justthegays.com/wp-content/uploads/2022/07/JustTheGaysLogo2.png
200 OK 3.8 kB URL GET HTTP/2 justthegays.com/wp-content/uploads/2022/07/JustTheGaysLogo2.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash c70929770cbdfef84625811b327e7275
f943d03ea7777537017e46cdd27b7cd3f378f0a6
ee02577128f86854cb0da9894e5c36a1767d1eb32111df8b6808df9bf3857aaf
GET /wp-content/uploads/2022/07/JustTheGaysLogo2.png HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:23 GMT
content-type: image/webp
content-length: 3830
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=4725
content-disposition: inline; filename="JustTheGaysLogo2.webp"
vary: Accept
etag: "1275-63c6c00a-72a8e14;;;"
expires: Thu, 14 Dec 2023 11:10:16 GMT
last-modified: Tue, 17 Jan 2023 15:34:34 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47467
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IvbZn%2BYgiqzczKUpKl%2FlNbvDmFDNc5K9i2SAoeu5iAlV2viZyyIBzD1bQiYLlAoTotaXY2U3VSnxc%2BsvhEnSzQnvMKSfOV2kj9wuOyXFGGT0clS47U0fH%2Fa6rmKdRrRBnw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d915de1d7131-OSL
alt-svc: h3=":443"; ma=86400
justthegays.com/wp-content/uploads/2023/11/105131p.jpg
200 OK 51 kB URL GET HTTP/2 justthegays.com/wp-content/uploads/2023/11/105131p.jpg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 930x620, components 3\012- data
Hash 9335f14657db834590494273f34d632d
2ee34f9175c5bb6618296bfe204be6b05c24a422
5b35bc3a5d8d2a0a6b7480f0e8a3fb4f05af6c0cfd40f9c5c690c81b6bc310bd
GET /wp-content/uploads/2023/11/105131p.jpg HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:23 GMT
content-type: image/jpeg
content-length: 50605
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
etag: "c5ad-656a04d3-65f39af;;;"
expires: Thu, 14 Dec 2023 11:45:18 GMT
last-modified: Fri, 01 Dec 2023 16:07:47 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 45365
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pLl2gq1mZivagZwJliqVPpeNDbbLq6HVTcsyNSLC7dC5j0IxzWXT5c5omdPzDpMjllnVGZD441eyvLEaRnkZjwzznhOOq9lrvcroEcgrWvw5BBIAPP%2B0hEQjXqaa16Vx%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d915de1e7131-OSL
alt-svc: h3=":443"; ma=86400
justthegays.com/wp-content/uploads/2023/12/105352p.jpg
200 OK 106 kB URL GET HTTP/2 justthegays.com/wp-content/uploads/2023/12/105352p.jpg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 942x529, components 3\012- data
Size 106 kB (106507 bytes)
Hash 2ae17825112b47538c9d169e7dd005f9
71b6bf1b781af987b3dcb0b1c968589525c7e8c4
3117a91f70c94977affd802e44aad5f9d40ac3d4195972b78997777707c97178
GET /wp-content/uploads/2023/12/105352p.jpg HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:23 GMT
content-type: image/jpeg
content-length: 106507
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
etag: "1a00b-656d0183-66507cc;;;"
expires: Thu, 14 Dec 2023 14:12:40 GMT
last-modified: Sun, 03 Dec 2023 22:30:27 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 36523
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PD1NEFgkcL9VsgYMwFrUnbNidmcb0SBDYEJTP2eRJ3PDe3GrvmLFoSvAr%2BLvOUJiqoPGDggbpaiDD4AZcrxiumMQb%2FBrls9pRUkb7GodiasJNGaw8odBClgRgnpvk%2BsGKw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d915de1f7131-OSL
alt-svc: h3=":443"; ma=86400
justthegays.com/wp-content/uploads/2023/11/104337p-1123.jpg
200 OK 93 kB URL GET HTTP/2 justthegays.com/wp-content/uploads/2023/11/104337p-1123.jpg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 800x452, components 3\012- data
Hash d7dc61cd2663f8cdcbf5937f05e22fd6
5ff9db1b5b889ed730c5597ceda23f338ec05639
23bd58a3b74d999067c3baf65ffa063e1ac10b45a6274849ac511b5e311fabd2
GET /wp-content/uploads/2023/11/104337p-1123.jpg HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:23 GMT
content-type: image/jpeg
content-length: 92888
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
etag: "16ad8-6546c1e5-65f0e16;;;"
expires: Thu, 14 Dec 2023 11:45:18 GMT
last-modified: Sat, 04 Nov 2023 22:12:53 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 45365
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yuuw%2BP42WL%2BuuwRSW9%2FZ01G0xL85N7DxnHTcXjEQQPMXUA1DI8mJBewRWVBQuff9khLDO4W9OljsTDnnb1ekuHxSOdK2H1K35DzJ8rnBtjaTZfW6lI86TLnFILEINzlokQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d915de207131-OSL
alt-svc: h3=":443"; ma=86400
imasdk.googleapis.com/js/sdkloader/ima3.js?ver=1.0.4
200 OK 129 kB URL GET HTTP/2 imasdk.googleapis.com/js/sdkloader/ima3.js?ver=1.0.4
IP
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (2656)
Size 129 kB (128901 bytes)
Hash 7269b785219ee21f28f4b4e69c1bd829
55033b2fcf02286d8e096e05258fbd78749a5b88
bda9ec230e9fd779256cde4a4b7687c6fbfab102624bed226faca3e27d255716
GET /js/sdkloader/ima3.js?ver=1.0.4 HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 128901
date: Fri, 08 Dec 2023 00:21:23 GMT
expires: Fri, 08 Dec 2023 00:21:23 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-XJ5QG4KZKS
200 OK 93 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-XJ5QG4KZKS
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash fd1e261fc8b764a6cb936b80929f0c5f
4d96bd6b1e9af2b3f2c6a5b2e29f008c68fa8c04
7e008936ea6b31428a396b7263c4578838145a2db9711b49f239a83b7288f68c
GET /gtag/js?id=G-XJ5QG4KZKS HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 08 Dec 2023 00:21:23 GMT
expires: Fri, 08 Dec 2023 00:21:23 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 93133
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/daKbyP1.js
200 OK 76 kB URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/daKbyP1.js
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type Unicode text, UTF-8 text, with very long lines (65503), with no line terminators
Hash 6a761bae4530f6bfb270abfa75b1cb9b
617e8fd84f14b7a601d055c6ff2ad09441e823c6
8e629883ac62697032eb697449e83a2969d69e7e8adb7a624157e6e1a4afc13e
GET /daKbyP1.js HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:23 GMT
content-type: application/javascript
content-length: 75986
last-modified: Thu, 30 Nov 2023 11:46:10 GMT
vary: Accept-Encoding
etag: "65687602-128d2"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 59
cf-ray: 82e2de9effc04e1c-HEL
x-frame-options: DENY
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/Le4lypa.js
200 OK 87 kB URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/Le4lypa.js
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type Unicode text, UTF-8 text, with very long lines (65503), with no line terminators
Hash 3270f5552a6b219080d466395f99e9dd
e9374c6b5c07c1b6a1e27147e35be9e9447dd49a
7cc379a857e3679e6891d65b543e809a344491b2a1b19927df43a48b25c7cd40
GET /Le4lypa.js HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:23 GMT
content-type: application/javascript
content-length: 86755
last-modified: Thu, 30 Nov 2023 11:46:10 GMT
vary: Accept-Encoding
etag: "65687602-152e3"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 25
cf-ray: 82e2dd72cae9d902-HEL
x-frame-options: DENY
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/Wq0DIgc.js
200 OK 87 kB URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/Wq0DIgc.js
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type Unicode text, UTF-8 text, with very long lines (65503), with no line terminators
Hash 3270f5552a6b219080d466395f99e9dd
e9374c6b5c07c1b6a1e27147e35be9e9447dd49a
7cc379a857e3679e6891d65b543e809a344491b2a1b19927df43a48b25c7cd40
GET /Wq0DIgc.js HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:23 GMT
content-type: application/javascript
content-length: 86755
last-modified: Thu, 30 Nov 2023 11:46:10 GMT
vary: Accept-Encoding
etag: "65687602-152e3"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 25
cf-ray: 82e2dd72cae9d902-HEL
x-frame-options: DENY
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
justthegays.com/wp-content/plugins/wp-user-follow/public/js/wp-user-follow-public.js?ver=1699715990
200 OK 783 B URL GET HTTP/2 justthegays.com/wp-content/plugins/wp-user-follow/public/js/wp-user-follow-public.js?ver=1699715990
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
Hash 028557f1fbbe2c9f96fa7d4620f6fcbe
9238a883d7e485ffa52ec431a77f0c057118358d
ffc8ea30dfe54902e757fd1f69c8af7afde9cc0c197a2a53bb8a81745ef04424
GET /wp-content/plugins/wp-user-follow/public/js/wp-user-follow-public.js?ver=1699715990 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:23 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:10:16 GMT
etag: W/"1a2-654f9b96-66d0495;gz"
last-modified: Sat, 11 Nov 2023 15:19:50 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47467
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wbF0b48qCbGNwI6bTs82urNy9zI1NhC%2BehHQjkPLoZSJHRIaKOWhtjT4kxzUive93EFK4AsR2yuFyTpmD%2BkFfp2mkgHczEd1LllVV2ajRC6VWOOEZYeNwcJWyhrSiAT7HQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d915ee257131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
justthegays.com/wp-content/plugins/video-embed-thumbnail-generator/video-js/v8/video.min.js?ver=8.5.2
200 OK 229 kB URL GET HTTP/2 justthegays.com/wp-content/plugins/video-embed-thumbnail-generator/video-js/v8/video.min.js?ver=8.5.2
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type Unicode text, UTF-8 text, with very long lines (65142)
Size 229 kB (229168 bytes)
Hash f50c31011e4900174758bb688253b0b3
f15c8636f7dcd7f25798dd2d4a710f4f5fbcfd1a
0990b905d2a411a8f29c0502458419b91932e740cc66b1aca128179cbede5867
GET /wp-content/plugins/video-embed-thumbnail-generator/video-js/v8/video.min.js?ver=8.5.2 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:23 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:10:16 GMT
etag: W/"98c57-654f2cfa-66c019e;gz"
last-modified: Sat, 11 Nov 2023 07:27:54 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47467
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gVizjlZ0rVE1Raxi8SMHuB%2BUJE0ss%2FBgrF6fzY3T2Hlr6TbyTl3jV854w28BEOHdJN2c0f78L58HPex%2Fmam%2F7nZjWyDEQ3pLlEJOTfMwuT0dKsMCDELGuzvVksw7e2LqWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d9157de87131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
justthegays.com/wp-content/uploads/2023/11/105273p.jpg
200 OK 64 kB URL GET HTTP/2 justthegays.com/wp-content/uploads/2023/11/105273p.jpg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 937x540, components 3\012- data
Hash 914d8c124174a267c541fb0cc1a7751c
92791d17746bc973c41719380bbd3b95c091abca
b1337b3ef529f62f9d0a80ab373b60fae6de8133774a882f6e16235d997c2a83
GET /wp-content/uploads/2023/11/105273p.jpg HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:24 GMT
content-type: image/jpeg
content-length: 63553
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
etag: "f841-656a8ab7-65f529b;;;"
expires: Thu, 14 Dec 2023 22:57:20 GMT
last-modified: Sat, 02 Dec 2023 01:39:03 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 5044
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G6hOyeEQIWJMLo8QJnailNYO2gduQUEuhXJIHmsjUGvPdw7sNUOPadt6tjzRFcgjPz%2Fp%2Bx227Ho6mPu8ODqAIIPlouLFiRXXxcu39YehToZZIRBPDF7GwzF4tMO9lYV7qg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d9192fb47131-OSL
alt-svc: h3=":443"; ma=86400
justthegays.com/wp-content/uploads/2023/12/105278p.jpg
200 OK 129 kB URL GET HTTP/2 justthegays.com/wp-content/uploads/2023/12/105278p.jpg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 939x529, components 3\012- data
Size 129 kB (128823 bytes)
Hash ec2ec2e1f70d95ccc124bac4dd56ef66
ceaa779bf3af8db9b5f4597badee1de33da4a0bb
985bb981e47a7e932548918fb87f2db5609f5a05ce33d4e60872841c72a20def
GET /wp-content/uploads/2023/12/105278p.jpg HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:24 GMT
content-type: image/jpeg
content-length: 128823
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
etag: "1f737-656bb003-66502c1;;;"
expires: Thu, 14 Dec 2023 11:45:18 GMT
last-modified: Sat, 02 Dec 2023 22:30:27 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 45366
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PKJ8WVOLaRYR9ABPnDFdB5E%2BgxrRNBY1bXD%2Bz5NMkRczVo3Rl6bbhFq329PHGjFPYmZhMx1DnaloXxPOkEenN8aQ4rYNxUzmOMHgXIimfQAfVI5cIHy885v9SIFfm7s%2Bkg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d9192fb57131-OSL
alt-svc: h3=":443"; ma=86400
justthegays.com/wp-content/plugins/mystickymenu/js/welcomebar-front.js?ver=2.6.5
200 OK 133 kB URL GET HTTP/2 justthegays.com/wp-content/plugins/mystickymenu/js/welcomebar-front.js?ver=2.6.5
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type HTML document, ASCII text, with very long lines (304)
Size 133 kB (133339 bytes)
Hash 55f7f55a003de23e03be85427d07cfc1
62fedc27798921ea75dc00a57394cd0d3395484a
2cf994dfab72a8b37a8673e42eefa94500511d72115ba6be1318bdc76d3f8696
GET /wp-content/plugins/mystickymenu/js/welcomebar-front.js?ver=2.6.5 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:23 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:10:16 GMT
etag: W/"5f79-653651b8-61e1e12;gz"
last-modified: Mon, 23 Oct 2023 10:58:00 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47467
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aFnydXgn%2FC9c95h7PGEieouiCt9n2%2B5fDuSapWMExBlPHBZbUB8QXu4F36lDALVtxnO9VqmsMq4MoT2wJU4dXCgjTbU1dQSOIRoVKjNc6DOulYotQWTN5WqLqkb3hbjOpg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d915ee237131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
justthegays.com/wp-content/uploads/2023/12/105555p.jpg
200 OK 33 kB URL GET HTTP/2 justthegays.com/wp-content/uploads/2023/12/105555p.jpg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 800x450, components 3\012- data
Hash 1c9c7d4ece4044215b306423ccd2bca4
7578b9eba092e0ae59ad72dd81d7093689766a9a
042f90ced45cd9610c7008def095a5994a30947e71f0743713234a6c1d284302
GET /wp-content/uploads/2023/12/105555p.jpg HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:24 GMT
content-type: image/jpeg
content-length: 32715
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: origSize=35529
etag: "8ac9-6571a63a-18a096d;;;"
expires: Thu, 14 Dec 2023 11:41:31 GMT
last-modified: Thu, 07 Dec 2023 11:02:18 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 45593
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4BtUiVLSQuf0xOUPwIMMCi87vOJ5sjmKwPQuCtOjBJUX6eJ72RzhuTguBQSpoJccOgmjgaKYSmmC38PT%2FCtONH%2FgiPlkYgPi1syRjxlQUrLexNi5htt5q3j4w1BbZE9stw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d9192fb87131-OSL
alt-svc: h3=":443"; ma=86400
justthegays.com/summer-cloud-d5d4/
200 OK 19 kB URL GET HTTP/2 justthegays.com/summer-cloud-d5d4/
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type C source text Nim source code, ASCII text
Hash 6c4e0729b8245ad88f28fd9e38e21cbd
72045dc8626fc97a40e51e3a15e7eff2f0a9c269
1d325d8b2a62876527cc1826587af2f1184fe2228a1addfddd857063a47fb10e
GET /summer-cloud-d5d4/ HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:23 GMT
content-type: application/javascript
cf-ray: 8320d915ae077131-OSL
cf-cache-status: HIT
age: 47467
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:04:30 GMT
last-modified: Thu, 07 Dec 2023 11:10:16 GMT
vary: Accept-Encoding
cf-apo-via: tcache
cf-edge-cache: cache,platform=wordpress
x-dns-prefetch-control: on
x-litespeed-cache: hit
x-turbo-charged-by: LiteSpeed
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dyCMbPsAa69YZhk%2Boa40YKXu62SMgU5M%2F1PWYsAcqYnrt8WgL28ZnVwmhbp5qG%2B2YTPsXmve2UoDdAdUAk9XUnnM3wTOMlYfsYHSOKytfZmwwa1t2Qv8mqMqz5OQ%2FGZGNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
justthegays.com/wp-content/themes/videotube/assets/webfonts/fa-solid-900.woff2
200 OK 79 kB URL GET HTTP/2 justthegays.com/wp-content/themes/videotube/assets/webfonts/fa-solid-900.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type Web Open Font Format (Version 2), TrueType, length 79444, version 331.524\012- data
Hash b15db15f746f29ffa02638cb455b8ec0
75a88815c47a249eadb5f0edc1675957f860cca7
7f4d3fd0a705dbf8403298aad91d5de6972e6b5d536068eba8b24954a5a0a8c7
GET /wp-content/themes/videotube/assets/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/wp-content/litespeed/css/859f2d20cb22489f202ae874c03abf2e.css?ver=42880
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:24 GMT
content-type: font/woff2
content-length: 79444
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:41:55 GMT
etag: "13654-6471f081-65e0422;;;"
last-modified: Sat, 27 May 2023 11:58:57 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 45569
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=osnQRnWSDy3Ojidn4Dn%2FqBnanB74yo83G64%2B%2F4NwgAlPDr0oqTZWbuiDTRYtcE2N1u35Y37hbko7La%2FrXEpa6LkumUMs12MY%2BuzXr3ZgJ0WDJttRMjBgy%2FxHzSQEn3R1xA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d919d80f7131-OSL
alt-svc: h3=":443"; ma=86400
justthegays.com/wp-content/plugins/video-embed-thumbnail-generator/video-js/v8/video-quality-selector.js?ver=4.9.1
200 OK 20 kB URL GET HTTP/2 justthegays.com/wp-content/plugins/video-embed-thumbnail-generator/video-js/v8/video-quality-selector.js?ver=4.9.1
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
Hash 5506ddaa7349fa0d506e242d666409de
f0818e479b3355197dc4622a1dbe28631eb0f5b9
3ea52566ddf61e119853f52404269f6c94183f1df37eb1ba5026730d179c69c2
GET /wp-content/plugins/video-embed-thumbnail-generator/video-js/v8/video-quality-selector.js?ver=4.9.1 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:23 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:10:16 GMT
etag: W/"3533-654f2cfa-66c019f;gz"
last-modified: Sat, 11 Nov 2023 07:27:54 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47467
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kHIUAQWYrEx%2B%2B7zoy9xX2bV1KxR48VLNX5VFhMSXXGUEWuSgkAwYCQnQbMoAWjnCfW62%2BFuyVwWbv1iA9MR2CTuZ78suOmRN%2BiPKcDA24GtGWK41jXoSSVSK6hDSNilYaw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d9160e3e7131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
justthegays.com/wp-content/uploads/2023/12/105550p.jpg
200 OK 9.7 kB URL GET HTTP/2 justthegays.com/wp-content/uploads/2023/12/105550p.jpg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, progressive, precision 8, 400x225, components 3\012- data
Hash 0b7743469443c33149343fd21bdfd3c2
8b082b37c2471c3dfbd038aa2266b9bbed202ecd
8cc5204620e70528ee2629257ec4f93538ef618d4064bac4e3159fe026c9b31a
GET /wp-content/uploads/2023/12/105550p.jpg HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:24 GMT
content-type: image/jpeg
content-length: 9733
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: origSize=10175
etag: "27bf-65710f5d-18a0837;;;"
expires: Thu, 14 Dec 2023 11:41:31 GMT
last-modified: Thu, 07 Dec 2023 00:18:37 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 45593
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SX3CriHZ2lsNsbOCCxk6jshJXiQC9ISAkeGmXfPL0pAYmRYOyvoPnh24vmPBGM1Qz4AvUfjwWBfLZLxeoUMNlBmsL3G1%2F2gXPGNpMNGoLFA%2BWYmuGzW5RcvpqN7khLVLZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d91a687f7131-OSL
alt-svc: h3=":443"; ma=86400
justthegays.com/wp-content/uploads/2023/12/105551p.jpg
200 OK 11 kB URL GET HTTP/2 justthegays.com/wp-content/uploads/2023/12/105551p.jpg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 400x225, components 3\012- data
Hash 23936a2f228df85caa9b05e9c0f04770
e57ceb5e09718c43a5b7ffcc6fe1a3a8d66c0e55
f0b5bb6f0e0d249d52bd7933ab6fa382ee5d1203be8a52a8faf7c75aa3f1ae09
GET /wp-content/uploads/2023/12/105551p.jpg HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:24 GMT
content-type: image/jpeg
content-length: 10570
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: origSize=11015
etag: "2b07-65710f63-18a083b;;;"
expires: Thu, 14 Dec 2023 11:41:31 GMT
last-modified: Thu, 07 Dec 2023 00:18:43 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 45593
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KjOY%2BnZ91Zsr56Fp3BbJh67UNOgE2U%2BuLvWryTEnbiE%2BAGGygynoPk6OBXqHic0kDzw3vqHHMq60dzM6XOQRJFf0XhkBzYS53r6%2F92Df%2FDlu2fxTLLX4RWiIbK0nbS%2BbBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d91a68807131-OSL
alt-svc: h3=":443"; ma=86400
cdn.tapioni.com/adgpt.js
200 OK 818 B IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint67:5F:F1:E0:0C:5E:00:4E:6A:BF:B1:5F:40:29:66:0E:3F:9C:24:5F
ValidityWed, 30 Aug 2023 00:00:00 GMT - Thu, 29 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (2028), with no line terminators
Hash b93fe1dfb3b9596da09b9eee17a9006f
89aeae49cadfb3ba7cc66702b3a18403e1ae5b2e
fdf9db0f687a66cd7c0d22c8589cca33edacca3079971d3d1a21675ca5c917bc
GET /adgpt.js HTTP/1.1
Host: cdn.tapioni.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:24 GMT
content-type: application/javascript
content-length: 818
last-modified: Thu, 30 Nov 2023 11:46:10 GMT
vary: Accept-Encoding
etag: "65687602-332"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 649964
accept-ranges: bytes
server: cloudflare
cf-ray: 8320d91c8f382d7a-ARN
X-Firefox-Spdy: h2
justthegays.com/wp-content/themes/videotube/assets/js/custom.js?ver=1685188737
200 OK 29 kB URL GET HTTP/2 justthegays.com/wp-content/themes/videotube/assets/js/custom.js?ver=1685188737
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type ASCII text, with CRLF line terminators
Hash 71324de6ffd6b44a238f481f20f4658d
821bc9ae9380ff24531689443f066cd6854b8bab
918714dad581c52653a92c6bfdb3dd302db0e9499f55832695fca7dd7e818095
GET /wp-content/themes/videotube/assets/js/custom.js?ver=1685188737 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:23 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:10:16 GMT
etag: W/"4e59-6471f081-65e0408;gz"
last-modified: Sat, 27 May 2023 11:58:57 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47467
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FoMsKXrF3c23hi6noI7Nl5O1GhQ87lbHUKEtiE%2BGepndO%2BnnMaHCuC8yME%2F0Z4ogaPFvwVd1JE68ibgSg57LF%2Bh76xGVhkyVDq8XQcptRb%2BfiTtvNhulasWb2HxMJIzaNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d915fe347131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
200 OK 31 kB URL GET HTTP/2 static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:79:35:ED:04:A2:CA:50:F7:9A:B8:FE:DF:A5:0C:B1:F2:E6:DD:E8
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash fd8729eaac6a02ef0fb35c4411697393
72584db4e16a2ccab8a326c1427efeb0a9318a6c
1805bd9859f94071d338b3fc1f702219ee63a00115655978152b987aa2b10f84
GET /beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:23 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2023.10.0"
last-modified: Tue, 10 Oct 2023 21:38:13 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d9167ca056af-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
justthegays.com/wp-content/plugins/videopack-ads/public/video-js/v8/videojs.ima.min.js?ver=1.0.4
200 OK 13 kB URL GET HTTP/2 justthegays.com/wp-content/plugins/videopack-ads/public/video-js/v8/videojs.ima.min.js?ver=1.0.4
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type ASCII text, with very long lines (48119)
Hash 64661d1983995fe15d869fea18c06d82
de2cb1eeb23e39a15d6653dd34d7a14cd8e502dc
5547f3388bdf0b190e3d47273c07a1aff7ae1b43a71e7a80509a2515f3350557
GET /wp-content/plugins/videopack-ads/public/video-js/v8/videojs.ima.min.js?ver=1.0.4 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:23 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:10:16 GMT
etag: W/"bbf8-652e37ad-61e016b;gz"
last-modified: Tue, 17 Oct 2023 07:28:45 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47467
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yv5pTO8Gubm7JX3wQK%2BTCJ69clQp6f8FU2EICQcEOs4lReLj03VLbjQg8JQfkfO0KXaKBOsbdjomO99SYXowERtwbi4qUYK1X13ajswEp0ryeLaFzimhhGacTbdwTBbZQg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d9158dfa7131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
justthegays.com/wp-content/plugins/litespeed-cache/assets/js/webfontloader.min.js
200 OK 5.8 kB URL GET HTTP/2 justthegays.com/wp-content/plugins/litespeed-cache/assets/js/webfontloader.min.js
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type Unicode text, UTF-8 text, with very long lines (12075), with no line terminators
Hash 45943f1d780bd7d9db946bdc5ed14a5a
41a42d3c32fe16108eb653ae903ae1fb86b7e5a8
6f58202a14e2dcb4c672d6e9f0881ddc2b4e88225a97aadd940400a7377ee02d
GET /wp-content/plugins/litespeed-cache/assets/js/webfontloader.min.js HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:23 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:10:16 GMT
etag: W/"2f42-65396c36-65e0067;gz"
last-modified: Wed, 25 Oct 2023 19:27:50 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47467
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zUReWbEf7tTMDrYS95w%2Bfei%2FkraCcSZWHqzm271pO9engdaSVYH5SjaEaAeJbZSaSwri2%2FSaNq1eU4tF1AunkDSPHh%2FMwDY16ricGoK6x4%2FIYxTib%2FdrzhgzN2GiUmqMLA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d9156ddd7131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
justthegays.com/wp-content/uploads/2022/11/cropped-JustTheGays-192x192.png
200 OK 9.8 kB URL GET HTTP/2 justthegays.com/wp-content/uploads/2022/11/cropped-JustTheGays-192x192.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0cc49de2aebc1007696c0fab1bdac28f
e9d029925a5fe7193cdef6a894b713aaa7415973
3e4b734696f15df6249a2c7a7f690bf92a84b7bddfb0002f9bfb4dc19c2cd89c
GET /wp-content/uploads/2022/11/cropped-JustTheGays-192x192.png HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:24 GMT
content-type: image/webp
content-length: 9750
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=12678
content-disposition: inline; filename="cropped-JustTheGays-192x192.webp"
vary: Accept
etag: "3186-63792565-72f31a7;;;"
expires: Thu, 14 Dec 2023 11:10:31 GMT
last-modified: Sat, 19 Nov 2022 18:50:13 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47453
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h3fcrE5%2FkOeA6W7Z67N8zlvoc7BufcSn3%2FY8SzLjACmIouCxZHAzcGLPV2MzZCKxamFsOtaXtgEX3z%2F7Kw6AStPp6FxLphKNUxiMsYVP%2F%2FSeIUr82ICQJFEWdIP63QTksQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d91ebaa17131-OSL
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2
200 OK 23 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 23236, version 1.0\012- data
Hash 716309aab2bca045f9627f63ad79d0bf
38804233a29aaf975d557fe14e762c627bef76e0
115f6a626ca115d4ad5581b59275327e0e860b30330a52b0f785561332dd2429
GET /s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:42:53 GMT
expires: Fri, 06 Dec 2024 15:42:53 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:08:26 GMT
content-type: font/woff2
age: 31111
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
na.nawpush.com/tags/63949?version_name=d
200 OK 1.2 kB URL GET HTTP/2 na.nawpush.com/tags/63949?version_name=d
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/agent.php?spot=407030
Certificate IssuerLet's Encrypt
Subjectna.nawpush.com
Fingerprint73:8E:D9:E1:D0:7F:5B:63:BD:6A:8D:47:8E:04:38:3F:5F:49:91:2B
ValidityWed, 29 Nov 2023 03:00:42 GMT - Tue, 27 Feb 2024 03:00:41 GMT
File type JSON data\012- , ASCII text, with very long lines (1165), with no line terminators
Hash 5070be09abcb142a27290714a5e763d2
8c68999be7440493327f690647894b9ba797be1e
27f724bd1565e22e7bf9fcbcdb17dc20f8303213273f1a2fbe2335363a177d74
GET /tags/63949?version_name=d HTTP/1.1
Host: na.nawpush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:25 GMT
content-type: application/json
content-length: 1165
server: nginx/1.18.0
cache-control: max-age=300, public
x-proxy-cache: EXPIRED
access-control-allow-origin: *
X-Firefox-Spdy: h2
136cb85b18.ebb174824f.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI4NjIyMDE3Mjc2MDc3MTc3MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuOTUuMCIsInRhZ19pZCI6NjM5NDksInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MC4yMiwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowLCJ1c2VyX2tleXdvcmRzIjoiIn0=
0 B URL 136cb85b18.ebb174824f.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI4NjIyMDE3Mjc2MDc3MTc3MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuOTUuMCIsInRhZ19pZCI6NjM5NDksInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MC4yMiwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowLCJ1c2VyX2tleXdvcmRzIjoiIn0=
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI4NjIyMDE3Mjc2MDc3MTc3MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuOTUuMCIsInRhZ19pZCI6NjM5NDksInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MC4yMiwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowLCJ1c2VyX2tleXdvcmRzIjoiIn0= HTTP/1.1
Host: 136cb85b18.ebb174824f.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:25 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=63949
0 B URL fp.metricswpsh.com/fp?tag_id=63949
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=63949 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Fri, 08 Dec 2023 00:21:25 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
lcdn.tsyndicate.com/sdk/v1/b.b.js
200 OK 2.6 kB URL GET HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP
Requested by https://tsyndicate.com/iframes2/860b26275c5a4988aba5f1f983f095d9.html?extid=33113
Certificate IssuerSectigo Limited
Subjectlcdn.tsyndicate.com
FingerprintAA:DB:E6:65:05:5A:83:46:D1:77:83:25:84:3D:B2:B5:F5:99:97:00
ValidityWed, 08 Mar 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (2590)
Hash b0a8eae036a72f605538b002e33f7023
5916ea9eeb0b676d6f44637601c40d0dc69542d1
7b9affd37cf01ac1a4c5f4a4ccb1936f0412ff771fb24e36a55682d2bf0ac554
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:25 GMT
content-type: application/javascript
content-length: 2640
server: nginx
last-modified: Tue, 25 Jul 2023 12:28:26 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"64bfbfea-1f37"
content-encoding: gzip
age: 10983473
accept-ranges: bytes
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/images/c/f/ebe55467dc58799ac6025c91f04c047a60a49c/main.jpg
8.5 kB URL lcdn.tsyndicate.com/images/c/f/ebe55467dc58799ac6025c91f04c047a60a49c/main.jpg
IP
Certificate IssuerSectigo Limited
Subjectlcdn.tsyndicate.com
FingerprintAA:DB:E6:65:05:5A:83:46:D1:77:83:25:84:3D:B2:B5:F5:99:97:00
ValidityWed, 08 Mar 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 300x100, components 3\012- data
Hash e16cff5656b3fc130ac8daaf225b2768
53645df42e4001806d917d10cee76206f35812df
ed8feecb4233e0425fbbc0d719566a9865eafb64eb65a061c3438db9947023a4
GET /images/c/f/ebe55467dc58799ac6025c91f04c047a60a49c/main.jpg HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:25 GMT
content-type: image/jpeg
content-length: 8536
server: nginx
last-modified: Thu, 18 Mar 2021 21:38:46 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6053c866-217a"
content-encoding: gzip
age: 10601472
accept-ranges: bytes
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=63949
60 B URL fp.metricswpsh.com/fp?tag_id=63949
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text
Hash 11ef28febd84a9b383637787c3583019
4edd6cb0f09f3f737e012e417569ffad7d7c5de3
49efe1a2f9b41446ca7028289dda1b7a22a56c1f55fa3f466b51364cdd9be3d9
POST /fp?tag_id=63949 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1775
Origin: https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 08 Dec 2023 00:21:25 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 60
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
Set-Cookie: id=8926902452890057171; Expires=Sat, 07 Dec 2024 00:21:25 GMT; Secure; SameSite=None
Vary: Origin
storage.multstorage.com/log/count.html
200 OK 29 kB URL GET HTTP/2 storage.multstorage.com/log/count.html
IP
Requested by https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/agent.php?spot=407030
Certificate IssuerGoogle Trust Services LLC
Subjectmultstorage.com
Fingerprint1F:90:8C:BB:6B:B0:99:41:3A:23:DF:A4:57:1A:25:0F:88:BA:C6:DE
ValidityMon, 20 Nov 2023 10:07:51 GMT - Sun, 18 Feb 2024 10:07:50 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (700)
Hash b728ca9cd183d1b7c3f72116b19b22a3
c1fd73f6b02cf00b8bc60b09cc99495e8494b739
8a7b1ca4bbf273b32ea865d4785a1944d1b2b133678d9b5fe7ee0406f6fd64b2
GET /log/count.html HTTP/1.1
Host: storage.multstorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:25 GMT
content-type: text/html
last-modified: Mon, 18 Sep 2023 14:39:06 GMT
vary: Accept-Encoding
x-request-id: 49860a2b18ab89bc6ddfbbbbc10c429d
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jUuM27zAEhrPBVlssMNr2CrAppaYhZ8XG97as%2FwjhTOtFF4zM6fJlcqcXF8J9OMRVd4xtsXrvxoRzXFJuGN3LuD%2F2WRIsG4oz2Wnf6XzEiiWDwkj8iyXIWqB8aJhUTD%2FB8FU8c0CWpw5Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d92148e65684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
rtbrenab.com/get/?go=1&data=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
1.1 kB URL rtbrenab.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1244)
Hash 20acb8f7f5a89eb77837f936d5d4b2b7
03b0d6614e2c88cf0cc5f332cc8fe96897864533
9d63e65ab1c75e02ff7e84d2570f7bcfa248ab4ba7d5e8fb625b2e641a177c85
GET /get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImQiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MTQ5NiwidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6IiwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIxMzI1MTQ1Mjk1IiwicmVmcmVzaCI6MSwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6Mjg3MzE0LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6dHJ1ZSwicmVmZG9tYWluIjoianVzdHRoZWdheXMuY29tIiwicGwiOjI2OSwic3RyYXRhZ2VtIjoiIiwiZ3lyIjowLCJhY2NlbCI6MCwic3NwIjozNzU4LCJidHlwZSI6MCwidjIiOjAsInJjaGFuZ2UiOnRydWV9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9LCJtZXRyaWNzIjp7InRvcGljcyI6W119fV0sInNpdGUiOnsiaWQiOiIyODczMTQiLCJjYXQiOlsiSUFCMjUiXSwicGFnZSI6Imh0dHBzOi8vanVzdHRoZWdheXMuY29tLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiJhNzczOWRjYmZlZWNlZTg0NjFjOGY0MGM0ZDRmNzAzZiIsImZwIjpudWxsLCJmcF9zdHIiOiIiLCJ1YV9kYXRhIjpudWxsfSwiZXh0Ijp7ImR0IjoxNzAxOTk0ODkyMDI4fX0= HTTP/1.1
Host: rtbrenab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 08 Dec 2023 00:21:25 GMT
content-type: text/html
content-length: 1126
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: br
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImrEGGMjhpgyYlrAKFMmRgsaNW7MaCEGR5gbLWTIECMGxkwxM2PYEOEwTJ0xGMnAqJGjptAWM8jQGHMSx8cWOWqICdPCDI2kY2aEyREjTFeeD8nYWagRRgwcDuHUEbPwBo4YMig-hANn4dWUORzOgSNRBw0ZOXD8teFwTJu6OmrgSGkjb1gzC2U0FCHGjZuFM2rQgGvTYRs3F3XE4GoDRtrPoW_EiFFjhsM6cthgvuE2pWkRdWRgREOHDpw5Ol68MJPGDZkxYdrMccEmjZ0yL8a8cUNcTpsgZ6D_QE6nzJk3cvL0OFMnzxwudWDYtDGm-Zg1X9KQ6WHmjhwZRWLowQEDZh4jT7xRBRRLLHGEEnBUQUcekhkhgxVi0CEFEWLYIUcaa5yBwxdZJAGDEEK0oIRqHLIxRBNvRIGGGFnEQEQcSahRhBE0tGBHHHmUkZQYX-TxBhZStNCCGlaoQcYMc1BBRBZS2GEGHWmkIWIcRhARQxBHQEEHGkm0YEMUX5xRRRJESFFFGuipJ4MNBu31Bh3xzfdXYIOluR5yh4WRxhluxNmDYozlABYZb7SBkRp1zNEbQWeEYZ4L0hlaWBh9bSFTFw6JAZkOMLhglkNy2IHYDLfVUUcaGJmRQxgyZAYDUy3FUOOcK-EwAw5ktFDDGMf9ZUYNZZgBwwxgpYGYCFy5kEOnf7nAGg1gyRHfscku60Kzz4JVRxgYoahHGmywEcYLNXgKAgpXFEfoHXOA4AQVIMTQKQw7gJCuGzbQUC8e-dYbqmhDeZoCCEeU8d4bL8hglnryxgCCEWnIEewbeLwgb7kwgDUGUDqI4MQTYIH3xcYYfQwWGxyLUIQTg5ZhxxcSyyZaSm7NYAN_t8nBZ2SKTXbQy2LIsRAOaInw8xdtvEFGZDh05BAZcryBmUNvKORXWlHjkQdZDt2BEVz8gYXG1zZBq1eoGEVNB6XgtVCHG2nQ4WW5ZOhG9Rxoi7YmwzOgRJjRKR_0Rd1g0WGoaDeYlUMONBBdQ0Vt6Ia44ow7LgMNfxsEcxl7fUHpRImPVvliDrnsORsI0WH1Fn1j-lCEQQXrExsSpYXyQreNERoMfSgQEA%3D%3D&s=112595f2b2fa1b1dc2d87cc4652185e1735ecbf0c00cdda5c9a8ce4eb59606421701994885&w=t&r=1&d=43&priv=true
24 B URL pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImrEGGMjhpgyYlrAKFMmRgsaNW7MaCEGR5gbLWTIECMGxkwxM2PYEOEwTJ0xGMnAqJGjptAWM8jQGHMSx8cWOWqICdPCDI2kY2aEyREjTFeeD8nYWagRRgwcDuHUEbPwBo4YMig-hANn4dWUORzOgSNRBw0ZOXD8teFwTJu6OmrgSGkjb1gzC2U0FCHGjZuFM2rQgGvTYRs3F3XE4GoDRtrPoW_EiFFjhsM6cthgvuE2pWkRdWRgREOHDpw5Ol68MJPGDZkxYdrMccEmjZ0yL8a8cUNcTpsgZ6D_QE6nzJk3cvL0OFMnzxwudWDYtDGm-Zg1X9KQ6WHmjhwZRWLowQEDZh4jT7xRBRRLLHGEEnBUQUcekhkhgxVi0CEFEWLYIUcaa5yBwxdZJAGDEEK0oIRqHLIxRBNvRIGGGFnEQEQcSahRhBE0tGBHHHmUkZQYX-TxBhZStNCCGlaoQcYMc1BBRBZS2GEGHWmkIWIcRhARQxBHQEEHGkm0YEMUX5xRRRJESFFFGuipJ4MNBu31Bh3xzfdXYIOluR5yh4WRxhluxNmDYozlABYZb7SBkRp1zNEbQWeEYZ4L0hlaWBh9bSFTFw6JAZkOMLhglkNy2IHYDLfVUUcaGJmRQxgyZAYDUy3FUOOcK-EwAw5ktFDDGMf9ZUYNZZgBwwxgpYGYCFy5kEOnf7nAGg1gyRHfscku60Kzz4JVRxgYoahHGmywEcYLNXgKAgpXFEfoHXOA4AQVIMTQKQw7gJCuGzbQUC8e-dYbqmhDeZoCCEeU8d4bL8hglnryxgCCEWnIEewbeLwgb7kwgDUGUDqI4MQTYIH3xcYYfQwWGxyLUIQTg5ZhxxcSyyZaSm7NYAN_t8nBZ2SKTXbQy2LIsRAOaInw8xdtvEFGZDh05BAZcryBmUNvKORXWlHjkQdZDt2BEVz8gYXG1zZBq1eoGEVNB6XgtVCHG2nQ4WW5ZOhG9Rxoi7YmwzOgRJjRKR_0Rd1g0WGoaDeYlUMONBBdQ0Vt6Ia44ow7LgMNfxsEcxl7fUHpRImPVvliDrnsORsI0WH1Fn1j-lCEQQXrExsSpYXyQreNERoMfSgQEA%3D%3D&s=112595f2b2fa1b1dc2d87cc4652185e1735ecbf0c00cdda5c9a8ce4eb59606421701994885&w=t&r=1&d=43&priv=true
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0959ba36d476b6dc1994ba3c678b07c4
d30b94da72daa02766965206a85b7e0356375f5e
897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImrEGGMjhpgyYlrAKFMmRgsaNW7MaCEGR5gbLWTIECMGxkwxM2PYEOEwTJ0xGMnAqJGjptAWM8jQGHMSx8cWOWqICdPCDI2kY2aEyREjTFeeD8nYWagRRgwcDuHUEbPwBo4YMig-hANn4dWUORzOgSNRBw0ZOXD8teFwTJu6OmrgSGkjb1gzC2U0FCHGjZuFM2rQgGvTYRs3F3XE4GoDRtrPoW_EiFFjhsM6cthgvuE2pWkRdWRgREOHDpw5Ol68MJPGDZkxYdrMccEmjZ0yL8a8cUNcTpsgZ6D_QE6nzJk3cvL0OFMnzxwudWDYtDGm-Zg1X9KQ6WHmjhwZRWLowQEDZh4jT7xRBRRLLHGEEnBUQUcekhkhgxVi0CEFEWLYIUcaa5yBwxdZJAGDEEK0oIRqHLIxRBNvRIGGGFnEQEQcSahRhBE0tGBHHHmUkZQYX-TxBhZStNCCGlaoQcYMc1BBRBZS2GEGHWmkIWIcRhARQxBHQEEHGkm0YEMUX5xRRRJESFFFGuipJ4MNBu31Bh3xzfdXYIOluR5yh4WRxhluxNmDYozlABYZb7SBkRp1zNEbQWeEYZ4L0hlaWBh9bSFTFw6JAZkOMLhglkNy2IHYDLfVUUcaGJmRQxgyZAYDUy3FUOOcK-EwAw5ktFDDGMf9ZUYNZZgBwwxgpYGYCFy5kEOnf7nAGg1gyRHfscku60Kzz4JVRxgYoahHGmywEcYLNXgKAgpXFEfoHXOA4AQVIMTQKQw7gJCuGzbQUC8e-dYbqmhDeZoCCEeU8d4bL8hglnryxgCCEWnIEewbeLwgb7kwgDUGUDqI4MQTYIH3xcYYfQwWGxyLUIQTg5ZhxxcSyyZaSm7NYAN_t8nBZ2SKTXbQy2LIsRAOaInw8xdtvEFGZDh05BAZcryBmUNvKORXWlHjkQdZDt2BEVz8gYXG1zZBq1eoGEVNB6XgtVCHG2nQ4WW5ZOhG9Rxoi7YmwzOgRJjRKR_0Rd1g0WGoaDeYlUMONBBdQ0Vt6Ia44ow7LgMNfxsEcxl7fUHpRImPVvliDrnsORsI0WH1Fn1j-lCEQQXrExsSpYXyQreNERoMfSgQEA%3D%3D&s=112595f2b2fa1b1dc2d87cc4652185e1735ecbf0c00cdda5c9a8ce4eb59606421701994885&w=t&r=1&d=43&priv=true HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:25 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/elapsedtime?f=banner%20300x100&sc=645ad092a0974b48afa7ebf013ea199d&hn=6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz&et=350
0 B URL pxl.tsyndicate.com/api/v1/elapsedtime?f=banner%20300x100&sc=645ad092a0974b48afa7ebf013ea199d&hn=6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz&et=350
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/elapsedtime?f=banner%20300x100&sc=645ad092a0974b48afa7ebf013ea199d&hn=6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz&et=350 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:25 GMT
content-length: 0
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
rtbrenab.com/banner/in/show/?mid=142414257576247392&pid=0&site=287314&sc=NO&usage_type=DCH&subid=1325145295&sid=0&cid=17340&price=0&is_cpm=1&cpm=0.00012&ecpm=0.00012&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=justthegays.com&hostname=auc-banner-hz-8&site_id=0&spot_id=287314&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&pop_winurl=&ip=91.90.42.154&testab=&px_id=287314&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=iframeAd&iabcat=IAB25&min_cpm=0.0001&placement_type_id=269&skin_test=&verify_hash=&score=1529.7970569229205&ml=&tag_ab=d&v2=0&ttl=&space_id=1496&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=%2F%2Fsiyotith.com%2Fsn.php&pr=justthegays.com&bid_crid=&bid_cid=&is_iframe=1&ad_tags=,&stratagem=&ssp=3758&refresh=1&priority=0&bb=0.0001&label_ids=&site_id64=287314&container=ClickadillaTuple&original_bid_usd=0.00012&comeback=&topics=&o_d=&ectr=1
0 B URL rtbrenab.com/banner/in/show/?mid=142414257576247392&pid=0&site=287314&sc=NO&usage_type=DCH&subid=1325145295&sid=0&cid=17340&price=0&is_cpm=1&cpm=0.00012&ecpm=0.00012&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=justthegays.com&hostname=auc-banner-hz-8&site_id=0&spot_id=287314&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&pop_winurl=&ip=91.90.42.154&testab=&px_id=287314&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=iframeAd&iabcat=IAB25&min_cpm=0.0001&placement_type_id=269&skin_test=&verify_hash=&score=1529.7970569229205&ml=&tag_ab=d&v2=0&ttl=&space_id=1496&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=%2F%2Fsiyotith.com%2Fsn.php&pr=justthegays.com&bid_crid=&bid_cid=&is_iframe=1&ad_tags=,&stratagem=&ssp=3758&refresh=1&priority=0&bb=0.0001&label_ids=&site_id64=287314&container=ClickadillaTuple&original_bid_usd=0.00012&comeback=&topics=&o_d=&ectr=1
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=142414257576247392&pid=0&site=287314&sc=NO&usage_type=DCH&subid=1325145295&sid=0&cid=17340&price=0&is_cpm=1&cpm=0.00012&ecpm=0.00012&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=justthegays.com&hostname=auc-banner-hz-8&site_id=0&spot_id=287314&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&pop_winurl=&ip=91.90.42.154&testab=&px_id=287314&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=iframeAd&iabcat=IAB25&min_cpm=0.0001&placement_type_id=269&skin_test=&verify_hash=&score=1529.7970569229205&ml=&tag_ab=d&v2=0&ttl=&space_id=1496&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=%2F%2Fsiyotith.com%2Fsn.php&pr=justthegays.com&bid_crid=&bid_cid=&is_iframe=1&ad_tags=,&stratagem=&ssp=3758&refresh=1&priority=0&bb=0.0001&label_ids=&site_id64=287314&container=ClickadillaTuple&original_bid_usd=0.00012&comeback=&topics=&o_d=&ectr=1 HTTP/1.1
Host: rtbrenab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrenab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Fri, 08 Dec 2023 00:21:25 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: //siyotith.com/sn.php
X-Firefox-Spdy: h2
justthegays.com/cdn-cgi/rum?
