| track.sexcamchats.com/98beb99a-89d9-4593-8d91-de4477ed7957?campaignid={%25platform%25}&site={%25site%25}&zoneid={%25cid%25}&umt_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_campaign=acquisition_mar-21-2024&utm_source=347&var8=200866&var9=866_fr_flirtrev_mwf_0324&utm_medium=popunder&cost={%25cost%25}&subid={%25subid%25} |  54.230.111.93 | 302 Found | 0 B |
URL User Request GET HTTP/2track.sexcamchats.com/98beb99a-89d9-4593-8d91-de4477ed7957?campaignid={%25platform%25}&site={%25site%25}&zoneid={%25cid%25}&umt_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_campaign=acquisition_mar-21-2024&utm_source=347&var8=200866&var9=866_fr_flirtrev_mwf_0324&utm_medium=popunder&cost={%25cost%25}&subid={%25subid%25} IP54.230.111.93:443
CertificateIssuerAmazon Subjecttrack.sexcamchats.com Fingerprint19:75:AF:5A:A7:B2:6D:33:CE:41:63:7E:E3:8D:86:66:E2:97:E5:69 ValidityTue, 23 Apr 2024 00:00:00 GMT - Thu, 22 May 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /98beb99a-89d9-4593-8d91-de4477ed7957?campaignid={%25platform%25}&site={%25site%25}&zoneid={%25cid%25}&umt_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_campaign=acquisition_mar-21-2024&utm_source=347&var8=200866&var9=866_fr_flirtrev_mwf_0324&utm_medium=popunder&cost={%25cost%25}&subid={%25subid%25} HTTP/1.1
Host: track.sexcamchats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-length: 0
location: https://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup
date: Fri, 26 Apr 2024 21:08:10 GMT
cache-control: no-store, no-cache, pre-check=0, post-check=0
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: 98beb99a-89d9-4593-8d91-de4477ed7957-v4=-0EWSvcuy3JwlVU7TzermX4pJfFaAfzbCiIH04sbFms; Max-Age=86400; Expires=Sat, 27-Apr-2024 21:08:10 GMT; Domain=track.sexcamchats.com; Path=/; Secure; HttpOnly;SameSite=None
voluum-cid-v4=%7B%22cid%22%3A%22wfpkottsqgciids03aklool6%22%2C%22caid%22%3A%2298beb99a-89d9-4593-8d91-de4477ed7957%22%7D; Max-Age=31536000; Expires=Sat, 26-Apr-2025 21:08:10 GMT; Domain=track.sexcamchats.com; Path=/; Secure; HttpOnly;SameSite=None
server: nginx
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pDJmQtvfixq2Auh5BFsjEEaXGg9iNQIImQp-wpQfwriHdU3UwLMQew==
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-Y9E01LQ1PZ | 142.250.74.168 | 200 OK | 101 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-Y9E01LQ1PZ IP142.250.74.168:443
Requested byhttps://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52 ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Size101 kB (100673 bytes) Hash26f5f81c33d62cafe6e9b114c497c10b 48538c4a2899e9cefc5beacdd77d460ff7289753 b43c66717d17f316aed5d0f90998233aaf6e87e5807210cafa65f5c0c4d2882b
GET /gtag/js?id=G-Y9E01LQ1PZ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landers.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 21:08:11 GMT
expires: Fri, 26 Apr 2024 21:08:11 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100673
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-1.11.3.min.js | 151.101.130.137 | 200 OK | 33 kB |
URL GET HTTP/2code.jquery.com/jquery-1.11.3.min.js IP151.101.130.137:443
Requested byhttps://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32038) Hash895323ed2f7258af4fae2c738c8aea49 276c87ff3e1e3155679c318938e74e5c1b76d809 ecb916133a9376911f10bc5c659952eb0031e457f5df367cde560edbfba38fb8
