ocsp.pki.goog/gts1c3
471 B IP
Hash f6e0fad54cb828605d258b3a3fc3494d
1998f119ae42787f25cac22435e05b7d8a7ecbcc
fdde19b20684979988b4db7567fdb883ef8cd0438f4c4ef053bdd058011f1dbc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Jun 2023 20:19:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash f6e0fad54cb828605d258b3a3fc3494d
1998f119ae42787f25cac22435e05b7d8a7ecbcc
fdde19b20684979988b4db7567fdb883ef8cd0438f4c4ef053bdd058011f1dbc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Jun 2023 20:19:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 793e96f16cfbafdfdfd065788089310e
d306bdb5e8a019aa638d23cd45513e1310e5b53e
ff417cdcfab1cb1e2a6d3793ed1a81ad9823c3d91d919cbec3a8d333832a275f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Jun 2023 20:19:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 793e96f16cfbafdfdfd065788089310e
d306bdb5e8a019aa638d23cd45513e1310e5b53e
ff417cdcfab1cb1e2a6d3793ed1a81ad9823c3d91d919cbec3a8d333832a275f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Jun 2023 20:19:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-MVMB4DG
200 OK 43 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MVMB4DG
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint73:BF:B0:D4:62:48:8E:EF:09:5F:00:57:95:98:82:16:BB:07:35:0C
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type ASCII text, with very long lines (2271)
Hash 3f9a6d225fb68a08987e8d7dd97760ef
d00feb3ad6087b92b63dda56a41d3421d85564a0
4440ebf39c0629ec677942d5f6cc27fc90273dc1c8b6cb92d3b3bede3cea9ef7
GET /gtm.js?id=GTM-MVMB4DG HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 05 Jun 2023 20:19:35 GMT
expires: Mon, 05 Jun 2023 20:19:35 GMT
cache-control: private, max-age=900
last-modified: Mon, 05 Jun 2023 19:32:29 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43046
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-WSSWGK
200 OK 52 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WSSWGK
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint73:BF:B0:D4:62:48:8E:EF:09:5F:00:57:95:98:82:16:BB:07:35:0C
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type ASCII text, with very long lines (3018)
Hash e6f8962d599bd152b17acff2da6342b6
8a4eedda5ccc76d0f08297405e1ae945c589c967
0f82758b2c504ea6ab55e961afd33f8ad1c8631f652628ba41d31b9c8b64d2ff
GET /gtm.js?id=GTM-WSSWGK HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 05 Jun 2023 20:19:35 GMT
expires: Mon, 05 Jun 2023 20:19:35 GMT
cache-control: private, max-age=900
last-modified: Mon, 05 Jun 2023 19:32:29 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 51592
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 793e96f16cfbafdfdfd065788089310e
d306bdb5e8a019aa638d23cd45513e1310e5b53e
ff417cdcfab1cb1e2a6d3793ed1a81ad9823c3d91d919cbec3a8d333832a275f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Jun 2023 20:19:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash e7e560a1588ea25ad25242200936b149
946009b90527a122f590495540ca0d02f29945ec
cc56fa95fb4433116e1625385459b3dbab6ee45fd47a0c51789d9e50dc4e01e6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Jun 2023 20:19:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://upornia.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 May 2023 21:39:40 GMT
expires: Wed, 29 May 2024 21:39:40 GMT
cache-control: public, max-age=31536000
age: 513595
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
uptn.nv7s.com/gagra/vlado7.10.8.9caf560fe385ddb04adbb2507331ba18.js
200 OK 70 kB URL GET HTTP/2 uptn.nv7s.com/gagra/vlado7.10.8.9caf560fe385ddb04adbb2507331ba18.js
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
File type gzip compressed data, from Unix\012- data
Hash d8b1062506ecc46b9dfede88379240f0
a1c5e10762c68e672c4d6aca1c6653d3e292a61b
a6d793a7124ff5e22624aa27aa8c40f3832185cc149b8b1e50a6c33be9ec6082
GET /gagra/vlado7.10.8.9caf560fe385ddb04adbb2507331ba18.js HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:34 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.19.6
last-modified: Mon, 22 May 2023 12:09:56 GMT
etag: W/"646b5b94-320a0"
cache-control: max-age=5184000
content-encoding: gzip
expires: Fri, 04 Aug 2023 20:19:34 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://upornia.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Jun 2023 07:44:41 GMT
expires: Sun, 02 Jun 2024 07:44:41 GMT
cache-control: public, max-age=31536000
age: 218094
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
uptn.nv7s.com/pmkwbhris/cerfbrvfmmkg.js
200 OK 87 kB URL GET HTTP/2 uptn.nv7s.com/pmkwbhris/cerfbrvfmmkg.js
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
File type gzip compressed data, from Unix\012- data
Hash e803ef47436b54e6b67c0c7db70952b0
47eb1b2f30b2a138f1aeaccca2e7a545f63009f5
0ce0fd0153acd736aca1eeb32c89a4243484bc9bb0584b593d30d489dbfbfe53
GET /pmkwbhris/cerfbrvfmmkg.js HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:34 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.19.6
last-modified: Mon, 05 Jun 2023 20:01:07 GMT
etag: W/"647e3f03-45a84"
cache-control: max-age=5184000
content-encoding: gzip
expires: Fri, 04 Aug 2023 20:19:34 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
upornia.com/api/json/main/14400/str.en.json
200 OK 17 kB URL GET HTTP/2 upornia.com/api/json/main/14400/str.en.json
IP
Certificate IssuerLet's Encrypt
Subjectupornia.com
Fingerprint2D:33:49:89:ED:76:B0:83:22:7C:73:50:22:D9:20:69:6D:2A:30:11
ValidityWed, 19 Apr 2023 03:12:11 GMT - Tue, 18 Jul 2023 03:12:10 GMT
File type gzip compressed data, from Unix\012- data
Hash 103c2509612b3ae0f83ac987a168013a
80e68f930c5724b404f08f19f116d98dfa253d88
442632a2875f7fa876f6bf0055fd4d0186f686db785e413db3cde048caaa7373
GET /api/json/main/14400/str.en.json HTTP/1.1
Host: upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.19.6
date: Mon, 05 Jun 2023 20:19:37 GMT
content-type: application/json
last-modified: Mon, 05 Jun 2023 18:00:14 GMT
vary: Accept-Encoding
etag: W/"647e22ae-1907"
expires: Mon, 05 Jun 2023 20:24:37 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
upornia.com/api/json/models/86400/str/filt........../most-popular/15/1.json
200 OK 5.6 kB URL GET HTTP/2 upornia.com/api/json/models/86400/str/filt........../most-popular/15/1.json
IP
Certificate IssuerLet's Encrypt
Subjectupornia.com
Fingerprint2D:33:49:89:ED:76:B0:83:22:7C:73:50:22:D9:20:69:6D:2A:30:11
ValidityWed, 19 Apr 2023 03:12:11 GMT - Tue, 18 Jul 2023 03:12:10 GMT
File type gzip compressed data, from Unix\012- data
Hash 5681de00e503ee951a40afd40a327f8e
6ef7d056095c312056511cd4342ca37d9f1286b0
568fc93a7fb13e3359a139b1d6a9e0a0b445b05b2e7c0919f9e1a3de60a5b0e6
GET /api/json/models/86400/str/filt........../most-popular/15/1.json HTTP/1.1
Host: upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.19.6
date: Mon, 05 Jun 2023 20:19:37 GMT
content-type: application/json
last-modified: Mon, 05 Jun 2023 18:16:19 GMT
vary: Accept-Encoding
etag: W/"647e2673-151f"
expires: Mon, 05 Jun 2023 20:24:37 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
upornia.com/api/json/channels/86400/str/most-popular/15/all..1.json
200 OK 2.4 kB URL GET HTTP/2 upornia.com/api/json/channels/86400/str/most-popular/15/all..1.json
IP
Certificate IssuerLet's Encrypt
Subjectupornia.com
Fingerprint2D:33:49:89:ED:76:B0:83:22:7C:73:50:22:D9:20:69:6D:2A:30:11
ValidityWed, 19 Apr 2023 03:12:11 GMT - Tue, 18 Jul 2023 03:12:10 GMT
File type gzip compressed data, from Unix\012- data
Hash f20951b29dbd01dbfd2566695398e4c1
78b195d1ad10bc4049a28503be8a85c6f613119b
e9dd04ed3ba9b45898b99cf7d0309f07b4eff6c385dd596ade02b38cab45912c
GET /api/json/channels/86400/str/most-popular/15/all..1.json HTTP/1.1
Host: upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.19.6
date: Mon, 05 Jun 2023 20:19:37 GMT
content-type: application/json
last-modified: Mon, 05 Jun 2023 18:16:19 GMT
vary: Accept-Encoding
etag: W/"647e2673-216b"
expires: Mon, 05 Jun 2023 20:24:37 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
uptn.nv7s.com/images/flags/us.svg
200 OK 25 kB URL GET HTTP/2 uptn.nv7s.com/images/flags/us.svg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text, with very long lines (423)
Hash 08055e46267282026bfffd4f23bffb6a
b4075cd207577125021ffaa29658e0e013efc3d5
8736e65cfea67823b812d919d1288303e277a375832a865bb0111190f39ab227
GET /images/flags/us.svg HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uptn.nv7s.com//upd/20230526.114101.183553/static/css/chunk-common.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/svg+xml
content-length: 24722
server: nginx/1.19.6
last-modified: Mon, 22 May 2023 09:42:29 GMT
etag: "646b3905-6092"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
uptn.nv7s.com/images/flags/ro.svg
200 OK 1.9 kB URL GET HTTP/2 uptn.nv7s.com/images/flags/ro.svg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text
Hash f14818f8fbbe89a707404639dfc647a8
4419e99452a0687bf206b25706520ada887288df
8b8d80d67b2d13cdedc15537896b70c5cfbce2fb02a6d84a53067ed32adcd86e
GET /images/flags/ro.svg HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uptn.nv7s.com//upd/20230526.114101.183553/static/css/chunk-common.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/svg+xml
content-length: 1919
server: nginx/1.19.6
last-modified: Mon, 22 May 2023 09:42:29 GMT
etag: "646b3905-77f"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
uptn.nv7s.com/images/flags/au.svg
200 OK 2.9 kB URL GET HTTP/2 uptn.nv7s.com/images/flags/au.svg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text
Hash 904a7923d1688b54e3f95215125d2c33
bb39f51ccafc8d650ca1d16b865ab90f896f02fa
d814df56369135abc210d1f0fe1d3f0db3fa007db3d7592fc6bec26c2364fcb3
GET /images/flags/au.svg HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uptn.nv7s.com//upd/20230526.114101.183553/static/css/chunk-common.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/svg+xml
content-length: 2855
server: nginx/1.19.6
last-modified: Mon, 22 May 2023 09:42:29 GMT
etag: "646b3905-b27"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
uptn.nv7s.com/images/flags/mx.svg
200 OK 79 kB URL GET HTTP/2 uptn.nv7s.com/images/flags/mx.svg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text, with very long lines (4144)
Hash 877739edab9c59a56e0f2ce15657e80c
801a8d3fc9eba4ce2698f907e40c2e44c8246c35
8f83ca04de77a42bca0e6a753e1354b41501963870f92d18a913781309876e73
GET /images/flags/mx.svg HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uptn.nv7s.com//upd/20230526.114101.183553/static/css/chunk-common.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/svg+xml
content-length: 78593
server: nginx/1.19.6
last-modified: Mon, 22 May 2023 09:42:29 GMT
etag: "646b3905-13301"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
uptn.nv7s.com/images/flags/fr.svg
200 OK 932 B URL GET HTTP/2 uptn.nv7s.com/images/flags/fr.svg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text
Hash e6496e4a3349ca34f1de8f8f37929897
c99fbc3f1be208e6c7533118af394074afabdc0f
b7dfd8cda1c332d34356ea694f461aef9cc888e5ca9c3444dc046f594c338b0f
GET /images/flags/fr.svg HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uptn.nv7s.com//upd/20230526.114101.183553/static/css/chunk-common.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/svg+xml
content-length: 932
server: nginx/1.19.6
last-modified: Mon, 22 May 2023 09:42:29 GMT
etag: "646b3905-3a4"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/4199000/4199151/360x240/1.jpg
200 OK 27 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/4199000/4199151/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash 4e86c67926770f2647841f0ac2740033
4f6a4b661a8f04a8daa56e32aee665c616cd7873
7d74f8053870c790b6ade9c69305882ddd162057f2ef5a7743fcd811e8b0f70c
GET /contents/videos_screenshots/4199000/4199151/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 27171
server: nginx/1.18.0
last-modified: Sat, 04 Sep 2021 17:54:31 GMT
etag: "6133b2d7-6a23"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/3117000/3117724/360x240/1.jpg
200 OK 21 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/3117000/3117724/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash 58e234f2172fefce99c52d988a856466
55563238dc7de8493f0b685460c6381bc28181b7
d53344973acc8223d1b6f1cd9a87954f754ded18cf49143fbd165320065790ce
GET /contents/videos_screenshots/3117000/3117724/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 21206
server: nginx/1.19.6
last-modified: Thu, 29 Apr 2021 11:57:32 GMT
etag: "608a9f2c-52d6"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/5465000/5465211/360x240/1.jpg
200 OK 23 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/5465000/5465211/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash eacaf21920e25d9f14039728a2b8f951
11d5735eaf1358e81de4d9e1958e894cc06a3f2c
7a72e558483db95daec6fcb5ca6ab01f0e814feb745f05dd54073e0799f37140
GET /contents/videos_screenshots/5465000/5465211/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 22566
server: nginx/1.19.6