204 No Content 0 B URL POST HTTP/2 justthegays.com/cdn-cgi/rum?
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 440
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Fri, 08 Dec 2023 00:21:26 GMT
access-control-allow-origin: https://justthegays.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 8320d9266ebe712a-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
imasdk.googleapis.com/js/sdkloader/ima3.js?ver=1.0.4
200 OK 129 kB URL GET HTTP/2 imasdk.googleapis.com/js/sdkloader/ima3.js?ver=1.0.4
IP
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (2656)
Size 129 kB (128901 bytes)
Hash 7269b785219ee21f28f4b4e69c1bd829
55033b2fcf02286d8e096e05258fbd78749a5b88
bda9ec230e9fd779256cde4a4b7687c6fbfab102624bed226faca3e27d255716
GET /js/sdkloader/ima3.js?ver=1.0.4 HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 128901
date: Fri, 08 Dec 2023 00:21:26 GMT
expires: Fri, 08 Dec 2023 00:21:26 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-XJ5QG4KZKS
200 OK 93 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-XJ5QG4KZKS
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash fb5f0aeb42179cc054a53c75458ddf3e
4903240560dec80c21cbfb8f4bb4bdd2552c3d0b
d40a8261d6829b1bdf771cc70f8a48b5b31e8e62773e07ee2c8b24ea337c0e86
GET /gtag/js?id=G-XJ5QG4KZKS HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 08 Dec 2023 00:21:26 GMT
expires: Fri, 08 Dec 2023 00:21:26 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 93131
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/daKbyP1.js
200 OK 76 kB URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/daKbyP1.js
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type Unicode text, UTF-8 text, with very long lines (65503), with no line terminators
Hash 6a761bae4530f6bfb270abfa75b1cb9b
617e8fd84f14b7a601d055c6ff2ad09441e823c6
8e629883ac62697032eb697449e83a2969d69e7e8adb7a624157e6e1a4afc13e
GET /daKbyP1.js HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: application/javascript
content-length: 75986
last-modified: Thu, 30 Nov 2023 11:46:10 GMT
vary: Accept-Encoding
etag: "65687602-128d2"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 59
cf-ray: 82e2de9effc04e1c-HEL
x-frame-options: DENY
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/Le4lypa.js
200 OK 87 kB URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/Le4lypa.js
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type Unicode text, UTF-8 text, with very long lines (65503), with no line terminators
Hash 3270f5552a6b219080d466395f99e9dd
e9374c6b5c07c1b6a1e27147e35be9e9447dd49a
7cc379a857e3679e6891d65b543e809a344491b2a1b19927df43a48b25c7cd40
GET /Le4lypa.js HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: application/javascript
content-length: 86755
last-modified: Thu, 30 Nov 2023 11:46:10 GMT
vary: Accept-Encoding
etag: "65687602-152e3"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 25
cf-ray: 82e2dd72cae9d902-HEL
x-frame-options: DENY
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/Wq0DIgc.js
200 OK 87 kB URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/Wq0DIgc.js
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type Unicode text, UTF-8 text, with very long lines (65503), with no line terminators
Hash 3270f5552a6b219080d466395f99e9dd
e9374c6b5c07c1b6a1e27147e35be9e9447dd49a
7cc379a857e3679e6891d65b543e809a344491b2a1b19927df43a48b25c7cd40
GET /Wq0DIgc.js HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: application/javascript
content-length: 86755
last-modified: Thu, 30 Nov 2023 11:46:10 GMT
vary: Accept-Encoding
etag: "65687602-152e3"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 25
cf-ray: 82e2dd72cae9d902-HEL
x-frame-options: DENY
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.fluidplayer.com/v3/current/fluidplayer.min.js?ver=6.4.2
200 OK 159 kB URL GET HTTP/2 cdn.fluidplayer.com/v3/current/fluidplayer.min.js?ver=6.4.2
IP
ASN #60068 Datacamp Limited
Certificate IssuerLet's Encrypt
Subjectfluidplayer.com
FingerprintF7:9C:B4:85:DA:61:E8:2F:F4:BD:0B:E8:14:8A:4D:C1:80:00:1F:DD
ValidityThu, 05 Oct 2023 14:55:10 GMT - Wed, 03 Jan 2024 14:55:09 GMT
File type gzip compressed data, from Unix\012- data
Size 159 kB (158849 bytes)
Hash b79dba04d5e55a1b147ce0a810c6bcfc
816c5205c633a1a95d97ca4cff6b34fb32ba3e19
88cb2d834acab13ab6188e190b6608c530bbf2506e1fb56b3900b0008cf7bb05
GET /v3/current/fluidplayer.min.js?ver=6.4.2 HTTP/1.1
Host: cdn.fluidplayer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 16 Nov 2023 13:30:47 GMT
etag: W/"65561987-38863"
expires: Sat, 18 Nov 2023 10:16:53 GMT
cache-control: max-age=86400
access-control-allow-origin: *
x-77-nzt: ArlMCRQ3Nzf/ZuYAALlMCgE3Nzf/AAAAAA
x-77-nzt-ray: af585630b0d4b0908661726565804d0d
x-accel-expires: @1702022304
x-accel-date: 1701935904
x-77-cache: HIT
x-77-age: 58982
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT
x-age-lb: 58982
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
justthegays.com/wp-content/litespeed/css/859f2d20cb22489f202ae874c03abf2e.css?ver=42880
200 OK 204 kB URL GET HTTP/2 justthegays.com/wp-content/litespeed/css/859f2d20cb22489f202ae874c03abf2e.css?ver=42880
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 204 kB (203534 bytes)
Hash b987b25256f6466f76442e59b38c73a8
13c40be56224b6d8cbd9f262703f3b957709b332
c3866ba70f887433a1feb8b86b8f90e870931b891ff9591bafcab1e09e3840ae
GET /wp-content/litespeed/css/859f2d20cb22489f202ae874c03abf2e.css?ver=42880 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: text/css
cache-control: public, max-age=604800
cf-bgj: minify
etag: W/"ef0a4-6571a6a5-6220004;gz"
expires: Thu, 14 Dec 2023 11:41:31 GMT
last-modified: Thu, 07 Dec 2023 11:04:05 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 45595
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BNct2n2nc4W0ShNSobMuNbDTZx0u5SLvnLzsYx5l%2FVmLIGIbcEF2crQJAQAeqCmlVZ5kXDerN4exY5siCPyXC2asyDuL5q4HeEQ9U97t8X4NpqsKfECgm%2BswZSu2sFEzFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d9269ed7712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
justthegays.com/wp-content/plugins/wp-user-follow/public/js/wp-user-follow-public.js?ver=1699715990
200 OK 93 kB URL GET HTTP/2 justthegays.com/wp-content/plugins/wp-user-follow/public/js/wp-user-follow-public.js?ver=1699715990
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
Hash 028557f1fbbe2c9f96fa7d4620f6fcbe
9238a883d7e485ffa52ec431a77f0c057118358d
ffc8ea30dfe54902e757fd1f69c8af7afde9cc0c197a2a53bb8a81745ef04424
GET /wp-content/plugins/wp-user-follow/public/js/wp-user-follow-public.js?ver=1699715990 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:10:16 GMT
etag: W/"1a2-654f9b96-66d0495;gz"
last-modified: Sat, 11 Nov 2023 15:19:50 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47470
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=236B8%2BxxgLPR5X2u%2F5Bpft89dLKmQDTtmOub0lC6mB1kNVilNxgX8is94GgOkHQB8NIkzYSzBxUbDHlTWd%2F8MUyhu9ufHV3uQB3NU8B6%2BsA1iDgd03c1GLfxUqkNVshtRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d926befe712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
justthegays.com/wp-content/uploads/2022/07/JustTheGaysLogo2.png
200 OK 3.8 kB URL GET HTTP/2 justthegays.com/wp-content/uploads/2022/07/JustTheGaysLogo2.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash c70929770cbdfef84625811b327e7275
f943d03ea7777537017e46cdd27b7cd3f378f0a6
ee02577128f86854cb0da9894e5c36a1767d1eb32111df8b6808df9bf3857aaf
GET /wp-content/uploads/2022/07/JustTheGaysLogo2.png HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: image/webp
content-length: 3830
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=4725
content-disposition: inline; filename="JustTheGaysLogo2.webp"
vary: Accept
etag: "1275-63c6c00a-72a8e14;;;"
expires: Thu, 14 Dec 2023 11:10:16 GMT
last-modified: Tue, 17 Jan 2023 15:34:34 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47470
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bszl7qdoRDz7uTR%2BHmTIvQKSXC28nIZFq5MxtvYFRWmm7O81S2rWlMpNC2%2FfCTEOe4lJ5WnJhtd5CFl%2BCAcxe2uU0n6dyT48Tg9rWAe4lM%2FtqUO1%2FNNpKhd3TwIZ5n22Cg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d927ef9a712a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
justthegays.com/wp-content/themes/videotube/img/play-icon.png
200 OK 544 B URL GET HTTP/2 justthegays.com/wp-content/themes/videotube/img/play-icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3858ca1390988c859f3de9d127e55732
fdea92af5f46cecfb38264cd0c2a0c88ede0d836
41faf51f3d71514f16fb7e7156119599d19ad9f78a752a23cfd74dda5812d9d6
GET /wp-content/themes/videotube/img/play-icon.png HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: image/webp
content-length: 544
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1748
content-disposition: inline; filename="play-icon.webp"
vary: Accept
etag: "6d4-6471f081-65e0438;;;"
expires: Thu, 14 Dec 2023 11:10:16 GMT
last-modified: Sat, 27 May 2023 11:58:57 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47470
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u5e3ckddBq38ScJiG4tQ0SVPzsNXTtxFIy0PxKG3zCUzMX5hJ%2FWeOqbLLQXrqlzbJkJEW3rRF%2B%2BzAgmJAL2Qp28MJwpPX61l2%2BHAB%2BrAFLfl7LMVBXudDE2azsLMmhxPAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d927ff9f712a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato:300,400,700,900&display=swap
200 OK 44 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Lato:300,400,700,900&display=swap
IP
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash e41da697d295cf79d15f18f45c2a0e17
8c8bcb727f92c5cb9e1890364344dad21879dde1
cf91fe69fd2b4c75d8348950da91d46e01c0e92aabb72c68b1b1cfc8b86d8037
GET /css?family=Lato:300,400,700,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 08 Dec 2023 00:21:26 GMT
date: Fri, 08 Dec 2023 00:21:26 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
justthegays.com/wp-content/plugins/videopack-ads/public/js/videopack-ads-public.js?ver=1.0.4
200 OK 64 kB URL GET HTTP/2 justthegays.com/wp-content/plugins/videopack-ads/public/js/videopack-ads-public.js?ver=1.0.4
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
Hash dfbf4ffd60727fa0fe7f1215e1d7fe40
9710518a67dc9deacdd58ef765c2cca79a3f80ce
b2485e3e24294a726cecccdb754b5a7ac7926e1b70aeacacbe51f8b8eb3a2d66
GET /wp-content/plugins/videopack-ads/public/js/videopack-ads-public.js?ver=1.0.4 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:10:16 GMT
etag: W/"130-652e37ad-61e0167;gz"
last-modified: Tue, 17 Oct 2023 07:28:45 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47470
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pBnTILY3JUtKRn9aN93HM%2BpzzcyQ%2BFV5Je%2FE2D7wP6fW9WAkq5kOEnPCHupRy6%2FHgZIFKIHcuPmDgJQEGxj3Hy8tr5eDOFqyURuSYyAMINkpQv%2FTLIk7qjekxyDJ5dncJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d926aee6712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
justthegays.com/wp-content/uploads/2023/12/105278p.jpg
200 OK 129 kB URL GET HTTP/2 justthegays.com/wp-content/uploads/2023/12/105278p.jpg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 939x529, components 3\012- data
Size 129 kB (128823 bytes)
Hash ec2ec2e1f70d95ccc124bac4dd56ef66
ceaa779bf3af8db9b5f4597badee1de33da4a0bb
985bb981e47a7e932548918fb87f2db5609f5a05ce33d4e60872841c72a20def
GET /wp-content/uploads/2023/12/105278p.jpg HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: image/jpeg
content-length: 128823
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
etag: "1f737-656bb003-66502c1;;;"
expires: Thu, 14 Dec 2023 11:45:18 GMT
last-modified: Sat, 02 Dec 2023 22:30:27 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 45368
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TnBK6Jaz2xeG%2BEKQclN9Ud4sqSdQBbqRd5cIENx4e09jmnBWY6a%2FN4LZuF81qagqvflT0dbC8yj5RuRznEI2GCmki%2Bb1NM4RsKKA2zf%2BuqONKI3WjRSL%2FIeHR2uPEuEzzA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d9290825712a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
justthegays.com/wp-content/themes/videotube/assets/js/jquery.cookie.js?ver=1685188737
200 OK 131 kB URL GET HTTP/2 justthegays.com/wp-content/themes/videotube/assets/js/jquery.cookie.js?ver=1685188737
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
Size 131 kB (131410 bytes)
Hash ff14e4812b7f512e620b1ad35542bcfc
c40c5f777e7a2f63e7b731b3cdb1fe9c806b23ae
c4fb91befcf134b81ecfa1c586e1f9d6426c8f4fc1f6c130ac1fddb49ab5df96
GET /wp-content/themes/videotube/assets/js/jquery.cookie.js?ver=1685188737 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:10:16 GMT
etag: W/"c31-6471f081-65e040b;gz"
last-modified: Sat, 27 May 2023 11:58:57 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47470
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0WvIdqlNI2QQLbKAuVcwi%2BtW%2FsOqh4UGGbz8YqZdeulZlN%2BIsTATqtTyS9fG9kVdd5LQgycDpt10FdzwEnMpEuvF1E6aiwosX31LJ2V2%2B%2FVOeqbcxNzN9QeeK%2F63ZqM%2FEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d926bf02712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
justthegays.com/wp-content/uploads/2023/12/105555p.jpg
200 OK 33 kB URL GET HTTP/2 justthegays.com/wp-content/uploads/2023/12/105555p.jpg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 800x450, components 3\012- data
Hash 1c9c7d4ece4044215b306423ccd2bca4
7578b9eba092e0ae59ad72dd81d7093689766a9a
042f90ced45cd9610c7008def095a5994a30947e71f0743713234a6c1d284302
GET /wp-content/uploads/2023/12/105555p.jpg HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: image/jpeg
content-length: 32715
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: origSize=35529
etag: "8ac9-6571a63a-18a096d;;;"
expires: Thu, 14 Dec 2023 11:41:31 GMT
last-modified: Thu, 07 Dec 2023 11:02:18 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 45595
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9nZGS6q9QTVh4LgLEs8ux7nDOsF%2ByB3Xj82MnJc4l2YNWtV3IUxbZifcCKPke9vA1HI9fA2ZjNGZjszoolGk4U0ULpGzo9ROHEXPIjzQ8Y747Enz3EESWo3rK9EmLHjfIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d9292837712a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
justthegays.com/wp-content/themes/videotube/assets/js/jquery.appear.js?ver=1685188737
200 OK 14 kB URL GET HTTP/2 justthegays.com/wp-content/themes/videotube/assets/js/jquery.appear.js?ver=1685188737
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
Hash 888ee5ddeb5969844a90544ce335e0a8
de812d30d13b4162ceecf3eef5cb93b9f4835d11
b18496f4752ceddb3d8ac45c722ce1ea84dbf6e544abc5f5fd1e7679d7a663b3
GET /wp-content/themes/videotube/assets/js/jquery.appear.js?ver=1685188737 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:10:16 GMT
etag: W/"aca-6471f081-65e040a;gz"
last-modified: Sat, 27 May 2023 11:58:57 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47470
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JbCQVpo5FNSuNXxMEbPMthnCRRgXzfpoTkcoJ3Nmx5zcoxq6w%2BfOgIyHAMQOMOiuH3On9ANNsUADckgG9%2Ba%2B069929CYnSitHZuTv%2BuryQPhfcVD8fMSsVmedet3wimAxw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d926bf04712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
justthegays.com/wp-content/themes/videotube/assets/webfonts/fa-solid-900.woff2
200 OK 79 kB URL GET HTTP/2 justthegays.com/wp-content/themes/videotube/assets/webfonts/fa-solid-900.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type Web Open Font Format (Version 2), TrueType, length 79444, version 331.524\012- data
Hash b15db15f746f29ffa02638cb455b8ec0
75a88815c47a249eadb5f0edc1675957f860cca7
7f4d3fd0a705dbf8403298aad91d5de6972e6b5d536068eba8b24954a5a0a8c7
GET /wp-content/themes/videotube/assets/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/wp-content/litespeed/css/859f2d20cb22489f202ae874c03abf2e.css?ver=42880
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: font/woff2
content-length: 79444
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:41:55 GMT
etag: "13654-6471f081-65e0422;;;"
last-modified: Sat, 27 May 2023 11:58:57 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 45571
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EMTcUa4GDtXSPyxmxzJ%2BYOnOWQNhL3jO64WUS1%2B5Ou4oc9upJbxzJ90gnIWdV%2BFYFCFV5XyEEl8B5RUaQqHO257GpSsKuA3Kiq9%2BHmLlsDNmHYQYlouotSx0%2BxUvVfe5Sg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d929e8b1712a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:40:33 GMT
expires: Fri, 06 Dec 2024 15:40:33 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:17:22 GMT
content-type: font/woff2
age: 31253
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
200 OK 23 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:49:49 GMT
expires: Fri, 06 Dec 2024 15:49:49 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:07:25 GMT
content-type: font/woff2
age: 30697
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.tapioni.com/adgpt.js
200 OK 818 B IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint67:5F:F1:E0:0C:5E:00:4E:6A:BF:B1:5F:40:29:66:0E:3F:9C:24:5F
ValidityWed, 30 Aug 2023 00:00:00 GMT - Thu, 29 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (2028), with no line terminators
Hash b93fe1dfb3b9596da09b9eee17a9006f
89aeae49cadfb3ba7cc66702b3a18403e1ae5b2e
fdf9db0f687a66cd7c0d22c8589cca33edacca3079971d3d1a21675ca5c917bc
GET /adgpt.js HTTP/1.1
Host: cdn.tapioni.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: application/javascript
content-length: 818
last-modified: Thu, 30 Nov 2023 11:46:10 GMT
vary: Accept-Encoding
etag: "65687602-332"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 649966
accept-ranges: bytes
server: cloudflare
cf-ray: 8320d92b6ed19912-ARN
X-Firefox-Spdy: h2
justthegays.com/wp-content/plugins/mystickymenu/js/morphext/morphext.min.js?ver=2.6.5
200 OK 16 kB URL GET HTTP/2 justthegays.com/wp-content/plugins/mystickymenu/js/morphext/morphext.min.js?ver=2.6.5
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type ASCII text, with very long lines (1248), with no line terminators
Hash 6c9239b1028e8d0640f2952cef801242
57d7049d9da23b01e7a74738ddc8a28d3c84449f
6753b4b0cbc3c99e713bdc896de395bf1eb5246e2ff96555151fa515bda7cd78
GET /wp-content/plugins/mystickymenu/js/morphext/morphext.min.js?ver=2.6.5 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:10:16 GMT
etag: W/"4e0-653651b8-61e1e0c;gz"
last-modified: Mon, 23 Oct 2023 10:58:00 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47470
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J8ZwAa7%2BDMeX9LkzwsHhKmGXbV4sn2mhRdHFcv7%2FUJLF25qX5Grm81%2F86BBtVPwKkohWE6Ll5c2lwiKY6MQzQ%2BrF0LiVNFUm%2FS4DdbMuDSwzYigTQkjf%2FhLdmEj4oxXe4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d926aef7712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
justthegays.com/wp-content/uploads/2023/12/105550p.jpg
200 OK 9.7 kB URL GET HTTP/2 justthegays.com/wp-content/uploads/2023/12/105550p.jpg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, progressive, precision 8, 400x225, components 3\012- data
Hash 0b7743469443c33149343fd21bdfd3c2
8b082b37c2471c3dfbd038aa2266b9bbed202ecd
8cc5204620e70528ee2629257ec4f93538ef618d4064bac4e3159fe026c9b31a
GET /wp-content/uploads/2023/12/105550p.jpg HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.1.1701994893.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: image/jpeg
content-length: 9733
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: origSize=10175
etag: "27bf-65710f5d-18a0837;;;"
expires: Thu, 14 Dec 2023 11:41:31 GMT
last-modified: Thu, 07 Dec 2023 00:18:37 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 45595
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NqxrYss9kT39XncgvRCMYCkUS16Bnxd77xeMyOifR9%2FAVPVK6d%2FucPLwwuIDpRULkS2YGxDkhPHLUgJTq6wqjTXiSP9m1JwBU52CH%2BAN%2BB6SYMTnv3tq89kvduHL6tqD%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d92ba993712a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
justthegays.com/wp-content/uploads/2023/12/105551p.jpg
200 OK 11 kB URL GET HTTP/2 justthegays.com/wp-content/uploads/2023/12/105551p.jpg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 400x225, components 3\012- data
Hash 23936a2f228df85caa9b05e9c0f04770
e57ceb5e09718c43a5b7ffcc6fe1a3a8d66c0e55
f0b5bb6f0e0d249d52bd7933ab6fa382ee5d1203be8a52a8faf7c75aa3f1ae09
GET /wp-content/uploads/2023/12/105551p.jpg HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.1.1701994893.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: image/jpeg
content-length: 10570
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: origSize=11015
etag: "2b07-65710f63-18a083b;;;"
expires: Thu, 14 Dec 2023 11:41:31 GMT
last-modified: Thu, 07 Dec 2023 00:18:43 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 45595
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lTxkjxybyQHedogOYMO%2FxhkiTEPZi8top%2BSg7xRmD1%2Fpr4wiTZ%2FsuIzkU%2FTHtmOEvJUKIetVzS7NjSQWvs0%2Fd4vpD1lgsF7nzPbrmpV7JfOtnU%2FfcO%2F6e2psJBF6n0G2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d92bb995712a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/agent.php?spot=407030
200 OK 10 kB URL GET HTTP/2 6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/agent.php?spot=407030
IP
Certificate IssuerGoogle Trust Services LLC
Subject6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
Fingerprint5E:05:47:10:6A:E9:55:A1:23:BC:44:80:A8:7E:BF:53:71:77:6B:31
ValidityFri, 03 Nov 2023 17:07:36 GMT - Thu, 01 Feb 2024 17:07:35 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 3d693da83ddc70c3db98ff09763718b3
948cec16f164e125a21ff30c2a0715257b6fba1b
d87dcb20a51a64c9a0f07f4361824ffc85ae40098251f72da9264bc2a4fae068
GET /agent.php?spot=407030 HTTP/1.1
Host: 6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.1.24
vary: Accept-Encoding
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UhBJzYqDo3ka5Ttq3exIyitz4hua%2B0FK7JzFydsr3Gfc%2FwCJILmh7XLb%2FLC0P8OmsTcn0amH8MJytMm97UrbS2g0n3AGZ7mo3VKYIuqlXOQ6ZtFnFBPj4ENFsnj2PvpghOfXkkUmUqKQN9rFycJHwRm7qu3IjHRd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d9290a0c568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
justthegays.com/wp-content/plugins/mystickymenu/js/welcomebar-front.js?ver=2.6.5
200 OK 4.3 kB URL GET HTTP/2 justthegays.com/wp-content/plugins/mystickymenu/js/welcomebar-front.js?ver=2.6.5
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type HTML document, ASCII text, with very long lines (304)
Hash 55f7f55a003de23e03be85427d07cfc1
62fedc27798921ea75dc00a57394cd0d3395484a
2cf994dfab72a8b37a8673e42eefa94500511d72115ba6be1318bdc76d3f8696
GET /wp-content/plugins/mystickymenu/js/welcomebar-front.js?ver=2.6.5 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:10:16 GMT
etag: W/"5f79-653651b8-61e1e12;gz"
last-modified: Mon, 23 Oct 2023 10:58:00 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47470
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vnH6NXkE%2FsGQspuiuf0s6OPeAx4rEVSWYVNeAXhLZwMzOjXHWJ6XAGZ7fL76l9Jl8aHaUjBVM%2BDym3AXxw2Lv0KL8UqHZEPSX%2F5popTyjYVQ3DXbj14K%2B81iZ6vxrz6UGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d926aef9712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.tsyndicate.com/sdk/v1/bi.js
200 OK 3.1 kB URL GET HTTP/2 cdn.tsyndicate.com/sdk/v1/bi.js
IP
Requested by https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/agent.php?spot=407029
Certificate IssuerSectigo Limited
Subjectcdn.tsyndicate.com
FingerprintB6:87:8F:D6:E3:48:CF:61:4E:55:B9:6B:66:FC:B2:13:7F:A0:0D:BA
ValidityWed, 14 Jun 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type C source, ASCII text, with very long lines (7708)
Hash 132db549c9f97232cccb62af9f2156b9
27a33f324e81bb08d48875a20ef18d1f22d90af9
566f0492535dba4934209ea2b08a9ee357f4c7febf4defc717e0cb1d789bb0e5
GET /sdk/v1/bi.js HTTP/1.1
Host: cdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: application/javascript
content-length: 3084
server: nginx
last-modified: Mon, 02 Oct 2023 10:01:05 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"651a94e1-1e65"
content-encoding: gzip
age: 5485250
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2
200 OK 23 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 23236, version 1.0\012- data
Hash 716309aab2bca045f9627f63ad79d0bf
38804233a29aaf975d557fe14e762c627bef76e0
115f6a626ca115d4ad5581b59275327e0e860b30330a52b0f785561332dd2429
GET /s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:42:53 GMT
expires: Fri, 06 Dec 2024 15:42:53 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:08:26 GMT
content-type: font/woff2
age: 31114
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
na.nawpush.com/tags/63949?version_name=d
200 OK 1.2 kB URL GET HTTP/2 na.nawpush.com/tags/63949?version_name=d
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/agent.php?spot=407030
Certificate IssuerLet's Encrypt
Subjectna.nawpush.com
Fingerprint73:8E:D9:E1:D0:7F:5B:63:BD:6A:8D:47:8E:04:38:3F:5F:49:91:2B
ValidityWed, 29 Nov 2023 03:00:42 GMT - Tue, 27 Feb 2024 03:00:41 GMT
File type JSON data\012- , ASCII text, with very long lines (1165), with no line terminators
Hash 5070be09abcb142a27290714a5e763d2
8c68999be7440493327f690647894b9ba797be1e
27f724bd1565e22e7bf9fcbcdb17dc20f8303213273f1a2fbe2335363a177d74
GET /tags/63949?version_name=d HTTP/1.1
Host: na.nawpush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: application/json
content-length: 1165
server: nginx/1.18.0
cache-control: max-age=300, public
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
justthegays.com/wp-content/plugins/wp-video-encoder/public/js/public.js?ver=1699715989
200 OK 7.7 kB URL GET HTTP/2 justthegays.com/wp-content/plugins/wp-video-encoder/public/js/public.js?ver=1699715989
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
Hash 5fd30c2dad7c603fa68b3b586a7a7733
9a13fa36cda14041b67f552331a50c6e2fbffd73
d97ab8c70402afde3a854657df2a371e6c092c8974239a33fb9f66f542070424
GET /wp-content/plugins/wp-video-encoder/public/js/public.js?ver=1699715989 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:23 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:10:16 GMT
etag: W/"12d3-654f9b95-66d0468;gz"
last-modified: Sat, 11 Nov 2023 15:19:49 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47467
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b23HjcyZRW5Z9ezb9%2BCURfuruSZsUYbmA0SKolZIpK2248sjkskCitW0%2BT3RO9SjkOaHa82v2dXwLVms1EDDqgqdqEFhFRPYTmzbAVuv4I%2FQwB9%2FgMSrbdcI1G60PbZQtA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d9157de47131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
justthegays.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