GET /jquery-1.11.3.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landers.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-176d5"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 26 Apr 2024 21:08:11 GMT
age: 19365054
x-served-by: cache-lga21975-LGA, cache-hel1410022-HEL
x-cache: HIT, HIT
x-cache-hits: 117, 9281
x-timer: S1714165691.120290,VS0,VE0
vary: Accept-Encoding
content-length: 33261
X-Firefox-Spdy: h2
|
|
| landers.cam4.com/video/css/en.css | 99.192.248.164 | 200 OK | 3.6 kB |
URL GET HTTP/2landers.cam4.com/video/css/en.css IP99.192.248.164:443
Requested byhttps://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup CertificateIssuerLet's Encrypt Subjectlanders.cam4.com Fingerprint58:A6:4E:49:D2:79:11:78:62:5D:8C:CA:27:0A:A4:AA:FD:AC:50:50 ValidityThu, 18 Apr 2024 07:24:31 GMT - Wed, 17 Jul 2024 07:24:30 GMT
File typeassembler source, ASCII text Hashf63955402f846fd2269f03fa95594327 3feec4229af8bb70e8f566153fcbebf493ff52fb e90b393ba3656b3fa7f4e73f555d9615453c1d0e83e4996d940acbc10560842f
GET /video/css/en.css HTTP/1.1
Host: landers.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup
Cookie: PHPSESSID=jqn6rk2rc9171cbuvhaavh5p4a; cam4-AF="voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324"; cam4-UTM-campaigns=%7B%22utmCampaign%22%3A%22acquisition_mar-21-2024%22%2C%22utmSource%22%3A%22347%22%2C%22utmMedium%22%3A%22popunder%22%2C%22utmTerm%22%3A%22lander-female_nsfw_signup%22%2C%22utmContent%22%3A%22viewer_fr_frites_female_straight_leads_wifi_mobile_french%22%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:11 GMT
server: Apache
last-modified: Thu, 05 Oct 2023 05:16:43 GMT
etag: "e0d-606f13acde1e4"
accept-ranges: bytes
content-length: 3597
content-type: text/css
X-Firefox-Spdy: h2
|
|
| landers.cam4.com/video/css/video.css | 99.192.248.164 | 200 OK | 558 B |
URL GET HTTP/2landers.cam4.com/video/css/video.css IP99.192.248.164:443
Requested byhttps://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup CertificateIssuerLet's Encrypt Subjectlanders.cam4.com Fingerprint58:A6:4E:49:D2:79:11:78:62:5D:8C:CA:27:0A:A4:AA:FD:AC:50:50 ValidityThu, 18 Apr 2024 07:24:31 GMT - Wed, 17 Jul 2024 07:24:30 GMT
File typeHTML document, ASCII text Hashf51ec611041cd84b64318182a056bd37 ff9afb1f33fc35e76f506f412cd3a4f80d157d12 084cbc1974065f43d82288ecd7814da0420470f06567edce7ead452a645d1d92
GET /video/css/video.css HTTP/1.1
Host: landers.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup
Cookie: PHPSESSID=jqn6rk2rc9171cbuvhaavh5p4a; cam4-AF="voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324"; cam4-UTM-campaigns=%7B%22utmCampaign%22%3A%22acquisition_mar-21-2024%22%2C%22utmSource%22%3A%22347%22%2C%22utmMedium%22%3A%22popunder%22%2C%22utmTerm%22%3A%22lander-female_nsfw_signup%22%2C%22utmContent%22%3A%22viewer_fr_frites_female_straight_leads_wifi_mobile_french%22%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:11 GMT
server: Apache
last-modified: Tue, 24 Oct 2023 11:42:00 GMT
etag: "22e-60874d3a826ba"
accept-ranges: bytes
content-length: 558
content-type: text/css
X-Firefox-Spdy: h2
|
|
| landers.cam4.com/assets/images/logo/440x122.png | 99.192.248.164 | 200 OK | 4.6 kB |