last-modified: Wed, 29 Mar 2023 04:17:06 GMT
etag: "6423bbc2-5826"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/5418000/5418059/360x240/1.jpg
200 OK 21 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/5418000/5418059/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash b52e5e2d8a9b2e76ed3f358f3a91f4cb
5d019b3df4385b6bfc8841287e6456e568fcce1d
a2978046ab90b94741d11f7972c7e58d03a35ff236c9e255b0c7ffbf43e3d280
GET /contents/videos_screenshots/5418000/5418059/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 20732
server: nginx/1.19.6
last-modified: Wed, 15 Mar 2023 06:07:05 GMT
etag: "64116089-50fc"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/5530000/5530985/360x240/1.jpg
200 OK 28 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/5530000/5530985/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash 92356141ef26279b4c1d8d1d88969c8b
8e565dfc73dfd4919fce8b423b785491196a6745
68e822992afc2b331a64f3827c8972afd420b184926d5247a8bfe16af86dd287
GET /contents/videos_screenshots/5530000/5530985/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 28484
server: nginx/1.19.6
last-modified: Fri, 05 May 2023 10:11:34 GMT
etag: "6454d656-6f44"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/4889000/4889689/360x240/1.jpg
200 OK 20 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/4889000/4889689/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash 6142702cbd0cc16b9996844b0ae1be13
62df45817ff458eab21bf04ee979bba2360b0947
da17e0e5ce77aa817f502eee32d17139287360d0398fbc7d01f756f7d26a71b1
GET /contents/videos_screenshots/4889000/4889689/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 19553
server: nginx/1.19.6
last-modified: Tue, 12 Jul 2022 22:49:15 GMT
etag: "62cdfa6b-4c61"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/5425000/5425237/360x240/1.jpg
200 OK 23 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/5425000/5425237/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash c2435175e0e3111e55aa83689bec5601
782b50157a9433845d5caff20aaaa46489ba92e0
392924726fcff99156170dd0b4ba1a9203e885b1f13e742ac72a74e333961ec5
GET /contents/videos_screenshots/5425000/5425237/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 22964
server: nginx/1.19.6
last-modified: Sat, 18 Mar 2023 05:16:08 GMT
etag: "64154918-59b4"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/4050000/4050449/360x240/1.jpg
200 OK 23 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/4050000/4050449/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash d07f89d012f731be2da42fd864477c1a
d3e7d7883a3095a6f27f501842784b1e16d2774c
835aba731d6006890def4b9143443d38652662a14034eab401d240622ccbbeee
GET /contents/videos_screenshots/4050000/4050449/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 22709
server: nginx/1.19.6
last-modified: Sat, 22 May 2021 11:20:10 GMT
etag: "60a8e8ea-58b5"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/4058000/4058399/360x240/1.jpg
200 OK 20 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/4058000/4058399/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash f3a4481e2ecd28645b4be9b707b5888a
3db12cb4cef567e70d5e2ad47447bc1a0cf2226b
604ad6107b3c75c97eaa5cc98c300d2860de59f96525b9580a68d99a43bbfda8
GET /contents/videos_screenshots/4058000/4058399/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 20079
server: nginx/1.19.6
last-modified: Tue, 01 Jun 2021 00:40:10 GMT
etag: "60b581ea-4e6f"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/4577000/4577033/360x240/1.jpg
200 OK 20 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/4577000/4577033/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash acce0474bd224990fe04d5d03ccec096
324436fcf47e7de58127524e7a6e2bdc054f6769
c19ed090a60f134ce153d48752cf7a0a5f071800d7642d3cf6b74782c1dfd095
GET /contents/videos_screenshots/4577000/4577033/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 19586
server: nginx/1.19.6
last-modified: Fri, 11 Feb 2022 00:30:26 GMT
etag: "6205ae22-4c82"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/5524000/5524549/360x240/1.jpg
200 OK 18 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/5524000/5524549/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash 7d7f78ca96e71d9554373d557669940e
58d5700032939aab790aa27bbaab5923c1220797
a3b40b80d4ba75644f2f99083fd39cb23f495fbe4e0c93ae377498eebb2f7592
GET /contents/videos_screenshots/5524000/5524549/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 17670
server: nginx/1.19.6
last-modified: Tue, 02 May 2023 05:18:36 GMT
etag: "64509d2c-4506"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/3330000/3330085/360x240/1.jpg
200 OK 21 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/3330000/3330085/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash 8868738b58fb343c12640afeb2d9e2bb
3777980f95cce6d39add8c6eab773446e25587c7
056c2caabe13581c283407734b4841d4bf00480e579f98c9fcf15660db2b5965
GET /contents/videos_screenshots/3330000/3330085/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 20963
server: nginx/1.19.6
last-modified: Thu, 29 Apr 2021 10:51:28 GMT
etag: "608a8fb0-51e3"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/3830000/3830057/360x240/1.jpg
200 OK 25 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/3830000/3830057/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash 30834b0bc654f871e89366f47bcc5592
46be342232f519105f144e29f4bcebdc81e625a4
cb7660407a2207cb0458c120eaa6706fccf60646d506836b4fbfe70afa0dfcb2
GET /contents/videos_screenshots/3830000/3830057/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 25228
server: nginx/1.19.6
last-modified: Wed, 28 Apr 2021 10:54:21 GMT
etag: "60893edd-628c"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/5520000/5520417/360x240/1.jpg
200 OK 20 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/5520000/5520417/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash fa73f5c85005445e8f127cada16aa32b
950bedeab5e6bc2a3a66f3f2134dd06e004e39bb
ac2e8910fef4da2fc4ee1b8a3455c151315bbe1dfc52d31e749b33ae09f481c1
GET /contents/videos_screenshots/5520000/5520417/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 19994
server: nginx/1.19.6
last-modified: Fri, 28 Apr 2023 15:52:10 GMT
etag: "644bebaa-4e1a"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/5431000/5431155/360x240/1.jpg
200 OK 21 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/5431000/5431155/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash a5dcf0cd078c1892b91b9d6bd504dfbd
f2e4a16cd60179618bc5ecf4dc3627709b36c26c
636f3a772d1dff7dbbb05a092fb535bfa54864d16b089b3d5e8ef48ca13a0043
GET /contents/videos_screenshots/5431000/5431155/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 20631
server: nginx/1.19.6
last-modified: Mon, 20 Mar 2023 12:59:30 GMT
etag: "641858b2-5097"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/3424000/3424089/360x240/1.jpg
200 OK 17 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/3424000/3424089/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash 48da558e58884b618525d513eb3a2905
0a0ae0c4da1f44e2ca905423f325deb1055b7a19
af40877dddb86301aa781a8f670aa8afe551081cc16f1b6f2aab1b3b1ca0c49e
GET /contents/videos_screenshots/3424000/3424089/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 16675
server: nginx/1.19.6
last-modified: Thu, 29 Apr 2021 08:57:08 GMT
etag: "608a74e4-4123"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/4324000/4324807/360x240/1.jpg
200 OK 19 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/4324000/4324807/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash 686f9b615e9eb801da135bb614ccc010
2387a2409d61bb458e738c467a58f0e539a7a4a3
0644104d9619804c2f83d4aa483a4e3927e7cc9727177e415ac88dc693e582c2
GET /contents/videos_screenshots/4324000/4324807/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 19443
server: nginx/1.19.6
last-modified: Tue, 02 Nov 2021 23:40:05 GMT
etag: "6181cc55-4bf3"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/3328000/3328849/360x240/1.jpg
200 OK 28 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/3328000/3328849/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash 40747e572c8d754f01e5ceaf666551ce
aaea024e1edfa91b4b252cedee3961a505646ecc
02420da5a272e2fac410ec70ecf5aa558e01db7661151bfd9332ac37bd75e238
GET /contents/videos_screenshots/3328000/3328849/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 28053
server: nginx/1.19.6
last-modified: Thu, 29 Apr 2021 08:39:21 GMT
etag: "608a70b9-6d95"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/5011000/5011253/360x240/1.jpg
200 OK 23 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/5011000/5011253/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash ff24c1908cc711bce4f68849a460c44b
64440f24f45469a98de1567eedae7a007e5e9cc5
615d89fd165f30708f5a59226ba98b7a075e6fbe9ac674f7dbd9754941b8e1c9
GET /contents/videos_screenshots/5011000/5011253/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 23423
server: nginx/1.19.6
last-modified: Mon, 05 Sep 2022 03:30:19 GMT
etag: "63156d4b-5b7f"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/5466000/5466545/360x240/1.jpg
200 OK 19 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/5466000/5466545/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash 8c7420b118eeb4910d8d387a80fcab43
76443aa08c9359d0b259629e64486a0b750d8dc2
8c95cbff506d4c045e13cc8678b13dadca54cd125adbc345db6d408e173af132
GET /contents/videos_screenshots/5466000/5466545/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 19322
server: nginx/1.19.6
last-modified: Thu, 30 Mar 2023 02:51:20 GMT
etag: "6424f928-4b7a"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/302000/302838/360x240/9.jpg
200 OK 23 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/302000/302838/360x240/9.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash e292e92169e7a84bcbd243c8cb1915e4
080026fd6f5d7963f75d7295284d21693dbd74da
48309a65a888b3b05e9a97b1fd2788fb3abf0eb2e40943ef1c8e00c57984c0bf
GET /contents/videos_screenshots/302000/302838/360x240/9.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 22973
server: nginx/1.19.6
last-modified: Thu, 29 Apr 2021 21:58:54 GMT
etag: "608b2c1e-59bd"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/520000/520533/360x240/1.jpg
200 OK 21 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/520000/520533/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash b5a0be4f9b386e82a9b52c15e914f831
96bc5c5db9ec1571d57f170e812b8a9ede29b08d
091997aca31ac140a2dc84c47b90bb64663430a649ed73bf91bc840384e2d1c0
GET /contents/videos_screenshots/520000/520533/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 20730
server: nginx/1.19.6
last-modified: Thu, 29 Apr 2021 08:55:25 GMT
etag: "608a747d-50fa"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/4141000/4141829/360x240/1.jpg
200 OK 26 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/4141000/4141829/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash 2761adff0903a5057915e0806879ac0d
70c52d2e6c9e872cb0b7db6d8caf25f0a9ef381e
86e82fd897c6ccc5e874853d16e4c701fec7e294ca65abbfc62a48811e2fa605
GET /contents/videos_screenshots/4141000/4141829/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 25887
server: nginx/1.18.0
last-modified: Tue, 03 Aug 2021 21:23:05 GMT
etag: "6109b3b9-651f"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/446000/446031/360x240/10.jpg
200 OK 20 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/446000/446031/360x240/10.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash 171358cf106090145d5cb56fb2e4a34d
72e588dfb6f877d748022f3ad6c88bd155dd6fe1
4e32d2db1a786ed338696a2a9e66b1bffa27de1cd0dad0a000f7312a2343d01e
GET /contents/videos_screenshots/446000/446031/360x240/10.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 20080
server: nginx/1.19.6
last-modified: Thu, 29 Apr 2021 20:18:12 GMT
etag: "608b1484-4e70"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/75000/75925/360x240/2.jpg
200 OK 22 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/75000/75925/360x240/2.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash ecb6249afc4e7248fc50994e6296353b
de160a4c112cc2b708dd8785d414bef5eb7bb744
4e1e1da0f267b486f5b10d84e1a37aec982f7702293fbc19e44fee10f1016a74
GET /contents/videos_screenshots/75000/75925/360x240/2.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 21789
server: nginx/1.19.6
last-modified: Thu, 29 Apr 2021 14:50:50 GMT
etag: "608ac7ca-551d"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/3376000/3376601/360x240/1.jpg
200 OK 20 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/3376000/3376601/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash 0e4e790b12214fdf576babe52308b1cb
9ab456ca0223b84c66d0bfab2f980fd8a63b05a1
d0602326fd64fb910f509182006cbbb6039b55f01fce5b3fff8b235d129c0d04
GET /contents/videos_screenshots/3376000/3376601/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 20041
server: nginx/1.19.6
last-modified: Wed, 28 Apr 2021 12:23:12 GMT