200 OK 34 kB URL GET HTTP/2 justthegays.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type ASCII text, with very long lines (65447)
Hash 826eb77e86b02ab7724fe3d0141ff87c
79cd3587d565afe290076a8d36c31c305a573d18
cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:23 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:10:16 GMT
etag: W/"15601-654c295a-7361205;gz"
last-modified: Thu, 09 Nov 2023 00:35:38 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47467
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=phODmeuMfST2poNIn1OtxgTCt%2F7RQ%2B6n4W3hrBfWJX99j3c%2BVudMENdnkFcuqbghq7tk%2FNqqXjpEyRwb%2BoCaQZrOOOpiqqbyAwy1gbCcVa5s9Txc%2B3GNJ3vdi4CgRFuLOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d9157de27131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
s.uuidksinc.net/match/1411/?remote_uid=17319115915207358958
200 OK 74 B URL GET HTTP/2 s.uuidksinc.net/match/1411/?remote_uid=17319115915207358958
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/agent.php?spot=407030
Certificate IssuerLet's Encrypt
Subjectuuidksinc.net
Fingerprint24:9D:6D:A2:89:55:7D:CD:A6:BD:59:A3:21:F2:65:41:A8:9D:38:99
ValidityThu, 09 Nov 2023 23:20:21 GMT - Wed, 07 Feb 2024 23:20:20 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET /match/1411/?remote_uid=17319115915207358958 HTTP/1.1
Host: s.uuidksinc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.2
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: image/png
content-length: 74
set-cookie: jcsuuid=aXOFmDpfxptCrQJaBdKF; expires=Sat, 07 Dec 2024 00:21:27 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
s.uuidksinc.net/match/1410/?remote_uid=17319115915207358958
200 OK 74 B URL GET HTTP/2 s.uuidksinc.net/match/1410/?remote_uid=17319115915207358958
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/agent.php?spot=407030
Certificate IssuerLet's Encrypt
Subjectuuidksinc.net
Fingerprint24:9D:6D:A2:89:55:7D:CD:A6:BD:59:A3:21:F2:65:41:A8:9D:38:99
ValidityThu, 09 Nov 2023 23:20:21 GMT - Wed, 07 Feb 2024 23:20:20 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET /match/1410/?remote_uid=17319115915207358958 HTTP/1.1
Host: s.uuidksinc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.2
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: image/png
content-length: 74
set-cookie: jcsuuid=RJdJUXoK45GrXLMuoVFA; expires=Sat, 07 Dec 2024 00:21:27 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
justthegays.com/wp-content/litespeed/css/859f2d20cb22489f202ae874c03abf2e.css?ver=42880
200 OK 153 kB URL GET HTTP/2 justthegays.com/wp-content/litespeed/css/859f2d20cb22489f202ae874c03abf2e.css?ver=42880
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 153 kB (152929 bytes)
Hash b987b25256f6466f76442e59b38c73a8
13c40be56224b6d8cbd9f262703f3b957709b332
c3866ba70f887433a1feb8b86b8f90e870931b891ff9591bafcab1e09e3840ae
GET /wp-content/litespeed/css/859f2d20cb22489f202ae874c03abf2e.css?ver=42880 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:23 GMT
content-type: text/css
cache-control: public, max-age=604800
cf-bgj: minify
etag: W/"ef0a4-6571a6a5-6220004;gz"
expires: Thu, 14 Dec 2023 11:41:31 GMT
last-modified: Thu, 07 Dec 2023 11:04:05 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 45592
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JiAuOa0%2BFxUw94FjUHnc1%2FM%2B56ApvxQKE6lH4SZRMZJ9xV%2Be6DhfBWG2tF%2FuIv0gRziTFGXvAXadJ6tQ67ja1GFBehdBTkP%2F0%2BlOtjZB4QzshNN0hugw2%2FPgzMMAMiefxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d9157de17131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pxl.tsyndicate.com/api/v1/elapsedtime?f=banner%20300x100&sc=645ad092a0974b48afa7ebf013ea199d&hn=6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz&et=272
200 OK 0 B URL GET HTTP/2 pxl.tsyndicate.com/api/v1/elapsedtime?f=banner%20300x100&sc=645ad092a0974b48afa7ebf013ea199d&hn=6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz&et=272
IP
ASN #24940 Hetzner Online GmbH
Requested by https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/agent.php?spot=407029
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/elapsedtime?f=banner%20300x100&sc=645ad092a0974b48afa7ebf013ea199d&hn=6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz&et=272 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:27 GMT
content-length: 0
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0CFjBgsRYcbQWRjjIZ0zC0XUMDMmjJkaNcS0CGPjRpgWNGyQydEiB5kwNFqMmTHDhpgcBs3kGENDxMMwdcZkJCNjTI0cN8aIjBHyJA0ZBVvgKJOjTAszZWLMjBEDh4wbZHr-JGNnYY0YMLo-hFNHzMIbOGLIqAgRDpyFNGbUuJHj4Rw4E3U8zYHjqY2HY9rc1VEDx14bfSGSMbPw60Mxbtws1EtDLgwaD9u4wagjRo4YNmCsFU36BtcaDkXUkcNm8w24e2U8rCMjIxo6dODM0fHihZk0bsh0bDPHBZs0dsq8GPPGzXE5bYKckf6jI50yZ97IydPjTJ08c7jUgQFDho0xz8es-ZKGTI84NqDIIPJETJIxc8SAxRUwLHHHFU2gMUQdLegxhQ0RaXVFEnSIEcQRTOTxhhQ06DGDFUQcccMcWdzhhBJpaNGEDWjUkIQNV5hRBR1ZQDEEFQS5IYceaaDRRAswSFHDHXUcgQVybGAxxhBpSNECEm8UUQMTX1xhhBpKRLFEGDBYUUYWVYQhYBRfnFFFEkRIUUUa6rHnnkF_vUEHffYNVph7bbb3XhiKhZHGGW7Q2UNjj-XgkwhkvNFGRmrUMQdwBJ0RBnouULcoYmEEtoUMMnRxGWU6wOBCWg_JYcdiM6gmWx1pZKRTGA3VAMMYLYgRV0yDzSDVDDiQ0UINYyj31EdlmAHDDIemsZgIp7mQg6hPucCUWCLIQd-yzT7rQrTTHlpHGBk18QaPbLARxgs1jAoCClcgl-gdc4DgBBUgoDXqDiC064YNNOCLB7_4mloaDOnCkAIIR5Qh3xsvyJAWe2jFAIIRachR7Bt4vIBWwYeOIZQOIjjxxKHifeFxRiIfysbHIhThxKEH2fGFxbWVthdcNeHAXqmAVtbYDQ_F_IUYciyEAw5BlyFzG2-QURkONtBFhhxvbPbQGwoJthbVeORh1kN3ZCSXzoeiIXZ71M5hakZU05GpeC3U4UYadPxKgwtEkax2WTqk6vAMTMVwQ2zKDVXGF3lbtGhpN6SVQw40HA20CHS00RvjjkMueWeTGzRzGX99kSlFjZumOQ6TKy06GwjRkfUWM9DgKURiBIZosUCxMdFaKy-k6hikwdCHAgEB&s=97e0fd23a6ec015f63083c915be18d3f430f8f6eb6dfb3f7fc4ed976725c6b8e1701994887&w=t&r=1&d=5&priv=true
200 OK 24 B URL GET HTTP/2 pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0CFjBgsRYcbQWRjjIZ0zC0XUMDMmjJkaNcS0CGPjRpgWNGyQydEiB5kwNFqMmTHDhpgcBs3kGENDxMMwdcZkJCNjTI0cN8aIjBHyJA0ZBVvgKJOjTAszZWLMjBEDh4wbZHr-JGNnYY0YMLo-hFNHzMIbOGLIqAgRDpyFNGbUuJHj4Rw4E3U8zYHjqY2HY9rc1VEDx14bfSGSMbPw60Mxbtws1EtDLgwaD9u4wagjRo4YNmCsFU36BtcaDkXUkcNm8w24e2U8rCMjIxo6dODM0fHihZk0bsh0bDPHBZs0dsq8GPPGzXE5bYKckf6jI50yZ97IydPjTJ08c7jUgQFDho0xz8es-ZKGTI84NqDIIPJETJIxc8SAxRUwLHHHFU2gMUQdLegxhQ0RaXVFEnSIEcQRTOTxhhQ06DGDFUQcccMcWdzhhBJpaNGEDWjUkIQNV5hRBR1ZQDEEFQS5IYceaaDRRAswSFHDHXUcgQVybGAxxhBpSNECEm8UUQMTX1xhhBpKRLFEGDBYUUYWVYQhYBRfnFFFEkRIUUUa6rHnnkF_vUEHffYNVph7bbb3XhiKhZHGGW7Q2UNjj-XgkwhkvNFGRmrUMQdwBJ0RBnouULcoYmEEtoUMMnRxGWU6wOBCWg_JYcdiM6gmWx1pZKRTGA3VAMMYLYgRV0yDzSDVDDiQ0UINYyj31EdlmAHDDIemsZgIp7mQg6hPucCUWCLIQd-yzT7rQrTTHlpHGBk18QaPbLARxgs1jAoCClcgl-gdc4DgBBUgoDXqDiC064YNNOCLB7_4mloaDOnCkAIIR5Qh3xsvyJAWe2jFAIIRachR7Bt4vIBWwYeOIZQOIjjxxKHifeFxRiIfysbHIhThxKEH2fGFxbWVthdcNeHAXqmAVtbYDQ_F_IUYciyEAw5BlyFzG2-QURkONtBFhhxvbPbQGwoJthbVeORh1kN3ZCSXzoeiIXZ71M5hakZU05GpeC3U4UYadPxKgwtEkax2WTqk6vAMTMVwQ2zKDVXGF3lbtGhpN6SVQw40HA20CHS00RvjjkMueWeTGzRzGX99kSlFjZumOQ6TKy06GwjRkfUWM9DgKURiBIZosUCxMdFaKy-k6hikwdCHAgEB&s=97e0fd23a6ec015f63083c915be18d3f430f8f6eb6dfb3f7fc4ed976725c6b8e1701994887&w=t&r=1&d=5&priv=true
IP
ASN #24940 Hetzner Online GmbH
Requested by https://tsyndicate.com/iframes2/645ad092a0974b48afa7ebf013ea199d.html?keywords=agent%2Cphp&adb=0&clientjs=1&w=1280&h=1024&tz=0
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type ASCII text, with no line terminators
Hash 0959ba36d476b6dc1994ba3c678b07c4
d30b94da72daa02766965206a85b7e0356375f5e
897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0CFjBgsRYcbQWRjjIZ0zC0XUMDMmjJkaNcS0CGPjRpgWNGyQydEiB5kwNFqMmTHDhpgcBs3kGENDxMMwdcZkJCNjTI0cN8aIjBHyJA0ZBVvgKJOjTAszZWLMjBEDh4wbZHr-JGNnYY0YMLo-hFNHzMIbOGLIqAgRDpyFNGbUuJHj4Rw4E3U8zYHjqY2HY9rc1VEDx14bfSGSMbPw60Mxbtws1EtDLgwaD9u4wagjRo4YNmCsFU36BtcaDkXUkcNm8w24e2U8rCMjIxo6dODM0fHihZk0bsh0bDPHBZs0dsq8GPPGzXE5bYKckf6jI50yZ97IydPjTJ08c7jUgQFDho0xz8es-ZKGTI84NqDIIPJETJIxc8SAxRUwLHHHFU2gMUQdLegxhQ0RaXVFEnSIEcQRTOTxhhQ06DGDFUQcccMcWdzhhBJpaNGEDWjUkIQNV5hRBR1ZQDEEFQS5IYceaaDRRAswSFHDHXUcgQVybGAxxhBpSNECEm8UUQMTX1xhhBpKRLFEGDBYUUYWVYQhYBRfnFFFEkRIUUUa6rHnnkF_vUEHffYNVph7bbb3XhiKhZHGGW7Q2UNjj-XgkwhkvNFGRmrUMQdwBJ0RBnouULcoYmEEtoUMMnRxGWU6wOBCWg_JYcdiM6gmWx1pZKRTGA3VAMMYLYgRV0yDzSDVDDiQ0UINYyj31EdlmAHDDIemsZgIp7mQg6hPucCUWCLIQd-yzT7rQrTTHlpHGBk18QaPbLARxgs1jAoCClcgl-gdc4DgBBUgoDXqDiC064YNNOCLB7_4mloaDOnCkAIIR5Qh3xsvyJAWe2jFAIIRachR7Bt4vIBWwYeOIZQOIjjxxKHifeFxRiIfysbHIhThxKEH2fGFxbWVthdcNeHAXqmAVtbYDQ_F_IUYciyEAw5BlyFzG2-QURkONtBFhhxvbPbQGwoJthbVeORh1kN3ZCSXzoeiIXZ71M5hakZU05GpeC3U4UYadPxKgwtEkax2WTqk6vAMTMVwQ2zKDVXGF3lbtGhpN6SVQw40HA20CHS00RvjjkMueWeTGzRzGX99kSlFjZumOQ6TKy06GwjRkfUWM9DgKURiBIZosUCxMdFaKy-k6hikwdCHAgEB&s=97e0fd23a6ec015f63083c915be18d3f430f8f6eb6dfb3f7fc4ed976725c6b8e1701994887&w=t&r=1&d=5&priv=true HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
justthegays.com/cdn-cgi/rum?
204 No Content 0 B URL POST HTTP/2 justthegays.com/cdn-cgi/rum?
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 16038
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.1.1701994893.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Fri, 08 Dec 2023 00:21:27 GMT
access-control-allow-origin: https://justthegays.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 8320d9307c15712a-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
rtbrenab.com/get/?go=1&data=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
200 OK 1.1 kB URL GET HTTP/2 rtbrenab.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
Requested by https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/agent.php?spot=407030
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint95:34:E5:C6:3C:8C:8F:5D:19:0D:6B:41:72:00:76:73:85:86:B3:E5
ValidityFri, 17 Nov 2023 12:45:58 GMT - Thu, 15 Feb 2024 12:45:57 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1245)
Hash a86005cace9e37cfadf2638b5791b248
7c2b4b728da875059c3ebb13db24846188209b5a
bec14c687d66bcb248567514710cd981d7769575ee71b71438631ac72e33d7e7
GET /get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImQiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MTQ5NiwidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6IiwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIxMzI1MTQ1Mjk1IiwicmVmcmVzaCI6MSwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6Mjg3MzE0LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6dHJ1ZSwicmVmZG9tYWluIjoianVzdHRoZWdheXMuY29tIiwicGwiOjI2OSwic3RyYXRhZ2VtIjoiIiwiZ3lyIjowLCJhY2NlbCI6MCwic3NwIjozNzU4LCJidHlwZSI6MCwidjIiOjAsInJjaGFuZ2UiOnRydWV9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9LCJtZXRyaWNzIjp7InRvcGljcyI6W119fV0sInNpdGUiOnsiaWQiOiIyODczMTQiLCJjYXQiOlsiSUFCMjUiXSwicGFnZSI6Imh0dHBzOi8vanVzdHRoZWdheXMuY29tLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiJhNzczOWRjYmZlZWNlZTg0NjFjOGY0MGM0ZDRmNzAzZiIsImZwIjoxNzMxOTExNTkxNTIwNzM1ODAwMCwiZnBfc3RyIjoiMTczMTkxMTU5MTUyMDczNTg5NTgiLCJ1YV9kYXRhIjpudWxsfSwiZXh0Ijp7ImR0IjoxNzAxOTk0ODk0MjQxfX0= HTTP/1.1
Host: rtbrenab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.0
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: text/html
content-length: 1143
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: br
X-Firefox-Spdy: h2
go.sexfortokens.com/easy?campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&memberId=u4yiP60pGuaymOw-h4_SLy2xXcFzwS65y39qzuv17QjTUVvBHzmuj3o98fbWKoT3KubtEUEPUXkHx66D4xeTfOPSXt7pXI_jVKgPK4cvQllc0jZ9_gUIDRUi&sourceId=tstars-Slider-43579-4298529&tag=-men%2Fmobile
302 Found 0 B URL GET HTTP/2 go.sexfortokens.com/easy?campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&memberId=u4yiP60pGuaymOw-h4_SLy2xXcFzwS65y39qzuv17QjTUVvBHzmuj3o98fbWKoT3KubtEUEPUXkHx66D4xeTfOPSXt7pXI_jVKgPK4cvQllc0jZ9_gUIDRUi&sourceId=tstars-Slider-43579-4298529&tag=-men%2Fmobile
IP
Certificate IssuerCloudflare, Inc.
Subjectsexfortokens.com
Fingerprint14:74:83:B8:1B:D5:4F:1D:A3:FD:1B:C0:F1:C8:9F:C4:71:56:16:CA
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /easy?campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&memberId=u4yiP60pGuaymOw-h4_SLy2xXcFzwS65y39qzuv17QjTUVvBHzmuj3o98fbWKoT3KubtEUEPUXkHx66D4xeTfOPSXt7pXI_jVKgPK4cvQllc0jZ9_gUIDRUi&sourceId=tstars-Slider-43579-4298529&tag=-men%2Fmobile HTTP/1.1
Host: go.sexfortokens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 08 Dec 2023 00:21:28 GMT
content-length: 0
location: https://go.sexfortokens.com/api/models/vast?action=sbSignupWithModel&campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&campaignType=smartpop&creativeId=b8f820c89e49c30a413b7360dc36f8c9cc13dd1f3d59a594d0b2c0f903b3991f&domain=stripchat&duration=00%3A00%3A30&iterationId=752079&masterSmartpopId=2683&memberId=u4yiP60pGuaymOw-h4_SLy2xXcFzwS65y39qzuv17QjTUVvBHzmuj3o98fbWKoT3KubtEUEPUXkHx66D4xeTfOPSXt7pXI_jVKgPK4cvQllc0jZ9_gUIDRUi&ruleId=149&skipOffset=00%3A00%3A05&smartpopId=10518&sourceId=tstars-Slider-43579-4298529&tag=-men%2Fmobile&usePreroll=true&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&variationId=31922
strict-transport-security: max-age=15768000
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
access-control-allow-origin: https://justthegays.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
set-cookie: _var=68146551.31922_YzA4ZDhmOTg=; Path=/; Expires=Sun, 07 Jan 2024 00:21:28 GMT; HttpOnly; SameSite=Strict
__cflb=02DiuGyDLPvii6XBe57uvfNJUFkxLJd5CWXyTtVddsRoi; SameSite=None; Secure; path=/; expires=Sat, 09-Dec-23 00:21:28 GMT; HttpOnly
server: cloudflare
cf-ray: 8320d932dfc2b523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
go.sexfortokens.com/easy?campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&memberId=dYJcEXXiPvslXzkDdE57OdZog6BNLqLyVwlknKjEMXyAe_v8mfCCNZk92Z3eCaatIQyLP67d3YXZ6E1pC7nTR3681TrnbO_naBncV0mRTG3nRo4l_gUIDRUi&sourceId=tstars-preroll-43579-4298530
302 Found 0 B URL GET HTTP/2 go.sexfortokens.com/easy?campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&memberId=dYJcEXXiPvslXzkDdE57OdZog6BNLqLyVwlknKjEMXyAe_v8mfCCNZk92Z3eCaatIQyLP67d3YXZ6E1pC7nTR3681TrnbO_naBncV0mRTG3nRo4l_gUIDRUi&sourceId=tstars-preroll-43579-4298530
IP
Certificate IssuerCloudflare, Inc.
Subjectsexfortokens.com
Fingerprint14:74:83:B8:1B:D5:4F:1D:A3:FD:1B:C0:F1:C8:9F:C4:71:56:16:CA
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /easy?campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&memberId=dYJcEXXiPvslXzkDdE57OdZog6BNLqLyVwlknKjEMXyAe_v8mfCCNZk92Z3eCaatIQyLP67d3YXZ6E1pC7nTR3681TrnbO_naBncV0mRTG3nRo4l_gUIDRUi&sourceId=tstars-preroll-43579-4298530 HTTP/1.1
Host: go.sexfortokens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 08 Dec 2023 00:21:28 GMT
content-length: 0
location: https://go.sexfortokens.com/api/models/vast?action=sbSignupWithModel&campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&campaignType=smartpop&creativeId=b8f820c89e49c30a413b7360dc36f8c9cc13dd1f3d59a594d0b2c0f903b3991f&domain=stripchat&duration=00%3A00%3A30&iterationId=752079&masterSmartpopId=2683&memberId=dYJcEXXiPvslXzkDdE57OdZog6BNLqLyVwlknKjEMXyAe_v8mfCCNZk92Z3eCaatIQyLP67d3YXZ6E1pC7nTR3681TrnbO_naBncV0mRTG3nRo4l_gUIDRUi&ruleId=149&skipOffset=00%3A00%3A05&smartpopId=10518&sourceId=tstars-preroll-43579-4298530&tag=men&usePreroll=true&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&variationId=31922
strict-transport-security: max-age=15768000
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
access-control-allow-origin: https://justthegays.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
set-cookie: _var=68146551.31922_YzA4ZDhmOTg=; Path=/; Expires=Sun, 07 Jan 2024 00:21:28 GMT; HttpOnly; SameSite=Strict
__cflb=02DiuGyDLPvii6XBe55VL5B61r9ECsTTVdYmabd7jvA5r; SameSite=None; Secure; path=/; expires=Sat, 09-Dec-23 00:21:28 GMT; HttpOnly
server: cloudflare
cf-ray: 8320d932dfccb523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
go.sexfortokens.com/easy?campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&memberId=U4fmllXqX8AJC0fvTxrzgz_Z59OZrKCX1Ve8JtSvIm_XjojHubMwKaBMaLr75drk3xInVQ-ox8RzRJA0rpJBNrNCwxbhMiXLLbI4zwBXy5IQR9KJ_gUIDRUi&sourceId=tstars-preroll-43579-4298531
302 Found 0 B URL GET HTTP/2 go.sexfortokens.com/easy?campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&memberId=U4fmllXqX8AJC0fvTxrzgz_Z59OZrKCX1Ve8JtSvIm_XjojHubMwKaBMaLr75drk3xInVQ-ox8RzRJA0rpJBNrNCwxbhMiXLLbI4zwBXy5IQR9KJ_gUIDRUi&sourceId=tstars-preroll-43579-4298531
IP
Certificate IssuerCloudflare, Inc.
Subjectsexfortokens.com
Fingerprint14:74:83:B8:1B:D5:4F:1D:A3:FD:1B:C0:F1:C8:9F:C4:71:56:16:CA
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /easy?campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&memberId=U4fmllXqX8AJC0fvTxrzgz_Z59OZrKCX1Ve8JtSvIm_XjojHubMwKaBMaLr75drk3xInVQ-ox8RzRJA0rpJBNrNCwxbhMiXLLbI4zwBXy5IQR9KJ_gUIDRUi&sourceId=tstars-preroll-43579-4298531 HTTP/1.1
Host: go.sexfortokens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 08 Dec 2023 00:21:28 GMT
content-length: 0
location: https://go.sexfortokens.com/api/models/vast?action=sbSignupWithModel&campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&campaignType=smartpop&creativeId=b8f820c89e49c30a413b7360dc36f8c9cc13dd1f3d59a594d0b2c0f903b3991f&domain=stripchat&duration=00%3A00%3A30&iterationId=752079&masterSmartpopId=2683&memberId=U4fmllXqX8AJC0fvTxrzgz_Z59OZrKCX1Ve8JtSvIm_XjojHubMwKaBMaLr75drk3xInVQ-ox8RzRJA0rpJBNrNCwxbhMiXLLbI4zwBXy5IQR9KJ_gUIDRUi&ruleId=149&skipOffset=00%3A00%3A05&smartpopId=10518&sourceId=tstars-preroll-43579-4298531&tag=men&usePreroll=true&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&variationId=31922
strict-transport-security: max-age=15768000
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
access-control-allow-origin: https://justthegays.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
set-cookie: _var=68146551.31922_YzA4ZDhmOTg=; Path=/; Expires=Sun, 07 Jan 2024 00:21:28 GMT; HttpOnly; SameSite=Strict
__cflb=02DiuGyDLPvii6XBe57uvfNJUFkxLJd5CWXyTtVddsRoi; SameSite=None; Secure; path=/; expires=Sat, 09-Dec-23 00:21:28 GMT; HttpOnly
server: cloudflare
cf-ray: 8320d932dfc9b523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
go.bbrdbr.com/easy?campaignId=56887531e20ffc8ec4b32f114752cd5e087f0e1a66a28e88fe82ad1f38a4c7c1&userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d&xhVersion=1&skipOffset=00:00:05&memberId=b78f6ce8-4e50-4bda-a78a-623901aab227&sourceId=14488&p1=50168&p2=79550&contentType=video/mp4&no_bb=1
302 Found 0 B URL GET HTTP/2 go.bbrdbr.com/easy?campaignId=56887531e20ffc8ec4b32f114752cd5e087f0e1a66a28e88fe82ad1f38a4c7c1&userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d&xhVersion=1&skipOffset=00:00:05&memberId=b78f6ce8-4e50-4bda-a78a-623901aab227&sourceId=14488&p1=50168&p2=79550&contentType=video/mp4&no_bb=1
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint2A:9F:63:77:CB:A5:1C:FD:6E:10:F5:29:D2:FB:51:F4:7C:EC:36:A2
ValiditySun, 26 Feb 2023 00:00:00 GMT - Sun, 25 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /easy?campaignId=56887531e20ffc8ec4b32f114752cd5e087f0e1a66a28e88fe82ad1f38a4c7c1&userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d&xhVersion=1&skipOffset=00:00:05&memberId=b78f6ce8-4e50-4bda-a78a-623901aab227&sourceId=14488&p1=50168&p2=79550&contentType=video/mp4&no_bb=1 HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 08 Dec 2023 00:21:28 GMT
content-length: 0
location: https://go.bbrdbr.com/api/models/vast?action=sbSignupWithModel&campaignId=56887531e20ffc8ec4b32f114752cd5e087f0e1a66a28e88fe82ad1f38a4c7c1&campaignType=smartpop&contentType=video%2Fmp4&creativeId=0fe634b4ed7128d94852002b593185fc904d0c54974e9bbbec389730ba324b3e&duration=00%3A00%3A30&iterationId=745641&masterSmartpopId=2683&memberId=b78f6ce8-4e50-4bda-a78a-623901aab227&mlView=1&no_bb=1&p1=50168&p2=79550&ruleId=29&skipOffset=00%3A00%3A05&smartpopId=5347&sourceId=14488&usePreroll=true&userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d&variationId=31904&xhVersion=1
access-control-allow-origin: https://justthegays.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: _var=67247758.31904_ZTJjNzVhZDk=; Path=/; Expires=Sun, 07 Jan 2024 00:21:28 GMT; HttpOnly; SameSite=Strict
__cflb=0H28upDCGznfDm9XVDEEFVkNrzLraWwgGKf4f2szcVS; SameSite=None; Secure; path=/; expires=Sat, 09-Dec-23 00:21:28 GMT; HttpOnly
server: cloudflare
cf-ray: 8320d9332a9556c7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
go.xlirdr.com/smartpop/68260928b57f412a654bda3f2409e8c9a61a69f506dc4ba3c073a43c2be31490?userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d&xhVersion=1&memberId=5cf352c6-0703-43d2-ba91-921e0cd097ce&sourceId=14488&p1=45081&p2=68073&contentType=video/mp4&no_bb=1
302 Found 0 B URL GET HTTP/2 go.xlirdr.com/smartpop/68260928b57f412a654bda3f2409e8c9a61a69f506dc4ba3c073a43c2be31490?userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d&xhVersion=1&memberId=5cf352c6-0703-43d2-ba91-921e0cd097ce&sourceId=14488&p1=45081&p2=68073&contentType=video/mp4&no_bb=1
IP
Certificate IssuerCloudflare, Inc.
Subjectxlirdr.com
FingerprintDD:63:14:34:9F:51:18:A3:E8:9B:86:1B:C5:FB:C6:F6:75:C9:F6:F5
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smartpop/68260928b57f412a654bda3f2409e8c9a61a69f506dc4ba3c073a43c2be31490?userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d&xhVersion=1&memberId=5cf352c6-0703-43d2-ba91-921e0cd097ce&sourceId=14488&p1=45081&p2=68073&contentType=video/mp4&no_bb=1 HTTP/1.1
Host: go.xlirdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 08 Dec 2023 00:21:28 GMT
content-length: 0
location: https://go.cambaddies.com/api/models/vast?action=sbSignupWithModel&campaignId=68260928b57f412a654bda3f2409e8c9a61a69f506dc4ba3c073a43c2be31490&campaignType=smartpop&contentType=video%2Fmp4&creativeId=0fe634b4ed7128d94852002b593185fc904d0c54974e9bbbec389730ba324b3e&duration=00%3A00%3A30&iterationId=745527&masterSmartpopId=2683&memberId=5cf352c6-0703-43d2-ba91-921e0cd097ce&mlView=1&no_bb=1&p1=45081&p2=68073&ruleId=29&skipOffset=00%3A00%3A05&smartpopId=3594&sourceId=14488&usePreroll=true&userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d&variationId=31904&xhVersion=1
access-control-allow-origin: https://justthegays.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: _var=8782564.31904_ZTJjNzVhZDk=; Path=/; Expires=Sun, 07 Jan 2024 00:21:28 GMT; HttpOnly; SameSite=Strict
__cflb=02DiuDFRFiBZBvMSLtrsnD7QZBLqqpmg2oQghYPoj85Xr; SameSite=None; Secure; path=/; expires=Sat, 09-Dec-23 00:21:28 GMT; HttpOnly
server: cloudflare
cf-ray: 8320d93358ec1c16-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
vast.yomeno.xyz/vast?spot_id=324256
200 OK 5.4 kB URL GET HTTP/2 vast.yomeno.xyz/vast?spot_id=324256
IP
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint47:BF:55:36:FD:42:8F:D1:07:8C:09:CC:51:6C:15:28:BA:50:45:E3
ValidityFri, 24 Nov 2023 03:03:11 GMT - Thu, 22 Feb 2024 03:03:10 GMT
File type ASCII text, with very long lines (2674)
Hash 4da50db28b80c2cfd5c2858e0abed7e2
0410321992f1d4a24dfda529116c49c30b5d5805
3d05d1eada7ef14e17e7224f730164f6327178100131678290456a497170d0a8
GET /vast?spot_id=324256 HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 08 Dec 2023 00:21:28 GMT
content-type: text/xml;charset=UTF-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: Accept-Encoding, *
access-control-allow-credentials: true
access-control-allow-origin: https://justthegays.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,
access-control-expose-headers: Content-Length,Content-Range
content-encoding: gzip
X-Firefox-Spdy: h2
tsyndicate.com/do2/d3e23d854f774ba182f29e628b907d7d/vast?subid=&categories=gay+porn%2Cgay+porno%2Cgay+teen+porn%2Chot+gay+videos%2Conlyfans%2Cgayforfans%2Cjust+for+fans%2C4myfans%2Ctwink%2Csex%2Cjerk+off%2Ccum%2Cxxx%2Canal%2Cblowjob%2Cgrindr%2Cdildo%2CGay+for+Pay%2CGay%2CAdult+videos%2CJustForfans%2Cxxx+videos
200 OK 3.3 kB URL GET HTTP/2 tsyndicate.com/do2/d3e23d854f774ba182f29e628b907d7d/vast?subid=&categories=gay+porn%2Cgay+porno%2Cgay+teen+porn%2Chot+gay+videos%2Conlyfans%2Cgayforfans%2Cjust+for+fans%2C4myfans%2Ctwink%2Csex%2Cjerk+off%2Ccum%2Cxxx%2Canal%2Cblowjob%2Cgrindr%2Cdildo%2CGay+for+Pay%2CGay%2CAdult+videos%2CJustForfans%2Cxxx+videos
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (5550)
Hash 5fc49e023e4755a60c202cc4b8c93446
201faf3c17fb0c1846e649c7ec68555eb1d2c96b
f9c9d77b11fb9815305b28e1745f834fe8fbd3efb24ee479f6a38b24a62f0fbb
GET /do2/d3e23d854f774ba182f29e628b907d7d/vast?subid=&categories=gay+porn%2Cgay+porno%2Cgay+teen+porn%2Chot+gay+videos%2Conlyfans%2Cgayforfans%2Cjust+for+fans%2C4myfans%2Ctwink%2Csex%2Cjerk+off%2Ccum%2Cxxx%2Canal%2Cblowjob%2Cgrindr%2Cdildo%2CGay+for+Pay%2CGay%2CAdult+videos%2CJustForfans%2Cxxx+videos HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:28 GMT
content-type: application/xml; charset=utf-8
access-control-allow-origin: https://justthegays.com
access-control-allow-methods: POST, GET, HEAD
access-control-allow-headers: Accept, X-Requested-With, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy
access-control-allow-credentials: true
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
x-vast: 3.0
x-request-id: 50f38a275b54c1aa
set-cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03; expires=Sat, 08 Jun 2024 00:21:28 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCx5YZN2TEiJEDRhcWIsYU3BLjoYgyE2PcgCEDBo4YMnDg6NJH; expires=Sat, 09 Dec 2023 00:21:28 GMT; domain=.tsyndicate.com; path=/; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
go.sexfortokens.com/api/models/vast?action=sbSignupWithModel&campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&campaignType=smartpop&creativeId=b8f820c89e49c30a413b7360dc36f8c9cc13dd1f3d59a594d0b2c0f903b3991f&domain=stripchat&duration=00%3A00%3A30&iterationId=752079&masterSmartpopId=2683&memberId=u4yiP60pGuaymOw-h4_SLy2xXcFzwS65y39qzuv17QjTUVvBHzmuj3o98fbWKoT3KubtEUEPUXkHx66D4xeTfOPSXt7pXI_jVKgPK4cvQllc0jZ9_gUIDRUi&ruleId=149&skipOffset=00%3A00%3A05&smartpopId=10518&sourceId=tstars-Slider-43579-4298529&tag=-men%2Fmobile&usePreroll=true&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&variationId=31922
200 OK 3.8 kB URL GET HTTP/3 go.sexfortokens.com/api/models/vast?action=sbSignupWithModel&campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&campaignType=smartpop&creativeId=b8f820c89e49c30a413b7360dc36f8c9cc13dd1f3d59a594d0b2c0f903b3991f&domain=stripchat&duration=00%3A00%3A30&iterationId=752079&masterSmartpopId=2683&memberId=u4yiP60pGuaymOw-h4_SLy2xXcFzwS65y39qzuv17QjTUVvBHzmuj3o98fbWKoT3KubtEUEPUXkHx66D4xeTfOPSXt7pXI_jVKgPK4cvQllc0jZ9_gUIDRUi&ruleId=149&skipOffset=00%3A00%3A05&smartpopId=10518&sourceId=tstars-Slider-43579-4298529&tag=-men%2Fmobile&usePreroll=true&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&variationId=31922
IP
Certificate IssuerCloudflare, Inc.
