r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11829
Expires: Fri, 02 Dec 2022 03:03:52 GMT
Date: Thu, 01 Dec 2022 23:46:43 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 0c748388899e8a8d3680355da2ea5020
903c620cd137613daafb0da0508c37b2f4a67212
39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4487
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 23:46:43 GMT
Last-Modified: Thu, 01 Dec 2022 22:31:56 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 01 Dec 2022 23:18:10 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1713
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9697
Expires: Fri, 02 Dec 2022 02:28:20 GMT
Date: Thu, 01 Dec 2022 23:46:43 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: BlHHqpo4xQOHExMTfmNJoWaNU5L9VcjgD9bwRM4SgHKd9XopMyoWORxjkwRFpp5Fay0jHVtNR+A=
x-amz-request-id: RX461YKMV8G43YJN
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 01 Dec 2022 23:46:29 GMT
age: 14
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 23:46:43 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.shufflesex.com/tags/4817582/melina-celine
200 OK 16 kB URL HTTP/1.1 www.shufflesex.com/tags/4817582/melina-celine
IP
ASN #45839 Shinjiru Technology Sdn Bhd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (676), with CRLF, CR, LF line terminators
Hash 76f59e18f744cfae1c07b8dcd69899dc
f45b2e8f37329a3f9cb81400e99db04ffcd7a835
a6748d61a1329dbe420016d8cfeaccc6ab6f5097fd2c36df9279f7c858558ad5
GET /tags/4817582/melina-celine HTTP/1.1
Host: www.shufflesex.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Cache-Control: public, max-age=594
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: Thu, 01 Dec 2022 15:56:36 GMT
Last-Modified: Thu, 01 Dec 2022 15:46:36 GMT
Vary: *
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Thu, 01 Dec 2022 15:46:41 GMT
Content-Length: 16356
ocsp.digicert.com/
200 OK 280 B IP
Hash 472fb7b4685a8c9546f18f26784454b6
881e1e72f51cffd98a512ed30e28b45eda8e5e29
adcdbc4788db9450edfcb046f874192140b042f9ef7d2c2c47771605893fb141
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4076
Cache-Control: max-age=92421
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 23:46:43 GMT
Etag: "6387f2fc-118"
Expires: Sat, 03 Dec 2022 01:27:04 GMT
Last-Modified: Thu, 01 Dec 2022 00:19:08 GMT
Server: ECS (amb/6BAE)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 188c50963e7939b1f26a31dbcb8c8200
859416e6148ea6618584e53604efcf072bb989cc
3a313cd3c1693a886bfbf6ffc6fbac78f87e6ded2b9a7749553444ada65ce36e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 23:46:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash 96a3f493447a5ed9077a657334b81901
6bea5546df726ef4adc061b47fc93f680f7f0c44
b258a661dcc9a7ffa3a34f9dfa33e00f6a87f124b8ef1f07d4b531449b8164a2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3207
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 23:46:43 GMT
Etag: "638783d5-118"
Last-Modified: Thu, 01 Dec 2022 22:53:16 GMT
Server: ECS (amb/6BAE)
X-Cache: HIT
Content-Length: 278
www.googletagmanager.com/gtag/js?id=G-LDY4NKLLJW
200 OK 76 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-LDY4NKLLJW
IP
File type ASCII text, with very long lines (20080)
Hash 6f8c8c3a4accb51fcaa7870213838ace
86b53c1b7e18af375e9fd003934e5b7d5c69c378
7ffe4a33d9cf3fd8bb0fc9f2448c31d80b20615dc52de745cd4a289bb9d417be
GET /gtag/js?id=G-LDY4NKLLJW HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 01 Dec 2022 23:46:43 GMT
expires: Thu, 01 Dec 2022 23:46:43 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76264
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 39354002655842cbe2d73fe111f43126
e9003a73cbfd5bfa9700052a5b0b1de5c793ded3
eb74462dead7966c3d0da710f88e58d1f25fbb9dd1d0a152495b03b7dafa1a50
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1394
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 23:46:43 GMT
Etag: "638806a3-116"
Last-Modified: Thu, 01 Dec 2022 23:23:29 GMT
Server: ECS (amb/6BAE)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 280 B IP
Hash 472fb7b4685a8c9546f18f26784454b6
881e1e72f51cffd98a512ed30e28b45eda8e5e29
adcdbc4788db9450edfcb046f874192140b042f9ef7d2c2c47771605893fb141
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 66
Cache-Control: max-age=88411
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 23:46:43 GMT
Etag: "6387f2fc-118"
Expires: Sat, 03 Dec 2022 00:20:14 GMT
Last-Modified: Thu, 01 Dec 2022 00:19:08 GMT
Server: ECS (amb/6BB7)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 188c50963e7939b1f26a31dbcb8c8200
859416e6148ea6618584e53604efcf072bb989cc
3a313cd3c1693a886bfbf6ffc6fbac78f87e6ded2b9a7749553444ada65ce36e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 23:46:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
exporntoons.net/static/extend/dark/favicon.ico
200 OK 1.2 kB URL HTTP/2 exporntoons.net/static/extend/dark/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 6ffd88ff3fdf901f7f50e60e6c9038e7
51712e75b124037bfc54d0ee61ed5f67388379dc
09becf046eedebf60f355329642c3e8d42b8968e8be8a2599027e0d100121658
GET /static/extend/dark/favicon.ico HTTP/1.1
Host: exporntoons.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.shufflesex.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 23:46:43 GMT
content-type: image/x-icon
content-length: 1150
last-modified: Thu, 01 Dec 2022 20:27:40 GMT
etag: "63890e3c-47e"
expires: Fri, 01 Dec 2023 23:46:43 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 1e7865f82dadf26d6f57aafc1c803d5f
beb92057355feeeae5509c1347f43e949e98c48b
c5f186c27c54de8346c1938f229b50defd5c928cb2670688b0132a6ec7971f35
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "C5F186C27C54DE8346C1938F229B50DEFD5C928CB2670688B0132A6EC7971F35"
Last-Modified: Thu, 01 Dec 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 02 Dec 2022 05:46:43 GMT
Date: Thu, 01 Dec 2022 23:46:43 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 278 B IP
Hash 39354002655842cbe2d73fe111f43126
e9003a73cbfd5bfa9700052a5b0b1de5c793ded3
eb74462dead7966c3d0da710f88e58d1f25fbb9dd1d0a152495b03b7dafa1a50
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1394
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 23:46:43 GMT
Last-Modified: Thu, 01 Dec 2022 23:23:29 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 96a3f493447a5ed9077a657334b81901
6bea5546df726ef4adc061b47fc93f680f7f0c44
b258a661dcc9a7ffa3a34f9dfa33e00f6a87f124b8ef1f07d4b531449b8164a2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3207
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 23:46:43 GMT
Last-Modified: Thu, 01 Dec 2022 22:53:16 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 278
www.shufflesex.com/fontawesome/css/all.css
200 OK 13 kB URL HTTP/1.1 www.shufflesex.com/fontawesome/css/all.css
IP
ASN #45839 Shinjiru Technology Sdn Bhd
Hash 8540f865878faaff96e345d73d408afb
8c16d1ddd32f62d3325582795f451d0ec76c4ca2
fc93a6e7f7c3921752fcd5d3049eaec61fb7f25af619a4f3ad0209e6e3971a2b
GET /fontawesome/css/all.css HTTP/1.1
Host: www.shufflesex.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shufflesex.com/tags/4817582/melina-celine
HTTP/1.1 200 OK
Cache-Control: max-age=604800
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Tue, 04 Feb 2020 16:05:48 GMT
Accept-Ranges: bytes
ETag: "096c3f674dbd51:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 01 Dec 2022 15:46:41 GMT
Content-Length: 12885
pornpicslab.com/favicon.ico
404 Not Found 342 B URL HTTP/1.1 pornpicslab.com/favicon.ico
IP
ASN #8972 Host Europe GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6f307c9a4510b1a7171a5dddf580a162
19424064400b59796e7036a411b7e9ccffd188ca
90f9ba4420ac1eb6ce0949ce17851a24ca37d90b6bf7205f1fc4028f67b5f309
GET /favicon.ico HTTP/1.1
Host: pornpicslab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shufflesex.com/
HTTP/1.1 404 Not Found
Server: nginx/1.16.1
Date: Thu, 01 Dec 2022 23:46:43 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 342
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4d66f552576b83518340a0f897f4b37d
d0b165de2e3995f56ac80f771151f8273f3df284
c85e6c793811f0e9dc5b012360293fd05e8cf02a1f2847b656869d0dc88a1b83
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C85E6C793811F0E9DC5B012360293FD05E8CF02A1F2847B656869D0DC88A1B83"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6859
Expires: Fri, 02 Dec 2022 01:41:02 GMT
Date: Thu, 01 Dec 2022 23:46:43 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 1e7865f82dadf26d6f57aafc1c803d5f
beb92057355feeeae5509c1347f43e949e98c48b
c5f186c27c54de8346c1938f229b50defd5c928cb2670688b0132a6ec7971f35
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "C5F186C27C54DE8346C1938F229B50DEFD5C928CB2670688B0132A6EC7971F35"
Last-Modified: Thu, 01 Dec 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21599
Expires: Fri, 02 Dec 2022 05:46:43 GMT
Date: Thu, 01 Dec 2022 23:46:44 GMT
Connection: keep-alive
www.camwhores.tv/favicon.ico
200 OK 1.2 kB URL HTTP/2 www.camwhores.tv/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 8249d7d79f137da271ee8c74099043e3
00cb9970a77564b877c406be365d741728431be0
7922c8c88c85451139c2b7bb04c0410c970be2e538fd465b43ce37b1fdabcfbb
GET /favicon.ico HTTP/1.1
Host: www.camwhores.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 23:46:44 GMT
content-type: image/x-icon
content-length: 1150
last-modified: Mon, 27 Apr 2020 09:47:46 GMT
etag: "5ea6aa42-47e"
accept-ranges: bytes
