643e3995d89512e3ece
GET /_next/static/chunks/framework-0c7baedefba6b077.js HTTP/1.1
Host: chaturflix.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/performer/bimattk21
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 27 Jan 2024 21:09:10 GMT
content-type: application/javascript; charset=UTF-8
cf-bgj: minify
cf-polished: origSize=141047
alt-svc: h3=":443"; ma=86400
etag: W/"226f7-18bd89b91b5"
last-modified: Thu, 16 Nov 2023 14:49:15 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 5493315
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oj4nmdI4P7LxNtkLA%2Bwx2aKZ85mFIe%2FdlpBcndoIaysL0OuM9MeGTlH2JTXHbrPMsB%2BmBbGqZhVZ%2F%2FhaH4UuVTp97TRym0lMoLAggNyhREOYWBhgS8N1p4oa2h2%2BNsg1wQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cache-control: public, max-age=31536000, immutable, max-age=1209600
server: cloudflare
cf-ray: 84c3f9a5cc7356c5-OSL
content-encoding: br
GET nereserv.com/in/dip?site=native-push&wl=1&event_id=1fbd7deb-6f44-45c5-95ab-d0801959acf3&subid=684174935&sid=1420129767&spot_id=33089&created_at=2024-01-27&timezone=0&ver=8.137.0&is_native=1
200 OK 0 B URL GET HTTP/2 nereserv.com/in/dip?site=native-push&wl=1&event_id=1fbd7deb-6f44-45c5-95ab-d0801959acf3&subid=684174935&sid=1420129767&spot_id=33089&created_at=2024-01-27&timezone=0&ver=8.137.0&is_native=1
IP
ASN #24940 Hetzner Online GmbH
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
Fingerprint8B:74:55:50:6A:6F:79:6B:86:E4:A5:4D:00:03:4D:48:01:28:E9:97
ValidityWed, 03 Jan 2024 14:27:33 GMT - Tue, 02 Apr 2024 14:27:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?site=native-push&wl=1&event_id=1fbd7deb-6f44-45c5-95ab-d0801959acf3&subid=684174935&sid=1420129767&spot_id=33089&created_at=2024-01-27&timezone=0&ver=8.137.0&is_native=1 HTTP/1.1
Host: nereserv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Sat, 27 Jan 2024 21:09:12 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET js.cabnnr.com/banner-admanager/build.m.js
200 OK 18 kB URL GET HTTP/2 js.cabnnr.com/banner-admanager/build.m.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectjs.cabnnr.com
FingerprintA8:72:CB:D8:71:F9:82:BD:70:3A:1F:30:73:AC:2B:64:60:A1:0D:C5
ValidityThu, 21 Dec 2023 03:00:43 GMT - Wed, 20 Mar 2024 03:00:42 GMT
File type gzip compressed data, from Unix
Hash 18e13a7f4876494cdd185acf5aebf590
a2e38ee854bb18f371ebdce7f9a41dea4003100a
3f0b422d6164602f519467841eeb1436c9f610eb9b0c318374aa0cfa4fac5359
GET /banner-admanager/build.m.js HTTP/1.1
Host: js.cabnnr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:12 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 17 Jan 2024 13:15:44 GMT
etag: W/"65a7d300-d6d6"
content-encoding: gzip
expires: Sat, 27 Jan 2024 21:14:12 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET 9aba99956a.eb480dde95.com/0387eae701038542509279f0cb8a21c5.js
200 OK 17 kB URL GET HTTP/2 9aba99956a.eb480dde95.com/0387eae701038542509279f0cb8a21c5.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject9aba99956a.eb480dde95.com
Fingerprint30:A7:C7:7E:F0:9A:15:96:0C:AF:5A:C7:5C:EB:F5:32:84:34:A1:00
ValidityWed, 24 Jan 2024 02:20:26 GMT - Tue, 23 Apr 2024 02:20:25 GMT
File type gzip compressed data, from Unix
Hash cf6d3e40c24f9fb97f97f1acd926e1f9
bb95491d82427c6ba4fc5187e58080be0c3099da
df283c279e79d06b78542f3c70489ae6a6207948180470c35b7f45f3f7e4b667
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0387eae701038542509279f0cb8a21c5.js HTTP/1.1
Host: 9aba99956a.eb480dde95.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:12 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Fri, 12 Jan 2024 08:39:08 GMT
etag: W/"65a0faac-c843"
content-encoding: gzip
expires: Sat, 27 Jan 2024 21:14:12 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
POST 7a2d2c66d3.4b6563a120.com/in/multy
200 OK 0 B URL POST HTTP/2 7a2d2c66d3.4b6563a120.com/in/multy
IP
ASN #24940 Hetzner Online GmbH
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject4b6563a120.com
FingerprintC1:83:47:8A:4B:16:D8:6B:F3:38:19:00:08:C1:E0:2E:08:32:36:51
ValidityTue, 23 Jan 2024 14:01:51 GMT - Mon, 22 Apr 2024 14:01:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /in/multy HTTP/1.1
Host: 7a2d2c66d3.4b6563a120.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://chaturflix.cam/
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Sat, 27 Jan 2024 21:09:12 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
OPTIONS d3958af700.4b6563a120.com/in/multy
200 OK 0 B URL OPTIONS HTTP/2 d3958af700.4b6563a120.com/in/multy
IP
ASN #24940 Hetzner Online GmbH
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject4b6563a120.com
FingerprintC1:83:47:8A:4B:16:D8:6B:F3:38:19:00:08:C1:E0:2E:08:32:36:51
ValidityTue, 23 Jan 2024 14:01:51 GMT - Mon, 22 Apr 2024 14:01:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /in/multy HTTP/1.1
Host: d3958af700.4b6563a120.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://chaturflix.cam/
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.0
date: Sat, 27 Jan 2024 21:05:49 GMT
content-type: application/json; charset=utf-8
content-length: 0
vary: Origin
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
OPTIONS d3958af700.4b6563a120.com/in/multy
200 OK 0 B URL OPTIONS HTTP/2 d3958af700.4b6563a120.com/in/multy
IP
ASN #24940 Hetzner Online GmbH
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject4b6563a120.com
FingerprintC1:83:47:8A:4B:16:D8:6B:F3:38:19:00:08:C1:E0:2E:08:32:36:51
ValidityTue, 23 Jan 2024 14:01:51 GMT - Mon, 22 Apr 2024 14:01:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /in/multy HTTP/1.1
Host: d3958af700.4b6563a120.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://chaturflix.cam/
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.0
date: Sat, 27 Jan 2024 21:05:49 GMT
content-type: application/json; charset=utf-8
content-length: 0
vary: Origin
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET 331d7222fd.3e2a26326d.com/in/track?data=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
200 OK 0 B URL GET HTTP/2 331d7222fd.3e2a26326d.com/in/track?data=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
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject331d7222fd.3e2a26326d.com
FingerprintF8:01:07:EC:7C:A3:03:EF:03:57:8E:45:DC:1D:64:6C:74:55:02:5C
ValidityWed, 24 Jan 2024 02:50:17 GMT - Tue, 23 Apr 2024 02:50:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /in/track?data=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 HTTP/1.1
Host: 331d7222fd.3e2a26326d.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:12 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET chaturflix.cam/_next/static/SKtI8g5i9VxjhmXwNL_zd/_buildManifest.js
200 OK 1.0 kB URL GET HTTP/3 chaturflix.cam/_next/static/SKtI8g5i9VxjhmXwNL_zd/_buildManifest.js
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subjectchaturflix.cam
Fingerprint68:E4:D0:0F:2E:55:A4:43:7F:04:F8:F7:7A:23:FB:AE:FD:CB:54:5C
ValidityTue, 02 Jan 2024 23:17:33 GMT - Mon, 01 Apr 2024 23:17:32 GMT
File type ASCII text, with very long lines (1477), with no line terminators
Hash 2f1ac8745ba4ab2dc7911aed3ab095e5
b31d1e290d7cac9cc34d960e608277f5e9ca139f
7da92196fdff5aa7bf4f479a323aa666d28a3f0e807cb794454a2812b8fa9c26
GET /_next/static/SKtI8g5i9VxjhmXwNL_zd/_buildManifest.js HTTP/1.1
Host: chaturflix.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/performer/bimattk21
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 27 Jan 2024 21:09:10 GMT
content-type: application/javascript; charset=UTF-8
cf-bgj: minify
alt-svc: h3=":443"; ma=86400
etag: W/"5c5-18cdfeb404a"
last-modified: Sat, 06 Jan 2024 17:56:25 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 1825842
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fyK7F0bcVlw%2FQkaoiOehBISNA0QirAzNsPWFnGJPm5mhpWdbCtNM5DaLiUFKZKe1HhT%2FiMUScIK7j8knTd7dJ0xdTLvkzTkLDDYtZkgJj9j5gH77L5LlHcoTv75BJwinZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cache-control: public, max-age=31536000, immutable, max-age=1209600
server: cloudflare
cf-ray: 84c3f9a5eca956c5-OSL
content-encoding: br
POST vast.yomeno.xyz/vast
200 OK 0 B IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint97:6B:13:8A:F1:D6:1F:F5:83:8F:B2:F3:76:3E:19:64:8A:90:69:B7
ValidityTue, 23 Jan 2024 03:08:47 GMT - Mon, 22 Apr 2024 03:08:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /vast HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://chaturflix.cam/
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Sat, 27 Jan 2024 21:09:12 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://chaturflix.cam
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
content-type: text/plain; charset=utf-8
content-length: 0
X-Firefox-Spdy: h2
OPTIONS d3958af700.4b6563a120.com/in/multy
200 OK 29 kB URL OPTIONS HTTP/2 d3958af700.4b6563a120.com/in/multy
IP
ASN #24940 Hetzner Online GmbH
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject4b6563a120.com
FingerprintC1:83:47:8A:4B:16:D8:6B:F3:38:19:00:08:C1:E0:2E:08:32:36:51
ValidityTue, 23 Jan 2024 14:01:51 GMT - Mon, 22 Apr 2024 14:01:50 GMT
Hash 10ae05199a136e3521a26eca99589809
4728ed9ee03b7b140f92a2f5953e2153d9a5d0e0
4fbdd9433f9da73b641d2c59ba25da4424b99c9e4c6199527290437e812e18ea
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /in/multy HTTP/1.1
Host: d3958af700.4b6563a120.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1192
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.0
date: Sat, 27 Jan 2024 21:05:50 GMT
content-type: application/json; charset=utf-8
content-length: 29349
vary: Origin
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
POST 7a2d2c66d3.4b6563a120.com/in/multy
200 OK 3.1 kB URL POST HTTP/2 7a2d2c66d3.4b6563a120.com/in/multy
IP
ASN #24940 Hetzner Online GmbH
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject4b6563a120.com
FingerprintC1:83:47:8A:4B:16:D8:6B:F3:38:19:00:08:C1:E0:2E:08:32:36:51
ValidityTue, 23 Jan 2024 14:01:51 GMT - Mon, 22 Apr 2024 14:01:50 GMT
Hash dd28b406fa13369e571ac0becb8e89c1
65d60a5c8cce1f18c925aef78694cc970542202f
76ec5518ddf5052d27602c5e321879ae738db2e63dff082186a0dbba2b02d4a7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /in/multy HTTP/1.1
Host: 7a2d2c66d3.4b6563a120.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 2190
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sat, 27 Jan 2024 21:09:13 GMT
content-type: application/json
content-length: 3140
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
GET js.wpshsdk.com/npc/sdk/push.m.js?v=1
200 OK 45 kB URL GET HTTP/2 js.wpshsdk.com/npc/sdk/push.m.js?v=1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectjs.wpshsdk.com
FingerprintAE:3B:85:2D:4E:EE:53:DC:9A:E0:2A:C4:31:9E:3F:55:EB:8E:DE:99
ValiditySat, 20 Jan 2024 10:01:24 GMT - Fri, 19 Apr 2024 10:01:23 GMT
File type gzip compressed data, from Unix
Hash 2d8460e67eb9c1c7c1700d84d005c585
211b7f715d1e7d49fd2065f74a2bdd02147ab4c0
9dee70349e4b3f8af2c9e7ace6605cf43492079f4a2dfd7baf443e7fc753223f
GET /npc/sdk/push.m.js?v=1 HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:12 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 25 Jan 2024 13:00:03 GMT
etag: W/"65b25b53-8a00"
content-encoding: gzip
expires: Sat, 27 Jan 2024 21:14:12 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET d3958af700.4b6563a120.com/in/show/?&cid=17507&session_id=69788e31-b9c8-40d0-9996-c6a81c915382&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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.Rhuo_NcZD_vL5pIMgvqAzl5tVddhDOc894g7M7jt-cc
201 Created 0 B URL GET HTTP/2 d3958af700.4b6563a120.com/in/show/?&cid=17507&session_id=69788e31-b9c8-40d0-9996-c6a81c915382&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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.Rhuo_NcZD_vL5pIMgvqAzl5tVddhDOc894g7M7jt-cc
IP
ASN #24940 Hetzner Online GmbH
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject4b6563a120.com
FingerprintC1:83:47:8A:4B:16:D8:6B:F3:38:19:00:08:C1:E0:2E:08:32:36:51
ValidityTue, 23 Jan 2024 14:01:51 GMT - Mon, 22 Apr 2024 14:01:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /in/show/?&cid=17507&session_id=69788e31-b9c8-40d0-9996-c6a81c915382&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.eyJhY2NlcHRfbGFuZ3VhZ2UiOiJlbi1VUyxlbjtxPTAuNSIsImFkX3Bvc2l0aW9uIjoxLCJhZF90eXBlIjoibmF0aXZlIiwiYWRibG9jayI6MCwiYWlkIjoxMjAsImF1Y3Rpb25faWQiOjMxOTMyNjE4MDUsImJyb3dzZXJfZmFtaWx5IjoiRmlyZWZveCIsImJyb3dzZXJfbmFtZSI6IkZpcmVmb3ggOTYiLCJjYW1wYWlnbl9pZCI6MTc1MDcsImNhcnJpZXIiOiItIiwiY2xpY2thZGlsbGFfaWQiOjAsImNsaWNrYWRpbGxhX3NwYWNlX2lkIjowLCJjb3VudHJ5IjoiTk8iLCJjcGMiOjAsImNwbSI6MC4wMDE4NzIwMDAwMDAwMDAwMDA0LCJjcmVhdGl2ZV9pZCI6ImQ2ZmRmNGMxNTNhMGE4ODI2YjMwYmY5ZWIyODk5MTIxIiwiY3JlYXRpdmVfdGl0bGUiOiJGbFxcdTAwZjhydCBvZyBTZXhtXFx1MDBmOHRlciBPc2xvIiwiZGV2aWNlX3RoZW1lIjoibGlnaHQiLCJlY3BtIjowLjAwMTE5NDUyMzI1MjQ4NzE3MzgsImV4dF9jYW1wYWlnbl9pZCI6NjMxOTAyOCwiZXh0X2NyZWF0aXZlX2lkIjoiOTA4MDk3NDIiLCJmcm9tX3N0b3JhZ2UiOjAsImlhdCI6MTcwNjM4OTU1MC4xMzIyODkyLCJpY29uIjoiaHR0cHM6Ly9zM3QzZDJ5OC5hZmNkbi5uZXQvbGlicmFyeS8xNTkxNzYvYjMzNWM3NGE0MTY3MTQ2YzhiZjA4YWQ4ZTIwODA1Mjk3ODc2MzM0Zi5qcGciLCJpZnJhbWUiOmZhbHNlLCJpZnJhbWVfcmVkaXJlY3RfdXJsIjoiIiwiaWgiOjE0OSwiaXAiOiI5MS45MC40Mi4xNTQiLCJpcHY2IjoiIiwiaXNfY3BtIjoxLCJpc19kZWZhdWx0IjowLCJpdyI6MjY1LCJrZXl3b3JkcyI6Im1hdHVyZSxBZHVsdCxNSUxGIiwibGFiZWwiOjEsIm1tIjowLCJvZmZlcl9sYWJlbF9pZHMiOiI0LDkwLDEwMSIsIm9zX2ZhbWlseSI6ImxpbnV4Iiwib3NfdHlwZSI6ImNvbXB1dGVyIiwicGFnZSI6Imh0dHBzOi8vY2hhdHVyZmxpeC5jYW0vcGVyZm9ybWVyL2JpbWF0dGsyMSIsInByaW1hcnlfcmVmZXJyZXIiOiIiLCJyZWFsX2JpZCI6MC4wMDExOTQ1MjMyNTI0ODcxNzM4LCJyZWZyZXNoIjowLCJyZXNwb25zZV9zaXplIjowLCJybiI6MCwic2Vzc2lvbl9pZCI6IjY5Nzg4ZTMxLWI5YzgtNDBkMC05OTk2LWM2YTgxYzkxNTM4MiIsInNpdGUiOiJjaGF0dXJmbGl4LmNhbSIsInNpdGVfaWQiOjI1MDUzLCJzb3VyY2VfaWQiOjE5MTkwMzA4NDYsInNwb3RfaWQiOjI1MDUzLCJzcG90X3F1YWxpdHlfbGFiZWwiOiJocSIsInNwb3Rfc2l6ZSI6NCwic3ViIjoiYXVjdGlvbi1uYXRpdmUtcHJvZC0wIiwidGFnX2FiIjoiYSIsInRvcGljcyI6IiIsInRyYWNrX2lkIjoiYXVjdGlvbi1uYXRpdmUtcHJvZC0wIiwidXJsIjoiIiwidXNhZ2VfdHlwZSI6IkRDSCIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQ7IHJ2Ojk2LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvOTYuMCIsInVzZXJfZnAiOjAsInVzZXJfaWQiOjM3NDA4MzIwNTksInVzZXJfa2V5d29yZHMiOiIiLCJ1c2VyX3Njb3JlIjowLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fc291cmNlIjoiIiwidjIiOjAsInZlciI6IjYuMzIuMCIsInZlcnRpY2FsX2lkIjowfQ.Rhuo_NcZD_vL5pIMgvqAzl5tVddhDOc894g7M7jt-cc HTTP/1.1
Host: d3958af700.4b6563a120.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 201 Created
server: nginx/1.16.0
date: Sat, 27 Jan 2024 21:05:50 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET d3958af700.4b6563a120.com/in/show/?&cid=13327&session_id=69788e31-b9c8-40d0-9996-c6a81c915382&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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.6xUh4Efy2VT0q1qWIQ4DqqfzCCBws07MtZRMenhOc0o
201 Created 0 B URL GET HTTP/2 d3958af700.4b6563a120.com/in/show/?&cid=13327&session_id=69788e31-b9c8-40d0-9996-c6a81c915382&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.eyJhY2NlcHRfbGFuZ3VhZ2UiOiJlbi1VUyxlbjtxPTAuNSIsImFkX3Bvc2l0aW9uIjoyLCJhZF90eXBlIjoibmF0aXZlIiwiYWRibG9jayI6MCwiYWlkIjowLCJhdWN0aW9uX2lkIjozMTkzMjYxODA1LCJicm93c2VyX2ZhbWlseSI6IkZpcmVmb3giLCJicm93c2VyX25hbWUiOiJGaXJlZm94IDk2IiwiY2FtcGFpZ25faWQiOjEzMzI3LCJjYXJyaWVyIjoiLSIsImNsaWNrYWRpbGxhX2lkIjowLCJjbGlja2FkaWxsYV9zcGFjZV9pZCI6MCwiY291bnRyeSI6Ik5PIiwiY3BjIjowLCJjcG0iOjAsImNyZWF0aXZlX2lkIjoiYWQxNjAxNTI4OTIxZmNlODRkMTY3ZjgxMDU2MjMyYjYiLCJjcmVhdGl2ZV90aXRsZSI6IkknbGwgc2hvdyB5b3UgaWYgeW91IHJlYWxseSB3YW50IHRvIHNlZS4uLiIsImRldmljZV90aGVtZSI6ImxpZ2h0IiwiZWNwbSI6MCwiZXh0X2NhbXBhaWduX2lkIjowLCJleHRfY3JlYXRpdmVfaWQiOiIiLCJmcm9tX3N0b3JhZ2UiOjAsImlhdCI6MTcwNjM4OTU1MC4xMzI0NTc1LCJpY29uIjoiaHR0cHM6Ly9zdGF0aWMuYm9va21zZy5jb20vY3JlYXRpdmVzL250di9hZDEuanBnIiwiaWZyYW1lIjpmYWxzZSwiaWZyYW1lX3JlZGlyZWN0X3VybCI6IiIsImloIjoxNDksImlwIjoiOTEuOTAuNDIuMTU0IiwiaXB2NiI6IiIsImlzX2NwbSI6MCwiaXNfZGVmYXVsdCI6MSwiaXciOjI2NSwia2V5d29yZHMiOiJtYXR1cmUsQWR1bHQsTUlMRiIsImxhYmVsIjoxLCJtbSI6MCwib2ZmZXJfbGFiZWxfaWRzIjoiIiwib3NfZmFtaWx5IjoibGludXgiLCJvc190eXBlIjoiY29tcHV0ZXIiLCJwYWdlIjoiaHR0cHM6Ly9jaGF0dXJmbGl4LmNhbS9wZXJmb3JtZXIvYmltYXR0azIxIiwicHJpbWFyeV9yZWZlcnJlciI6IiIsInJlYWxfYmlkIjowLCJyZWZyZXNoIjowLCJyZXNwb25zZV9zaXplIjowLCJybiI6MCwic2Vzc2lvbl9pZCI6IjY5Nzg4ZTMxLWI5YzgtNDBkMC05OTk2LWM2YTgxYzkxNTM4MiIsInNpdGUiOiJjaGF0dXJmbGl4LmNhbSIsInNpdGVfaWQiOjI1MDUzLCJzb3VyY2VfaWQiOjE5MTkwMzA4NDYsInNwb3RfaWQiOjI1MDUzLCJzcG90X3F1YWxpdHlfbGFiZWwiOiJocSIsInNwb3Rfc2l6ZSI6NCwic3ViIjoiYXVjdGlvbi1uYXRpdmUtcHJvZC0wIiwidGFnX2FiIjoiYSIsInRvcGljcyI6IiIsInRyYWNrX2lkIjoiYXVjdGlvbi1uYXRpdmUtcHJvZC0wIiwidXJsIjoiIiwidXNhZ2VfdHlwZSI6IkRDSCIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQ7IHJ2Ojk2LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvOTYuMCIsInVzZXJfZnAiOjAsInVzZXJfaWQiOjM3NDA4MzIwNTksInVzZXJfa2V5d29yZHMiOiIiLCJ1c2VyX3Njb3JlIjowLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fc291cmNlIjoiIiwidjIiOjAsInZlciI6IjYuMzIuMCIsInZlcnRpY2FsX2lkIjowfQ.6xUh4Efy2VT0q1qWIQ4DqqfzCCBws07MtZRMenhOc0o
IP
ASN #24940 Hetzner Online GmbH
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject4b6563a120.com
FingerprintC1:83:47:8A:4B:16:D8:6B:F3:38:19:00:08:C1:E0:2E:08:32:36:51