Subjectsexfortokens.com
Fingerprint14:74:83:B8:1B:D5:4F:1D:A3:FD:1B:C0:F1:C8:9F:C4:71:56:16:CA
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (2264), with no line terminators
Hash 7405a81e84847bc8c1d1be86b42b168f
83a9f83d94d38db197b1e15c7cade0386adabd81
087c6ad44e254ceed1e4f01707df28f09f500ad99542de678cec1b4dd831a3d2
GET /api/models/vast?action=sbSignupWithModel&campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&campaignType=smartpop&creativeId=b8f820c89e49c30a413b7360dc36f8c9cc13dd1f3d59a594d0b2c0f903b3991f&domain=stripchat&duration=00%3A00%3A30&iterationId=752079&masterSmartpopId=2683&memberId=u4yiP60pGuaymOw-h4_SLy2xXcFzwS65y39qzuv17QjTUVvBHzmuj3o98fbWKoT3KubtEUEPUXkHx66D4xeTfOPSXt7pXI_jVKgPK4cvQllc0jZ9_gUIDRUi&ruleId=149&skipOffset=00%3A00%3A05&smartpopId=10518&sourceId=tstars-Slider-43579-4298529&tag=-men%2Fmobile&usePreroll=true&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&variationId=31922 HTTP/1.1
Host: go.sexfortokens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://justthegays.com
Referer: https://justthegays.com/
DNT: 1
Connection: keep-alive
Cookie: __cflb=02DiuGyDLPvii6XBe57uvfNJUFkxLJd5CWXyTtVddsRoi
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:28 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=15768000
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
access-control-allow-origin: https://justthegays.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8320d9335a65b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
vast.yomeno.xyz/?tcid=17177
200 OK 6.8 kB URL GET HTTP/2 vast.yomeno.xyz/?tcid=17177
IP
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint47:BF:55:36:FD:42:8F:D1:07:8C:09:CC:51:6C:15:28:BA:50:45:E3
ValidityFri, 24 Nov 2023 03:03:11 GMT - Thu, 22 Feb 2024 03:03:10 GMT
File type gzip compressed data, from Unix\012- data
Hash 85f18d9a6f0ead942b0a445b25ca27df
d8d284040cb61022d55dd647b5ba4fb5c705c393
1dae4c0ddb143f61d71f765a911badeb58ba681273b8886cd3a178e0379379df
GET /?tcid=17177 HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 08 Dec 2023 00:21:28 GMT
content-type: text/xml;charset=UTF-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://justthegays.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,
access-control-expose-headers: Content-Length,Content-Range
content-encoding: gzip
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/1229005878662625095?c=60&data[error]=3
200 OK 0 B URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/1229005878662625095?c=60&data[error]=3
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/1229005878662625095?c=60&data[error]=3 HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:29 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/407034?host=justthegays.com&ev=211&wh=1024&ww=1280&uuid=&url=https%3A%2F%2Fjustthegays.com%2F&i=1&kw=gay%20porn%2Cgay%20porno%2Cgay%20teen%20porn%2Chot%20gay%20videos%2Conlyfans%2Cgayforfans%2Cjust%20for%20fans%2C4myfans%2Ctwink%2Csex%2Cjerk%20off%2Ccum%2Cxxx%2Canal%2Cblowjob%2Cgrindr%2Cdildo%2CGay%20for%20Pay%2CGay%2CAdult%20videos%2CJustForfans%2Cxxx%20videos&s1=%25subid1%25&s2=%25subid2%25
200 OK 499 B URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/407034?host=justthegays.com&ev=211&wh=1024&ww=1280&uuid=&url=https%3A%2F%2Fjustthegays.com%2F&i=1&kw=gay%20porn%2Cgay%20porno%2Cgay%20teen%20porn%2Chot%20gay%20videos%2Conlyfans%2Cgayforfans%2Cjust%20for%20fans%2C4myfans%2Ctwink%2Csex%2Cjerk%20off%2Ccum%2Cxxx%2Canal%2Cblowjob%2Cgrindr%2Cdildo%2CGay%20for%20Pay%2CGay%2CAdult%20videos%2CJustForfans%2Cxxx%20videos&s1=%25subid1%25&s2=%25subid2%25
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type ASCII text, with very long lines (472)
Hash a8bbe9664434a2b2760c214647686306
7cf714fdc85d274eb1bcda162f46e33f3be6cb4a
fba8def371d5412df543e83ab56476b56beeef6a7971eb9cc4e573092a370b70
GET /api/users/407034?host=justthegays.com&ev=211&wh=1024&ww=1280&uuid=&url=https%3A%2F%2Fjustthegays.com%2F&i=1&kw=gay%20porn%2Cgay%20porno%2Cgay%20teen%20porn%2Chot%20gay%20videos%2Conlyfans%2Cgayforfans%2Cjust%20for%20fans%2C4myfans%2Ctwink%2Csex%2Cjerk%20off%2Ccum%2Cxxx%2Canal%2Cblowjob%2Cgrindr%2Cdildo%2CGay%20for%20Pay%2CGay%2CAdult%20videos%2CJustForfans%2Cxxx%20videos&s1=%25subid1%25&s2=%25subid2%25 HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/1229005878662625095?c=60&data[error]=400
200 OK 0 B URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/1229005878662625095?c=60&data[error]=400
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/1229005878662625095?c=60&data[error]=400 HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:29 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
vast.yomeno.xyz/event?katds_ep=QY29JNSUbRTcjkR6K6P2qUGzyQrjqMIecMASA3afE_rHwU4kJMfXF44F2QgyvInWhEM9bzae84OILlXMNRMr26QO_4MH4yYdXCn6rec7IsHTn3rB1UaBnCpbglFngWzCO88RtzyTfq5FjZwQb_KxeAyahYJdgM8XRaO5I8pawzbkTLmxHTmnCV6WiP-SoWgs8Q7Vj09B88ftHPCt5b6NrLuOk_KCgNfg7GyPzp4egxZlfN05ktP9eaZk9gyMnwQHKhAm3gdXwhagkA1Tx-0HvTLlvXJ_EZttALqqKi4aOgmGi-7fWbWtFfr8-BIh3lrr0veEE7VHLgfPSWf7y5J7Gi4FRaIKEMcmlYY8gSsZUQrIdu4z9tBbxWfrAITwDv8nXIxwvs7gZGEQmtSKB6T625tyEsGmVKGVeaMzr9pKSo2-KllrfdMHFL5h9k0v47HsQhrCUl2iTF16WhJ3QpJ8WFD1zaihtjHouDmpjJDJa8AjFwFuMXi5BoMT_HFZhEY035e1nHVzfE7p3qdG&error=3
200 OK 0 B URL GET HTTP/2 vast.yomeno.xyz/event?katds_ep=QY29JNSUbRTcjkR6K6P2qUGzyQrjqMIecMASA3afE_rHwU4kJMfXF44F2QgyvInWhEM9bzae84OILlXMNRMr26QO_4MH4yYdXCn6rec7IsHTn3rB1UaBnCpbglFngWzCO88RtzyTfq5FjZwQb_KxeAyahYJdgM8XRaO5I8pawzbkTLmxHTmnCV6WiP-SoWgs8Q7Vj09B88ftHPCt5b6NrLuOk_KCgNfg7GyPzp4egxZlfN05ktP9eaZk9gyMnwQHKhAm3gdXwhagkA1Tx-0HvTLlvXJ_EZttALqqKi4aOgmGi-7fWbWtFfr8-BIh3lrr0veEE7VHLgfPSWf7y5J7Gi4FRaIKEMcmlYY8gSsZUQrIdu4z9tBbxWfrAITwDv8nXIxwvs7gZGEQmtSKB6T625tyEsGmVKGVeaMzr9pKSo2-KllrfdMHFL5h9k0v47HsQhrCUl2iTF16WhJ3QpJ8WFD1zaihtjHouDmpjJDJa8AjFwFuMXi5BoMT_HFZhEY035e1nHVzfE7p3qdG&error=3
IP
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint47:BF:55:36:FD:42:8F:D1:07:8C:09:CC:51:6C:15:28:BA:50:45:E3
ValidityFri, 24 Nov 2023 03:03:11 GMT - Thu, 22 Feb 2024 03:03:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /event?katds_ep=QY29JNSUbRTcjkR6K6P2qUGzyQrjqMIecMASA3afE_rHwU4kJMfXF44F2QgyvInWhEM9bzae84OILlXMNRMr26QO_4MH4yYdXCn6rec7IsHTn3rB1UaBnCpbglFngWzCO88RtzyTfq5FjZwQb_KxeAyahYJdgM8XRaO5I8pawzbkTLmxHTmnCV6WiP-SoWgs8Q7Vj09B88ftHPCt5b6NrLuOk_KCgNfg7GyPzp4egxZlfN05ktP9eaZk9gyMnwQHKhAm3gdXwhagkA1Tx-0HvTLlvXJ_EZttALqqKi4aOgmGi-7fWbWtFfr8-BIh3lrr0veEE7VHLgfPSWf7y5J7Gi4FRaIKEMcmlYY8gSsZUQrIdu4z9tBbxWfrAITwDv8nXIxwvs7gZGEQmtSKB6T625tyEsGmVKGVeaMzr9pKSo2-KllrfdMHFL5h9k0v47HsQhrCUl2iTF16WhJ3QpJ8WFD1zaihtjHouDmpjJDJa8AjFwFuMXi5BoMT_HFZhEY035e1nHVzfE7p3qdG&error=3 HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 08 Dec 2023 00:21:29 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
justthegays.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
200 OK 23 kB URL GET HTTP/2 justthegays.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type ASCII text, with very long lines (13479)
Hash 9ffeb32e2d9efbf8f70caabded242267
3ad0c10e501ac2a9bfa18f9cd7e700219b378738
5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:23 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:10:16 GMT
etag: W/"3509-64d3a2fb-73611fd;gz"
last-modified: Wed, 09 Aug 2023 14:30:19 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47467
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0AiKrTISKTCRtiIhYtyqbOidHUzORVqK96jXKIMnrSX4D4S3iNHl%2FfZp9KdMmstAWnBRiok6BXV77daPCEBYXmso2Ed6orTCs%2FpZxl%2F5LJr6eUPc7frm1X3pg063uahhJA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d9157de37131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/6010342150592530095/2011915?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos
200 OK 723 B URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/6010342150592530095/2011915?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (366)
Hash 6a0b593a8de5f9f2fbfe2d1ff3f1ab49
8791554d91da507a55de82b7b05820d3c85affd8
0f8176db82d3b9046873badd1cb4b487564d2819a26d1b95bfbfa99c2d6041f8
GET /api/users/6010342150592530095/2011915?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://justthegays.com
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
u3y8v8u4.aucdn.net/library/795798/93b799c2f6ba12c06d00d9cc84b2588e565905de.mp4
206 Partial Content 5.7 MB URL GET HTTP/2 u3y8v8u4.aucdn.net/library/795798/93b799c2f6ba12c06d00d9cc84b2588e565905de.mp4
IP
ASN #60068 Datacamp Limited
Certificate IssuerLet's Encrypt
Subjectafcdn.net
Fingerprint23:5D:B4:21:E2:4A:BC:A2:81:F9:7D:F8:B1:5C:6C:1D:7D:F3:FC:C8
ValidityThu, 05 Oct 2023 14:56:57 GMT - Wed, 03 Jan 2024 14:56:56 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 5.7 MB (5721822 bytes)
Hash bbee4a767f161d3870cb68d6c4eafab8
93b799c2f6ba12c06d00d9cc84b2588e565905de
8e3da179c9636f394fd42295463305213da9071da25e83c947bb4567bf3805b7
GET /library/795798/93b799c2f6ba12c06d00d9cc84b2588e565905de.mp4 HTTP/1.1
Host: u3y8v8u4.aucdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Fri, 08 Dec 2023 00:21:28 GMT
content-type: video/mp4
content-length: 5721822
last-modified: Mon, 09 Oct 2023 09:45:40 GMT
etag: "6523cbc4-574ede"
accept-ch:
expires: Tue, 26 Nov 2024 14:51:40 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-77-nzt: EwwBuUwJFAH3TrQNAAwBuUwKAQH3LQAAAAwB1GY4nAH3EQAAAA
x-77-nzt-ray: af58563034d93ca3886172659a320036
x-accel-expires: @1732632700
x-accel-date: 1701096762
x-77-cache: HIT
x-77-age: 898188
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 45, 898126
x-77-pop: stockholmSE
content-range: bytes 0-5721821/5721822
X-Firefox-Spdy: h2
cdn.zblkqa.com/video/369ff797f3cc003659037870bc3ad781.mp4?cb=1701994851
206 Partial Content 60 kB URL GET HTTP/2 cdn.zblkqa.com/video/369ff797f3cc003659037870bc3ad781.mp4?cb=1701994851
IP
Certificate IssuerSectigo Limited
Subject*.zblkqa.com
Fingerprint78:E7:B2:86:25:92:88:24:6D:8D:51:1E:AC:78:AC:9C:F3:91:E1:EA
ValidityTue, 17 Oct 2023 00:00:00 GMT - Sat, 16 Nov 2024 23:59:59 GMT
Hash ed0120d349d8d69de50984fd2009bdad
4145e5b26e72612f8fa36b060dbb161839e058b4
69c2fc03c8127145bc7d3e436ae75fc10e3100ee6a4b61aec515fd53afa0570d
GET /video/369ff797f3cc003659037870bc3ad781.mp4?cb=1701994851 HTTP/1.1
Host: cdn.zblkqa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=2228224-
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
date: Fri, 08 Dec 2023 00:21:29 GMT
content-type: binary/octet-stream
content-length: 60195
etag: "426ba811a0d2999c8dfab570dedb9ae8"
expires: Fri, 08 Dec 2023 01:20:50 GMT
last-modified: Fri, 08 Dec 2023 00:20:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: 94a460e0dcf2f60a9faaed7ce204d47323cebdcc235ebc02887411104840154e
x-amz-request-id: 179EB34D138589C6
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=28800
cf-cache-status: HIT
server: cloudflare
cf-ray: 8320d892adf3671e-AMS
alt-svc: h3=":443"; ma=86400
age: 27
content-range: bytes 2228224-2288418/2288419
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
200 OK 2.6 kB URL GET HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP
Requested by https://tsyndicate.com/iframes2/860b26275c5a4988aba5f1f983f095d9.html?extid=33113
Certificate IssuerSectigo Limited
Subjectlcdn.tsyndicate.com
FingerprintAA:DB:E6:65:05:5A:83:46:D1:77:83:25:84:3D:B2:B5:F5:99:97:00
ValidityWed, 08 Mar 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (2590)
Hash b0a8eae036a72f605538b002e33f7023
5916ea9eeb0b676d6f44637601c40d0dc69542d1
7b9affd37cf01ac1a4c5f4a4ccb1936f0412ff771fb24e36a55682d2bf0ac554
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03; bfq=APeIECNCx5YZN2QkhCGjCwsRYwpuieFQRBmJMW4whIEjhgwcOLr0URAQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:29 GMT
content-type: application/javascript
content-length: 2640
server: nginx
last-modified: Tue, 25 Jul 2023 12:28:26 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"64bfbfea-1f37"
content-encoding: gzip
age: 10983477
accept-ranges: bytes
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/9723517268165018095?c=60&data[error]=3
200 OK 0 B URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/9723517268165018095?c=60&data[error]=3
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/9723517268165018095?c=60&data[error]=3 HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:29 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/11775170789410723095?c=60&data[error]=303
200 OK 0 B URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/11775170789410723095?c=60&data[error]=303
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/11775170789410723095?c=60&data[error]=303 HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:29 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/9723517268165018095?c=60&data[error]=400
200 OK 0 B URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/9723517268165018095?c=60&data[error]=400
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/9723517268165018095?c=60&data[error]=400 HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:29 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
twinrdsyn.com/preroll.engine?id=83e985b7-0a12-4e2d-ac20-fd6e756c9390&zid=58445&cvs={ClientVideoSupport}&time={TimeOffset}&stdtime={StdTimeOffset}&abr={IsAdblockRequest}&pageurl={PageUrl}&tid={TrackingId}&res={Resolution}&bw={BrowserWidth}&bh={BrowserHeight}&kw={Keywords}&referrerUrl={ReferrerUrl}&pw={PlayerWidth}&ph={PlayerHeight}
200 OK 4.3 kB URL GET HTTP/2 twinrdsyn.com/preroll.engine?id=83e985b7-0a12-4e2d-ac20-fd6e756c9390&zid=58445&cvs={ClientVideoSupport}&time={TimeOffset}&stdtime={StdTimeOffset}&abr={IsAdblockRequest}&pageurl={PageUrl}&tid={TrackingId}&res={Resolution}&bw={BrowserWidth}&bh={BrowserHeight}&kw={Keywords}&referrerUrl={ReferrerUrl}&pw={PlayerWidth}&ph={PlayerHeight}
IP
Certificate IssuerGoogle Trust Services LLC
Subjecttwinrdsyn.com
Fingerprint5A:14:93:70:60:0A:E4:66:2F:AA:CF:7D:B9:A9:47:F9:52:A0:E5:46
ValidityThu, 12 Oct 2023 23:10:25 GMT - Wed, 10 Jan 2024 23:10:24 GMT
File type ASCII text, with very long lines (7573)
Hash 3e67e96b56b5650daf37fa8af67a9839
a5f9b1917d9995bb294a351a423120a4aab4a7e3
aac9a6bc9235bfcc4c6bb02aa5780ddf092c3f9cb37675f72f5ccb2d8471fa25
GET /preroll.engine?id=83e985b7-0a12-4e2d-ac20-fd6e756c9390&zid=58445&cvs={ClientVideoSupport}&time={TimeOffset}&stdtime={StdTimeOffset}&abr={IsAdblockRequest}&pageurl={PageUrl}&tid={TrackingId}&res={Resolution}&bw={BrowserWidth}&bh={BrowserHeight}&kw={Keywords}&referrerUrl={ReferrerUrl}&pw={PlayerWidth}&ph={PlayerHeight} HTTP/1.1
Host: twinrdsyn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:28 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
cache-control: private, no-transform
access-control-allow-credentials: true
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: https://justthegays.com
set-cookie: IKSR={}; path=/; SameSite=None; secure
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8320d9316b1bb503-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.zblkqa.com/video/369ff797f3cc003659037870bc3ad781.mp4?cb=1701994851
206 Partial Content 2.0 MB URL GET HTTP/2 cdn.zblkqa.com/video/369ff797f3cc003659037870bc3ad781.mp4?cb=1701994851
IP
Certificate IssuerSectigo Limited
Subject*.zblkqa.com
Fingerprint78:E7:B2:86:25:92:88:24:6D:8D:51:1E:AC:78:AC:9C:F3:91:E1:EA
ValidityTue, 17 Oct 2023 00:00:00 GMT - Sat, 16 Nov 2024 23:59:59 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 2.0 MB (1993507 bytes)
Hash 67ef66ff9ffa9d7bedb1c9d4c61187ad
c9a69c3770fd9ae149fe3158d66cd9a062273cc4
17d1c11fb0593d6c4e6ead154714dbc78640f3b8925b9a12f7a9804f11abdc4d
GET /video/369ff797f3cc003659037870bc3ad781.mp4?cb=1701994851 HTTP/1.1
Host: cdn.zblkqa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
date: Fri, 08 Dec 2023 00:21:29 GMT
content-type: binary/octet-stream
content-length: 2288419
etag: "426ba811a0d2999c8dfab570dedb9ae8"
expires: Fri, 08 Dec 2023 01:20:50 GMT
last-modified: Fri, 08 Dec 2023 00:20:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: 94a460e0dcf2f60a9faaed7ce204d47323cebdcc235ebc02887411104840154e
x-amz-request-id: 179EB34D138589C6
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=28800
cf-cache-status: HIT
server: cloudflare
cf-ray: 8320d892adf3671e-AMS
alt-svc: h3=":443"; ma=86400
age: 27
content-range: bytes 0-2288418/2288419
X-Firefox-Spdy: h2
tcimp.zog.link/in/tc_vast?cvid=13128&t=0.0099&tid=1137795792&tt=100&ts=0&cid=180488&soi=11218966&sid=352&s=2064504432&cat=118&bt=20&domain=justthegays.com
200 OK 0 B URL GET HTTP/2 tcimp.zog.link/in/tc_vast?cvid=13128&t=0.0099&tid=1137795792&tt=100&ts=0&cid=180488&soi=11218966&sid=352&s=2064504432&cat=118&bt=20&domain=justthegays.com
IP
Certificate IssuerLet's Encrypt
Subjecttcimp.zog.link
Fingerprint19:9C:CE:62:CB:9B:34:72:42:40:14:92:62:49:6D:9C:12:B7:13:CE
ValidityWed, 22 Nov 2023 03:06:17 GMT - Tue, 20 Feb 2024 03:06:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/tc_vast?cvid=13128&t=0.0099&tid=1137795792&tt=100&ts=0&cid=180488&soi=11218966&sid=352&s=2064504432&cat=118&bt=20&domain=justthegays.com HTTP/1.1
Host: tcimp.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 08 Dec 2023 00:21:29 GMT
content-type: text/xml
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin:
X-Firefox-Spdy: h2
siyotith.com/sn.php
200 OK 154 B IP
Requested by https://rtbrenab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectsiyotith.com
Fingerprint2B:B1:9C:C7:5F:82:D0:96:41:2D:31:9A:07:9A:29:BB:C9:C4:C0:68
ValidityWed, 29 Nov 2023 05:32:11 GMT - Tue, 27 Feb 2024 05:32:10 GMT
Hash c64f3013068d22792654bf197b09c359
6e0a09b6ad1fedd659e5022b3efb69c111d753f6
37f005e9a058bb405cd17d019e66ee4f6d5a92536fcd41a3d1e76a388c900158
GET /sn.php HTTP/1.1
Host: siyotith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrenab.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:28 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33, PleskLin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qb5VmQFMuZ1vFdYxO0OolDxrMrdTL8oSh6zmZaNfni5dxD1hApN2ahX9rjWCh0jZulY0KnpJ7pvY9zS9zgf0I1d3g5LOVlENTS0kCT621ryU4zaoo8j1VPurrmv%2Baoo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d935af16712f-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
go.xlivrdr.com/smartpop/128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&sourceId=271333&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&p1=4381331&buttonColor=%23930606&liveBadgeColor=%23ff0707
302 Found 0 B URL GET HTTP/2 go.xlivrdr.com/smartpop/128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&sourceId=271333&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&p1=4381331&buttonColor=%23930606&liveBadgeColor=%23ff0707
IP
Requested by https://tsyndicate.com/iframes2/860b26275c5a4988aba5f1f983f095d9.html?extid=33113
Certificate IssuerCloudflare, Inc.
Subjectxlivrdr.com
FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smartpop/128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&sourceId=271333&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&p1=4381331&buttonColor=%23930606&liveBadgeColor=%23ff0707 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 08 Dec 2023 00:21:29 GMT
content-length: 0
location: https://creative.fxmnba.com/widgets/v4/Universal?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&mlView=1&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&usePreroll=0&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&webp=1
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: _var=808614.32246_OWQzYzU1NjU=; Path=/; Expires=Sun, 07 Jan 2024 00:21:29 GMT; HttpOnly; SameSite=Strict
__cflb=02DiuDFRFiBZBvMSLtqFKBH2KiRQdzrXuieQnhEy7FA5A; SameSite=None; Secure; path=/; expires=Sat, 09-Dec-23 00:21:29 GMT; HttpOnly
server: cloudflare
cf-ray: 8320d93c891256aa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.zblkqa.com/video/369ff797f3cc003659037870bc3ad781.mp4?cb=1701994851
206 Partial Content 1.5 MB URL GET HTTP/2 cdn.zblkqa.com/video/369ff797f3cc003659037870bc3ad781.mp4?cb=1701994851
IP
Certificate IssuerSectigo Limited
Subject*.zblkqa.com
Fingerprint78:E7:B2:86:25:92:88:24:6D:8D:51:1E:AC:78:AC:9C:F3:91:E1:EA
ValidityTue, 17 Oct 2023 00:00:00 GMT - Sat, 16 Nov 2024 23:59:59 GMT
Size 1.5 MB (1501987 bytes)
Hash 31be0497d0434e4f23553acaf833be99
8420911cb60ec15a4ebf6f987a8bff9404495835
304bb6badd15642436b3816041e5cbc108daea4fe07c73c227994b1aeafe264b
GET /video/369ff797f3cc003659037870bc3ad781.mp4?cb=1701994851 HTTP/1.1
Host: cdn.zblkqa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=786432-
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
date: Fri, 08 Dec 2023 00:21:29 GMT
content-type: binary/octet-stream
content-length: 1501987
etag: "426ba811a0d2999c8dfab570dedb9ae8"
expires: Fri, 08 Dec 2023 01:20:50 GMT
last-modified: Fri, 08 Dec 2023 00:20:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: 94a460e0dcf2f60a9faaed7ce204d47323cebdcc235ebc02887411104840154e
x-amz-request-id: 179EB34D138589C6
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=28800
cf-cache-status: HIT
server: cloudflare
cf-ray: 8320d892adf3671e-AMS
alt-svc: h3=":443"; ma=86400
age: 27
content-range: bytes 786432-2288418/2288419
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/5658248867468093095?c=60&data[error]=3
200 OK 0 B URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/5658248867468093095?c=60&data[error]=3
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/5658248867468093095?c=60&data[error]=3 HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:29 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/error?errorcode=3&p=APeICDOGjggdMFgMhAPnII0ZNW7kUDimTUMdNmTkwDHDhkIxbtwcnHFDRowYORKKoNPmYIwbMFDmoIEDxw2FLGW4hCmTps2NE0XAYTPmoMoxZ4z2URAQ&s=211aa75d392b9db7ab9ccbefcc99fe9da5ded15ca687adc28bb1d19c984bf3c21701994887
200 OK 0 B URL GET HTTP/2 pxl.tsyndicate.com/api/v1/error?errorcode=3&p=APeICDOGjggdMFgMhAPnII0ZNW7kUDimTUMdNmTkwDHDhkIxbtwcnHFDRowYORKKoNPmYIwbMFDmoIEDxw2FLGW4hCmTps2NE0XAYTPmoMoxZ4z2URAQ&s=211aa75d392b9db7ab9ccbefcc99fe9da5ded15ca687adc28bb1d19c984bf3c21701994887
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/error?errorcode=3&p=APeICDOGjggdMFgMhAPnII0ZNW7kUDimTUMdNmTkwDHDhkIxbtwcnHFDRowYORKKoNPmYIwbMFDmoIEDxw2FLGW4hCmTps2NE0XAYTPmoMoxZ4z2URAQ&s=211aa75d392b9db7ab9ccbefcc99fe9da5ded15ca687adc28bb1d19c984bf3c21701994887 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03; bfq=APeIECNCx5YZN2QkhCGjCwsRYwpuieFQRBmJMW4whIEjhgwcOLr0URAQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:29 GMT
content-length: 0
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/5658248867468093095?c=60&data[error]=400
200 OK 0 B URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/5658248867468093095?c=60&data[error]=400
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/5658248867468093095?c=60&data[error]=400 HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:29 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/error?errorcode=400&p=APeICDOGjggdMFgMhAPnII0ZNW7kUDimTUMdNmTkwDHDhkIxbtwcnHFDRowYORKKoNPmYIwbMFDmoIEDxw2FLGW4hCmTps2NE0XAYTPmoMoxZ4z2URAQ&s=211aa75d392b9db7ab9ccbefcc99fe9da5ded15ca687adc28bb1d19c984bf3c21701994887
200 OK 0 B URL GET HTTP/2 pxl.tsyndicate.com/api/v1/error?errorcode=400&p=APeICDOGjggdMFgMhAPnII0ZNW7kUDimTUMdNmTkwDHDhkIxbtwcnHFDRowYORKKoNPmYIwbMFDmoIEDxw2FLGW4hCmTps2NE0XAYTPmoMoxZ4z2URAQ&s=211aa75d392b9db7ab9ccbefcc99fe9da5ded15ca687adc28bb1d19c984bf3c21701994887
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/error?errorcode=400&p=APeICDOGjggdMFgMhAPnII0ZNW7kUDimTUMdNmTkwDHDhkIxbtwcnHFDRowYORKKoNPmYIwbMFDmoIEDxw2FLGW4hCmTps2NE0XAYTPmoMoxZ4z2URAQ&s=211aa75d392b9db7ab9ccbefcc99fe9da5ded15ca687adc28bb1d19c984bf3c21701994887 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03; bfq=APeIECNCx5YZN2QkhCGjCwsRYwpuieFQRBmJMW4whIEjhgwcOLr0URAQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:29 GMT
content-length: 0
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/11402383731937129095?c=60&data[error]=3
200 OK 0 B URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/11402383731937129095?c=60&data[error]=3
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/11402383731937129095?c=60&data[error]=3 HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:29 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
vast.yomeno.xyz/report?katds_ep=7krh7-26rHNIhZYjuWbPW5gtoUTJBli2hVzhilH7sdin7MyPR6-wBpj1sU9Yt_5nV6I_9TnrCvW1f9nY7OxKGloJa2foHCjvjytAD-3Ckb4noOlH70EfMbIJVvLS30h7TKJbwyNJaGxWC6RGkI4e_quTvPfhAGK3EZl2VMxLrU5yXd6K580q_wjaZBj147X3HKHBo9BGHXA2LlA2Jqa7qtgn8ZoeBzYRLU2quCysN31zleZysYTkkW8B7RcQSbDDjhIfgP8WnN3q6EGrhr_csO3trO3d8cqiBBnTHGW9GYIozDDNp8iUfVLWDGP_xLC2zQVZ7RyDfVzLAUBT-cFV-hwDsnv22FdNj4LwMTqkGpcAUFWgyrOqpQUA8fB4TkeNJqwy14tokHqa1QoUyLywqkaVZn1KrHKXn2jHrwWex2Mgi-2ZPamSN80AsNNjbWjViUyCpqstitlX1ySzojCGuONRJ3y2mHnP_rbP4I5tdXJoVL9utUzYmw&error=3
204 No Content 0 B URL GET HTTP/2 vast.yomeno.xyz/report?katds_ep=7krh7-26rHNIhZYjuWbPW5gtoUTJBli2hVzhilH7sdin7MyPR6-wBpj1sU9Yt_5nV6I_9TnrCvW1f9nY7OxKGloJa2foHCjvjytAD-3Ckb4noOlH70EfMbIJVvLS30h7TKJbwyNJaGxWC6RGkI4e_quTvPfhAGK3EZl2VMxLrU5yXd6K580q_wjaZBj147X3HKHBo9BGHXA2LlA2Jqa7qtgn8ZoeBzYRLU2quCysN31zleZysYTkkW8B7RcQSbDDjhIfgP8WnN3q6EGrhr_csO3trO3d8cqiBBnTHGW9GYIozDDNp8iUfVLWDGP_xLC2zQVZ7RyDfVzLAUBT-cFV-hwDsnv22FdNj4LwMTqkGpcAUFWgyrOqpQUA8fB4TkeNJqwy14tokHqa1QoUyLywqkaVZn1KrHKXn2jHrwWex2Mgi-2ZPamSN80AsNNjbWjViUyCpqstitlX1ySzojCGuONRJ3y2mHnP_rbP4I5tdXJoVL9utUzYmw&error=3
IP
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint47:BF:55:36:FD:42:8F:D1:07:8C:09:CC:51:6C:15:28:BA:50:45:E3
ValidityFri, 24 Nov 2023 03:03:11 GMT - Thu, 22 Feb 2024 03:03:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /report?katds_ep=7krh7-26rHNIhZYjuWbPW5gtoUTJBli2hVzhilH7sdin7MyPR6-wBpj1sU9Yt_5nV6I_9TnrCvW1f9nY7OxKGloJa2foHCjvjytAD-3Ckb4noOlH70EfMbIJVvLS30h7TKJbwyNJaGxWC6RGkI4e_quTvPfhAGK3EZl2VMxLrU5yXd6K580q_wjaZBj147X3HKHBo9BGHXA2LlA2Jqa7qtgn8ZoeBzYRLU2quCysN31zleZysYTkkW8B7RcQSbDDjhIfgP8WnN3q6EGrhr_csO3trO3d8cqiBBnTHGW9GYIozDDNp8iUfVLWDGP_xLC2zQVZ7RyDfVzLAUBT-cFV-hwDsnv22FdNj4LwMTqkGpcAUFWgyrOqpQUA8fB4TkeNJqwy14tokHqa1QoUyLywqkaVZn1KrHKXn2jHrwWex2Mgi-2ZPamSN80AsNNjbWjViUyCpqstitlX1ySzojCGuONRJ3y2mHnP_rbP4I5tdXJoVL9utUzYmw&error=3 HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx/1.20.1
date: Fri, 08 Dec 2023 00:21:29 GMT
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: *
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
tcimp.zog.link/in/tc_vast?cvid=30&t=0.000015&tid=803572913&tt=1&ts=1&cid=4402&sid=56&s=200827882&cat=118&bt=20
200 OK 0 B URL GET HTTP/2 tcimp.zog.link/in/tc_vast?cvid=30&t=0.000015&tid=803572913&tt=1&ts=1&cid=4402&sid=56&s=200827882&cat=118&bt=20
IP
Certificate IssuerLet's Encrypt
Subjecttcimp.zog.link
Fingerprint19:9C:CE:62:CB:9B:34:72:42:40:14:92:62:49:6D:9C:12:B7:13:CE
ValidityWed, 22 Nov 2023 03:06:17 GMT - Tue, 20 Feb 2024 03:06:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/tc_vast?cvid=30&t=0.000015&tid=803572913&tt=1&ts=1&cid=4402&sid=56&s=200827882&cat=118&bt=20 HTTP/1.1
Host: tcimp.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 08 Dec 2023 00:21:29 GMT
content-type: text/xml
content-length: 0
access-control-allow-origin:
access-control-allow-credentials: true
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/11402383731937129095?c=60&data[error]=400
200 OK 0 B URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/11402383731937129095?c=60&data[error]=400
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/11402383731937129095?c=60&data[error]=400 HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:30 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
vast.yomeno.xyz/report?katds_ep=7krh7-26rHNIhZYjuWbPW5gtoUTJBli2hVzhilH7sdin7MyPR6-wBpj1sU9Yt_5nV6I_9TnrCvW1f9nY7OxKGloJa2foHCjvjytAD-3Ckb4noOlH70EfMbIJVvLS30h7TKJbwyNJaGxWC6RGkI4e_quTvPfhAGK3EZl2VMxLrU5yXd6K580q_wjaZBj147X3HKHBo9BGHXA2LlA2Jqa7qtgn8ZoeBzYRLU2quCysN31zleZysYTkkW8B7RcQSbDDjhIfgP8WnN3q6EGrhr_csO3trO3d8cqiBBnTHGW9GYIozDDNp8iUfVLWDGP_xLC2zQVZ7RyDfVzLAUBT-cFV-hwDsnv22FdNj4LwMTqkGpcAUFWgyrOqpQUA8fB4TkeNJqwy14tokHqa1QoUyLywqkaVZn1KrHKXn2jHrwWex2Mgi-2ZPamSN80AsNNjbWjViUyCpqstitlX1ySzojCGuONRJ3y2mHnP_rbP4I5tdXJoVL9utUzYmw&error=400
204 No Content 0 B URL GET HTTP/2 vast.yomeno.xyz/report?katds_ep=7krh7-26rHNIhZYjuWbPW5gtoUTJBli2hVzhilH7sdin7MyPR6-wBpj1sU9Yt_5nV6I_9TnrCvW1f9nY7OxKGloJa2foHCjvjytAD-3Ckb4noOlH70EfMbIJVvLS30h7TKJbwyNJaGxWC6RGkI4e_quTvPfhAGK3EZl2VMxLrU5yXd6K580q_wjaZBj147X3HKHBo9BGHXA2LlA2Jqa7qtgn8ZoeBzYRLU2quCysN31zleZysYTkkW8B7RcQSbDDjhIfgP8WnN3q6EGrhr_csO3trO3d8cqiBBnTHGW9GYIozDDNp8iUfVLWDGP_xLC2zQVZ7RyDfVzLAUBT-cFV-hwDsnv22FdNj4LwMTqkGpcAUFWgyrOqpQUA8fB4TkeNJqwy14tokHqa1QoUyLywqkaVZn1KrHKXn2jHrwWex2Mgi-2ZPamSN80AsNNjbWjViUyCpqstitlX1ySzojCGuONRJ3y2mHnP_rbP4I5tdXJoVL9utUzYmw&error=400