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 01 Dec 2022 23:08:56 GMT
cache-control: public,max-age=3600
age: 2268
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
www.shufflesex.com/images/logos/SHUFFLESEX.png
200 OK 11 kB URL HTTP/1.1 www.shufflesex.com/images/logos/SHUFFLESEX.png
IP
ASN #45839 Shinjiru Technology Sdn Bhd
File type PNG image data, 247 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 2e0fa537e2bed479c55bef5d7fc42dc3
5e83cf40ef61eea94687cca4b079b662a75fb847
0a7a8c7b52d0b76794285785a3ae61490612e5e07fdb6e978242cce441f099c2
GET /images/logos/SHUFFLESEX.png HTTP/1.1
Host: www.shufflesex.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shufflesex.com/tags/4817582/melina-celine
HTTP/1.1 200 OK
Cache-Control: max-age=604800
Content-Type: image/png
Last-Modified: Mon, 04 Apr 2022 16:43:41 GMT
Accept-Ranges: bytes
ETag: "e62c17244348d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 01 Dec 2022 15:46:42 GMT
Content-Length: 10952
pornpicslab.com/tmb/galleries/252/154/3_t.jpg
200 OK 5.0 kB URL HTTP/1.1 pornpicslab.com/tmb/galleries/252/154/3_t.jpg
IP
ASN #8972 Host Europe GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x225, components 3\012- data
Hash aeedac18b8df4abb973ab9c937cffe19
c52d49c9d937e5ce90196a3ae6c2f6f8554ece98
34183e8a80ad83b7dcc4aae5ed307d213c5648b5094bb6cb2e7943e1c67e3c16
GET /tmb/galleries/252/154/3_t.jpg HTTP/1.1
Host: pornpicslab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shufflesex.com/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Thu, 01 Dec 2022 23:46:44 GMT
Content-Type: image/jpeg
Content-Length: 5043
Last-Modified: Fri, 17 May 2019 14:25:34 GMT
Connection: keep-alive
ETag: "5cdec45e-13b3"
Expires: Sun, 04 Dec 2022 23:46:44 GMT
Cache-Control: max-age=259200
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 279 B IP
Hash 6a2d3c87ccc56afa302b054a21eb0093
68c66b6fe2478eebe307a6b50b560ce84f4eae83
815331dac513e8d4fa76ba7863eca90769bb4694524d8c845d1218595133016c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5788
Cache-Control: max-age=162546
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 23:46:44 GMT
Etag: "6388fe3a-117"
Expires: Sat, 03 Dec 2022 20:55:50 GMT
Last-Modified: Thu, 01 Dec 2022 19:19:22 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
nudespree.com/contents/videos_screenshots/1780000/1780025/240x180/1.jpg
200 OK 14 kB URL HTTP/1.1 nudespree.com/contents/videos_screenshots/1780000/1780025/240x180/1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x180, components 3\012- data
Hash da410703e9add61b964b4efd2cbf30e1
d73c391f457c0dd3127fa5cec40a6aa92e54a1e5
70aa3ffebb2ea06313c999883cdef13ddc4a9908be1d4d2873750f135a4d6708
GET /contents/videos_screenshots/1780000/1780025/240x180/1.jpg HTTP/1.1
Host: nudespree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shufflesex.com/
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 23:46:44 GMT
Content-Type: image/jpeg
Content-Length: 14235
Connection: keep-alive
Last-Modified: Mon, 27 Jun 2022 10:26:19 GMT
ETag: "62b985cb-379b"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6236
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uRyFHXq5ZshizRKU%2FNfkodytdM6F6HHoQzvDPf4Bm4RKfS1cyRWcimImtioM579XY6WJgU3prP%2FyGeJl%2FDJEuyKZE%2Fjpl8%2FwhNI0lUq%2F2CLhCYumF2pXf4Lk9a%2F412pD"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772fb432392bb505-OSL
alt-svc: h2=":443"; ma=60
darkstargaming.co.uk/media/cache/headshot/upload/m/e/melina-celine-bikini-163223.jpg
200 OK 12 kB URL HTTP/1.1 darkstargaming.co.uk/media/cache/headshot/upload/m/e/melina-celine-bikini-163223.jpg
IP
ASN #207728 EUROHOSTER Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 170x170, components 3\012- data
Hash 776855511d6be21c736b8e361b6fba12
b011052c3b88cb5e0e156749d7c7615741f4ab65
0e30246978064835e36a7f640e5176c691117c902933a52cb734fc417900d0a1
GET /media/cache/headshot/upload/m/e/melina-celine-bikini-163223.jpg HTTP/1.1
Host: darkstargaming.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shufflesex.com/
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Thu, 01 Dec 2022 23:46:44 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Fri, 20 Nov 2020 08:38:32 GMT
Expires: Fri, 02 Dec 2022 00:46:44 GMT
cache-control: public, max-age=31536000
cinepornogratis.com/wp-content/uploads/2022/08/melina-cc2-320x180.jpg
200 OK 8.5 kB URL HTTP/2 cinepornogratis.com/wp-content/uploads/2022/08/melina-cc2-320x180.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash 0b1c74463c5c735bc11708911b8a33ba
fba4c979863094d6b999ee7d9399cfe220f7f8f4
de299017fe352219f895659a19cd075ee1a8ecfa32247b87b1e324e161f00f62
GET /wp-content/uploads/2022/08/melina-cc2-320x180.jpg HTTP/1.1
Host: cinepornogratis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 23:46:44 GMT
content-type: image/jpeg
content-length: 8521
cache-control: max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=8700, status=webp_bigger
etag: "630697f4-21fc"
last-modified: Wed, 24 Aug 2022 21:28:20 GMT
protected: by MS22112401
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=15768000;
x-content-type-options: nosniff
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 41371
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B9dX4%2F88OfPorEe4myn7lkvz8pX8Krk%2BHqYQ5OxRz0ZN7UhoRM67JHdkq6WAg3G1QpnNox6CBfua5VFpw9T7n%2FmlYEX%2F%2BpxX3YVc7LmjDyaZRzQlUUpZb5Uu7nQQ7o9W3faTThY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772fb43259511c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1f88399f3fdd89dbb9ca1229cb67143a
325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3
831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4511
Cache-Control: max-age=124516
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 23:46:44 GMT
Etag: "63886ea9-1d7"
Expires: Sat, 03 Dec 2022 10:22:00 GMT
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
fendiporn.com/wp-content/uploads/2020/10/melina-may-porno-von-mydirtyhobby-wird-in-der-kueche-in-den-arsch-anal-gefickt.jpg
200 OK 8.2 kB URL HTTP/2 fendiporn.com/wp-content/uploads/2020/10/melina-may-porno-von-mydirtyhobby-wird-in-der-kueche-in-den-arsch-anal-gefickt.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash 1051baa64cccbf73031ea4fd1746474a
6a21347ba7fcda2a08be8401a18d6ef320ff854e
6044fbb3489119ccf86b332118315d7c5675fd96a8b39e42d5f4098f80275e79
GET /wp-content/uploads/2020/10/melina-may-porno-von-mydirtyhobby-wird-in-der-kueche-in-den-arsch-anal-gefickt.jpg HTTP/1.1
Host: fendiporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 23:46:44 GMT
content-type: image/jpeg
content-length: 8228
cache-control: public, max-age=604800
expires: Sun, 16 Oct 2022 20:34:43 GMT
etag: "2024-622508e5-29a1b28;;;"
last-modified: Sun, 06 Mar 2022 19:17:57 GMT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 6236
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jVVCZMI6ZoAuzWpVG0eLemVPQ2GhzZ7xg1ydWXhrvDO4jVT%2FAyddV3nUytm28HRqgdJo3sKxlRWlvclH1HwYywiQ%2FZPU9pKIJfLCs5qYApaqN%2B5zuHr2GVmXTYejdu%2Fz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772fb4328f2cb4f9-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0b1759ce8cb8b580dd6ad46bdc5630a0
eccc37f526df8958ff8ed09b93a563357cc44030
7ca0088a7ee2270386623b2c95f42754b27645b0a162f5ba23e958deb331f37d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7CA0088A7EE2270386623B2C95F42754B27645B0A162F5BA23E958DEB331F37D"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14203
Expires: Fri, 02 Dec 2022 03:43:27 GMT
Date: Thu, 01 Dec 2022 23:46:44 GMT
Connection: keep-alive
cinepornogratis.com/wp-content/uploads/2021/08/amigas-feas-320x180.jpg
200 OK 4.9 kB URL HTTP/2 cinepornogratis.com/wp-content/uploads/2021/08/amigas-feas-320x180.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash b438e36e21ddd3b3e6974acf9451af70
f5314a6a1510dafdfb8ab55172a7b7e848fef347
3547be3fa0966654a146ae25d349fa8d9509d6be303c7c72774bb6a65481fda6
GET /wp-content/uploads/2021/08/amigas-feas-320x180.jpg HTTP/1.1
Host: cinepornogratis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 23:46:44 GMT
content-type: image/jpeg
content-length: 4876
cache-control: max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=4954, status=webp_bigger
etag: "61138080-135a"
last-modified: Wed, 11 Aug 2021 07:47:12 GMT
protected: by MS22112011
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=15768000;
x-content-type-options: nosniff
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=quBNQiZ5ljwzrIBYElUjeK4H0AE5wIWACQpH3hBfOeZcEKdgCrOvO47xYK7Il7gFreNAKTGQ%2BiM50xvV27udsDveCB1m7i8pmS8L7AWMxGUxgGwIDwKcKfaSmJ3YBRmX5yECKL8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772fb432594f1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 3e241961d67d001a2d13e1134f633705
9a04a69471ba04662180a4f33e01847d6dd1eb06
0957d4e06a2fb9024cc2adb1961f3b9cb9a93d1b169f88f488d6339230ad5b46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4057
Cache-Control: max-age=150684
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 23:46:44 GMT
Etag: "6388d6a7-118"
Expires: Sat, 03 Dec 2022 17:38:08 GMT
Last-Modified: Thu, 01 Dec 2022 16:30:31 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 280
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 79d1682dc6c0b3c7856fdbfc922dc8f9
e0f0edfadda55fd8c2403a5e3b4505b5ec814d1c
7d53464ed6d1fecb6ffa06181760ef4a3c088b528588dd727e3928c5027525b6