etag: "608953b0-4e49"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/212000/212512/360x240/14.jpg
200 OK 21 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/212000/212512/360x240/14.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash 311026c7a8a9831562a47a3079ef35b2
56b0af9d4b285442c80f2b21bf3d4e2a112f5a4f
0b8f2344b94a695d2a4f0761dfd6993cce8d9fbe646c4344ff9cf1029211fc57
GET /contents/videos_screenshots/212000/212512/360x240/14.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 20970
server: nginx/1.19.6
last-modified: Fri, 30 Apr 2021 00:42:24 GMT
etag: "608b5270-51ea"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/227000/227823/360x240/12.jpg
200 OK 20 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/227000/227823/360x240/12.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash 6378a0e18fa3371f960c74ca01a57b2b
cc3712770e74b5458334b193148fd06d52fa8c9a
e85efd2bf7b8dceb18027639e70790bbc3ef08140589dd9aa055e6124293b93c
GET /contents/videos_screenshots/227000/227823/360x240/12.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 20157
server: nginx/1.19.6
last-modified: Fri, 30 Apr 2021 00:28:13 GMT
etag: "608b4f1d-4ebd"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/1493000/1493077/360x240/18.jpg
200 OK 12 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/1493000/1493077/360x240/18.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash 0f4298a08772309caff7686a60ff1180
bebb81a6cf9ab300141abe25ff83697193b75ba1
f5080a7b817c26bcca49d26d2087c4f9cafb6ef762c0d9eff753559ab56e5de9
GET /contents/videos_screenshots/1493000/1493077/360x240/18.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 12106
server: nginx/1.19.6
last-modified: Thu, 29 Apr 2021 18:10:09 GMT
etag: "608af681-2f4a"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.upornia.com/contents/videos_screenshots/3342000/3342129/360x240/1.jpg
200 OK 18 kB URL GET HTTP/2 tn.upornia.com/contents/videos_screenshots/3342000/3342129/360x240/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.upornia.com
FingerprintF1:05:99:D3:55:0C:48:E3:9A:0B:E4:BC:69:90:2C:14:F5:E5:CB:B1
ValiditySat, 15 Apr 2023 00:03:05 GMT - Fri, 14 Jul 2023 00:03:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x240, components 3\012- data
Hash 8ae49bdd91aed666478d736432521a67
b5b274c30503784dcc6dc09bc91b11328bae4c64
7283c6a22a3b527e601fc075816fb00fd523c8078f9a0898086f0b0aa167bfc3
GET /contents/videos_screenshots/3342000/3342129/360x240/1.jpg HTTP/1.1
Host: tn.upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/jpeg
content-length: 18258
server: nginx/1.19.6
last-modified: Thu, 29 Apr 2021 09:17:54 GMT
etag: "608a79c2-4752"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
uptn.nv7s.com/pmkwbhris/gedndqudog.js
200 OK 45 kB URL GET HTTP/2 uptn.nv7s.com/pmkwbhris/gedndqudog.js
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
File type gzip compressed data, from Unix\012- data
Hash f12288336ae5fa9ac7b5b018e20f2fd7
236873d6b6c90c23b03cb8089bcc9958f2b79d76
255db90329e9578adb9ccfe8768b6ec93058ea7587be4cf325432cb3f235ceb1
GET /pmkwbhris/gedndqudog.js HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:36 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.19.6
last-modified: Mon, 05 Jun 2023 20:01:06 GMT
etag: W/"647e3f02-2054f"
cache-control: max-age=5184000
content-encoding: gzip
expires: Fri, 04 Aug 2023 20:19:36 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
metricswpsh.com/in/track?data=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
200 OK 0 B URL GET HTTP/2 metricswpsh.com/in/track?data=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
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
FingerprintC3:3A:0A:7D:9C:4B:21:97:39:A7:AD:B8:87:47:F1:35:32:D9:84:53
ValidityFri, 28 Apr 2023 11:39:09 GMT - Thu, 27 Jul 2023 11:39:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/track?data=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 HTTP/1.1
Host: metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://upornia.com
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 05 Jun 2023 20:19:36 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
btds.zog.link/in/dl/?spot_id=84667&screen_resolution=1280x1024&dt=1685996375879&ad_sub=0&mo=&ve=&katds_labels=&p=https%3A//upornia.com/&utm1=&utm2=&utm3=&utm4=&ad_tags=Free%252CWoman%252Cporn%252Cvideos%252CPorn%252CVideo%252CTube%252CXXX%252CMovie%252CUpornia.com%252CUpornia.com%252Cporn%252Ctube%252Cxxx%252Ctube%252Cfree%252Cporn%252Cvideos%252Cporn%252Cxxx%252Cmovies%252Cxxx%252Ctube%252Cvideo%252CHD%252Cporn%252CvideosUpornia.com%252Cporn%252Ctube%252Cxxx%252Ctube%252Cfree%252Cporn%252Cvideos%252Cporn%252Cxxx%252Cmovies%252Cxxx%252Ctube%252Cvideo%252CHD%252Cporn%252Cvideos%252CThe%252CLargest%252CDatabase%252Cof%252CFree%252CWoman%252CPorn%252CMovies%252CWatch%252CBest%252CSex%252CVideos%252Cfrom%252CJapanese%252CPorn%252Cto%252CTeen%252CSex%252CMovies%252CUpornia%252Cis%252Cthe%252CBest%252CXXX%252CTube%252Cof%252Call%252CFree%252CPorn%252Csites%252Con%252Cthe%252CInternet&title=Free%20Woman%20porn%20videos%20%2F%20Porn%20Video%20Tube%20%2F%20XXX%20Movie%20%7C%20Upornia.com&katds_rcc=2
200 OK 1.0 kB URL GET HTTP/2 btds.zog.link/in/dl/?spot_id=84667&screen_resolution=1280x1024&dt=1685996375879&ad_sub=0&mo=&ve=&katds_labels=&p=https%3A//upornia.com/&utm1=&utm2=&utm3=&utm4=&ad_tags=Free%252CWoman%252Cporn%252Cvideos%252CPorn%252CVideo%252CTube%252CXXX%252CMovie%252CUpornia.com%252CUpornia.com%252Cporn%252Ctube%252Cxxx%252Ctube%252Cfree%252Cporn%252Cvideos%252Cporn%252Cxxx%252Cmovies%252Cxxx%252Ctube%252Cvideo%252CHD%252Cporn%252CvideosUpornia.com%252Cporn%252Ctube%252Cxxx%252Ctube%252Cfree%252Cporn%252Cvideos%252Cporn%252Cxxx%252Cmovies%252Cxxx%252Ctube%252Cvideo%252CHD%252Cporn%252Cvideos%252CThe%252CLargest%252CDatabase%252Cof%252CFree%252CWoman%252CPorn%252CMovies%252CWatch%252CBest%252CSex%252CVideos%252Cfrom%252CJapanese%252CPorn%252Cto%252CTeen%252CSex%252CMovies%252CUpornia%252Cis%252Cthe%252CBest%252CXXX%252CTube%252Cof%252Call%252CFree%252CPorn%252Csites%252Con%252Cthe%252CInternet&title=Free%20Woman%20porn%20videos%20%2F%20Porn%20Video%20Tube%20%2F%20XXX%20Movie%20%7C%20Upornia.com&katds_rcc=2
IP
Certificate IssuerLet's Encrypt
Subjectbtds.zog.link
Fingerprint73:D2:AA:B6:B5:C6:09:E2:67:77:68:C7:C3:66:A8:DC:B2:86:35:36
ValiditySat, 27 May 2023 03:07:32 GMT - Fri, 25 Aug 2023 03:07:31 GMT
File type gzip compressed data, from Unix\012- data
Hash 441e7e8cc5dc25f8dfbbcd36cdfb790b
866874f279492aa6e571ed3f82ca995e560ecea4
60de60d51ce55bf7711bda54c37ec6b17b7d15962846fbce7cb0e0f2ed775b92
GET /in/dl/?spot_id=84667&screen_resolution=1280x1024&dt=1685996375879&ad_sub=0&mo=&ve=&katds_labels=&p=https%3A//upornia.com/&utm1=&utm2=&utm3=&utm4=&ad_tags=Free%252CWoman%252Cporn%252Cvideos%252CPorn%252CVideo%252CTube%252CXXX%252CMovie%252CUpornia.com%252CUpornia.com%252Cporn%252Ctube%252Cxxx%252Ctube%252Cfree%252Cporn%252Cvideos%252Cporn%252Cxxx%252Cmovies%252Cxxx%252Ctube%252Cvideo%252CHD%252Cporn%252CvideosUpornia.com%252Cporn%252Ctube%252Cxxx%252Ctube%252Cfree%252Cporn%252Cvideos%252Cporn%252Cxxx%252Cmovies%252Cxxx%252Ctube%252Cvideo%252CHD%252Cporn%252Cvideos%252CThe%252CLargest%252CDatabase%252Cof%252CFree%252CWoman%252CPorn%252CMovies%252CWatch%252CBest%252CSex%252CVideos%252Cfrom%252CJapanese%252CPorn%252Cto%252CTeen%252CSex%252CMovies%252CUpornia%252Cis%252Cthe%252CBest%252CXXX%252CTube%252Cof%252Call%252CFree%252CPorn%252Csites%252Con%252Cthe%252CInternet&title=Free%20Woman%20porn%20videos%20%2F%20Porn%20Video%20Tube%20%2F%20XXX%20Movie%20%7C%20Upornia.com&katds_rcc=2 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upornia.com/
Origin: https://upornia.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Mon, 05 Jun 2023 20:19:36 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
set-cookie: 953.143200=1; expires=Tue, 06 Jun 2023 20:19:36 GMT; path=/; secure; SameSite=None
953.73385=1; expires=Tue, 06 Jun 2023 20:19:36 GMT; path=/; secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
uptn.nv7s.com/pmkwbhris/torjwvaqg.js
200 OK 18 kB URL GET HTTP/2 uptn.nv7s.com/pmkwbhris/torjwvaqg.js
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
File type Unicode text, UTF-8 text, with very long lines (53705), with no line terminators
Hash d4b02b60685404c20bbb776f55fdeb42
c7f5c5f771fc59504ed4e28ea6db223d071788aa
35befc0ef63ca02b1ea231331a916495812e89149ec366561ba911545f158d54
GET /pmkwbhris/torjwvaqg.js HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:36 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.19.6
last-modified: Mon, 05 Jun 2023 20:01:06 GMT
etag: W/"647e3f02-d1cb"
cache-control: max-age=5184000
content-encoding: gzip
expires: Fri, 04 Aug 2023 20:19:36 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
vast.yomeno.xyz/prepare
204 No Content 0 B IP
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint13:5C:08:D5:3E:F3:37:AC:41:C6:11:A5:10:49:63:DF:DB:41:C5:5E
ValiditySun, 28 May 2023 03:08:58 GMT - Sat, 26 Aug 2023 03:08:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://upornia.com/
Origin: https://upornia.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Mon, 05 Jun 2023 20:19:37 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://upornia.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
content-type: text/plain; charset=utf-8
content-length: 0
X-Firefox-Spdy: h2
vast.yomeno.xyz/prepare
204 No Content 0 B IP
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint13:5C:08:D5:3E:F3:37:AC:41:C6:11:A5:10:49:63:DF:DB:41:C5:5E
ValiditySun, 28 May 2023 03:08:58 GMT - Sat, 26 Aug 2023 03:08:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1163
Origin: https://upornia.com
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx/1.20.1
date: Mon, 05 Jun 2023 20:19:37 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://upornia.com
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
ntvpforever.com/in/multy
204 No Content 0 B IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
FingerprintC3:3A:0A:7D:9C:4B:21:97:39:A7:AD:B8:87:47:F1:35:32:D9:84:53
ValidityFri, 28 Apr 2023 11:39:09 GMT - Thu, 27 Jul 2023 11:39:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /in/multy HTTP/1.1
Host: ntvpforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://upornia.com/
Origin: https://upornia.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.18.0
date: Mon, 05 Jun 2023 20:19:36 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
cdn2cdn.me/dli/webcamera.svg?fill=%23929197
200 OK 1.3 kB URL GET HTTP/2 cdn2cdn.me/dli/webcamera.svg?fill=%23929197
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectcdn2cdn.me
Fingerprint1F:BD:5D:9A:F6:E5:BA:5E:D7:FD:0C:E8:10:A4:2F:12:E4:D2:90:74
ValidityMon, 24 Apr 2023 14:00:21 GMT - Sun, 23 Jul 2023 14:00:20 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (937), with CRLF line terminators
Hash bafc3550493f70677afb95f4bd7d1135
b267787e31ea33a55b6a3140d4e802279098abb4
e7e6cd17d4242ba2a6f09e75b85b089287f2da80ce04bce096f6f40e048315f3
GET /dli/webcamera.svg?fill=%23929197 HTTP/1.1
Host: cdn2cdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:36 GMT
content-type: image/svg+xml
content-length: 1349
server: nginx/1.20.1
last-modified: Tue, 16 Jun 2020 16:25:10 GMT
etag: "5ee8f266-545"
x-request-id: 9d4313ad056cb0ccf315e636a1a82a6d
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdntocdn.com/dli/whatshot.svg?fill=%23929197
200 OK 1.1 kB URL GET HTTP/2 cdntocdn.com/dli/whatshot.svg?fill=%23929197
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectcdntocdn.com
Fingerprint7A:F2:0A:21:DD:D9:49:B1:9A:39:51:DF:3F:15:9A:9E:DB:3E:76:B0
ValidityMon, 15 May 2023 02:01:26 GMT - Sun, 13 Aug 2023 02:01:25 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (652), with CRLF line terminators
Hash 92d4b3c9db72fefd9d6d927ec40be29b
efb550da28d7b18d7e2beb7698577415fde2b24f
7ad9fcb297f4600edf827b026deca9e0ed695be37ab46ac2d9fee35040611130
GET /dli/whatshot.svg?fill=%23929197 HTTP/1.1
Host: cdntocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:36 GMT
content-type: image/svg+xml
content-length: 1064
server: nginx/1.20.1
last-modified: Tue, 16 Jun 2020 16:25:10 GMT
etag: "5ee8f266-428"
x-request-id: 1338d73d4ad37084f689ef33cadf4287
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=822
204 No Content 27 B URL OPTIONS HTTP/1.1 fp.metricswpsh.com/fp?tag_id=822
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
FingerprintC3:3A:0A:7D:9C:4B:21:97:39:A7:AD:B8:87:47:F1:35:32:D9:84:53
ValidityFri, 28 Apr 2023 11:39:09 GMT - Thu, 27 Jul 2023 11:39:08 GMT
File type JSON data\012- , ASCII text
Hash c4bea7951aaa542768f63f72d171ff83
7f57b3ce5d3a9bb0a15c32b34745b0214710e185
d4fbb24457a99cbf28127e8a416979ca0f2ab97c64a59b8d38760c40d4934756
POST /fp?tag_id=822 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 23166
Origin: https://upornia.com