IP
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint47:BF:55:36:FD:42:8F:D1:07:8C:09:CC:51:6C:15:28:BA:50:45:E3
ValidityFri, 24 Nov 2023 03:03:11 GMT - Thu, 22 Feb 2024 03:03:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /report?katds_ep=7krh7-26rHNIhZYjuWbPW5gtoUTJBli2hVzhilH7sdin7MyPR6-wBpj1sU9Yt_5nV6I_9TnrCvW1f9nY7OxKGloJa2foHCjvjytAD-3Ckb4noOlH70EfMbIJVvLS30h7TKJbwyNJaGxWC6RGkI4e_quTvPfhAGK3EZl2VMxLrU5yXd6K580q_wjaZBj147X3HKHBo9BGHXA2LlA2Jqa7qtgn8ZoeBzYRLU2quCysN31zleZysYTkkW8B7RcQSbDDjhIfgP8WnN3q6EGrhr_csO3trO3d8cqiBBnTHGW9GYIozDDNp8iUfVLWDGP_xLC2zQVZ7RyDfVzLAUBT-cFV-hwDsnv22FdNj4LwMTqkGpcAUFWgyrOqpQUA8fB4TkeNJqwy14tokHqa1QoUyLywqkaVZn1KrHKXn2jHrwWex2Mgi-2ZPamSN80AsNNjbWjViUyCpqstitlX1ySzojCGuONRJ3y2mHnP_rbP4I5tdXJoVL9utUzYmw&error=400 HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx/1.20.1
date: Fri, 08 Dec 2023 00:21:29 GMT
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: *
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
cdn.tubecorp.com/video/gay_mq_500.mp4
206 Partial Content 1.6 MB URL GET HTTP/2 cdn.tubecorp.com/video/gay_mq_500.mp4
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectcdn.tubecorp.com
Fingerprint69:CB:CF:C4:34:B1:46:A6:44:B9:3C:2E:98:22:34:7A:20:0B:6A:C8
ValidityWed, 06 Dec 2023 03:01:17 GMT - Tue, 05 Mar 2024 03:01:16 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 1.6 MB (1600048 bytes)
Hash 32c60dd866cf83d002417b3120d9607e
a9d3a2a54708e8687153421dbdecadcc87d20596
fc8b222fd2c9a7facdff089a89fbce79f031628e3f7be5db8d84bf021c3b97a5
GET /video/gay_mq_500.mp4 HTTP/1.1
Host: cdn.tubecorp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Fri, 08 Dec 2023 00:21:29 GMT
content-type: video/mp4
content-length: 1600048
server: nginx/1.20.1
last-modified: Thu, 09 Jul 2020 12:02:12 GMT
etag: "5f070744-186a30"
cache-control: max-age=3600
x-request-id: 6c32f4b91800f071bec97e7bb1362d36
expires: Fri, 08 Dec 2023 01:21:29 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
content-range: bytes 0-1600047/1600048
X-Firefox-Spdy: h2
vlcdn.tsyndicate.com/videos/7/5/b53871a2a42bb5c206ad1804ffe9ee247304b4/330x250.mp4
206 Partial Content 537 kB URL GET HTTP/2 vlcdn.tsyndicate.com/videos/7/5/b53871a2a42bb5c206ad1804ffe9ee247304b4/330x250.mp4
IP
Certificate IssuerSectigo Limited
Subjectvlcdn.tsyndicate.com
Fingerprint1F:5F:CD:0C:ED:2D:5C:55:51:6E:02:EF:68:C7:7C:B3:8D:DB:D3:76
ValidityMon, 21 Aug 2023 00:00:00 GMT - Fri, 20 Sep 2024 23:59:59 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 537 kB (537367 bytes)
Hash d8324a923237d6415000546719245c30
f32ecb74c04f7cee529acc7bb869662255311c6d
5fa6e8e1584ada2bd4ed5201da3b848b1473dad0d414971eda3f0296058534b3
GET /videos/7/5/b53871a2a42bb5c206ad1804ffe9ee247304b4/330x250.mp4 HTTP/1.1
Host: vlcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03; bfq=APeIECNCx5YZN2QkhCGjCwsRYwpuieFQRBmJMW4whIEjhgwcOLr0URAQ
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Fri, 08 Dec 2023 00:21:30 GMT
content-type: video/mp4
content-length: 537367
server: nginx
last-modified: Thu, 25 Mar 2021 18:27:08 GMT
etag: "605cd5fc-83317"
access-control-allow-origin: *
age: 10306341
content-range: bytes 0-537366/537367
access-control-allow-methods: HEAD,GET,OPTIONS
access-control-expose-headers: Server,Range,Content-Length,Content-Range
access-control-allow-headers: *
access-control-max-age: 31536000
access-control-allow-credentials: true
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/16881069181630653095?c=60&data[error]=3
200 OK 0 B URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/16881069181630653095?c=60&data[error]=3
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/16881069181630653095?c=60&data[error]=3 HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:30 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/6010342150592530095/2041375?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos
200 OK 597 B URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/6010342150592530095/2041375?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (354)
Hash 093f3a6081a1adef325fab0254619921
f2c36a32152e91293c2a87b7f1ef29722914119f
7a2a86f7b6ad6bf6fb7fd6b454dbb79704fc41770daf2dd7c1ed61523bd3d501
GET /api/users/6010342150592530095/2041375?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://justthegays.com
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/16881069181630653095?c=60&data[error]=400
200 OK 0 B URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/16881069181630653095?c=60&data[error]=400
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/16881069181630653095?c=60&data[error]=400 HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:30 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
vast.yomeno.xyz/error?katds_ep=z-PWKT4VPMc2zmWF2_Z13gVleBrri_cgq1mVGxCgOer3O3RzfdB4f_4HaVAmcPFXqU94qeQthGM-uZM9nfet5m_RKfBi_28V1lR9pDvZPippYP1ojKCw39BVWOlDwI_wmyOBS8M_UMnGp2wI-bVV2fKZSzzAAsVHzcdizsW1_P5eR6gFhKc07pX1e0VYJGp_UbXqynlS7rHi4mPPkLG383dpMs5U9o18MUNuOHuNWS3vB_KyF4iST5RTisJayEO1R6_EsXGIAHBHrbwmPjiuLoX-_afGpD_BPMjEDuVkI4wLehgMllTvwlqaAbAoAr5lop0aeN2rvRaC-S2Nd9MHBtY3flPGRTlBmRK4PxJYMpB9&error=400
302 Found 0 B URL GET HTTP/2 vast.yomeno.xyz/error?katds_ep=z-PWKT4VPMc2zmWF2_Z13gVleBrri_cgq1mVGxCgOer3O3RzfdB4f_4HaVAmcPFXqU94qeQthGM-uZM9nfet5m_RKfBi_28V1lR9pDvZPippYP1ojKCw39BVWOlDwI_wmyOBS8M_UMnGp2wI-bVV2fKZSzzAAsVHzcdizsW1_P5eR6gFhKc07pX1e0VYJGp_UbXqynlS7rHi4mPPkLG383dpMs5U9o18MUNuOHuNWS3vB_KyF4iST5RTisJayEO1R6_EsXGIAHBHrbwmPjiuLoX-_afGpD_BPMjEDuVkI4wLehgMllTvwlqaAbAoAr5lop0aeN2rvRaC-S2Nd9MHBtY3flPGRTlBmRK4PxJYMpB9&error=400
IP
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint47:BF:55:36:FD:42:8F:D1:07:8C:09:CC:51:6C:15:28:BA:50:45:E3
ValidityFri, 24 Nov 2023 03:03:11 GMT - Thu, 22 Feb 2024 03:03:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /error?katds_ep=z-PWKT4VPMc2zmWF2_Z13gVleBrri_cgq1mVGxCgOer3O3RzfdB4f_4HaVAmcPFXqU94qeQthGM-uZM9nfet5m_RKfBi_28V1lR9pDvZPippYP1ojKCw39BVWOlDwI_wmyOBS8M_UMnGp2wI-bVV2fKZSzzAAsVHzcdizsW1_P5eR6gFhKc07pX1e0VYJGp_UbXqynlS7rHi4mPPkLG383dpMs5U9o18MUNuOHuNWS3vB_KyF4iST5RTisJayEO1R6_EsXGIAHBHrbwmPjiuLoX-_afGpD_BPMjEDuVkI4wLehgMllTvwlqaAbAoAr5lop0aeN2rvRaC-S2Nd9MHBtY3flPGRTlBmRK4PxJYMpB9&error=400 HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Fri, 08 Dec 2023 00:21:30 GMT
content-length: 0
location: https://vast.yomeno.xyz/report?e_type=Error&rep=tc_vast&source=1255254910&tcid=17172&iab=IAB25&p=&ccid=&ctype=slider&uid=61a113beeb5c1307f0131429d929c04f&endpoint=&error=400
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/error?errorcode=3&p=APeICDOGjggdMFgMhAPnII0bN2TQUDimTUMdMWTgqDEDh0IxbtwcxBEDBw0bNRTSaXMwxg0YMXLkoIGjpso2Mlq-jDmzJg6NNxTCYTPmYEIRY84Y7aMgIA%3D%3D&s=c4de6c52110247be418b4c22ddf86c944b98ae2784e8579519e82244d88801a71701994888
200 OK 0 B URL GET HTTP/2 pxl.tsyndicate.com/api/v1/error?errorcode=3&p=APeICDOGjggdMFgMhAPnII0bN2TQUDimTUMdMWTgqDEDh0IxbtwcxBEDBw0bNRTSaXMwxg0YMXLkoIGjpso2Mlq-jDmzJg6NNxTCYTPmYEIRY84Y7aMgIA%3D%3D&s=c4de6c52110247be418b4c22ddf86c944b98ae2784e8579519e82244d88801a71701994888
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/error?errorcode=3&p=APeICDOGjggdMFgMhAPnII0bN2TQUDimTUMdMWTgqDEDh0IxbtwcxBEDBw0bNRTSaXMwxg0YMXLkoIGjpso2Mlq-jDmzJg6NNxTCYTPmYEIRY84Y7aMgIA%3D%3D&s=c4de6c52110247be418b4c22ddf86c944b98ae2784e8579519e82244d88801a71701994888 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03; bfq=APeIECNCx5YZN2QkhCGjCwsRYwpuieFQRBmJMW4whIEjhgwcOLr0URAQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:30 GMT
content-length: 0
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0DEjBgsRYcbQWehQBJ0zC0U0DFMGhpkwNlrIGFMjRgsaNmbUaCGGjJkZLcrcqEETR4wxN2DEsCHiYZg6YzLuLPPyBhkYLW7gqCHmpAwxZVqEmTHjRgszN2LUsIFSTAwYY2b0hEjGDkUcNHLgeAinjhiKWtX6hANnoQwZNGasFTEHzkQdeW1SrVgGD50vff9qbBhD7MMxberqkJGV6gyfLik-FOPGDcUcKG3YkPGwjRuMOhrfhcHWNGobNWhUrBMjIxo6dODM0fHixZk3LvCwSWNHDhk5Lsa8afNiTpswcnK_gfMihgwcMGTkUGrDDFQyObqXwYGdKgwxYmDgmFFmzJgysstYfxpGfRnKMWLkUC9mDOgc7L1kw3o00PBDHXMglAQZPZRBBg1lzFBgDjJkF0aBYXwkmFYw3BBGDmRYF8ZN4ckwgwwx4GADDPCJYYZ7MoQxohhUjUjedmKsWAYXdcCQnQ1zvFGHHO8t2AN-lvHooww2tFFGG1DJYeQUV9AgBA517AcDHTE8UUcaOKzRhhBfXMHEEWjIUMYXR0AR5h1O1FEGHVg0MQMWNgQRhRtE2NHCE3jAYUcUeUyBAxFfEGFGFknMgUMTcBjR1hBMIBEFDXE4AYMVd0CBUxxT5ABFE2hYYWYROMyhRg5VMKHGHXOEsYYRU4hBhBtfxKBGFmN8cUYVSRAhRRVpKPkjHDH0EFhjDRnLpBh14PaGG0O8wcYbcvRQgokAwrCiDc7aMJwdZQhh0BllVHttttvOYIYZHXY4FhnLZTRHGnm8QUcadKCRXL2PhfHXFg11sZkZC8Hggo81PCSHHZLVwJoIdXyZkRk5hGGixGOwZBMNTgHYwno4kNFCDWOQMQYNMphRA1EwOCZCGpKJkEMMLuznAssuaEXDWHJ8QXNGN-esMM8-j1VHGBk18YYeabDBRhgv1LAwCChckYYb9MIKghNUgPDVwjuAoLUbXJWNR9ogPJwaDFbDkAIIR7S3xhsvVPiVTjqBYEQachD1Bh7Vwb3wWO5l5MQTY2H7ReI6iLD4WGwEFXkRTsxbhh1fBM4GRTXcoNQMA_ro8BmeTVYDDjc8dBDnYsixEHmub_5FG2-QYZeKFR33xkKXifCGQoCxJcfgeSzUsAiBIxz5bbnt1tu9-e7b77_MjTXHwxkdT4fA2LZQhxv8tpCiC2TI0Pj2ZqWGg1ow5CBx75aLcNAX6Y9FRxsU5aQfaDd6yP7Ulxr_5QCA74sLZjpXhr58QWD908kBaUCevdguDGxACB2IRzAaGAwiYlDMQT5SBzZMhC2VS9hjUAODPiggIA%3D%3D&s=fcb576f3aa922b577ad44e5397fb726f6e31f944966c7057e641e364c6950cb21701994889&w=t&r=1&d=758&priv=true
200 OK 24 B URL GET HTTP/2 pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0DEjBgsRYcbQWehQBJ0zC0U0DFMGhpkwNlrIGFMjRgsaNmbUaCGGjJkZLcrcqEETR4wxN2DEsCHiYZg6YzLuLPPyBhkYLW7gqCHmpAwxZVqEmTHjRgszN2LUsIFSTAwYY2b0hEjGDkUcNHLgeAinjhiKWtX6hANnoQwZNGasFTEHzkQdeW1SrVgGD50vff9qbBhD7MMxberqkJGV6gyfLik-FOPGDcUcKG3YkPGwjRuMOhrfhcHWNGobNWhUrBMjIxo6dODM0fHixZk3LvCwSWNHDhk5Lsa8afNiTpswcnK_gfMihgwcMGTkUGrDDFQyObqXwYGdKgwxYmDgmFFmzJgysstYfxpGfRnKMWLkUC9mDOgc7L1kw3o00PBDHXMglAQZPZRBBg1lzFBgDjJkF0aBYXwkmFYw3BBGDmRYF8ZN4ckwgwwx4GADDPCJYYZ7MoQxohhUjUjedmKsWAYXdcCQnQ1zvFGHHO8t2AN-lvHooww2tFFGG1DJYeQUV9AgBA517AcDHTE8UUcaOKzRhhBfXMHEEWjIUMYXR0AR5h1O1FEGHVg0MQMWNgQRhRtE2NHCE3jAYUcUeUyBAxFfEGFGFknMgUMTcBjR1hBMIBEFDXE4AYMVd0CBUxxT5ABFE2hYYWYROMyhRg5VMKHGHXOEsYYRU4hBhBtfxKBGFmN8cUYVSRAhRRVpKPkjHDH0EFhjDRnLpBh14PaGG0O8wcYbcvRQgokAwrCiDc7aMJwdZQhh0BllVHttttvOYIYZHXY4FhnLZTRHGnm8QUcadKCRXL2PhfHXFg11sZkZC8Hggo81PCSHHZLVwJoIdXyZkRk5hGGixGOwZBMNTgHYwno4kNFCDWOQMQYNMphRA1EwOCZCGpKJkEMMLuznAssuaEXDWHJ8QXNGN-esMM8-j1VHGBk18YYeabDBRhgv1LAwCChckYYb9MIKghNUgPDVwjuAoLUbXJWNR9ogPJwaDFbDkAIIR7S3xhsvVPiVTjqBYEQachD1Bh7Vwb3wWO5l5MQTY2H7ReI6iLD4WGwEFXkRTsxbhh1fBM4GRTXcoNQMA_ro8BmeTVYDDjc8dBDnYsixEHmub_5FG2-QYZeKFR33xkKXifCGQoCxJcfgeSzUsAiBIxz5bbnt1tu9-e7b77_MjTXHwxkdT4fA2LZQhxv8tpCiC2TI0Pj2ZqWGg1ow5CBx75aLcNAX6Y9FRxsU5aQfaDd6yP7Ulxr_5QCA74sLZjpXhr58QWD908kBaUCevdguDGxACB2IRzAaGAwiYlDMQT5SBzZMhC2VS9hjUAODPiggIA%3D%3D&s=fcb576f3aa922b577ad44e5397fb726f6e31f944966c7057e641e364c6950cb21701994889&w=t&r=1&d=758&priv=true
IP
ASN #24940 Hetzner Online GmbH
Requested by https://tsyndicate.com/iframes2/860b26275c5a4988aba5f1f983f095d9.html?extid=33113
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type ASCII text, with no line terminators
Hash 0959ba36d476b6dc1994ba3c678b07c4
d30b94da72daa02766965206a85b7e0356375f5e
897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0DEjBgsRYcbQWehQBJ0zC0U0DFMGhpkwNlrIGFMjRgsaNmbUaCGGjJkZLcrcqEETR4wxN2DEsCHiYZg6YzLuLPPyBhkYLW7gqCHmpAwxZVqEmTHjRgszN2LUsIFSTAwYY2b0hEjGDkUcNHLgeAinjhiKWtX6hANnoQwZNGasFTEHzkQdeW1SrVgGD50vff9qbBhD7MMxberqkJGV6gyfLik-FOPGDcUcKG3YkPGwjRuMOhrfhcHWNGobNWhUrBMjIxo6dODM0fHixZk3LvCwSWNHDhk5Lsa8afNiTpswcnK_gfMihgwcMGTkUGrDDFQyObqXwYGdKgwxYmDgmFFmzJgysstYfxpGfRnKMWLkUC9mDOgc7L1kw3o00PBDHXMglAQZPZRBBg1lzFBgDjJkF0aBYXwkmFYw3BBGDmRYF8ZN4ckwgwwx4GADDPCJYYZ7MoQxohhUjUjedmKsWAYXdcCQnQ1zvFGHHO8t2AN-lvHooww2tFFGG1DJYeQUV9AgBA517AcDHTE8UUcaOKzRhhBfXMHEEWjIUMYXR0AR5h1O1FEGHVg0MQMWNgQRhRtE2NHCE3jAYUcUeUyBAxFfEGFGFknMgUMTcBjR1hBMIBEFDXE4AYMVd0CBUxxT5ABFE2hYYWYROMyhRg5VMKHGHXOEsYYRU4hBhBtfxKBGFmN8cUYVSRAhRRVpKPkjHDH0EFhjDRnLpBh14PaGG0O8wcYbcvRQgokAwrCiDc7aMJwdZQhh0BllVHttttvOYIYZHXY4FhnLZTRHGnm8QUcadKCRXL2PhfHXFg11sZkZC8Hggo81PCSHHZLVwJoIdXyZkRk5hGGixGOwZBMNTgHYwno4kNFCDWOQMQYNMphRA1EwOCZCGpKJkEMMLuznAssuaEXDWHJ8QXNGN-esMM8-j1VHGBk18YYeabDBRhgv1LAwCChckYYb9MIKghNUgPDVwjuAoLUbXJWNR9ogPJwaDFbDkAIIR7S3xhsvVPiVTjqBYEQachD1Bh7Vwb3wWO5l5MQTY2H7ReI6iLD4WGwEFXkRTsxbhh1fBM4GRTXcoNQMA_ro8BmeTVYDDjc8dBDnYsixEHmub_5FG2-QYZeKFR33xkKXifCGQoCxJcfgeSzUsAiBIxz5bbnt1tu9-e7b77_MjTXHwxkdT4fA2LZQhxv8tpCiC2TI0Pj2ZqWGg1ow5CBx75aLcNAX6Y9FRxsU5aQfaDd6yP7Ulxr_5QCA74sLZjpXhr58QWD908kBaUCevdguDGxACB2IRzAaGAwiYlDMQT5SBzZMhC2VS9hjUAODPiggIA%3D%3D&s=fcb576f3aa922b577ad44e5397fb726f6e31f944966c7057e641e364c6950cb21701994889&w=t&r=1&d=758&priv=true HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03; bfq=APeIECNCx5YZN2QkhCGjCwsRYwpuieFQRBmJMW4whIEjhgwcOLr0URAQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:30 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/error?errorcode=400&p=APeICDOGjggdMFgMhAPnII0bN2TQUDimTUMdMWTgqDEDh0IxbtwcxBEDBw0bNRTSaXMwxg0YMXLkoIGjpso2Mlq-jDmzJg6NNxTCYTPmYEIRY84Y7aMgIA%3D%3D&s=c4de6c52110247be418b4c22ddf86c944b98ae2784e8579519e82244d88801a71701994888
200 OK 0 B URL GET HTTP/2 pxl.tsyndicate.com/api/v1/error?errorcode=400&p=APeICDOGjggdMFgMhAPnII0bN2TQUDimTUMdMWTgqDEDh0IxbtwcxBEDBw0bNRTSaXMwxg0YMXLkoIGjpso2Mlq-jDmzJg6NNxTCYTPmYEIRY84Y7aMgIA%3D%3D&s=c4de6c52110247be418b4c22ddf86c944b98ae2784e8579519e82244d88801a71701994888
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/error?errorcode=400&p=APeICDOGjggdMFgMhAPnII0bN2TQUDimTUMdMWTgqDEDh0IxbtwcxBEDBw0bNRTSaXMwxg0YMXLkoIGjpso2Mlq-jDmzJg6NNxTCYTPmYEIRY84Y7aMgIA%3D%3D&s=c4de6c52110247be418b4c22ddf86c944b98ae2784e8579519e82244d88801a71701994888 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03; bfq=APeIECNCx5YZN2QkhCGjCwsRYwpuieFQRBmJMW4whIEjhgwcOLr0URAQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:30 GMT
content-length: 0
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
cdn.zblkqa.com/video/369ff797f3cc003659037870bc3ad781.mp4?cb=1701994851
206 Partial Content 60 kB URL GET HTTP/2 cdn.zblkqa.com/video/369ff797f3cc003659037870bc3ad781.mp4?cb=1701994851
IP
Certificate IssuerSectigo Limited
Subject*.zblkqa.com
Fingerprint78:E7:B2:86:25:92:88:24:6D:8D:51:1E:AC:78:AC:9C:F3:91:E1:EA
ValidityTue, 17 Oct 2023 00:00:00 GMT - Sat, 16 Nov 2024 23:59:59 GMT
Hash ed0120d349d8d69de50984fd2009bdad
4145e5b26e72612f8fa36b060dbb161839e058b4
69c2fc03c8127145bc7d3e436ae75fc10e3100ee6a4b61aec515fd53afa0570d
GET /video/369ff797f3cc003659037870bc3ad781.mp4?cb=1701994851 HTTP/1.1
Host: cdn.zblkqa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=2228224-
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
date: Fri, 08 Dec 2023 00:21:30 GMT
content-type: binary/octet-stream
content-length: 60195
etag: "426ba811a0d2999c8dfab570dedb9ae8"
expires: Fri, 08 Dec 2023 01:20:50 GMT
last-modified: Fri, 08 Dec 2023 00:20:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-id-2: 94a460e0dcf2f60a9faaed7ce204d47323cebdcc235ebc02887411104840154e
x-amz-request-id: 179EB34D138589C6
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=28800
cf-cache-status: HIT
server: cloudflare
cf-ray: 8320d892adf3671e-AMS
alt-svc: h3=":443"; ma=86400
age: 28
content-range: bytes 2228224-2288418/2288419
X-Firefox-Spdy: h2
video.ktkjmp.com/adsbygoogle.js
200 OK 16 B URL GET HTTP/2 video.ktkjmp.com/adsbygoogle.js
IP
Requested by https://creative.fxmnba.com/widgets/v4/Universal?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&mlView=1&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&usePreroll=0&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&webp=1
Certificate IssuerCloudflare, Inc.
Subjectvideo.ktkjmp.com
Fingerprint02:C1:75:9D:DD:6A:66:20:9E:A3:46:1B:5E:A4:87:83:5A:09:92:93
ValiditySun, 02 Jul 2023 00:00:00 GMT - Mon, 01 Jul 2024 23:59:59 GMT
Hash 3d7f7a60216d40dea48e495fef6903c9
fecdb5184f55cf012563d78940eb97b10b9cc99b
96d83ac9f20fc0b88404f307f135e212642e02d6ea295c96b28aed0d771a224f
GET /adsbygoogle.js HTTP/1.1
Host: video.ktkjmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.fxmnba.com/
Origin: https://creative.fxmnba.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:30 GMT
content-type: application/javascript
content-length: 16
x-amz-id-2: dEdxUPNeQd2x7nXk7wQjTm049kiBblue+idUQQ4zUyE0gMefrCpEYWmiGH2nvC08TFO/yDXCoHe2ueOkGHSa9w==
x-amz-request-id: BQ8FC22TSNZKMNPP
last-modified: Thu, 10 Mar 2022 13:52:07 GMT
etag: "3d7f7a60216d40dea48e495fef6903c9"
x-amz-meta-s3cmd-attrs: atime:1646920284/ctime:1646920283/gid:20/gname:staff/md5:3d7f7a60216d40dea48e495fef6903c9/mode:33188/mtime:1646920283/uid:501/uname:mikhailchubar
x-amz-version-id: eIgLIBoMMcsEXtxOH6UDjWyfAquRpkIG
access-control-allow-origin: https://creative.fxmnba.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: HIT
age: 4990
expires: Fri, 08 Dec 2023 04:21:30 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d94158717127-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
vast.yomeno.xyz/report?e_type=Error&rep=tc_vast&source=1255254910&tcid=17172&iab=IAB25&p=&ccid=&ctype=slider&uid=61a113beeb5c1307f0131429d929c04f&endpoint=&error=3
204 No Content 0 B URL GET HTTP/2 vast.yomeno.xyz/report?e_type=Error&rep=tc_vast&source=1255254910&tcid=17172&iab=IAB25&p=&ccid=&ctype=slider&uid=61a113beeb5c1307f0131429d929c04f&endpoint=&error=3
IP
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint47:BF:55:36:FD:42:8F:D1:07:8C:09:CC:51:6C:15:28:BA:50:45:E3
ValidityFri, 24 Nov 2023 03:03:11 GMT - Thu, 22 Feb 2024 03:03:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /report?e_type=Error&rep=tc_vast&source=1255254910&tcid=17172&iab=IAB25&p=&ccid=&ctype=slider&uid=61a113beeb5c1307f0131429d929c04f&endpoint=&error=3 HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx/1.20.1
date: Fri, 08 Dec 2023 00:21:30 GMT
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: *
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
vast.yomeno.xyz/report?e_type=Error&rep=tc_vast&source=1255254910&tcid=17172&iab=IAB25&p=&ccid=&ctype=slider&uid=61a113beeb5c1307f0131429d929c04f&endpoint=&error=400
204 No Content 0 B URL GET HTTP/2 vast.yomeno.xyz/report?e_type=Error&rep=tc_vast&source=1255254910&tcid=17172&iab=IAB25&p=&ccid=&ctype=slider&uid=61a113beeb5c1307f0131429d929c04f&endpoint=&error=400
IP
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint47:BF:55:36:FD:42:8F:D1:07:8C:09:CC:51:6C:15:28:BA:50:45:E3
ValidityFri, 24 Nov 2023 03:03:11 GMT - Thu, 22 Feb 2024 03:03:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /report?e_type=Error&rep=tc_vast&source=1255254910&tcid=17172&iab=IAB25&p=&ccid=&ctype=slider&uid=61a113beeb5c1307f0131429d929c04f&endpoint=&error=400 HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx/1.20.1
date: Fri, 08 Dec 2023 00:21:30 GMT
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: *
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/7849114002108353095?c=60&data[error]=3
200 OK 0 B URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/7849114002108353095?c=60&data[error]=3
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/7849114002108353095?c=60&data[error]=3 HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:30 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/7849114002108353095?c=60&data[error]=400
200 OK 0 B URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/click/7849114002108353095?c=60&data[error]=400
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/7849114002108353095?c=60&data[error]=400 HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:30 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/error?errorcode=3&p=APeICDOGjggdMFgMhAPnII0ZNW7kUDimTUMdNmTkwDHDhkIxbtwcnHFDRowYORKKoNPmYIwbMFDmoIGjpkKWMlzClEmzZowaMhTCYTPmoMoxZ4z2URAQ&s=4fc2b7cc40beb0e847470af9c60ca5048adf0487cc0e1f6cecc231ea3b315f091701994888
200 OK 0 B URL GET HTTP/2 pxl.tsyndicate.com/api/v1/error?errorcode=3&p=APeICDOGjggdMFgMhAPnII0ZNW7kUDimTUMdNmTkwDHDhkIxbtwcnHFDRowYORKKoNPmYIwbMFDmoIGjpkKWMlzClEmzZowaMhTCYTPmoMoxZ4z2URAQ&s=4fc2b7cc40beb0e847470af9c60ca5048adf0487cc0e1f6cecc231ea3b315f091701994888
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/error?errorcode=3&p=APeICDOGjggdMFgMhAPnII0ZNW7kUDimTUMdNmTkwDHDhkIxbtwcnHFDRowYORKKoNPmYIwbMFDmoIGjpkKWMlzClEmzZowaMhTCYTPmoMoxZ4z2URAQ&s=4fc2b7cc40beb0e847470af9c60ca5048adf0487cc0e1f6cecc231ea3b315f091701994888 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03; bfq=APeIECNCx5YZN2QkhCGjCwsRYwpuieFQRBmJMW4whIEjhgwcOLr0URAQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:30 GMT
content-length: 0
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/error?errorcode=400&p=APeICDOGjggdMFgMhAPnII0ZNW7kUDimTUMdNmTkwDHDhkIxbtwcnHFDRowYORKKoNPmYIwbMFDmoIGjpkKWMlzClEmzZowaMhTCYTPmoMoxZ4z2URAQ&s=4fc2b7cc40beb0e847470af9c60ca5048adf0487cc0e1f6cecc231ea3b315f091701994888
200 OK 0 B URL GET HTTP/2 pxl.tsyndicate.com/api/v1/error?errorcode=400&p=APeICDOGjggdMFgMhAPnII0ZNW7kUDimTUMdNmTkwDHDhkIxbtwcnHFDRowYORKKoNPmYIwbMFDmoIGjpkKWMlzClEmzZowaMhTCYTPmoMoxZ4z2URAQ&s=4fc2b7cc40beb0e847470af9c60ca5048adf0487cc0e1f6cecc231ea3b315f091701994888
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/error?errorcode=400&p=APeICDOGjggdMFgMhAPnII0ZNW7kUDimTUMdNmTkwDHDhkIxbtwcnHFDRowYORKKoNPmYIwbMFDmoIGjpkKWMlzClEmzZowaMhTCYTPmoMoxZ4z2URAQ&s=4fc2b7cc40beb0e847470af9c60ca5048adf0487cc0e1f6cecc231ea3b315f091701994888 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03; bfq=APeIECNCx5YZN2QkhCGjCwsRYwpuieFQRBmJMW4whIEjhgwcOLr0URAQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:30 GMT
content-length: 0
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
go.fxmnba.com/abc.gif?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&modelsLimit=1&actionButtonPlacement=bottom&thumbSizeKey=big&hideButtonOnSmallSpots=1&hideTitleOnSmallSpots=1&hideModelNameOnSmallSpots=1&language=en&thumbFit=cover&stripcashR=0&thumbType=default&kbLimit=0&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=1&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Ftsyndicate.com%2F&i=0&ib=0&filtersMatch=0&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A687%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A497%2C%22duration%22%3A58%2C%22transferSize%22%3A4625%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A498%2C%22duration%22%3A67%2C%22transferSize%22%3A80913%7D%5D&mh=1467222103
200 OK 103 B URL GET HTTP/3 go.fxmnba.com/abc.gif?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&modelsLimit=1&actionButtonPlacement=bottom&thumbSizeKey=big&hideButtonOnSmallSpots=1&hideTitleOnSmallSpots=1&hideModelNameOnSmallSpots=1&language=en&thumbFit=cover&stripcashR=0&thumbType=default&kbLimit=0&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=1&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Ftsyndicate.com%2F&i=0&ib=0&filtersMatch=0&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A687%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A497%2C%22duration%22%3A58%2C%22transferSize%22%3A4625%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A498%2C%22duration%22%3A67%2C%22transferSize%22%3A80913%7D%5D&mh=1467222103
IP
Requested by https://creative.fxmnba.com/widgets/v4/Universal?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&mlView=1&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&usePreroll=0&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&webp=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint11:C8:29:33:4C:A0:2A:F3:EF:92:BC:95:11:62:B8:7A:AD:73:70:42
ValiditySun, 26 Feb 2023 00:00:00 GMT - Sun, 25 Feb 2024 23:59:59 GMT
Hash 8c99886486b9a004383cb4df29011c43
d79ca4754481fc59598bc08fcdf354900918bffe
bda00b0f6892b1c6991e793b42654ad1807694e2ffabcbc4eb1399379737ef6c
GET /abc.gif?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&modelsLimit=1&actionButtonPlacement=bottom&thumbSizeKey=big&hideButtonOnSmallSpots=1&hideTitleOnSmallSpots=1&hideModelNameOnSmallSpots=1&language=en&thumbFit=cover&stripcashR=0&thumbType=default&kbLimit=0&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=1&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Ftsyndicate.com%2F&i=0&ib=0&filtersMatch=0&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A687%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A497%2C%22duration%22%3A58%2C%22transferSize%22%3A4625%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A498%2C%22duration%22%3A67%2C%22transferSize%22%3A80913%7D%5D&mh=1467222103 HTTP/1.1
Host: go.fxmnba.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.fxmnba.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:30 GMT
content-type: image/gif
content-length: 103
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDFRFiBZBvMSLtr56RXfnndb8PqaJ1Sfvx1Fw5qzU; SameSite=None; Secure; path=/; expires=Sat, 09-Dec-23 00:21:30 GMT; HttpOnly
server: cloudflare
cf-ray: 8320d942ac1c56bf-OSL
alt-svc: h3=":443"; ma=86400
img.strpst.com/thumbs/1701994830/28081602_webp
200 OK 15 kB URL GET HTTP/2 img.strpst.com/thumbs/1701994830/28081602_webp
IP
Requested by https://creative.fxmnba.com/widgets/v4/Universal?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&mlView=1&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&usePreroll=0&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&webp=1
Certificate IssuerCloudflare, Inc.
Subjectimg.strpst.com
FingerprintED:62:74:FE:E4:F5:89:43:B3:49:55:FE:18:19:0D:29:24:96:75:BC
ValidityMon, 03 Apr 2023 00:00:00 GMT - Tue, 02 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 35753a6d1e38385e81e7cf5bb735db49
a76c983d9a036db8eedfa417e41c320314ef34bf
2af03fe7d77632d8fb6c24783afd17e0918f7dc25a41ed1719f8e60f32ee5189
GET /thumbs/1701994830/28081602_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.fxmnba.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:30 GMT
content-type: image/webp
content-length: 15084
etag: "35753a6d1e38385e81e7cf5bb735db49"
last-modified: Fri, 08 Dec 2023 00:20:05 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 56
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d9431c4f56c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
stripchat.ooo/checkUrl
200 OK 15 B IP
Requested by https://creative.fxmnba.com/widgets/v4/Universal?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&mlView=1&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&usePreroll=0&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&webp=1
Certificate IssuerCloudflare, Inc.
Subjectstripchat.ooo
Fingerprint5B:8E:D1:E7:D7:97:C5:21:F2:12:B5:53:F5:82:28:FF:E1:6C:D9:B2
ValidityWed, 10 May 2023 00:00:00 GMT - Wed, 08 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7fb97eb7c8636552ad068f6d56b5ea34
b69679936779fb02503bc0fe1374a737cc762ecb
e78008828abaa93c4462e326ef384dcda1443352a0f24bdeedada6a6fdbfd1d5
GET /checkUrl HTTP/1.1
Host: stripchat.ooo
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Referer: https://creative.fxmnba.com/
Origin: https://creative.fxmnba.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:30 GMT
content-type: application/json
content-length: 15
access-control-allow-origin: https://creative.fxmnba.com
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuGyDLPvii6XBe577FFREDmAeDkJWyVwuLrocFVdye; SameSite=None; Secure; path=/; expires=Sat, 09-Dec-23 00:21:30 GMT; HttpOnly
server: cloudflare
cf-ray: 8320d943bfbcb523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
go.fxmnba.com/event/ml
200 OK 125 B IP
Requested by https://creative.fxmnba.com/widgets/v4/Universal?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&mlView=1&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&usePreroll=0&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&webp=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint11:C8:29:33:4C:A0:2A:F3:EF:92:BC:95:11:62:B8:7A:AD:73:70:42
ValiditySun, 26 Feb 2023 00:00:00 GMT - Sun, 25 Feb 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 95a353493f05fb90126f36111d4693a0
ed64a8f094d9f2354ea42490dae57b7bf7a44f45
ab2ea26b191cbd659f1f4e23137f7b61a23e42830c1aaa32d48ffde4b55792e5
POST /event/ml HTTP/1.1
Host: go.fxmnba.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.fxmnba.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 172
Origin: https://creative.fxmnba.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:30 GMT
content-type: application/json
access-control-allow-origin: https://creative.fxmnba.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=0H28upDCGznfDm9XVDQgYY38nUsBbmcYoYHQkP9Uj2k; SameSite=None; Secure; path=/; expires=Sat, 09-Dec-23 00:21:30 GMT; HttpOnly
server: cloudflare
cf-ray: 8320d9444cd456bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
justthegays.com/cdn-cgi/rum?