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "7D53464ED6D1FECB6FFA06181760EF4A3C088B528588DD727E3928C5027525B6"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8211
Expires: Fri, 02 Dec 2022 02:03:35 GMT
Date: Thu, 01 Dec 2022 23:46:44 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 6a2d3c87ccc56afa302b054a21eb0093
68c66b6fe2478eebe307a6b50b560ce84f4eae83
815331dac513e8d4fa76ba7863eca90769bb4694524d8c845d1218595133016c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4656
Cache-Control: max-age=161414
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 23:46:44 GMT
Etag: "6388fe3a-117"
Expires: Sat, 03 Dec 2022 20:36:58 GMT
Last-Modified: Thu, 01 Dec 2022 19:19:22 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
s7.addthis.com/js/300/addthis_widget.js
308 Permanent Redirect 171 B URL HTTP/1.1 s7.addthis.com/js/300/addthis_widget.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3c417e9efbcaeb3bf7e7df75cf3b22fd
00465aec6b8ec302eae8abb99678fc5c09c3f343
21bd143d38dbbae427615a7266a86a18dc95c417f3e510632d7a9180d98d3571
GET /js/300/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shufflesex.com/
HTTP/1.1 308 Permanent Redirect
Server: nginx/1.15.8
Content-Type: text/html
Content-Length: 171
Location: https://s7.addthis.com/js/300/addthis_widget.js
Date: Thu, 01 Dec 2022 23:46:44 GMT
Connection: keep-alive
X-Distribution: 99
X-Host: s7.addthis.com
cdn.camwhores.tv/contents/videos_screenshots/9546000/9546423/180x135/1.jpg
200 OK 9.0 kB URL HTTP/2 cdn.camwhores.tv/contents/videos_screenshots/9546000/9546423/180x135/1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x135, components 3\012- data
Hash c7a31bd469f8d50f8e92cd7183c972ec
6c38c0fb358e6a433c7c6776270cde32c9d5a714
2596d28b1d9599d52f53efd35b4e94a48c6ef5c1b8bc6753bb4d98d3099b5c60
GET /contents/videos_screenshots/9546000/9546423/180x135/1.jpg HTTP/1.1
Host: cdn.camwhores.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 23:46:44 GMT
content-type: image/jpeg
content-length: 9041
last-modified: Sun, 18 Sep 2022 04:58:33 GMT
etag: "6326a579-2351"
accept-ranges: bytes
X-Firefox-Spdy: h2
cambox.to/contents/videos_screenshots/718000/718594/336x189/1.jpg
200 OK 4.5 kB URL HTTP/2 cambox.to/contents/videos_screenshots/718000/718594/336x189/1.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 336x189, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash dd1479a9e1281d43454e5e3822253d0f
277b78bf17e16418951748648de31e8fdbb296ca
aad0a57865e470b6adf9854aa51f84cc6eb6e7da52e2ad32a95f01ef653308ce
GET /contents/videos_screenshots/718000/718594/336x189/1.jpg HTTP/1.1
Host: cambox.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 23:46:44 GMT
content-type: image/jpeg
content-length: 4494
last-modified: Sat, 09 Jul 2022 00:05:58 GMT
etag: "62c8c666-118e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1975
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fBAtvF2rzxWdSE4RoQTotiZa05o68TJ3Ox7ueVE03sphMQfEswe1Gg13zvm5XYchHdDTFQwhrfMpZY6%2FfMteIi8f85hE4y%2FeRnJ6rVPXy5WX2j5HP19pHt%2BEsR4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772fb4331c02fac8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
thethothub.com/contents/videos_screenshots/377000/377301/320x180/5.jpg
200 OK 6.6 kB URL HTTP/2 thethothub.com/contents/videos_screenshots/377000/377301/320x180/5.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3\012- data
Hash 0729e67fc597e56b7ad1f53d1f87af81
43fae850f10526c05f1514669321d73b47fb5ecc
e1673f062e5a87423859f81e7200744accb5ece4af3f459c69064010a7e59ac4
GET /contents/videos_screenshots/377000/377301/320x180/5.jpg HTTP/1.1
Host: thethothub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 23:46:44 GMT
content-type: image/jpeg
content-length: 6642
last-modified: Mon, 20 Jun 2022 05:19:56 GMT
etag: "62b0037c-19f2"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9NGiYQ3ekQpUplHCvZCZ8ZcdeItBTxOAGRA1UaYYyltRJDiffoRUziixLMgktgVZV6iXZEV7t%2FVebCwejpAcsIrBmmhK022Y0JeIM%2FYupCb1tNYFlndL0WWCSyLeeJHfTA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772fb432f849b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s7.addthis.com/js/300/addthis_widget.js
200 OK 116 kB URL HTTP/2 s7.addthis.com/js/300/addthis_widget.js
IP
File type ASCII text, with very long lines (54602)
Size 116 kB (116388 bytes)
Hash fef08c9f8bacc1b0eed3950dbe7d0f87
e9a3b98cad1e2d58eab1e2cbaa51cb979dc45075
55b3d5b3acd46444cc1844a676c75ba25209ce371065791cd4fbdc9da60aea34
GET /js/300/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.shufflesex.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: "5f971164-5834c"
cache-control: public, max-age=600
strict-transport-security: max-age=15724800; includeSubDomains
content-type: application/javascript
content-encoding: gzip
content-length: 116388
date: Thu, 01 Dec 2022 23:46:44 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 79d1682dc6c0b3c7856fdbfc922dc8f9
e0f0edfadda55fd8c2403a5e3b4505b5ec814d1c
7d53464ed6d1fecb6ffa06181760ef4a3c088b528588dd727e3928c5027525b6
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "7D53464ED6D1FECB6FFA06181760EF4A3C088B528588DD727E3928C5027525B6"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8211
Expires: Fri, 02 Dec 2022 02:03:35 GMT
Date: Thu, 01 Dec 2022 23:46:44 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 280 B IP
Hash 3e241961d67d001a2d13e1134f633705
9a04a69471ba04662180a4f33e01847d6dd1eb06
0957d4e06a2fb9024cc2adb1961f3b9cb9a93d1b169f88f488d6339230ad5b46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4057
Cache-Control: max-age=150684
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 23:46:44 GMT
Etag: "6388d6a7-118"
Expires: Sat, 03 Dec 2022 17:38:08 GMT
Last-Modified: Thu, 01 Dec 2022 16:30:31 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 280
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 965b9492e7d063a6f163ad976feae23f
5b3674b30b23be9ca0ac94a053a60748194ff405
330bde738e254aa809bd18f04d9b8c078aa53dcf8da4acf1c884852aab585bf2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "330BDE738E254AA809BD18F04D9B8C078AA53DCF8DA4ACF1C884852AAB585BF2"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9113
Expires: Fri, 02 Dec 2022 02:18:37 GMT
Date: Thu, 01 Dec 2022 23:46:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e6975c11b609532ac10ddda1aefbade0
d3b1839067c47d75a6cfb6619a9b7698b32dbfd1
567138ab3ddf4e4350c386c4abd0161230b89fc1a63d5e3e8eb8679cba3ac37c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "567138AB3DDF4E4350C386C4ABD0161230B89FC1A63D5E3E8EB8679CBA3AC37C"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9007
Expires: Fri, 02 Dec 2022 02:16:51 GMT
Date: Thu, 01 Dec 2022 23:46:44 GMT
Connection: keep-alive
www.shufflesex.com/images/busy.gif
200 OK 57 kB URL HTTP/1.1 www.shufflesex.com/images/busy.gif
IP
ASN #45839 Shinjiru Technology Sdn Bhd
File type GIF image data, version 89a, 200 x 200\012- data
Hash 7f4b2d66484d80fc583cedcddc18d4bf
bda1fd175fdbc72cab784da7a37057f440b3d389
2b1fc74e817aa58e6026dec5c17a14951a372c93d958551b4bb47a80fc17ab49
GET /images/busy.gif HTTP/1.1
Host: www.shufflesex.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shufflesex.com/tags/4817582/melina-celine
HTTP/1.1 200 OK
Cache-Control: max-age=604800
Content-Type: image/gif
Last-Modified: Thu, 05 Mar 2020 10:45:52 GMT
Accept-Ranges: bytes
ETag: "0f0723ddbf2d51:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 01 Dec 2022 15:46:42 GMT
Content-Length: 56582
www.shufflesex.com/fontawesome/webfonts/fa-solid-900.woff2
200 OK 76 kB URL HTTP/1.1 www.shufflesex.com/fontawesome/webfonts/fa-solid-900.woff2
IP
ASN #45839 Shinjiru Technology Sdn Bhd
File type Web Open Font Format (Version 2), TrueType, length 76120, version 330.-16188\012- data
Hash 55eb2a60e8181f0e68b558c991973bf0
af776f52d579da211590e0691d554b88a69dfe61
2c3097237d60f42e800ebe4009c9af144bb19e5581e1c0501c7b259eee7e210c
GET /fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.shufflesex.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.shufflesex.com/fontawesome/css/all.css
HTTP/1.1 200 OK
Cache-Control: max-age=604800
Content-Type: font/woff2
Last-Modified: Tue, 04 Feb 2020 16:05:48 GMT
Accept-Ranges: bytes
ETag: "096c3f674dbd51:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 01 Dec 2022 15:46:42 GMT
Content-Length: 76120
pornmd.club/favicon.ico
404 Not Found 19 kB IP
File type ASCII text, with no line terminators
Hash 32d446f30fb6aeb1be350ffc60306460
c65f1d0c5d532cc7750da2516e9c5948df0be5ba
8672bef2742dfe0117cc33ef5c7b1ee41061b7bb50f8a5b7ca13db49448a17a2
GET /favicon.ico HTTP/1.1
Host: pornmd.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Thu, 01 Dec 2022 23:46:44 GMT
content-type: text/plain
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4iP6K0EKclqSW7ahBIfXy%2BEiIiK2bHYvLDDssC%2FLzMsxzryqxJVnx7ERUBDqme0yj4uEkDpKkgw8HcK8rHge2Q35MNYxgC7AiPh6KV8k0yOzs7fFHSVdFIKEfDKXkA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 772fb4309cfa1c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
thumbs1.pornmd.club/2022/7/5/3/50-guys-big-creampie-gangbang/thumb-main.2.jpg
200 OK 16 kB URL HTTP/2 thumbs1.pornmd.club/2022/7/5/3/50-guys-big-creampie-gangbang/thumb-main.2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3\012- data
Hash 0139d5fe98ee8c9e8a4e1d8e33eff869
688aa7698d415126182f7929a5b3b36f8e7be637
e61caa561376b2ef11b7cdee8c45573cd268eb54984f7e4a84f247c9b258a5f0
GET /2022/7/5/3/50-guys-big-creampie-gangbang/thumb-main.2.jpg HTTP/1.1