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 05 Jun 2023 20:19:36 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 27
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://upornia.com
Set-Cookie: id=2327441787221464754; Expires=Tue, 04 Jun 2024 20:19:36 GMT; Secure; SameSite=None
Vary: Origin
nereserv.com/in/dip?site=native-push&wl=1&event_id=f7085aeb-aeb8-40fb-83aa-f27d6f62428d&subid=705652794&sid=1985355264&spot_id=437&created_at=2023-06-05&timezone=0&ver=8.66.0&is_native=1
200 OK 0 B URL GET HTTP/2 nereserv.com/in/dip?site=native-push&wl=1&event_id=f7085aeb-aeb8-40fb-83aa-f27d6f62428d&subid=705652794&sid=1985355264&spot_id=437&created_at=2023-06-05&timezone=0&ver=8.66.0&is_native=1
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
FingerprintC3:3A:0A:7D:9C:4B:21:97:39:A7:AD:B8:87:47:F1:35:32:D9:84:53
ValidityFri, 28 Apr 2023 11:39:09 GMT - Thu, 27 Jul 2023 11:39:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?site=native-push&wl=1&event_id=f7085aeb-aeb8-40fb-83aa-f27d6f62428d&subid=705652794&sid=1985355264&spot_id=437&created_at=2023-06-05&timezone=0&ver=8.66.0&is_native=1 HTTP/1.1
Host: nereserv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://upornia.com
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 05 Jun 2023 20:19:36 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 95c90c30e3a5ae6ab746adb45db6d537
ecef3c29c6afea970739c2df5fbd17a42de87920
9f98bce749d3c7e4aa65d4c1cf7b221a83d0c5d4663091ca49ffdb6efecff217
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Jun 2023 20:19:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rtbrennab.com/get/?go=1&data=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
200 OK 2.0 kB URL GET HTTP/2 rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MzEyNDYsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjE1MDA3NTIsImFkX3RhZ3MiOiJzdHJhaWdodCwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwicmVmcmVzaCI6MSwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6MzEyNDYsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjgsInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1NiwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjpmYWxzZX0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH19XSwic2l0ZSI6eyJpZCI6IjMxMjQ2IiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL3Vwb3JuaWEuY29tLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI0Y2I3MjU2NjBjNDMwMzFlM2IwNmM3NTg5MmQ5NmM1YSIsImZwIjpudWxsfSwiZXh0Ijp7ImR0IjoxNjg1OTk2Mzc1OTA3fX0=
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1595)
Hash 930082cfba09e42de2e60107543501cf
6221c6286d4602972d11e80b4f4ba53e3d68fdd6
1d0fe51f70f23cbbf258c1c1ec4ec95755885c1b8634f1efa3b5709921708746
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.0
date: Mon, 05 Jun 2023 20:19:36 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash df2c4343cb60d7b80a236621d9420bcf
d3469e9e2c43c94b12975da73fdfd44d75b53505
34dd045a98470df1fd958512c63d10a8d346b3201c8fad27b3dc391e30e93943
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Jun 2023 20:19:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
btds.zog.link/in/dl_show/?spot_id=84667&ad_position=1&out_name=143200|47104|cpm|0.0040|$%200.0047&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84667&p=https%3A%2F%2Fupornia.com%2F
200 OK 2 B URL GET HTTP/2 btds.zog.link/in/dl_show/?spot_id=84667&ad_position=1&out_name=143200|47104|cpm|0.0040|$%200.0047&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84667&p=https%3A%2F%2Fupornia.com%2F
IP
Certificate IssuerLet's Encrypt
Subjectbtds.zog.link
Fingerprint73:D2:AA:B6:B5:C6:09:E2:67:77:68:C7:C3:66:A8:DC:B2:86:35:36
ValiditySat, 27 May 2023 03:07:32 GMT - Fri, 25 Aug 2023 03:07:31 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /in/dl_show/?spot_id=84667&ad_position=1&out_name=143200|47104|cpm|0.0040|$%200.0047&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84667&p=https%3A%2F%2Fupornia.com%2F HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Mon, 05 Jun 2023 20:19:37 GMT
content-type: application/json
content-length: 2
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
X-Firefox-Spdy: h2
btds.zog.link/in/dl_show/?spot_id=84667&ad_position=2&out_name=73385|12302|cpm|0.0001|$%200.0001&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84667&p=https%3A%2F%2Fupornia.com%2F
200 OK 2 B URL GET HTTP/2 btds.zog.link/in/dl_show/?spot_id=84667&ad_position=2&out_name=73385|12302|cpm|0.0001|$%200.0001&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84667&p=https%3A%2F%2Fupornia.com%2F
IP
Certificate IssuerLet's Encrypt
Subjectbtds.zog.link
Fingerprint73:D2:AA:B6:B5:C6:09:E2:67:77:68:C7:C3:66:A8:DC:B2:86:35:36
ValiditySat, 27 May 2023 03:07:32 GMT - Fri, 25 Aug 2023 03:07:31 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /in/dl_show/?spot_id=84667&ad_position=2&out_name=73385|12302|cpm|0.0001|$%200.0001&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84667&p=https%3A%2F%2Fupornia.com%2F HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Mon, 05 Jun 2023 20:19:37 GMT
content-type: application/json
content-length: 2
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
200 OK 916 B URL GET HTTP/2 rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MzEyNDUsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjE1MDA3NDgsImFkX3RhZ3MiOiJzdHJhaWdodCwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwicmVmcmVzaCI6MSwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6MzEyNDUsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjgsInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1NiwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjpmYWxzZX0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH19XSwic2l0ZSI6eyJpZCI6IjMxMjQ1IiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL3Vwb3JuaWEuY29tLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI0Y2I3MjU2NjBjNDMwMzFlM2IwNmM3NTg5MmQ5NmM1YSIsImZwIjpudWxsfSwiZXh0Ijp7ImR0IjoxNjg1OTk2Mzc1ODk4fX0=
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1147)
Hash 7701ed173f219bc62539f114ae6a2ae7
d32ce999e636434fbfb55fd558da30ad407dc97f
d9f0716d6695b95467a3bb0fcb2df7439d5a41959aac3977dac41a815e764dd1
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.0
date: Mon, 05 Jun 2023 20:19:36 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=8689687415777134848&pid=0&site=31244&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10765&price=0&is_cpm=1&cpm=0.00747231&ecpm=0.005303845638&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=upornia.com&hostname=auc-banner-hz-10&site_id=0&spot_id=31244&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.0024600109177515058&placement_type_id=8&skin_test=&verify_hash=&score=1.8285353495902221&ml=&tag_ab=b&v2=0&ttl=&space_id=31244&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=straight,&stratagem=&ssp=3756
302 Found 0 B URL GET HTTP/2 rtbrennab.com/banner/in/show/?mid=8689687415777134848&pid=0&site=31244&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10765&price=0&is_cpm=1&cpm=0.00747231&ecpm=0.005303845638&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=upornia.com&hostname=auc-banner-hz-10&site_id=0&spot_id=31244&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.0024600109177515058&placement_type_id=8&skin_test=&verify_hash=&score=1.8285353495902221&ml=&tag_ab=b&v2=0&ttl=&space_id=31244&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=straight,&stratagem=&ssp=3756
IP
ASN #24940 Hetzner Online GmbH
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=8689687415777134848&pid=0&site=31244&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10765&price=0&is_cpm=1&cpm=0.00747231&ecpm=0.005303845638&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=upornia.com&hostname=auc-banner-hz-10&site_id=0&spot_id=31244&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.0024600109177515058&placement_type_id=8&skin_test=&verify_hash=&score=1.8285353495902221&ml=&tag_ab=b&v2=0&ttl=&space_id=31244&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=straight,&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MzEyNDQsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjE1MDA3NDIsImFkX3RhZ3MiOiJzdHJhaWdodCwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwicmVmcmVzaCI6MSwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6MzEyNDQsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjgsInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1NiwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjpmYWxzZX0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH19XSwic2l0ZSI6eyJpZCI6IjMxMjQ0IiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL3Vwb3JuaWEuY29tLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI0Y2I3MjU2NjBjNDMwMzFlM2IwNmM3NTg5MmQ5NmM1YSIsImZwIjpudWxsfSwiZXh0Ijp7ImR0IjoxNjg1OTk2Mzc1ODkwfX0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.16.0
date: Mon, 05 Jun 2023 20:19:37 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://preroll.hostave3.net/notifications/zeropixel.png
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint7A:FE:A8:C4:0F:E7:3E:DE:00:43:83:43:39:F5:0A:1A:CC:D5:74:0E
ValidityFri, 19 May 2023 12:58:14 GMT - Fri, 11 Aug 2023 12:58:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
set-cookie: __Host-GAPS=1:03sjHxe1zRNJvEO4dRWNlXt6amoNLg:XDbJe4-CfyapgNo0; Expires=Wed, 04-Jun-2025 20:19:37 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 05 Jun 2023 20:19:37 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&ffgf=1&hl=en&passive=true&service=youtube&uilel=3&ifkv=Af_xneHCp3OCAVc5QFsmcZl-I7VYIr58hcWUjr1lSF-RbD0sFiHP5H0YD0mKGlHrf0Bog6OQR3iB
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-u24qgRVrtdcYUHtN9JAOTg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-type: application/binary
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s.optnx.com/cimp.php?data=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-
302 Found 0 B URL GET HTTP/1.1 s.optnx.com/cimp.php?data=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-
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectoptnx.com
FingerprintE8:B5:4A:26:89:37:E9:85:D8:D0:28:5A:AB:D3:C5:95:5F:E3:BC:5D
ValidityTue, 09 May 2023 12:53:09 GMT - Mon, 07 Aug 2023 12:53:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cimp.php?data=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- HTTP/1.1
Host: s.optnx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 05 Jun 2023 20:19:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22647e43592a10a6.970788742842609664%22%3B%7D; expires=Wed, 04 Jun 2025 20:19:37 GMT; path=; domain=.optnx.com; Secure; SameSite=none
Location: https://s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
X-Robots-Tag: noindex, follow
upornia.com/api/json/videos2/86400/str/most-popular/10/categories.blonde.1.all...json
200 OK 4.2 kB URL GET HTTP/2 upornia.com/api/json/videos2/86400/str/most-popular/10/categories.blonde.1.all...json
IP
Certificate IssuerLet's Encrypt
Subjectupornia.com
Fingerprint2D:33:49:89:ED:76:B0:83:22:7C:73:50:22:D9:20:69:6D:2A:30:11
ValidityWed, 19 Apr 2023 03:12:11 GMT - Tue, 18 Jul 2023 03:12:10 GMT
File type JSON data\012- , ASCII text, with very long lines (16079), with no line terminators
Hash d9fb0718dee9e8fe07db12f170c7b963
1eb3bd7087e3d821bffc89a96296e3ebd5f28686
297b2929bdae41602c351860c360401343cae33162718c59ae458b6749710baa
GET /api/json/videos2/86400/str/most-popular/10/categories.blonde.1.all...json HTTP/1.1
Host: upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.19.6
date: Mon, 05 Jun 2023 20:19:38 GMT
content-type: application/json
last-modified: Mon, 05 Jun 2023 18:16:39 GMT
vary: Accept-Encoding
etag: W/"647e2687-3ecf"
expires: Mon, 05 Jun 2023 20:24:38 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
s.optnx.com/cimp.php?data=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-
302 Found 0 B URL GET HTTP/1.1 s.optnx.com/cimp.php?data=TVRZNE5UazVOak0zTm53M1ptVmpZekZqTW1NeE5qZ3lOek5tWVRnMU5UaGpNRGd6TnpoaU1UTXdZUS0tfC9saWJyYXJ5LzgzOTg5LzIwNzZjZGJmYzIwMzAzOTRhMjk2YTZhMzIwZWZjZDY4MGE5ZGQ5NGEuZ2lmfGh0dHBzfDkxLjkwLjQyLjE1NHxOT1J8NDF8dXBvcm5pYS5jb218ODM5ODl8NjY2MTczfDkwMTA4OHw0MTc2MTg4fDUwOHw1Njc2NjUwfDgwMjY4NzM2fDE1fDN8MHwwfDI1MzQ0fDB8MXw3NXxFVVJ8VVNEfDAuOTMyfDF8MjF8MzAweDI1MHwxfE5PUnx8MjB8NHwxfHw0Y2I3MjU2NjBjNDMwMzFlM2IwNmM3NTg5MmQ5NmM1YXxmZTA3ZTg4OTg2NjUyNDlmZWQzZjczZGIzOGMyZjAwN3wxfDB8dXBvcm5pYS5jb218MHwwfDB8MC4wMXwxfDB8ZXhjaGFuZ2VfYmFubmVyfDB8MHwzMTQzMjQyfC0xfDB8MzE0MzI0NHx8fDF8MTQ0MHx8MHwwfDB8MHwwfDB8MXwwfHw4fDF8TW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjoxMDkuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMTEuMHx8T0t8MjIwY2I3ZjM3MmFhMDI2MjI5NzNhNjBjY2RlM2RjMWY-
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectoptnx.com
FingerprintE8:B5:4A:26:89:37:E9:85:D8:D0:28:5A:AB:D3:C5:95:5F:E3:BC:5D
ValidityTue, 09 May 2023 12:53:09 GMT - Mon, 07 Aug 2023 12:53:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cimp.php?data=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- HTTP/1.1