204 No Content 0 B URL POST HTTP/2 justthegays.com/cdn-cgi/rum?
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 439
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.1.1701994893.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a; naslvq=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Fri, 08 Dec 2023 00:21:43 GMT
access-control-allow-origin: https://justthegays.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 8320d9927bfb712a-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
justthegays.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.8.0
200 OK 20 kB URL GET HTTP/2 justthegays.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.8.0
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type ASCII text, with very long lines (19905)
Hash 596d6e5d8400fd1e913f9adc21071f93
fee2d7a4ac08d5a522c2298a5ad3ed30ac9e62ec
159faf7827be43b4c85a35fc941924a9de59a169d42d600b49161f60debf9dff
GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.8.0 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:41:31 GMT
etag: W/"4e9c-62ee6c32-6570432;gz"
last-modified: Sat, 06 Aug 2022 13:27:14 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 45595
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lsUM4v7zb1WyiFuSaofo5%2FN%2F4jIb7MqWYZzU8uCtxsbpH8dyUcEGW5rSckbsP1Uw3SH4k79D%2FIeOI4FwCKEDt70K4GmA6DA5P%2Bdi1E5HOlcBBW0XMnVvI5eQav%2BvNvBABw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d926cf17712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
creative.fxmnba.com/widgets/v4/Universal/main.af7ca474e642b518be23.css
200 OK 13 kB URL GET HTTP/3 creative.fxmnba.com/widgets/v4/Universal/main.af7ca474e642b518be23.css
IP
Requested by https://creative.fxmnba.com/widgets/v4/Universal?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&mlView=1&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&usePreroll=0&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&webp=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint11:C8:29:33:4C:A0:2A:F3:EF:92:BC:95:11:62:B8:7A:AD:73:70:42
ValiditySun, 26 Feb 2023 00:00:00 GMT - Sun, 25 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (13396), with no line terminators
Hash d55b785d72863fbb8425a36b7d675ec2
546cda15b6fb2a67ce1f102dc82eefb6f749f9c3
a4d09f6a50b6d96e7f22ab12f406dcf44be0d815105018cc5c7f1105fbf597f7
GET /widgets/v4/Universal/main.af7ca474e642b518be23.css HTTP/1.1
Host: creative.fxmnba.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.fxmnba.com/widgets/v4/Universal?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&mlView=1&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&usePreroll=0&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&webp=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:30 GMT
content-type: text/css
last-modified: Tue, 05 Dec 2023 10:59:44 GMT
etag: W/"656f02a0-3454"
expires: Fri, 08 Dec 2023 00:21:36 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 2
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d93eea3a56bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/agent.php?spot=407029
200 OK 455 B URL GET HTTP/2 6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/agent.php?spot=407029
IP
Certificate IssuerGoogle Trust Services LLC
Subject6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
Fingerprint5E:05:47:10:6A:E9:55:A1:23:BC:44:80:A8:7E:BF:53:71:77:6B:31
ValidityFri, 03 Nov 2023 17:07:36 GMT - Thu, 01 Feb 2024 17:07:35 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (496), with no line terminators
Hash 7bde22e8dbc35223babeafc51f7650f5
3c922b0a27a86a9d823e8dae25fcc5220616473f
2d5e0263cc0b32d95b2c58bc594bbd25814e14a8fbeaa471b8fddaa4298f868a
GET /agent.php?spot=407029 HTTP/1.1
Host: 6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.1.24
vary: Accept-Encoding
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x6GZsBRH%2BDNqMirvGPTpyr%2Bn%2Fy0kgOUv25tyeFlWUWGJqfOEVp61q1h48PvhjLjS3ZttT0KdAd1NCaZqOBRos%2BXRJcgsMVpLrCvmJtdhxMS1bRQD7yfx9oI5N5PN%2BmkBbz3hBvt4SQkKVS3Ku46VTg3UMbuDMzw1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d9290a0b568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
creative.fxmnba.com/widgets/v4/Universal?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&mlView=1&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&usePreroll=0&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&webp=1
200 OK 811 B URL GET HTTP/2 creative.fxmnba.com/widgets/v4/Universal?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&mlView=1&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&usePreroll=0&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&webp=1
IP
Requested by https://tsyndicate.com/iframes2/860b26275c5a4988aba5f1f983f095d9.html?extid=33113
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint11:C8:29:33:4C:A0:2A:F3:EF:92:BC:95:11:62:B8:7A:AD:73:70:42
ValiditySun, 26 Feb 2023 00:00:00 GMT - Sun, 25 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (872), with no line terminators
Hash 1508368ec567cd06853cdc259448ba42
70e10e55e4dd745b14b67bbae46608a7914ba08e
41d36e18fd13233271ebc47fd2ddbb53792aa280cbce63af0b02d23c13d851ab
GET /widgets/v4/Universal?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&mlView=1&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&usePreroll=0&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&webp=1 HTTP/1.1
Host: creative.fxmnba.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tsyndicate.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:29 GMT
content-type: text/html
last-modified: Tue, 05 Dec 2023 10:58:14 GMT
expires: Fri, 08 Dec 2023 00:21:34 GMT
cache-control: max-age=10
strict-transport-security: max-age=15768000
pragma: public
report-to: { "endpoints":[{ "url": "https://go.stripchat.com/report" }], "group": "default", "max_age": 1048576 }
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: HIT
age: 1
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d93dce7056c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/16140767996794732095/2011914?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos
200 OK 2.2 kB URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/16140767996794732095/2011914?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type XML document, ASCII text, with very long lines (2245), with no line terminators
Hash 4b5bcd26b51e5d284b92d2d067bf1754
362961ce763d68c8def6a3e441059e7ec766aabe
ed40481e3d794a77a83f004935ffe72d0437fa71608b76371f6cb4701f5f7cd6
GET /api/users/16140767996794732095/2011914?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://justthegays.com
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
r.visitstats.com/rotate/vast?&cisai=33426&click_id=e410f000-d0bc-4627-bf45-1f18acf40421&IN_STREAM_AD_CREATIVE_ID=%5BURL_ID%5D&MOBILE_BRAND=&cisaci=%5BURL_ID%5D&out_name=180220%7C28251%7Ccpm%7C0.2125%7C%24+0.2500&r=76Yh32&CAMPAIGN_ID=180220&BROWSER_FAMILY=Firefox&COUNTRY_ISO_CODE=NO&OS_TYPE=Windows&OS_FAMILY=%5BOS_FAMILY%5D&pricebox_price=0.0100&pricing_model=cpm&AD_ID=172518&price=0.2500&DOMAIN=justthegays.com&spot_id=41553&bidding_price=0.0099&sub=2064504432&ad_sub=2064504432&utm1=tcb&utm2=1137795792-100&utm3=352-180488-13128&utm4=-11218966-0&is_cpa=
200 OK 3.6 kB URL GET HTTP/2 r.visitstats.com/rotate/vast?&cisai=33426&click_id=e410f000-d0bc-4627-bf45-1f18acf40421&IN_STREAM_AD_CREATIVE_ID=%5BURL_ID%5D&MOBILE_BRAND=&cisaci=%5BURL_ID%5D&out_name=180220%7C28251%7Ccpm%7C0.2125%7C%24+0.2500&r=76Yh32&CAMPAIGN_ID=180220&BROWSER_FAMILY=Firefox&COUNTRY_ISO_CODE=NO&OS_TYPE=Windows&OS_FAMILY=%5BOS_FAMILY%5D&pricebox_price=0.0100&pricing_model=cpm&AD_ID=172518&price=0.2500&DOMAIN=justthegays.com&spot_id=41553&bidding_price=0.0099&sub=2064504432&ad_sub=2064504432&utm1=tcb&utm2=1137795792-100&utm3=352-180488-13128&utm4=-11218966-0&is_cpa=
IP
Certificate IssuerLet's Encrypt
Subjectr.visitstats.com
Fingerprint90:DB:DE:C0:16:01:DD:90:1C:7E:5F:1A:EC:4C:BB:7A:C8:1A:C5:78
ValiditySun, 29 Oct 2023 03:07:20 GMT - Sat, 27 Jan 2024 03:07:19 GMT
File type XML document, ASCII text, with very long lines (3632), with no line terminators
Hash 11c19c1f3d490f2c598520884c0c7d44
92bedc91d7435ea7ffffe9eadd5392fff29e618a
111f68d5861478066e5280e292e45412cb0944c1490a040ae0cecc630c9ec0a6
GET /rotate/vast?&cisai=33426&click_id=e410f000-d0bc-4627-bf45-1f18acf40421&IN_STREAM_AD_CREATIVE_ID=%5BURL_ID%5D&MOBILE_BRAND=&cisaci=%5BURL_ID%5D&out_name=180220%7C28251%7Ccpm%7C0.2125%7C%24+0.2500&r=76Yh32&CAMPAIGN_ID=180220&BROWSER_FAMILY=Firefox&COUNTRY_ISO_CODE=NO&OS_TYPE=Windows&OS_FAMILY=%5BOS_FAMILY%5D&pricebox_price=0.0100&pricing_model=cpm&AD_ID=172518&price=0.2500&DOMAIN=justthegays.com&spot_id=41553&bidding_price=0.0099&sub=2064504432&ad_sub=2064504432&utm1=tcb&utm2=1137795792-100&utm3=352-180488-13128&utm4=-11218966-0&is_cpa= HTTP/1.1
Host: r.visitstats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 08 Dec 2023 00:21:28 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://justthegays.com
content-encoding: gzip
X-Firefox-Spdy: h2
136cb85b18.ebb174824f.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI4NjIyMDE3Mjc2MDc3MTc3MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuOTUuMCIsInRhZ19pZCI6NjM5NDksInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MC4xOCwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowLCJ1c2VyX2tleXdvcmRzIjoiIn0=
200 OK 0 B URL GET HTTP/2 136cb85b18.ebb174824f.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI4NjIyMDE3Mjc2MDc3MTc3MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuOTUuMCIsInRhZ19pZCI6NjM5NDksInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MC4xOCwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowLCJ1c2VyX2tleXdvcmRzIjoiIn0=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/agent.php?spot=407030
Certificate IssuerLet's Encrypt
Subject136cb85b18.ebb174824f.com
Fingerprint2D:8E:25:F0:3B:0B:9C:49:94:68:F9:02:32:6D:A7:B0:49:B6:A5:69
ValidityTue, 05 Dec 2023 02:50:16 GMT - Mon, 04 Mar 2024 02:50:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI4NjIyMDE3Mjc2MDc3MTc3MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuOTUuMCIsInRhZ19pZCI6NjM5NDksInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MC4xOCwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowLCJ1c2VyX2tleXdvcmRzIjoiIn0= HTTP/1.1
Host: 136cb85b18.ebb174824f.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:27 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
tsyndicate.com/iframes2/860b26275c5a4988aba5f1f983f095d9.html?extid=33113
200 OK 7.2 kB URL GET HTTP/2 tsyndicate.com/iframes2/860b26275c5a4988aba5f1f983f095d9.html?extid=33113
IP
ASN #24940 Hetzner Online GmbH
Requested by https://siyotith.com/sn.php
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (7265), with no line terminators
Hash 5eb17f552c6a1b46ec6d184bb31b9b3e
f9d1dc13321c8b49d16ff8c3fcf03fb4c64e64e0
8c38b2305d5d8a28d444d6a30d663875d4ff283eb19cbaee84cb64c8bf1f89fa
GET /iframes2/860b26275c5a4988aba5f1f983f095d9.html?extid=33113 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://siyotith.com/
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03; bfq=APeIECNCx5YZN2QkhCGjCwsRYwpuieFQRBmJMW4whIEjhgwcOLr0URAQ
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:29 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: 138f148b6de6dd51
set-cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03; expires=Sat, 08 Jun 2024 00:21:29 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCx5YZN2QkhCGjCwsRYwpuieFQRBmJMW4whIEjhgwcOLr0URAQ; expires=Sat, 09 Dec 2023 00:21:29 GMT; domain=.tsyndicate.com; path=/; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/6010342150592530095/1995701?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos
200 OK 2.2 kB URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/6010342150592530095/1995701?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type XML document, ASCII text, with very long lines (2266), with no line terminators
Hash 03ad57f553b3f6a2682f07fb24bd56b0
73e2e997ba59eeee6e5cc40202415692f746162c
f7ebf38d9dbca0ff515d548072c0417c948d343bc8cbe1c85a5e64b33bc18263
GET /api/users/6010342150592530095/1995701?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://justthegays.com
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
go.fxmnba.com/api/models?quality=240p&webp=1&forceClient=1&stripcashR=0&limit=1&usePreroll=0
200 OK 1.8 kB URL GET HTTP/3 go.fxmnba.com/api/models?quality=240p&webp=1&forceClient=1&stripcashR=0&limit=1&usePreroll=0
IP
Requested by https://creative.fxmnba.com/widgets/v4/Universal?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&mlView=1&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&usePreroll=0&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&webp=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint11:C8:29:33:4C:A0:2A:F3:EF:92:BC:95:11:62:B8:7A:AD:73:70:42
ValiditySun, 26 Feb 2023 00:00:00 GMT - Sun, 25 Feb 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1918), with no line terminators
Hash d7fd7632719fd9c71fe520862577cd23
bc19c3d58fd9fcfea14ceb88845863a38048021a
44ea231e1e08cfa433753739716e5b5c5edc120519c574e10025fe3482ff2915
GET /api/models?quality=240p&webp=1&forceClient=1&stripcashR=0&limit=1&usePreroll=0 HTTP/1.1
Host: go.fxmnba.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.fxmnba.com/
Origin: https://creative.fxmnba.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:30 GMT
content-type: application/json
access-control-allow-origin: https://creative.fxmnba.com
access-control-allow-credentials: true
vary: Origin, Accept-Encoding
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
last-modified: Fri, 08 Dec 2023 00:21:18 GMT
cf-cache-status: HIT
age: 7
server: cloudflare
cf-ray: 8320d9427c0956bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
go.cambaddies.com/api/models/vast?action=sbSignupWithModel&campaignId=68260928b57f412a654bda3f2409e8c9a61a69f506dc4ba3c073a43c2be31490&campaignType=smartpop&contentType=video%2Fmp4&creativeId=0fe634b4ed7128d94852002b593185fc904d0c54974e9bbbec389730ba324b3e&duration=00%3A00%3A30&iterationId=745527&masterSmartpopId=2683&memberId=5cf352c6-0703-43d2-ba91-921e0cd097ce&mlView=1&no_bb=1&p1=45081&p2=68073&ruleId=29&skipOffset=00%3A00%3A05&smartpopId=3594&sourceId=14488&usePreroll=true&userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d&variationId=31904&xhVersion=1
200 OK 2.1 kB URL GET HTTP/2 go.cambaddies.com/api/models/vast?action=sbSignupWithModel&campaignId=68260928b57f412a654bda3f2409e8c9a61a69f506dc4ba3c073a43c2be31490&campaignType=smartpop&contentType=video%2Fmp4&creativeId=0fe634b4ed7128d94852002b593185fc904d0c54974e9bbbec389730ba324b3e&duration=00%3A00%3A30&iterationId=745527&masterSmartpopId=2683&memberId=5cf352c6-0703-43d2-ba91-921e0cd097ce&mlView=1&no_bb=1&p1=45081&p2=68073&ruleId=29&skipOffset=00%3A00%3A05&smartpopId=3594&sourceId=14488&usePreroll=true&userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d&variationId=31904&xhVersion=1
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectgo.cambaddies.com
FingerprintBE:84:38:F2:96:A3:05:99:09:75:4C:B9:05:A1:CA:88:81:26:DE:F6
ValidityFri, 20 Oct 2023 09:52:08 GMT - Thu, 18 Jan 2024 09:52:07 GMT
File type XML document, ASCII text, with very long lines (2146), with no line terminators
Hash db52b6a3cd5952a9d0d2dcd71d13f9e8
faa475723691caa3e721ff023ab17617cfed41e6
75b5fa2239170ba3e298e5470acb818c542fd0025264cdfe6943539250a5266c
GET /api/models/vast?action=sbSignupWithModel&campaignId=68260928b57f412a654bda3f2409e8c9a61a69f506dc4ba3c073a43c2be31490&campaignType=smartpop&contentType=video%2Fmp4&creativeId=0fe634b4ed7128d94852002b593185fc904d0c54974e9bbbec389730ba324b3e&duration=00%3A00%3A30&iterationId=745527&masterSmartpopId=2683&memberId=5cf352c6-0703-43d2-ba91-921e0cd097ce&mlView=1&no_bb=1&p1=45081&p2=68073&ruleId=29&skipOffset=00%3A00%3A05&smartpopId=3594&sourceId=14488&usePreroll=true&userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d&variationId=31904&xhVersion=1 HTTP/1.1
Host: go.cambaddies.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: https://justthegays.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
access-control-allow-credentials: true
access-control-allow-origin: null
alt-svc: h3=":443"; ma=2592000
content-encoding: gzip
content-type: text/xml; charset=utf-8
date: Fri, 08 Dec 2023 00:21:28 GMT
strict-transport-security: max-age=15768000
vary: Accept-Encoding
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/6010342150592530095/1985532?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos
200 OK 1.9 kB URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/6010342150592530095/1985532?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type XML document, ASCII text, with very long lines (1968), with no line terminators
Hash 684e5b7d009f558f0e69ef73b0fc76c0
c8a87126a8db75557b83b319c32b1ab5088f8673
ccce4514f1c809f6a0ad66eea5d9537f9d534a3f74007e58adbbb8efbc1c9a14
GET /api/users/6010342150592530095/1985532?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://justthegays.com
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
go.fxmnba.com/config?url=https%3A%2F%2Fcreative.fxmnba.com%2Fwidgets%2Fv4%2FUniversal%3Faction%3DsbSignupWithModel%26buttonColor%3D%2523930606%26campaignId%3D128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344%26campaignType%3Dsmartpop%26creativeId%3Dd61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08%26iterationId%3D765913%26liveBadgeColor%3D%2523ff0707%26masterSmartpopId%3D1914%26memberId%3DSW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi%26mlView%3D1%26p1%3D4381331%26quality%3D240p%26ruleId%3D17%26smartpopId%3D1548%26sourceId%3D271333%26usePreroll%3D0%26userId%3Ded4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e%26variationId%3D32246%26webp%3D1
200 OK 6.8 kB URL GET HTTP/2 go.fxmnba.com/config?url=https%3A%2F%2Fcreative.fxmnba.com%2Fwidgets%2Fv4%2FUniversal%3Faction%3DsbSignupWithModel%26buttonColor%3D%2523930606%26campaignId%3D128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344%26campaignType%3Dsmartpop%26creativeId%3Dd61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08%26iterationId%3D765913%26liveBadgeColor%3D%2523ff0707%26masterSmartpopId%3D1914%26memberId%3DSW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi%26mlView%3D1%26p1%3D4381331%26quality%3D240p%26ruleId%3D17%26smartpopId%3D1548%26sourceId%3D271333%26usePreroll%3D0%26userId%3Ded4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e%26variationId%3D32246%26webp%3D1
IP
Requested by https://creative.fxmnba.com/widgets/v4/Universal?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&mlView=1&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&usePreroll=0&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&webp=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint11:C8:29:33:4C:A0:2A:F3:EF:92:BC:95:11:62:B8:7A:AD:73:70:42
ValiditySun, 26 Feb 2023 00:00:00 GMT - Sun, 25 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (8886), with no line terminators
Hash 4ef6e96b544160ae70e2b62ecd825ec8
6aaeb1c3192761deb62e20c2eca4d629477abbc5
7eb852185b80baad6c7399ce12a340e60e417a6444935af5cd141967f774d313
GET /config?url=https%3A%2F%2Fcreative.fxmnba.com%2Fwidgets%2Fv4%2FUniversal%3Faction%3DsbSignupWithModel%26buttonColor%3D%2523930606%26campaignId%3D128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344%26campaignType%3Dsmartpop%26creativeId%3Dd61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08%26iterationId%3D765913%26liveBadgeColor%3D%2523ff0707%26masterSmartpopId%3D1914%26memberId%3DSW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi%26mlView%3D1%26p1%3D4381331%26quality%3D240p%26ruleId%3D17%26smartpopId%3D1548%26sourceId%3D271333%26usePreroll%3D0%26userId%3Ded4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e%26variationId%3D32246%26webp%3D1 HTTP/1.1
Host: go.fxmnba.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.fxmnba.com/
Origin: https://creative.fxmnba.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:30 GMT
content-type: application/json
access-control-allow-origin: https://creative.fxmnba.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
last-modified: Fri, 08 Dec 2023 00:21:30 GMT
cf-cache-status: MISS
set-cookie: __cflb=02DiuDFRFiBZBvMSLtr56RXfnndb8PqaJ1Sfvx1Fw5qzU; SameSite=None; Secure; path=/; expires=Sat, 09-Dec-23 00:21:30 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d9415c71b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/6010342150592530095/2041374?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos
200 OK 1.9 kB URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/6010342150592530095/2041374?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type XML document, ASCII text, with very long lines (1969), with no line terminators
Hash e3c3d483ea4045b8cd0088fe9fc04f39
e86320da275285d57e83d9e5c861407b5ef13039
31cf55f94c29d8446b00a5fe82dd38387fe63118f0093d8d7963a55dfc2e5452
GET /api/users/6010342150592530095/2041374?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://justthegays.com
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
tsyndicate.com/do2/ebc0426ee6ff4d64baaabe6063b014bc/vast?subid=&categories=gay+porn%2Cgay+porno%2Cgay+teen+porn%2Chot+gay+videos%2Conlyfans%2Cgayforfans%2Cjust+for+fans%2C4myfans%2Ctwink%2Csex%2Cjerk+off%2Ccum%2Cxxx%2Canal%2Cblowjob%2Cgrindr%2Cdildo%2CGay+for+Pay%2CGay%2CAdult+videos%2CJustForfans%2Cxxx+videos
200 OK 5.6 kB URL GET HTTP/2 tsyndicate.com/do2/ebc0426ee6ff4d64baaabe6063b014bc/vast?subid=&categories=gay+porn%2Cgay+porno%2Cgay+teen+porn%2Chot+gay+videos%2Conlyfans%2Cgayforfans%2Cjust+for+fans%2C4myfans%2Ctwink%2Csex%2Cjerk+off%2Ccum%2Cxxx%2Canal%2Cblowjob%2Cgrindr%2Cdildo%2CGay+for+Pay%2CGay%2CAdult+videos%2CJustForfans%2Cxxx+videos
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type XML document, ASCII text, with very long lines (5615), with no line terminators
Hash 51b0c0354adc1d43097dfbbd0751c2f8
d0147015bfbc2f3f324e02176a1dcba4dcd286de
8827d7e6a4f74013326853dcd2a816447e3daf8f50808da5e2f6e3caeb69736f
GET /do2/ebc0426ee6ff4d64baaabe6063b014bc/vast?subid=&categories=gay+porn%2Cgay+porno%2Cgay+teen+porn%2Chot+gay+videos%2Conlyfans%2Cgayforfans%2Cjust+for+fans%2C4myfans%2Ctwink%2Csex%2Cjerk+off%2Ccum%2Cxxx%2Canal%2Cblowjob%2Cgrindr%2Cdildo%2CGay+for+Pay%2CGay%2CAdult+videos%2CJustForfans%2Cxxx+videos HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: application/xml; charset=utf-8
access-control-allow-origin: https://justthegays.com
access-control-allow-methods: POST, GET, HEAD
access-control-allow-headers: Accept, X-Requested-With, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy
access-control-allow-credentials: true
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
x-vast: 3.0
x-request-id: 0b9858db136b2ed5
set-cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03; expires=Sat, 08 Jun 2024 00:21:27 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCx5YZN2QkhCGjCwsRYwpuieFQRBmJMW4whIEjhgwcN7r0URAQ; expires=Sat, 09 Dec 2023 00:21:27 GMT; domain=.tsyndicate.com; path=/; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
vast.yomeno.xyz/event?katds_ep=QY29JNSUbRTcjkR6K6P2qUGzyQrjqMIecMASA3afE_rHwU4kJMfXF44F2QgyvInWhEM9bzae84OILlXMNRMr26QO_4MH4yYdXCn6rec7IsHTn3rB1UaBnCpbglFngWzCO88RtzyTfq5FjZwQb_KxeAyahYJdgM8XRaO5I8pawzbkTLmxHTmnCV6WiP-SoWgs8Q7Vj09B88ftHPCt5b6NrLuOk_KCgNfg7GyPzp4egxZlfN05ktP9eaZk9gyMnwQHKhAm3gdXwhagkA1Tx-0HvTLlvXJ_EZttALqqKi4aOgmGi-7fWbWtFfr8-BIh3lrr0veEE7VHLgfPSWf7y5J7Gi4FRaIKEMcmlYY8gSsZUQrIdu4z9tBbxWfrAITwDv8nXIxwvs7gZGEQmtSKB6T625tyEsGmVKGVeaMzr9pKSo2-KllrfdMHFL5h9k0v47HsQhrCUl2iTF16WhJ3QpJ8WFD1zaihtjHouDmpjJDJa8AjFwFuMXi5BoMT_HFZhEY035e1nHVzfE7p3qdG&error=400
200 OK 0 B URL GET HTTP/2 vast.yomeno.xyz/event?katds_ep=QY29JNSUbRTcjkR6K6P2qUGzyQrjqMIecMASA3afE_rHwU4kJMfXF44F2QgyvInWhEM9bzae84OILlXMNRMr26QO_4MH4yYdXCn6rec7IsHTn3rB1UaBnCpbglFngWzCO88RtzyTfq5FjZwQb_KxeAyahYJdgM8XRaO5I8pawzbkTLmxHTmnCV6WiP-SoWgs8Q7Vj09B88ftHPCt5b6NrLuOk_KCgNfg7GyPzp4egxZlfN05ktP9eaZk9gyMnwQHKhAm3gdXwhagkA1Tx-0HvTLlvXJ_EZttALqqKi4aOgmGi-7fWbWtFfr8-BIh3lrr0veEE7VHLgfPSWf7y5J7Gi4FRaIKEMcmlYY8gSsZUQrIdu4z9tBbxWfrAITwDv8nXIxwvs7gZGEQmtSKB6T625tyEsGmVKGVeaMzr9pKSo2-KllrfdMHFL5h9k0v47HsQhrCUl2iTF16WhJ3QpJ8WFD1zaihtjHouDmpjJDJa8AjFwFuMXi5BoMT_HFZhEY035e1nHVzfE7p3qdG&error=400
IP
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint47:BF:55:36:FD:42:8F:D1:07:8C:09:CC:51:6C:15:28:BA:50:45:E3
ValidityFri, 24 Nov 2023 03:03:11 GMT - Thu, 22 Feb 2024 03:03:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /event?katds_ep=QY29JNSUbRTcjkR6K6P2qUGzyQrjqMIecMASA3afE_rHwU4kJMfXF44F2QgyvInWhEM9bzae84OILlXMNRMr26QO_4MH4yYdXCn6rec7IsHTn3rB1UaBnCpbglFngWzCO88RtzyTfq5FjZwQb_KxeAyahYJdgM8XRaO5I8pawzbkTLmxHTmnCV6WiP-SoWgs8Q7Vj09B88ftHPCt5b6NrLuOk_KCgNfg7GyPzp4egxZlfN05ktP9eaZk9gyMnwQHKhAm3gdXwhagkA1Tx-0HvTLlvXJ_EZttALqqKi4aOgmGi-7fWbWtFfr8-BIh3lrr0veEE7VHLgfPSWf7y5J7Gi4FRaIKEMcmlYY8gSsZUQrIdu4z9tBbxWfrAITwDv8nXIxwvs7gZGEQmtSKB6T625tyEsGmVKGVeaMzr9pKSo2-KllrfdMHFL5h9k0v47HsQhrCUl2iTF16WhJ3QpJ8WFD1zaihtjHouDmpjJDJa8AjFwFuMXi5BoMT_HFZhEY035e1nHVzfE7p3qdG&error=400 HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 08 Dec 2023 00:21:29 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
s.magsrv.com/vregister.php?a=vview&errorcode=3&idzone=5075896&dg=6253252-NOR-89281690-3-0-1-0-InLine
200 OK 0 B URL GET HTTP/1.1 s.magsrv.com/vregister.php?a=vview&errorcode=3&idzone=5075896&dg=6253252-NOR-89281690-3-0-1-0-InLine
IP
ASN #60781 LeaseWeb Netherlands B.V.
Certificate IssuerLet's Encrypt
Subjectmagsrv.com
FingerprintC5:BC:C0:62:0C:DC:A9:D2:61:A6:77:A9:6C:31:19:AD:CD:2E:00:67
ValidityThu, 05 Oct 2023 15:26:28 GMT - Wed, 03 Jan 2024 15:26:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /vregister.php?a=vview&errorcode=3&idzone=5075896&dg=6253252-NOR-89281690-3-0-1-0-InLine HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%2265726188aae5d0.04250301237272331%22%3B%7D; c-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C5075896%7C89281690%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C415713696%7Cjustthegays.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1701994888%7C2c22b3e06ec34057b52155e8419c699c%7Cok%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 08 Dec 2023 00:21:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin:
Access-Control-Allow-Credentials: true
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
js.wpadmngr.com/static/adManager.js
200 OK 1.7 kB URL GET HTTP/2 js.wpadmngr.com/static/adManager.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/agent.php?spot=407030
Certificate IssuerLet's Encrypt
Subjectjs.wpadmngr.com
FingerprintAC:C2:DC:B6:95:8A:52:42:68:CB:0F:19:3F:56:A9:E9:1F:E6:04:8C
ValiditySun, 12 Nov 2023 03:01:15 GMT - Sat, 10 Feb 2024 03:01:14 GMT
File type ASCII text, with very long lines (1807), with no line terminators
Hash fe0817ca53fd3b6a9cb5582a3569ba0c
4fea7bff36102d725bc9071444d0a671dbe9fd72
5d95748247f603f61e59a46f5fa3711d5e50572082fa455e821e38a1b24858b5
GET /static/adManager.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 28 Nov 2023 12:19:41 GMT
etag: W/"6565dadd-681"
content-encoding: gzip
expires: Fri, 08 Dec 2023 00:26:27 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
go.sexfortokens.com/easy?campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&memberId=h_EwpvpT8xEDQahCRLVDrtSbnPQKebUUyRg8fd5WSZlvklFpJhHy0OPrq3vcmNgoDwF0aNhmqBD_1aIAA0mW7AIRqoGqhEMLAXdU9b43WVXDX16L_gUIDRUi&sourceId=tstars-Slider-43579-4298528&tag=-men%2Fmobile
302 Found 2.3 kB URL GET HTTP/3 go.sexfortokens.com/easy?campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&memberId=h_EwpvpT8xEDQahCRLVDrtSbnPQKebUUyRg8fd5WSZlvklFpJhHy0OPrq3vcmNgoDwF0aNhmqBD_1aIAA0mW7AIRqoGqhEMLAXdU9b43WVXDX16L_gUIDRUi&sourceId=tstars-Slider-43579-4298528&tag=-men%2Fmobile
IP
Certificate IssuerCloudflare, Inc.
Subjectsexfortokens.com
Fingerprint14:74:83:B8:1B:D5:4F:1D:A3:FD:1B:C0:F1:C8:9F:C4:71:56:16:CA
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /easy?campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&memberId=h_EwpvpT8xEDQahCRLVDrtSbnPQKebUUyRg8fd5WSZlvklFpJhHy0OPrq3vcmNgoDwF0aNhmqBD_1aIAA0mW7AIRqoGqhEMLAXdU9b43WVXDX16L_gUIDRUi&sourceId=tstars-Slider-43579-4298528&tag=-men%2Fmobile HTTP/1.1
Host: go.sexfortokens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Cookie: __cflb=02DiuGyDLPvii6XBe57uvfNJUFkxLJd5CWXyTtVddsRoi
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Fri, 08 Dec 2023 00:21:28 GMT
content-length: 0
location: https://go.sexfortokens.com/api/models/vast?action=sbSignupWithModel&campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&campaignType=smartpop&creativeId=b8f820c89e49c30a413b7360dc36f8c9cc13dd1f3d59a594d0b2c0f903b3991f&domain=stripchat&duration=00%3A00%3A30&iterationId=752079&masterSmartpopId=2683&memberId=h_EwpvpT8xEDQahCRLVDrtSbnPQKebUUyRg8fd5WSZlvklFpJhHy0OPrq3vcmNgoDwF0aNhmqBD_1aIAA0mW7AIRqoGqhEMLAXdU9b43WVXDX16L_gUIDRUi&ruleId=149&skipOffset=00%3A00%3A05&smartpopId=10518&sourceId=tstars-Slider-43579-4298528&tag=-men%2Fmobile&usePreroll=true&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&variationId=31922
set-cookie: _var=68146551.31922_YzA4ZDhmOTg=; Path=/; Expires=Sun, 07 Jan 2024 00:21:28 GMT; HttpOnly; SameSite=Strict
strict-transport-security: max-age=15768000
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
access-control-allow-origin: https://justthegays.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8320d9335a6ab51e-OSL
alt-svc: h3=":443"; ma=86400
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/407033?v2=1&fill=0&kw=gay%20porn%2Cgay%20porno%2Cgay%20teen%20porn%2Chot%20gay%20videos%2Conlyfans%2Cgayforfans%2Cjust%20for%20fans%2C4myfans%2Ctwink%2Csex%2Cjerk%20off%2Ccum%2Cxxx%2Canal%2Cblowjob%2Cgrindr%2Cdildo%2CGay%20for%20Pay%2CGay%2CAdult%20videos%2CJustForfans%2Cxxx%20videos&s1=%25subid1%25&s2=%25subid2%25&i=1&url=https%3A%2F%2Fjustthegays.com%2F
200 OK 6.9 kB URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/407033?v2=1&fill=0&kw=gay%20porn%2Cgay%20porno%2Cgay%20teen%20porn%2Chot%20gay%20videos%2Conlyfans%2Cgayforfans%2Cjust%20for%20fans%2C4myfans%2Ctwink%2Csex%2Cjerk%20off%2Ccum%2Cxxx%2Canal%2Cblowjob%2Cgrindr%2Cdildo%2CGay%20for%20Pay%2CGay%2CAdult%20videos%2CJustForfans%2Cxxx%20videos&s1=%25subid1%25&s2=%25subid2%25&i=1&url=https%3A%2F%2Fjustthegays.com%2F
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type XML document, ASCII text, with very long lines (7110), with no line terminators
Hash 86a6c5111227b8241d8dae7cb296d52b
7a8c3d8aa2457c5f758605e41bbab4e9c9fc7c9d
ec166565220d3c6e1e02fba4b570d19f951c900ab48836c17b3406f507171ae7
GET /api/users/407033?v2=1&fill=0&kw=gay%20porn%2Cgay%20porno%2Cgay%20teen%20porn%2Chot%20gay%20videos%2Conlyfans%2Cgayforfans%2Cjust%20for%20fans%2C4myfans%2Ctwink%2Csex%2Cjerk%20off%2Ccum%2Cxxx%2Canal%2Cblowjob%2Cgrindr%2Cdildo%2CGay%20for%20Pay%2CGay%2CAdult%20videos%2CJustForfans%2Cxxx%20videos&s1=%25subid1%25&s2=%25subid2%25&i=1&url=https%3A%2F%2Fjustthegays.com%2F HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://justthegays.com
access-control-expose-headers: X-Asg-Config, X-t
x-robots-tag: noindex, nofollow
x-t: 0
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
vast.yomeno.xyz/vast?spot_id=97589
200 OK 4.6 kB URL GET HTTP/2 vast.yomeno.xyz/vast?spot_id=97589
IP
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint47:BF:55:36:FD:42:8F:D1:07:8C:09:CC:51:6C:15:28:BA:50:45:E3
ValidityFri, 24 Nov 2023 03:03:11 GMT - Thu, 22 Feb 2024 03:03:10 GMT
File type ASCII text, with very long lines (4636), with no line terminators
Hash dedd24b7c7ee130f5db648833811d045
bb25561777c6815db770fbfd196c23cfbab6905e
5318653b15484d17fd8a0588bdfef2ae5825bbed0c1efce61a07567776d89bfb
GET /vast?spot_id=97589 HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 08 Dec 2023 00:21:28 GMT
content-type: text/xml;charset=UTF-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: Accept-Encoding, *
access-control-allow-credentials: true
access-control-allow-origin: https://justthegays.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,
access-control-expose-headers: Content-Length,Content-Range
content-encoding: gzip
X-Firefox-Spdy: h2
vast.yomeno.xyz/report?katds_ep=BL_pPw27gAZKm_yWL-bnmffie-vDz-omFd7N6nOvXTTrBPSIAmW4MqYzfur4HFSIjtrcmIzfdNFoZwTt-IlKsC1HxWgsp-qewqGSH6M6fVXgboL5x8CDsZ4SwXeym0y9EtFXf1woDecG2fSiAX5ZtpEMgr7XqHY0YkEfg7NnrYUpTlIhbmIbpHu2J50QdiX8THz-Zmf6HUtFx7Uo1VD8refVKPsqMMqE6Ijnmt9c8n7lwn2uwUOq1IpFML7g4Xgdcw1E1POr-TD1tsUOh0enOA&error=303
204 No Content 0 B URL GET HTTP/2 vast.yomeno.xyz/report?katds_ep=BL_pPw27gAZKm_yWL-bnmffie-vDz-omFd7N6nOvXTTrBPSIAmW4MqYzfur4HFSIjtrcmIzfdNFoZwTt-IlKsC1HxWgsp-qewqGSH6M6fVXgboL5x8CDsZ4SwXeym0y9EtFXf1woDecG2fSiAX5ZtpEMgr7XqHY0YkEfg7NnrYUpTlIhbmIbpHu2J50QdiX8THz-Zmf6HUtFx7Uo1VD8refVKPsqMMqE6Ijnmt9c8n7lwn2uwUOq1IpFML7g4Xgdcw1E1POr-TD1tsUOh0enOA&error=303
IP
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint47:BF:55:36:FD:42:8F:D1:07:8C:09:CC:51:6C:15:28:BA:50:45:E3
ValidityFri, 24 Nov 2023 03:03:11 GMT - Thu, 22 Feb 2024 03:03:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /report?katds_ep=BL_pPw27gAZKm_yWL-bnmffie-vDz-omFd7N6nOvXTTrBPSIAmW4MqYzfur4HFSIjtrcmIzfdNFoZwTt-IlKsC1HxWgsp-qewqGSH6M6fVXgboL5x8CDsZ4SwXeym0y9EtFXf1woDecG2fSiAX5ZtpEMgr7XqHY0YkEfg7NnrYUpTlIhbmIbpHu2J50QdiX8THz-Zmf6HUtFx7Uo1VD8refVKPsqMMqE6Ijnmt9c8n7lwn2uwUOq1IpFML7g4Xgdcw1E1POr-TD1tsUOh0enOA&error=303 HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Fri, 08 Dec 2023 00:21:29 GMT
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: *
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
go.bbrdbr.com/api/models/vast?action=sbSignupWithModel&campaignId=56887531e20ffc8ec4b32f114752cd5e087f0e1a66a28e88fe82ad1f38a4c7c1&campaignType=smartpop&contentType=video%2Fmp4&creativeId=0fe634b4ed7128d94852002b593185fc904d0c54974e9bbbec389730ba324b3e&duration=00%3A00%3A30&iterationId=745641&masterSmartpopId=2683&memberId=b78f6ce8-4e50-4bda-a78a-623901aab227&mlView=1&no_bb=1&p1=50168&p2=79550&ruleId=29&skipOffset=00%3A00%3A05&smartpopId=5347&sourceId=14488&usePreroll=true&userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d&variationId=31904&xhVersion=1
200 OK 2.1 kB URL GET HTTP/3 go.bbrdbr.com/api/models/vast?action=sbSignupWithModel&campaignId=56887531e20ffc8ec4b32f114752cd5e087f0e1a66a28e88fe82ad1f38a4c7c1&campaignType=smartpop&contentType=video%2Fmp4&creativeId=0fe634b4ed7128d94852002b593185fc904d0c54974e9bbbec389730ba324b3e&duration=00%3A00%3A30&iterationId=745641&masterSmartpopId=2683&memberId=b78f6ce8-4e50-4bda-a78a-623901aab227&mlView=1&no_bb=1&p1=50168&p2=79550&ruleId=29&skipOffset=00%3A00%3A05&smartpopId=5347&sourceId=14488&usePreroll=true&userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d&variationId=31904&xhVersion=1
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint2A:9F:63:77:CB:A5:1C:FD:6E:10:F5:29:D2:FB:51:F4:7C:EC:36:A2
ValiditySun, 26 Feb 2023 00:00:00 GMT - Sun, 25 Feb 2024 23:59:59 GMT
File type XML document, ASCII text, with very long lines (2104), with no line terminators
Hash f3189f56d1fd064b7304415c79433521
212779d2cc79eacdf7df1235dcd44adc8f893232
0ce75466d59e88a1fa35ff17a0916c0e47eedf4f276e0eb480b25e67d926dca7
GET /api/models/vast?action=sbSignupWithModel&campaignId=56887531e20ffc8ec4b32f114752cd5e087f0e1a66a28e88fe82ad1f38a4c7c1&campaignType=smartpop&contentType=video%2Fmp4&creativeId=0fe634b4ed7128d94852002b593185fc904d0c54974e9bbbec389730ba324b3e&duration=00%3A00%3A30&iterationId=745641&masterSmartpopId=2683&memberId=b78f6ce8-4e50-4bda-a78a-623901aab227&mlView=1&no_bb=1&p1=50168&p2=79550&ruleId=29&skipOffset=00%3A00%3A05&smartpopId=5347&sourceId=14488&usePreroll=true&userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d&variationId=31904&xhVersion=1 HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://justthegays.com
Referer: https://justthegays.com/
DNT: 1
Connection: keep-alive
Cookie: __cflb=0H28upDCGznfDm9XVDEEFVkNrzLraWwgGKf4f2szcVS
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:28 GMT
content-type: text/xml; charset=utf-8
access-control-allow-origin: https://justthegays.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8320d9338ce75697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
justthegays.com/wp-content/themes/videotube/assets/js/bootstrap.min.js?ver=1685188737
200 OK 60 kB URL GET HTTP/2 justthegays.com/wp-content/themes/videotube/assets/js/bootstrap.min.js?ver=1685188737
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type ASCII text, with very long lines (59729)
Hash 61f338f870fcd0ff46362ef109d28533
b3c116c65e6f053aaab45e5619a78ec00271a50f
5aa53525abc5c5200c70b3f6588388f86076cd699284c23cda64e92c372a1548
GET /wp-content/themes/videotube/assets/js/bootstrap.min.js?ver=1685188737 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:10:16 GMT
etag: W/"ea6a-6471f081-65e0407;gz"
last-modified: Sat, 27 May 2023 11:58:57 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47470
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V2vQHhmlQtuMXXxnCoGRf9sY8ysN8zQBitkerbDDu9jUfEJGHHZ3vSb1lXnLFV7ZTPd47uPEgh%2Bqyud2Bf5nybhyS%2BbPaoh4ZlWgDCGJj3OQZ9Fg51EIXC682qmix2nZ0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d926beff712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
js.wpadmngr.com/static/adManager.m.js
200 OK 104 kB URL GET HTTP/2 js.wpadmngr.com/static/adManager.m.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/agent.php?spot=407030
Certificate IssuerLet's Encrypt
Subjectjs.wpadmngr.com
FingerprintAC:C2:DC:B6:95:8A:52:42:68:CB:0F:19:3F:56:A9:E9:1F:E6:04:8C
ValiditySun, 12 Nov 2023 03:01:15 GMT - Sat, 10 Feb 2024 03:01:14 GMT
Size 104 kB (104096 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/adManager.m.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 06 Dec 2023 08:14:23 GMT
etag: W/"65702d5f-196a0"
content-encoding: gzip
expires: Fri, 08 Dec 2023 00:26:27 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
js.cabnnr.com/banner-admanager/build.m.js
200 OK 54 kB URL GET HTTP/2 js.cabnnr.com/banner-admanager/build.m.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/agent.php?spot=407030
Certificate IssuerLet's Encrypt
Subjectjs.cabnnr.com
Fingerprint3A:29:AE:AD:75:BB:08:B4:F0:B7:22:4E:50:FB:7E:47:1C:0B:9B:33
ValiditySun, 22 Oct 2023 13:02:54 GMT - Sat, 20 Jan 2024 13:02:53 GMT
File type ASCII text, with very long lines (54229), with no line terminators
Hash 712d64373dd416d618af872f8df81075
9483668da79d6fed279e6050ace3cc7b2c211bc0
2acb8b5e738c3e88e2f8a111c5fbb60bc81e724f230d3fce37fc78652c615570
GET /banner-admanager/build.m.js HTTP/1.1
Host: js.cabnnr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Fri, 24 Nov 2023 09:13:53 GMT
etag: W/"65606951-d3d5"
content-encoding: gzip
expires: Fri, 08 Dec 2023 00:26:27 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/spots/407030
200 OK 189 B URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/spots/407030
IP
ASN #24940 Hetzner Online GmbH
Requested by https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/agent.php?spot=407030
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type ASCII text, with no line terminators
Hash 71d398857d59c64a72a6fa8c558a50c8
2b9c4bfbf0ca70468542e827bf21ac31922874de
94b97a0c4a2e759306d9f2fd224d0ba94d20b2aa53813f2d3a40e4bbdbb7056d
GET /api/spots/407030 HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
creative.fxmnba.com/widgets/v4/Universal/lang/en.json
200 OK 172 B URL GET HTTP/3 creative.fxmnba.com/widgets/v4/Universal/lang/en.json
IP
Requested by https://creative.fxmnba.com/widgets/v4/Universal?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&mlView=1&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&usePreroll=0&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&webp=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint11:C8:29:33:4C:A0:2A:F3:EF:92:BC:95:11:62:B8:7A:AD:73:70:42
ValiditySun, 26 Feb 2023 00:00:00 GMT - Sun, 25 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 402f4a06b5dcf96d25dd4ff1f840784b
edebb253af01ef1882f424ee6278368485898d62
bd570b38d9d687c593545a7b250570605c601381f3d3d5263346b295e12a55ba
GET /widgets/v4/Universal/lang/en.json HTTP/1.1
Host: creative.fxmnba.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.fxmnba.com/widgets/v4/Universal?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&mlView=1&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&usePreroll=0&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&webp=1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:30 GMT
content-type: application/json
last-modified: Tue, 05 Dec 2023 10:58:14 GMT
etag: W/"656f0246-ac"
expires: Fri, 08 Dec 2023 00:21:38 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
set-cookie: __cflb=02DiuDFRFiBZBvMSLtqG3jTHqF85wnStzbNd96htW4KuE; SameSite=None; Secure; path=/; expires=Sat, 09-Dec-23 00:21:30 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d940db4156bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
twinrdsyn.com/preroll.engine?id=83e985b7-0a12-4e2d-ac20-fd6e756c9390&zid=59331&cvs={ClientVideoSupport}&time={TimeOffset}&stdtime={StdTimeOffset}&abr={IsAdblockRequest}&pageurl={PageUrl}&tid={TrackingId}&res={Resolution}&bw={BrowserWidth}&bh={BrowserHeight}&kw={Keywords}&referrerUrl={ReferrerUrl}&pw={PlayerWidth}&ph={PlayerHeight}
200 OK 7.6 kB URL GET HTTP/2 twinrdsyn.com/preroll.engine?id=83e985b7-0a12-4e2d-ac20-fd6e756c9390&zid=59331&cvs={ClientVideoSupport}&time={TimeOffset}&stdtime={StdTimeOffset}&abr={IsAdblockRequest}&pageurl={PageUrl}&tid={TrackingId}&res={Resolution}&bw={BrowserWidth}&bh={BrowserHeight}&kw={Keywords}&referrerUrl={ReferrerUrl}&pw={PlayerWidth}&ph={PlayerHeight}
IP
Certificate IssuerGoogle Trust Services LLC
Subjecttwinrdsyn.com
Fingerprint5A:14:93:70:60:0A:E4:66:2F:AA:CF:7D:B9:A9:47:F9:52:A0:E5:46
ValidityThu, 12 Oct 2023 23:10:25 GMT - Wed, 10 Jan 2024 23:10:24 GMT
File type ASCII text, with very long lines (7612), with no line terminators
Hash e56b8122b682188e7340c1d5e8be3692
7f44d318e9f58fe9e66fcb386d9aebb9821806be
2ff0015155d2b70668b62dbfae9a147a2a49475f73c700bfb3d72bf46a5f8782
GET /preroll.engine?id=83e985b7-0a12-4e2d-ac20-fd6e756c9390&zid=59331&cvs={ClientVideoSupport}&time={TimeOffset}&stdtime={StdTimeOffset}&abr={IsAdblockRequest}&pageurl={PageUrl}&tid={TrackingId}&res={Resolution}&bw={BrowserWidth}&bh={BrowserHeight}&kw={Keywords}&referrerUrl={ReferrerUrl}&pw={PlayerWidth}&ph={PlayerHeight} HTTP/1.1
Host: twinrdsyn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:28 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
cache-control: private, no-transform
access-control-allow-credentials: true
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: https://justthegays.com
set-cookie: IKSR={}; path=/; SameSite=None; secure
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8320d9316b19b503-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
s.magsrv.com/splash.php?idzone=5104470
200 OK 61 B URL GET HTTP/1.1 s.magsrv.com/splash.php?idzone=5104470
IP
ASN #60781 LeaseWeb Netherlands B.V.