Host: thumbs1.pornmd.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 23:46:44 GMT
content-type: image/jpeg
content-length: 16360
last-modified: Thu, 21 Jul 2022 14:34:13 GMT
etag: "62d963e5-3fe8"
expires: Thu, 08 Dec 2022 23:46:44 GMT
cache-control: max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2
cdnquality.com/script/jquery.js
200 OK 32 kB URL HTTP/1.1 cdnquality.com/script/jquery.js
IP
File type Unicode text, UTF-8 text, with very long lines (37217), with NEL line terminators
Hash 3adddf7ba0dcea14d82e7a30c5e7753c
196553d3b30fa52d643b8122246adf8bf9227cd1
661458f10ca03619b0c573f08655b30de634064f156e10e39a2e39ba3a8a76a8
GET /script/jquery.js HTTP/1.1
Host: cdnquality.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shufflesex.com/
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 23:46:44 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
X-GUploader-UploadID: ADPycdsO_vHoq6U-c5Uej7rS-uzyQ-yzn0D1WV-xJUtVxi-QkVWRAS_ks3ezmmhLu_4bNdEK-rGf1xILcLXUsLekYuhPqg
x-goog-generation: 1662291159969357
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 97006
x-goog-hash: crc32c=cP6rPg==, md5=cHzYdZFLhO0KtH/SFwBqJw==
x-goog-storage-class: MULTI_REGIONAL
Access-Control-Allow-Origin: *
Expires: Fri, 02 Dec 2022 03:46:44 GMT
Cache-Control: public, max-age=14400
Last-Modified: Sun, 04 Sep 2022 11:32:40 GMT
ETag: W/"707cd875914b84ed0ab47fd217006a27"
CF-Cache-Status: HIT
Age: 2510
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772fb4341fa00afa-OSL
Content-Encoding: gzip
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: J5uO1NA7BM//v2tqFku1rw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HiOdeHP7dQYSRgvuxmIW32OwwpQ=
www.shufflesex.com/favicon.ico
200 OK 23 kB URL HTTP/1.1 www.shufflesex.com/favicon.ico
IP
ASN #45839 Shinjiru Technology Sdn Bhd
File type MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\012- data
Hash 08b725c46077111daddfa2af2f1bb809
6fd299dd074dbcd75110316883f0154860c62871
47af7bbf1545409f4608ab4c93e29d4645f3da23fbe086f2a2debc2490104cde
GET /favicon.ico HTTP/1.1
Host: www.shufflesex.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shufflesex.com/tags/4817582/melina-celine
HTTP/1.1 200 OK
Cache-Control: max-age=604800
Content-Type: image/x-icon
Last-Modified: Thu, 07 May 2020 13:00:42 GMT
Accept-Ranges: bytes
ETag: "0397d836f24d61:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 01 Dec 2022 15:46:42 GMT
Content-Length: 23230
unsult.com/script/jquery.js
200 OK 32 kB URL HTTP/1.1 unsult.com/script/jquery.js
IP
File type Unicode text, UTF-8 text, with very long lines (37217), with NEL line terminators
Hash 3adddf7ba0dcea14d82e7a30c5e7753c
196553d3b30fa52d643b8122246adf8bf9227cd1
661458f10ca03619b0c573f08655b30de634064f156e10e39a2e39ba3a8a76a8
GET /script/jquery.js HTTP/1.1
Host: unsult.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shufflesex.com/
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 23:46:44 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
X-GUploader-UploadID: ADPycdsYMGWFzFr2rQOot21aIDgcXlHtmRP2Cp37fxKMg88Lpq3WoICQT5X8itFdLEqR9-sla_yX4GELYAWoM5yB-z-siw
x-goog-generation: 1662291159969357
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 97006
x-goog-hash: crc32c=cP6rPg==, md5=cHzYdZFLhO0KtH/SFwBqJw==
x-goog-storage-class: MULTI_REGIONAL
Access-Control-Allow-Origin: *
Expires: Thu, 01 Dec 2022 23:29:59 GMT
Cache-Control: public, max-age=14400
Age: 2611
Last-Modified: Sun, 04 Sep 2022 11:32:40 GMT
ETag: W/"707cd875914b84ed0ab47fd217006a27"
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s7gM4dUAWgNUJfh1F4jt0cp7uTZyu2%2FFZtHf0svEoPc25dNdRAq7P%2Bd9d3Snt059NOIxAoKH5UKVQiHkb%2Fw0id%2Fedi8x7j%2BqmwhnrddivWFNgT9bmK6ppRlR7BMY"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772fb4350a0c0b31-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d3477c0a769ffc3b491db23c77775eba
6ff017facfd3aa482319832c9f944549c0df1875
f1502186e5b3ac6673c909b6dd58b11154fcba638804e99750f230915365df5c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F1502186E5B3AC6673C909B6DD58B11154FCBA638804E99750F230915365DF5C"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14040
Expires: Fri, 02 Dec 2022 03:40:44 GMT
Date: Thu, 01 Dec 2022 23:46:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2255432618615cd8f59e89aef7b07351
80769d00479a3cd40959e871737ec06d8a63225e
079be9b4d03e1d11f5636eea8ecc55a1d0a83d11f0ba6b5d826e9bfc3c20ed6d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "079BE9B4D03E1D11F5636EEA8ECC55A1D0A83D11F0BA6B5D826E9BFC3C20ED6D"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12080
Expires: Fri, 02 Dec 2022 03:08:04 GMT
Date: Thu, 01 Dec 2022 23:46:44 GMT
Connection: keep-alive
www.shufflesex.com/images/no-photo.jpg
200 OK 4.6 kB URL HTTP/1.1 www.shufflesex.com/images/no-photo.jpg
IP
ASN #45839 Shinjiru Technology Sdn Bhd
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.13], baseline, precision 8, 320x180, components 3\012- data
Hash 57e26c04b5c74b6f142fd5adf730d906
5ac6bdc82080a5443a96471f693e820a6247ee23
11dbe5b059a65100dc246ebe679171fe56761fc7371c0fc10a68bcaf6a82b3d5
GET /images/no-photo.jpg HTTP/1.1
Host: www.shufflesex.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shufflesex.com/tags/4817582/melina-celine
Cookie: _ga_LDY4NKLLJW=GS1.1.1669938402.1.0.1669938402.0.0.0; _ga=GA1.1.410377222.1669938403
HTTP/1.1 200 OK
Cache-Control: max-age=604800
Content-Type: image/jpeg
Last-Modified: Tue, 29 Mar 2022 13:38:43 GMT
Accept-Ranges: bytes
ETag: "5431da4e7243d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 01 Dec 2022 15:46:42 GMT
Content-Length: 4563
albums1.sexcelebrity.net/content/albums/preview/240x320/70000/70604/preview.jpg
200 OK 7.1 kB URL HTTP/2 albums1.sexcelebrity.net/content/albums/preview/240x320/70000/70604/preview.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x320, components 1\012- data
Hash 1fedabede6895d28bd233b77663e8a51
4927e4abc1dda5bf3b9a32085569087520d32114
d5e0cfcc510ed0934d31a4846e9cdd0e294b0ebd0a34b8dcbcee36aef60a491a
GET /content/albums/preview/240x320/70000/70604/preview.jpg HTTP/1.1
Host: albums1.sexcelebrity.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 23:46:44 GMT
content-type: image/jpeg
content-length: 7100
server: nginx/1.18.0 (Ubuntu)
last-modified: Tue, 04 Jan 2022 06:15:23 GMT
etag: "61d3e5fb-1bbc"
expires: Wed, 01 Mar 2023 23:46:44 GMT
cache-control: max-age=7776000
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
173.214.253.213/a/eb/4f/15298227-0-204x153.jpg
200 OK 9.3 kB URL HTTP/1.1 173.214.253.213/a/eb/4f/15298227-0-204x153.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash 23f8e3c3bd9738c3725e9846273ec8c3
8da60bc2c9d0ab2e1350d56ee8c635ab734eaa81
69a29dc29cd719611f701a41d18eafa454d2519e73f3e4ae419d3ae359944e3e
Analyzer Verdict Alert quad9 Sinkholed
GET /a/eb/4f/15298227-0-204x153.jpg HTTP/1.1
Host: 173.214.253.213
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shufflesex.com/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 23:46:44 GMT
Content-Type: image/jpeg
Content-Length: 9271
Last-Modified: Fri, 20 Nov 2020 21:16:54 GMT
Connection: keep-alive
Expires: Sat, 31 Dec 2022 23:46:44 GMT
Cache-Control: max-age=2592000, public
Accept-Ranges: bytes
thumbs1.beeg.party/2022/7/5/3/50-guys-big-creampie-gangbang/thumb-main.0.jpg
200 OK 23 kB URL HTTP/2 thumbs1.beeg.party/2022/7/5/3/50-guys-big-creampie-gangbang/thumb-main.0.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3\012- data
Hash 56dcbc031fbcb133d94d6c6352f9881b
4a233b98b12fa48feea1e8043f7a470a755e6ee5
97555e5ea29fa8140178dbbe78c41f65e88fba4134ca7267254bce4c6b4ce86f
GET /2022/7/5/3/50-guys-big-creampie-gangbang/thumb-main.0.jpg HTTP/1.1
Host: thumbs1.beeg.party
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 23:46:44 GMT
content-type: image/jpeg
content-length: 22832
last-modified: Thu, 21 Jul 2022 14:34:13 GMT
etag: "62d963e5-5930"
expires: Thu, 08 Dec 2022 23:46:44 GMT
cache-control: max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bae91905331ea72b97387ceb0ded335d
66a10e62894794cb5258fd53375a20919a1673a4
6edaf97555ba1009f1ee810b7620f5f70c1ee9580023301b3e83e88a53b98b30
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6EDAF97555BA1009F1EE810B7620F5F70C1EE9580023301B3E83E88A53B98B30"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13487
Expires: Fri, 02 Dec 2022 03:31:31 GMT
Date: Thu, 01 Dec 2022 23:46:44 GMT
Connection: keep-alive
region1.google-analytics.com/g/collect?v=2&tid=G-LDY4NKLLJW>m=2oebu0&_p=1464693240&cid=410377222.1669938403&ul=en-us&sr=1280x1024&_s=1&sid=1669938402&sct=1&seg=0&dl=http%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&dt=Melina%20Celine&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.anonymize_ip=true
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-LDY4NKLLJW>m=2oebu0&_p=1464693240&cid=410377222.1669938403&ul=en-us&sr=1280x1024&_s=1&sid=1669938402&sct=1&seg=0&dl=http%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&dt=Melina%20Celine&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.anonymize_ip=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-LDY4NKLLJW>m=2oebu0&_p=1464693240&cid=410377222.1669938403&ul=en-us&sr=1280x1024&_s=1&sid=1669938402&sct=1&seg=0&dl=http%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&dt=Melina%20Celine&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.anonymize_ip=true HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.shufflesex.com