URL GET HTTP/2landers.cam4.com/assets/images/logo/440x122.png IP99.192.248.164:443
Requested byhttps://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup CertificateIssuerLet's Encrypt Subjectlanders.cam4.com Fingerprint58:A6:4E:49:D2:79:11:78:62:5D:8C:CA:27:0A:A4:AA:FD:AC:50:50 ValidityThu, 18 Apr 2024 07:24:31 GMT - Wed, 17 Jul 2024 07:24:30 GMT
File typePNG image data, 440 x 122, 8-bit/color RGBA, non-interlaced Hash35342d076a55da8840c4f980e95cf88f b065ffe23fcfdd8cde7db06c5328520090d77f33 298c4d07b0c82fb367d3ac3e3e09995ccc46f6521e906730fe3ce191f6549853
GET /assets/images/logo/440x122.png HTTP/1.1
Host: landers.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup
Cookie: PHPSESSID=jqn6rk2rc9171cbuvhaavh5p4a; cam4-AF="voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324"; cam4-UTM-campaigns=%7B%22utmCampaign%22%3A%22acquisition_mar-21-2024%22%2C%22utmSource%22%3A%22347%22%2C%22utmMedium%22%3A%22popunder%22%2C%22utmTerm%22%3A%22lander-female_nsfw_signup%22%2C%22utmContent%22%3A%22viewer_fr_frites_female_straight_leads_wifi_mobile_french%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:11 GMT
server: Apache
last-modified: Wed, 04 Oct 2023 22:35:02 GMT
etag: "1202-606eb9e467cef"
accept-ranges: bytes
content-length: 4610
content-type: image/png
X-Firefox-Spdy: h2
|
|
| www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css |  185.94.239.81 | 200 | 9.6 kB |
URL GET HTTP/1.1www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css IP185.94.239.81:443
Requested byhttps://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
File typeJavaScript source, ASCII text, with very long lines (21962) Hasha81526cdccbd341b0bb0bc9940a35d62 e922b2a1633b59d24b611b40feb7e83f307ad2d6 d8266f11df9b06a3a2ddc44d0059a8b062c6bb1d4484592aa7a1037d19cc6550
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Internal Revenue Service |
GET /remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css HTTP/1.1
Host: www.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landers.cam4.com/
Cookie: cam4-AF="voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324"; cam4-UTM-campaigns=%7B%22utmCampaign%22%3A%22acquisition_mar-21-2024%22%2C%22utmSource%22%3A%22347%22%2C%22utmMedium%22%3A%22popunder%22%2C%22utmTerm%22%3A%22lander-female_nsfw_signup%22%2C%22utmContent%22%3A%22viewer_fr_frites_female_straight_leads_wifi_mobile_french%22%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Fri, 26 Apr 2024 21:08:11 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: INGRESSCOOKIE=a85d46bd56abf2f4eb1949715e9175f2|d6a68dccd9919960ff135dee3820d14b; Path=/; HttpOnly
JSESSIONID=615FA61BE60A7E1C3862E016A521CBF9; Path=/; Secure; HttpOnly
cam4-AH=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Domain=cam4.com; Path=/; HttpOnly
cam4-PAY=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Domain=cam4.com; Path=/
cam4-AF-params=act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css; Max-Age=2592000; Expires=Sun, 26 May 2024 21:08:11 GMT; Domain=cam4.com; Path=/
cam4-AF-params=remoteAction=register; Max-Age=2592000; Expires=Sun, 26 May 2024 21:08:11 GMT; Domain=cam4.com; Path=/
cam4-AF-params=remoteAction=register; Max-Age=2592000; Expires=Sun, 26 May 2024 21:08:11 GMT; Domain=cam4.com; Path=/