Certificate IssuerLet's Encrypt
Subjectmagsrv.com
FingerprintC5:BC:C0:62:0C:DC:A9:D2:61:A6:77:A9:6C:31:19:AD:CD:2E:00:67
ValidityThu, 05 Oct 2023 15:26:28 GMT - Wed, 03 Jan 2024 15:26:27 GMT
File type XML document, ASCII text, with no line terminators
Hash 9b3eae07e025fdf8ec3fd6e1cf9ec05b
dc6409503a7aa96abc532631e5b50d2ea5bbc6b3
cf478a79ed57f258c9feb5fa7a48c18de64930fe56cbec2cad74f8345dd2113c
GET /splash.php?idzone=5104470 HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%2265726188aae5d0.04250301237272331%22%3B%7D; c-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C5075896%7C89281690%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C415713696%7Cjustthegays.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1701994888%7C2c22b3e06ec34057b52155e8419c699c%7Cok%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 08 Dec 2023 00:21:28 GMT
Content-Type: text/xml;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Headers: X-CH-VALUES
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%2265726188aae5d0.04250301237272331%22%3B%7D; expires=Sun, 07 Dec 2025 00:21:28 GMT; path=; domain=.magsrv.com; Secure; SameSite=none
Cache-Control: no-store
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: https://justthegays.com
Access-Control-Allow-Credentials: true
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/6010342150592530095/2011916?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos
200 OK 2.2 kB URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/6010342150592530095/2011916?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type XML document, ASCII text, with very long lines (2245), with no line terminators
Hash 4f7cb3fa2351486a16b938952b7ce7cc
0c250ea11dd105e5b36dab2cc28717517ed65c9e
e64bbba10b6300001ea27b1b49a7600028bfa608b3d5c405a99ad11003b63bf4
GET /api/users/6010342150592530095/2011916?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://justthegays.com
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/407032?v2=1&fill=0&kw=gay%20porn%2Cgay%20porno%2Cgay%20teen%20porn%2Chot%20gay%20videos%2Conlyfans%2Cgayforfans%2Cjust%20for%20fans%2C4myfans%2Ctwink%2Csex%2Cjerk%20off%2Ccum%2Cxxx%2Canal%2Cblowjob%2Cgrindr%2Cdildo%2CGay%20for%20Pay%2CGay%2CAdult%20videos%2CJustForfans%2Cxxx%20videos&s1=%25subid1%25&s2=%25subid2%25&i=1&url=https%3A%2F%2Fjustthegays.com%2F
200 OK 2.8 kB URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/407032?v2=1&fill=0&kw=gay%20porn%2Cgay%20porno%2Cgay%20teen%20porn%2Chot%20gay%20videos%2Conlyfans%2Cgayforfans%2Cjust%20for%20fans%2C4myfans%2Ctwink%2Csex%2Cjerk%20off%2Ccum%2Cxxx%2Canal%2Cblowjob%2Cgrindr%2Cdildo%2CGay%20for%20Pay%2CGay%2CAdult%20videos%2CJustForfans%2Cxxx%20videos&s1=%25subid1%25&s2=%25subid2%25&i=1&url=https%3A%2F%2Fjustthegays.com%2F
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type XML document, ASCII text, with very long lines (2847), with no line terminators
Hash 1b8a108998ab96b5dfd812a8c309c529
b9f64f6454ed86c842eb27c35561bb2c5683a4db
5917e07db822d8ed8a4b905cd710afeb4ad14980ebe66b71e01a980782891bfa
GET /api/users/407032?v2=1&fill=0&kw=gay%20porn%2Cgay%20porno%2Cgay%20teen%20porn%2Chot%20gay%20videos%2Conlyfans%2Cgayforfans%2Cjust%20for%20fans%2C4myfans%2Ctwink%2Csex%2Cjerk%20off%2Ccum%2Cxxx%2Canal%2Cblowjob%2Cgrindr%2Cdildo%2CGay%20for%20Pay%2CGay%2CAdult%20videos%2CJustForfans%2Cxxx%20videos&s1=%25subid1%25&s2=%25subid2%25&i=1&url=https%3A%2F%2Fjustthegays.com%2F HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://justthegays.com
access-control-expose-headers: X-Asg-Config, X-t
x-robots-tag: noindex, nofollow
x-t: 0
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
go.sexfortokens.com/api/models/vast?action=sbSignupWithModel&campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&campaignType=smartpop&creativeId=b8f820c89e49c30a413b7360dc36f8c9cc13dd1f3d59a594d0b2c0f903b3991f&domain=stripchat&duration=00%3A00%3A30&iterationId=752079&masterSmartpopId=2683&memberId=h_EwpvpT8xEDQahCRLVDrtSbnPQKebUUyRg8fd5WSZlvklFpJhHy0OPrq3vcmNgoDwF0aNhmqBD_1aIAA0mW7AIRqoGqhEMLAXdU9b43WVXDX16L_gUIDRUi&ruleId=149&skipOffset=00%3A00%3A05&smartpopId=10518&sourceId=tstars-Slider-43579-4298528&tag=-men%2Fmobile&usePreroll=true&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&variationId=31922
200 OK 2.3 kB URL GET HTTP/3 go.sexfortokens.com/api/models/vast?action=sbSignupWithModel&campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&campaignType=smartpop&creativeId=b8f820c89e49c30a413b7360dc36f8c9cc13dd1f3d59a594d0b2c0f903b3991f&domain=stripchat&duration=00%3A00%3A30&iterationId=752079&masterSmartpopId=2683&memberId=h_EwpvpT8xEDQahCRLVDrtSbnPQKebUUyRg8fd5WSZlvklFpJhHy0OPrq3vcmNgoDwF0aNhmqBD_1aIAA0mW7AIRqoGqhEMLAXdU9b43WVXDX16L_gUIDRUi&ruleId=149&skipOffset=00%3A00%3A05&smartpopId=10518&sourceId=tstars-Slider-43579-4298528&tag=-men%2Fmobile&usePreroll=true&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&variationId=31922
IP
Certificate IssuerCloudflare, Inc.
Subjectsexfortokens.com
Fingerprint14:74:83:B8:1B:D5:4F:1D:A3:FD:1B:C0:F1:C8:9F:C4:71:56:16:CA
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT
File type XML document, ASCII text, with very long lines (2304), with no line terminators
Hash 8719d1716d6727844aace833c185729f
7a63aa127ba1bcb42d2fe4e172b03a629a078a98
113d314bdf32a6d58c7c9c3e61e2dde01047be47f1592c89b8530cab3f6256d4
GET /api/models/vast?action=sbSignupWithModel&campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&campaignType=smartpop&creativeId=b8f820c89e49c30a413b7360dc36f8c9cc13dd1f3d59a594d0b2c0f903b3991f&domain=stripchat&duration=00%3A00%3A30&iterationId=752079&masterSmartpopId=2683&memberId=h_EwpvpT8xEDQahCRLVDrtSbnPQKebUUyRg8fd5WSZlvklFpJhHy0OPrq3vcmNgoDwF0aNhmqBD_1aIAA0mW7AIRqoGqhEMLAXdU9b43WVXDX16L_gUIDRUi&ruleId=149&skipOffset=00%3A00%3A05&smartpopId=10518&sourceId=tstars-Slider-43579-4298528&tag=-men%2Fmobile&usePreroll=true&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&variationId=31922 HTTP/1.1
Host: go.sexfortokens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://justthegays.com
Referer: https://justthegays.com/
DNT: 1
Connection: keep-alive
Cookie: __cflb=02DiuGyDLPvii6XBe57uvfNJUFkxLJd5CWXyTtVddsRoi
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:28 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=15768000
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
access-control-allow-origin: https://justthegays.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8320d9342abfb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
lcdn.tsyndicate.com/images/0/0/8302eea9354d56b5b39e1a7bd3e42fc3e4bab2/main.jpg
0 B URL GET lcdn.tsyndicate.com/images/0/0/8302eea9354d56b5b39e1a7bd3e42fc3e4bab2/main.jpg
IP
Requested by https://tsyndicate.com/iframes2/645ad092a0974b48afa7ebf013ea199d.html?keywords=agent%2Cphp&adb=0&clientjs=1&w=1280&h=1024&tz=0
Certificate IssuerSectigo Limited
Subjectlcdn.tsyndicate.com
FingerprintAA:DB:E6:65:05:5A:83:46:D1:77:83:25:84:3D:B2:B5:F5:99:97:00
ValidityWed, 08 Mar 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/0/0/8302eea9354d56b5b39e1a7bd3e42fc3e4bab2/main.jpg HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: image/jpeg
content-length: 6423
server: nginx
last-modified: Fri, 16 Sep 2022 14:06:12 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"632482d4-1987"
content-encoding: gzip
age: 10601690
accept-ranges: bytes
X-Firefox-Spdy: h2
vast.yomeno.xyz/error?katds_ep=z-PWKT4VPMc2zmWF2_Z13gVleBrri_cgq1mVGxCgOer3O3RzfdB4f_4HaVAmcPFXqU94qeQthGM-uZM9nfet5m_RKfBi_28V1lR9pDvZPippYP1ojKCw39BVWOlDwI_wmyOBS8M_UMnGp2wI-bVV2fKZSzzAAsVHzcdizsW1_P5eR6gFhKc07pX1e0VYJGp_UbXqynlS7rHi4mPPkLG383dpMs5U9o18MUNuOHuNWS3vB_KyF4iST5RTisJayEO1R6_EsXGIAHBHrbwmPjiuLoX-_afGpD_BPMjEDuVkI4wLehgMllTvwlqaAbAoAr5lop0aeN2rvRaC-S2Nd9MHBtY3flPGRTlBmRK4PxJYMpB9&error=3
302 Found 0 B URL GET HTTP/2 vast.yomeno.xyz/error?katds_ep=z-PWKT4VPMc2zmWF2_Z13gVleBrri_cgq1mVGxCgOer3O3RzfdB4f_4HaVAmcPFXqU94qeQthGM-uZM9nfet5m_RKfBi_28V1lR9pDvZPippYP1ojKCw39BVWOlDwI_wmyOBS8M_UMnGp2wI-bVV2fKZSzzAAsVHzcdizsW1_P5eR6gFhKc07pX1e0VYJGp_UbXqynlS7rHi4mPPkLG383dpMs5U9o18MUNuOHuNWS3vB_KyF4iST5RTisJayEO1R6_EsXGIAHBHrbwmPjiuLoX-_afGpD_BPMjEDuVkI4wLehgMllTvwlqaAbAoAr5lop0aeN2rvRaC-S2Nd9MHBtY3flPGRTlBmRK4PxJYMpB9&error=3
IP
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint47:BF:55:36:FD:42:8F:D1:07:8C:09:CC:51:6C:15:28:BA:50:45:E3
ValidityFri, 24 Nov 2023 03:03:11 GMT - Thu, 22 Feb 2024 03:03:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /error?katds_ep=z-PWKT4VPMc2zmWF2_Z13gVleBrri_cgq1mVGxCgOer3O3RzfdB4f_4HaVAmcPFXqU94qeQthGM-uZM9nfet5m_RKfBi_28V1lR9pDvZPippYP1ojKCw39BVWOlDwI_wmyOBS8M_UMnGp2wI-bVV2fKZSzzAAsVHzcdizsW1_P5eR6gFhKc07pX1e0VYJGp_UbXqynlS7rHi4mPPkLG383dpMs5U9o18MUNuOHuNWS3vB_KyF4iST5RTisJayEO1R6_EsXGIAHBHrbwmPjiuLoX-_afGpD_BPMjEDuVkI4wLehgMllTvwlqaAbAoAr5lop0aeN2rvRaC-S2Nd9MHBtY3flPGRTlBmRK4PxJYMpB9&error=3 HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.20.1
date: Fri, 08 Dec 2023 00:21:30 GMT
content-length: 0
location: https://vast.yomeno.xyz/report?e_type=Error&rep=tc_vast&source=1255254910&tcid=17172&iab=IAB25&p=&ccid=&ctype=slider&uid=61a113beeb5c1307f0131429d929c04f&endpoint=&error=3
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
justthegays.com/wp-content/themes/videotube/assets/js/autosize.min.js?ver=1685188737
200 OK 3.6 kB URL GET HTTP/2 justthegays.com/wp-content/themes/videotube/assets/js/autosize.min.js?ver=1685188737
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type ASCII text, with very long lines (3670), with no line terminators
Hash 5b0e1b70db7c0d7e9c00127c6101b48d
7edf8b24f658180fa682473ac9f60f63e73f9f7e
79afa592d17e7e3b1a8992eda6eced8bff2b12f276820566deb7293fb430ce34
GET /wp-content/themes/videotube/assets/js/autosize.min.js?ver=1685188737 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:10:16 GMT
etag: W/"dfc-6471f081-65e0405;gz"
last-modified: Sat, 27 May 2023 11:58:57 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47470
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nDeb3KTGizGiby5MAWIJwhDtqTtlKkwakVQztcyu3sEoTORY2lhJg3wQVmvRUO6bgZgTQrOKzkSt3R16pKAF8PVvEPLhds7pX3c5Q8vW2rijdKXxJSKaEwScxEKThXQL%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d926bf0a712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/settings/407034
200 OK 33 B URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/settings/407034
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 511ff610a0435434dd22a4836719fbb3
0cf692a9ecb6dd3d715e3315e0eeccc1c384f0c3
d090111da31c837d965f1dcf49b00a53cf41686d0913627f78c5ff36d693c6d0
GET /api/settings/407034 HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
tsyndicate.com/do2/4f7ee69bfc934aff9a04b6c836642ba3/vast?subid=&categories=gay+porn%2Cgay+porno%2Cgay+teen+porn%2Chot+gay+videos%2Conlyfans%2Cgayforfans%2Cjust+for+fans%2C4myfans%2Ctwink%2Csex%2Cjerk+off%2Ccum%2Cxxx%2Canal%2Cblowjob%2Cgrindr%2Cdildo%2CGay+for+Pay%2CGay%2CAdult+videos%2CJustForfans%2Cxxx+videos
200 OK 5.6 kB URL GET HTTP/2 tsyndicate.com/do2/4f7ee69bfc934aff9a04b6c836642ba3/vast?subid=&categories=gay+porn%2Cgay+porno%2Cgay+teen+porn%2Chot+gay+videos%2Conlyfans%2Cgayforfans%2Cjust+for+fans%2C4myfans%2Ctwink%2Csex%2Cjerk+off%2Ccum%2Cxxx%2Canal%2Cblowjob%2Cgrindr%2Cdildo%2CGay+for+Pay%2CGay%2CAdult+videos%2CJustForfans%2Cxxx+videos
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type XML document, ASCII text, with very long lines (5604), with no line terminators
Hash fd3be9ae6fb0cafacac2952d50443aca
c122d9381198e64f9c26dac44d4364ef7e2d43ba
c6cee9da765305e794ebfcbdc581cbfbd9cbfa2f886adb14e1691a4dd315a529
GET /do2/4f7ee69bfc934aff9a04b6c836642ba3/vast?subid=&categories=gay+porn%2Cgay+porno%2Cgay+teen+porn%2Chot+gay+videos%2Conlyfans%2Cgayforfans%2Cjust+for+fans%2C4myfans%2Ctwink%2Csex%2Cjerk+off%2Ccum%2Cxxx%2Canal%2Cblowjob%2Cgrindr%2Cdildo%2CGay+for+Pay%2CGay%2CAdult+videos%2CJustForfans%2Cxxx+videos HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: application/xml; charset=utf-8
access-control-allow-origin: https://justthegays.com
access-control-allow-methods: POST, GET, HEAD
access-control-allow-headers: Accept, X-Requested-With, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy
access-control-allow-credentials: true
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
x-vast: 3.0
x-request-id: 46283efc3befca1a
set-cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03; expires=Sat, 08 Jun 2024 00:21:27 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCx5YZN2TEiJEDRhcWIsYU3BLjoYgyE2PcgCEDBo4YMnDc6NJH; expires=Sat, 09 Dec 2023 00:21:27 GMT; domain=.tsyndicate.com; path=/; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrenab.com/banner/in/show/?mid=2341141253375212043&pid=0&site=287314&sc=NO&usage_type=DCH&subid=1325145295&sid=0&cid=17340&price=0&is_cpm=1&cpm=0.00012&ecpm=0.00012&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=justthegays.com&hostname=auc-banner-hz-4&site_id=0&spot_id=287314&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&pop_winurl=&ip=91.90.42.154&testab=&px_id=287314&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=iframeAd&iabcat=IAB25&min_cpm=0.0001&placement_type_id=269&skin_test=&verify_hash=&score=1529.7970569229205&ml=&tag_ab=d&v2=0&ttl=&space_id=1496&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=%2F%2Fsiyotith.com%2Fsn.php&pr=justthegays.com&bid_crid=&bid_cid=&is_iframe=1&ad_tags=,&stratagem=&ssp=3758&refresh=1&priority=0&bb=0.0001&label_ids=&site_id64=287314&container=ClickadillaTuple&original_bid_usd=0.00012&comeback=&topics=&o_d=&ectr=1
302 Found 165 B URL GET HTTP/2 rtbrenab.com/banner/in/show/?mid=2341141253375212043&pid=0&site=287314&sc=NO&usage_type=DCH&subid=1325145295&sid=0&cid=17340&price=0&is_cpm=1&cpm=0.00012&ecpm=0.00012&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=justthegays.com&hostname=auc-banner-hz-4&site_id=0&spot_id=287314&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&pop_winurl=&ip=91.90.42.154&testab=&px_id=287314&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=iframeAd&iabcat=IAB25&min_cpm=0.0001&placement_type_id=269&skin_test=&verify_hash=&score=1529.7970569229205&ml=&tag_ab=d&v2=0&ttl=&space_id=1496&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=%2F%2Fsiyotith.com%2Fsn.php&pr=justthegays.com&bid_crid=&bid_cid=&is_iframe=1&ad_tags=,&stratagem=&ssp=3758&refresh=1&priority=0&bb=0.0001&label_ids=&site_id64=287314&container=ClickadillaTuple&original_bid_usd=0.00012&comeback=&topics=&o_d=&ectr=1
IP
ASN #24940 Hetzner Online GmbH
Requested by https://rtbrenab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint95:34:E5:C6:3C:8C:8F:5D:19:0D:6B:41:72:00:76:73:85:86:B3:E5
ValidityFri, 17 Nov 2023 12:45:58 GMT - Thu, 15 Feb 2024 12:45:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=2341141253375212043&pid=0&site=287314&sc=NO&usage_type=DCH&subid=1325145295&sid=0&cid=17340&price=0&is_cpm=1&cpm=0.00012&ecpm=0.00012&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=justthegays.com&hostname=auc-banner-hz-4&site_id=0&spot_id=287314&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&pop_winurl=&ip=91.90.42.154&testab=&px_id=287314&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=iframeAd&iabcat=IAB25&min_cpm=0.0001&placement_type_id=269&skin_test=&verify_hash=&score=1529.7970569229205&ml=&tag_ab=d&v2=0&ttl=&space_id=1496&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=%2F%2Fsiyotith.com%2Fsn.php&pr=justthegays.com&bid_crid=&bid_cid=&is_iframe=1&ad_tags=,&stratagem=&ssp=3758&refresh=1&priority=0&bb=0.0001&label_ids=&site_id64=287314&container=ClickadillaTuple&original_bid_usd=0.00012&comeback=&topics=&o_d=&ectr=1 HTTP/1.1
Host: rtbrenab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrenab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImQiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MTQ5NiwidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6IiwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIxMzI1MTQ1Mjk1IiwicmVmcmVzaCI6MSwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6Mjg3MzE0LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6dHJ1ZSwicmVmZG9tYWluIjoianVzdHRoZWdheXMuY29tIiwicGwiOjI2OSwic3RyYXRhZ2VtIjoiIiwiZ3lyIjowLCJhY2NlbCI6MCwic3NwIjozNzU4LCJidHlwZSI6MCwidjIiOjAsInJjaGFuZ2UiOnRydWV9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9LCJtZXRyaWNzIjp7InRvcGljcyI6W119fV0sInNpdGUiOnsiaWQiOiIyODczMTQiLCJjYXQiOlsiSUFCMjUiXSwicGFnZSI6Imh0dHBzOi8vanVzdHRoZWdheXMuY29tLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiJhNzczOWRjYmZlZWNlZTg0NjFjOGY0MGM0ZDRmNzAzZiIsImZwIjoxNzMxOTExNTkxNTIwNzM1ODAwMCwiZnBfc3RyIjoiMTczMTkxMTU5MTUyMDczNTg5NTgiLCJ1YV9kYXRhIjpudWxsfSwiZXh0Ijp7ImR0IjoxNzAxOTk0ODk0MjQxfX0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.16.0
date: Fri, 08 Dec 2023 00:21:28 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: //siyotith.com/sn.php
X-Firefox-Spdy: h2
s.magsrv.com/vregister.php?a=vview&errorcode=400&idzone=5075896&dg=6253252-NOR-89281690-3-0-1-0-InLine
200 OK 0 B URL GET HTTP/1.1 s.magsrv.com/vregister.php?a=vview&errorcode=400&idzone=5075896&dg=6253252-NOR-89281690-3-0-1-0-InLine
IP
ASN #60781 LeaseWeb Netherlands B.V.
Certificate IssuerLet's Encrypt
Subjectmagsrv.com
FingerprintC5:BC:C0:62:0C:DC:A9:D2:61:A6:77:A9:6C:31:19:AD:CD:2E:00:67
ValidityThu, 05 Oct 2023 15:26:28 GMT - Wed, 03 Jan 2024 15:26:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /vregister.php?a=vview&errorcode=400&idzone=5075896&dg=6253252-NOR-89281690-3-0-1-0-InLine HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%2265726188aae5d0.04250301237272331%22%3B%7D; c-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C5075896%7C89281690%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C415713696%7Cjustthegays.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1701994888%7C2c22b3e06ec34057b52155e8419c699c%7Cok%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 08 Dec 2023 00:21:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin:
Access-Control-Allow-Credentials: true
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
events.o0o.one/in/isv_errors/?katds_ep=vsMzZRXsd8bI7zhZHcQZMLPBdPqrjN8BB04KFfTlxmu8ASIM6SObsFkna5yUC7pVt_D6BOEp8qVAkm4POk270mnHfeEloMEaiScuS35q8cKE2lyH_M0udEtF6DueMFOVcgEFuzTP4eUzn6G1D750_T71zK7MdCcay6cxnJyZISL4gV2Mwcv_fXPS8g7_CWKUC2z8ARHtTDZJA3QbR8iv9wUNmnMm_x_uodLzsJxuQeSKhmdvQoXxgozloNUZVpFgWIEDKZqty6UNYPf4FKbn4kFDE0Bnev9tn9hdj9QFII0bLX7H13vFujYEGpKdK2G4c8IHENYN08YO8ynmvWG6-tPBV0riwLWnXrdPOnL9KVOdXpjF1ib1jCgHhrYZbgYth1tlyTL_7Qaowk44Lyd7kvwyDshmAAENG49yD9Jko9DNjaQ5r_5mb5AhQ4VVsvI&errorcode=303
200 OK 0 B URL GET HTTP/2 events.o0o.one/in/isv_errors/?katds_ep=vsMzZRXsd8bI7zhZHcQZMLPBdPqrjN8BB04KFfTlxmu8ASIM6SObsFkna5yUC7pVt_D6BOEp8qVAkm4POk270mnHfeEloMEaiScuS35q8cKE2lyH_M0udEtF6DueMFOVcgEFuzTP4eUzn6G1D750_T71zK7MdCcay6cxnJyZISL4gV2Mwcv_fXPS8g7_CWKUC2z8ARHtTDZJA3QbR8iv9wUNmnMm_x_uodLzsJxuQeSKhmdvQoXxgozloNUZVpFgWIEDKZqty6UNYPf4FKbn4kFDE0Bnev9tn9hdj9QFII0bLX7H13vFujYEGpKdK2G4c8IHENYN08YO8ynmvWG6-tPBV0riwLWnXrdPOnL9KVOdXpjF1ib1jCgHhrYZbgYth1tlyTL_7Qaowk44Lyd7kvwyDshmAAENG49yD9Jko9DNjaQ5r_5mb5AhQ4VVsvI&errorcode=303
IP
Certificate IssuerLet's Encrypt
Subjectevents.o0o.one
Fingerprint31:73:CC:00:5F:D3:3E:12:D7:84:90:B4:6B:3F:6B:10:2C:82:31:AB
ValiditySun, 05 Nov 2023 03:05:53 GMT - Sat, 03 Feb 2024 03:05:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/isv_errors/?katds_ep=vsMzZRXsd8bI7zhZHcQZMLPBdPqrjN8BB04KFfTlxmu8ASIM6SObsFkna5yUC7pVt_D6BOEp8qVAkm4POk270mnHfeEloMEaiScuS35q8cKE2lyH_M0udEtF6DueMFOVcgEFuzTP4eUzn6G1D750_T71zK7MdCcay6cxnJyZISL4gV2Mwcv_fXPS8g7_CWKUC2z8ARHtTDZJA3QbR8iv9wUNmnMm_x_uodLzsJxuQeSKhmdvQoXxgozloNUZVpFgWIEDKZqty6UNYPf4FKbn4kFDE0Bnev9tn9hdj9QFII0bLX7H13vFujYEGpKdK2G4c8IHENYN08YO8ynmvWG6-tPBV0riwLWnXrdPOnL9KVOdXpjF1ib1jCgHhrYZbgYth1tlyTL_7Qaowk44Lyd7kvwyDshmAAENG49yD9Jko9DNjaQ5r_5mb5AhQ4VVsvI&errorcode=303 HTTP/1.1
Host: events.o0o.one
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 08 Dec 2023 00:21:29 GMT
content-type: application/json
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
justthegays.com/wp-content/plugins/litespeed-cache/guest.vary.php
200 OK 2 B URL POST HTTP/2 justthegays.com/wp-content/plugins/litespeed-cache/guest.vary.php
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
POST /wp-content/plugins/litespeed-cache/guest.vary.php HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: text/html; charset=UTF-8
x-robots-tag: noindex
x-litespeed-cache-control: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DQPhp25MY6v%2FDWMth5alAb2kL8tKn6o%2FglpzpUJGdS%2Fq%2BhGyDnA2xGUFiy8P3aD2E6TmM0DR%2B2sLmaBVTVoI8kQr1KreldgBzWG%2B4p5OVZT7llERvQmI%2Fw4KwFJplz7nrg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d9284fd8712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
justthegays.com/wp-content/plugins/video-embed-thumbnail-generator/src/public/js/videopack.js?ver=4.9.1
200 OK 39 kB URL GET HTTP/2 justthegays.com/wp-content/plugins/video-embed-thumbnail-generator/src/public/js/videopack.js?ver=4.9.1
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type ASCII text, with very long lines (378)
Hash e46a37240d2d36fab1304aa922767101
539b9a104bd0b498564b64905ff26b49d0c2a9ca
cbb3412da67723c5f1351197f0942f0fde007bbf47f4459b84faf365d9a8c67e
GET /wp-content/plugins/video-embed-thumbnail-generator/src/public/js/videopack.js?ver=4.9.1 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:10:16 GMT
etag: W/"977c-654f2cfa-66c0056;gz"
last-modified: Sat, 11 Nov 2023 07:27:54 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47470
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mbLdgUtpz1zQkRjMYMrJ718aWaPllODLZoYbjj6ZX48%2FyBK55HwrtWd%2FLH2HbsENKpTX5m97dubKS3sGko2rN5iCeDcS6hUSLh3ukcWcIEyvGoWrjmx8zAW6vFObvL3AkQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d926cf10712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
tsyndicate.com/do2/e876ccc2873b463485e285aa148556c8/vast?subid=1255254910&categories=
200 OK 5.4 kB URL GET HTTP/2 tsyndicate.com/do2/e876ccc2873b463485e285aa148556c8/vast?subid=1255254910&categories=
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type XML document, ASCII text, with very long lines (5422), with no line terminators
Hash bfd4a71034a8a2df5da5f43e759fc4ce
981919bbf8cace362d07eb780bbd99b6c389120a
2b97bc7a13a28d2ea22ec3a29f1916ec6bc72bd2a53866ee47ad978f8148aae7
GET /do2/e876ccc2873b463485e285aa148556c8/vast?subid=1255254910&categories= HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03; bfq=APeIECNCx5YZN2QkhCGjCwsRYwpuieFQRBmJMW4whIEjhgwcOLr0URAQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:28 GMT
content-type: application/xml; charset=utf-8
access-control-allow-origin: https://justthegays.com
access-control-allow-methods: POST, GET, HEAD
access-control-allow-headers: Accept, X-Requested-With, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy
access-control-allow-credentials: true
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
x-vast: 3.0
x-request-id: c99e33bf4bdb9bd6
set-cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03; expires=Sat, 08 Jun 2024 00:21:28 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCx5YZN2QkhCGjCwsRYwpuieFQRBmJMW4whIEjhgwcOLr0URAQ; expires=Sat, 09 Dec 2023 00:21:28 GMT; domain=.tsyndicate.com; path=/; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
vast.yomeno.xyz/?tcid=17172
200 OK 3.0 kB URL GET HTTP/2 vast.yomeno.xyz/?tcid=17172
IP
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint47:BF:55:36:FD:42:8F:D1:07:8C:09:CC:51:6C:15:28:BA:50:45:E3
ValidityFri, 24 Nov 2023 03:03:11 GMT - Thu, 22 Feb 2024 03:03:10 GMT
File type ASCII text, with very long lines (3020), with no line terminators
Hash 8e629f2bbe61fa161fc9535b8a9b2012
0489901ce849d5795c411dc312a6588ed88d73b4
d27f525515bb006632d846d60ab3e5a805d5aa1a1524c23576047a0c15f6d86b
GET /?tcid=17172 HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 08 Dec 2023 00:21:28 GMT
content-type: text/xml;charset=UTF-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://justthegays.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,
access-control-expose-headers: Content-Length,Content-Range
content-encoding: gzip
X-Firefox-Spdy: h2
justthegays.com/wp-content/uploads/2023/11/104999p.jpg
200 OK 43 kB URL GET HTTP/2 justthegays.com/wp-content/uploads/2023/11/104999p.jpg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 750x479, components 3\012- data
Hash 7e42fc813fa6f00577951984ffe20073
dfe02fc06fcddf6cb32744f53d2e65992155bb66
4dacdba5450fb54115388eae3848c0064d4d5f2788f26f1d35bc01f791cabf42
GET /wp-content/uploads/2023/11/104999p.jpg HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: image/jpeg
content-length: 43085
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
etag: "a84d-65699ea5-65f2fca;;;"
expires: Thu, 14 Dec 2023 11:45:17 GMT
last-modified: Fri, 01 Dec 2023 08:51:49 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 45369
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d8V5UAawyZxiBpuwNJFGMDF%2FdcWlCuXWrBlR7eL5Bu%2BUPt5SoKp8VorqkkS%2B1myC61m8za5EJYaMgVzNDd0RqgHFWVxYZuaxAuGWMLVzQQjXENHTe2KNXSsXngFoljbF1g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d9290822712a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/6010342150592530095/2041641?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos
200 OK 1.9 kB URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/6010342150592530095/2041641?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type XML document, ASCII text, with very long lines (1977), with no line terminators
Hash 2f0debf5cafd435f84521d3f58dfe206
9f055972c85bc56c3c2bcb9a01b3e2a150b7784e
953b06b6f8dfe359e08b902771a64c4b7eb61d8d6a95ecf0b15bfc3c32c6996b
GET /api/users/6010342150592530095/2041641?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://justthegays.com
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
go.fxmnba.com/app/domain-checker/check-result
204 No Content 0 B URL POST HTTP/3 go.fxmnba.com/app/domain-checker/check-result
IP
Requested by https://creative.fxmnba.com/widgets/v4/Universal?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&mlView=1&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&usePreroll=0&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&webp=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint11:C8:29:33:4C:A0:2A:F3:EF:92:BC:95:11:62:B8:7A:AD:73:70:42
ValiditySun, 26 Feb 2023 00:00:00 GMT - Sun, 25 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /app/domain-checker/check-result HTTP/1.1
Host: go.fxmnba.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.fxmnba.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 174
Origin: https://creative.fxmnba.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
date: Fri, 08 Dec 2023 00:21:31 GMT
access-control-allow-origin: https://creative.fxmnba.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=0H28upDCGznfDm9XVE9SipefN9YVHPoYyn2RtewztpC; SameSite=None; Secure; path=/; expires=Sat, 09-Dec-23 00:21:31 GMT; HttpOnly
server: cloudflare
cf-ray: 8320d944bcfd56bf-OSL
alt-svc: h3=":443"; ma=86400
justthegays.com/wp-content/themes/videotube/assets/js/readmore.min.js?ver=1685188737
200 OK 4.0 kB URL GET HTTP/2 justthegays.com/wp-content/themes/videotube/assets/js/readmore.min.js?ver=1685188737
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type HTML document, ASCII text, with very long lines (4209), with no line terminators
Hash 8f9b2357cba7ede53475844982141af2
f936bc2075713d341bc3ac2b4637667d99de60e1
353e26c23ddb7793d1082cb4762c7d90014050df19255698e0f18f2187b2bdae
GET /wp-content/themes/videotube/assets/js/readmore.min.js?ver=1685188737 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:10:16 GMT
etag: W/"fc9-6471f081-65e040c;gz"
last-modified: Sat, 27 May 2023 11:58:57 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47470
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jpkN8h2qpyWns1oC2V8%2BOC92ydBEAWPdo%2BnECwBPIqr6Ha0nol%2BgoY9FzhiN7mnb7Vnwe1S3bN7k4hb1ppcHjd6g3pkp8VvAxpR1O0MIwnu7q1bYxRpdGqoLAYaIze%2B2Qg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d926bf03712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
justthegays.com/wp-content/uploads/2022/11/cropped-JustTheGays-32x32.png
200 OK 888 B URL GET HTTP/2 justthegays.com/wp-content/uploads/2022/11/cropped-JustTheGays-32x32.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4768abfa1cd38e0a1ff7b89a8bed2d72
3ffe74063bdc94e9480adfd29f921fbe296a48fb
49c22c66416141160eea915e4168c5d8c1f66b2701bf4d363cf17e92ddf2ea64
GET /wp-content/uploads/2022/11/cropped-JustTheGays-32x32.png HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.1.1701994893.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: image/webp
content-length: 888
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1068
content-disposition: inline; filename="cropped-JustTheGays-32x32.webp"
vary: Accept
etag: "42c-63c54169-72f31b2;;;"
expires: Thu, 14 Dec 2023 11:10:19 GMT
last-modified: Mon, 16 Jan 2023 12:22:01 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47468
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gg6HPtgtVepmemLELsY2YVINvGTloYg%2B2YxdyYxq0DLHwtBEQccQczNUCiAepnhece%2FPn4BxSvhQYIaDH3A9ATjiFjoRNmgPy9Ei4W0BYiz4nPojKS4f7LmCPlB5dUpnFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d92c69f8712a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
go.sexfortokens.com/api/models/vast?action=sbSignupWithModel&campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&campaignType=smartpop&creativeId=b8f820c89e49c30a413b7360dc36f8c9cc13dd1f3d59a594d0b2c0f903b3991f&domain=stripchat&duration=00%3A00%3A30&iterationId=752079&masterSmartpopId=2683&memberId=dYJcEXXiPvslXzkDdE57OdZog6BNLqLyVwlknKjEMXyAe_v8mfCCNZk92Z3eCaatIQyLP67d3YXZ6E1pC7nTR3681TrnbO_naBncV0mRTG3nRo4l_gUIDRUi&ruleId=149&skipOffset=00%3A00%3A05&smartpopId=10518&sourceId=tstars-preroll-43579-4298530&tag=men&usePreroll=true&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&variationId=31922
200 OK 2.2 kB URL GET HTTP/3 go.sexfortokens.com/api/models/vast?action=sbSignupWithModel&campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&campaignType=smartpop&creativeId=b8f820c89e49c30a413b7360dc36f8c9cc13dd1f3d59a594d0b2c0f903b3991f&domain=stripchat&duration=00%3A00%3A30&iterationId=752079&masterSmartpopId=2683&memberId=dYJcEXXiPvslXzkDdE57OdZog6BNLqLyVwlknKjEMXyAe_v8mfCCNZk92Z3eCaatIQyLP67d3YXZ6E1pC7nTR3681TrnbO_naBncV0mRTG3nRo4l_gUIDRUi&ruleId=149&skipOffset=00%3A00%3A05&smartpopId=10518&sourceId=tstars-preroll-43579-4298530&tag=men&usePreroll=true&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&variationId=31922
IP
Certificate IssuerCloudflare, Inc.