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://www.shufflesex.com
date: Thu, 01 Dec 2022 23:46:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn1.pornhdtube.tv/pics/64/445-melina-may.jpg
200 OK 16 kB URL HTTP/2 cdn1.pornhdtube.tv/pics/64/445-melina-may.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x200, components 3\012- data
Hash 278c4cec6c1e3c1205375ca8459d3cae
bf3f10591d0dd0ae523081851bc30578b38d4214
8fbbf544982cece29582d4ba82f9798e818608da8b1158f21ee52cf3273e32f3
GET /pics/64/445-melina-may.jpg HTTP/1.1
Host: cdn1.pornhdtube.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 23:46:44 GMT
content-type: image/jpeg
content-length: 16118
last-modified: Sat, 25 Apr 2020 21:24:04 GMT
etag: "5ea4aa74-3ef6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
www.shufflesex.com/css/fonts/roboto.regular.ttf
200 OK 126 kB URL HTTP/1.1 www.shufflesex.com/css/fonts/roboto.regular.ttf
IP
ASN #45839 Shinjiru Technology Sdn Bhd
File type TrueType Font data, 14 tables, 1st "GDEF", 27 names, Macintosh, Font data copyright Google 2014RobotoRegularGoogle:Roboto:2014Roboto RegularVersion 2.000980; 20\012- data
Size 126 kB (126072 bytes)
Hash df7b648ce5356ea1ebce435b3459fd60
824b5480c977a8166e177e5357d13164ccc45f47
bde8a188e37aa936b167aecc5e5a3da40262f6e51fd54c584f2cf2b6b99d96ca
GET /css/fonts/roboto.regular.ttf HTTP/1.1
Host: www.shufflesex.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shufflesex.com/tags/4817582/melina-celine
HTTP/1.1 200 OK
Cache-Control: max-age=604800
Content-Type: application/octet-stream
Last-Modified: Fri, 28 Apr 2017 00:44:14 GMT
Accept-Ranges: bytes
ETag: "0c3ed8eb8bfd21:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 01 Dec 2022 15:46:42 GMT
Content-Length: 126072
www.shufflesex.com/js/jquery.min.js
200 OK 34 kB URL HTTP/1.1 www.shufflesex.com/js/jquery.min.js
IP
ASN #45839 Shinjiru Technology Sdn Bhd
File type ASCII text, with very long lines (32341)
Hash c1b1c9fb2bb4d3c8785b7e1faa6e84dd
42b0ecc369e20b9295e344e7c5cfe00d6195cc17
acc20b224dc679cdb06ca92e34f681db8808920534e73ffced849eb83585f53a
GET /js/jquery.min.js HTTP/1.1
Host: www.shufflesex.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shufflesex.com/tags/4817582/melina-celine
HTTP/1.1 200 OK
Cache-Control: max-age=604800
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Tue, 02 Jun 2015 08:35:24 GMT
Accept-Ranges: bytes
ETag: "06ea711f9dd01:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 01 Dec 2022 15:46:41 GMT
Content-Length: 33470
z.moatads.com/addthismoatframe568911941483/moatframe.js
200 OK 948 B URL HTTP/2 z.moatads.com/addthismoatframe568911941483/moatframe.js
IP
File type ASCII text, with very long lines (523)
Hash f14b4e1f799b14f798a195f43cf58376
b6fd3b3d407fb4c0a00fb8a31862235e2a6e0a86
92ed3e9fda5fa4d738ff4d9023846b56633617363dda6a750cacb4fba53241ac
GET /addthismoatframe568911941483/moatframe.js HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: e0HboiVQpjIDEK8WTxqU5+8G8wOtu9bNCFY72alTHLP0/Yb+qoiTOxu6fad89ebRofzHxENxOOg=
x-amz-request-id: 61EC92F13BB22DD4
last-modified: Fri, 08 Nov 2019 20:13:52 GMT
etag: "f14b4e1f799b14f798a195f43cf58376"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
content-length: 948
server: AmazonS3
vary: Accept-Encoding
cache-control: max-age=22575
date: Thu, 01 Dec 2022 23:46:45 GMT
X-Firefox-Spdy: h2
s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
200 OK 26 kB URL HTTP/2 s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Hash 707317ccaabe08d32d1bd781754e6871
bb82dcd3e044c960e0861c2ce878f5504e628f78
d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051
GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Thu, 01 Dec 2022 23:46:45 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
v1.addthisedge.com/live/boost/ra-5afc35d1b370355e/_ate.track.config_resp
200 OK 741 B URL HTTP/2 v1.addthisedge.com/live/boost/ra-5afc35d1b370355e/_ate.track.config_resp
IP
File type ASCII text, with very long lines (2800), with no line terminators
Hash 03a227b73a083d7ee0f48b64fd65a8f0
a307fa00cb092b53c7ea2d9e1bc1faaa24686918
53d7b2024cd46f91ea17ad95ba3edcd771acdafa85df3b4bfd86da150ec156d3
GET /live/boost/ra-5afc35d1b370355e/_ate.track.config_resp HTTP/1.1
Host: v1.addthisedge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 741
etag: -975423580--gzip
content-disposition: attachment; filename=1.txt
content-encoding: gzip
cache-control: public, max-age=3, s-maxage=86400
date: Thu, 01 Dec 2022 23:46:45 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 8a48642d82eee3c432a3f38879f9541b
f53e46a8406bbad51319826db59b6c265622241f
33a0510300258746dda57d56cf6fec74147cd138f7bae2c609d0976841fc3adc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5786
Cache-Control: max-age=91970
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 23:46:45 GMT
Etag: "6387ea8d-1d7"
Expires: Sat, 03 Dec 2022 01:19:35 GMT
Last-Modified: Wed, 30 Nov 2022 23:43:09 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js
200 OK 78 kB URL HTTP/2 s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js
IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash ac1b5db6377f89a6d7f517c571b8ddba
87205f72f7338d717dd2966119ecb6aae22d5835
9164225c4ffa9eded3fd96fd8403249cf67e2047354fc245fb349216565d00a2
GET /static/layers.fa6cd1947ce26e890d3d.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-41cf5"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 77691
date: Thu, 01 Dec 2022 23:46:45 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
connect.facebook.net/de_DE/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/de_DE/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash cce0e168fe3e29dc8ff97dc2349b2e0f
1f79ece50d711861a1428072492fbac90210d9cd
caa577443c57eaa395d01ef6a334c70ca9e7d60c668d2fa430a0d01b7d3a9fd4
GET /de_DE/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.shufflesex.com
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 077237ce81738bf055dbade19685295b
etag: "1bd61dfcdf2935c94f9e61d9969ba9cf"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Fri, 02 Dec 2022 00:04:23 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: zODhaP4+KdyP+X3CNJsuDw==
x-fb-debug: 9Jd42tjKXuKpWTCoeS7bae57h5J+RXFN/4ogzQL1AN48RxnJlRyBq2UMJENe6Cb01xStAle/sGjuAuopMLxNmw==
priority: u=3,i
content-length: 1687
x-fb-trip-id: 1679558926
date: Thu, 01 Dec 2022 23:46:45 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash f3faa5b27ab2801c2cb521242911e77a
a43ee9f9ecb29511db23424563413eb6f97943ef
83ba10a922903c44f5a915744849d243da4a0bddaa9dba0c989ccecf0869e900
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 23:46:45 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Mon, 05 Dec 2022 21:45:49 GMT
ETag: "a43ee9f9ecb29511db23424563413eb6f97943ef"
Last-Modified: Thu, 01 Dec 2022 21:45:50 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3464
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772fb43849bdb4fa-OSL
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash f3faa5b27ab2801c2cb521242911e77a
a43ee9f9ecb29511db23424563413eb6f97943ef
83ba10a922903c44f5a915744849d243da4a0bddaa9dba0c989ccecf0869e900
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 23:46:45 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Mon, 05 Dec 2022 21:45:49 GMT
ETag: "a43ee9f9ecb29511db23424563413eb6f97943ef"
Last-Modified: Thu, 01 Dec 2022 21:45:50 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3464
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772fb4384d76b529-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash 8a48642d82eee3c432a3f38879f9541b
f53e46a8406bbad51319826db59b6c265622241f
33a0510300258746dda57d56cf6fec74147cd138f7bae2c609d0976841fc3adc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5786
Cache-Control: max-age=91970
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 23:46:45 GMT
Etag: "6387ea8d-1d7"
Expires: Sat, 03 Dec 2022 01:19:35 GMT
Last-Modified: Wed, 30 Nov 2022 23:43:09 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
s7.addthis.com/static/159.1c3fceccbc80f2a3615f.js
200 OK 394 B URL HTTP/2 s7.addthis.com/static/159.1c3fceccbc80f2a3615f.js
IP
File type ASCII text, with very long lines (564), with no line terminators
Hash 09d6e31790596b5636e4332b45864d33
078bdaadd33f7e19f624e403959dca3eef1a73d4
42805621588148ebf5f6329a1ff74711c44dd93a4f592264f953ca7f88422b82
GET /static/159.1c3fceccbc80f2a3615f.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-234"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 394
date: Thu, 01 Dec 2022 23:46:45 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
connect.facebook.net/de_DE/sdk.js?hash=b6856384870ff117995560fc98ea0ccf
200 OK 87 kB URL HTTP/2 connect.facebook.net/de_DE/sdk.js?hash=b6856384870ff117995560fc98ea0ccf
IP
File type ASCII text, with very long lines (13192)
Hash 327012d6c5486411e9d6bce6d07559e7
e9eccada5894b2249af68b62813d081d799f8fa3
ba369ac6a43d272ad7e3f44d780cd19be90d9100284c1ecd86a59b2cdd6a5484
GET /de_DE/sdk.js?hash=b6856384870ff117995560fc98ea0ccf HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.shufflesex.com
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 89d4dfbe37d0e9224f1c4ac8dcfc783f
etag: "360dec0297d6bc0e4a84dc4b1b17cf09"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Fri, 01 Dec 2023 22:07:11 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: MnAS1sVIZBHp1rzm0HVZ5w==