Host: s.optnx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 05 Jun 2023 20:19:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22647e435930f8e8.700692192921546490%22%3B%7D; expires=Wed, 04 Jun 2025 20:19:37 GMT; path=; domain=.optnx.com; Secure; SameSite=none
Location: https://s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
X-Robots-Tag: noindex, follow
accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&ffgf=1&hl=en&passive=true&service=youtube&uilel=3&ifkv=Af_xneHCp3OCAVc5QFsmcZl-I7VYIr58hcWUjr1lSF-RbD0sFiHP5H0YD0mKGlHrf0Bog6OQR3iB
302 Found 402 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&ffgf=1&hl=en&passive=true&service=youtube&uilel=3&ifkv=Af_xneHCp3OCAVc5QFsmcZl-I7VYIr58hcWUjr1lSF-RbD0sFiHP5H0YD0mKGlHrf0Bog6OQR3iB
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (392)
Hash cbc5d949547ace2f34de18a8fd57fe52
53d0127265bba2a7cabe0698621a82e29a45b183
d09071b62eaeb6926a0223ef8ce8cff97fb7a83e7f7137cb9a2f87d12ca38988
GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico&ffgf=1&hl=en&passive=true&service=youtube&uilel=3&ifkv=Af_xneHCp3OCAVc5QFsmcZl-I7VYIr58hcWUjr1lSF-RbD0sFiHP5H0YD0mKGlHrf0Bog6OQR3iB HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:Ir6jmNAKq-jSn5__WhUIqj0ptBrklg:0cQrMWPwhvhmjPKd;Path=/;Expires=Wed, 04-Jun-2025 20:19:37 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 05 Jun 2023 20:19:37 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S-1325072514%3A1685996377257057&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&ffgf=1&hl=en&ifkv=Af_xneEeBZoU8mfkuBt_yGYxyZpC20PNs39Nc6_zNQzX9MkRJpfmgyokJG-HrVaMXRvzXevBsnPJ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: script-src 'nonce-QaYw2nvHxfPwOXS2oMDS6Q' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 402
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
200 OK 26 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
IP
ASN #60068 Datacamp Limited
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectafcdn.net
Fingerprint5F:D9:0E:52:17:61:88:ED:50:45:B4:DD:D4:F3:5F:30:D8:07:F5:F7
ValidityTue, 09 May 2023 12:30:19 GMT - Mon, 07 Aug 2023 12:30:18 GMT
File type GIF image data, version 89a, 300 x 250\012- data
Hash b84bc3b7f8bab08bc5ea1ce70fde37db
2076cdbfc2030394a296a6a320efcd680a9dd94a
5c3aba940c05259789b56295566cb12d81d26913ba63a910318fb9f78a6f912b
GET /library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:37 GMT
content-type: image/gif
content-length: 25660
last-modified: Mon, 13 Feb 2023 08:47:25 GMT
etag: "63e9f91d-643c"
expires: Fri, 08 Mar 2024 11:29:08 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCRRDuPv/vH90AA
x-77-nzt-ray: af585630249cf6f159437e642e430512
x-accel-expires: @1709897501
x-accel-date: 1678361501
x-cache: HIT
x-age: 7634876
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
200 OK 26 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
IP
ASN #60068 Datacamp Limited
Requested by https://rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MzEyNDYsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjE1MDA3NTIsImFkX3RhZ3MiOiJzdHJhaWdodCwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwicmVmcmVzaCI6MSwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6MzEyNDYsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjgsInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1NiwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjpmYWxzZX0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH19XSwic2l0ZSI6eyJpZCI6IjMxMjQ2IiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL3Vwb3JuaWEuY29tLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI0Y2I3MjU2NjBjNDMwMzFlM2IwNmM3NTg5MmQ5NmM1YSIsImZwIjpudWxsfSwiZXh0Ijp7ImR0IjoxNjg1OTk2Mzc1OTA3fX0=
Certificate IssuerLet's Encrypt
Subjectafcdn.net
Fingerprint5F:D9:0E:52:17:61:88:ED:50:45:B4:DD:D4:F3:5F:30:D8:07:F5:F7
ValidityTue, 09 May 2023 12:30:19 GMT - Mon, 07 Aug 2023 12:30:18 GMT
File type GIF image data, version 89a, 300 x 250\012- data
Hash b84bc3b7f8bab08bc5ea1ce70fde37db
2076cdbfc2030394a296a6a320efcd680a9dd94a
5c3aba940c05259789b56295566cb12d81d26913ba63a910318fb9f78a6f912b
GET /library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:37 GMT
content-type: image/gif
content-length: 25660
last-modified: Mon, 13 Feb 2023 08:47:25 GMT
etag: "63e9f91d-643c"
expires: Fri, 08 Mar 2024 11:29:08 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCRSdMbz/vH90AA
x-77-nzt-ray: af585630249cf6f159437e64c5a80d12
x-accel-expires: @1709897501
x-accel-date: 1678361501
x-cache: HIT
x-age: 7634876
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
preroll.hostave3.net/notifications/zeropixel.png
200 OK 42 B URL GET HTTP/2 preroll.hostave3.net/notifications/zeropixel.png
IP
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerGoogle Trust Services LLC
Subjecthostave3.net
FingerprintC6:67:A3:9A:39:99:56:AE:03:D5:CD:A0:20:C9:34:2B:6A:EC:45:1F
ValidityWed, 17 May 2023 01:20:03 GMT - Tue, 15 Aug 2023 01:20:02 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /notifications/zeropixel.png HTTP/1.1
Host: preroll.hostave3.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:37 GMT
content-type: image/png
content-length: 42
last-modified: Tue, 11 Sep 2018 08:40:52 GMT
etag: "5b977f94-2a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 522930
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PfQL98VqSgWD8LcnGX5zPbwNbXe1U7MBAmTX880DbzMwabSOrj3NglBvSRsoNbj4tArbTRFr3sHlWZY7iatNgeLpWe2LQzX8NNeBZdxTGHQQPctxc85fvLwydSr5uEkKDArPS4FeYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7d2b1c8e1a6a23ae-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
200 OK 26 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
IP
ASN #60068 Datacamp Limited
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectafcdn.net
Fingerprint5F:D9:0E:52:17:61:88:ED:50:45:B4:DD:D4:F3:5F:30:D8:07:F5:F7
ValidityTue, 09 May 2023 12:30:19 GMT - Mon, 07 Aug 2023 12:30:18 GMT
File type GIF image data, version 89a, 300 x 250\012- data
Hash b84bc3b7f8bab08bc5ea1ce70fde37db
2076cdbfc2030394a296a6a320efcd680a9dd94a
5c3aba940c05259789b56295566cb12d81d26913ba63a910318fb9f78a6f912b
GET /library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:37 GMT
content-type: image/gif
content-length: 25660
last-modified: Mon, 13 Feb 2023 08:47:25 GMT
etag: "63e9f91d-643c"
expires: Fri, 08 Mar 2024 11:29:08 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCRSfwQD/vH90AA
x-77-nzt-ray: af585630249cf6f159437e64f9a95212
x-accel-expires: @1709897501
x-accel-date: 1678361501
x-cache: HIT
x-age: 7634876
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
preroll.hostave3.net/notifications/zeropixel.png
200 OK 42 B URL GET HTTP/2 preroll.hostave3.net/notifications/zeropixel.png
IP
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerGoogle Trust Services LLC
Subjecthostave3.net
FingerprintC6:67:A3:9A:39:99:56:AE:03:D5:CD:A0:20:C9:34:2B:6A:EC:45:1F
ValidityWed, 17 May 2023 01:20:03 GMT - Tue, 15 Aug 2023 01:20:02 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /notifications/zeropixel.png HTTP/1.1
Host: preroll.hostave3.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:37 GMT
content-type: image/png
content-length: 42
last-modified: Tue, 11 Sep 2018 08:40:52 GMT
etag: "5b977f94-2a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 522930
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3zGCfWwHOTZtSuT7dtxipJ9C7aIT8NaAaD%2F2EXBMv9JkgmODCG0BRvz1UUp4Y7v9xl%2BHQbgNsl7B%2BIffWsAiN0zOekebvkB4j5jyiPzRbpI%2FMKBPu1ClnQnUY2ZYc2XbCwP7J%2FB7Ag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7d2b1c8e1a7523ae-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
preroll.hostave3.net/notifications/zeropixel.png
200 OK 42 B URL GET HTTP/2 preroll.hostave3.net/notifications/zeropixel.png
IP
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerGoogle Trust Services LLC
Subjecthostave3.net
FingerprintC6:67:A3:9A:39:99:56:AE:03:D5:CD:A0:20:C9:34:2B:6A:EC:45:1F
ValidityWed, 17 May 2023 01:20:03 GMT - Tue, 15 Aug 2023 01:20:02 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /notifications/zeropixel.png HTTP/1.1
Host: preroll.hostave3.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:37 GMT
content-type: image/png
content-length: 42
last-modified: Tue, 11 Sep 2018 08:40:52 GMT
etag: "5b977f94-2a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 522930
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nQo697EcIGW0REkdfcs7cEvz3KUeTAgTHDk4QvAvgUnaLPBOWL4gXxgrBVABt6fgYoCoZmCpvwA%2BIxluRChoHnXZAXRPsf3PqEXeXZRAFmMJtWRg7ozN0eicNgV5R1ATgC%2FkMWHNdw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7d2b1c8e2a8e23ae-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ntvpforever.com/in/multy
204 No Content 16 kB IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
FingerprintC3:3A:0A:7D:9C:4B:21:97:39:A7:AD:B8:87:47:F1:35:32:D9:84:53
ValidityFri, 28 Apr 2023 11:39:09 GMT - Thu, 27 Jul 2023 11:39:08 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (16418), with no line terminators
Hash 21cd4134d9e7a3b1e9713018aebd25a0
da56631d4e287cbf57cdbedc1adb00c11323a3c3
d050d956bb686c7f040befaaf0abca4c720ccfeda16120b53539b8bb85283bbb
POST /in/multy HTTP/1.1
Host: ntvpforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 2007
Origin: https://upornia.com
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 05 Jun 2023 20:19:37 GMT
content-type: application/json
content-length: 16435
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
ntvpforever.com/in/show/?mid=6834809778014410948&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=705652794&sid=1985355264&cid=14885&price=0.0011&is_cpm=0&cpm=0&ecpm=1.6326360987715156e-06&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=1&ver=8.66.0&ver_c=&refdom=upornia.com&hostname=auc-inpage-hz-1-c&site_id=31437&spot_id=437&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-06-05&is_native=2&burl=4pfJ5BLc8UUqFUWZlB_6N1dpfriWd3sA66KAau4eCLH-T4QQWbNt4g&pop_winurl=&ip=91.90.42.154&testab=0&px_id=53437&adblock=0&auction_host=apply&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=86e9e35fcfab5560dcc1a51b25bebdc135249e9c598fba59ebe44ef61a19b202&exp=1440&resp_type=&iabcat=IAB25-3&min_cpm=1.7000995611177325e-06&placement_type_id=0&skin_test=0&verify_hash=9efdb2943284aae19c176910f44a2b21&score=72.55749937314037&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D705652794%26spot_id%3D437%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fupornia.com%252F%26idzone%3D4438148%26sid%3D1886&ml=&tag_ab=b&original_bid=0.0011&user_fp=17917114326412249025&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=spLgwjANi8qd51iDcChWWPDqp2WAZJzp0az5CD7K8ckm5BAqDO7S5LaMMNVVN19DMacfsmccXTF2Je0BeYtH2AMXEAHZVKqSfDMblhU2OMlbT8tQQnDRMLh0F5qkMFN3kwnxkBZdB6PhdWgS3ujjoJ69mxaZ62pBT9cPosK9jBX7X2OmvA&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp&skin_id=4&vertical_id=0&real_bid=0.0011&pr=&user_keywords=&auc_type=1&aid=3481&ext_cid=0&device_theme=light&keywords=japanese,adult,teens&label_ids=89,108,0&conditions=all,dch_ip,tz_offset&need_redirect_show=0&page=https%3A%2F%2Fupornia.com%2F&auction_time=1685996376&show_count=1&from_cache=0&original_bid_usd=0.0011&mlf=1&cpa=61999649-73ae-4532-b0c8-f837c3ffdcf1&mlc=1&format=social-scale-b_r-body
200 OK 0 B URL GET HTTP/2 ntvpforever.com/in/show/?mid=6834809778014410948&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=705652794&sid=1985355264&cid=14885&price=0.0011&is_cpm=0&cpm=0&ecpm=1.6326360987715156e-06&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=1&ver=8.66.0&ver_c=&refdom=upornia.com&hostname=auc-inpage-hz-1-c&site_id=31437&spot_id=437&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-06-05&is_native=2&burl=4pfJ5BLc8UUqFUWZlB_6N1dpfriWd3sA66KAau4eCLH-T4QQWbNt4g&pop_winurl=&ip=91.90.42.154&testab=0&px_id=53437&adblock=0&auction_host=apply&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=86e9e35fcfab5560dcc1a51b25bebdc135249e9c598fba59ebe44ef61a19b202&exp=1440&resp_type=&iabcat=IAB25-3&min_cpm=1.7000995611177325e-06&placement_type_id=0&skin_test=0&verify_hash=9efdb2943284aae19c176910f44a2b21&score=72.55749937314037&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D705652794%26spot_id%3D437%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fupornia.com%252F%26idzone%3D4438148%26sid%3D1886&ml=&tag_ab=b&original_bid=0.0011&user_fp=17917114326412249025&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=spLgwjANi8qd51iDcChWWPDqp2WAZJzp0az5CD7K8ckm5BAqDO7S5LaMMNVVN19DMacfsmccXTF2Je0BeYtH2AMXEAHZVKqSfDMblhU2OMlbT8tQQnDRMLh0F5qkMFN3kwnxkBZdB6PhdWgS3ujjoJ69mxaZ62pBT9cPosK9jBX7X2OmvA&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp&skin_id=4&vertical_id=0&real_bid=0.0011&pr=&user_keywords=&auc_type=1&aid=3481&ext_cid=0&device_theme=light&keywords=japanese,adult,teens&label_ids=89,108,0&conditions=all,dch_ip,tz_offset&need_redirect_show=0&page=https%3A%2F%2Fupornia.com%2F&auction_time=1685996376&show_count=1&from_cache=0&original_bid_usd=0.0011&mlf=1&cpa=61999649-73ae-4532-b0c8-f837c3ffdcf1&mlc=1&format=social-scale-b_r-body