ValidityTue, 23 Jan 2024 14:01:51 GMT - Mon, 22 Apr 2024 14:01:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /in/show/?&cid=13327&session_id=69788e31-b9c8-40d0-9996-c6a81c915382&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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.6xUh4Efy2VT0q1qWIQ4DqqfzCCBws07MtZRMenhOc0o HTTP/1.1
Host: d3958af700.4b6563a120.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 201 Created
server: nginx/1.16.0
date: Sat, 27 Jan 2024 21:05:50 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET d3958af700.4b6563a120.com/in/show/?&cid=13327&session_id=69788e31-b9c8-40d0-9996-c6a81c915382&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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.6_N_3q_BU2Ya7keFR-b3MZHtWzx2KCWjU3jktMpNmtE
201 Created 0 B URL GET HTTP/2 d3958af700.4b6563a120.com/in/show/?&cid=13327&session_id=69788e31-b9c8-40d0-9996-c6a81c915382&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.eyJhY2NlcHRfbGFuZ3VhZ2UiOiJlbi1VUyxlbjtxPTAuNSIsImFkX3Bvc2l0aW9uIjozLCJhZF90eXBlIjoibmF0aXZlIiwiYWRibG9jayI6MCwiYWlkIjowLCJhdWN0aW9uX2lkIjozMTkzMjYxODA1LCJicm93c2VyX2ZhbWlseSI6IkZpcmVmb3giLCJicm93c2VyX25hbWUiOiJGaXJlZm94IDk2IiwiY2FtcGFpZ25faWQiOjEzMzI3LCJjYXJyaWVyIjoiLSIsImNsaWNrYWRpbGxhX2lkIjowLCJjbGlja2FkaWxsYV9zcGFjZV9pZCI6MCwiY291bnRyeSI6Ik5PIiwiY3BjIjowLCJjcG0iOjAsImNyZWF0aXZlX2lkIjoiNDhjOGQyOTczNzg4MTc4NDdjNjQxMDZhMjMyMDU2MTEiLCJjcmVhdGl2ZV90aXRsZSI6IkkgYW0gR2V0dGluZyBUb28gSG90IiwiZGV2aWNlX3RoZW1lIjoibGlnaHQiLCJlY3BtIjowLCJleHRfY2FtcGFpZ25faWQiOjAsImV4dF9jcmVhdGl2ZV9pZCI6IiIsImZyb21fc3RvcmFnZSI6MCwiaWF0IjoxNzA2Mzg5NTUwLjEzMjYyMiwiaWNvbiI6Imh0dHBzOi8vc3RhdGljLmJvb2ttc2cuY29tL2NyZWF0aXZlcy9udHYvYWQyLmpwZyIsImlmcmFtZSI6ZmFsc2UsImlmcmFtZV9yZWRpcmVjdF91cmwiOiIiLCJpaCI6MTQ5LCJpcCI6IjkxLjkwLjQyLjE1NCIsImlwdjYiOiIiLCJpc19jcG0iOjAsImlzX2RlZmF1bHQiOjEsIml3IjoyNjUsImtleXdvcmRzIjoibWF0dXJlLEFkdWx0LE1JTEYiLCJsYWJlbCI6MSwibW0iOjAsIm9mZmVyX2xhYmVsX2lkcyI6IiIsIm9zX2ZhbWlseSI6ImxpbnV4Iiwib3NfdHlwZSI6ImNvbXB1dGVyIiwicGFnZSI6Imh0dHBzOi8vY2hhdHVyZmxpeC5jYW0vcGVyZm9ybWVyL2JpbWF0dGsyMSIsInByaW1hcnlfcmVmZXJyZXIiOiIiLCJyZWFsX2JpZCI6MCwicmVmcmVzaCI6MCwicmVzcG9uc2Vfc2l6ZSI6MCwicm4iOjAsInNlc3Npb25faWQiOiI2OTc4OGUzMS1iOWM4LTQwZDAtOTk5Ni1jNmE4MWM5MTUzODIiLCJzaXRlIjoiY2hhdHVyZmxpeC5jYW0iLCJzaXRlX2lkIjoyNTA1Mywic291cmNlX2lkIjoxOTE5MDMwODQ2LCJzcG90X2lkIjoyNTA1Mywic3BvdF9xdWFsaXR5X2xhYmVsIjoiaHEiLCJzcG90X3NpemUiOjQsInN1YiI6ImF1Y3Rpb24tbmF0aXZlLXByb2QtMCIsInRhZ19hYiI6ImEiLCJ0b3BpY3MiOiIiLCJ0cmFja19pZCI6ImF1Y3Rpb24tbmF0aXZlLXByb2QtMCIsInVybCI6IiIsInVzYWdlX3R5cGUiOiJEQ0giLCJ1c2VyX2FnZW50IjoiTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo5Ni4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94Lzk2LjAiLCJ1c2VyX2ZwIjowLCJ1c2VyX2lkIjozNzQwODMyMDU5LCJ1c2VyX2tleXdvcmRzIjoiIiwidXNlcl9zY29yZSI6MCwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX3NvdXJjZSI6IiIsInYyIjowLCJ2ZXIiOiI2LjMyLjAiLCJ2ZXJ0aWNhbF9pZCI6MH0.6_N_3q_BU2Ya7keFR-b3MZHtWzx2KCWjU3jktMpNmtE
IP
ASN #24940 Hetzner Online GmbH
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject4b6563a120.com
FingerprintC1:83:47:8A:4B:16:D8:6B:F3:38:19:00:08:C1:E0:2E:08:32:36:51
ValidityTue, 23 Jan 2024 14:01:51 GMT - Mon, 22 Apr 2024 14:01:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /in/show/?&cid=13327&session_id=69788e31-b9c8-40d0-9996-c6a81c915382&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.eyJhY2NlcHRfbGFuZ3VhZ2UiOiJlbi1VUyxlbjtxPTAuNSIsImFkX3Bvc2l0aW9uIjozLCJhZF90eXBlIjoibmF0aXZlIiwiYWRibG9jayI6MCwiYWlkIjowLCJhdWN0aW9uX2lkIjozMTkzMjYxODA1LCJicm93c2VyX2ZhbWlseSI6IkZpcmVmb3giLCJicm93c2VyX25hbWUiOiJGaXJlZm94IDk2IiwiY2FtcGFpZ25faWQiOjEzMzI3LCJjYXJyaWVyIjoiLSIsImNsaWNrYWRpbGxhX2lkIjowLCJjbGlja2FkaWxsYV9zcGFjZV9pZCI6MCwiY291bnRyeSI6Ik5PIiwiY3BjIjowLCJjcG0iOjAsImNyZWF0aXZlX2lkIjoiNDhjOGQyOTczNzg4MTc4NDdjNjQxMDZhMjMyMDU2MTEiLCJjcmVhdGl2ZV90aXRsZSI6IkkgYW0gR2V0dGluZyBUb28gSG90IiwiZGV2aWNlX3RoZW1lIjoibGlnaHQiLCJlY3BtIjowLCJleHRfY2FtcGFpZ25faWQiOjAsImV4dF9jcmVhdGl2ZV9pZCI6IiIsImZyb21fc3RvcmFnZSI6MCwiaWF0IjoxNzA2Mzg5NTUwLjEzMjYyMiwiaWNvbiI6Imh0dHBzOi8vc3RhdGljLmJvb2ttc2cuY29tL2NyZWF0aXZlcy9udHYvYWQyLmpwZyIsImlmcmFtZSI6ZmFsc2UsImlmcmFtZV9yZWRpcmVjdF91cmwiOiIiLCJpaCI6MTQ5LCJpcCI6IjkxLjkwLjQyLjE1NCIsImlwdjYiOiIiLCJpc19jcG0iOjAsImlzX2RlZmF1bHQiOjEsIml3IjoyNjUsImtleXdvcmRzIjoibWF0dXJlLEFkdWx0LE1JTEYiLCJsYWJlbCI6MSwibW0iOjAsIm9mZmVyX2xhYmVsX2lkcyI6IiIsIm9zX2ZhbWlseSI6ImxpbnV4Iiwib3NfdHlwZSI6ImNvbXB1dGVyIiwicGFnZSI6Imh0dHBzOi8vY2hhdHVyZmxpeC5jYW0vcGVyZm9ybWVyL2JpbWF0dGsyMSIsInByaW1hcnlfcmVmZXJyZXIiOiIiLCJyZWFsX2JpZCI6MCwicmVmcmVzaCI6MCwicmVzcG9uc2Vfc2l6ZSI6MCwicm4iOjAsInNlc3Npb25faWQiOiI2OTc4OGUzMS1iOWM4LTQwZDAtOTk5Ni1jNmE4MWM5MTUzODIiLCJzaXRlIjoiY2hhdHVyZmxpeC5jYW0iLCJzaXRlX2lkIjoyNTA1Mywic291cmNlX2lkIjoxOTE5MDMwODQ2LCJzcG90X2lkIjoyNTA1Mywic3BvdF9xdWFsaXR5X2xhYmVsIjoiaHEiLCJzcG90X3NpemUiOjQsInN1YiI6ImF1Y3Rpb24tbmF0aXZlLXByb2QtMCIsInRhZ19hYiI6ImEiLCJ0b3BpY3MiOiIiLCJ0cmFja19pZCI6ImF1Y3Rpb24tbmF0aXZlLXByb2QtMCIsInVybCI6IiIsInVzYWdlX3R5cGUiOiJEQ0giLCJ1c2VyX2FnZW50IjoiTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo5Ni4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94Lzk2LjAiLCJ1c2VyX2ZwIjowLCJ1c2VyX2lkIjozNzQwODMyMDU5LCJ1c2VyX2tleXdvcmRzIjoiIiwidXNlcl9zY29yZSI6MCwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX3NvdXJjZSI6IiIsInYyIjowLCJ2ZXIiOiI2LjMyLjAiLCJ2ZXJ0aWNhbF9pZCI6MH0.6_N_3q_BU2Ya7keFR-b3MZHtWzx2KCWjU3jktMpNmtE HTTP/1.1
Host: d3958af700.4b6563a120.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 201 Created
server: nginx/1.16.0
date: Sat, 27 Jan 2024 21:05:50 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET d3958af700.4b6563a120.com/in/show/?&cid=13327&session_id=69788e31-b9c8-40d0-9996-c6a81c915382&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.eyJhY2NlcHRfbGFuZ3VhZ2UiOiJlbi1VUyxlbjtxPTAuNSIsImFkX3Bvc2l0aW9uIjo0LCJhZF90eXBlIjoibmF0aXZlIiwiYWRibG9jayI6MCwiYWlkIjowLCJhdWN0aW9uX2lkIjozMTkzMjYxODA1LCJicm93c2VyX2ZhbWlseSI6IkZpcmVmb3giLCJicm93c2VyX25hbWUiOiJGaXJlZm94IDk2IiwiY2FtcGFpZ25faWQiOjEzMzI3LCJjYXJyaWVyIjoiLSIsImNsaWNrYWRpbGxhX2lkIjowLCJjbGlja2FkaWxsYV9zcGFjZV9pZCI6MCwiY291bnRyeSI6Ik5PIiwiY3BjIjowLCJjcG0iOjAsImNyZWF0aXZlX2lkIjoiMjc1ZDFiMWI5M2I0MWIxZDBmYjVkMjk1NzU2Mzk4OTEiLCJjcmVhdGl2ZV90aXRsZSI6IkhpLCBtZWV0IGZvciBzZXg_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.c__FXCo7rRutIpcxEEjWksvv1FE4XRPHcN6qz9Jw7mU
201 Created 0 B URL GET HTTP/2 d3958af700.4b6563a120.com/in/show/?&cid=13327&session_id=69788e31-b9c8-40d0-9996-c6a81c915382&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.eyJhY2NlcHRfbGFuZ3VhZ2UiOiJlbi1VUyxlbjtxPTAuNSIsImFkX3Bvc2l0aW9uIjo0LCJhZF90eXBlIjoibmF0aXZlIiwiYWRibG9jayI6MCwiYWlkIjowLCJhdWN0aW9uX2lkIjozMTkzMjYxODA1LCJicm93c2VyX2ZhbWlseSI6IkZpcmVmb3giLCJicm93c2VyX25hbWUiOiJGaXJlZm94IDk2IiwiY2FtcGFpZ25faWQiOjEzMzI3LCJjYXJyaWVyIjoiLSIsImNsaWNrYWRpbGxhX2lkIjowLCJjbGlja2FkaWxsYV9zcGFjZV9pZCI6MCwiY291bnRyeSI6Ik5PIiwiY3BjIjowLCJjcG0iOjAsImNyZWF0aXZlX2lkIjoiMjc1ZDFiMWI5M2I0MWIxZDBmYjVkMjk1NzU2Mzk4OTEiLCJjcmVhdGl2ZV90aXRsZSI6IkhpLCBtZWV0IGZvciBzZXg_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.c__FXCo7rRutIpcxEEjWksvv1FE4XRPHcN6qz9Jw7mU
IP
ASN #24940 Hetzner Online GmbH
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject4b6563a120.com
FingerprintC1:83:47:8A:4B:16:D8:6B:F3:38:19:00:08:C1:E0:2E:08:32:36:51
ValidityTue, 23 Jan 2024 14:01:51 GMT - Mon, 22 Apr 2024 14:01:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /in/show/?&cid=13327&session_id=69788e31-b9c8-40d0-9996-c6a81c915382&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.eyJhY2NlcHRfbGFuZ3VhZ2UiOiJlbi1VUyxlbjtxPTAuNSIsImFkX3Bvc2l0aW9uIjo0LCJhZF90eXBlIjoibmF0aXZlIiwiYWRibG9jayI6MCwiYWlkIjowLCJhdWN0aW9uX2lkIjozMTkzMjYxODA1LCJicm93c2VyX2ZhbWlseSI6IkZpcmVmb3giLCJicm93c2VyX25hbWUiOiJGaXJlZm94IDk2IiwiY2FtcGFpZ25faWQiOjEzMzI3LCJjYXJyaWVyIjoiLSIsImNsaWNrYWRpbGxhX2lkIjowLCJjbGlja2FkaWxsYV9zcGFjZV9pZCI6MCwiY291bnRyeSI6Ik5PIiwiY3BjIjowLCJjcG0iOjAsImNyZWF0aXZlX2lkIjoiMjc1ZDFiMWI5M2I0MWIxZDBmYjVkMjk1NzU2Mzk4OTEiLCJjcmVhdGl2ZV90aXRsZSI6IkhpLCBtZWV0IGZvciBzZXg_IPCfkosiLCJkZXZpY2VfdGhlbWUiOiJsaWdodCIsImVjcG0iOjAsImV4dF9jYW1wYWlnbl9pZCI6MCwiZXh0X2NyZWF0aXZlX2lkIjoiIiwiZnJvbV9zdG9yYWdlIjowLCJpYXQiOjE3MDYzODk1NTAuMTMyNzc2NSwiaWNvbiI6Imh0dHBzOi8vc3RhdGljLmJvb2ttc2cuY29tL2NyZWF0aXZlcy9udHYvYWQzLmpwZyIsImlmcmFtZSI6ZmFsc2UsImlmcmFtZV9yZWRpcmVjdF91cmwiOiIiLCJpaCI6MTQ5LCJpcCI6IjkxLjkwLjQyLjE1NCIsImlwdjYiOiIiLCJpc19jcG0iOjAsImlzX2RlZmF1bHQiOjEsIml3IjoyNjUsImtleXdvcmRzIjoibWF0dXJlLEFkdWx0LE1JTEYiLCJsYWJlbCI6MSwibW0iOjAsIm9mZmVyX2xhYmVsX2lkcyI6IiIsIm9zX2ZhbWlseSI6ImxpbnV4Iiwib3NfdHlwZSI6ImNvbXB1dGVyIiwicGFnZSI6Imh0dHBzOi8vY2hhdHVyZmxpeC5jYW0vcGVyZm9ybWVyL2JpbWF0dGsyMSIsInByaW1hcnlfcmVmZXJyZXIiOiIiLCJyZWFsX2JpZCI6MCwicmVmcmVzaCI6MCwicmVzcG9uc2Vfc2l6ZSI6MCwicm4iOjAsInNlc3Npb25faWQiOiI2OTc4OGUzMS1iOWM4LTQwZDAtOTk5Ni1jNmE4MWM5MTUzODIiLCJzaXRlIjoiY2hhdHVyZmxpeC5jYW0iLCJzaXRlX2lkIjoyNTA1Mywic291cmNlX2lkIjoxOTE5MDMwODQ2LCJzcG90X2lkIjoyNTA1Mywic3BvdF9xdWFsaXR5X2xhYmVsIjoiaHEiLCJzcG90X3NpemUiOjQsInN1YiI6ImF1Y3Rpb24tbmF0aXZlLXByb2QtMCIsInRhZ19hYiI6ImEiLCJ0b3BpY3MiOiIiLCJ0cmFja19pZCI6ImF1Y3Rpb24tbmF0aXZlLXByb2QtMCIsInVybCI6IiIsInVzYWdlX3R5cGUiOiJEQ0giLCJ1c2VyX2FnZW50IjoiTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo5Ni4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94Lzk2LjAiLCJ1c2VyX2ZwIjowLCJ1c2VyX2lkIjozNzQwODMyMDU5LCJ1c2VyX2tleXdvcmRzIjoiIiwidXNlcl9zY29yZSI6MCwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX3NvdXJjZSI6IiIsInYyIjowLCJ2ZXIiOiI2LjMyLjAiLCJ2ZXJ0aWNhbF9pZCI6MH0.c__FXCo7rRutIpcxEEjWksvv1FE4XRPHcN6qz9Jw7mU HTTP/1.1
Host: d3958af700.4b6563a120.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 201 Created
server: nginx/1.16.0
date: Sat, 27 Jan 2024 21:05:50 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET s.optnx.com/cimp.php?data=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
302 Found 0 B URL GET HTTP/1.1 s.optnx.com/cimp.php?data=TVRjd05qTTRPVGMxTW53NE9XTmxORFkwTVdJeVpEVm1NbUZtTWpZeFpXTmtZalJrTWpreU1qVm1aZy0tfC9saWJyYXJ5LzE1OTE3Ni9iMzM1Yzc0YTQxNjcxNDZjOGJmMDhhZDhlMjA4MDUyOTc4NzYzMzRmLmpwZ3xodHRwc3w5MS45MC40Mi4xNTR8Tk9SfDQxfG15YmlkLmlvfDE1OTE3Nnw1OTk5MTh8MTAxMTYzNnw1MTczMTcyfDUwOHw2MzE5MDI4fDkwODA5NzQyfDE1fDN8MHwwfDI1MzQ0fDB8MC4yMzR8ODB8VVNEfFVTRHwxfDF8MzR8fDF8Tk9SfHwyMHw4fDF8fDM3NDA4MzIwNTl8NThiYmM4NDgxNjRlYWIwZGY0MDI3OTdlZDI1Njc0ZGF8MXwwfGNoYXR1cmZsaXguY2FtfDB8MHwwfDAuMDJ8MXwwfGV4Y2hhbmdlX25hdGl2ZV9hZHwwfDB8MzE0MzI0MnwtMXwwfDMxNDMyNDR8fHw0fDE0NDB8fDB8MHwwfDB8MHwwfDF8MHx8OHwxfE1vemlsbGEvNS4wIChYMTE7IExpbnV4IHg4Nl82NDsgcnY6OTYuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC85Ni4wfHwyNHwyMnwwfDF8MHx8fE9LfGJlYjg2ODM5ZTAyY2FhNmJjYWJkMjNiYWEyNjEyOWRl
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectoptnx.com
Fingerprint04:F2:57:5B:67:63:65:4F:C7:2C:9F:27:0E:EE:DF:B9:6A:15:90:90
ValidityMon, 18 Dec 2023 09:32:35 GMT - Sun, 17 Mar 2024 09:32:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cimp.php?data=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 HTTP/1.1
Host: s.optnx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 27 Jan 2024 21:09:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2265b570f974d6b7.830106711322569037%22%3B%7D; expires=Mon, 26 Jan 2026 21:09:13 GMT; path=; domain=.optnx.com; Secure; SameSite=none
Location: https://s3t3d2y8.afcdn.net/library/159176/b335c74a4167146c8bf08ad8e20805297876334f.jpg
Accept-CH:
X-Robots-Tag: noindex, follow
GET 7a2d2c66d3.4b6563a120.com/in/show/?tag_ab=a&site_id=3133089&adblock=0&testab=0&auction_host=&mm=0&yc=0&render_type=mq&pr=&banner_width=300&banner_height=100&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=dch_ip,tz_offset&ssp=3963&page=https%3A%2F%2Fchaturflix.cam%2Fperformer%2Fbimattk21&refdom=chaturflix.cam&auction_time=1706389752&subid=684174935&sid=1420129767&tcid=0&ver=8.137.0&ver_c=&spot_id=33089&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2024-01-27&iabcat=IAB25-3&keywords=mature,adult,milf&user_fp=12832147643599618577&score=65.27327134040567&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D684174935%26spot_id%3D33089%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fchaturflix.cam%252Fperformer%252Fbimattk21%26idzone%3D0%26sid%3D1546&is_cpm=0&resp_type=&crid=&crtid=a248c2bc2b5718538c9d2d00088493cc&url=http%3A%2F%2Fnereu-gdr.com%2Fzclkvisitor%2F5238f421-bd58-11ee-bde7-121df1845429%2Fba075020-c9e4-11eb-90df-0a54a3175cb9%3Fcampaignid%3D04e71250-e397-11e9-bcfc-0a157bfa6bfc&icons=bV82tiQ1AM0jbN_sqlhrIQncOpiSnUjfuAxnZeVvy82f5eY1mlkMQT3MuAXcyBSVlB0SWZ1kEOul4ev0QcxxPxm-m3ePKzoKmqwu93VBOwQ5fi31uM06eyimIIq6sU8sqb8LyoH33fwTSo77BPeX0TJtVkjOOYGOTtIQtNTW3OApBsbLSA&ext_cid=0&px_id=3133089&min_cpm=0.030249775964391695&out_id=1&campaign_type=lq-pop&aid=221&cid=2695&uniq=&mid=1062652269189256532&skin_id=2&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.09740804477332203&cpm=0&verify_hash=7a18cd4742ed7edf447a15dbb1ce7249&is_native=2&real_bid=0.0013503559899330068&original_bid_usd=0.00203&original_bid=0.00203&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=81,89,4,76,5,27,129,108,0&need_redirect_show=0&applied_features=prod,main-skins-settings&show_count=1&expiration_timestamp=1706476152&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_50dbf0cae89fd14f34b6cb7b8301e683e25e0adf.webp&site=native-push-adult&price=0.00203&hostname=auc-inpage-hz-9-a&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.00000203&ext_campaign_id_str=04e71250-e397-11e9-bcfc-0a157bfa6bfc&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&mlf=1&mlc=1&st=0.03&cpa=83fea608-8718-476f-9973-f6c0424aa433&prev_step_diff=884
200 OK 0 B URL GET HTTP/2 7a2d2c66d3.4b6563a120.com/in/show/?tag_ab=a&site_id=3133089&adblock=0&testab=0&auction_host=&mm=0&yc=0&render_type=mq&pr=&banner_width=300&banner_height=100&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=dch_ip,tz_offset&ssp=3963&page=https%3A%2F%2Fchaturflix.cam%2Fperformer%2Fbimattk21&refdom=chaturflix.cam&auction_time=1706389752&subid=684174935&sid=1420129767&tcid=0&ver=8.137.0&ver_c=&spot_id=33089&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2024-01-27&iabcat=IAB25-3&keywords=mature,adult,milf&user_fp=12832147643599618577&score=65.27327134040567&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D684174935%26spot_id%3D33089%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fchaturflix.cam%252Fperformer%252Fbimattk21%26idzone%3D0%26sid%3D1546&is_cpm=0&resp_type=&crid=&crtid=a248c2bc2b5718538c9d2d00088493cc&url=http%3A%2F%2Fnereu-gdr.com%2Fzclkvisitor%2F5238f421-bd58-11ee-bde7-121df1845429%2Fba075020-c9e4-11eb-90df-0a54a3175cb9%3Fcampaignid%3D04e71250-e397-11e9-bcfc-0a157bfa6bfc&icons=bV82tiQ1AM0jbN_sqlhrIQncOpiSnUjfuAxnZeVvy82f5eY1mlkMQT3MuAXcyBSVlB0SWZ1kEOul4ev0QcxxPxm-m3ePKzoKmqwu93VBOwQ5fi31uM06eyimIIq6sU8sqb8LyoH33fwTSo77BPeX0TJtVkjOOYGOTtIQtNTW3OApBsbLSA&ext_cid=0&px_id=3133089&min_cpm=0.030249775964391695&out_id=1&campaign_type=lq-pop&aid=221&cid=2695&uniq=&mid=1062652269189256532&skin_id=2&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.09740804477332203&cpm=0&verify_hash=7a18cd4742ed7edf447a15dbb1ce7249&is_native=2&real_bid=0.0013503559899330068&original_bid_usd=0.00203&original_bid=0.00203&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=81,89,4,76,5,27,129,108,0&need_redirect_show=0&applied_features=prod,main-skins-settings&show_count=1&expiration_timestamp=1706476152&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_50dbf0cae89fd14f34b6cb7b8301e683e25e0adf.webp&site=native-push-adult&price=0.00203&hostname=auc-inpage-hz-9-a&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.00000203&ext_campaign_id_str=04e71250-e397-11e9-bcfc-0a157bfa6bfc&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&mlf=1&mlc=1&st=0.03&cpa=83fea608-8718-476f-9973-f6c0424aa433&prev_step_diff=884
IP
ASN #24940 Hetzner Online GmbH
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject4b6563a120.com
FingerprintC1:83:47:8A:4B:16:D8:6B:F3:38:19:00:08:C1:E0:2E:08:32:36:51
ValidityTue, 23 Jan 2024 14:01:51 GMT - Mon, 22 Apr 2024 14:01:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /in/show/?tag_ab=a&site_id=3133089&adblock=0&testab=0&auction_host=&mm=0&yc=0&render_type=mq&pr=&banner_width=300&banner_height=100&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=dch_ip,tz_offset&ssp=3963&page=https%3A%2F%2Fchaturflix.cam%2Fperformer%2Fbimattk21&refdom=chaturflix.cam&auction_time=1706389752&subid=684174935&sid=1420129767&tcid=0&ver=8.137.0&ver_c=&spot_id=33089&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2024-01-27&iabcat=IAB25-3&keywords=mature,adult,milf&user_fp=12832147643599618577&score=65.27327134040567&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D684174935%26spot_id%3D33089%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fchaturflix.cam%252Fperformer%252Fbimattk21%26idzone%3D0%26sid%3D1546&is_cpm=0&resp_type=&crid=&crtid=a248c2bc2b5718538c9d2d00088493cc&url=http%3A%2F%2Fnereu-gdr.com%2Fzclkvisitor%2F5238f421-bd58-11ee-bde7-121df1845429%2Fba075020-c9e4-11eb-90df-0a54a3175cb9%3Fcampaignid%3D04e71250-e397-11e9-bcfc-0a157bfa6bfc&icons=bV82tiQ1AM0jbN_sqlhrIQncOpiSnUjfuAxnZeVvy82f5eY1mlkMQT3MuAXcyBSVlB0SWZ1kEOul4ev0QcxxPxm-m3ePKzoKmqwu93VBOwQ5fi31uM06eyimIIq6sU8sqb8LyoH33fwTSo77BPeX0TJtVkjOOYGOTtIQtNTW3OApBsbLSA&ext_cid=0&px_id=3133089&min_cpm=0.030249775964391695&out_id=1&campaign_type=lq-pop&aid=221&cid=2695&uniq=&mid=1062652269189256532&skin_id=2&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.09740804477332203&cpm=0&verify_hash=7a18cd4742ed7edf447a15dbb1ce7249&is_native=2&real_bid=0.0013503559899330068&original_bid_usd=0.00203&original_bid=0.00203&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=81,89,4,76,5,27,129,108,0&need_redirect_show=0&applied_features=prod,main-skins-settings&show_count=1&expiration_timestamp=1706476152&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_50dbf0cae89fd14f34b6cb7b8301e683e25e0adf.webp&site=native-push-adult&price=0.00203&hostname=auc-inpage-hz-9-a&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.00000203&ext_campaign_id_str=04e71250-e397-11e9-bcfc-0a157bfa6bfc&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&mlf=1&mlc=1&st=0.03&cpa=83fea608-8718-476f-9973-f6c0424aa433&prev_step_diff=884 HTTP/1.1