x-fb-debug: b4D/nE03mTe9uEpcBUskUzKVCoMGj127EVhuBgnpcTaZVANfArhzo7CpJGOrOqfRvb+1XwP0q/BE/mi6z/D6qQ==
content-length: 86970
x-fb-trip-id: 1679558926
date: Thu, 01 Dec 2022 23:46:45 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
sun9-71.userapi.com/c840132/v840132449/14285/MpmpDaZmll0.jpg
200 OK 40 kB URL HTTP/2 sun9-71.userapi.com/c840132/v840132449/14285/MpmpDaZmll0.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 320x240, components 3\012- data
Hash 154a135ba50407c58c9dd3e1cc7ab710
245dcec47cef932285d18908f25b962e1dba3608
c26a2ebe28baa8082032cdc30fa65f1cd4a0fccd77f3ec79d2f16bd71e38ca3b
GET /c840132/v840132449/14285/MpmpDaZmll0.jpg HTTP/1.1
Host: sun9-71.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Thu, 01 Dec 2022 23:46:45 GMT
content-type: image/jpeg
content-length: 39918
last-modified: Fri, 21 Jul 2017 09:24:33 GMT
expires: Sat, 31 Dec 2022 23:46:45 GMT
cache-control: max-age=2592000
x-frontend: front220306
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
widgets.pinterest.com/v1/urls/count.json?url=http%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&callback=window._ate.cbs.rcb_bgn70
200 OK 99 B URL HTTP/1.1 widgets.pinterest.com/v1/urls/count.json?url=http%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&callback=window._ate.cbs.rcb_bgn70
IP
File type ASCII text, with no line terminators
Hash 887c8c694e74255018f96afb316cc5dc
2b1b3948881fdeab8efdf154c2f3f3f788469fb9
fcb775392d376c59dae28037257f5e869ce128874a2f9997590ed5110ba29d82
GET /v1/urls/count.json?url=http%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&callback=window._ate.cbs.rcb_bgn70 HTTP/1.1
Host: widgets.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shufflesex.com/
HTTP/1.1 200 OK
Connection: keep-alive
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: application/javascript
cache-control: must-revalidate, max-age=887
expires: Fri, 02 Dec 2022 00:01:45 GMT
x-envoy-upstream-service-time: 1
x-pinterest-rid: 3989134988351795
Date: Thu, 01 Dec 2022 23:46:45 GMT
Age: 0
transfer-encoding: chunked
widgets.pinterest.com/v1/urls/count.json?url=https%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&callback=window._ate.cbs.rcb_axf90
200 OK 100 B URL HTTP/1.1 widgets.pinterest.com/v1/urls/count.json?url=https%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&callback=window._ate.cbs.rcb_axf90
IP
File type ASCII text, with no line terminators
Hash dbaf98df40e2e2d692ba1649f7a0b8a6
f0fa7bff0128fad7794534121df51bc989dbe926
d9d2965e7b8ffbfc98af235eae77399ccea90efc24a25cea5a48d252e3e4b8d5
GET /v1/urls/count.json?url=https%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&callback=window._ate.cbs.rcb_axf90 HTTP/1.1
Host: widgets.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shufflesex.com/
HTTP/1.1 200 OK
Connection: keep-alive
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: application/javascript
cache-control: must-revalidate, max-age=887
expires: Fri, 02 Dec 2022 00:01:45 GMT
x-envoy-upstream-service-time: 2
x-pinterest-rid: 1720990607946134
Date: Thu, 01 Dec 2022 23:46:45 GMT
Age: 0
transfer-encoding: chunked
m.addthis.com/live/red_lojson/300lo.json?si=63893ce24696ace8&bkl=0&bl=1&pdt=611&sid=63893ce24696ace8&pub=ra-5afc35d1b370355e&rev=v8.28.8-wp&ln=en&pc=men&cb=1&ab=-&dp=www.shufflesex.com&fp=tags%2F4817582%2Fmelina-celine&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1669938403479&jsl=1&uvs=63893ce2cb0b1d53000&skipb=1&callback=addthis.cbs.jsonp__86594211418816110
200 OK 89 B URL HTTP/2 m.addthis.com/live/red_lojson/300lo.json?si=63893ce24696ace8&bkl=0&bl=1&pdt=611&sid=63893ce24696ace8&pub=ra-5afc35d1b370355e&rev=v8.28.8-wp&ln=en&pc=men&cb=1&ab=-&dp=www.shufflesex.com&fp=tags%2F4817582%2Fmelina-celine&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1669938403479&jsl=1&uvs=63893ce2cb0b1d53000&skipb=1&callback=addthis.cbs.jsonp__86594211418816110
IP
File type ASCII text, with no line terminators
Hash d8ec822627fff638eee5987a1eca5704
9414a8034685474eb92298c29bfb5958998b8acd
fbed1d396ecbeff05725eabce38d3655229e7f1ffcc179f44c0a2af6295cb956
GET /live/red_lojson/300lo.json?si=63893ce24696ace8&bkl=0&bl=1&pdt=611&sid=63893ce24696ace8&pub=ra-5afc35d1b370355e&rev=v8.28.8-wp&ln=en&pc=men&cb=1&ab=-&dp=www.shufflesex.com&fp=tags%2F4817582%2Fmelina-celine&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1669938403479&jsl=1&uvs=63893ce2cb0b1d53000&skipb=1&callback=addthis.cbs.jsonp__86594211418816110 HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 89
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
content-disposition: attachment; filename=1.txt
date: Thu, 01 Dec 2022 23:46:45 GMT
X-Firefox-Spdy: h2
api-public.addthis.com/url/shares.json?url=http%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&callback=_ate.cbs.rcb_14h50
200 OK 53 B URL HTTP/2 api-public.addthis.com/url/shares.json?url=http%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&callback=_ate.cbs.rcb_14h50
IP
File type ASCII text, with no line terminators
Hash a80345529068cb0df54f80c0dc06ee0f
0520ce5b3986b3c07316e30dd259ba3a44106792
11e867718561802f558cd3e2be166b17bb7a1955a109d1d09b5a615634402feb
GET /url/shares.json?url=http%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&callback=_ate.cbs.rcb_14h50 HTTP/1.1
Host: api-public.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/json
cache-control: no-transform, must-revalidate, max-age=0, s-maxage=3600
surrogate-key: www.shufflesex.com/tags/4817582/melina-celine
last-modified: Thu, 01 Dec 2022 23:46:45 GMT
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 53
date: Thu, 01 Dec 2022 23:46:45 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
api-public.addthis.com/url/shares.json?url=https%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&callback=_ate.cbs.rcb_1g8h0
200 OK 53 B URL HTTP/2 api-public.addthis.com/url/shares.json?url=https%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&callback=_ate.cbs.rcb_1g8h0
IP
File type ASCII text, with no line terminators
Hash af751a37d2efad6fcbb363f19a4bddaa
c1ec6f3c887650be90e20de7aab1d4d7996c8aa0
723265cd07deefbcdd58d32ce8b63b4e267d550177c8cdcce2bbdabbde2b5bf9
GET /url/shares.json?url=https%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&callback=_ate.cbs.rcb_1g8h0 HTTP/1.1
Host: api-public.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/json
cache-control: no-transform, must-revalidate, max-age=0, s-maxage=3600
surrogate-key: www.shufflesex.com/tags/4817582/melina-celine
last-modified: Thu, 01 Dec 2022 23:46:45 GMT
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 53
date: Thu, 01 Dec 2022 23:46:45 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
api-public.addthis.com/url/serviceapi/shares-post.json?services=sFbt&url=https%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine
200 OK 2 B URL HTTP/2 api-public.addthis.com/url/serviceapi/shares-post.json?services=sFbt&url=https%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /url/serviceapi/shares-post.json?services=sFbt&url=https%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine HTTP/1.1
Host: api-public.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Origin: http://www.shufflesex.com
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/json
content-length: 2
cache-control: no-transform, max-age=0, s-maxage=14400
surrogate-key: sFbt=https://www.shufflesex.com/tags/4817582/melina-celine
last-modified: Thu, 01 Dec 2022 23:00:00 GMT
access-control-allow-origin: http://www.shufflesex.com
access-control-allow-credentials: true
strict-transport-security: max-age=15724800; includeSubDomains
date: Thu, 01 Dec 2022 23:46:45 GMT
X-Firefox-Spdy: h2
cdnquality.com/script/ut.js?cb=1669938402965
200 OK 24 kB URL HTTP/1.1 cdnquality.com/script/ut.js?cb=1669938402965
IP
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 247b9ea3eb310459e21f78029267717c
1d7ea226aaf8046de5af9ef7975ad30398f517ad
dd787f72c85d7d6b736c0563371ea98a66542289101d8001a186d5a595ac05dc
GET /script/ut.js?cb=1669938402965 HTTP/1.1
Host: cdnquality.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shufflesex.com/
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 23:46:45 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
X-GUploader-UploadID: ADPycduQc_-Q_yReIjFJgwVVT0zrYteLdYonr0bTqZ1yhOWtytGGRamRauYRrQSHeWt_hzZMc_u8V8APdTAv9p7CZxlNrfpK24t0
x-goog-generation: 1661773552581597
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 71356
x-goog-hash: crc32c=PTRdbg==, md5=xzBO68tQafaL0/qedCGKNg==
x-goog-storage-class: MULTI_REGIONAL
Access-Control-Allow-Origin: *
Expires: Fri, 02 Dec 2022 03:46:45 GMT
Cache-Control: public, max-age=14400
Last-Modified: Mon, 29 Aug 2022 11:45:52 GMT
ETag: W/"c7304eebcb5069f68bd3fa9e74218a36"
CF-Cache-Status: HIT
Age: 2695
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772fb43aac390afa-OSL
Content-Encoding: gzip
www.facebook.com/v12.0/plugins/comments.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df19e9da684e43a%26domain%3Dwww.shufflesex.com%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.shufflesex.com%252Ff2f2d420b1285b8%26relation%3Dparent.parent&container_width=858&height=100&href=http%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&locale=de_DE&numposts=5&sdk=joey&version=v12.0&width=