cam4-AF-params=remoteAction=register; Max-Age=2592000; Expires=Sun, 26 May 2024 21:08:11 GMT; Domain=cam4.com; Path=/
Content-Encoding: gzip
|
|
| www.cam4.com/images/favicon_192x192.png | 185.94.239.81 | 200 | 8.0 kB |
URL GET HTTP/1.1www.cam4.com/images/favicon_192x192.png IP185.94.239.81:443
Requested byhttps://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash5bae50159117d9b136d1f5fa5fe6535e 361978b9edf4e9eaada77fc2618767ef0fefe2c0 04f23efc7857dbb7cf6d3dedffa83890888f3176bd3bd1093412b864f193bf74
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Internal Revenue Service |
GET /images/favicon_192x192.png HTTP/1.1
Host: www.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landers.cam4.com/
Cookie: cam4-AF="voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324"; cam4-UTM-campaigns=%7B%22utmCampaign%22%3A%22acquisition_mar-21-2024%22%2C%22utmSource%22%3A%22347%22%2C%22utmMedium%22%3A%22popunder%22%2C%22utmTerm%22%3A%22lander-female_nsfw_signup%22%2C%22utmContent%22%3A%22viewer_fr_frites_female_straight_leads_wifi_mobile_french%22%7D; INGRESSCOOKIE=a85d46bd56abf2f4eb1949715e9175f2|d6a68dccd9919960ff135dee3820d14b; JSESSIONID=615FA61BE60A7E1C3862E016A521CBF9; cam4-AF-params=remoteAction=register; _ga_Y9E01LQ1PZ=GS1.1.1714165691.1.0.1714165691.0.0.0; _ga=GA1.1.94216714.1714165691
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Fri, 26 Apr 2024 21:08:11 GMT
Content-Type: image/png
Content-Length: 8029
Connection: keep-alive
cache-control: max-age=432000
content-security-policy: frame-ancestors 'self' ;
accept-ranges: bytes
last-modified: Thu, 01 Jan 1970 00:00:01 GMT
|
|
| dumpster.cam4.com/v1/tracking.js | 185.94.239.83 | 200 OK | 16 kB |
URL GET HTTP/1.1dumpster.cam4.com/v1/tracking.js IP185.94.239.83:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
File typeJavaScript source, ASCII text, with very long lines (53875), with no line terminators Hash905f6f2a8057ad97624ff53b1267d9c3 365fc6b46fc1682019c98525110d69c898438042 813a5b2d128aad2342a85d4cc37627879c51f64313de82d1ca6390bd319dacb9
GET /v1/tracking.js HTTP/1.1
Host: dumpster.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Cookie: cam4-AF="voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324"; cam4-UTM-campaigns=%7B%22utmCampaign%22%3A%22acquisition_mar-21-2024%22%2C%22utmSource%22%3A%22347%22%2C%22utmMedium%22%3A%22popunder%22%2C%22utmTerm%22%3A%22lander-female_nsfw_signup%22%2C%22utmContent%22%3A%22viewer_fr_frites_female_straight_leads_wifi_mobile_french%22%7D; cam4-AF-params=remoteAction=register; _ga_Y9E01LQ1PZ=GS1.1.1714165691.1.0.1714165691.0.0.0; _ga=GA1.1.94216714.1714165691
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 21:08:11 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
set-cookie: smart-agents-ws-cookie=1714165691.673.12784.506855; Expires=Sun, 28-Apr-24 21:08:11 GMT; Max-Age=172800; Path=/; HttpOnly
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
nel: {"max_age":0}
cache-control: public, max-age=60
etag: W/"d273-Nl/GtG/BaCAZyYUlEQ1pyJhDgEI"
content-encoding: gzip
|
|
| cam4-static-test.xcdnpro.com/web/js/checkout_e6ec4d0a.js | 64.210.135.119 | 200 OK | 63 B |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/js/checkout_e6ec4d0a.js IP64.210.135.119:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeASCII text, with no line terminators Hashca079926a7f807133292c893d7494518 4a51eb5444729ea76a9e5aef1570c4de06ea555b e1d7cfc12f0a98c2ceacfe0989caf442e52691e3c45032bd2c4e5e6cc34e749b