Host: 7a2d2c66d3.4b6563a120.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sat, 27 Jan 2024 21:09:13 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET 7a2d2c66d3.4b6563a120.com/in/show/?tag_ab=a&site_id=3133089&adblock=0&testab=0&auction_host=&mm=0&yc=0&render_type=mq&pr=&banner_width=300&banner_height=100&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=dch_ip,tz_offset&ssp=3963&page=https%3A%2F%2Fchaturflix.cam%2Fperformer%2Fbimattk21&refdom=chaturflix.cam&auction_time=1706389752&subid=684174935&sid=1420129767&tcid=0&ver=8.137.0&ver_c=&spot_id=33089&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2024-01-27&iabcat=IAB25-3&keywords=mature,adult,milf&user_fp=12832147643599618577&score=65.27327134040567&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D684174935%26spot_id%3D33089%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fchaturflix.cam%252Fperformer%252Fbimattk21%26idzone%3D0%26sid%3D1546&is_cpm=0&resp_type=&crid=&crtid=69c21cb46070c0aacb6bca14e5765395&url=https%3A%2F%2Feu.karoon.xyz%2Fnty%2Fpostback%2Fclick%3Fkey%3Dv2-1706389752896-7-9306-1309311-205544a7-0feb-6f3f-cead-c5f32d418676&icons=VpeW3IJHYXIpJjSc6OOO0xz1Rv6Sgx9Zmatk0Blm6hDMr-2LRaCzIknht0gZFMosRD66gbjSF-6QhtNUYnAqv46Fg7Ah6snGYxg8mwdhpDKHcTPFMKDSdNGz51EKlXKMwT2A70Lt-7Hcy-TUcfeRtXW5O5JtsK0OaCCk9_t4XenomkHPkVo7RAZ4_4xrBkcxWKJXQW8gFZcpP56nISBukI1Lww9WHiRkU0GfJ66oQXUHiud_lGrJegPsSTSStvy6Mz4M55mSM-6hWryTDYzgkfX8Usw3esWyGZR6WKROmUId1713T7YQZJUrYstuVZ9PeOn90skvamc&ext_cid=0&px_id=3133089&min_cpm=0.008777593074644263&out_id=0&campaign_type=mq&aid=3251&cid=12822&uniq=380318e90eb2394b12154d6745124b3e4152c951550738c45410d9a6191e9c83&mid=1062652269189256532&skin_id=2&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.03641297990089757&cpm=0&verify_hash=a4390d29424ac00f6bdaa72030e4bc16&is_native=1&real_bid=0.0017396280026435772&original_bid_usd=0.00198&original_bid=0.00198&exp=240&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=101,106,123,76,108,98,81,0,4&need_redirect_show=0&applied_features=prod,main-skins-settings&show_count=1&expiration_timestamp=1706461752&image_url=https%3A%2F%2Fcdn.amnew.net%2F79841be93dfd180243b1b7c69d931d62.jpeg&site=native-push-adult&price=0.00198&hostname=auc-inpage-hz-9-a&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.00000198&ext_campaign_id_str=&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&st=0.03&cpa=47f5329b-d058-4dd8-a3d5-17ef915d67f3&prev_step_diff=884
200 OK 0 B URL GET HTTP/2 7a2d2c66d3.4b6563a120.com/in/show/?tag_ab=a&site_id=3133089&adblock=0&testab=0&auction_host=&mm=0&yc=0&render_type=mq&pr=&banner_width=300&banner_height=100&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=dch_ip,tz_offset&ssp=3963&page=https%3A%2F%2Fchaturflix.cam%2Fperformer%2Fbimattk21&refdom=chaturflix.cam&auction_time=1706389752&subid=684174935&sid=1420129767&tcid=0&ver=8.137.0&ver_c=&spot_id=33089&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2024-01-27&iabcat=IAB25-3&keywords=mature,adult,milf&user_fp=12832147643599618577&score=65.27327134040567&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D684174935%26spot_id%3D33089%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fchaturflix.cam%252Fperformer%252Fbimattk21%26idzone%3D0%26sid%3D1546&is_cpm=0&resp_type=&crid=&crtid=69c21cb46070c0aacb6bca14e5765395&url=https%3A%2F%2Feu.karoon.xyz%2Fnty%2Fpostback%2Fclick%3Fkey%3Dv2-1706389752896-7-9306-1309311-205544a7-0feb-6f3f-cead-c5f32d418676&icons=VpeW3IJHYXIpJjSc6OOO0xz1Rv6Sgx9Zmatk0Blm6hDMr-2LRaCzIknht0gZFMosRD66gbjSF-6QhtNUYnAqv46Fg7Ah6snGYxg8mwdhpDKHcTPFMKDSdNGz51EKlXKMwT2A70Lt-7Hcy-TUcfeRtXW5O5JtsK0OaCCk9_t4XenomkHPkVo7RAZ4_4xrBkcxWKJXQW8gFZcpP56nISBukI1Lww9WHiRkU0GfJ66oQXUHiud_lGrJegPsSTSStvy6Mz4M55mSM-6hWryTDYzgkfX8Usw3esWyGZR6WKROmUId1713T7YQZJUrYstuVZ9PeOn90skvamc&ext_cid=0&px_id=3133089&min_cpm=0.008777593074644263&out_id=0&campaign_type=mq&aid=3251&cid=12822&uniq=380318e90eb2394b12154d6745124b3e4152c951550738c45410d9a6191e9c83&mid=1062652269189256532&skin_id=2&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.03641297990089757&cpm=0&verify_hash=a4390d29424ac00f6bdaa72030e4bc16&is_native=1&real_bid=0.0017396280026435772&original_bid_usd=0.00198&original_bid=0.00198&exp=240&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=101,106,123,76,108,98,81,0,4&need_redirect_show=0&applied_features=prod,main-skins-settings&show_count=1&expiration_timestamp=1706461752&image_url=https%3A%2F%2Fcdn.amnew.net%2F79841be93dfd180243b1b7c69d931d62.jpeg&site=native-push-adult&price=0.00198&hostname=auc-inpage-hz-9-a&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.00000198&ext_campaign_id_str=&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&st=0.03&cpa=47f5329b-d058-4dd8-a3d5-17ef915d67f3&prev_step_diff=884
IP
ASN #24940 Hetzner Online GmbH
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject4b6563a120.com
FingerprintC1:83:47:8A:4B:16:D8:6B:F3:38:19:00:08:C1:E0:2E:08:32:36:51
ValidityTue, 23 Jan 2024 14:01:51 GMT - Mon, 22 Apr 2024 14:01:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /in/show/?tag_ab=a&site_id=3133089&adblock=0&testab=0&auction_host=&mm=0&yc=0&render_type=mq&pr=&banner_width=300&banner_height=100&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=dch_ip,tz_offset&ssp=3963&page=https%3A%2F%2Fchaturflix.cam%2Fperformer%2Fbimattk21&refdom=chaturflix.cam&auction_time=1706389752&subid=684174935&sid=1420129767&tcid=0&ver=8.137.0&ver_c=&spot_id=33089&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2024-01-27&iabcat=IAB25-3&keywords=mature,adult,milf&user_fp=12832147643599618577&score=65.27327134040567&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D684174935%26spot_id%3D33089%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fchaturflix.cam%252Fperformer%252Fbimattk21%26idzone%3D0%26sid%3D1546&is_cpm=0&resp_type=&crid=&crtid=69c21cb46070c0aacb6bca14e5765395&url=https%3A%2F%2Feu.karoon.xyz%2Fnty%2Fpostback%2Fclick%3Fkey%3Dv2-1706389752896-7-9306-1309311-205544a7-0feb-6f3f-cead-c5f32d418676&icons=VpeW3IJHYXIpJjSc6OOO0xz1Rv6Sgx9Zmatk0Blm6hDMr-2LRaCzIknht0gZFMosRD66gbjSF-6QhtNUYnAqv46Fg7Ah6snGYxg8mwdhpDKHcTPFMKDSdNGz51EKlXKMwT2A70Lt-7Hcy-TUcfeRtXW5O5JtsK0OaCCk9_t4XenomkHPkVo7RAZ4_4xrBkcxWKJXQW8gFZcpP56nISBukI1Lww9WHiRkU0GfJ66oQXUHiud_lGrJegPsSTSStvy6Mz4M55mSM-6hWryTDYzgkfX8Usw3esWyGZR6WKROmUId1713T7YQZJUrYstuVZ9PeOn90skvamc&ext_cid=0&px_id=3133089&min_cpm=0.008777593074644263&out_id=0&campaign_type=mq&aid=3251&cid=12822&uniq=380318e90eb2394b12154d6745124b3e4152c951550738c45410d9a6191e9c83&mid=1062652269189256532&skin_id=2&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.03641297990089757&cpm=0&verify_hash=a4390d29424ac00f6bdaa72030e4bc16&is_native=1&real_bid=0.0017396280026435772&original_bid_usd=0.00198&original_bid=0.00198&exp=240&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=101,106,123,76,108,98,81,0,4&need_redirect_show=0&applied_features=prod,main-skins-settings&show_count=1&expiration_timestamp=1706461752&image_url=https%3A%2F%2Fcdn.amnew.net%2F79841be93dfd180243b1b7c69d931d62.jpeg&site=native-push-adult&price=0.00198&hostname=auc-inpage-hz-9-a&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.00000198&ext_campaign_id_str=&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&st=0.03&cpa=47f5329b-d058-4dd8-a3d5-17ef915d67f3&prev_step_diff=884 HTTP/1.1
Host: 7a2d2c66d3.4b6563a120.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sat, 27 Jan 2024 21:09:13 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET s3t3d2y8.afcdn.net/library/159176/b335c74a4167146c8bf08ad8e20805297876334f.jpg
200 OK 19 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/159176/b335c74a4167146c8bf08ad8e20805297876334f.jpg
IP
ASN #60068 Datacamp Limited
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectafcdn.net
FingerprintC5:FB:4C:15:68:19:02:A7:CA:DC:53:AC:6D:AD:7E:D0:57:C2:D0:C9
ValidityMon, 18 Dec 2023 09:17:12 GMT - Sun, 17 Mar 2024 09:17:11 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "GIF resized on https://ezgif.com/resize", baseline, precision 8, 300x300, components 3
Hash 582ce0e301baccbef66694824d0c0ee8
b335c74a4167146c8bf08ad8e20805297876334f
4f178f01803483ed645a9e59487d5ed849e1d4a7ca1588d8f99657f986cea7b5
GET /library/159176/b335c74a4167146c8bf08ad8e20805297876334f.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:13 GMT
content-type: image/jpeg
content-length: 19259
last-modified: Tue, 19 Dec 2023 10:42:18 GMT
etag: "6581738a-4b3b"
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
expires: Sun, 22 Dec 2024 20:56:04 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-77-nzt: EwwBuUwJFAH3PdMZAAwBuUwKCQH3HUsQAAwB1GY4mQH3OwkEAA
x-77-nzt-ray: af585630217cb02ff970b565b22dde21
x-accel-expires: @1734900964
x-accel-date: 1704697276
x-77-cache: HIT
x-77-age: 3024789
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 1067805, 1692477
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
GET d3958af700.4b6563a120.com/in/show/?&cid=17507&session_id=b359aee7-b314-4035-9742-b1c78e48360a&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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.xz_MfBNZ_gizbfleQxz6ARxrhP8_LWXAdORQpoXILNA
201 Created 0 B URL GET HTTP/2 d3958af700.4b6563a120.com/in/show/?&cid=17507&session_id=b359aee7-b314-4035-9742-b1c78e48360a&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.eyJhY2NlcHRfbGFuZ3VhZ2UiOiJlbi1VUyxlbjtxPTAuNSIsImFkX3Bvc2l0aW9uIjoxLCJhZF90eXBlIjoibmF0aXZlIiwiYWRibG9jayI6MCwiYWlkIjoxMjAsImF1Y3Rpb25faWQiOjM4Nzc5OTM4NjYsImJyb3dzZXJfZmFtaWx5IjoiRmlyZWZveCIsImJyb3dzZXJfbmFtZSI6IkZpcmVmb3ggOTYiLCJjYW1wYWlnbl9pZCI6MTc1MDcsImNhcnJpZXIiOiItIiwiY2xpY2thZGlsbGFfaWQiOjAsImNsaWNrYWRpbGxhX3NwYWNlX2lkIjowLCJjb3VudHJ5IjoiTk8iLCJjcGMiOjAsImNwbSI6MC4wMDE4ODgwMDAwMDAwMDAwMDA2LCJjcmVhdGl2ZV9pZCI6ImQ2ZmRmNGMxNTNhMGE4ODI2YjMwYmY5ZWIyODk5MTIxIiwiY3JlYXRpdmVfdGl0bGUiOiJGbFxcdTAwZjhydCBvZyBTZXhtXFx1MDBmOHRlciBPc2xvIiwiZGV2aWNlX3RoZW1lIjoibGlnaHQiLCJlY3BtIjowLjAwMTIwNDczMjg1MjkzNTc4MjEsImV4dF9jYW1wYWlnbl9pZCI6NjMxOTAyOCwiZXh0X2NyZWF0aXZlX2lkIjoiOTA4MDk3NDIiLCJmcm9tX3N0b3JhZ2UiOjAsImlhdCI6MTcwNjM4OTc1My4zMzcyMDQ1LCJpY29uIjoiaHR0cHM6Ly9zM3QzZDJ5OC5hZmNkbi5uZXQvbGlicmFyeS8xNTkxNzYvYjMzNWM3NGE0MTY3MTQ2YzhiZjA4YWQ4ZTIwODA1Mjk3ODc2MzM0Zi5qcGciLCJpZnJhbWUiOmZhbHNlLCJpZnJhbWVfcmVkaXJlY3RfdXJsIjoiIiwiaWgiOjE0OSwiaXAiOiI5MS45MC40Mi4xNTQiLCJpcHY2IjoiIiwiaXNfY3BtIjoxLCJpc19kZWZhdWx0IjowLCJpdyI6MjY1LCJrZXl3b3JkcyI6Ik1JTEYsbWF0dXJlLEFkdWx0IiwibGFiZWwiOjEsIm1tIjowLCJvZmZlcl9sYWJlbF9pZHMiOiI0LDkwLDEwMSIsIm9zX2ZhbWlseSI6ImxpbnV4Iiwib3NfdHlwZSI6ImNvbXB1dGVyIiwicGFnZSI6Imh0dHBzOi8vY2hhdHVyZmxpeC5jYW0vcGVyZm9ybWVyL2JpbWF0dGsyMSIsInByaW1hcnlfcmVmZXJyZXIiOiIiLCJyZWFsX2JpZCI6MC4wMDEyMDQ3MzI4NTI5MzU3ODIxLCJyZWZyZXNoIjowLCJyZXNwb25zZV9zaXplIjowLCJybiI6MCwic2Vzc2lvbl9pZCI6ImIzNTlhZWU3LWIzMTQtNDAzNS05NzQyLWIxYzc4ZTQ4MzYwYSIsInNpdGUiOiJjaGF0dXJmbGl4LmNhbSIsInNpdGVfaWQiOjI1MDU1LCJzb3VyY2VfaWQiOjE5NDIzMjI4OTAsInNwb3RfaWQiOjI1MDU1LCJzcG90X3F1YWxpdHlfbGFiZWwiOiJocSIsInNwb3Rfc2l6ZSI6NCwic3ViIjoiYXVjdGlvbi1uYXRpdmUtcHJvZC0xIiwidGFnX2FiIjoiYSIsInRvcGljcyI6IiIsInRyYWNrX2lkIjoiYXVjdGlvbi1uYXRpdmUtcHJvZC0xIiwidXJsIjoiIiwidXNhZ2VfdHlwZSI6IkRDSCIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQ7IHJ2Ojk2LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvOTYuMCIsInVzZXJfZnAiOjAsInVzZXJfaWQiOjM3NDA4MzIwNTksInVzZXJfa2V5d29yZHMiOiIiLCJ1c2VyX3Njb3JlIjowLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fc291cmNlIjoiIiwidjIiOjAsInZlciI6IjYuMzIuMCIsInZlcnRpY2FsX2lkIjowfQ.xz_MfBNZ_gizbfleQxz6ARxrhP8_LWXAdORQpoXILNA
IP
ASN #24940 Hetzner Online GmbH
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject4b6563a120.com
FingerprintC1:83:47:8A:4B:16:D8:6B:F3:38:19:00:08:C1:E0:2E:08:32:36:51
ValidityTue, 23 Jan 2024 14:01:51 GMT - Mon, 22 Apr 2024 14:01:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /in/show/?&cid=17507&session_id=b359aee7-b314-4035-9742-b1c78e48360a&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.eyJhY2NlcHRfbGFuZ3VhZ2UiOiJlbi1VUyxlbjtxPTAuNSIsImFkX3Bvc2l0aW9uIjoxLCJhZF90eXBlIjoibmF0aXZlIiwiYWRibG9jayI6MCwiYWlkIjoxMjAsImF1Y3Rpb25faWQiOjM4Nzc5OTM4NjYsImJyb3dzZXJfZmFtaWx5IjoiRmlyZWZveCIsImJyb3dzZXJfbmFtZSI6IkZpcmVmb3ggOTYiLCJjYW1wYWlnbl9pZCI6MTc1MDcsImNhcnJpZXIiOiItIiwiY2xpY2thZGlsbGFfaWQiOjAsImNsaWNrYWRpbGxhX3NwYWNlX2lkIjowLCJjb3VudHJ5IjoiTk8iLCJjcGMiOjAsImNwbSI6MC4wMDE4ODgwMDAwMDAwMDAwMDA2LCJjcmVhdGl2ZV9pZCI6ImQ2ZmRmNGMxNTNhMGE4ODI2YjMwYmY5ZWIyODk5MTIxIiwiY3JlYXRpdmVfdGl0bGUiOiJGbFxcdTAwZjhydCBvZyBTZXhtXFx1MDBmOHRlciBPc2xvIiwiZGV2aWNlX3RoZW1lIjoibGlnaHQiLCJlY3BtIjowLjAwMTIwNDczMjg1MjkzNTc4MjEsImV4dF9jYW1wYWlnbl9pZCI6NjMxOTAyOCwiZXh0X2NyZWF0aXZlX2lkIjoiOTA4MDk3NDIiLCJmcm9tX3N0b3JhZ2UiOjAsImlhdCI6MTcwNjM4OTc1My4zMzcyMDQ1LCJpY29uIjoiaHR0cHM6Ly9zM3QzZDJ5OC5hZmNkbi5uZXQvbGlicmFyeS8xNTkxNzYvYjMzNWM3NGE0MTY3MTQ2YzhiZjA4YWQ4ZTIwODA1Mjk3ODc2MzM0Zi5qcGciLCJpZnJhbWUiOmZhbHNlLCJpZnJhbWVfcmVkaXJlY3RfdXJsIjoiIiwiaWgiOjE0OSwiaXAiOiI5MS45MC40Mi4xNTQiLCJpcHY2IjoiIiwiaXNfY3BtIjoxLCJpc19kZWZhdWx0IjowLCJpdyI6MjY1LCJrZXl3b3JkcyI6Ik1JTEYsbWF0dXJlLEFkdWx0IiwibGFiZWwiOjEsIm1tIjowLCJvZmZlcl9sYWJlbF9pZHMiOiI0LDkwLDEwMSIsIm9zX2ZhbWlseSI6ImxpbnV4Iiwib3NfdHlwZSI6ImNvbXB1dGVyIiwicGFnZSI6Imh0dHBzOi8vY2hhdHVyZmxpeC5jYW0vcGVyZm9ybWVyL2JpbWF0dGsyMSIsInByaW1hcnlfcmVmZXJyZXIiOiIiLCJyZWFsX2JpZCI6MC4wMDEyMDQ3MzI4NTI5MzU3ODIxLCJyZWZyZXNoIjowLCJyZXNwb25zZV9zaXplIjowLCJybiI6MCwic2Vzc2lvbl9pZCI6ImIzNTlhZWU3LWIzMTQtNDAzNS05NzQyLWIxYzc4ZTQ4MzYwYSIsInNpdGUiOiJjaGF0dXJmbGl4LmNhbSIsInNpdGVfaWQiOjI1MDU1LCJzb3VyY2VfaWQiOjE5NDIzMjI4OTAsInNwb3RfaWQiOjI1MDU1LCJzcG90X3F1YWxpdHlfbGFiZWwiOiJocSIsInNwb3Rfc2l6ZSI6NCwic3ViIjoiYXVjdGlvbi1uYXRpdmUtcHJvZC0xIiwidGFnX2FiIjoiYSIsInRvcGljcyI6IiIsInRyYWNrX2lkIjoiYXVjdGlvbi1uYXRpdmUtcHJvZC0xIiwidXJsIjoiIiwidXNhZ2VfdHlwZSI6IkRDSCIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQ7IHJ2Ojk2LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvOTYuMCIsInVzZXJfZnAiOjAsInVzZXJfaWQiOjM3NDA4MzIwNTksInVzZXJfa2V5d29yZHMiOiIiLCJ1c2VyX3Njb3JlIjowLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fc291cmNlIjoiIiwidjIiOjAsInZlciI6IjYuMzIuMCIsInZlcnRpY2FsX2lkIjowfQ.xz_MfBNZ_gizbfleQxz6ARxrhP8_LWXAdORQpoXILNA HTTP/1.1
Host: d3958af700.4b6563a120.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 201 Created
server: nginx/1.16.0
date: Sat, 27 Jan 2024 21:05:50 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET s.optnx.com/cimp.php?data=TVRjd05qTTRPVGMxTW53NE9XTmxORFkwTVdJeVpEVm1NbUZtTWpZeFpXTmtZalJrTWpreU1qVm1aZy0tfC9saWJyYXJ5LzE1OTE3Ni9iMzM1Yzc0YTQxNjcxNDZjOGJmMDhhZDhlMjA4MDUyOTc4NzYzMzRmLmpwZ3xodHRwc3w5MS45MC40Mi4xNTR8Tk9SfDQxfG15YmlkLmlvfDE1OTE3Nnw1OTk5MTh8MTAxMTYzNnw1MTczMTcyfDUwOHw2MzE5MDI4fDkwODA5NzQyfDE1fDN8MHwwfDI1MzQ0fDB8MC4yMzZ8ODB8VVNEfFVTRHwxfDF8MzR8fDF8Tk9SfHwyMHw4fDF8fDM3NDA4MzIwNTl8NThiYmM4NDgxNjRlYWIwZGY0MDI3OTdlZDI1Njc0ZGF8MXwwfGNoYXR1cmZsaXguY2FtfDB8MHwwfDAuMDJ8MXwwfGV4Y2hhbmdlX25hdGl2ZV9hZHwwfDB8MzE0MzI0MnwtMXwwfDMxNDMyNDR8fHw0fDE0NDB8fDB8MHwwfDB8MHwwfDF8MHx8OHwxfE1vemlsbGEvNS4wIChYMTE7IExpbnV4IHg4Nl82NDsgcnY6OTYuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC85Ni4wfHwyNHwyMnwwfDF8MHx8fE9LfDUzMjZkZmI4NGM0NjRlNDdiYTVmZTA0Y2I1NDM0ZTI1
302 Found 0 B URL GET HTTP/1.1 s.optnx.com/cimp.php?data=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
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectoptnx.com
Fingerprint04:F2:57:5B:67:63:65:4F:C7:2C:9F:27:0E:EE:DF:B9:6A:15:90:90
ValidityMon, 18 Dec 2023 09:32:35 GMT - Sun, 17 Mar 2024 09:32:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cimp.php?data=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 HTTP/1.1
Host: s.optnx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2265b570f974d6b7.830106711322569037%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 27 Jan 2024 21:09:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2265b570f974d6b7.830106711322569037%22%3B%7D; expires=Mon, 26 Jan 2026 21:09:13 GMT; path=; domain=.optnx.com; Secure; SameSite=none
Location: https://s3t3d2y8.afcdn.net/library/159176/b335c74a4167146c8bf08ad8e20805297876334f.jpg
Accept-CH:
X-Robots-Tag: noindex, follow