Subjectsexfortokens.com
Fingerprint14:74:83:B8:1B:D5:4F:1D:A3:FD:1B:C0:F1:C8:9F:C4:71:56:16:CA
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT
File type XML document, ASCII text, with very long lines (2235), with no line terminators
Hash ced7b28b27b1fa87a185cf0185c0a4ed
108d7e7fa6fde02cfc14bf9379df1e5c7b5d3a38
e3d44c87793566872c694e51a5304afdd5a5a3c95f5dd7d60c9ec7dacc5747e1
GET /api/models/vast?action=sbSignupWithModel&campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&campaignType=smartpop&creativeId=b8f820c89e49c30a413b7360dc36f8c9cc13dd1f3d59a594d0b2c0f903b3991f&domain=stripchat&duration=00%3A00%3A30&iterationId=752079&masterSmartpopId=2683&memberId=dYJcEXXiPvslXzkDdE57OdZog6BNLqLyVwlknKjEMXyAe_v8mfCCNZk92Z3eCaatIQyLP67d3YXZ6E1pC7nTR3681TrnbO_naBncV0mRTG3nRo4l_gUIDRUi&ruleId=149&skipOffset=00%3A00%3A05&smartpopId=10518&sourceId=tstars-preroll-43579-4298530&tag=men&usePreroll=true&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&variationId=31922 HTTP/1.1
Host: go.sexfortokens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://justthegays.com
Referer: https://justthegays.com/
DNT: 1
Connection: keep-alive
Cookie: __cflb=02DiuGyDLPvii6XBe57uvfNJUFkxLJd5CWXyTtVddsRoi
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:28 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=15768000
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
access-control-allow-origin: https://justthegays.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8320d9335a66b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
kts.cvastico.com/in/959/?katds_ep=dEFUQ_ZbVpYJW-RVVUkxSXy5BRW4Fdepn1xCUKKaazSzGxJzyb7OzqJnge1j-2Jz7o-wRz7Hd8rznJUROZdgTDC4o3cWtpNg668sbql6wyPzuQPSQ8t2jjndhakAg1DAwiuzrWb15tg44ibtK8dYpHQCM5jDz-feU1NArEdxaI9yeWOlw98QwNJyGN2ZcciIkPou6oWUJC0nw7f65U1U3YAW_4bB3PSSHuYj_2JU71CEz6DRPVYja6hoxspb49mLV2-h6M-VnY46PCs8nx-_k_21Qao7FIMaYU7N2uNHa-goHMrESMfRXuz7RJ0LcnGB8iykfEdBTchZSRhng_w3U1ZH5JrHWx84r0R_JR5RfyWzwipmuqGy66gXlw3sArCZcaWGb3S72Bd7a-lSHuzYzgJpVutj8lfDgUZgkNvR5kh1Xqil2MY_7kt7JrMdLqbp0Foer_ppk6eYaHXjPSdBrwiWhP0Un1Pqu5a4eDkPEF-UFPFHKf2Doq8tQmWsFVUSMIUlO8-1JnQLVidkYmwa6ulj-Qd2jS13LNkjE00groYR8-QebbSql7w2CblJSno45VoXfQtBdP8KDVnuxTipzfMbwpQGShIbRQ5ydsJ6A3Sp-u1LkKxXQHBNV157ljQUrvA4WmLuOoZlrVenHltrbhs47RiYKP7Ml5eLRuXv8LqU-mw4a1P8f_MMDShEZq1DSYqxnHZq9fC7jxs8gc02n3xqf9EwMYTdiSIxYnDj_yXXKUffjBfOGUs4WnjrQ0ViibklTKy20WIlrPR5irpByx9orRInAwxZ8gbDlOprc9fpzheRXyAaFiPI5NwnkRpNoc8HHjXKXgOwCBjQ_69NMfZmSGiS5A433jQViRfEjv-26c7xo7678sWHPvfWUrp1MlUV0K2AlYhulLsxDbyo-MVGFRU70ZYRdJ2RvqxEir_v-Utm0_gUS9Juny9ABhDbZ87NR3Wy1XNf0207cG-fqOh0Lzv6rGJqze2TvAUVOhAoGdEojC1EssnDIuXnV4n4adt9Udh7Zf_IJlPS-NbVEO6HMXSvds9zQlIfXBvVC1KhwUON_JJjwgY41Mri3XWMrarPOnGigMkI0yHhvsoR4Sc2x6C_W6VNdwmk5UKiBFcrNgaRnLod7dAQeKin_g&bid=0.0099
200 OK 1.6 kB URL GET HTTP/2 kts.cvastico.com/in/959/?katds_ep=dEFUQ_ZbVpYJW-RVVUkxSXy5BRW4Fdepn1xCUKKaazSzGxJzyb7OzqJnge1j-2Jz7o-wRz7Hd8rznJUROZdgTDC4o3cWtpNg668sbql6wyPzuQPSQ8t2jjndhakAg1DAwiuzrWb15tg44ibtK8dYpHQCM5jDz-feU1NArEdxaI9yeWOlw98QwNJyGN2ZcciIkPou6oWUJC0nw7f65U1U3YAW_4bB3PSSHuYj_2JU71CEz6DRPVYja6hoxspb49mLV2-h6M-VnY46PCs8nx-_k_21Qao7FIMaYU7N2uNHa-goHMrESMfRXuz7RJ0LcnGB8iykfEdBTchZSRhng_w3U1ZH5JrHWx84r0R_JR5RfyWzwipmuqGy66gXlw3sArCZcaWGb3S72Bd7a-lSHuzYzgJpVutj8lfDgUZgkNvR5kh1Xqil2MY_7kt7JrMdLqbp0Foer_ppk6eYaHXjPSdBrwiWhP0Un1Pqu5a4eDkPEF-UFPFHKf2Doq8tQmWsFVUSMIUlO8-1JnQLVidkYmwa6ulj-Qd2jS13LNkjE00groYR8-QebbSql7w2CblJSno45VoXfQtBdP8KDVnuxTipzfMbwpQGShIbRQ5ydsJ6A3Sp-u1LkKxXQHBNV157ljQUrvA4WmLuOoZlrVenHltrbhs47RiYKP7Ml5eLRuXv8LqU-mw4a1P8f_MMDShEZq1DSYqxnHZq9fC7jxs8gc02n3xqf9EwMYTdiSIxYnDj_yXXKUffjBfOGUs4WnjrQ0ViibklTKy20WIlrPR5irpByx9orRInAwxZ8gbDlOprc9fpzheRXyAaFiPI5NwnkRpNoc8HHjXKXgOwCBjQ_69NMfZmSGiS5A433jQViRfEjv-26c7xo7678sWHPvfWUrp1MlUV0K2AlYhulLsxDbyo-MVGFRU70ZYRdJ2RvqxEir_v-Utm0_gUS9Juny9ABhDbZ87NR3Wy1XNf0207cG-fqOh0Lzv6rGJqze2TvAUVOhAoGdEojC1EssnDIuXnV4n4adt9Udh7Zf_IJlPS-NbVEO6HMXSvds9zQlIfXBvVC1KhwUON_JJjwgY41Mri3XWMrarPOnGigMkI0yHhvsoR4Sc2x6C_W6VNdwmk5UKiBFcrNgaRnLod7dAQeKin_g&bid=0.0099
IP
Certificate IssuerLet's Encrypt
Subjectkts.cvastico.com
Fingerprint39:E8:01:61:0E:F8:EB:6D:F6:C6:1B:17:C8:25:1E:95:CE:DE:90:E7
ValidityWed, 06 Dec 2023 03:06:17 GMT - Tue, 05 Mar 2024 03:06:16 GMT
File type XML document, ASCII text, with very long lines (1565), with no line terminators
Hash 02f5da3559fb6efa1cba056c4598c84c
8d5ca8ec98b8422c998add1c055efdf78e38cf9f
45dca24e629514cfca23f8eb2b65bb88f9bf90db85beab43ca37d5f12ade9ece
GET /in/959/?katds_ep=dEFUQ_ZbVpYJW-RVVUkxSXy5BRW4Fdepn1xCUKKaazSzGxJzyb7OzqJnge1j-2Jz7o-wRz7Hd8rznJUROZdgTDC4o3cWtpNg668sbql6wyPzuQPSQ8t2jjndhakAg1DAwiuzrWb15tg44ibtK8dYpHQCM5jDz-feU1NArEdxaI9yeWOlw98QwNJyGN2ZcciIkPou6oWUJC0nw7f65U1U3YAW_4bB3PSSHuYj_2JU71CEz6DRPVYja6hoxspb49mLV2-h6M-VnY46PCs8nx-_k_21Qao7FIMaYU7N2uNHa-goHMrESMfRXuz7RJ0LcnGB8iykfEdBTchZSRhng_w3U1ZH5JrHWx84r0R_JR5RfyWzwipmuqGy66gXlw3sArCZcaWGb3S72Bd7a-lSHuzYzgJpVutj8lfDgUZgkNvR5kh1Xqil2MY_7kt7JrMdLqbp0Foer_ppk6eYaHXjPSdBrwiWhP0Un1Pqu5a4eDkPEF-UFPFHKf2Doq8tQmWsFVUSMIUlO8-1JnQLVidkYmwa6ulj-Qd2jS13LNkjE00groYR8-QebbSql7w2CblJSno45VoXfQtBdP8KDVnuxTipzfMbwpQGShIbRQ5ydsJ6A3Sp-u1LkKxXQHBNV157ljQUrvA4WmLuOoZlrVenHltrbhs47RiYKP7Ml5eLRuXv8LqU-mw4a1P8f_MMDShEZq1DSYqxnHZq9fC7jxs8gc02n3xqf9EwMYTdiSIxYnDj_yXXKUffjBfOGUs4WnjrQ0ViibklTKy20WIlrPR5irpByx9orRInAwxZ8gbDlOprc9fpzheRXyAaFiPI5NwnkRpNoc8HHjXKXgOwCBjQ_69NMfZmSGiS5A433jQViRfEjv-26c7xo7678sWHPvfWUrp1MlUV0K2AlYhulLsxDbyo-MVGFRU70ZYRdJ2RvqxEir_v-Utm0_gUS9Juny9ABhDbZ87NR3Wy1XNf0207cG-fqOh0Lzv6rGJqze2TvAUVOhAoGdEojC1EssnDIuXnV4n4adt9Udh7Zf_IJlPS-NbVEO6HMXSvds9zQlIfXBvVC1KhwUON_JJjwgY41Mri3XWMrarPOnGigMkI0yHhvsoR4Sc2x6C_W6VNdwmk5UKiBFcrNgaRnLod7dAQeKin_g&bid=0.0099 HTTP/1.1
Host: kts.cvastico.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 08 Dec 2023 00:21:28 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://justthegays.com
content-encoding: gzip
X-Firefox-Spdy: h2
go.sexfortokens.com/api/models/vast?action=sbSignupWithModel&campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&campaignType=smartpop&creativeId=b8f820c89e49c30a413b7360dc36f8c9cc13dd1f3d59a594d0b2c0f903b3991f&domain=stripchat&duration=00%3A00%3A30&iterationId=752079&masterSmartpopId=2683&memberId=U4fmllXqX8AJC0fvTxrzgz_Z59OZrKCX1Ve8JtSvIm_XjojHubMwKaBMaLr75drk3xInVQ-ox8RzRJA0rpJBNrNCwxbhMiXLLbI4zwBXy5IQR9KJ_gUIDRUi&ruleId=149&skipOffset=00%3A00%3A05&smartpopId=10518&sourceId=tstars-preroll-43579-4298531&tag=men&usePreroll=true&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&variationId=31922
200 OK 2.2 kB URL GET HTTP/3 go.sexfortokens.com/api/models/vast?action=sbSignupWithModel&campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&campaignType=smartpop&creativeId=b8f820c89e49c30a413b7360dc36f8c9cc13dd1f3d59a594d0b2c0f903b3991f&domain=stripchat&duration=00%3A00%3A30&iterationId=752079&masterSmartpopId=2683&memberId=U4fmllXqX8AJC0fvTxrzgz_Z59OZrKCX1Ve8JtSvIm_XjojHubMwKaBMaLr75drk3xInVQ-ox8RzRJA0rpJBNrNCwxbhMiXLLbI4zwBXy5IQR9KJ_gUIDRUi&ruleId=149&skipOffset=00%3A00%3A05&smartpopId=10518&sourceId=tstars-preroll-43579-4298531&tag=men&usePreroll=true&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&variationId=31922
IP
Certificate IssuerCloudflare, Inc.
Subjectsexfortokens.com
Fingerprint14:74:83:B8:1B:D5:4F:1D:A3:FD:1B:C0:F1:C8:9F:C4:71:56:16:CA
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT
File type XML document, ASCII text, with very long lines (2235), with no line terminators
Hash a2eb18c1aa9778128735366b02d159ef
9cacd66969bbc90091c9669d9ad81ee3c7022abf
33be05a9b015c1b5915f118c9f1c47676a7de5961fbc13d9aa1f7a3fd3f8d979
GET /api/models/vast?action=sbSignupWithModel&campaignId=885c0c4d4b05d3683d0a82b5a1f0d43427419bac5039de58e89767f045995b72&campaignType=smartpop&creativeId=b8f820c89e49c30a413b7360dc36f8c9cc13dd1f3d59a594d0b2c0f903b3991f&domain=stripchat&duration=00%3A00%3A30&iterationId=752079&masterSmartpopId=2683&memberId=U4fmllXqX8AJC0fvTxrzgz_Z59OZrKCX1Ve8JtSvIm_XjojHubMwKaBMaLr75drk3xInVQ-ox8RzRJA0rpJBNrNCwxbhMiXLLbI4zwBXy5IQR9KJ_gUIDRUi&ruleId=149&skipOffset=00%3A00%3A05&smartpopId=10518&sourceId=tstars-preroll-43579-4298531&tag=men&usePreroll=true&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&variationId=31922 HTTP/1.1
Host: go.sexfortokens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://justthegays.com
Referer: https://justthegays.com/
DNT: 1
Connection: keep-alive
Cookie: __cflb=02DiuGyDLPvii6XBe57uvfNJUFkxLJd5CWXyTtVddsRoi
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:28 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=15768000
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
access-control-allow-origin: https://justthegays.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8320d9335a69b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
justthegays.com/wp-content/uploads/2023/12/105554p.jpg
200 OK 130 kB URL GET HTTP/2 justthegays.com/wp-content/uploads/2023/12/105554p.jpg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 943x527, components 3\012- data
Size 130 kB (130077 bytes)
Hash 9d5245456aaf42e5d7b687dae186e8ca
92058f4586e2721d9e0f84923ca44adc82716ee7
05333833e26134c888e40c7c7268ab70c61c89b51fd82e7cf39df2c51b9a0cab
GET /wp-content/uploads/2023/12/105554p.jpg HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: image/jpeg
content-length: 130077
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: origSize=138473
etag: "21ce9-6571a58c-18a0558;;;"
expires: Thu, 14 Dec 2023 11:41:31 GMT
last-modified: Thu, 07 Dec 2023 10:59:24 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 45595
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JX0kzTDHEu9rNYr%2BhiGXGgYezIFSK7%2BQX29g0ZE9xcTUE7sz%2BZHj8D4yciDzwS6T3OEMRHOPaS2QaJdY%2BO3hR7MI6phJh6tGICK5i0s%2BnrYxP37JeDfG48%2F0Cys9%2FRGIWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d9290828712a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
justthegays.com/wp-content/uploads/2023/12/105553p.jpg
200 OK 16 kB URL GET HTTP/2 justthegays.com/wp-content/uploads/2023/12/105553p.jpg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 400x225, components 3\012- data
Hash f428610b5d885ccf2629a31a514b1a24
8300cd77b6bc422e322d46f4a40bcd22adcf26db
80b39ebf3b0987eb0a7ae88c3f7ae877510fbbb7f6bf0dd717ef1559edf727d8
GET /wp-content/uploads/2023/12/105553p.jpg HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.1.1701994893.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: image/jpeg
content-length: 15489
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: origSize=16328
etag: "3fc8-65710f6a-18a0843;;;"
expires: Thu, 14 Dec 2023 11:41:31 GMT
last-modified: Thu, 07 Dec 2023 00:18:50 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 45595
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9RUrccg840%2F65RKYogScwIKg%2BaEMbPHd8jE1%2F1WJjCZQRwxFl3d8NBbb5LEv9La38UhfoWk3cGVfhTf7Hor5BwfC0PlEsL6aPtOledkW5L2boRVhovVr1djNlPQSsX89gw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d92ba992712a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
tsyndicate.com/iframes2/645ad092a0974b48afa7ebf013ea199d.html?keywords=agent%2Cphp&adb=0&clientjs=1&w=1280&h=1024&tz=0
200 OK 7.5 kB URL GET HTTP/2 tsyndicate.com/iframes2/645ad092a0974b48afa7ebf013ea199d.html?keywords=agent%2Cphp&adb=0&clientjs=1&w=1280&h=1024&tz=0
IP
ASN #24940 Hetzner Online GmbH
Requested by https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/agent.php?spot=407029
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (7600), with no line terminators
Hash 00a69998750f56313d6a3d6d37d6b947
6a59ade8368cec79e529a121ed70a13c0d2670a9
7363cecad526931da522aee822d57e8687aa38a1881adbfe25ea10a0e60377c2
GET /iframes2/645ad092a0974b48afa7ebf013ea199d.html?keywords=agent%2Cphp&adb=0&clientjs=1&w=1280&h=1024&tz=0 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script, <https://lcdn.tsyndicate.com/images/0/0/8302eea9354d56b5b39e1a7bd3e42fc3e4bab2/main.jpg>; rel=preload; as=image
x-request-id: 0d54ce1497245db9
set-cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03; expires=Sat, 08 Jun 2024 00:21:27 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
creative.fxmnba.com/widgets/v4/Universal/main.af7ca474e642b518be23.js
200 OK 282 kB URL GET HTTP/3 creative.fxmnba.com/widgets/v4/Universal/main.af7ca474e642b518be23.js
IP
Requested by https://creative.fxmnba.com/widgets/v4/Universal?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&mlView=1&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&usePreroll=0&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&webp=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint11:C8:29:33:4C:A0:2A:F3:EF:92:BC:95:11:62:B8:7A:AD:73:70:42
ValiditySun, 26 Feb 2023 00:00:00 GMT - Sun, 25 Feb 2024 23:59:59 GMT
Size 282 kB (281759 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /widgets/v4/Universal/main.af7ca474e642b518be23.js HTTP/1.1
Host: creative.fxmnba.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.fxmnba.com/widgets/v4/Universal?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&mlView=1&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&usePreroll=0&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&webp=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:30 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 05 Dec 2023 10:59:44 GMT
etag: W/"656f02a0-44c9f"
expires: Fri, 08 Dec 2023 00:21:36 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 2
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d93eea3b56bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
justthegays.com/wp-content/plugins/videopack-ads/public/video-js/v8/videojs.ads.min.js?ver=1.0.4
200 OK 31 kB URL GET HTTP/2 justthegays.com/wp-content/plugins/videopack-ads/public/video-js/v8/videojs.ads.min.js?ver=1.0.4
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type ASCII text, with very long lines (30933)
Hash 93279f139a8c95dd10beb427355ea199
21d565fa67d123650af78f0485e4c251e1a1f4de
c9c20ad719fffd1081503dc6f75fc700b3c296ce6e65354e3767b21377d82aa9
GET /wp-content/plugins/videopack-ads/public/video-js/v8/videojs.ads.min.js?ver=1.0.4 HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: application/x-javascript
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 11:10:16 GMT
etag: W/"791a-652e37ad-61e016a;gz"
last-modified: Tue, 17 Oct 2023 07:28:45 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 47470
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KE7J4Tvz28W79V4iQx2H63dSKWrVreABzOW05TYfpgIZLUK8sQd5u9UQNKNG586ZvAQ2Kh%2BDMn2t%2BvjK0wcO1pwjsJCCh%2B64wts3rABcp6%2FxNPzwv%2B1Q9GjumIrrp84Jcw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8320d9269ee4712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/16140767996794732095/2011913?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos
200 OK 2.2 kB URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/16140767996794732095/2011913?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type XML document, ASCII text, with very long lines (2245), with no line terminators
Hash b69c71ab023ce219c133f3a47d5c9231
2e6d9f49db4e4f525a5f63af9635b7e8e2c0e366
b756a6db3097fb31f59d0d60bf8a44c2d0bc9baaff705e5e8ffc194de2c3768c
GET /api/users/16140767996794732095/2011913?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://justthegays.com
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
tsyndicate.com/do2/0103b5361dbc490790d36d91a80ee109/vast?subid=&categories=gay+porn%2Cgay+porno%2Cgay+teen+porn%2Chot+gay+videos%2Conlyfans%2Cgayforfans%2Cjust+for+fans%2C4myfans%2Ctwink%2Csex%2Cjerk+off%2Ccum%2Cxxx%2Canal%2Cblowjob%2Cgrindr%2Cdildo%2CGay+for+Pay%2CGay%2CAdult+videos%2CJustForfans%2Cxxx+videos
200 OK 5.6 kB URL GET HTTP/2 tsyndicate.com/do2/0103b5361dbc490790d36d91a80ee109/vast?subid=&categories=gay+porn%2Cgay+porno%2Cgay+teen+porn%2Chot+gay+videos%2Conlyfans%2Cgayforfans%2Cjust+for+fans%2C4myfans%2Ctwink%2Csex%2Cjerk+off%2Ccum%2Cxxx%2Canal%2Cblowjob%2Cgrindr%2Cdildo%2CGay+for+Pay%2CGay%2CAdult+videos%2CJustForfans%2Cxxx+videos
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type XML document, ASCII text, with very long lines (5603), with no line terminators
Hash 5171ebf3aa30ab53ee5cbaa31ef76a9c
a985d64b3a0f6ff309f507b1246b06d7b09f524e
42edf27141c33b74ffabbab4701c04355be446e30a0a6f52d8e20b384c02e118
GET /do2/0103b5361dbc490790d36d91a80ee109/vast?subid=&categories=gay+porn%2Cgay+porno%2Cgay+teen+porn%2Chot+gay+videos%2Conlyfans%2Cgayforfans%2Cjust+for+fans%2C4myfans%2Ctwink%2Csex%2Cjerk+off%2Ccum%2Cxxx%2Canal%2Cblowjob%2Cgrindr%2Cdildo%2CGay+for+Pay%2CGay%2CAdult+videos%2CJustForfans%2Cxxx+videos HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:28 GMT
content-type: application/xml; charset=utf-8
access-control-allow-origin: https://justthegays.com
access-control-allow-methods: POST, GET, HEAD
access-control-allow-headers: Accept, X-Requested-With, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy
access-control-allow-credentials: true
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
x-vast: 3.0
x-request-id: 50082d5374cfdabf
set-cookie: ts_uid=f9a2350c-b814-4293-838d-5cdc42f5ef03; expires=Sat, 08 Jun 2024 00:21:28 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCx5YZN2QkhCGjCwsRYwpuieFQRBmJMW4whIEjhgwcOLr0URAQ; expires=Sat, 09 Dec 2023 00:21:28 GMT; domain=.tsyndicate.com; path=/; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
s.magsrv.com/splash.php?idzone=5075896&sub=415713696&ad_tags=
200 OK 6.1 kB URL GET HTTP/1.1 s.magsrv.com/splash.php?idzone=5075896&sub=415713696&ad_tags=
IP
ASN #60781 LeaseWeb Netherlands B.V.
Certificate IssuerLet's Encrypt
Subjectmagsrv.com
FingerprintC5:BC:C0:62:0C:DC:A9:D2:61:A6:77:A9:6C:31:19:AD:CD:2E:00:67
ValidityThu, 05 Oct 2023 15:26:28 GMT - Wed, 03 Jan 2024 15:26:27 GMT
File type XML document, ASCII text, with very long lines (6122), with no line terminators
Hash ea4eeea3206c4e4a4a48ac2bc13fdb93
80e6523ef756c56447b830532599de05c58f82f1
dc4b9178f8bc9dd766275cea25afa3622eac46f917e510e7b05fef580e9344f2
GET /splash.php?idzone=5075896&sub=415713696&ad_tags= HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 08 Dec 2023 00:21:28 GMT
Content-Type: text/xml;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Headers: X-CH-VALUES
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%2265726188aae5d0.04250301237272331%22%3B%7D; expires=Sun, 07 Dec 2025 00:21:28 GMT; path=; domain=.magsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C5075896%7C89281690%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C415713696%7Cjustthegays.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1701994888%7C2c22b3e06ec34057b52155e8419c699c%7Cok%22%7D; expires=Sat, 09 Dec 2023 00:21:28 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none
Cache-Control: no-store
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: https://justthegays.com
Access-Control-Allow-Credentials: true
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/spots/407029
200 OK 278 B URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/spots/407029
IP
ASN #24940 Hetzner Online GmbH
Requested by https://6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/agent.php?spot=407029
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type ASCII text, with very long lines (313), with no line terminators
Hash 965ceac8b1e53f748e7c1ecc288d3b15
4ab6237937c1d9b5694857de33705e2440fafd9a
8bf6e45c0220630e5c4631c151bd699175db39433dcac9ab93cdcf794692ac48
GET /api/spots/407029 HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/16140767996794732095/1995702?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos
200 OK 2.2 kB URL GET HTTP/2 fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz/api/users/16140767996794732095/1995702?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecta.kainpopoy.com
FingerprintC3:A0:4A:E1:FD:8F:13:AA:57:82:A1:48:49:49:CA:4B:E3:5C:64:33
ValidityMon, 06 Nov 2023 16:27:10 GMT - Sun, 04 Feb 2024 16:27:09 GMT
File type XML document, ASCII text, with very long lines (2274), with no line terminators
Hash 5dc8ef9aa31dbe5736afb6bb822f384e
53f7bc62d0f79d88e58cba96d9e6b71a674664d3
679c5bf42b90dbea791da79358e3549e7b5f2c0e466b0484fab213a4a9fe69a7
GET /api/users/16140767996794732095/1995702?fill=0&kw=gay%20porn,gay%20porno,gay%20teen%20porn,hot%20gay%20videos,onlyfans,gayforfans,just%20for%20fans,4myfans,twink,sex,jerk%20off,cum,xxx,anal,blowjob,grindr,dildo,Gay%20for%20Pay,Gay,Adult%20videos,JustForfans,xxx%20videos HTTP/1.1
Host: fg850ik01.6g0blqi1541polz4n0kjvwo1kjl5tcx30.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Cookie: nauid=K3OcUo4vVogDqkpeLvOy
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 00:21:27 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://justthegays.com
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
go.fxmnba.com/app/domain-checker/get-check
200 OK 127 B URL GET HTTP/3 go.fxmnba.com/app/domain-checker/get-check
IP
Requested by https://creative.fxmnba.com/widgets/v4/Universal?action=sbSignupWithModel&buttonColor=%23930606&campaignId=128029786fbed96fe880330bb083ecce41e122ba08e2711908bc9493ef368344&campaignType=smartpop&creativeId=d61a8beea3946d486612a3452b3d53ba84299ee51efd9260534d85230347af08&iterationId=765913&liveBadgeColor=%23ff0707&masterSmartpopId=1914&memberId=SW4B8u900t1Oui8kmB_WLGh2e_GP8kwNuetXM3X6AQnDv-OxpvQyS8D_DfYIs8MpFpuCLHQ4qN0VwPc7qS9PMhVWLE8sj9ULjwsakFSbDn_1jYc_gUIDRUi&mlView=1&p1=4381331&quality=240p&ruleId=17&smartpopId=1548&sourceId=271333&usePreroll=0&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=32246&webp=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint11:C8:29:33:4C:A0:2A:F3:EF:92:BC:95:11:62:B8:7A:AD:73:70:42
ValiditySun, 26 Feb 2023 00:00:00 GMT - Sun, 25 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 1ff1ecc0c24ed90edec4a71f0264ce2b
01984682c5d7eaac7c3e371b0afaea45397c1560
fef7a6b4423eac51dfab445a2b1a2a6321045200988804bdb269ca87337cfb8b
GET /app/domain-checker/get-check HTTP/1.1
Host: go.fxmnba.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.fxmnba.com/
Origin: https://creative.fxmnba.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 08 Dec 2023 00:21:30 GMT
content-type: application/json
access-control-allow-origin: https://creative.fxmnba.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=0H28upDCGznfDm9XVE9CKHVnP1Wapb1Rgb3nqsweDwr; SameSite=None; Secure; path=/; expires=Sat, 09-Dec-23 00:21:30 GMT; HttpOnly
server: cloudflare
cf-ray: 8320d942fc4056bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
200 OK 466 kB URL User Request GET HTTP/2 IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (27422)
Size 466 kB (465909 bytes)
Hash 38c56b7492abccae9ffa3c840b0aa46f
7be8b4b9871f3f6cf26063537bf607d10d146481
b2cb7367f25a29cd6ec0800084a08e4eb0a5673d3db61710d9889f85093a3908
GET / HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: text/html; charset=UTF-8
cf-ray: 8320d9258e4b712a-OSL
cf-cache-status: HIT
age: 5380
cache-control: max-age=14400
last-modified: Thu, 07 Dec 2023 22:51:46 GMT
link: <https://justthegays.com/wp-json/>; rel="https://api.w.org/", <https://justthegays.com/wp-json/wp/v2/pages/28>; rel="alternate"; type="application/json", <https://justthegays.com/>; rel=shortlink
vary: Accept-Encoding
cf-apo-via: tcache
cf-edge-cache: cache,platform=wordpress
x-dns-prefetch-control: on
x-litespeed-cache: hit
x-turbo-charged-by: LiteSpeed
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lIYdWNP9WfVMUQEUWT8wwmK4ErZf0K3wVfCC2g3OWVB9NWSW261mth8lgxN8rLoAw8yIaOzcAHqymxuhZe9sv8vFtFp8DTe2LyiWV%2BeDPskdCrLLa5F33r4UVA7TChbyug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
justthegays.com/wp-content/uploads/2023/12/105552p.jpg
200 OK 13 kB URL GET HTTP/2 justthegays.com/wp-content/uploads/2023/12/105552p.jpg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectjustthegays.com
FingerprintFD:00:FF:8E:A1:7C:11:70:AD:CF:72:A2:B3:D3:9A:3B:6F:6F:19:FB
ValidityTue, 14 Nov 2023 08:37:33 GMT - Mon, 12 Feb 2024 08:37:32 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 400x225, components 3\012- data
Hash 6b45bfd3bef997bd247faa9e73446e2b
2ababd37b109d5d8b144f294a5e27ea43212a32b
bbae9e8207a52c66b9a247c32d69055f14f87416d9e61c2ded70ac9c1b73c1b2
GET /wp-content/uploads/2023/12/105552p.jpg HTTP/1.1
Host: justthegays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justthegays.com/
Cookie: _lscache_vary=b9ee7ef64cc0a71ad277ffb131ab7312; _ga_XJ5QG4KZKS=GS1.1.1701994890.1.0.1701994890.0.0.0; _ga=GA1.1.272835677.1701994891; asgfp2=e19e1989b72653a7152c87a7240d524a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 00:21:26 GMT
content-type: image/jpeg
content-length: 12856
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: origSize=13691
etag: "357b-65710f67-18a083c;;;"
expires: Thu, 14 Dec 2023 11:41:31 GMT
last-modified: Thu, 07 Dec 2023 00:18:47 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 45595
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A6yWgZWxE89Ds9lB9xelk%2BJ4T09iJmx64P8klCKx11Vd7258fflh2J9bBUIqM8pVlMwMC6%2B3%2BTTR4H8C7skkuOwO%2F2SrFVTWzmWjnICoNm4r3wdU6HK3DVNmWKjuECbEKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8320d9294841712a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
kts.cvastico.com/in/959/?katds_ep=C9a9MUN0RG2HDjGE1W-cnjNNzqxcSEjH7ahS3BUpzEO3p7Ag3E0BGaWhOV620DkA3Q_h-Yg5ml-1UZJYic7I2hrWcEPfWsGcvAmoxkLdBOgoJhf7cbJBv8WGHMQKme5LKYoSc3SLTSSWw2wOxTxSY9TnFv7t9w4HgfhlQe2tvmkaogPmWpbvHneZ90FwTtzkQ4_mDvJv461JMEp2KAbPOK88svM6DXSZVuxdzcxjpegDtVt2UaLmtpCfGuHybQ7ggcyNFuap6MEOKdxju2GH-94i1-q67trLhdrPC7nzFgxqgBcXnlKtznxD-mH71TX6K5qQmrGb67GKDeFbCbS2k8cTfjTircBVVcHeWAJCAA
200 OK 1.3 kB URL GET HTTP/2 kts.cvastico.com/in/959/?katds_ep=C9a9MUN0RG2HDjGE1W-cnjNNzqxcSEjH7ahS3BUpzEO3p7Ag3E0BGaWhOV620DkA3Q_h-Yg5ml-1UZJYic7I2hrWcEPfWsGcvAmoxkLdBOgoJhf7cbJBv8WGHMQKme5LKYoSc3SLTSSWw2wOxTxSY9TnFv7t9w4HgfhlQe2tvmkaogPmWpbvHneZ90FwTtzkQ4_mDvJv461JMEp2KAbPOK88svM6DXSZVuxdzcxjpegDtVt2UaLmtpCfGuHybQ7ggcyNFuap6MEOKdxju2GH-94i1-q67trLhdrPC7nzFgxqgBcXnlKtznxD-mH71TX6K5qQmrGb67GKDeFbCbS2k8cTfjTircBVVcHeWAJCAA
IP
Certificate IssuerLet's Encrypt
Subjectkts.cvastico.com
Fingerprint39:E8:01:61:0E:F8:EB:6D:F6:C6:1B:17:C8:25:1E:95:CE:DE:90:E7
ValidityWed, 06 Dec 2023 03:06:17 GMT - Tue, 05 Mar 2024 03:06:16 GMT
File type XML document, ASCII text, with very long lines (1360), with no line terminators
Hash fec1ccb9e99f129fbbbef105f34a7237
6016d2473351c697ea7fe1703efeb0b01d26fde1
c59c7bd5bc434d1274d51c43d646428a4974ae8a2cdd51e14dda877c57f2eaaa
GET /in/959/?katds_ep=C9a9MUN0RG2HDjGE1W-cnjNNzqxcSEjH7ahS3BUpzEO3p7Ag3E0BGaWhOV620DkA3Q_h-Yg5ml-1UZJYic7I2hrWcEPfWsGcvAmoxkLdBOgoJhf7cbJBv8WGHMQKme5LKYoSc3SLTSSWw2wOxTxSY9TnFv7t9w4HgfhlQe2tvmkaogPmWpbvHneZ90FwTtzkQ4_mDvJv461JMEp2KAbPOK88svM6DXSZVuxdzcxjpegDtVt2UaLmtpCfGuHybQ7ggcyNFuap6MEOKdxju2GH-94i1-q67trLhdrPC7nzFgxqgBcXnlKtznxD-mH71TX6K5qQmrGb67GKDeFbCbS2k8cTfjTircBVVcHeWAJCAA HTTP/1.1
Host: kts.cvastico.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://justthegays.com/
Origin: https://justthegays.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 08 Dec 2023 00:21:28 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://justthegays.com
content-encoding: gzip
X-Firefox-Spdy: h2
104.26.13.73
159.69.163.101
185.76.9.21
104.18.63.132
62.122.173.28
188.114.97.1
135.181.208.216
45.131.145.131
0.0.0.0