200 OK 0 B URL HTTP/2 www.facebook.com/v12.0/plugins/comments.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df19e9da684e43a%26domain%3Dwww.shufflesex.com%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.shufflesex.com%252Ff2f2d420b1285b8%26relation%3Dparent.parent&container_width=858&height=100&href=http%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&locale=de_DE&numposts=5&sdk=joey&version=v12.0&width=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v12.0/plugins/comments.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df19e9da684e43a%26domain%3Dwww.shufflesex.com%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.shufflesex.com%252Ff2f2d420b1285b8%26relation%3Dparent.parent&container_width=858&height=100&href=http%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&locale=de_DE&numposts=5&sdk=joey&version=v12.0&width= HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html;charset=utf-8
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
cross-origin-opener-policy: same-origin-allow-popups
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
x-fb-debug: UhmIzFGn8o34s0WWC7l4twfvmGhaoUpkwLCMMZ7MnL6nuZ56+HTNXuf+RFcUgZ5hi0BmgswblOxZyHhkuRgVcA==
content-length: 0
date: Thu, 01 Dec 2022 23:46:45 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
youradexchange.com/ad/czcf.php?cz=4rmbpxlz
200 OK 335 B URL HTTP/1.1 youradexchange.com/ad/czcf.php?cz=4rmbpxlz
IP
File type JSON data\012- , ASCII text, with very long lines (902)
Hash 18563a942dd26694aa0470906d84896e
f90290418ebb9dd35b32945cbfb628f467af113c
9ca90e26076992b8ec95dd486f21a43bcb74ef7bf44809c6746b7e94db14d4db
GET /ad/czcf.php?cz=4rmbpxlz HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.shufflesex.com/
Origin: http://www.shufflesex.com
Connection: keep-alive
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 01 Dec 2022 23:46:45 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Via: 1.1 google
www.facebook.com/v12.0/plugins/share_button.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df18097b2d6926a4%26domain%3Dwww.shufflesex.com%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.shufflesex.com%252Ff2f2d420b1285b8%26relation%3Dparent.parent&container_width=858&href=http%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&layout=button_count&locale=de_DE&sdk=joey&size=large
200 OK 51 kB URL HTTP/2 www.facebook.com/v12.0/plugins/share_button.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df18097b2d6926a4%26domain%3Dwww.shufflesex.com%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.shufflesex.com%252Ff2f2d420b1285b8%26relation%3Dparent.parent&container_width=858&href=http%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&layout=button_count&locale=de_DE&sdk=joey&size=large
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (42521)
Hash 920ada14002be6fb8e93e0920e2feeaf
02848d8f3f1b5455ea850156e70903b4e213a6db
0b05220fda5578af74d552b35c4e545b0c63e2e160ab429a87aaa0367ba147cf
GET /v12.0/plugins/share_button.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df18097b2d6926a4%26domain%3Dwww.shufflesex.com%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.shufflesex.com%252Ff2f2d420b1285b8%26relation%3Dparent.parent&container_width=858&href=http%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&layout=button_count&locale=de_DE&sdk=joey&size=large HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-fb-rlafr: 0
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
facebook-api-version: v12.0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: 7cs9q8WD2+x3BSsnE3X3J8pvJgs0VxUSF2g2k2jhuZonlnh3wyIUI31hBxggFbR42quVYegOkszNL/it3Xm9UQ==
date: Thu, 01 Dec 2022 23:46:45 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnquality.com/script/intrf.js
200 OK 33 kB URL HTTP/1.1 cdnquality.com/script/intrf.js
IP
File type Unicode text, UTF-8 text, with very long lines (36694), with NEL line terminators
Hash 96b4c713f051a9840d3d6694fd1157f2
70217080dad537ce87fa09993d5710343788cc78
abf828785e0237e34952a996f3855181b4cea36af89e3b0830f9598820aea127
GET /script/intrf.js HTTP/1.1
Host: cdnquality.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shufflesex.com/
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 23:46:45 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
X-GUploader-UploadID: ADPycdvpGU7sIatuZSyJGlNW0S1unxENjjAvCDpDMTZhW3EyOCrMPAE6EDYXSXQ5hLa7A6QlEU50ezJahfIhJ4AB2Jityw
x-goog-generation: 1654072993292650
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 97774
x-goog-hash: crc32c=iF6eyg==, md5=LzGO+f+rCdtQAaQpKbeddA==
x-goog-storage-class: MULTI_REGIONAL
Access-Control-Allow-Origin: *
Expires: Fri, 02 Dec 2022 03:46:45 GMT
Cache-Control: public, max-age=14400
Last-Modified: Wed, 01 Jun 2022 08:43:13 GMT
ETag: W/"2f318ef9ffab09db5001a42929b79d74"
CF-Cache-Status: HIT
Age: 1609
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772fb43c2a95b4eb-OSL
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6567
Expires: Fri, 02 Dec 2022 01:36:12 GMT
Date: Thu, 01 Dec 2022 23:46:45 GMT
Connection: keep-alive
sexcelebrity.net/favicon.ico
200 OK 2.5 kB URL HTTP/2 sexcelebrity.net/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash 6dbd648113db56a2978848067a1efd1f
833985dc07eab9116d03a0a24803d667fd6ea851
88edb1bea0e77229969e71a63db9df96e52351d11b98101cd6b8c37019f227fa
GET /favicon.ico HTTP/1.1
Host: sexcelebrity.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 23:46:44 GMT
content-type: image/x-icon
last-modified: Tue, 12 Jul 2022 14:09:57 GMT
vary: Accept-Encoding
etag: W/"62cd80b5-10be"
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff, nosniff
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5598
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kwr0PQYgHMDUiZPyob%2FwUkjWWBnbJJ6KVPna0GaHYZmaPhe0u1B5FZBJiCD%2B%2Bs9DMIV8Hp9PyY21J6UIXhMM236lucqzjNV%2BCRElmfmNRg9VXGi9BrSjtAgnXpPkzbZCyJMn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 772fb430fb1375d7-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6567
Expires: Fri, 02 Dec 2022 01:36:12 GMT
Date: Thu, 01 Dec 2022 23:46:45 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb8ec880-52b8-4350-bb47-d051878e78f1.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb8ec880-52b8-4350-bb47-d051878e78f1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 25c68d8b1fae82820f93efca500fd848
45cf5e1a54ee491497ffe08a8e39fe97ba3c8a48
f0ec6b6f6ba0a931c9b71f5bc7ad1e5b89c8e4d8b7441f35eeebfba418d0e588
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb8ec880-52b8-4350-bb47-d051878e78f1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6882
x-amzn-requestid: 6b5f15a5-c15b-46bf-9fd5-5d013d37a0eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGfrG3WIAMFc9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891dfd-6038ca700dfb4489230c2683;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2O6x-8-ESFDtlhcjVyGxEXCZcLbbfhsCVQeX02lbNMupPWmM-fKuLA==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:47:56 GMT
age: 7129
etag: "45cf5e1a54ee491497ffe08a8e39fe97ba3c8a48"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
sun9-59.userapi.com/impf/c639921/v639921439/5c361/XnN6Pg_9cII.jpg?size=320x240&quality=96&keep_aspect_ratio=1&background=000000&sign=1c8a68ee3ddfe468ef50b88dde616196&c_uniq_tag=44GbaS9PDWHoexIOPYKUBZ3Xr9j3Y5nzE9mkfXdZ2wI&type=video_thumb
200 OK 6.8 kB URL HTTP/2 sun9-59.userapi.com/impf/c639921/v639921439/5c361/XnN6Pg_9cII.jpg?size=320x240&quality=96&keep_aspect_ratio=1&background=000000&sign=1c8a68ee3ddfe468ef50b88dde616196&c_uniq_tag=44GbaS9PDWHoexIOPYKUBZ3Xr9j3Y5nzE9mkfXdZ2wI&type=video_thumb
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f0fc684e61682c4078a82ee3d901ae52
ea65ad98933ec58afa3fa5c7642491d77db7e6c2
5e953012dba2b85cfda5befe2448ab87fbc2432a071e11a33b44be4f5148a4a4
GET /impf/c639921/v639921439/5c361/XnN6Pg_9cII.jpg?size=320x240&quality=96&keep_aspect_ratio=1&background=000000&sign=1c8a68ee3ddfe468ef50b88dde616196&c_uniq_tag=44GbaS9PDWHoexIOPYKUBZ3Xr9j3Y5nzE9mkfXdZ2wI&type=video_thumb HTTP/1.1
Host: sun9-59.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Thu, 01 Dec 2022 23:46:45 GMT
content-type: image/jpeg
content-length: 24022
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 525400
expires: Sat, 31 Dec 2022 23:46:45 GMT
cache-control: max-age=2592000
x-frontend: front632916
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07af64d-c287-4b0a-9677-9a1000422afc.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07af64d-c287-4b0a-9677-9a1000422afc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 498ab4412ed5cf977bc23e4e870894b0
23753fe8af09ec8ffa10eed4d201a71833885c99
036042656f15e42b4d1537c45f5b8e7190c70305fa9a69c1287c6739ad0b7122
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07af64d-c287-4b0a-9677-9a1000422afc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7334
x-amzn-requestid: a6b8b420-8394-496b-8be8-26dee52e3887
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoHJOoAMF75g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-0b38d07f518c8b3134457df2;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 17nFm7AQdmRYS_af-EJ4XBVw8l3YudcphlpcZMveuVjvjhhYdkAQsw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 22:33:10 GMT
age: 4415
etag: "23753fe8af09ec8ffa10eed4d201a71833885c99"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F937deb9c-e12c-486f-bf82-4833aed00836.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F937deb9c-e12c-486f-bf82-4833aed00836.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d08081e2dd562ef50e4e98ebc0136698