GET d3958af700.4b6563a120.com/in/show/?&cid=13327&session_id=b359aee7-b314-4035-9742-b1c78e48360a&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.eyJhY2NlcHRfbGFuZ3VhZ2UiOiJlbi1VUyxlbjtxPTAuNSIsImFkX3Bvc2l0aW9uIjoyLCJhZF90eXBlIjoibmF0aXZlIiwiYWRibG9jayI6MCwiYWlkIjowLCJhdWN0aW9uX2lkIjozODc3OTkzODY2LCJicm93c2VyX2ZhbWlseSI6IkZpcmVmb3giLCJicm93c2VyX25hbWUiOiJGaXJlZm94IDk2IiwiY2FtcGFpZ25faWQiOjEzMzI3LCJjYXJyaWVyIjoiLSIsImNsaWNrYWRpbGxhX2lkIjowLCJjbGlja2FkaWxsYV9zcGFjZV9pZCI6MCwiY291bnRyeSI6Ik5PIiwiY3BjIjowLCJjcG0iOjAsImNyZWF0aXZlX2lkIjoiYWQxNjAxNTI4OTIxZmNlODRkMTY3ZjgxMDU2MjMyYjYiLCJjcmVhdGl2ZV90aXRsZSI6IkknbGwgc2hvdyB5b3UgaWYgeW91IHJlYWxseSB3YW50IHRvIHNlZS4uLiIsImRldmljZV90aGVtZSI6ImxpZ2h0IiwiZWNwbSI6MCwiZXh0X2NhbXBhaWduX2lkIjowLCJleHRfY3JlYXRpdmVfaWQiOiIiLCJmcm9tX3N0b3JhZ2UiOjAsImlhdCI6MTcwNjM4OTc1My4zMzc1NjQsImljb24iOiJodHRwczovL3N0YXRpYy5ib29rbXNnLmNvbS9jcmVhdGl2ZXMvbnR2L2FkMS5qcGciLCJpZnJhbWUiOmZhbHNlLCJpZnJhbWVfcmVkaXJlY3RfdXJsIjoiIiwiaWgiOjE0OSwiaXAiOiI5MS45MC40Mi4xNTQiLCJpcHY2IjoiIiwiaXNfY3BtIjowLCJpc19kZWZhdWx0IjoxLCJpdyI6MjY1LCJrZXl3b3JkcyI6Ik1JTEYsbWF0dXJlLEFkdWx0IiwibGFiZWwiOjEsIm1tIjowLCJvZmZlcl9sYWJlbF9pZHMiOiIiLCJvc19mYW1pbHkiOiJsaW51eCIsIm9zX3R5cGUiOiJjb21wdXRlciIsInBhZ2UiOiJodHRwczovL2NoYXR1cmZsaXguY2FtL3BlcmZvcm1lci9iaW1hdHRrMjEiLCJwcmltYXJ5X3JlZmVycmVyIjoiIiwicmVhbF9iaWQiOjAsInJlZnJlc2giOjAsInJlc3BvbnNlX3NpemUiOjAsInJuIjowLCJzZXNzaW9uX2lkIjoiYjM1OWFlZTctYjMxNC00MDM1LTk3NDItYjFjNzhlNDgzNjBhIiwic2l0ZSI6ImNoYXR1cmZsaXguY2FtIiwic2l0ZV9pZCI6MjUwNTUsInNvdXJjZV9pZCI6MTk0MjMyMjg5MCwic3BvdF9pZCI6MjUwNTUsInNwb3RfcXVhbGl0eV9sYWJlbCI6ImhxIiwic3BvdF9zaXplIjo0LCJzdWIiOiJhdWN0aW9uLW5hdGl2ZS1wcm9kLTEiLCJ0YWdfYWIiOiJhIiwidG9waWNzIjoiIiwidHJhY2tfaWQiOiJhdWN0aW9uLW5hdGl2ZS1wcm9kLTEiLCJ1cmwiOiIiLCJ1c2FnZV90eXBlIjoiRENIIiwidXNlcl9hZ2VudCI6Ik1vemlsbGEvNS4wIChYMTE7IExpbnV4IHg4Nl82NDsgcnY6OTYuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC85Ni4wIiwidXNlcl9mcCI6MCwidXNlcl9pZCI6Mzc0MDgzMjA1OSwidXNlcl9rZXl3b3JkcyI6IiIsInVzZXJfc2NvcmUiOjAsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9zb3VyY2UiOiIiLCJ2MiI6MCwidmVyIjoiNi4zMi4wIiwidmVydGljYWxfaWQiOjB9.vvMR3QayoGBO0YeqCPvYNxWTUZLoN8-DmCuI_pXgTN8
201 Created 0 B URL GET HTTP/2 d3958af700.4b6563a120.com/in/show/?&cid=13327&session_id=b359aee7-b314-4035-9742-b1c78e48360a&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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.vvMR3QayoGBO0YeqCPvYNxWTUZLoN8-DmCuI_pXgTN8
IP
ASN #24940 Hetzner Online GmbH
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject4b6563a120.com
FingerprintC1:83:47:8A:4B:16:D8:6B:F3:38:19:00:08:C1:E0:2E:08:32:36:51
ValidityTue, 23 Jan 2024 14:01:51 GMT - Mon, 22 Apr 2024 14:01:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /in/show/?&cid=13327&session_id=b359aee7-b314-4035-9742-b1c78e48360a&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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.vvMR3QayoGBO0YeqCPvYNxWTUZLoN8-DmCuI_pXgTN8 HTTP/1.1
Host: d3958af700.4b6563a120.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 201 Created
server: nginx/1.16.0
date: Sat, 27 Jan 2024 21:05:50 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET d3958af700.4b6563a120.com/in/show/?&cid=13327&session_id=b359aee7-b314-4035-9742-b1c78e48360a&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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.sCw4ZjjVPhej_Rax2N1wRaO1jDrZgFrqadW0UYmPub8
201 Created 0 B URL GET HTTP/2 d3958af700.4b6563a120.com/in/show/?&cid=13327&session_id=b359aee7-b314-4035-9742-b1c78e48360a&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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.sCw4ZjjVPhej_Rax2N1wRaO1jDrZgFrqadW0UYmPub8
IP
ASN #24940 Hetzner Online GmbH
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject4b6563a120.com
FingerprintC1:83:47:8A:4B:16:D8:6B:F3:38:19:00:08:C1:E0:2E:08:32:36:51
ValidityTue, 23 Jan 2024 14:01:51 GMT - Mon, 22 Apr 2024 14:01:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /in/show/?&cid=13327&session_id=b359aee7-b314-4035-9742-b1c78e48360a&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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.sCw4ZjjVPhej_Rax2N1wRaO1jDrZgFrqadW0UYmPub8 HTTP/1.1
Host: d3958af700.4b6563a120.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 201 Created
server: nginx/1.16.0
date: Sat, 27 Jan 2024 21:05:50 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET d3958af700.4b6563a120.com/in/show/?&cid=13327&session_id=b359aee7-b314-4035-9742-b1c78e48360a&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.eyJhY2NlcHRfbGFuZ3VhZ2UiOiJlbi1VUyxlbjtxPTAuNSIsImFkX3Bvc2l0aW9uIjo0LCJhZF90eXBlIjoibmF0aXZlIiwiYWRibG9jayI6MCwiYWlkIjowLCJhdWN0aW9uX2lkIjozODc3OTkzODY2LCJicm93c2VyX2ZhbWlseSI6IkZpcmVmb3giLCJicm93c2VyX25hbWUiOiJGaXJlZm94IDk2IiwiY2FtcGFpZ25faWQiOjEzMzI3LCJjYXJyaWVyIjoiLSIsImNsaWNrYWRpbGxhX2lkIjowLCJjbGlja2FkaWxsYV9zcGFjZV9pZCI6MCwiY291bnRyeSI6Ik5PIiwiY3BjIjowLCJjcG0iOjAsImNyZWF0aXZlX2lkIjoiMjc1ZDFiMWI5M2I0MWIxZDBmYjVkMjk1NzU2Mzk4OTEiLCJjcmVhdGl2ZV90aXRsZSI6IkhpLCBtZWV0IGZvciBzZXg_IPCfkosiLCJkZXZpY2VfdGhlbWUiOiJsaWdodCIsImVjcG0iOjAsImV4dF9jYW1wYWlnbl9pZCI6MCwiZXh0X2NyZWF0aXZlX2lkIjoiIiwiZnJvbV9zdG9yYWdlIjowLCJpYXQiOjE3MDYzODk3NTMuMzM5OTUwMywiaWNvbiI6Imh0dHBzOi8vc3RhdGljLmJvb2ttc2cuY29tL2NyZWF0aXZlcy9udHYvYWQzLmpwZyIsImlmcmFtZSI6ZmFsc2UsImlmcmFtZV9yZWRpcmVjdF91cmwiOiIiLCJpaCI6MTQ5LCJpcCI6IjkxLjkwLjQyLjE1NCIsImlwdjYiOiIiLCJpc19jcG0iOjAsImlzX2RlZmF1bHQiOjEsIml3IjoyNjUsImtleXdvcmRzIjoiTUlMRixtYXR1cmUsQWR1bHQiLCJsYWJlbCI6MSwibW0iOjAsIm9mZmVyX2xhYmVsX2lkcyI6IiIsIm9zX2ZhbWlseSI6ImxpbnV4Iiwib3NfdHlwZSI6ImNvbXB1dGVyIiwicGFnZSI6Imh0dHBzOi8vY2hhdHVyZmxpeC5jYW0vcGVyZm9ybWVyL2JpbWF0dGsyMSIsInByaW1hcnlfcmVmZXJyZXIiOiIiLCJyZWFsX2JpZCI6MCwicmVmcmVzaCI6MCwicmVzcG9uc2Vfc2l6ZSI6MCwicm4iOjAsInNlc3Npb25faWQiOiJiMzU5YWVlNy1iMzE0LTQwMzUtOTc0Mi1iMWM3OGU0ODM2MGEiLCJzaXRlIjoiY2hhdHVyZmxpeC5jYW0iLCJzaXRlX2lkIjoyNTA1NSwic291cmNlX2lkIjoxOTQyMzIyODkwLCJzcG90X2lkIjoyNTA1NSwic3BvdF9xdWFsaXR5X2xhYmVsIjoiaHEiLCJzcG90X3NpemUiOjQsInN1YiI6ImF1Y3Rpb24tbmF0aXZlLXByb2QtMSIsInRhZ19hYiI6ImEiLCJ0b3BpY3MiOiIiLCJ0cmFja19pZCI6ImF1Y3Rpb24tbmF0aXZlLXByb2QtMSIsInVybCI6IiIsInVzYWdlX3R5cGUiOiJEQ0giLCJ1c2VyX2FnZW50IjoiTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo5Ni4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94Lzk2LjAiLCJ1c2VyX2ZwIjowLCJ1c2VyX2lkIjozNzQwODMyMDU5LCJ1c2VyX2tleXdvcmRzIjoiIiwidXNlcl9zY29yZSI6MCwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX3NvdXJjZSI6IiIsInYyIjowLCJ2ZXIiOiI2LjMyLjAiLCJ2ZXJ0aWNhbF9pZCI6MH0.W4ptQuiJNOkMGawDSpgnZ5Eo-LRdEmrXvaqj0VEBCuU
201 Created 0 B URL GET HTTP/2 d3958af700.4b6563a120.com/in/show/?&cid=13327&session_id=b359aee7-b314-4035-9742-b1c78e48360a&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.eyJhY2NlcHRfbGFuZ3VhZ2UiOiJlbi1VUyxlbjtxPTAuNSIsImFkX3Bvc2l0aW9uIjo0LCJhZF90eXBlIjoibmF0aXZlIiwiYWRibG9jayI6MCwiYWlkIjowLCJhdWN0aW9uX2lkIjozODc3OTkzODY2LCJicm93c2VyX2ZhbWlseSI6IkZpcmVmb3giLCJicm93c2VyX25hbWUiOiJGaXJlZm94IDk2IiwiY2FtcGFpZ25faWQiOjEzMzI3LCJjYXJyaWVyIjoiLSIsImNsaWNrYWRpbGxhX2lkIjowLCJjbGlja2FkaWxsYV9zcGFjZV9pZCI6MCwiY291bnRyeSI6Ik5PIiwiY3BjIjowLCJjcG0iOjAsImNyZWF0aXZlX2lkIjoiMjc1ZDFiMWI5M2I0MWIxZDBmYjVkMjk1NzU2Mzk4OTEiLCJjcmVhdGl2ZV90aXRsZSI6IkhpLCBtZWV0IGZvciBzZXg_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.W4ptQuiJNOkMGawDSpgnZ5Eo-LRdEmrXvaqj0VEBCuU
IP
ASN #24940 Hetzner Online GmbH
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject4b6563a120.com
FingerprintC1:83:47:8A:4B:16:D8:6B:F3:38:19:00:08:C1:E0:2E:08:32:36:51
ValidityTue, 23 Jan 2024 14:01:51 GMT - Mon, 22 Apr 2024 14:01:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /in/show/?&cid=13327&session_id=b359aee7-b314-4035-9742-b1c78e48360a&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.eyJhY2NlcHRfbGFuZ3VhZ2UiOiJlbi1VUyxlbjtxPTAuNSIsImFkX3Bvc2l0aW9uIjo0LCJhZF90eXBlIjoibmF0aXZlIiwiYWRibG9jayI6MCwiYWlkIjowLCJhdWN0aW9uX2lkIjozODc3OTkzODY2LCJicm93c2VyX2ZhbWlseSI6IkZpcmVmb3giLCJicm93c2VyX25hbWUiOiJGaXJlZm94IDk2IiwiY2FtcGFpZ25faWQiOjEzMzI3LCJjYXJyaWVyIjoiLSIsImNsaWNrYWRpbGxhX2lkIjowLCJjbGlja2FkaWxsYV9zcGFjZV9pZCI6MCwiY291bnRyeSI6Ik5PIiwiY3BjIjowLCJjcG0iOjAsImNyZWF0aXZlX2lkIjoiMjc1ZDFiMWI5M2I0MWIxZDBmYjVkMjk1NzU2Mzk4OTEiLCJjcmVhdGl2ZV90aXRsZSI6IkhpLCBtZWV0IGZvciBzZXg_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.W4ptQuiJNOkMGawDSpgnZ5Eo-LRdEmrXvaqj0VEBCuU HTTP/1.1
Host: d3958af700.4b6563a120.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 201 Created
server: nginx/1.16.0
date: Sat, 27 Jan 2024 21:05:50 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET s3t3d2y8.afcdn.net/library/159176/b335c74a4167146c8bf08ad8e20805297876334f.jpg
200 OK 19 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/159176/b335c74a4167146c8bf08ad8e20805297876334f.jpg
IP
ASN #60068 Datacamp Limited
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectafcdn.net
FingerprintC5:FB:4C:15:68:19:02:A7:CA:DC:53:AC:6D:AD:7E:D0:57:C2:D0:C9
ValidityMon, 18 Dec 2023 09:17:12 GMT - Sun, 17 Mar 2024 09:17:11 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "GIF resized on https://ezgif.com/resize", baseline, precision 8, 300x300, components 3
Hash 582ce0e301baccbef66694824d0c0ee8
b335c74a4167146c8bf08ad8e20805297876334f
4f178f01803483ed645a9e59487d5ed849e1d4a7ca1588d8f99657f986cea7b5
GET /library/159176/b335c74a4167146c8bf08ad8e20805297876334f.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturflix.cam/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:13 GMT
content-type: image/jpeg
content-length: 19259
last-modified: Tue, 19 Dec 2023 10:42:18 GMT
etag: "6581738a-4b3b"
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
expires: Sun, 22 Dec 2024 20:56:04 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-77-nzt: EwwBuUwJFAH3PdMZAAwBuUwKCQH3HUsQAAwB1GY4mQH3OwkEAA
x-77-nzt-ray: af585630217cb02ff970b565d8830923
x-accel-expires: @1734900964
x-accel-date: 1704697276
x-77-cache: HIT
x-77-age: 3024789
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 1067805, 1692477
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
GET static.bookmsg.com/creatives/ntv/ad1.jpg
200 OK 12 kB URL GET HTTP/2 static.bookmsg.com/creatives/ntv/ad1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectstatic.bookmsg.com
Fingerprint82:9C:46:43:2E:61:6B:71:94:BA:2E:7C:BC:A1:60:20:22:D3:FC:F6
ValidityThu, 07 Dec 2023 12:30:34 GMT - Wed, 06 Mar 2024 12:30:33 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 492x328, components 3
Hash feea8ead3316a5eee42cdf3290f5e0e9
201f2f966288f8f923b58088afa61731ed102570
0060dc948eb7cbe01bfd041ec51c2e7937dca04062118306b965147be7b835a6
GET /creatives/ntv/ad1.jpg HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:13 GMT
content-type: image/jpeg
content-length: 12016
server: nginx/1.24.0
last-modified: Fri, 08 Dec 2023 10:18:03 GMT
etag: "6572ed5b-2ef0"
expires: Sun, 26 Jan 2025 21:09:13 GMT
cache-control: max-age=31536000
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET static.bookmsg.com/creatives/ntv/ad3.jpg
200 OK 24 kB URL GET HTTP/2 static.bookmsg.com/creatives/ntv/ad3.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectstatic.bookmsg.com
Fingerprint82:9C:46:43:2E:61:6B:71:94:BA:2E:7C:BC:A1:60:20:22:D3:FC:F6
ValidityThu, 07 Dec 2023 12:30:34 GMT - Wed, 06 Mar 2024 12:30:33 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 492x328, components 3
Hash ac767dfe96bf84db57b05e2cf8171620
23a7357d05a14e0cedb064824700b6cf0d49b80f
d8a4bc1d10df760d8bfc4e8d85af617b2f535c57db91a62f21eb060f3aa79154
GET /creatives/ntv/ad3.jpg HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:13 GMT
content-type: image/jpeg
content-length: 24008
server: nginx/1.24.0
last-modified: Fri, 08 Dec 2023 10:18:03 GMT
etag: "6572ed5b-5dc8"
expires: Sun, 26 Jan 2025 21:09:13 GMT
cache-control: max-age=31536000
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET static.bookmsg.com/creatives/SG/SG_50dbf0cae89fd14f34b6cb7b8301e683e25e0adf.webp
200 OK 4.6 kB URL GET HTTP/2 static.bookmsg.com/creatives/SG/SG_50dbf0cae89fd14f34b6cb7b8301e683e25e0adf.webp
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectstatic.bookmsg.com
Fingerprint82:9C:46:43:2E:61:6B:71:94:BA:2E:7C:BC:A1:60:20:22:D3:FC:F6
ValidityThu, 07 Dec 2023 12:30:34 GMT - Wed, 06 Mar 2024 12:30:33 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 360x240, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 5117b911fc2a299c2612d4b01e5688e6
401246f0319067904d5ed7175f619d5763e7e6bb
361540ac8047f9e65b9db4966125eb66d084de3057b5e1c48942c0e1aebe2a44
GET /creatives/SG/SG_50dbf0cae89fd14f34b6cb7b8301e683e25e0adf.webp HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:13 GMT
content-type: image/webp
content-length: 4616
server: nginx/1.24.0
last-modified: Fri, 08 Dec 2023 10:18:03 GMT
etag: "6572ed5b-1208"
expires: Sun, 26 Jan 2025 21:09:13 GMT
cache-control: max-age=31536000
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET static.bookmsg.com/creatives/SG/SG_50dbf0cae89fd14f34b6cb7b8301e683e25e0adf_icon.webp?pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&mlf=1&mlc=1&st=0.03&cpa=0bbc6eba-1eb1-484c-baf0-a622d29858af&prev_step_diff=884
200 OK 1.1 kB URL GET HTTP/2 static.bookmsg.com/creatives/SG/SG_50dbf0cae89fd14f34b6cb7b8301e683e25e0adf_icon.webp?pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&mlf=1&mlc=1&st=0.03&cpa=0bbc6eba-1eb1-484c-baf0-a622d29858af&prev_step_diff=884
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectstatic.bookmsg.com
Fingerprint82:9C:46:43:2E:61:6B:71:94:BA:2E:7C:BC:A1:60:20:22:D3:FC:F6
ValidityThu, 07 Dec 2023 12:30:34 GMT - Wed, 06 Mar 2024 12:30:33 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 0d8658fffe797e7ba8f20c52ab367a97
cb0bd2b16388846dfa0b3f6da917d95b5abd7f68
debd9647eddaaacaba09b81371fd2e331f952904d7c7f635955b6e213e6a4ee4
GET /creatives/SG/SG_50dbf0cae89fd14f34b6cb7b8301e683e25e0adf_icon.webp?pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&mlf=1&mlc=1&st=0.03&cpa=0bbc6eba-1eb1-484c-baf0-a622d29858af&prev_step_diff=884 HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:13 GMT
content-type: image/webp
content-length: 1052
server: nginx/1.24.0
last-modified: Fri, 08 Dec 2023 10:18:03 GMT
etag: "6572ed5b-41c"
expires: Sun, 26 Jan 2025 21:09:13 GMT
cache-control: max-age=31536000
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET cdn.amnew.net/79841be93dfd180243b1b7c69d931d62.jpeg
200 OK 30 kB URL GET HTTP/2 cdn.amnew.net/79841be93dfd180243b1b7c69d931d62.jpeg
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject*.amnew.net
FingerprintA2:91:85:8C:E7:96:90:DB:29:5F:49:4C:4E:38:11:B0:27:9D:CB:03
ValidityWed, 03 Jan 2024 14:17:38 GMT - Tue, 02 Apr 2024 14:17:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 492x328, components 3
Hash f539144668bfbc969a823eef42cdb551
5f665a9a1b9af979cf35430662944fa1b2b1b017
0410d7dc672d8b07598c267aa86669e6059da7bc20366ad204dadef9616b2b85
GET /79841be93dfd180243b1b7c69d931d62.jpeg HTTP/1.1
Host: cdn.amnew.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Sat, 27 Jan 2024 21:09:13 GMT
content-type: image/jpeg
content-length: 30413
last-modified: Thu, 05 Oct 2023 11:02:55 GMT
etag: "651e97df-76cd"
expires: Thu, 01 Feb 2024 15:38:03 GMT
cache-control: max-age=1209600
accept-ranges: bytes
X-Firefox-Spdy: h2
GET static.bookmsg.com/creatives/ntv/ad2.jpg
200 OK 15 kB URL GET HTTP/2 static.bookmsg.com/creatives/ntv/ad2.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectstatic.bookmsg.com
Fingerprint82:9C:46:43:2E:61:6B:71:94:BA:2E:7C:BC:A1:60:20:22:D3:FC:F6
ValidityThu, 07 Dec 2023 12:30:34 GMT - Wed, 06 Mar 2024 12:30:33 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 492x328, components 3
Hash e2c694dbd29c54b70769a53d41beac83
913628375c2d932cfdf197a5b1ae698142710db8
6813d8b4e07dac15291c96f8a47efd089f540aa88bead4bf90094eecd9e90db6
GET /creatives/ntv/ad2.jpg HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:13 GMT
content-type: image/jpeg
content-length: 14556
server: nginx/1.24.0
last-modified: Fri, 08 Dec 2023 10:18:03 GMT
etag: "6572ed5b-38dc"
expires: Sun, 26 Jan 2025 21:09:13 GMT
cache-control: max-age=31536000
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET s3t3d2y8.afcdn.net/library/159176/b335c74a4167146c8bf08ad8e20805297876334f.jpg
200 OK 19 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/159176/b335c74a4167146c8bf08ad8e20805297876334f.jpg
IP
ASN #60068 Datacamp Limited
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectafcdn.net
FingerprintC5:FB:4C:15:68:19:02:A7:CA:DC:53:AC:6D:AD:7E:D0:57:C2:D0:C9
ValidityMon, 18 Dec 2023 09:17:12 GMT - Sun, 17 Mar 2024 09:17:11 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "GIF resized on https://ezgif.com/resize", baseline, precision 8, 300x300, components 3
Hash 582ce0e301baccbef66694824d0c0ee8
b335c74a4167146c8bf08ad8e20805297876334f
4f178f01803483ed645a9e59487d5ed849e1d4a7ca1588d8f99657f986cea7b5
GET /library/159176/b335c74a4167146c8bf08ad8e20805297876334f.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturflix.cam/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:13 GMT
content-type: image/jpeg
content-length: 19259
last-modified: Tue, 19 Dec 2023 10:42:18 GMT
etag: "6581738a-4b3b"
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
expires: Sun, 22 Dec 2024 20:56:04 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-77-nzt: EwwBuUwJFAH3PdMZAAwBuUwKCQH3HUsQAAwB1GY4mQH3OwkEAA