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
FingerprintC3:3A:0A:7D:9C:4B:21:97:39:A7:AD:B8:87:47:F1:35:32:D9:84:53
ValidityFri, 28 Apr 2023 11:39:09 GMT - Thu, 27 Jul 2023 11:39:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?mid=6834809778014410948&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=705652794&sid=1985355264&cid=14885&price=0.0011&is_cpm=0&cpm=0&ecpm=1.6326360987715156e-06&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=1&ver=8.66.0&ver_c=&refdom=upornia.com&hostname=auc-inpage-hz-1-c&site_id=31437&spot_id=437&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-06-05&is_native=2&burl=4pfJ5BLc8UUqFUWZlB_6N1dpfriWd3sA66KAau4eCLH-T4QQWbNt4g&pop_winurl=&ip=91.90.42.154&testab=0&px_id=53437&adblock=0&auction_host=apply&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=86e9e35fcfab5560dcc1a51b25bebdc135249e9c598fba59ebe44ef61a19b202&exp=1440&resp_type=&iabcat=IAB25-3&min_cpm=1.7000995611177325e-06&placement_type_id=0&skin_test=0&verify_hash=9efdb2943284aae19c176910f44a2b21&score=72.55749937314037&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D705652794%26spot_id%3D437%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fupornia.com%252F%26idzone%3D4438148%26sid%3D1886&ml=&tag_ab=b&original_bid=0.0011&user_fp=17917114326412249025&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=spLgwjANi8qd51iDcChWWPDqp2WAZJzp0az5CD7K8ckm5BAqDO7S5LaMMNVVN19DMacfsmccXTF2Je0BeYtH2AMXEAHZVKqSfDMblhU2OMlbT8tQQnDRMLh0F5qkMFN3kwnxkBZdB6PhdWgS3ujjoJ69mxaZ62pBT9cPosK9jBX7X2OmvA&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp&skin_id=4&vertical_id=0&real_bid=0.0011&pr=&user_keywords=&auc_type=1&aid=3481&ext_cid=0&device_theme=light&keywords=japanese,adult,teens&label_ids=89,108,0&conditions=all,dch_ip,tz_offset&need_redirect_show=0&page=https%3A%2F%2Fupornia.com%2F&auction_time=1685996376&show_count=1&from_cache=0&original_bid_usd=0.0011&mlf=1&cpa=61999649-73ae-4532-b0c8-f837c3ffdcf1&mlc=1&format=social-scale-b_r-body HTTP/1.1
Host: ntvpforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 05 Jun 2023 20:19:37 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
ntvpforever.com/in/show/?mid=6834809778014410948&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=705652794&sid=1985355264&cid=12822&price=0.00528&is_cpm=0&cpm=0&ecpm=0.14255677772480216&crid=&crtid=52058b26de099fc22aa86ff762e8fb05&tcid=0&out_id=0&ver=8.66.0&ver_c=&refdom=upornia.com&hostname=auc-inpage-hz-1-c&site_id=31437&spot_id=437&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1686068376&created_at=2023-06-05&is_native=1&burl=kVpu4Q3GXwJITMPJgGeEdVWa5Oq80ZgmbJr3EbKIuAw4j-GTargnsQ&pop_winurl=&ip=91.90.42.154&testab=0&px_id=31437&adblock=0&auction_host=apply&mm=0&yc=0&render_type=mq&campaign_type=mq&uniq=cac2b98248fc00256bc51df6021f6c2ea2a9bfbb062a99af16cc16242df41d03&exp=1440&resp_type=&iabcat=IAB25-3&min_cpm=0.03691841758748928&placement_type_id=0&skin_test=0&verify_hash=c0b44e18cc53f61fb5aa7b0fa464b8a0&score=72.55749937314037&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D705652794%26spot_id%3D437%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fupornia.com%252F%26idzone%3D4438148%26sid%3D1886&ml=&tag_ab=b&original_bid=0.00528&user_fp=17917114326412249025&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=0U7fgU-LkzTdLGJb-9uINcH56ajb2hHoPnnAAqUFnqKHPRbpmi96aqpJa7rFB3sz7jT6Km9WjIBBWzyVRdpSvfR_-OSPFheHfpy7KAUoYBWfZ3-NoGPRtcKmhKYkokpXFRUk7P-qAEnpADnkoXX_1-7rOj1ujxMYnVnulCY0GOn9ODWL1OdsjcxfaVOIg7Dfh-SLyaEulgm5TMOEIscgLsb8--2x5csLq8Xmvtjo6_VC1fTE1EKCFMPRgA-aHIvTMdEwE7usU7t9aw7TRHB-K8O-pusI1xu3qbYF8DsxkeHGoC4F4CiPpLQUDb17_tAvUVwaMUTfWHVcjw&image_url=https%3A%2F%2Fcdn.adx1.com%2F273c6867d9df9d195acd61363f23d0b4.png&skin_id=4&vertical_id=5&real_bid=0.004423056&pr=&user_keywords=&auc_type=1&aid=3251&ext_cid=0&device_theme=light&keywords=japanese,adult,teens&label_ids=5,98,101,106,123,4,76,81&conditions=all,dch_ip,tz_offset&need_redirect_show=0&page=https%3A%2F%2Fupornia.com%2F&auction_time=1685996376&show_count=1&from_cache=0&original_bid_usd=0.00528&cpa=5d35ff49-4001-4cc1-8a13-39fcb50613ef&format=social-scale-b_r-body
200 OK 0 B URL GET HTTP/2 ntvpforever.com/in/show/?mid=6834809778014410948&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=705652794&sid=1985355264&cid=12822&price=0.00528&is_cpm=0&cpm=0&ecpm=0.14255677772480216&crid=&crtid=52058b26de099fc22aa86ff762e8fb05&tcid=0&out_id=0&ver=8.66.0&ver_c=&refdom=upornia.com&hostname=auc-inpage-hz-1-c&site_id=31437&spot_id=437&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1686068376&created_at=2023-06-05&is_native=1&burl=kVpu4Q3GXwJITMPJgGeEdVWa5Oq80ZgmbJr3EbKIuAw4j-GTargnsQ&pop_winurl=&ip=91.90.42.154&testab=0&px_id=31437&adblock=0&auction_host=apply&mm=0&yc=0&render_type=mq&campaign_type=mq&uniq=cac2b98248fc00256bc51df6021f6c2ea2a9bfbb062a99af16cc16242df41d03&exp=1440&resp_type=&iabcat=IAB25-3&min_cpm=0.03691841758748928&placement_type_id=0&skin_test=0&verify_hash=c0b44e18cc53f61fb5aa7b0fa464b8a0&score=72.55749937314037&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D705652794%26spot_id%3D437%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fupornia.com%252F%26idzone%3D4438148%26sid%3D1886&ml=&tag_ab=b&original_bid=0.00528&user_fp=17917114326412249025&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=0U7fgU-LkzTdLGJb-9uINcH56ajb2hHoPnnAAqUFnqKHPRbpmi96aqpJa7rFB3sz7jT6Km9WjIBBWzyVRdpSvfR_-OSPFheHfpy7KAUoYBWfZ3-NoGPRtcKmhKYkokpXFRUk7P-qAEnpADnkoXX_1-7rOj1ujxMYnVnulCY0GOn9ODWL1OdsjcxfaVOIg7Dfh-SLyaEulgm5TMOEIscgLsb8--2x5csLq8Xmvtjo6_VC1fTE1EKCFMPRgA-aHIvTMdEwE7usU7t9aw7TRHB-K8O-pusI1xu3qbYF8DsxkeHGoC4F4CiPpLQUDb17_tAvUVwaMUTfWHVcjw&image_url=https%3A%2F%2Fcdn.adx1.com%2F273c6867d9df9d195acd61363f23d0b4.png&skin_id=4&vertical_id=5&real_bid=0.004423056&pr=&user_keywords=&auc_type=1&aid=3251&ext_cid=0&device_theme=light&keywords=japanese,adult,teens&label_ids=5,98,101,106,123,4,76,81&conditions=all,dch_ip,tz_offset&need_redirect_show=0&page=https%3A%2F%2Fupornia.com%2F&auction_time=1685996376&show_count=1&from_cache=0&original_bid_usd=0.00528&cpa=5d35ff49-4001-4cc1-8a13-39fcb50613ef&format=social-scale-b_r-body
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
FingerprintC3:3A:0A:7D:9C:4B:21:97:39:A7:AD:B8:87:47:F1:35:32:D9:84:53
ValidityFri, 28 Apr 2023 11:39:09 GMT - Thu, 27 Jul 2023 11:39:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?mid=6834809778014410948&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=705652794&sid=1985355264&cid=12822&price=0.00528&is_cpm=0&cpm=0&ecpm=0.14255677772480216&crid=&crtid=52058b26de099fc22aa86ff762e8fb05&tcid=0&out_id=0&ver=8.66.0&ver_c=&refdom=upornia.com&hostname=auc-inpage-hz-1-c&site_id=31437&spot_id=437&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1686068376&created_at=2023-06-05&is_native=1&burl=kVpu4Q3GXwJITMPJgGeEdVWa5Oq80ZgmbJr3EbKIuAw4j-GTargnsQ&pop_winurl=&ip=91.90.42.154&testab=0&px_id=31437&adblock=0&auction_host=apply&mm=0&yc=0&render_type=mq&campaign_type=mq&uniq=cac2b98248fc00256bc51df6021f6c2ea2a9bfbb062a99af16cc16242df41d03&exp=1440&resp_type=&iabcat=IAB25-3&min_cpm=0.03691841758748928&placement_type_id=0&skin_test=0&verify_hash=c0b44e18cc53f61fb5aa7b0fa464b8a0&score=72.55749937314037&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D705652794%26spot_id%3D437%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fupornia.com%252F%26idzone%3D4438148%26sid%3D1886&ml=&tag_ab=b&original_bid=0.00528&user_fp=17917114326412249025&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=0U7fgU-LkzTdLGJb-9uINcH56ajb2hHoPnnAAqUFnqKHPRbpmi96aqpJa7rFB3sz7jT6Km9WjIBBWzyVRdpSvfR_-OSPFheHfpy7KAUoYBWfZ3-NoGPRtcKmhKYkokpXFRUk7P-qAEnpADnkoXX_1-7rOj1ujxMYnVnulCY0GOn9ODWL1OdsjcxfaVOIg7Dfh-SLyaEulgm5TMOEIscgLsb8--2x5csLq8Xmvtjo6_VC1fTE1EKCFMPRgA-aHIvTMdEwE7usU7t9aw7TRHB-K8O-pusI1xu3qbYF8DsxkeHGoC4F4CiPpLQUDb17_tAvUVwaMUTfWHVcjw&image_url=https%3A%2F%2Fcdn.adx1.com%2F273c6867d9df9d195acd61363f23d0b4.png&skin_id=4&vertical_id=5&real_bid=0.004423056&pr=&user_keywords=&auc_type=1&aid=3251&ext_cid=0&device_theme=light&keywords=japanese,adult,teens&label_ids=5,98,101,106,123,4,76,81&conditions=all,dch_ip,tz_offset&need_redirect_show=0&page=https%3A%2F%2Fupornia.com%2F&auction_time=1685996376&show_count=1&from_cache=0&original_bid_usd=0.00528&cpa=5d35ff49-4001-4cc1-8a13-39fcb50613ef&format=social-scale-b_r-body HTTP/1.1
Host: ntvpforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 05 Jun 2023 20:19:37 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp
200 OK 590 B URL GET HTTP/2 static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectbookmsg.com
FingerprintD6:6E:0F:A6:67:62:7E:D4:E0:5E:87:61:7A:1E:EB:BB:36:47:D0:71
ValidityMon, 15 May 2023 01:51:00 GMT - Sun, 13 Aug 2023 01:50:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash debce753f1ce6652c1637491fd72b1b1
fd102eb3f058f7a43b0f9ec03541681699f5895e
c2443b0a74b25158756abb7aa12832e5442adab247aab6e24514f54396c72579
GET /creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 05 Jun 2023 20:19:37 GMT
content-type: image/webp
content-length: 590
last-modified: Tue, 24 Nov 2020 14:24:12 GMT
etag: "5fbd178c-24e"
cache-control: public, max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?mlf=1&cpa=906cd98f-6371-4c57-ad4f-1c72f085f315&mlc=1&format=social-scale-b_r-body
200 OK 590 B URL GET HTTP/2 static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?mlf=1&cpa=906cd98f-6371-4c57-ad4f-1c72f085f315&mlc=1&format=social-scale-b_r-body
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectbookmsg.com
FingerprintD6:6E:0F:A6:67:62:7E:D4:E0:5E:87:61:7A:1E:EB:BB:36:47:D0:71
ValidityMon, 15 May 2023 01:51:00 GMT - Sun, 13 Aug 2023 01:50:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash debce753f1ce6652c1637491fd72b1b1
fd102eb3f058f7a43b0f9ec03541681699f5895e
c2443b0a74b25158756abb7aa12832e5442adab247aab6e24514f54396c72579
GET /creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?mlf=1&cpa=906cd98f-6371-4c57-ad4f-1c72f085f315&mlc=1&format=social-scale-b_r-body HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 05 Jun 2023 20:19:37 GMT
content-type: image/webp
content-length: 590
last-modified: Tue, 24 Nov 2020 14:24:12 GMT
etag: "5fbd178c-24e"
cache-control: public, max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
eu.doctorpost.net/nty/metrics/save.img?event=impressions&bid-id=v2-1685996377103-7-9306-1241083-213253ef-242d-ce35-d5c3-3b45cd9ebaf9&img=https%3A%2F%2Fcdn.adx1.com%2F40180b518044c194d25e45229ff18fa3.png&cpa=1b3d92ab-381a-40af-861a-693bdc93ca51&format=social-scale-b_r-body
302 Found 0 B URL GET HTTP/2 eu.doctorpost.net/nty/metrics/save.img?event=impressions&bid-id=v2-1685996377103-7-9306-1241083-213253ef-242d-ce35-d5c3-3b45cd9ebaf9&img=https%3A%2F%2Fcdn.adx1.com%2F40180b518044c194d25e45229ff18fa3.png&cpa=1b3d92ab-381a-40af-861a-693bdc93ca51&format=social-scale-b_r-body
IP
Certificate IssuerLet's Encrypt
Subject*.doctorpost.net
Fingerprint03:CF:FD:3D:A3:A5:17:2C:F7:EB:78:69:2E:B0:F7:EA:82:52:AD:FB
ValidityThu, 20 Apr 2023 23:02:23 GMT - Wed, 19 Jul 2023 23:02:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /nty/metrics/save.img?event=impressions&bid-id=v2-1685996377103-7-9306-1241083-213253ef-242d-ce35-d5c3-3b45cd9ebaf9&img=https%3A%2F%2Fcdn.adx1.com%2F40180b518044c194d25e45229ff18fa3.png&cpa=1b3d92ab-381a-40af-861a-693bdc93ca51&format=social-scale-b_r-body HTTP/1.1
Host: eu.doctorpost.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty/1.15.8.3
date: Mon, 05 Jun 2023 20:19:38 GMT
content-length: 0
location: https://cdn.adx1.com/40180b518044c194d25e45229ff18fa3.png
X-Firefox-Spdy: h2
mcpuwpsh.com/get
200 OK 1.4 kB IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectpuwpush.com
Fingerprint58:3E:09:D9:0E:6D:8D:35:C9:7B:AC:10:81:CC:F2:2F:8E:B6:6A:67
ValidityThu, 04 May 2023 02:03:56 GMT - Wed, 02 Aug 2023 02:03:55 GMT
File type JSON data\012- , ASCII text, with very long lines (1351), with no line terminators
Hash fc9f587e36d6c985e783fdd5a26f5d71
fb2b4b8a706b424adc4beeb3492aeff788e30411
d01ca89fa457100a745ed933d7d017af25b700f13be63c81405be422e5e19f65
Analyzer Verdict Alert quad9 Sinkholed
POST /get HTTP/1.1
Host: mcpuwpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upornia.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 579
Origin: https://upornia.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.0
date: Mon, 05 Jun 2023 20:19:38 GMT
content-type: application/json
content-length: 1351
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
cdn2cdn.me/dli/webcamera.svg?fill=%23929197
200 OK 1.3 kB URL GET HTTP/2 cdn2cdn.me/dli/webcamera.svg?fill=%23929197
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectcdn2cdn.me
Fingerprint1F:BD:5D:9A:F6:E5:BA:5E:D7:FD:0C:E8:10:A4:2F:12:E4:D2:90:74