GET /web/js/checkout_e6ec4d0a.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:11 GMT
content-type: application/javascript
content-length: 63
last-modified: Thu, 25 Jan 2024 12:24:16 GMT
etag: "20ea2715a-3f-60fc442069c00"
expires: Tue, 28 May 2024 01:37:46 GMT
cache-control: max-age=10572461
access-control-allow-origin: *
vary: Origin
access-control-allow-methods: GET,HEAD,OPTIONS
accept-ranges: bytes
x-cdn-diag: ams5-7846-3-15396-h-0-0---;7846-22-34652----0-0-0
X-Firefox-Spdy: h2
|
|
| www.cam4.com/images/favicon.png | 185.94.239.81 | 200 | 2.6 kB |
URL GET HTTP/1.1www.cam4.com/images/favicon.png IP185.94.239.81:443
Requested byhttps://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hash735f225bd9c640221609aad2f5dffaed 8eb8042cfe99060bd8c9b6cec6d427d24019ed64 d8a5cda1543985b9810f2d417201e3eb367f867f3522c7dbb64bced763260bfd
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Internal Revenue Service |
GET /images/favicon.png HTTP/1.1
Host: www.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landers.cam4.com/
Cookie: cam4-AF="voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324"; cam4-UTM-campaigns=%7B%22utmCampaign%22%3A%22acquisition_mar-21-2024%22%2C%22utmSource%22%3A%22347%22%2C%22utmMedium%22%3A%22popunder%22%2C%22utmTerm%22%3A%22lander-female_nsfw_signup%22%2C%22utmContent%22%3A%22viewer_fr_frites_female_straight_leads_wifi_mobile_french%22%7D; INGRESSCOOKIE=a85d46bd56abf2f4eb1949715e9175f2|d6a68dccd9919960ff135dee3820d14b; JSESSIONID=615FA61BE60A7E1C3862E016A521CBF9; cam4-AF-params=remoteAction=register; _ga_Y9E01LQ1PZ=GS1.1.1714165691.1.0.1714165691.0.0.0; _ga=GA1.1.94216714.1714165691
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Fri, 26 Apr 2024 21:08:11 GMT
Content-Type: image/png
Content-Length: 2589
Connection: keep-alive
cache-control: max-age=432000
content-security-policy: frame-ancestors 'self' ;
accept-ranges: bytes
last-modified: Thu, 01 Jan 1970 00:00:01 GMT
|
|
| landers.cam4.com/video/css/form.css | 99.192.248.164 | 200 OK | 3.8 kB |
URL GET HTTP/2landers.cam4.com/video/css/form.css IP99.192.248.164:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerLet's Encrypt Subjectlanders.cam4.com Fingerprint58:A6:4E:49:D2:79:11:78:62:5D:8C:CA:27:0A:A4:AA:FD:AC:50:50 ValidityThu, 18 Apr 2024 07:24:31 GMT - Wed, 17 Jul 2024 07:24:30 GMT
File typeASCII text, with very long lines (589) Hash7357b28b8103ca99020c1f27e5c84088 6f4daf201c5db6f903db8ccf1ce9fdb78c8735c2 308fcc950dd4c48dfd3c5efafbd3624091da6e4f6e207cda998542d2239d2d4b
GET /video/css/form.css HTTP/1.1
Host: landers.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Cookie: PHPSESSID=jqn6rk2rc9171cbuvhaavh5p4a; cam4-AF="voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324"; cam4-UTM-campaigns=%7B%22utmCampaign%22%3A%22acquisition_mar-21-2024%22%2C%22utmSource%22%3A%22347%22%2C%22utmMedium%22%3A%22popunder%22%2C%22utmTerm%22%3A%22lander-female_nsfw_signup%22%2C%22utmContent%22%3A%22viewer_fr_frites_female_straight_leads_wifi_mobile_french%22%7D; cam4-AF-params=remoteAction=register; _ga_Y9E01LQ1PZ=GS1.1.1714165691.1.0.1714165691.0.0.0; _ga=GA1.1.94216714.1714165691