x-77-nzt-ray: af585630217cb02ff970b565fafd252d
x-accel-expires: @1734900964
x-accel-date: 1704697276
x-77-cache: HIT
x-77-age: 3024789
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 1067805, 1692477
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
GET d3958af700.4b6563a120.com/in/viewtrack?spot_size=4&spot_id=25053&subid=1919030846&label=1&session_id=69788e31-b9c8-40d0-9996-c6a81c915382&cpa=81bb2164-9c3a-4c9a-9706-01054e891ced&ver=6.32.0&adblock=0&ad_type=native&iw=265&ih=149&iframe=0&mm=0&pr=&user_keywords=&tag_ab=a&user_fp=0&v2=0&page=https%3A//chaturflix.cam/performer/bimattk21&device_theme=light&page_keywords=bimattk21,Cam,Recordings,Chaturflix,The,Cam,Archive,Cam,Chaturflix,Chaturflix,bimattk21,bimattk21,recordings,bimattk21,cam,shows,Recurbate,Recordbate,Recturbate,Recurdbate,Recordubate,Recurdubate,webcam,adult,cam,adult,performer,camgirls,webcam,tube,free,cam,videos,XXX,tube,camwhores,cam,show,anicka_best,Watch,Cam,amature,and,hot,model,bimattk21,recorded,videos,on,Chaturflix,The,Cam,Archive,Discover,live,Cam,webcam,brodcasts,making,by,your,lovely,performers.&publisher_keywords=&user=[object%20Object]&is_publisher=true&topics=&blocked_verticals=&utm_source=&utm_medium=&utm_campaign=&utm_content=&campaign=&vb=1&auction_id=3193261805
200 OK 0 B URL GET HTTP/2 d3958af700.4b6563a120.com/in/viewtrack?spot_size=4&spot_id=25053&subid=1919030846&label=1&session_id=69788e31-b9c8-40d0-9996-c6a81c915382&cpa=81bb2164-9c3a-4c9a-9706-01054e891ced&ver=6.32.0&adblock=0&ad_type=native&iw=265&ih=149&iframe=0&mm=0&pr=&user_keywords=&tag_ab=a&user_fp=0&v2=0&page=https%3A//chaturflix.cam/performer/bimattk21&device_theme=light&page_keywords=bimattk21,Cam,Recordings,Chaturflix,The,Cam,Archive,Cam,Chaturflix,Chaturflix,bimattk21,bimattk21,recordings,bimattk21,cam,shows,Recurbate,Recordbate,Recturbate,Recurdbate,Recordubate,Recurdubate,webcam,adult,cam,adult,performer,camgirls,webcam,tube,free,cam,videos,XXX,tube,camwhores,cam,show,anicka_best,Watch,Cam,amature,and,hot,model,bimattk21,recorded,videos,on,Chaturflix,The,Cam,Archive,Discover,live,Cam,webcam,brodcasts,making,by,your,lovely,performers.&publisher_keywords=&user=[object%20Object]&is_publisher=true&topics=&blocked_verticals=&utm_source=&utm_medium=&utm_campaign=&utm_content=&campaign=&vb=1&auction_id=3193261805
IP
ASN #24940 Hetzner Online GmbH
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject4b6563a120.com
FingerprintC1:83:47:8A:4B:16:D8:6B:F3:38:19:00:08:C1:E0:2E:08:32:36:51
ValidityTue, 23 Jan 2024 14:01:51 GMT - Mon, 22 Apr 2024 14:01:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /in/viewtrack?spot_size=4&spot_id=25053&subid=1919030846&label=1&session_id=69788e31-b9c8-40d0-9996-c6a81c915382&cpa=81bb2164-9c3a-4c9a-9706-01054e891ced&ver=6.32.0&adblock=0&ad_type=native&iw=265&ih=149&iframe=0&mm=0&pr=&user_keywords=&tag_ab=a&user_fp=0&v2=0&page=https%3A//chaturflix.cam/performer/bimattk21&device_theme=light&page_keywords=bimattk21,Cam,Recordings,Chaturflix,The,Cam,Archive,Cam,Chaturflix,Chaturflix,bimattk21,bimattk21,recordings,bimattk21,cam,shows,Recurbate,Recordbate,Recturbate,Recurdbate,Recordubate,Recurdubate,webcam,adult,cam,adult,performer,camgirls,webcam,tube,free,cam,videos,XXX,tube,camwhores,cam,show,anicka_best,Watch,Cam,amature,and,hot,model,bimattk21,recorded,videos,on,Chaturflix,The,Cam,Archive,Discover,live,Cam,webcam,brodcasts,making,by,your,lovely,performers.&publisher_keywords=&user=[object%20Object]&is_publisher=true&topics=&blocked_verticals=&utm_source=&utm_medium=&utm_campaign=&utm_content=&campaign=&vb=1&auction_id=3193261805 HTTP/1.1
Host: d3958af700.4b6563a120.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.0
date: Sat, 27 Jan 2024 21:05:50 GMT
content-type: application/json; charset=utf-8
content-length: 0
vary: Origin
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET d3958af700.4b6563a120.com/in/viewtrack?spot_size=4&spot_id=25055&subid=1942322890&label=1&session_id=b359aee7-b314-4035-9742-b1c78e48360a&cpa=9bc4c178-5866-4a71-9872-58cfa73faff4&ver=6.32.0&adblock=0&ad_type=native&iw=265&ih=149&iframe=0&mm=0&pr=&user_keywords=&tag_ab=a&user_fp=0&v2=0&page=https%3A//chaturflix.cam/performer/bimattk21&device_theme=light&page_keywords=bimattk21,Cam,Recordings,Chaturflix,The,Cam,Archive,Cam,Chaturflix,Chaturflix,bimattk21,bimattk21,recordings,bimattk21,cam,shows,Recurbate,Recordbate,Recturbate,Recurdbate,Recordubate,Recurdubate,webcam,adult,cam,adult,performer,camgirls,webcam,tube,free,cam,videos,XXX,tube,camwhores,cam,show,anicka_best,Watch,Cam,amature,and,hot,model,bimattk21,recorded,videos,on,Chaturflix,The,Cam,Archive,Discover,live,Cam,webcam,brodcasts,making,by,your,lovely,performers.&publisher_keywords=&user=[object%20Object]&is_publisher=true&topics=&blocked_verticals=&utm_source=&utm_medium=&utm_campaign=&utm_content=&campaign=&vb=1&auction_id=3877993866
200 OK 0 B URL GET HTTP/2 d3958af700.4b6563a120.com/in/viewtrack?spot_size=4&spot_id=25055&subid=1942322890&label=1&session_id=b359aee7-b314-4035-9742-b1c78e48360a&cpa=9bc4c178-5866-4a71-9872-58cfa73faff4&ver=6.32.0&adblock=0&ad_type=native&iw=265&ih=149&iframe=0&mm=0&pr=&user_keywords=&tag_ab=a&user_fp=0&v2=0&page=https%3A//chaturflix.cam/performer/bimattk21&device_theme=light&page_keywords=bimattk21,Cam,Recordings,Chaturflix,The,Cam,Archive,Cam,Chaturflix,Chaturflix,bimattk21,bimattk21,recordings,bimattk21,cam,shows,Recurbate,Recordbate,Recturbate,Recurdbate,Recordubate,Recurdubate,webcam,adult,cam,adult,performer,camgirls,webcam,tube,free,cam,videos,XXX,tube,camwhores,cam,show,anicka_best,Watch,Cam,amature,and,hot,model,bimattk21,recorded,videos,on,Chaturflix,The,Cam,Archive,Discover,live,Cam,webcam,brodcasts,making,by,your,lovely,performers.&publisher_keywords=&user=[object%20Object]&is_publisher=true&topics=&blocked_verticals=&utm_source=&utm_medium=&utm_campaign=&utm_content=&campaign=&vb=1&auction_id=3877993866
IP
ASN #24940 Hetzner Online GmbH
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject4b6563a120.com
FingerprintC1:83:47:8A:4B:16:D8:6B:F3:38:19:00:08:C1:E0:2E:08:32:36:51
ValidityTue, 23 Jan 2024 14:01:51 GMT - Mon, 22 Apr 2024 14:01:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /in/viewtrack?spot_size=4&spot_id=25055&subid=1942322890&label=1&session_id=b359aee7-b314-4035-9742-b1c78e48360a&cpa=9bc4c178-5866-4a71-9872-58cfa73faff4&ver=6.32.0&adblock=0&ad_type=native&iw=265&ih=149&iframe=0&mm=0&pr=&user_keywords=&tag_ab=a&user_fp=0&v2=0&page=https%3A//chaturflix.cam/performer/bimattk21&device_theme=light&page_keywords=bimattk21,Cam,Recordings,Chaturflix,The,Cam,Archive,Cam,Chaturflix,Chaturflix,bimattk21,bimattk21,recordings,bimattk21,cam,shows,Recurbate,Recordbate,Recturbate,Recurdbate,Recordubate,Recurdubate,webcam,adult,cam,adult,performer,camgirls,webcam,tube,free,cam,videos,XXX,tube,camwhores,cam,show,anicka_best,Watch,Cam,amature,and,hot,model,bimattk21,recorded,videos,on,Chaturflix,The,Cam,Archive,Discover,live,Cam,webcam,brodcasts,making,by,your,lovely,performers.&publisher_keywords=&user=[object%20Object]&is_publisher=true&topics=&blocked_verticals=&utm_source=&utm_medium=&utm_campaign=&utm_content=&campaign=&vb=1&auction_id=3877993866 HTTP/1.1
Host: d3958af700.4b6563a120.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.0
date: Sat, 27 Jan 2024 21:05:50 GMT
content-type: application/json; charset=utf-8
content-length: 0
vary: Origin
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET eu.karoon.xyz/nty/metrics/save.img?event=impressions&bid-id=v2-1706389752896-7-9306-1309311-205544a7-0feb-6f3f-cead-c5f32d418676&img=https%3A%2F%2Fcdn.amnew.net%2Fdf1833bce80e0f27cbae4e19c8541fbc.jpeg&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&st=0.03&cpa=5336eb94-3f97-4718-8d3f-9629bb367288&prev_step_diff=884
302 Found 0 B URL GET HTTP/2 eu.karoon.xyz/nty/metrics/save.img?event=impressions&bid-id=v2-1706389752896-7-9306-1309311-205544a7-0feb-6f3f-cead-c5f32d418676&img=https%3A%2F%2Fcdn.amnew.net%2Fdf1833bce80e0f27cbae4e19c8541fbc.jpeg&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&st=0.03&cpa=5336eb94-3f97-4718-8d3f-9629bb367288&prev_step_diff=884
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject*.karoon.xyz
FingerprintD8:29:1C:49:59:2E:4C:E6:05:A3:01:AA:E0:60:43:19:5A:B2:B6:F0
ValidityTue, 23 Jan 2024 23:03:56 GMT - Mon, 22 Apr 2024 23:03:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /nty/metrics/save.img?event=impressions&bid-id=v2-1706389752896-7-9306-1309311-205544a7-0feb-6f3f-cead-c5f32d418676&img=https%3A%2F%2Fcdn.amnew.net%2Fdf1833bce80e0f27cbae4e19c8541fbc.jpeg&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&st=0.03&cpa=5336eb94-3f97-4718-8d3f-9629bb367288&prev_step_diff=884 HTTP/1.1
Host: eu.karoon.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty/1.21.4.1
date: Sat, 27 Jan 2024 21:09:13 GMT
content-length: 0
location: https://cdn.amnew.net/df1833bce80e0f27cbae4e19c8541fbc.jpeg
X-Firefox-Spdy: h2
GET cdn.amnew.net/df1833bce80e0f27cbae4e19c8541fbc.jpeg
200 OK 8.2 kB URL GET HTTP/2 cdn.amnew.net/df1833bce80e0f27cbae4e19c8541fbc.jpeg
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject*.amnew.net
FingerprintA2:91:85:8C:E7:96:90:DB:29:5F:49:4C:4E:38:11:B0:27:9D:CB:03
ValidityWed, 03 Jan 2024 14:17:38 GMT - Tue, 02 Apr 2024 14:17:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 192x192, components 3
Hash b8a392580d47b564c70facfdff83673e
82bcd38cc7bd53c74adb810331ca586fa570c5b6
51bd9daa12dff03a1571f53049f2f6a81c21e7aab31e3ae28376fc9fa6bf0fe4
GET /df1833bce80e0f27cbae4e19c8541fbc.jpeg HTTP/1.1
Host: cdn.amnew.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Sat, 27 Jan 2024 21:09:13 GMT
content-type: image/jpeg
content-length: 8246
last-modified: Thu, 05 Oct 2023 16:31:59 GMT
etag: "651ee4ff-2036"
expires: Sun, 28 Jan 2024 00:09:24 GMT
cache-control: max-age=1209600
accept-ranges: bytes
X-Firefox-Spdy: h2
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintE9:00:F4:02:DB:2E:43:07:4D:00:D0:33:77:6D:2B:38:28:C5:A2:B6
ValidityTue, 02 Jan 2024 13:09:54 GMT - Tue, 26 Mar 2024 13:09:53 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:7VVT9DKSxB0fSBWhdraMDb3jQVhoog:lLkUqVbRP6mTKXcQ; Expires=Mon, 26-Jan-2026 21:09:13 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 27 Jan 2024 21:09:13 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp0pO3mQxqoI-USZDEAwCzy3k6OoOv5-WtEFoZeOKLu1o3Aqmteelk4b0JiRd5IokeKPsSvZaw
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-D6vlZ7SrmzD8uQsq_rKM5A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp0pO3mQxqoI-USZDEAwCzy3k6OoOv5-WtEFoZeOKLu1o3Aqmteelk4b0JiRd5IokeKPsSvZaw
302 Found 405 B URL GET HTTP/2 accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp0pO3mQxqoI-USZDEAwCzy3k6OoOv5-WtEFoZeOKLu1o3Aqmteelk4b0JiRd5IokeKPsSvZaw
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintE9:00:F4:02:DB:2E:43:07:4D:00:D0:33:77:6D:2B:38:28:C5:A2:B6
ValidityTue, 02 Jan 2024 13:09:54 GMT - Tue, 26 Mar 2024 13:09:53 GMT
File type HTML document, ASCII text, with very long lines (396)
Hash 3535919d4a27f27a2b634ac8a50424b2
cb278c36862da248e9c98cf69f19f524b1d8162a
955d3cdcae45348640331e33579fe05d9540df9fccd8e0340f6565cc3c91d7de
GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp0pO3mQxqoI-USZDEAwCzy3k6OoOv5-WtEFoZeOKLu1o3Aqmteelk4b0JiRd5IokeKPsSvZaw HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:QocOHC5cBkVIbv7NBEdNsoMRQI4yyA:xHRbGM-fyvD68fFx;Path=/;Expires=Mon, 26-Jan-2026 21:09:13 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 27 Jan 2024 21:09:13 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp3zVVSL0yB6wUBQ_IYmeB-4lVKAtuXne3dX5TaTVCCLoHlj_999mw3EH4UyUZtXYx5oYMFGng&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S520754228%3A1706389753913338&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-AcLhUqSW_sHihQ2sPorJnw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 405
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp3zVVSL0yB6wUBQ_IYmeB-4lVKAtuXne3dX5TaTVCCLoHlj_999mw3EH4UyUZtXYx5oYMFGng&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S520754228%3A1706389753913338&theme=glif
403 Forbidden 3.7 kB URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp3zVVSL0yB6wUBQ_IYmeB-4lVKAtuXne3dX5TaTVCCLoHlj_999mw3EH4UyUZtXYx5oYMFGng&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S520754228%3A1706389753913338&theme=glif
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintC5:94:19:42:28:3A:57:36:10:5E:4A:4E:7B:CE:5E:33:B7:50:8D:89
ValidityTue, 02 Jan 2024 13:02:52 GMT - Tue, 26 Mar 2024 13:02:51 GMT
File type gzip compressed data, max compression
Hash 8b06e661507bffde12a77a8b22ad884d
0f4dba6f23b905d93670f5a69d185353da4eebb7
6fbdb819dac818720ee01db59b8b23ccbde492e05484177890ed48cdfca1f3ce
GET /v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp3zVVSL0yB6wUBQ_IYmeB-4lVKAtuXne3dX5TaTVCCLoHlj_999mw3EH4UyUZtXYx5oYMFGng&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S520754228%3A1706389753913338&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 27 Jan 2024 21:09:13 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-security-policy: script-src 'nonce-jyk2nveek3KtsY9AAdvKcA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST chaturflix.cam/cdn-cgi/rum?
204 No Content 0 B URL POST HTTP/3 chaturflix.cam/cdn-cgi/rum?
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subjectchaturflix.cam
Fingerprint68:E4:D0:0F:2E:55:A4:43:7F:04:F8:F7:7A:23:FB:AE:FD:CB:54:5C
ValidityTue, 02 Jan 2024 23:17:33 GMT - Mon, 01 Apr 2024 23:17:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: chaturflix.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1051
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/performer/bimattk21
Cookie: _ga_1YHDMLRZ8B=GS1.1.1706389751.1.0.1706389751.0.0.0; _ga=GA1.1.2000293798.1706389752
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Sat, 27 Jan 2024 21:09:14 GMT
access-control-allow-origin: https://chaturflix.cam
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 84c3f9bd6c6b56c5-OSL
x-frame-options: DENY
x-content-type-options: nosniff
GET twinrdsyte.com/preroll.engine?id=c1b33313-cd26-4b38-ae7e-4f012188f426&zid=64280&cvs={ClientVideoSupport}&time={TimeOffset}&stdtime={StdTimeOffset}&abr={IsAdblockRequest}&pageurl={PageUrl}&tid=540695912&res={Resolution}&bw={BrowserWidth}&bh={BrowserHeight}&kw={Keywords}&referrerUrl={ReferrerUrl}&pw={PlayerWidth}&ph={PlayerHeight}&tid=540695912&kw=bimattk21%2CCam%2CRecordings%2CChaturflix%2CThe%2CCam%2CArchive%2CCam%2CChaturflix%2CChaturflix%2Cbimattk21%2Cbimattk21%2Crecordings%2Cbimattk21%2Ccam%2Cshows%2CRecurbate%2CRecordbate%2CRecturbate%2CRecurdbate%2CRecordubate%2CRecurdubate%2Cwebcam%2Cadult%2Ccam%2Cadult%2Cperformer%2Ccamgirls%2Cwebcam%2Ctube%2Cfree%2Ccam%2Cvideos%2CXXX%2Ctube%2Ccamwhores%2Ccam%2Cshow%2Canicka_best%2CWatch%2CCam%2Camature%2Cand%2Chot%2Cmodel%2Cbimattk21%2Crecorded%2Cvideos%2Con%2CChaturflix%2CThe%2CCam%2CArchive%2CDiscover%2Clive%2CCam%2Cwebcam%2Cbrodcasts%2Cmaking%2Cby%2Cyour%2Clovely%2Cperformers.,
200 OK 27 B URL GET HTTP/2 twinrdsyte.com/preroll.engine?id=c1b33313-cd26-4b38-ae7e-4f012188f426&zid=64280&cvs={ClientVideoSupport}&time={TimeOffset}&stdtime={StdTimeOffset}&abr={IsAdblockRequest}&pageurl={PageUrl}&tid=540695912&res={Resolution}&bw={BrowserWidth}&bh={BrowserHeight}&kw={Keywords}&referrerUrl={ReferrerUrl}&pw={PlayerWidth}&ph={PlayerHeight}&tid=540695912&kw=bimattk21%2CCam%2CRecordings%2CChaturflix%2CThe%2CCam%2CArchive%2CCam%2CChaturflix%2CChaturflix%2Cbimattk21%2Cbimattk21%2Crecordings%2Cbimattk21%2Ccam%2Cshows%2CRecurbate%2CRecordbate%2CRecturbate%2CRecurdbate%2CRecordubate%2CRecurdubate%2Cwebcam%2Cadult%2Ccam%2Cadult%2Cperformer%2Ccamgirls%2Cwebcam%2Ctube%2Cfree%2Ccam%2Cvideos%2CXXX%2Ctube%2Ccamwhores%2Ccam%2Cshow%2Canicka_best%2CWatch%2CCam%2Camature%2Cand%2Chot%2Cmodel%2Cbimattk21%2Crecorded%2Cvideos%2Con%2CChaturflix%2CThe%2CCam%2CArchive%2CDiscover%2Clive%2CCam%2Cwebcam%2Cbrodcasts%2Cmaking%2Cby%2Cyour%2Clovely%2Cperformers.,
IP
Requested by https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js
Certificate IssuerGoogle Trust Services LLC
Subjecttwinrdsyte.com
FingerprintF0:A8:D9:35:51:46:17:4B:52:60:AE:A2:B8:74:97:C9:75:9C:59:7D
ValiditySun, 21 Jan 2024 10:00:16 GMT - Sat, 20 Apr 2024 10:00:15 GMT
File type ASCII text, with no line terminators
Hash 5f631db49306435ae8cdb4d0c36f1263
f8b283d1f2a7b552120b9878d8f15e977aa683b4
a71702232a771b558b12f8c0012a15f5652b500fd2e33464d283406cee36754d
GET /preroll.engine?id=c1b33313-cd26-4b38-ae7e-4f012188f426&zid=64280&cvs={ClientVideoSupport}&time={TimeOffset}&stdtime={StdTimeOffset}&abr={IsAdblockRequest}&pageurl={PageUrl}&tid=540695912&res={Resolution}&bw={BrowserWidth}&bh={BrowserHeight}&kw={Keywords}&referrerUrl={ReferrerUrl}&pw={PlayerWidth}&ph={PlayerHeight}&tid=540695912&kw=bimattk21%2CCam%2CRecordings%2CChaturflix%2CThe%2CCam%2CArchive%2CCam%2CChaturflix%2CChaturflix%2Cbimattk21%2Cbimattk21%2Crecordings%2Cbimattk21%2Ccam%2Cshows%2CRecurbate%2CRecordbate%2CRecturbate%2CRecurdbate%2CRecordubate%2CRecurdubate%2Cwebcam%2Cadult%2Ccam%2Cadult%2Cperformer%2Ccamgirls%2Cwebcam%2Ctube%2Cfree%2Ccam%2Cvideos%2CXXX%2Ctube%2Ccamwhores%2Ccam%2Cshow%2Canicka_best%2CWatch%2CCam%2Camature%2Cand%2Chot%2Cmodel%2Cbimattk21%2Crecorded%2Cvideos%2Con%2CChaturflix%2CThe%2CCam%2CArchive%2CDiscover%2Clive%2CCam%2Cwebcam%2Cbrodcasts%2Cmaking%2Cby%2Cyour%2Clovely%2Cperformers., HTTP/1.1