b5118bca37feda2ada3001199dc1d80ac6d2aacc
5160333e0cfd338b3887972d0a5c0f817ef88b70b7eb78e4e25d153a85e3478f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F937deb9c-e12c-486f-bf82-4833aed00836.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11443
x-amzn-requestid: 21469d81-ee4b-47f3-8877-b6658b3ea8b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfHDHE4zoAMFvfw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891ee0-5b39eddd703ea04e6a1355f8;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:38:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ArJSu5jI0RrZj3QtJp6oI6Yvf9LCWrYqU0HRIl8U8xJjdeOaJEe2yg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 22:20:07 GMT
age: 5198
etag: "b5118bca37feda2ada3001199dc1d80ac6d2aacc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 07:15:42 GMT
age: 59463
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
200 OK 2.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b47431190f34eccf0a6efb98e2a32b7d
9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fw6nrporwF27NW0-vXpaolW79nDXLF2RyS-lqhhp1osHt7q98VpI3g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:34:47 GMT
age: 7918
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
youradexchange.com/script/push.php?r=5278427&ipp=1&mads=2&position=top&czid=4rmbpxlz&aggr=3&atag=1&ppv=1&ab_test=AdOpt_B_nocapping-2021-12-08v1&cbpage=http%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&cbref=
204 No Content 0 B URL HTTP/1.1 youradexchange.com/script/push.php?r=5278427&ipp=1&mads=2&position=top&czid=4rmbpxlz&aggr=3&atag=1&ppv=1&ab_test=AdOpt_B_nocapping-2021-12-08v1&cbpage=http%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&cbref=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/push.php?r=5278427&ipp=1&mads=2&position=top&czid=4rmbpxlz&aggr=3&atag=1&ppv=1&ab_test=AdOpt_B_nocapping-2021-12-08v1&cbpage=http%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&cbref= HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.shufflesex.com/
Origin: http://www.shufflesex.com
Connection: keep-alive
HTTP/1.1 204 No Content
Server: openresty
Date: Thu, 01 Dec 2022 23:46:46 GMT
Access-Control-Allow-Origin: *
Via: 1.1 google
youradexchange.com/script/suurl4.php?r=5278415&atag=1&czid=4rmbpxlz&cbur=0.4233775135485526&cbiframe=0&cbWidth=1280&cbHeight=939&cbtitle=Melina%20Celine&cbpage=http%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&cbref=&cbdescription=Melina%20Celine%2C%20Melina%20Celine%2C%20Melina%20Celine%2C%20Search%20Results%20for%20Melina%20Celine%20Leaked%20Porn%20Videos%20-%20Leak.XXX%2C%20Leak%20Video%20Full%20HD%20!!!%20Celine%20Melina%20%E2%80%93%20Naked%20Show%20Hot%20Body%20And%20...%2C%20Melina%20Celine%2C%20Melina%20Celine%2C%20Melina%20Celine%2C%20Melina%20celine%20nude%20onlyfans%20video%20%2F&cbkeywords=melina%2C%20celine%2C%20melina%2C%20celine%2C%20melina%2C%20celine%2C%20search%2C%20results%2C%20for%2C%20melina%2C%20celine%2C%20leaked%2C%20porn%2C%20videos%2C%20leak%2C%20xxx%2C%20leak%2C%20video%2C%20full%2C%20hd%2C%20celine%2C%20melina%2C%20%E2%80%93%2C%20naked%2C%20show%2C%20hot%2C%20body%2C%20and%2C%20melina%2C%20celine%2C%20melina%2C%20celine%2C%20melina%2C%20celine%2C%20melina%2C%20celine%2C%20nude%2C&cbcdn=cdnquality.com&aggr=3&seqid=0&ab_test=AdOpt_B_nocapping-2021-12-08v1&cap=0
200 OK 819 B URL HTTP/1.1 youradexchange.com/script/suurl4.php?r=5278415&atag=1&czid=4rmbpxlz&cbur=0.4233775135485526&cbiframe=0&cbWidth=1280&cbHeight=939&cbtitle=Melina%20Celine&cbpage=http%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&cbref=&cbdescription=Melina%20Celine%2C%20Melina%20Celine%2C%20Melina%20Celine%2C%20Search%20Results%20for%20Melina%20Celine%20Leaked%20Porn%20Videos%20-%20Leak.XXX%2C%20Leak%20Video%20Full%20HD%20!!!%20Celine%20Melina%20%E2%80%93%20Naked%20Show%20Hot%20Body%20And%20...%2C%20Melina%20Celine%2C%20Melina%20Celine%2C%20Melina%20Celine%2C%20Melina%20celine%20nude%20onlyfans%20video%20%2F&cbkeywords=melina%2C%20celine%2C%20melina%2C%20celine%2C%20melina%2C%20celine%2C%20search%2C%20results%2C%20for%2C%20melina%2C%20celine%2C%20leaked%2C%20porn%2C%20videos%2C%20leak%2C%20xxx%2C%20leak%2C%20video%2C%20full%2C%20hd%2C%20celine%2C%20melina%2C%20%E2%80%93%2C%20naked%2C%20show%2C%20hot%2C%20body%2C%20and%2C%20melina%2C%20celine%2C%20melina%2C%20celine%2C%20melina%2C%20celine%2C%20melina%2C%20celine%2C%20nude%2C&cbcdn=cdnquality.com&aggr=3&seqid=0&ab_test=AdOpt_B_nocapping-2021-12-08v1&cap=0
IP
File type JSON data\012- , ASCII text, with very long lines (1058)
Hash 1d940c0b778df868121114d80b4dde7e
8a15027a3154d218d0a2487e7bfbbf82fba6df4c
2b5503d6a70bca65372dce41b959c0d362e255f3423290dc41e3fa1f6a9c6eb3
GET /script/suurl4.php?r=5278415&atag=1&czid=4rmbpxlz&cbur=0.4233775135485526&cbiframe=0&cbWidth=1280&cbHeight=939&cbtitle=Melina%20Celine&cbpage=http%3A%2F%2Fwww.shufflesex.com%2Ftags%2F4817582%2Fmelina-celine&cbref=&cbdescription=Melina%20Celine%2C%20Melina%20Celine%2C%20Melina%20Celine%2C%20Search%20Results%20for%20Melina%20Celine%20Leaked%20Porn%20Videos%20-%20Leak.XXX%2C%20Leak%20Video%20Full%20HD%20!!!%20Celine%20Melina%20%E2%80%93%20Naked%20Show%20Hot%20Body%20And%20...%2C%20Melina%20Celine%2C%20Melina%20Celine%2C%20Melina%20Celine%2C%20Melina%20celine%20nude%20onlyfans%20video%20%2F&cbkeywords=melina%2C%20celine%2C%20melina%2C%20celine%2C%20melina%2C%20celine%2C%20search%2C%20results%2C%20for%2C%20melina%2C%20celine%2C%20leaked%2C%20porn%2C%20videos%2C%20leak%2C%20xxx%2C%20leak%2C%20video%2C%20full%2C%20hd%2C%20celine%2C%20melina%2C%20%E2%80%93%2C%20naked%2C%20show%2C%20hot%2C%20body%2C%20and%2C%20melina%2C%20celine%2C%20melina%2C%20celine%2C%20melina%2C%20celine%2C%20melina%2C%20celine%2C%20nude%2C&cbcdn=cdnquality.com&aggr=3&seqid=0&ab_test=AdOpt_B_nocapping-2021-12-08v1&cap=0 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.shufflesex.com/
Origin: http://www.shufflesex.com
Connection: keep-alive
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 01 Dec 2022 23:46:46 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Via: 1.1 google
leak.xxx/favicon.ico
200 OK 0 B IP
GET /favicon.ico HTTP/1.1
Host: leak.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 23:46:43 GMT
content-type: image/x-icon
last-modified: Sat, 15 May 2021 07:01:30 GMT
etag: W/"609f71ca-c6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 15382297
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YBrMCrF8C6b4LWW3f6VYIzbd9xCjrV2SUTC5mvfkfe%2FjNIyPCgpkiVYqrMoZ6NI5l3h%2FyC31yevQtEeL5MXYb7qJC0bNN2ZmFZ35rUafGm37mU6WbHO23tXcNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772fb42f0c5fb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
exporntoons.net/favicon.ico
301 Moved Permanently 0 B URL HTTP/2 exporntoons.net/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: exporntoons.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Thu, 01 Dec 2022 23:46:43 GMT
content-type: text/html; charset=utf-8
location: /static/extend/dark/favicon.ico
vary: Cookie
set-cookie: PHPSESSID=.eJxrYJ1axAABtVM0ethLi1OL4jMLpvTwWBrqWRromRjpGZqaALlJRfnlILmcxLz0KT1Mrn5Tejhy8pMTSzLz84B8P_8pPWxFqekgnl8PZ2ZxfG5-UmZO6pTOHq6k_JL44pLEktLiKd7MPWxAOaDIlM5SPQAPgSyC:1p0tGN:0zGd_eUlloyyczPYggZhzQankeqg-W-MN_zDc-SQVg4; Domain=exporntoons.net; expires=Thu, 15 Dec 2022 23:46:43 GMT; HttpOnly; Max-Age=1209600; Path=/; SameSite=Lax
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
cutaporn.com/favicon.ico
302 Found 0 B IP
GET /favicon.ico HTTP/1.1
Host: cutaporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Thu, 01 Dec 2022 23:46:43 GMT
content-type: text/html; charset=UTF-8
location: https://cutaporn.com/wp-includes/images/w-logo-blue-white-bg.png
x-powered-by: PHP/8.0.26, PleskLin
link: <https://cutaporn.com/wp-json/>; rel="https://api.w.org/"
x-redirect-by: WordPress
x-cache-status: STALE
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kEkhzTDqf4esbHH0lyueR2K1lEWvIj9hQH6nV71eocZddqbxA2J7UnzAP1RyqYS89dmrjNY0qMUlCeTo8xIolITLqFJwfnhN0k7tKutHiGN8NTAcevvcSi51Veblyqg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772fb42fff6db523-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
thothub.is/favicon.ico
200 OK 0 B IP
GET /favicon.ico HTTP/1.1
Host: thothub.is
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 23:46:43 GMT
content-type: image/x-icon
last-modified: Wed, 19 Aug 2020 15:12:45 GMT
etag: W/"5f3d416d-268"
cache-control: max-age=14400
cf-cache-status: HIT
age: 264
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YxV38OsecYpvTKxVc6dQehNWB%2Fg3lMXOK%2FYJ1gyerRHmLnxwwd0mE28sl6r0IxTjSJ4vpb0tUGjVe1O%2BPeTLEC%2FSqwa99%2Fk1obEiD4Sr9LxnPu%2FoKyzcOZjGhvOe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772fb42f8b520722-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
beeg.party/favicon.ico
404 Not Found 0 B IP
GET /favicon.ico HTTP/1.1
Host: beeg.party
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shufflesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Thu, 01 Dec 2022 23:46:43 GMT
content-type: text/plain
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uIFcg9flecvCeghPtmWL0%2B2AIOHXn5i5ZjhqBInI8XA981wUR4iu%2F%2FwO7raD2XMMDm2DCcq2wXJAvwf0BMGJm4QCdcTL%2BmePov7lbifF2ihXdxyie1mJAc6Y1KyX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 772fb42f4c411c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
111.90.148.38
104.17.73.30
2.18.172.123
157.240.240.1
104.26.8.215
87.240.185.170
185.73.221.127
188.114.97.1
62.138.7.37