ValidityMon, 24 Apr 2023 14:00:21 GMT - Sun, 23 Jul 2023 14:00:20 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (937), with CRLF line terminators
Hash bafc3550493f70677afb95f4bd7d1135
b267787e31ea33a55b6a3140d4e802279098abb4
e7e6cd17d4242ba2a6f09e75b85b089287f2da80ce04bce096f6f40e048315f3
GET /dli/webcamera.svg?fill=%23929197 HTTP/1.1
Host: cdn2cdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:50 GMT
content-type: image/svg+xml
content-length: 1349
server: nginx/1.20.1
last-modified: Tue, 16 Jun 2020 16:25:10 GMT
etag: "5ee8f266-545"
x-request-id: 9d4313ad056cb0ccf315e636a1a82a6d
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdntocdn.com/dli/whatshot.svg?fill=%23929197
200 OK 1.1 kB URL GET HTTP/2 cdntocdn.com/dli/whatshot.svg?fill=%23929197
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectcdntocdn.com
Fingerprint7A:F2:0A:21:DD:D9:49:B1:9A:39:51:DF:3F:15:9A:9E:DB:3E:76:B0
ValidityMon, 15 May 2023 02:01:26 GMT - Sun, 13 Aug 2023 02:01:25 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (652), with CRLF line terminators
Hash 92d4b3c9db72fefd9d6d927ec40be29b
efb550da28d7b18d7e2beb7698577415fde2b24f
7ad9fcb297f4600edf827b026deca9e0ed695be37ab46ac2d9fee35040611130
GET /dli/whatshot.svg?fill=%23929197 HTTP/1.1
Host: cdntocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:51 GMT
content-type: image/svg+xml
content-length: 1064
server: nginx/1.20.1
last-modified: Tue, 16 Jun 2020 16:25:10 GMT
etag: "5ee8f266-428"
x-request-id: 1338d73d4ad37084f689ef33cadf4287
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
uptn.nv7s.com/upd/20230526.114101.10784/static/js/index.js
200 OK 11 kB URL GET HTTP/2 uptn.nv7s.com/upd/20230526.114101.10784/static/js/index.js
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
File type ASCII text, with very long lines (10784), with no line terminators
Hash bac49401f3eead0b2021c254f720ed0b
e528c0857dd6b3f4c29bc782a7d0eae15faec11d
991c36a06875bc31179565c8818cc4092c700d364382e1fb584f4e1f1a7c4435
GET /upd/20230526.114101.10784/static/js/index.js HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:34 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.19.6
last-modified: Fri, 26 May 2023 11:41:01 GMT
etag: W/"64709acd-2a20"
cache-control: max-age=5184000
content-encoding: gzip
expires: Fri, 04 Aug 2023 20:19:34 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
uptn.nv7s.com/pmkwbhris/tgsdcmjl.js
200 OK 8.9 kB URL GET HTTP/2 uptn.nv7s.com/pmkwbhris/tgsdcmjl.js
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
File type ASCII text, with very long lines (9048), with no line terminators
Hash 419ddbe4f1fc58f4c00ec3270b899e65
420465da9ade9e7993478fd2ca03898bea735b38
ca80489bd2cc38d3ab0d0eaa6b1f6d15a77763e9226ff4355a03861e4f6867c0
GET /pmkwbhris/tgsdcmjl.js HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:36 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.19.6
last-modified: Mon, 05 Jun 2023 20:01:06 GMT
etag: W/"647e3f02-22d4"
cache-control: max-age=5184000
content-encoding: gzip
expires: Fri, 04 Aug 2023 20:19:36 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=4126545616280326481&pid=0&site=31245&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=upornia.com&hostname=auc-banner-hz-1&site_id=0&spot_id=31245&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframe&iabcat=IAB25&min_cpm=0.000794615&placement_type_id=8&skin_test=&verify_hash=&score=1.8261234861475075&ml=&tag_ab=b&v2=0&ttl=&space_id=31245&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fa.realsrv.com%2Fiframe.php%3Fidzone%3D1500748%26size%3D300x250%26sub%3D0%26tags%3Dstraight%2C&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=straight,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.000794615
302 Found 0 B URL GET HTTP/2 rtbrennab.com/banner/in/show/?mid=4126545616280326481&pid=0&site=31245&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=upornia.com&hostname=auc-banner-hz-1&site_id=0&spot_id=31245&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframe&iabcat=IAB25&min_cpm=0.000794615&placement_type_id=8&skin_test=&verify_hash=&score=1.8261234861475075&ml=&tag_ab=b&v2=0&ttl=&space_id=31245&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fa.realsrv.com%2Fiframe.php%3Fidzone%3D1500748%26size%3D300x250%26sub%3D0%26tags%3Dstraight%2C&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=straight,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.000794615
IP
ASN #24940 Hetzner Online GmbH
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=4126545616280326481&pid=0&site=31245&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=upornia.com&hostname=auc-banner-hz-1&site_id=0&spot_id=31245&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframe&iabcat=IAB25&min_cpm=0.000794615&placement_type_id=8&skin_test=&verify_hash=&score=1.8261234861475075&ml=&tag_ab=b&v2=0&ttl=&space_id=31245&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fa.realsrv.com%2Fiframe.php%3Fidzone%3D1500748%26size%3D300x250%26sub%3D0%26tags%3Dstraight%2C&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=straight,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.000794615 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.16.0
date: Mon, 05 Jun 2023 20:19:37 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://a.realsrv.com/iframe.php?idzone=1500748&size=300x250&sub=0&tags=straight,
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=6910119566769430249&pid=0&site=31246&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10765&price=0&is_cpm=1&cpm=0.00747231&ecpm=0.005303845638&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=upornia.com&hostname=auc-banner-hz-9&site_id=0&spot_id=31246&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.0023401764943866187&placement_type_id=8&skin_test=&verify_hash=&score=6.8462723634677936&ml=&tag_ab=b&v2=0&ttl=&space_id=31246&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=straight,&stratagem=&ssp=3756
302 Found 42 B URL GET HTTP/2 rtbrennab.com/banner/in/show/?mid=6910119566769430249&pid=0&site=31246&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10765&price=0&is_cpm=1&cpm=0.00747231&ecpm=0.005303845638&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=upornia.com&hostname=auc-banner-hz-9&site_id=0&spot_id=31246&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.0023401764943866187&placement_type_id=8&skin_test=&verify_hash=&score=6.8462723634677936&ml=&tag_ab=b&v2=0&ttl=&space_id=31246&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=straight,&stratagem=&ssp=3756
IP
ASN #24940 Hetzner Online GmbH
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=6910119566769430249&pid=0&site=31246&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10765&price=0&is_cpm=1&cpm=0.00747231&ecpm=0.005303845638&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=upornia.com&hostname=auc-banner-hz-9&site_id=0&spot_id=31246&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.0023401764943866187&placement_type_id=8&skin_test=&verify_hash=&score=6.8462723634677936&ml=&tag_ab=b&v2=0&ttl=&space_id=31246&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=straight,&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.16.0
date: Mon, 05 Jun 2023 20:19:37 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://preroll.hostave3.net/notifications/zeropixel.png
X-Firefox-Spdy: h2
uptn.nv7s.com//upd/20230526.114101.357780/static/js/chunk-vendors.js
200 OK 358 kB URL GET HTTP/2 uptn.nv7s.com//upd/20230526.114101.357780/static/js/chunk-vendors.js
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
Size 358 kB (357780 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET //upd/20230526.114101.357780/static/js/chunk-vendors.js HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:34 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.19.6
last-modified: Fri, 26 May 2023 11:41:01 GMT
etag: W/"64709acd-57594"
cache-control: max-age=5184000
content-encoding: gzip
expires: Fri, 04 Aug 2023 20:19:34 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
200 OK 241 kB URL User Request GET HTTP/2 IP
Certificate IssuerLet's Encrypt
Subjectupornia.com
Fingerprint2D:33:49:89:ED:76:B0:83:22:7C:73:50:22:D9:20:69:6D:2A:30:11
ValidityWed, 19 Apr 2023 03:12:11 GMT - Tue, 18 Jul 2023 03:12:10 GMT
Size 241 kB (240914 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.19.6
date: Mon, 05 Jun 2023 20:19:36 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.2.34
access-control-allow-origin: *
set-cookie: tccloak=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=upornia.com
kt_lang=en; expires=Thu, 30-May-2024 20:19:36 GMT; Max-Age=31104000; path=/; domain=.upornia.com
content-encoding: gzip
X-Firefox-Spdy: h2
uptn.nv7s.com//upd/20230526.114101.183553/static/css/chunk-common.css
200 OK 184 kB URL GET HTTP/2 uptn.nv7s.com//upd/20230526.114101.183553/static/css/chunk-common.css
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 184 kB (183553 bytes)
Hash d152b3ffcf3ef870e18a9aac1854163e
e40de20ace1f6c88bee3e200d3a508a636cbf2b8
cfec88fa15a96e063e78f78bf62ece7c1e283168227c6723935ffaa01cf9ce86
GET //upd/20230526.114101.183553/static/css/chunk-common.css HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:34 GMT
content-type: text/css
server: nginx/1.19.6
last-modified: Fri, 26 May 2023 11:41:01 GMT
etag: W/"64709acd-2cd01"
cache-control: max-age=5184000
content-encoding: gzip
expires: Fri, 04 Aug 2023 20:19:34 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
uptn.nv7s.com/images/favicons/favicon-16x16.png
200 OK 722 B URL GET HTTP/2 uptn.nv7s.com/images/favicons/favicon-16x16.png
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash e1a60451744dc606581f8f5a12d912bb
56f64fdf2827ccfb3dec93e9d1a5ae6fec424d73
c2e8c8fff9daa3c581d86cd1b0b2913b0bdf5ef783e6055e59f343b75ea90f0e
GET /images/favicons/favicon-16x16.png HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/png
content-length: 722
server: nginx/1.19.6
last-modified: Mon, 22 May 2023 09:42:29 GMT
etag: "646b3905-2d2"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
uptn.nv7s.com/upd/20230526.114101.357780/static/js/chunk-vendors.js
200 OK 358 kB URL GET HTTP/2 uptn.nv7s.com/upd/20230526.114101.357780/static/js/chunk-vendors.js
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
Size 358 kB (357780 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upd/20230526.114101.357780/static/js/chunk-vendors.js HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:34 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.19.6
last-modified: Fri, 26 May 2023 11:41:01 GMT
etag: W/"64709acd-57594"
cache-control: max-age=5184000
content-encoding: gzip
expires: Fri, 04 Aug 2023 20:19:34 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
uptn.nv7s.com/pmkwbhris/zujypvjqmphy.js
200 OK 21 kB URL GET HTTP/2 uptn.nv7s.com/pmkwbhris/zujypvjqmphy.js
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
File type ASCII text, with very long lines (21361)
Hash 848c5146a2914ec22c15cd8cb7d7e8d6
c9e34c2499ef977e8bbbbef1b54a666a3175834c
c48c5940abd9b966dd0c8407bf43bbc187a1e26968b1548b100dfd194435c343
GET /pmkwbhris/zujypvjqmphy.js HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:36 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.19.6
last-modified: Mon, 05 Jun 2023 20:01:06 GMT
etag: W/"647e3f02-53b3"
cache-control: max-age=5184000
content-encoding: gzip
expires: Fri, 04 Aug 2023 20:19:36 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
uptn.nv7s.com/pmkwbhris/rlsbrwfpiq.js
200 OK 48 kB URL GET HTTP/2 uptn.nv7s.com/pmkwbhris/rlsbrwfpiq.js
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
File type ASCII text, with very long lines (48376)
Hash ded1862edc965b0368a270e67a4bf59d
9ffa0df73c638ed692464d9bebcb935ddda528c4
ce070b0eae26a635d1d4d4fea9a2e31aefdff9b0ce976a01d68caa2d2e3928e2
GET /pmkwbhris/rlsbrwfpiq.js HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:36 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.19.6
last-modified: Mon, 05 Jun 2023 20:01:06 GMT
etag: W/"647e3f02-bd3a"
cache-control: max-age=5184000
content-encoding: gzip
expires: Fri, 04 Aug 2023 20:19:36 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=5034569527601277779&pid=0&site=31247&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10765&price=0&is_cpm=1&cpm=0.00747231&ecpm=0.005303845638&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=upornia.com&hostname=auc-banner-hz-6&site_id=0&spot_id=31247&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.002328871748323155&placement_type_id=8&skin_test=&verify_hash=&score=6.846388485411663&ml=&tag_ab=b&v2=0&ttl=&space_id=31247&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=straight,&stratagem=&ssp=3756