Host: twinrdsyte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1000fapvids.com/
Origin: https://1000fapvids.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:14 GMT
content-type: text/xml; charset=utf-8
content-length: 27
cache-control: private, no-transform
access-control-allow-origin: https://1000fapvids.com
access-control-allow-credentials: true
set-cookie: IKSR={}; path=/; SameSite=None; secure
p3p: CP="CAO PSA OUR IND"
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 84c3f9be28d55695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET kts.cvastico.com/in/vmon/?title=Dirty%20Games&system=Advertisement%2Ctrafficstars&type=vast&mediafile=https%3A%2F%2Fvlcdn.tsyndicate.com%2Fvideos%2F6%2Fd%2F57137c9a1990a7d09e242240371f963ed9139a%2F850x480.mp4&click=https%3A%2F%2Ftsyndicate.com%2Fdo2%2Fclick%3Fc%3DAPeIQFMmDJkycuaI0BGjBgsRYcbQWSjjIZ0zC0XkmBFGzI0cMGq0qDHGjJkWNGyMsdECh5mOLWLMuHEDR40yJW3gGCPi4Rwxacgo1LFFRA0aMGzkqJEjhgwRXR6GqcNThwgYNG6EmRFjDI4WH8OUQWkDBowWOcqUEVlGDA4cMsKYrcH1Rk-IZOwsxEEjxkM4dcQsdJrjhlQ4cBbOpJEjh084E3XQkDFDxtyHY9ok1mGjLFaHeM0stDHjoRg3bhTjmIEjpF8RbdxglIwU7t_Ys2P0jYHjYR05bBYiraETh2MRdZ5aRUOHDpw5Ol68uEPdxRycv8ucMdPGxZg3bV5ovTGmhnkxI8fcOEujhhgyLcLIMAOfMY4YZciYuVHDTA4yP0yRBBE90DFHC3YE1cIYLcjBRR1myWCDgETI0ANrrLn2YIQTDjhDDzGYBcNLcCQolHfgxSTiSybO8cUcbASF0IYwSEghDT0E0UYYdJTxWwkyDEGFWm6AgMIKvKUA5BBCEDFFEyC8AMIQVK2BxhtskLFkEm6QkUYYbix5RVtjhNHGHDRKuMYdPQC1Y3NryBDDkkOYuaQUOL0hh5eyzUEnGjz-ZkaMeCxJBUF02hlkEHKMgUYadpSRaBt_BirHoGkUGuQQgNIhKKFLuskjHXHOGaSocMq5pBx57plGn6Gm8SapqgZZJqVBznHlHX4GiecYv4nBo6S-tkqGsD3eiZOnciBL7BC__nbssMp-t2dg1BYL7LXOLnkHmYrWSUYdbNCx5K1LGkSuuUHCgZAZeraB0LlmnpEGcL0O8a0Y6AbpqRjPmsHqs_0OYWIZb-SLxcJL_kuwmXdcyWq-Bev6xh3pupHGGGuE8QXAc7A7xBU8Ojppum9ml7GWQV4pchtvHMRGrLOWuqqx-S15cMJLvhHmpp1-mqmhiG4aLqOOQvosEWnM8V2kciwZY6QnB7lvwWLIEXOZIee74xqvnhFqHkvm8caPQbLxRqRskN3uu_EiNIcLS6apUlA93MHGGkhEoUUcNKSRZRNRwBFHGkVMUYQUapyBxBFxaMFvFHQcdAMevLJxRFAyNFEEjC-6d4YWROQRxA1k3KGEGE08ocYXMnh0xkd6PJHGDEqkgYQcU8igBxL-3XGGFUPkoMUcbVQBRRwDRnEHFmdc0UIRLRzhxB1H3BDFGF-cUcWAUlSRxl1kgJdRiGaR2CKKbdxVZmRblOaQYbyxIGdUIsDR6GAu4NdCSKYRjQ5g4AIYvGYMcGjDF_RXFQKa5S0PkYMdNmOZh-AkgQtxYAxeU4c6jM8qZujPfGAghhy0wAw0MMNYaEAGrrRADGW5AUqYwpoxpMQyMbDBXdKwGY3EwAUgccFk-neUu8jhCzzMSFOASMAhNoQGd6lDGDLShDfoQXBsCMMLalBAI2FhgzsAARNeVQc8gAAPOLDBF2xAgzBKUAc5sEEBUwCCI-BkDW94AQ7NEqIYgMAI9yoDvPDwgjgW0H1VEYETnnAXPX1hDIlc5F3YkMgiOIF8ZbDDF1gVHIbUgCar0YlZIniG1OhABjXAgWFEcBBNZm0vvWFlJr8AMzJQJI2vIYPWFPOQhFHkL1rDQx4WAhoy5MGUdJBDHcoQQUFmhDnOgY500DeiMJQoKHP7TnjuMgcJZkRrdOCRnlpQB43RoQWUcQEZxuCURnZTL6f8ZBzv05RcJvIgX1hnOy3SPoashzTG4Q9o6NAG5cTgn6wpjHlwKBUybLIMc4DDF3g0GIQG9ChSEUNkZPmSdd0FDpTMIGZmA4M-KCAg%26s%3D0da6f1bdd03c6e18a3c5e90dc2847bb75a0d57d4066851b7c14e5a00a48c439b1706389755&katds_ep=pxIVBIx88gkRZJZT7Yf2Y_y2mexs-mrqlnn5BZi-FhfX2KpICa5GIqImNL_OswoliVleh0CK0WusSp_oZq0pHzjUSe8NkzZf1JwTZ14xVM1_6PHVMAz7nkJn_AXF4njieL_T7n_rJCaQ-YTonOY
204 No Content 0 B URL GET HTTP/2 kts.cvastico.com/in/vmon/?title=Dirty%20Games&system=Advertisement%2Ctrafficstars&type=vast&mediafile=https%3A%2F%2Fvlcdn.tsyndicate.com%2Fvideos%2F6%2Fd%2F57137c9a1990a7d09e242240371f963ed9139a%2F850x480.mp4&click=https%3A%2F%2Ftsyndicate.com%2Fdo2%2Fclick%3Fc%3DAPeIQFMmDJkycuaI0BGjBgsRYcbQWSjjIZ0zC0XkmBFGzI0cMGq0qDHGjJkWNGyMsdECh5mOLWLMuHEDR40yJW3gGCPi4Rwxacgo1LFFRA0aMGzkqJEjhgwRXR6GqcNThwgYNG6EmRFjDI4WH8OUQWkDBowWOcqUEVlGDA4cMsKYrcH1Rk-IZOwsxEEjxkM4dcQsdJrjhlQ4cBbOpJEjh084E3XQkDFDxtyHY9ok1mGjLFaHeM0stDHjoRg3bhTjmIEjpF8RbdxglIwU7t_Ys2P0jYHjYR05bBYiraETh2MRdZ5aRUOHDpw5Ol68uEPdxRycv8ucMdPGxZg3bV5ovTGmhnkxI8fcOEujhhgyLcLIMAOfMY4YZciYuVHDTA4yP0yRBBE90DFHC3YE1cIYLcjBRR1myWCDgETI0ANrrLn2YIQTDjhDDzGYBcNLcCQolHfgxSTiSybO8cUcbASF0IYwSEghDT0E0UYYdJTxWwkyDEGFWm6AgMIKvKUA5BBCEDFFEyC8AMIQVK2BxhtskLFkEm6QkUYYbix5RVtjhNHGHDRKuMYdPQC1Y3NryBDDkkOYuaQUOL0hh5eyzUEnGjz-ZkaMeCxJBUF02hlkEHKMgUYadpSRaBt_BirHoGkUGuQQgNIhKKFLuskjHXHOGaSocMq5pBx57plGn6Gm8SapqgZZJqVBznHlHX4GiecYv4nBo6S-tkqGsD3eiZOnciBL7BC__nbssMp-t2dg1BYL7LXOLnkHmYrWSUYdbNCx5K1LGkSuuUHCgZAZeraB0LlmnpEGcL0O8a0Y6AbpqRjPmsHqs_0OYWIZb-SLxcJL_kuwmXdcyWq-Bev6xh3pupHGGGuE8QXAc7A7xBU8Ojppum9ml7GWQV4pchtvHMRGrLOWuqqx-S15cMJLvhHmpp1-mqmhiG4aLqOOQvosEWnM8V2kciwZY6QnB7lvwWLIEXOZIee74xqvnhFqHkvm8caPQbLxRqRskN3uu_EiNIcLS6apUlA93MHGGkhEoUUcNKSRZRNRwBFHGkVMUYQUapyBxBFxaMFvFHQcdAMevLJxRFAyNFEEjC-6d4YWROQRxA1k3KGEGE08ocYXMnh0xkd6PJHGDEqkgYQcU8igBxL-3XGGFUPkoMUcbVQBRRwDRnEHFmdc0UIRLRzhxB1H3BDFGF-cUcWAUlSRxl1kgJdRiGaR2CKKbdxVZmRblOaQYbyxIGdUIsDR6GAu4NdCSKYRjQ5g4AIYvGYMcGjDF_RXFQKa5S0PkYMdNmOZh-AkgQtxYAxeU4c6jM8qZujPfGAghhy0wAw0MMNYaEAGrrRADGW5AUqYwpoxpMQyMbDBXdKwGY3EwAUgccFk-neUu8jhCzzMSFOASMAhNoQGd6lDGDLShDfoQXBsCMMLalBAI2FhgzsAARNeVQc8gAAPOLDBF2xAgzBKUAc5sEEBUwCCI-BkDW94AQ7NEqIYgMAI9yoDvPDwgjgW0H1VEYETnnAXPX1hDIlc5F3YkMgiOIF8ZbDDF1gVHIbUgCar0YlZIniG1OhABjXAgWFEcBBNZm0vvWFlJr8AMzJQJI2vIYPWFPOQhFHkL1rDQx4WAhoy5MGUdJBDHcoQQUFmhDnOgY500DeiMJQoKHP7TnjuMgcJZkRrdOCRnlpQB43RoQWUcQEZxuCURnZTL6f8ZBzv05RcJvIgX1hnOy3SPoashzTG4Q9o6NAG5cTgn6wpjHlwKBUybLIMc4DDF3g0GIQG9ChSEUNkZPmSdd0FDpTMIGZmA4M-KCAg%26s%3D0da6f1bdd03c6e18a3c5e90dc2847bb75a0d57d4066851b7c14e5a00a48c439b1706389755&katds_ep=pxIVBIx88gkRZJZT7Yf2Y_y2mexs-mrqlnn5BZi-FhfX2KpICa5GIqImNL_OswoliVleh0CK0WusSp_oZq0pHzjUSe8NkzZf1JwTZ14xVM1_6PHVMAz7nkJn_AXF4njieL_T7n_rJCaQ-YTonOY
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectkts.cvastico.com
Fingerprint39:E8:01:61:0E:F8:EB:6D:F6:C6:1B:17:C8:25:1E:95:CE:DE:90:E7
ValidityWed, 06 Dec 2023 03:06:17 GMT - Tue, 05 Mar 2024 03:06:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/vmon/?title=Dirty%20Games&system=Advertisement%2Ctrafficstars&type=vast&mediafile=https%3A%2F%2Fvlcdn.tsyndicate.com%2Fvideos%2F6%2Fd%2F57137c9a1990a7d09e242240371f963ed9139a%2F850x480.mp4&click=https%3A%2F%2Ftsyndicate.com%2Fdo2%2Fclick%3Fc%3DAPeIQFMmDJkycuaI0BGjBgsRYcbQWSjjIZ0zC0XkmBFGzI0cMGq0qDHGjJkWNGyMsdECh5mOLWLMuHEDR40yJW3gGCPi4Rwxacgo1LFFRA0aMGzkqJEjhgwRXR6GqcNThwgYNG6EmRFjDI4WH8OUQWkDBowWOcqUEVlGDA4cMsKYrcH1Rk-IZOwsxEEjxkM4dcQsdJrjhlQ4cBbOpJEjh084E3XQkDFDxtyHY9ok1mGjLFaHeM0stDHjoRg3bhTjmIEjpF8RbdxglIwU7t_Ys2P0jYHjYR05bBYiraETh2MRdZ5aRUOHDpw5Ol68uEPdxRycv8ucMdPGxZg3bV5ovTGmhnkxI8fcOEujhhgyLcLIMAOfMY4YZciYuVHDTA4yP0yRBBE90DFHC3YE1cIYLcjBRR1myWCDgETI0ANrrLn2YIQTDjhDDzGYBcNLcCQolHfgxSTiSybO8cUcbASF0IYwSEghDT0E0UYYdJTxWwkyDEGFWm6AgMIKvKUA5BBCEDFFEyC8AMIQVK2BxhtskLFkEm6QkUYYbix5RVtjhNHGHDRKuMYdPQC1Y3NryBDDkkOYuaQUOL0hh5eyzUEnGjz-ZkaMeCxJBUF02hlkEHKMgUYadpSRaBt_BirHoGkUGuQQgNIhKKFLuskjHXHOGaSocMq5pBx57plGn6Gm8SapqgZZJqVBznHlHX4GiecYv4nBo6S-tkqGsD3eiZOnciBL7BC__nbssMp-t2dg1BYL7LXOLnkHmYrWSUYdbNCx5K1LGkSuuUHCgZAZeraB0LlmnpEGcL0O8a0Y6AbpqRjPmsHqs_0OYWIZb-SLxcJL_kuwmXdcyWq-Bev6xh3pupHGGGuE8QXAc7A7xBU8Ojppum9ml7GWQV4pchtvHMRGrLOWuqqx-S15cMJLvhHmpp1-mqmhiG4aLqOOQvosEWnM8V2kciwZY6QnB7lvwWLIEXOZIee74xqvnhFqHkvm8caPQbLxRqRskN3uu_EiNIcLS6apUlA93MHGGkhEoUUcNKSRZRNRwBFHGkVMUYQUapyBxBFxaMFvFHQcdAMevLJxRFAyNFEEjC-6d4YWROQRxA1k3KGEGE08ocYXMnh0xkd6PJHGDEqkgYQcU8igBxL-3XGGFUPkoMUcbVQBRRwDRnEHFmdc0UIRLRzhxB1H3BDFGF-cUcWAUlSRxl1kgJdRiGaR2CKKbdxVZmRblOaQYbyxIGdUIsDR6GAu4NdCSKYRjQ5g4AIYvGYMcGjDF_RXFQKa5S0PkYMdNmOZh-AkgQtxYAxeU4c6jM8qZujPfGAghhy0wAw0MMNYaEAGrrRADGW5AUqYwpoxpMQyMbDBXdKwGY3EwAUgccFk-neUu8jhCzzMSFOASMAhNoQGd6lDGDLShDfoQXBsCMMLalBAI2FhgzsAARNeVQc8gAAPOLDBF2xAgzBKUAc5sEEBUwCCI-BkDW94AQ7NEqIYgMAI9yoDvPDwgjgW0H1VEYETnnAXPX1hDIlc5F3YkMgiOIF8ZbDDF1gVHIbUgCar0YlZIniG1OhABjXAgWFEcBBNZm0vvWFlJr8AMzJQJI2vIYPWFPOQhFHkL1rDQx4WAhoy5MGUdJBDHcoQQUFmhDnOgY500DeiMJQoKHP7TnjuMgcJZkRrdOCRnlpQB43RoQWUcQEZxuCURnZTL6f8ZBzv05RcJvIgX1hnOy3SPoashzTG4Q9o6NAG5cTgn6wpjHlwKBUybLIMc4DDF3g0GIQG9ChSEUNkZPmSdd0FDpTMIGZmA4M-KCAg%26s%3D0da6f1bdd03c6e18a3c5e90dc2847bb75a0d57d4066851b7c14e5a00a48c439b1706389755&katds_ep=pxIVBIx88gkRZJZT7Yf2Y_y2mexs-mrqlnn5BZi-FhfX2KpICa5GIqImNL_OswoliVleh0CK0WusSp_oZq0pHzjUSe8NkzZf1JwTZ14xVM1_6PHVMAz7nkJn_AXF4njieL_T7n_rJCaQ-YTonOY HTTP/1.1
Host: kts.cvastico.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturflix.cam/
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Sat, 27 Jan 2024 21:09:14 GMT
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
access-control-allow-origin: https://chaturflix.cam
X-Firefox-Spdy: h2
GET 1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js
200 OK 8.7 kB URL GET HTTP/2 1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject1000fapvids.com
FingerprintDA:0F:EC:98:61:5B:D3:21:6B:EA:FC:62:5E:3D:9B:D5:DC:82:F5:D2
ValiditySat, 13 Jan 2024 03:08:06 GMT - Fri, 12 Apr 2024 03:08:05 GMT
File type gzip compressed data, from Unix
Hash 38fd148c80fe2e2fd520a3e986e31d7a
e478d0f44ca675ba00c23943de1c6b1075443b22
4fee5220f357d2d4ae88b875543eedc721afe308969b716d84a49d70a3a69137
GET /v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js HTTP/1.1
Host: 1000fapvids.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.1
date: Sat, 27 Jan 2024 21:09:14 GMT
content-type: text/html; charset=utf-8
last-modified: Wed, 24 Jan 2024 11:04:20 GMT
etag: W/"65b0eeb4-b60"
content-encoding: gzip
expires: Sat, 27 Jan 2024 21:13:55 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
x-nginx-cache-status: HIT
X-Firefox-Spdy: h2
POST chaturflix.cam/cdn-cgi/rum?
204 No Content 0 B URL POST HTTP/3 chaturflix.cam/cdn-cgi/rum?
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subjectchaturflix.cam
Fingerprint68:E4:D0:0F:2E:55:A4:43:7F:04:F8:F7:7A:23:FB:AE:FD:CB:54:5C
ValidityTue, 02 Jan 2024 23:17:33 GMT - Mon, 01 Apr 2024 23:17:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: chaturflix.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 514
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/performer/bimattk21
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 204 No Content
date: Sat, 27 Jan 2024 21:09:36 GMT
access-control-allow-origin: https://chaturflix.cam
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 84c3fa44fada56c5-OSL
x-frame-options: DENY
x-content-type-options: nosniff
GET chaturflix.cam/_next/static/chunks/608-e1ab51f21287ca8e.js
200 OK 17 kB URL GET HTTP/3 chaturflix.cam/_next/static/chunks/608-e1ab51f21287ca8e.js
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subjectchaturflix.cam
Fingerprint68:E4:D0:0F:2E:55:A4:43:7F:04:F8:F7:7A:23:FB:AE:FD:CB:54:5C
ValidityTue, 02 Jan 2024 23:17:33 GMT - Mon, 01 Apr 2024 23:17:32 GMT
File type JavaScript source, ASCII text, with very long lines (17018), with no line terminators
Hash 8cb5683b17fea9df1e5676981d3ba698
6ab8173ebd35d6ef336709f58d9266e8b76d54e5
1bf07a707d7ef1d3538c5726ffc0d86dfc86239359c83881c72ddd6bd217d981
GET /_next/static/chunks/608-e1ab51f21287ca8e.js HTTP/1.1
Host: chaturflix.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/performer/bimattk21
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 27 Jan 2024 21:09:10 GMT
content-type: application/javascript; charset=UTF-8
cf-bgj: minify
cf-polished: origSize=17022
alt-svc: h3=":443"; ma=86400
etag: W/"427e-18c8b2df642"
last-modified: Thu, 21 Dec 2023 07:01:34 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 3245954
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o3cp1s4ilejbEgZB1b4XtNb4u2I3VNJs7umjE3%2FxOrAJzkP4tMHXb8bKBcqYh7Zp%2Fv3ARq6MIPPnbQ2wh01tqIoPnlA%2F%2Bi4nma63ZurI3e00z1AYys4XlCkPazlpki8qlw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cache-control: public, max-age=31536000, immutable, max-age=1209600
server: cloudflare
cf-ray: 84c3f9a5dc8956c5-OSL
content-encoding: br
GET tsyndicate.com/do2/b63742cfbdc5439db3f074ad52967b86/vast?subid=540695912&categories=bimattk21%2CCam%2CRecordings%2CChaturflix%2CThe%2CCam%2CArchive%2CCam%2CChaturflix%2CChaturflix%2Cbimattk21%2Cbimattk21%2Crecordings%2Cbimattk21%2Ccam%2Cshows%2CRecurbate%2CRecordbate%2CRecturbate%2CRecurdbate%2CRecordubate%2CRecurdubate%2Cwebcam%2Cadult%2Ccam%2Cadult%2Cperformer%2Ccamgirls%2Cwebcam%2Ctube%2Cfree%2Ccam%2Cvideos%2CXXX%2Ctube%2Ccamwhores%2Ccam%2Cshow%2Canicka_best%2CWatch%2CCam%2Camature%2Cand%2Chot%2Cmodel%2Cbimattk21%2Crecorded%2Cvideos%2Con%2CChaturflix%2CThe%2CCam%2CArchive%2CDiscover%2Clive%2CCam%2Cwebcam%2Cbrodcasts%2Cmaking%2Cby%2Cyour%2Clovely%2Cperformers.,
200 OK 7.5 kB URL GET HTTP/2 tsyndicate.com/do2/b63742cfbdc5439db3f074ad52967b86/vast?subid=540695912&categories=bimattk21%2CCam%2CRecordings%2CChaturflix%2CThe%2CCam%2CArchive%2CCam%2CChaturflix%2CChaturflix%2Cbimattk21%2Cbimattk21%2Crecordings%2Cbimattk21%2Ccam%2Cshows%2CRecurbate%2CRecordbate%2CRecturbate%2CRecurdbate%2CRecordubate%2CRecurdubate%2Cwebcam%2Cadult%2Ccam%2Cadult%2Cperformer%2Ccamgirls%2Cwebcam%2Ctube%2Cfree%2Ccam%2Cvideos%2CXXX%2Ctube%2Ccamwhores%2Ccam%2Cshow%2Canicka_best%2CWatch%2CCam%2Camature%2Cand%2Chot%2Cmodel%2Cbimattk21%2Crecorded%2Cvideos%2Con%2CChaturflix%2CThe%2CCam%2CArchive%2CDiscover%2Clive%2CCam%2Cwebcam%2Cbrodcasts%2Cmaking%2Cby%2Cyour%2Clovely%2Cperformers.,
IP
ASN #24940 Hetzner Online GmbH
Requested by https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
Fingerprint72:CE:E0:D7:2D:EB:61:33:73:BB:BD:D0:2A:23:E5:9A:4B:F0:74:21
ValidityFri, 12 Jan 2024 09:06:23 GMT - Thu, 11 Apr 2024 09:06:22 GMT
File type XML document, ASCII text, with very long lines (7615), with no line terminators
Hash 3d97c5e80118d9ea35b1a0bb28826c9a
a70ca2bf452ffbf059d64d8dc244f705ae0e19af
444d93a5110a8abf54930c9fc94de7cfff620d1bea611d013ee5611dcaa715a3
GET /do2/b63742cfbdc5439db3f074ad52967b86/vast?subid=540695912&categories=bimattk21%2CCam%2CRecordings%2CChaturflix%2CThe%2CCam%2CArchive%2CCam%2CChaturflix%2CChaturflix%2Cbimattk21%2Cbimattk21%2Crecordings%2Cbimattk21%2Ccam%2Cshows%2CRecurbate%2CRecordbate%2CRecturbate%2CRecurdbate%2CRecordubate%2CRecurdubate%2Cwebcam%2Cadult%2Ccam%2Cadult%2Cperformer%2Ccamgirls%2Cwebcam%2Ctube%2Cfree%2Ccam%2Cvideos%2CXXX%2Ctube%2Ccamwhores%2Ccam%2Cshow%2Canicka_best%2CWatch%2CCam%2Camature%2Cand%2Chot%2Cmodel%2Cbimattk21%2Crecorded%2Cvideos%2Con%2CChaturflix%2CThe%2CCam%2CArchive%2CDiscover%2Clive%2CCam%2Cwebcam%2Cbrodcasts%2Cmaking%2Cby%2Cyour%2Clovely%2Cperformers., HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1000fapvids.com/
Origin: https://1000fapvids.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 27 Jan 2024 21:09:15 GMT
content-type: application/xml; charset=utf-8
access-control-allow-origin: https://1000fapvids.com
access-control-allow-methods: POST, GET, HEAD
access-control-allow-headers: Accept, X-Requested-With, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy
access-control-allow-credentials: true
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
x-vast: 3.0
x-request-id: 6fa2150a46e45489
set-cookie: ts_uid=f5f2f0b9-f4fe-4d31-b607-45938c462016; expires=Sat, 27 Jul 2024 21:09:15 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCx5YZOBDCqBGjCwsRYwpuafiwjMQYN2DYoHHDRowaNbr0URAQ; expires=Sun, 28 Jan 2024 21:09:15 GMT; domain=.tsyndicate.com; path=/; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
GET dl.chaturflix.cam/favicon.ico
0 B URL GET dl.chaturflix.cam/favicon.ico
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subjectchaturflix.cam
Fingerprint68:E4:D0:0F:2E:55:A4:43:7F:04:F8:F7:7A:23:FB:AE:FD:CB:54:5C
ValidityTue, 02 Jan 2024 23:17:33 GMT - Mon, 01 Apr 2024 23:17:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: dl.chaturflix.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 27 Jan 2024 21:09:10 GMT
content-type: image/vnd.microsoft.icon
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"df0ea35aa4a9faa4386b4241ac59089c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M8NSm7UNA9jozS7Zqn5sYCbx5oPCaB%2F3BmdtRtXKw7mcNgEnYnGVB0siCalXZfYXbPdVFLzW75KYaPU3Uw%2F1N03k1Etro09aWYXdXnfp6VDjoJd5Xu2Bccf%2FFxbC%2FClryMNUyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 493
priority: u=4,i=?0
server: cloudflare
cf-ray: 84c3f9a63d6356c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET 9aba99956a.eb480dde95.com/78c21f22c4cd687d24670f932de3f4d0.js
200 OK 105 kB URL GET HTTP/2 9aba99956a.eb480dde95.com/78c21f22c4cd687d24670f932de3f4d0.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject9aba99956a.eb480dde95.com
Fingerprint30:A7:C7:7E:F0:9A:15:96:0C:AF:5A:C7:5C:EB:F5:32:84:34:A1:00
ValidityWed, 24 Jan 2024 02:20:26 GMT - Tue, 23 Apr 2024 02:20:25 GMT
Size 105 kB (104555 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /78c21f22c4cd687d24670f932de3f4d0.js HTTP/1.1
Host: 9aba99956a.eb480dde95.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:11 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 16 Jan 2024 12:25:49 GMT
etag: W/"65a675cd-1986b"
content-encoding: gzip
expires: Sat, 27 Jan 2024 21:14:11 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET chaturflix.cam/_next/static/chunks/pages/performer/%5Buname%5D-4d9c209943094905.js
200 OK 1.7 kB URL GET HTTP/3 chaturflix.cam/_next/static/chunks/pages/performer/%5Buname%5D-4d9c209943094905.js
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subjectchaturflix.cam
Fingerprint68:E4:D0:0F:2E:55:A4:43:7F:04:F8:F7:7A:23:FB:AE:FD:CB:54:5C
ValidityTue, 02 Jan 2024 23:17:33 GMT - Mon, 01 Apr 2024 23:17:32 GMT
File type ASCII text, with very long lines (1773), with no line terminators