302 Found 42 B URL GET HTTP/2 rtbrennab.com/banner/in/show/?mid=5034569527601277779&pid=0&site=31247&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10765&price=0&is_cpm=1&cpm=0.00747231&ecpm=0.005303845638&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=upornia.com&hostname=auc-banner-hz-6&site_id=0&spot_id=31247&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.002328871748323155&placement_type_id=8&skin_test=&verify_hash=&score=6.846388485411663&ml=&tag_ab=b&v2=0&ttl=&space_id=31247&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=straight,&stratagem=&ssp=3756
IP
ASN #24940 Hetzner Online GmbH
Requested by https://rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MzEyNDcsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjE1MDA3NTYsImFkX3RhZ3MiOiJzdHJhaWdodCwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwicmVmcmVzaCI6MSwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6MzEyNDcsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjgsInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1NiwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjpmYWxzZX0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH19XSwic2l0ZSI6eyJpZCI6IjMxMjQ3IiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL3Vwb3JuaWEuY29tLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI0Y2I3MjU2NjBjNDMwMzFlM2IwNmM3NTg5MmQ5NmM1YSIsImZwIjpudWxsfSwiZXh0Ijp7ImR0IjoxNjg1OTk2Mzc1OTE1fX0=
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=5034569527601277779&pid=0&site=31247&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10765&price=0&is_cpm=1&cpm=0.00747231&ecpm=0.005303845638&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=upornia.com&hostname=auc-banner-hz-6&site_id=0&spot_id=31247&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.002328871748323155&placement_type_id=8&skin_test=&verify_hash=&score=6.846388485411663&ml=&tag_ab=b&v2=0&ttl=&space_id=31247&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=straight,&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.16.0
date: Mon, 05 Jun 2023 20:19:37 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://preroll.hostave3.net/notifications/zeropixel.png
X-Firefox-Spdy: h2
upornia.com/api/json/suggester/86400/1000.json
200 OK 14 kB URL GET HTTP/2 upornia.com/api/json/suggester/86400/1000.json
IP
Certificate IssuerLet's Encrypt
Subjectupornia.com
Fingerprint2D:33:49:89:ED:76:B0:83:22:7C:73:50:22:D9:20:69:6D:2A:30:11
ValidityWed, 19 Apr 2023 03:12:11 GMT - Tue, 18 Jul 2023 03:12:10 GMT
File type JSON data\012- , ASCII text, with very long lines (14547), with no line terminators
Hash 6826dd37ae46fa4b0f1d1827bcf5a339
87fe4d0d384bec5633faccaad167ecbb316ab677
091c1ff2c69ed904fc53fe83a01ecdde939f102bd629482700a4eaafbe5e8828
GET /api/json/suggester/86400/1000.json HTTP/1.1
Host: upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.19.6
date: Mon, 05 Jun 2023 20:19:37 GMT
content-type: application/json
last-modified: Mon, 05 Jun 2023 18:16:13 GMT
vary: Accept-Encoding
etag: W/"647e266d-38d3"
expires: Mon, 05 Jun 2023 20:24:37 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
200 OK 3.7 kB URL GET HTTP/2 rtbrennab.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (3815), with no line terminators
Hash 6b55c1316bad6364f34873fa9b7bf16f
ec61263f64a7431ddd8ce227a5ebb2202d6ad7be
394ebfea3e3cd54ba5e57c2459a91b9fc8ecd0209961d1cb31a20c08833c8c39
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.0
date: Mon, 05 Jun 2023 20:19:36 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
200 OK 3.7 kB URL GET HTTP/2 rtbrennab.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (3809), with no line terminators
Hash e2653a5ec63634dcfbb14907df00c4c3
fdbebe667cd1aa92dadb428e47994357e0f22571
503d5b4cabb665bd56c837d7500b66e3fa1931e503f2e16a44e343661d979530
GET /get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MzEyNDcsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjE1MDA3NTYsImFkX3RhZ3MiOiJzdHJhaWdodCwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwicmVmcmVzaCI6MSwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6MzEyNDcsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjgsInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1NiwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjpmYWxzZX0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH19XSwic2l0ZSI6eyJpZCI6IjMxMjQ3IiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL3Vwb3JuaWEuY29tLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI0Y2I3MjU2NjBjNDMwMzFlM2IwNmM3NTg5MmQ5NmM1YSIsImZwIjpudWxsfSwiZXh0Ijp7ImR0IjoxNjg1OTk2Mzc1OTE1fX0= HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.0
date: Mon, 05 Jun 2023 20:19:36 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
uptn.nv7s.com/images/flags/no.svg
200 OK 1.8 kB URL GET HTTP/2 uptn.nv7s.com/images/flags/no.svg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- exported SGML document, ASCII text, with very long lines (2052), with no line terminators
Hash 199f0685b0b8b3f4d227d116175ed2dc
5a54a84285c9b9bbd0eb30aa0a1f236bfd0c536b
5357c7e4865c96701fbc899e8e576ccb1c4109e95ce5aaf41267212717aa6332
GET /images/flags/no.svg HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uptn.nv7s.com//upd/20230526.114101.183553/static/css/chunk-common.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/svg+xml
content-length: 1843
server: nginx/1.19.6
last-modified: Mon, 22 May 2023 09:42:29 GMT
etag: "646b3905-733"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
uptn.nv7s.com/upd/20230526.114101.345104/static/js/chunk-common.js
200 OK 345 kB URL GET HTTP/2 uptn.nv7s.com/upd/20230526.114101.345104/static/js/chunk-common.js
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
Size 345 kB (345104 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upd/20230526.114101.345104/static/js/chunk-common.js HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:34 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.19.6
last-modified: Fri, 26 May 2023 11:41:01 GMT
etag: W/"64709acd-54410"
cache-control: max-age=5184000
content-encoding: gzip
expires: Fri, 04 Aug 2023 20:19:34 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?dsh=S-1325072514%3A1685996377257057&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&ffgf=1&hl=en&ifkv=Af_xneEeBZoU8mfkuBt_yGYxyZpC20PNs39Nc6_zNQzX9MkRJpfmgyokJG-HrVaMXRvzXevBsnPJ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin
403 Forbidden 0 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?dsh=S-1325072514%3A1685996377257057&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&ffgf=1&hl=en&ifkv=Af_xneEeBZoU8mfkuBt_yGYxyZpC20PNs39Nc6_zNQzX9MkRJpfmgyokJG-HrVaMXRvzXevBsnPJ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?dsh=S-1325072514%3A1685996377257057&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&ffgf=1&hl=en&ifkv=Af_xneEeBZoU8mfkuBt_yGYxyZpC20PNs39Nc6_zNQzX9MkRJpfmgyokJG-HrVaMXRvzXevBsnPJ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 05 Jun 2023 20:19:37 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-C-tuvXT4ef_EbcFSm38-bg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
upornia.com/api/json/videos2/14400/str/latest-updates/20/top-country.no.7.all...json
200 OK 32 kB URL GET HTTP/2 upornia.com/api/json/videos2/14400/str/latest-updates/20/top-country.no.7.all...json
IP
Certificate IssuerLet's Encrypt
Subjectupornia.com
Fingerprint2D:33:49:89:ED:76:B0:83:22:7C:73:50:22:D9:20:69:6D:2A:30:11
ValidityWed, 19 Apr 2023 03:12:11 GMT - Tue, 18 Jul 2023 03:12:10 GMT
File type JSON data\012- , ASCII text, with very long lines (31634), with no line terminators
Hash 9fba06f1f22a3b06844c0e1aebfa3be1
8f45856e3b042e8739a6037b220932d29a1fa385
28efede7437a88c027f677904ddb73c51e385cf5b84a4e29ca48f5816d46a932
GET /api/json/videos2/14400/str/latest-updates/20/top-country.no.7.all...json HTTP/1.1
Host: upornia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.19.6
date: Mon, 05 Jun 2023 20:19:37 GMT
content-type: application/json
last-modified: Mon, 05 Jun 2023 16:55:05 GMT
vary: Accept-Encoding
etag: W/"647e1369-7b92"
expires: Mon, 05 Jun 2023 20:24:37 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
uptn.nv7s.com//upd/20230526.114101.345104/static/js/chunk-common.js
200 OK 345 kB URL GET HTTP/2 uptn.nv7s.com//upd/20230526.114101.345104/static/js/chunk-common.js
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
Size 345 kB (345104 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET //upd/20230526.114101.345104/static/js/chunk-common.js HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:34 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.19.6
last-modified: Fri, 26 May 2023 11:41:01 GMT
etag: W/"64709acd-54410"
cache-control: max-age=5184000
content-encoding: gzip
expires: Fri, 04 Aug 2023 20:19:34 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;900&display=swap
200 OK 9.1 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;900&display=swap
IP
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint3F:94:23:08:F7:DB:8B:36:93:90:93:F4:9E:46:A6:6A:93:75:15:C0
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (9360), with no line terminators
Hash 54e2b38df39704800a9fd8811e5ebfcd
c868e73029c63709367939a29e944c804af61453
8983f0ec81a03b13fc5026cb9fd18a56ea4b050c44336c558dbee8209199c786
GET /css2?family=Roboto:wght@300;400;500;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 05 Jun 2023 20:19:34 GMT
date: Mon, 05 Jun 2023 20:19:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
uptn.nv7s.com//upd/20230526.114101.10784/static/js/index.js
200 OK 11 kB URL GET HTTP/2 uptn.nv7s.com//upd/20230526.114101.10784/static/js/index.js
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
File type ASCII text, with very long lines (10784), with no line terminators
Hash bac49401f3eead0b2021c254f720ed0b
e528c0857dd6b3f4c29bc782a7d0eae15faec11d
991c36a06875bc31179565c8818cc4092c700d364382e1fb584f4e1f1a7c4435
GET //upd/20230526.114101.10784/static/js/index.js HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:34 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.19.6
last-modified: Fri, 26 May 2023 11:41:01 GMT
etag: W/"64709acd-2a20"
cache-control: max-age=5184000
content-encoding: gzip
expires: Fri, 04 Aug 2023 20:19:34 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
uptn.nv7s.com/images/favicons/apple-touch-icon.png
200 OK 4.3 kB URL GET HTTP/2 uptn.nv7s.com/images/favicons/apple-touch-icon.png
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 8a7e5a3ed397a80c26370efe5a077619
48ebe798dd2bca364b8b08e546d6b2106a6a2ff6
a83aa6e080c94bb5dbc18deb52a620fead2d0309c5b2ed46f80400b37d3d7ca1
GET /images/favicons/apple-touch-icon.png HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:35 GMT
content-type: image/png
content-length: 4296
server: nginx/1.19.6
last-modified: Thu, 15 Dec 2022 13:03:16 GMT
etag: "639b1b14-10c8"
cache-control: max-age=5184000
expires: Fri, 04 Aug 2023 20:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type Web Open Font Format (Version 2), TrueType, length 15752, version 1.0\012- data
Hash b20371a6daf29d4a1f2e85dbbf40fb20
0355a01c1ccb45cb728e7e07c41c8ebf456f70bb
7e262106f82cc52663e403f5b73795bbeab9ca0630c33c03579354fbcd4fae1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://upornia.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Jun 2023 08:09:04 GMT
expires: Sun, 02 Jun 2024 08:09:04 GMT
cache-control: public, max-age=31536000
age: 216631
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
uptn.nv7s.com/pmkwbhris/tjobemyreoc.js
200 OK 43 kB URL GET HTTP/2 uptn.nv7s.com/pmkwbhris/tjobemyreoc.js
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
File type ASCII text, with very long lines (42758), with no line terminators
Hash 1cfa2835e248b1d07d937744cc5bb534
97d9f3dc7885dc49afee52a2a27c61e7bd271a22
7a1cba3c835d01a3fa5b216181efb871f9984a7b50b1828fe6357fefa8c2b5e9
GET /pmkwbhris/tjobemyreoc.js HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:36 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.19.6
last-modified: Mon, 05 Jun 2023 20:01:06 GMT
etag: W/"647e3f02-a706"
cache-control: max-age=5184000
content-encoding: gzip
expires: Fri, 04 Aug 2023 20:19:36 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
uptn.nv7s.com/pmkwbhris/agvfntdlkru.js
200 OK 516 kB URL GET HTTP/2 uptn.nv7s.com/pmkwbhris/agvfntdlkru.js
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectuptn.nv7s.com
Fingerprint9E:DF:21:D5:80:E3:42:CE:A2:27:24:F2:AD:0B:71:A7:45:84:C7:C0
ValidityMon, 22 May 2023 14:50:35 GMT - Sun, 20 Aug 2023 14:50:34 GMT
Size 516 kB (515564 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pmkwbhris/agvfntdlkru.js HTTP/1.1
Host: uptn.nv7s.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upornia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 20:19:36 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.19.6
last-modified: Mon, 05 Jun 2023 20:01:06 GMT
etag: W/"647e3f02-7ddec"
cache-control: max-age=5184000
content-encoding: gzip
expires: Fri, 04 Aug 2023 20:19:36 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
109.206.171.6
45.133.44.24
149.6.163.14
94.130.197.134
185.76.9.22
104.21.235.4
0.0.0.0