Hash a2ff0b1fefcafbb942f9c490b02f0bc5
31aabbe4a828bd8c9785ce185b69549ded45d6f4
5aae4afaf319fa2e780b676ca6701b8d954661b9a666ab92e8389605a6fffe1c
GET /_next/static/chunks/pages/performer/%5Buname%5D-4d9c209943094905.js HTTP/1.1
Host: chaturflix.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/performer/bimattk21
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 27 Jan 2024 21:09:10 GMT
content-type: application/javascript; charset=UTF-8
cf-bgj: minify
alt-svc: h3=":443"; ma=86400
etag: W/"6bf-18c8b2df63e"
last-modified: Thu, 21 Dec 2023 07:01:34 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 3245220
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=043DpqC7WAbcVAFQ%2BRdLADzF8fdlLCkjf%2Bec38hCL9dvMJLKdlKzQaO8ZHSvy6ffuAUFhuWSiBxV7HRFxhwSTILfVILhBuGpQFyJIEzJSgcLXLAC0UFo7jyTzToh%2BZg7jQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cache-control: public, max-age=31536000, immutable, max-age=1209600
server: cloudflare
cf-ray: 84c3f9a5dc9e56c5-OSL
content-encoding: br
POST mcpuwpsh.com/get/
200 OK 2.9 kB IP
ASN #24940 Hetzner Online GmbH
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectpuwpush.com
Fingerprint58:C2:DD:2C:EE:85:44:12:D6:8C:9C:81:24:6C:7E:3A:63:BE:86:B4
ValidityThu, 14 Dec 2023 12:19:42 GMT - Wed, 13 Mar 2024 12:19:41 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2915), with no line terminators
Hash a0474979b58445c3bf5790a9b29b1ae5
6980ed701055374207f86c9444c846f4d15b55d6
32a70870517f03fd3f8d8e1c7e63d31aca5140557d0839b62e0dd368b828deab
POST /get/ HTTP/1.1
Host: mcpuwpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturflix.cam/
Content-Type: text/plain;charset=UTF-8
Content-Length: 1442
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.0
date: Sat, 27 Jan 2024 21:09:14 GMT
content-type: application/json
content-length: 2903
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET vlcdn.tsyndicate.com/videos/6/d/57137c9a1990a7d09e242240371f963ed9139a/850x480.mp4
206 Partial Content 2.9 MB URL GET HTTP/2 vlcdn.tsyndicate.com/videos/6/d/57137c9a1990a7d09e242240371f963ed9139a/850x480.mp4
IP
Requested by https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js
Certificate IssuerSectigo Limited
Subjectvlcdn.tsyndicate.com
Fingerprint1F:5F:CD:0C:ED:2D:5C:55:51:6E:02:EF:68:C7:7C:B3:8D:DB:D3:76
ValidityMon, 21 Aug 2023 00:00:00 GMT - Fri, 20 Sep 2024 23:59:59 GMT
Size 2.9 MB (2949120 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /videos/6/d/57137c9a1990a7d09e242240371f963ed9139a/850x480.mp4 HTTP/1.1
Host: vlcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://1000fapvids.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Sat, 27 Jan 2024 21:09:15 GMT
content-type: video/mp4
content-length: 4093904
server: nginx
last-modified: Fri, 05 Jan 2024 12:10:22 GMT
etag: "6597f1ae-3e77d0"
access-control-allow-origin: *
age: 1932525
content-range: bytes 0-4093903/4093904
access-control-allow-methods: HEAD,GET,OPTIONS
access-control-expose-headers: Server,Range,Content-Length,Content-Range
access-control-allow-headers: *
access-control-max-age: 31536000
access-control-allow-credentials: true
X-Firefox-Spdy: h2
GET js.canstrm.com/video-slider-ad/build.js
200 OK 180 kB URL GET HTTP/2 js.canstrm.com/video-slider-ad/build.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectjs.canstrm.com
Fingerprint05:58:27:83:1C:F4:A2:52:39:D1:7B:F5:8A:02:49:5A:D4:76:0A:3C
ValidityFri, 19 Jan 2024 10:01:02 GMT - Thu, 18 Apr 2024 10:01:01 GMT
Size 180 kB (180504 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /video-slider-ad/build.js HTTP/1.1
Host: js.canstrm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:12 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 24 Jan 2024 11:04:20 GMT
etag: W/"65b0eeb4-2c118"
content-encoding: gzip
expires: Sat, 27 Jan 2024 21:14:12 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900&display=swap
200 OK 21 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900&display=swap
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint89:28:B5:6E:7C:E5:97:43:A6:48:34:12:2C:71:3F:67:E0:7C:6A:66
ValidityTue, 02 Jan 2024 13:09:23 GMT - Tue, 26 Mar 2024 13:09:22 GMT
Hash d33878c4b1761c426e466e321fae219b
9d043a3eb413790682100e86178aadc47278ad1a
2074b871b5a0cf7a87e49f1e4af7080145ebebf4e674ffda31643747d223cb30
GET /css2?family=Inter:wght@100;200;300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 27 Jan 2024 21:09:11 GMT
date: Sat, 27 Jan 2024 21:09:11 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET a.realsrv.com/fp-interstitial.js
200 OK 18 kB URL GET HTTP/2 a.realsrv.com/fp-interstitial.js
IP
ASN #60068 Datacamp Limited
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
Fingerprint44:2D:DC:FD:4A:2E:1C:BD:23:E3:23:21:E2:45:57:13:37:E2:3F:C8
ValidityMon, 18 Dec 2023 09:34:14 GMT - Sun, 17 Mar 2024 09:34:13 GMT
File type JavaScript source, ASCII text, with very long lines (18386), with no line terminators
Hash 5e5e658c5d15f52beaf9e27cb44fade1
7b6717b9fbdcb42ee5fc47e090d090ca8f4a3c55
4f5f96a15f0e5cbb23cacdd14cf1cb03cdea035340cd348e3b5773a15838f3e9
GET /fp-interstitial.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:11 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-credentials: true
etag: W/"7b6717b9fbdcb42ee5fc47e090d"
accept-ch:
expires: Fri, 26 Jan 2024 12:25:52 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *, *
x-77-nzt: EwwBuUwJFAH3MCYAAAwBuUwKEwH3IwAAAAwB1GY4EQH3AwAAAA
x-77-nzt-ray: af58563019743cfdf770b5652ec54119
x-accel-expires: @1706390763
x-accel-date: 1706379975
x-77-cache: HIT
x-77-age: 9814
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 35, 9776
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
GET 9aba99956a.eb480dde95.com/aa0e983012efe701b06446149ad585d2.js
200 OK 445 kB URL GET HTTP/2 9aba99956a.eb480dde95.com/aa0e983012efe701b06446149ad585d2.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject9aba99956a.eb480dde95.com
Fingerprint30:A7:C7:7E:F0:9A:15:96:0C:AF:5A:C7:5C:EB:F5:32:84:34:A1:00
ValidityWed, 24 Jan 2024 02:20:26 GMT - Tue, 23 Apr 2024 02:20:25 GMT
Size 445 kB (445374 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /aa0e983012efe701b06446149ad585d2.js HTTP/1.1
Host: 9aba99956a.eb480dde95.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:12 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Fri, 19 Jan 2024 16:09:32 GMT
etag: W/"65aa9ebc-6cbbe"
content-encoding: gzip
expires: Sat, 27 Jan 2024 21:14:12 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET chaturflix.cam/_next/static/chunks/pages/_app-4be2534fdd4acf70.js
200 OK 84 kB URL GET HTTP/3 chaturflix.cam/_next/static/chunks/pages/_app-4be2534fdd4acf70.js
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subjectchaturflix.cam
Fingerprint68:E4:D0:0F:2E:55:A4:43:7F:04:F8:F7:7A:23:FB:AE:FD:CB:54:5C
ValidityTue, 02 Jan 2024 23:17:33 GMT - Mon, 01 Apr 2024 23:17:32 GMT
File type JavaScript source, ASCII text, with very long lines (63929)
Hash f68842ec327eecb6fc28ad5869f48d40
d9ffc7bfcc1992657dc9643d76abb4e671bbce3a
d9cae98183a0e11ca1e9703d06a2377a9b4908e0d6d99bfa6d97be10b5fff896
GET /_next/static/chunks/pages/_app-4be2534fdd4acf70.js HTTP/1.1
Host: chaturflix.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/performer/bimattk21
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 27 Jan 2024 21:09:10 GMT
content-type: application/javascript; charset=UTF-8
cf-bgj: minify
cf-polished: origSize=84397
alt-svc: h3=":443"; ma=86400
etag: W/"149ad-18caa3424f2"
last-modified: Wed, 27 Dec 2023 07:36:33 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 2726788
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rtPf8pefR0Qu4BGooDBfe%2FA72LL8m3CGpzQFUkZaCeqBmpD7w0DY8n7k2IRaepqlyBrPSB268QcOtIthRjtpnnL74O9ktQRkGsV37rKCDBCF6plXfFp1GJEFXrBKw5Hrtw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cache-control: public, max-age=31536000, immutable, max-age=1209600
server: cloudflare
cf-ray: 84c3f9a5dc8256c5-OSL
content-encoding: br
GET 9aba99956a.eb480dde95.com/28331d50716b82485ef278748d469fe8/57711?version_name=a
200 OK 8.5 kB URL GET HTTP/2 9aba99956a.eb480dde95.com/28331d50716b82485ef278748d469fe8/57711?version_name=a
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject9aba99956a.eb480dde95.com
Fingerprint30:A7:C7:7E:F0:9A:15:96:0C:AF:5A:C7:5C:EB:F5:32:84:34:A1:00
ValidityWed, 24 Jan 2024 02:20:26 GMT - Tue, 23 Apr 2024 02:20:25 GMT
File type troff or preprocessor input, ASCII text, with very long lines (9643), with no line terminators
Hash 1a10109a0e8ea96fef9a41cf1cdf91e1
1cd8ce988a6b5e33ae0042d140bb54a2093f4e46
2f4e8910bf5f5c6c29828adf4274978d5c63389750450e803affbdb7624ce9d8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /28331d50716b82485ef278748d469fe8/57711?version_name=a HTTP/1.1
Host: 9aba99956a.eb480dde95.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:11 GMT
content-type: application/json
server: nginx/1.18.0
cache-control: max-age=300
expires: Sat, 27 Jan 2024 21:14:11 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET chaturflix.cam/performer/bimattk21
200 OK 16 kB URL User Request GET HTTP/2 chaturflix.cam/performer/bimattk21
IP
Certificate IssuerGoogle Trust Services LLC
Subjectchaturflix.cam
Fingerprint68:E4:D0:0F:2E:55:A4:43:7F:04:F8:F7:7A:23:FB:AE:FD:CB:54:5C
ValidityTue, 02 Jan 2024 23:17:33 GMT - Mon, 01 Apr 2024 23:17:32 GMT
File type HTML document, ASCII text, with very long lines (12765)
Hash 10a157b3cdd960de95da662a43579aa5
b4870401bb3f9164d8b416d44867d4e27a1f5ce5
0f6ec154e73bbac4fdb444a7f2d96b60ad2f8e7176fa714ca47933f6103edfc8
GET /performer/bimattk21 HTTP/1.1
Host: chaturflix.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:10 GMT
content-type: text/html; charset=utf-8
alt-svc: h3=":443"; ma=86400
cache-control: s-maxage=300, stale-while-revalidate
vary: Accept-Encoding
x-nextjs-cache: HIT
x-powered-by: Next.js
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ceFBPUUOrSVi%2FR8E1d4Y6gq9ILIuWoEb0bA9Q%2B6AclH6U%2BZ4dNHZyo6I4T64ZSWRtgsQsB9rP%2BUFY5zNb60g4tO28zScMHIz38fwkGbmkzTfq1T0x1q0PDvkxLyhFB%2FKxw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 84c3f9a3c87e0b51-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET chaturflix.cam/_next/static/css/6985462f7da35071.css
200 OK 28 kB URL GET HTTP/3 chaturflix.cam/_next/static/css/6985462f7da35071.css
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subjectchaturflix.cam
Fingerprint68:E4:D0:0F:2E:55:A4:43:7F:04:F8:F7:7A:23:FB:AE:FD:CB:54:5C
ValidityTue, 02 Jan 2024 23:17:33 GMT - Mon, 01 Apr 2024 23:17:32 GMT
File type ASCII text, with very long lines (28466), with no line terminators
Hash d19714de50bf43793a9b81b33bec25bb
76da92ab5efe70753bb9658adfb057978ce37606
53e3e78ed614af8789d45d8470c4c2f0b3f6f989ad3867a6e0d538e98500090b
GET /_next/static/css/6985462f7da35071.css HTTP/1.1
Host: chaturflix.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/performer/bimattk21
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 27 Jan 2024 21:09:10 GMT
content-type: text/css; charset=UTF-8
cf-bgj: minify
cf-polished: origSize=28555
alt-svc: h3=":443"; ma=86400
etag: W/"6f8b-18cdfe55e09"
last-modified: Sat, 06 Jan 2024 17:50:00 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 1825996
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TOaxMg4xzFnfRM0IucIlZ8z5FFu9vRBghkfo1JJrbLJYkbAr6vydyu8%2FIAGLW0DpIqwVxmD6lwpdHsrUFsTzCSCXIyruVFmmebQJGx4uPFyv8CgbKohQ1VvpiBrn%2FdcWgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cache-control: public, max-age=31536000, immutable, max-age=1209600
server: cloudflare
cf-ray: 84c3f9a5cc7156c5-OSL
content-encoding: br
GET chaturflix.cam/_next/static/chunks/75fc9c18-165f0fc0c463a090.js
200 OK 67 kB URL GET HTTP/3 chaturflix.cam/_next/static/chunks/75fc9c18-165f0fc0c463a090.js
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subjectchaturflix.cam
Fingerprint68:E4:D0:0F:2E:55:A4:43:7F:04:F8:F7:7A:23:FB:AE:FD:CB:54:5C
ValidityTue, 02 Jan 2024 23:17:33 GMT - Mon, 01 Apr 2024 23:17:32 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 88b5ff892f7c6f04473c3d2b64524127
143fd7a33f4592ac4434f65e4156d723e6020655
ad209a0d962eb08267c78465ccbacfdd37fb03fcc5457acc702ff36d737a09cd
GET /_next/static/chunks/75fc9c18-165f0fc0c463a090.js HTTP/1.1
Host: chaturflix.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/performer/bimattk21
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 27 Jan 2024 21:09:10 GMT
content-type: application/javascript; charset=UTF-8
cf-bgj: minify
cf-polished: origSize=66718
alt-svc: h3=":443"; ma=86400
etag: W/"1049e-18bd89b91b5"
last-modified: Thu, 16 Nov 2023 14:49:15 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 5680033
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wv0sMJU127mNlDwuCQWJO2FGJpnzaRn4UCQc%2FgRgwJMfxSuWzXa97Om7kK1twHUviW5cFPn7ruDf8L7%2B1kP0QhCoP5HQ3tT3miJZO6uByWNaa8BcEzs07%2F9rcaQUMSDSHQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cache-control: public, max-age=31536000, immutable, max-age=1209600
server: cloudflare
cf-ray: 84c3f9a5dc8656c5-OSL
content-encoding: br
GET js.canstrm.com/in-stream-ad-admanager/build.js
200 OK 25 kB URL GET HTTP/2 js.canstrm.com/in-stream-ad-admanager/build.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectjs.canstrm.com
Fingerprint05:58:27:83:1C:F4:A2:52:39:D1:7B:F5:8A:02:49:5A:D4:76:0A:3C
ValidityFri, 19 Jan 2024 10:01:02 GMT - Thu, 18 Apr 2024 10:01:01 GMT
File type JavaScript source, ASCII text, with very long lines (24631)
Hash 1631f1e808428b01085ee560b581d803
69b27225e917f4cbaa4f75936c2373f6af96573e
9f982ec653d01430213087beabb3deed7b69b1bb951cc936b23ba83068fcd367
GET /in-stream-ad-admanager/build.js HTTP/1.1
Host: js.canstrm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:12 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 24 Jan 2024 11:04:20 GMT
etag: W/"65b0eeb4-6079"
content-encoding: gzip
expires: Sat, 27 Jan 2024 21:14:12 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET js.canstrm.com/vast-vpaid-player/main.js
200 OK 144 kB URL GET HTTP/2 js.canstrm.com/vast-vpaid-player/main.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js
Certificate IssuerLet's Encrypt
Subjectjs.canstrm.com
Fingerprint05:58:27:83:1C:F4:A2:52:39:D1:7B:F5:8A:02:49:5A:D4:76:0A:3C
ValidityFri, 19 Jan 2024 10:01:02 GMT - Thu, 18 Apr 2024 10:01:01 GMT
Size 144 kB (144064 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /vast-vpaid-player/main.js HTTP/1.1
Host: js.canstrm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1000fapvids.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:14 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 24 Jan 2024 11:04:20 GMT
etag: W/"65b0eeb4-232c0"
content-encoding: gzip
expires: Sat, 27 Jan 2024 21:14:14 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET vast.yomeno.xyz/wrapper?katds_ep=Xkiaq4U_MN_flhUkbqqtUOmaw-5MGEPoDVpzfdu8hX81bM1swfV_GhYh792VA0TSZH_E58J20vG0nzMVMZ1Wi9QnIH92O-zONNeyevZLooJBVVqx28bzAInD1XIhZOGMNa4EGz60ScO3IOGU71TLKqlbWkvTBtHDQTDCsO4g25g4BDbD32hOJ2TD9D0-AeaAkNMmO88zPdf72FcPqpF10YxT6imT3_D85Y8kicHp5fmzO1ZnjUrgj0iGKdN8G0R35JSgD9q-_AE6JiF6EaQJGESCP3rPXLs6i-qybnjWaT7Kk3OOlfuThohGu_UGwomGx-fXQSfp38jTe_lbTG19x1jXeS6k-m2r5666OF4Lox_6KcEreKPs4CbvT6-ias68Nb22U3a2pu8HD-CtUHFaO0_oU-Lr1pTyzbHOoutonrErXnycIWUEZq_-t-EdCPrdQjTuiWPyXEkCWhpz02Y3sBDC0CZ49fKuGXdG0dBp1BaIInG1tcuYrCO4yOeba105wovHg36-gQ9ydhfxa2fw14DxMsdB_IIWDoTbqiUZLBjSiR9PnwDwCsW0jQXwFNTm-lmUFRp8kYhjKZYUdAILToev20Keosr2iqgwKmv1YPGRGI1jJ-IbR_nJZC0hnMQ09RgNdsMIiQd-KgiPpnm2nDbhacaSPIJ8T3UT1nB64TRegD94V16pXCfOgc4O2A9dnaz5aZkQ3wFFuK9uECtw71hlYt-g8VH7Xc_Uzlt3nnl8W_plEnsF5zogc5ad3lHe6hcS0OgC1Rv3Q0YiWAV011a_v47sD2J46Jdn4mkI_qa4yrU_qt_FDT_f4GNRb0dq1_hXV3wsU14zsbvYmBKHDlKwl-lYG3wWWZzo75Tk-bRo9sJrZtfgqfWfmLNoRqGkI52ayQfGfp_cDk4AP1_HDrhX57osOQ0txF9GEUL1VkUArlYkQkeGKJ0PhHg76EFWKSWYRksNSGqIAudc0kfCrYHuA4Us_mD_5rONEuDAuSmWMZwpxMAj7zKAlNRPWleboYxF5u2Fp7A-dC5etg2bC0VAiPD0yxcnSYvqzm4K6zTMl3yUrfC0gicJPTHVp0uI5aYyjGa1uGKBYD1MBysJGj5BRT5QpyvrLQRcBvSgMZRdWBVNUYPalqcnKJ-KOHldwwdNBylmm7ZtYYw8PX7NAZBvD245eXrkYAtE2c5MC2JsyuETcVkbjE7GZVFSmw8XvcDg70EPpekMnEKGLrA3nFSFRLngsphD4tg7-MP-trrnfJQxxXAYWre-gc2WZayvUckEqaNAxsHI3xvMHCqlFc8ftuZqxXjx2o83w0iuJy1KlfazhHVveab0EMM3z34uBvpTGULbM5kptyV0dhRlzfPSHei8F01DpJsZsAsNfh94MLsY9rxvI2kL4LEqLbab1fNJj044ITuK9QkkJvtZuUVlM78S8PU__WZvZ_21WKotaMOvNOTVHRNgTwVuFLAslT4ONhI9_QuvKu8ALUogmYtAKUNvANnOjBruvjYFnfZ361VNZjCGVWVpZtHofHNcL894KNcmIkC7pf95VvTJ6p442vN-2QyX--hhnRzRLrMtto8IimDY1iS8YC36DVu3qg2KTzKMMX2p04oPxkcVhgAwslOKPpe9C-A7hYdXACyWiU3qnII9ijV0jIXIkKoJXylMMAHsbwr7Eg3YUFx-OIg-9WjDJgEuHIkwArdpQAZ3JsRVmxB2EMt3PKAQ3fcXMchAr5yTYNgkdhunds0x9P-2fd1k7EfFeH47RaLt4K3yy1Z1rF_ma1Rov9WRHFuGAuWZ6cysq1dWCKSstuKEbc-vcVb1DlF6Nxei5a3JKnAXvOt39-4xq6-3b8zMDh-1xqVJtY9eRO6jD5E9Cvq3GxgSbO7XJO9b-j3fJcN4npzrDHJzalBPR2q1EElQZREilTi7e8SNbCo0s4xIW0w_wfpo1Z8tl2QmTrJ9TtdMu0If6WR2BR1h96h8B9_T7-Rup7qxRTsucMe-YPX7bVXUMM5PzW2m3oahMN_3Zz74fDoEz3HvQ8Zl600domhXS05veFUrpstwRIguQLAin2WnN9hQrx-caZA4jtqv73dg5ZU07Nar268f-ZTOPmI1JqM17FBEBv0epZIW4ysPvwyP66VrUFW6TxER92kk3fYz-WxaxSMBRP4sQwqB0QdjzangR0aPNvbuN63SBQ4OPAnKsSCcWHHdwABEynncUe8Da_PhXA9idnGRb1F0AXeZJ5BPiXIpq9EBRi5oWP7HDQfm1XU
200 OK 6.0 kB URL GET HTTP/2 vast.yomeno.xyz/wrapper?katds_ep=Xkiaq4U_MN_flhUkbqqtUOmaw-5MGEPoDVpzfdu8hX81bM1swfV_GhYh792VA0TSZH_E58J20vG0nzMVMZ1Wi9QnIH92O-zONNeyevZLooJBVVqx28bzAInD1XIhZOGMNa4EGz60ScO3IOGU71TLKqlbWkvTBtHDQTDCsO4g25g4BDbD32hOJ2TD9D0-AeaAkNMmO88zPdf72FcPqpF10YxT6imT3_D85Y8kicHp5fmzO1ZnjUrgj0iGKdN8G0R35JSgD9q-_AE6JiF6EaQJGESCP3rPXLs6i-qybnjWaT7Kk3OOlfuThohGu_UGwomGx-fXQSfp38jTe_lbTG19x1jXeS6k-m2r5666OF4Lox_6KcEreKPs4CbvT6-ias68Nb22U3a2pu8HD-CtUHFaO0_oU-Lr1pTyzbHOoutonrErXnycIWUEZq_-t-EdCPrdQjTuiWPyXEkCWhpz02Y3sBDC0CZ49fKuGXdG0dBp1BaIInG1tcuYrCO4yOeba105wovHg36-gQ9ydhfxa2fw14DxMsdB_IIWDoTbqiUZLBjSiR9PnwDwCsW0jQXwFNTm-lmUFRp8kYhjKZYUdAILToev20Keosr2iqgwKmv1YPGRGI1jJ-IbR_nJZC0hnMQ09RgNdsMIiQd-KgiPpnm2nDbhacaSPIJ8T3UT1nB64TRegD94V16pXCfOgc4O2A9dnaz5aZkQ3wFFuK9uECtw71hlYt-g8VH7Xc_Uzlt3nnl8W_plEnsF5zogc5ad3lHe6hcS0OgC1Rv3Q0YiWAV011a_v47sD2J46Jdn4mkI_qa4yrU_qt_FDT_f4GNRb0dq1_hXV3wsU14zsbvYmBKHDlKwl-lYG3wWWZzo75Tk-bRo9sJrZtfgqfWfmLNoRqGkI52ayQfGfp_cDk4AP1_HDrhX57osOQ0txF9GEUL1VkUArlYkQkeGKJ0PhHg76EFWKSWYRksNSGqIAudc0kfCrYHuA4Us_mD_5rONEuDAuSmWMZwpxMAj7zKAlNRPWleboYxF5u2Fp7A-dC5etg2bC0VAiPD0yxcnSYvqzm4K6zTMl3yUrfC0gicJPTHVp0uI5aYyjGa1uGKBYD1MBysJGj5BRT5QpyvrLQRcBvSgMZRdWBVNUYPalqcnKJ-KOHldwwdNBylmm7ZtYYw8PX7NAZBvD245eXrkYAtE2c5MC2JsyuETcVkbjE7GZVFSmw8XvcDg70EPpekMnEKGLrA3nFSFRLngsphD4tg7-MP-trrnfJQxxXAYWre-gc2WZayvUckEqaNAxsHI3xvMHCqlFc8ftuZqxXjx2o83w0iuJy1KlfazhHVveab0EMM3z34uBvpTGULbM5kptyV0dhRlzfPSHei8F01DpJsZsAsNfh94MLsY9rxvI2kL4LEqLbab1fNJj044ITuK9QkkJvtZuUVlM78S8PU__WZvZ_21WKotaMOvNOTVHRNgTwVuFLAslT4ONhI9_QuvKu8ALUogmYtAKUNvANnOjBruvjYFnfZ361VNZjCGVWVpZtHofHNcL894KNcmIkC7pf95VvTJ6p442vN-2QyX--hhnRzRLrMtto8IimDY1iS8YC36DVu3qg2KTzKMMX2p04oPxkcVhgAwslOKPpe9C-A7hYdXACyWiU3qnII9ijV0jIXIkKoJXylMMAHsbwr7Eg3YUFx-OIg-9WjDJgEuHIkwArdpQAZ3JsRVmxB2EMt3PKAQ3fcXMchAr5yTYNgkdhunds0x9P-2fd1k7EfFeH47RaLt4K3yy1Z1rF_ma1Rov9WRHFuGAuWZ6cysq1dWCKSstuKEbc-vcVb1DlF6Nxei5a3JKnAXvOt39-4xq6-3b8zMDh-1xqVJtY9eRO6jD5E9Cvq3GxgSbO7XJO9b-j3fJcN4npzrDHJzalBPR2q1EElQZREilTi7e8SNbCo0s4xIW0w_wfpo1Z8tl2QmTrJ9TtdMu0If6WR2BR1h96h8B9_T7-Rup7qxRTsucMe-YPX7bVXUMM5PzW2m3oahMN_3Zz74fDoEz3HvQ8Zl600domhXS05veFUrpstwRIguQLAin2WnN9hQrx-caZA4jtqv73dg5ZU07Nar268f-ZTOPmI1JqM17FBEBv0epZIW4ysPvwyP66VrUFW6TxER92kk3fYz-WxaxSMBRP4sQwqB0QdjzangR0aPNvbuN63SBQ4OPAnKsSCcWHHdwABEynncUe8Da_PhXA9idnGRb1F0AXeZJ5BPiXIpq9EBRi5oWP7HDQfm1XU
IP
Requested by https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint97:6B:13:8A:F1:D6:1F:F5:83:8F:B2:F3:76:3E:19:64:8A:90:69:B7
ValidityTue, 23 Jan 2024 03:08:47 GMT - Mon, 22 Apr 2024 03:08:46 GMT
File type ASCII text, with very long lines (6005), with no line terminators
Hash 0ca383f67f8bc64ba6ce986cc959fcbe
ecdc998c0d62bdd8643bf80fe66f70859c2380b0
4c21a451463aec043198bbdbb2ed1c8d432c94ceca10becb3461c394cb9e953c
GET /wrapper?katds_ep=Xkiaq4U_MN_flhUkbqqtUOmaw-5MGEPoDVpzfdu8hX81bM1swfV_GhYh792VA0TSZH_E58J20vG0nzMVMZ1Wi9QnIH92O-zONNeyevZLooJBVVqx28bzAInD1XIhZOGMNa4EGz60ScO3IOGU71TLKqlbWkvTBtHDQTDCsO4g25g4BDbD32hOJ2TD9D0-AeaAkNMmO88zPdf72FcPqpF10YxT6imT3_D85Y8kicHp5fmzO1ZnjUrgj0iGKdN8G0R35JSgD9q-_AE6JiF6EaQJGESCP3rPXLs6i-qybnjWaT7Kk3OOlfuThohGu_UGwomGx-fXQSfp38jTe_lbTG19x1jXeS6k-m2r5666OF4Lox_6KcEreKPs4CbvT6-ias68Nb22U3a2pu8HD-CtUHFaO0_oU-Lr1pTyzbHOoutonrErXnycIWUEZq_-t-EdCPrdQjTuiWPyXEkCWhpz02Y3sBDC0CZ49fKuGXdG0dBp1BaIInG1tcuYrCO4yOeba105wovHg36-gQ9ydhfxa2fw14DxMsdB_IIWDoTbqiUZLBjSiR9PnwDwCsW0jQXwFNTm-lmUFRp8kYhjKZYUdAILToev20Keosr2iqgwKmv1YPGRGI1jJ-IbR_nJZC0hnMQ09RgNdsMIiQd-KgiPpnm2nDbhacaSPIJ8T3UT1nB64TRegD94V16pXCfOgc4O2A9dnaz5aZkQ3wFFuK9uECtw71hlYt-g8VH7Xc_Uzlt3nnl8W_plEnsF5zogc5ad3lHe6hcS0OgC1Rv3Q0YiWAV011a_v47sD2J46Jdn4mkI_qa4yrU_qt_FDT_f4GNRb0dq1_hXV3wsU14zsbvYmBKHDlKwl-lYG3wWWZzo75Tk-bRo9sJrZtfgqfWfmLNoRqGkI52ayQfGfp_cDk4AP1_HDrhX57osOQ0txF9GEUL1VkUArlYkQkeGKJ0PhHg76EFWKSWYRksNSGqIAudc0kfCrYHuA4Us_mD_5rONEuDAuSmWMZwpxMAj7zKAlNRPWleboYxF5u2Fp7A-dC5etg2bC0VAiPD0yxcnSYvqzm4K6zTMl3yUrfC0gicJPTHVp0uI5aYyjGa1uGKBYD1MBysJGj5BRT5QpyvrLQRcBvSgMZRdWBVNUYPalqcnKJ-KOHldwwdNBylmm7ZtYYw8PX7NAZBvD245eXrkYAtE2c5MC2JsyuETcVkbjE7GZVFSmw8XvcDg70EPpekMnEKGLrA3nFSFRLngsphD4tg7-MP-trrnfJQxxXAYWre-gc2WZayvUckEqaNAxsHI3xvMHCqlFc8ftuZqxXjx2o83w0iuJy1KlfazhHVveab0EMM3z34uBvpTGULbM5kptyV0dhRlzfPSHei8F01DpJsZsAsNfh94MLsY9rxvI2kL4LEqLbab1fNJj044ITuK9QkkJvtZuUVlM78S8PU__WZvZ_21WKotaMOvNOTVHRNgTwVuFLAslT4ONhI9_QuvKu8ALUogmYtAKUNvANnOjBruvjYFnfZ361VNZjCGVWVpZtHofHNcL894KNcmIkC7pf95VvTJ6p442vN-2QyX--hhnRzRLrMtto8IimDY1iS8YC36DVu3qg2KTzKMMX2p04oPxkcVhgAwslOKPpe9C-A7hYdXACyWiU3qnII9ijV0jIXIkKoJXylMMAHsbwr7Eg3YUFx-OIg-9WjDJgEuHIkwArdpQAZ3JsRVmxB2EMt3PKAQ3fcXMchAr5yTYNgkdhunds0x9P-2fd1k7EfFeH47RaLt4K3yy1Z1rF_ma1Rov9WRHFuGAuWZ6cysq1dWCKSstuKEbc-vcVb1DlF6Nxei5a3JKnAXvOt39-4xq6-3b8zMDh-1xqVJtY9eRO6jD5E9Cvq3GxgSbO7XJO9b-j3fJcN4npzrDHJzalBPR2q1EElQZREilTi7e8SNbCo0s4xIW0w_wfpo1Z8tl2QmTrJ9TtdMu0If6WR2BR1h96h8B9_T7-Rup7qxRTsucMe-YPX7bVXUMM5PzW2m3oahMN_3Zz74fDoEz3HvQ8Zl600domhXS05veFUrpstwRIguQLAin2WnN9hQrx-caZA4jtqv73dg5ZU07Nar268f-ZTOPmI1JqM17FBEBv0epZIW4ysPvwyP66VrUFW6TxER92kk3fYz-WxaxSMBRP4sQwqB0QdjzangR0aPNvbuN63SBQ4OPAnKsSCcWHHdwABEynncUe8Da_PhXA9idnGRb1F0AXeZJ5BPiXIpq9EBRi5oWP7HDQfm1XU HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1000fapvids.com/
Origin: https://1000fapvids.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Sat, 27 Jan 2024 21:09:13 GMT
content-type: text/xml;charset=UTF-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: Accept-Encoding, *
access-control-allow-credentials: true
access-control-allow-origin: https://1000fapvids.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,
access-control-expose-headers: Content-Length,Content-Range
content-encoding: gzip
X-Firefox-Spdy: h2
GET chaturflix.cam/_next/static/SKtI8g5i9VxjhmXwNL_zd/_ssgManifest.js
200 OK 303 B URL GET HTTP/3 chaturflix.cam/_next/static/SKtI8g5i9VxjhmXwNL_zd/_ssgManifest.js
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerGoogle Trust Services LLC
Subjectchaturflix.cam
Fingerprint68:E4:D0:0F:2E:55:A4:43:7F:04:F8:F7:7A:23:FB:AE:FD:CB:54:5C
ValidityTue, 02 Jan 2024 23:17:33 GMT - Mon, 01 Apr 2024 23:17:32 GMT
File type ASCII text, with very long lines (334), with no line terminators
Hash dd94ecfd66e56af96d965f78474e910e
2fd74e6dba4c098f69c4d51719cc4f03a7b349e1
3905b3075551dddbd1b7085743eee6f7c02b760941139277a8d2c78288bfd10e
GET /_next/static/SKtI8g5i9VxjhmXwNL_zd/_ssgManifest.js HTTP/1.1
Host: chaturflix.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/performer/bimattk21
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 27 Jan 2024 21:09:10 GMT
content-type: application/javascript; charset=UTF-8
cf-bgj: minify
alt-svc: h3=":443"; ma=86400
etag: W/"12f-18cdfec3d52"
last-modified: Sat, 06 Jan 2024 17:57:30 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 1825842
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TahreDa9zRoC4qPovV5HaUI6iinQeAVkcxd%2B4WbwhAbQmdTjXk2sjqTRCoW%2B4TAiR1VywMRmEj9aGLPNflqM%2BebKyyi7XQzYFXScUTFj6hzTgiDSpt4SOOpDy2aUYx4LGA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cache-control: public, max-age=31536000, immutable, max-age=1209600
server: cloudflare
cf-ray: 84c3f9a5ecad56c5-OSL
content-encoding: br
GET 9aba99956a.eb480dde95.com/988e36d9349e98df2124cbfa5971cfbf.js
200 OK 92 kB URL GET HTTP/2 9aba99956a.eb480dde95.com/988e36d9349e98df2124cbfa5971cfbf.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject9aba99956a.eb480dde95.com
Fingerprint30:A7:C7:7E:F0:9A:15:96:0C:AF:5A:C7:5C:EB:F5:32:84:34:A1:00
ValidityWed, 24 Jan 2024 02:20:26 GMT - Tue, 23 Apr 2024 02:20:25 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /988e36d9349e98df2124cbfa5971cfbf.js HTTP/1.1
Host: 9aba99956a.eb480dde95.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:12 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 23 Jan 2024 11:11:52 GMT
etag: W/"65af9ef8-1693e"
content-encoding: gzip
expires: Sat, 27 Jan 2024 21:14:12 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
200 OK 20 kB URL GET HTTP/2 static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
IP
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:79:35:ED:04:A2:CA:50:F7:9A:B8:FE:DF:A5:0C:B1:F2:E6:DD:E8
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (19986), with no line terminators
Hash dd1d068fdb5fe90b6c05a5b3940e088c
0d96f9df8772633a9df4c81cf323a4ef8998ba59
6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101
GET /beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://chaturflix.cam
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:10 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2023.10.0"
last-modified: Tue, 10 Oct 2023 21:38:13 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 84c3f9a60887712b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
GET 9aba99956a.eb480dde95.com/2c601b3a642e433dfeb80b0fae71cf3a.js
200 OK 164 kB URL GET HTTP/2 9aba99956a.eb480dde95.com/2c601b3a642e433dfeb80b0fae71cf3a.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subject9aba99956a.eb480dde95.com
Fingerprint30:A7:C7:7E:F0:9A:15:96:0C:AF:5A:C7:5C:EB:F5:32:84:34:A1:00
ValidityWed, 24 Jan 2024 02:20:26 GMT - Tue, 23 Apr 2024 02:20:25 GMT
Size 164 kB (163708 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /2c601b3a642e433dfeb80b0fae71cf3a.js HTTP/1.1
Host: 9aba99956a.eb480dde95.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:12 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 25 Jan 2024 12:36:05 GMT
etag: W/"65b255b5-27f7c"
content-encoding: gzip
expires: Sat, 27 Jan 2024 21:14:12 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET a.realsrv.com/video-slider.js
200 OK 47 kB URL GET HTTP/2 a.realsrv.com/video-slider.js
IP
ASN #60068 Datacamp Limited
Requested by https://chaturflix.cam/performer/bimattk21
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
Fingerprint44:2D:DC:FD:4A:2E:1C:BD:23:E3:23:21:E2:45:57:13:37:E2:3F:C8
ValidityMon, 18 Dec 2023 09:34:14 GMT - Sun, 17 Mar 2024 09:34:13 GMT
File type JavaScript source, ASCII text, with very long lines (32704)
Hash a38be8c74d8421883308b2410fa2fac3
1c6f186699a5f677bd3fa8bba391d91adf867d5e
b81f999546684e41d3a3af3c24b8f7a11e10ad8dcd79983de67568f618a99a69
GET /video-slider.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chaturflix.cam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Jan 2024 21:09:11 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"1c6f186699a5f677bd3fa8bba39"
accept-ch:
expires: Fri, 26 Jan 2024 12:25:53 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: EwwBuUwJFAH3OiYAAAwBuUwKDAH3DAAAAAwBnJIhHwH3AQAAAA
x-77-nzt-ray: af58563019743cfdf770b56577a65019
x-accel-expires: @1706390764
x-accel-date: 1706379965
x-77-cache: HIT
x-77-age: 9799
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 12, 9786
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
GET vast.yomeno.xyz/wrapper?katds_ep=S2dY9h7VKK901oj3RywmsBtQyo0FJ5DZSaJv4tnotMnQgtFFUSqKsR-1aivDmwBf_N_-39zLvkqzxFtTWbFzD6ds1tbzfeleQ0ujNCeHhRKk6tUawgQp-sU4GDiGAEEJnq10JM0dsis77LcbqXOAyP957Y8du1hWLQGYNtOX2JK7sFrsQDFX1PdV1MKZjRgwPpLsTUDpflfFOfvxqKPgYFHu3xF9Hj4oLAcOGlI8DoN3rlAvJ4kXUA0wk3F5M9K5Z8Mu-k-3-p4K-Hus-DR1utZucpUYqVza-I-4W99kg-eQlZ7_c65coLPT8D7E5T48M-znJR97PHUjtRXFm_o-c4CZmYjjPJwhp3_-pzNqJSqO5myykEuFYU94wX9AmVOy7_iZaxqjiymrH89eXTEWHgXjIONyGdRW0t_6i4hL30iJ79HZY0rzAB2mBvwhynRvL6qv1dDWRs8pGfRZTVlEnUEz6VusbEwYDmpmqCERyeR0ZAMB-aD6mHYMAFcsjKloJonrXaEzc78Ft5LOkrZQYWIRyxcAPffqdBOiYFK5xp2vKixmIb096UTLMKKuFFN-MmybxZP2W1o5fuva2OSO0S7yLYMIAff8KiBFDcRuipThj2qOT8E2NKVfq1HZICgQpar4Zi384N2PcOACdRconhJyt3H9sjPBUpznOPBG9BByB3y1Yo4UaL_jOB-MSeepMvPybmMMKblCALJ7XXp3Gux0Jgn_ApKZ8sldF8OwAE7_HyObgPfnJUFRjQrvEJBCwrYhBr7u91pVBKjbBbg4Pvyk8D1CFNm6F1uYk1xItUIvasPjhovKlbL0LFMJtck8quf995nHFm-Lyt7-JXoia-gSvGD5WhjJBUJIvCPefZbwBSEmySElChY57VQSH2GztBpaF9JNnLgvPZb4w3WFmuBPKkvfSrzXoK2sYFHl4WKy8zct9OmQbBbLh6pClf8JwQJRKl3c8qMI4MDtjAex6HTd17HOJ8gTarjsyryxXDDW6t7Smjpd-CDUhMm6OH_iKWVQ95UIp5GlASeLhCHggbzAQ4da_t1WB8Kq5i6LVEX3bObwI32D8Kht3Nz0qMorT56dmfir8WoTSpRZhsnxLN-2g2N2wCK2VMmn3Nx3NUC8azpSWBJRWzrEtWW91l9mVU1nyL-z2KpXvZESRvOebssBc91x4dCZFDu1bvEHByfYR6Ls1FM3PgWdYr2tzVq7lEUE50v15wOql-J1rXaCoo1fJ-RnYf8LhvBGO_3kR51X3WiL9LhuWN-4-9FVliqwXDTVW7CwhS_e7BxEiEKbQVW3v0IvYXA2dXw20NM20SRR3X6m0ulVsoP_gNHzcrB-YSeZny5JEvHz33cobcPAad7XyP_QIfGhwPlQon8GjpT99OJG0bIC0VQlo-Y12PeeIMQGeXPSlTSH6DJyTihuPlOYhBt7wGw1OGosb2Tbw0vix9KScVDYoroIoN3yBFaJgUwyPtSefrjnzDmQisAM3tE4vzs5vAEEOYxu1g4xnKwsAnmT6I9DoDjXLrjLDUDWLsxYXAjlce_KI_LE9Sp72uszJBuDSJAEnqdTFfcF4qTGWVFkGVsjUL-rbwfycwWCDq1NmvTo266GkwgN5ZZ79IidjG6kTLDFwXegX_2uuLlHTt2LlwvyvFSE029qFl6UXGlk_aHetwsJN_cSc2Z4egBBdM8MDsSDurEs4RxCj29PsJnmekHC_1TNidnV2G3KL2zJtCnwKsQHKyDUF6DvNRxs06xUInezI6D56LSe0pMZAWE
200 OK 5.7 kB URL GET HTTP/2 vast.yomeno.xyz/wrapper?katds_ep=S2dY9h7VKK901oj3RywmsBtQyo0FJ5DZSaJv4tnotMnQgtFFUSqKsR-1aivDmwBf_N_-39zLvkqzxFtTWbFzD6ds1tbzfeleQ0ujNCeHhRKk6tUawgQp-sU4GDiGAEEJnq10JM0dsis77LcbqXOAyP957Y8du1hWLQGYNtOX2JK7sFrsQDFX1PdV1MKZjRgwPpLsTUDpflfFOfvxqKPgYFHu3xF9Hj4oLAcOGlI8DoN3rlAvJ4kXUA0wk3F5M9K5Z8Mu-k-3-p4K-Hus-DR1utZucpUYqVza-I-4W99kg-eQlZ7_c65coLPT8D7E5T48M-znJR97PHUjtRXFm_o-c4CZmYjjPJwhp3_-pzNqJSqO5myykEuFYU94wX9AmVOy7_iZaxqjiymrH89eXTEWHgXjIONyGdRW0t_6i4hL30iJ79HZY0rzAB2mBvwhynRvL6qv1dDWRs8pGfRZTVlEnUEz6VusbEwYDmpmqCERyeR0ZAMB-aD6mHYMAFcsjKloJonrXaEzc78Ft5LOkrZQYWIRyxcAPffqdBOiYFK5xp2vKixmIb096UTLMKKuFFN-MmybxZP2W1o5fuva2OSO0S7yLYMIAff8KiBFDcRuipThj2qOT8E2NKVfq1HZICgQpar4Zi384N2PcOACdRconhJyt3H9sjPBUpznOPBG9BByB3y1Yo4UaL_jOB-MSeepMvPybmMMKblCALJ7XXp3Gux0Jgn_ApKZ8sldF8OwAE7_HyObgPfnJUFRjQrvEJBCwrYhBr7u91pVBKjbBbg4Pvyk8D1CFNm6F1uYk1xItUIvasPjhovKlbL0LFMJtck8quf995nHFm-Lyt7-JXoia-gSvGD5WhjJBUJIvCPefZbwBSEmySElChY57VQSH2GztBpaF9JNnLgvPZb4w3WFmuBPKkvfSrzXoK2sYFHl4WKy8zct9OmQbBbLh6pClf8JwQJRKl3c8qMI4MDtjAex6HTd17HOJ8gTarjsyryxXDDW6t7Smjpd-CDUhMm6OH_iKWVQ95UIp5GlASeLhCHggbzAQ4da_t1WB8Kq5i6LVEX3bObwI32D8Kht3Nz0qMorT56dmfir8WoTSpRZhsnxLN-2g2N2wCK2VMmn3Nx3NUC8azpSWBJRWzrEtWW91l9mVU1nyL-z2KpXvZESRvOebssBc91x4dCZFDu1bvEHByfYR6Ls1FM3PgWdYr2tzVq7lEUE50v15wOql-J1rXaCoo1fJ-RnYf8LhvBGO_3kR51X3WiL9LhuWN-4-9FVliqwXDTVW7CwhS_e7BxEiEKbQVW3v0IvYXA2dXw20NM20SRR3X6m0ulVsoP_gNHzcrB-YSeZny5JEvHz33cobcPAad7XyP_QIfGhwPlQon8GjpT99OJG0bIC0VQlo-Y12PeeIMQGeXPSlTSH6DJyTihuPlOYhBt7wGw1OGosb2Tbw0vix9KScVDYoroIoN3yBFaJgUwyPtSefrjnzDmQisAM3tE4vzs5vAEEOYxu1g4xnKwsAnmT6I9DoDjXLrjLDUDWLsxYXAjlce_KI_LE9Sp72uszJBuDSJAEnqdTFfcF4qTGWVFkGVsjUL-rbwfycwWCDq1NmvTo266GkwgN5ZZ79IidjG6kTLDFwXegX_2uuLlHTt2LlwvyvFSE029qFl6UXGlk_aHetwsJN_cSc2Z4egBBdM8MDsSDurEs4RxCj29PsJnmekHC_1TNidnV2G3KL2zJtCnwKsQHKyDUF6DvNRxs06xUInezI6D56LSe0pMZAWE
IP
Requested by https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint97:6B:13:8A:F1:D6:1F:F5:83:8F:B2:F3:76:3E:19:64:8A:90:69:B7
ValidityTue, 23 Jan 2024 03:08:47 GMT - Mon, 22 Apr 2024 03:08:46 GMT
File type ASCII text, with very long lines (5746), with no line terminators
Hash bf7c4085a2a543f2cf22fefee3af68e3
c210c3a03efd85d75fda4a3b8ff2fb0145c1c55f
945d4986c56c9a598db8aabed1d69e1b5e843b83e17bd082ee2fa02912c777dc
GET /wrapper?katds_ep=S2dY9h7VKK901oj3RywmsBtQyo0FJ5DZSaJv4tnotMnQgtFFUSqKsR-1aivDmwBf_N_-39zLvkqzxFtTWbFzD6ds1tbzfeleQ0ujNCeHhRKk6tUawgQp-sU4GDiGAEEJnq10JM0dsis77LcbqXOAyP957Y8du1hWLQGYNtOX2JK7sFrsQDFX1PdV1MKZjRgwPpLsTUDpflfFOfvxqKPgYFHu3xF9Hj4oLAcOGlI8DoN3rlAvJ4kXUA0wk3F5M9K5Z8Mu-k-3-p4K-Hus-DR1utZucpUYqVza-I-4W99kg-eQlZ7_c65coLPT8D7E5T48M-znJR97PHUjtRXFm_o-c4CZmYjjPJwhp3_-pzNqJSqO5myykEuFYU94wX9AmVOy7_iZaxqjiymrH89eXTEWHgXjIONyGdRW0t_6i4hL30iJ79HZY0rzAB2mBvwhynRvL6qv1dDWRs8pGfRZTVlEnUEz6VusbEwYDmpmqCERyeR0ZAMB-aD6mHYMAFcsjKloJonrXaEzc78Ft5LOkrZQYWIRyxcAPffqdBOiYFK5xp2vKixmIb096UTLMKKuFFN-MmybxZP2W1o5fuva2OSO0S7yLYMIAff8KiBFDcRuipThj2qOT8E2NKVfq1HZICgQpar4Zi384N2PcOACdRconhJyt3H9sjPBUpznOPBG9BByB3y1Yo4UaL_jOB-MSeepMvPybmMMKblCALJ7XXp3Gux0Jgn_ApKZ8sldF8OwAE7_HyObgPfnJUFRjQrvEJBCwrYhBr7u91pVBKjbBbg4Pvyk8D1CFNm6F1uYk1xItUIvasPjhovKlbL0LFMJtck8quf995nHFm-Lyt7-JXoia-gSvGD5WhjJBUJIvCPefZbwBSEmySElChY57VQSH2GztBpaF9JNnLgvPZb4w3WFmuBPKkvfSrzXoK2sYFHl4WKy8zct9OmQbBbLh6pClf8JwQJRKl3c8qMI4MDtjAex6HTd17HOJ8gTarjsyryxXDDW6t7Smjpd-CDUhMm6OH_iKWVQ95UIp5GlASeLhCHggbzAQ4da_t1WB8Kq5i6LVEX3bObwI32D8Kht3Nz0qMorT56dmfir8WoTSpRZhsnxLN-2g2N2wCK2VMmn3Nx3NUC8azpSWBJRWzrEtWW91l9mVU1nyL-z2KpXvZESRvOebssBc91x4dCZFDu1bvEHByfYR6Ls1FM3PgWdYr2tzVq7lEUE50v15wOql-J1rXaCoo1fJ-RnYf8LhvBGO_3kR51X3WiL9LhuWN-4-9FVliqwXDTVW7CwhS_e7BxEiEKbQVW3v0IvYXA2dXw20NM20SRR3X6m0ulVsoP_gNHzcrB-YSeZny5JEvHz33cobcPAad7XyP_QIfGhwPlQon8GjpT99OJG0bIC0VQlo-Y12PeeIMQGeXPSlTSH6DJyTihuPlOYhBt7wGw1OGosb2Tbw0vix9KScVDYoroIoN3yBFaJgUwyPtSefrjnzDmQisAM3tE4vzs5vAEEOYxu1g4xnKwsAnmT6I9DoDjXLrjLDUDWLsxYXAjlce_KI_LE9Sp72uszJBuDSJAEnqdTFfcF4qTGWVFkGVsjUL-rbwfycwWCDq1NmvTo266GkwgN5ZZ79IidjG6kTLDFwXegX_2uuLlHTt2LlwvyvFSE029qFl6UXGlk_aHetwsJN_cSc2Z4egBBdM8MDsSDurEs4RxCj29PsJnmekHC_1TNidnV2G3KL2zJtCnwKsQHKyDUF6DvNRxs06xUInezI6D56LSe0pMZAWE HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1000fapvids.com/
Origin: https://1000fapvids.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Sat, 27 Jan 2024 21:09:13 GMT
content-type: text/xml;charset=UTF-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: Accept-Encoding, *
access-control-allow-credentials: true
access-control-allow-origin: https://1000fapvids.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,
access-control-expose-headers: Content-Length,Content-Range
content-encoding: gzip
X-Firefox-Spdy: h2
104.21.58.108
172.67.203.146
185.76.9.23
109.200.199.111
94.130.198.6