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:11 GMT
server: Apache
last-modified: Thu, 05 Oct 2023 05:28:13 GMT
etag: "ed0-606f163e4d9d3"
accept-ranges: bytes
content-length: 3792
content-type: text/css
X-Firefox-Spdy: h2
|
|
| landers.cam4.com/video/videos/straight/selene1975-2.mp4 | 99.192.248.164 | | 38 kB |
URL GET landers.cam4.com/video/videos/straight/selene1975-2.mp4 IP99.192.248.164:0
Requested byhttps://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup CertificateIssuerLet's Encrypt Subjectlanders.cam4.com Fingerprint58:A6:4E:49:D2:79:11:78:62:5D:8C:CA:27:0A:A4:AA:FD:AC:50:50 ValidityThu, 18 Apr 2024 07:24:31 GMT - Wed, 17 Jul 2024 07:24:30 GMT
Hashb61626bd06980062bee0a2048968e82e 0975dbdd91e9b203889073d5aa051c80e2801e3a 2d884287e14ab0aeebc1210bcce1346a082734ab40dafad6ca3722fdf75e3c0b
GET /video/videos/straight/selene1975-2.mp4 HTTP/1.1
Host: landers.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=3047424-
DNT: 1
Connection: keep-alive
Referer: https://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup
Cookie: PHPSESSID=jqn6rk2rc9171cbuvhaavh5p4a; cam4-AF="voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324"; cam4-UTM-campaigns=%7B%22utmCampaign%22%3A%22acquisition_mar-21-2024%22%2C%22utmSource%22%3A%22347%22%2C%22utmMedium%22%3A%22popunder%22%2C%22utmTerm%22%3A%22lander-female_nsfw_signup%22%2C%22utmContent%22%3A%22viewer_fr_frites_female_straight_leads_wifi_mobile_french%22%7D; cam4-AF-params=remoteAction=register; _ga_Y9E01LQ1PZ=GS1.1.1714165691.1.0.1714165691.0.0.0; _ga=GA1.1.94216714.1714165691
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
date: Fri, 26 Apr 2024 21:08:11 GMT
server: Apache
last-modified: Tue, 31 May 2022 18:17:30 GMT
etag: "2f127f-5e052c92d077a"
accept-ranges: bytes
content-length: 37503
content-range: bytes 3047424-3084926/3084927
content-type: video/mp4
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/images/new_design/ajax-loader_sml.gif | 64.210.135.119 | 200 OK | 2.2 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/images/new_design/ajax-loader_sml.gif IP64.210.135.119:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeGIF image data, version 89a, 56 x 21 Hashd11eb3c4443b906c93dc94cf294782d1 90882e0ce9a6984b13f3cea272a71274ac7f3d52 77f0207894fe999f9ef04649f1a56d1f4d5771d51fc57f5b6b2db6ba556526af
GET /web/images/new_design/ajax-loader_sml.gif HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:12 GMT
content-type: image/gif
content-length: 2161
last-modified: Tue, 30 Jan 2024 20:50:50 GMT
etag: "20e719653-871-6102feadb1e80"
expires: Sat, 01 Jun 2024 13:01:26 GMT
cache-control: max-age=10561941
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
vary: Origin
accept-ranges: bytes
x-cdn-diag: ams5-6139-3-18198-h-0-0---;7846-24-34652----0-0-1
X-Firefox-Spdy: h2
|
|
| dumpster.cam4.com/v2/snpl_v2.js | 185.94.239.83 | 200 OK | 27 kB |
URL GET HTTP/1.1dumpster.cam4.com/v2/snpl_v2.js IP185.94.239.83:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
File typeJavaScript source, ASCII text, with very long lines (65378) Hash0d34caadb7711e9c0e69ae2c64ffc4d7 75d6164796d256d364ff222839a4d5e75c3191b3 f027b512cb6cd71f46b35e6b7e08e2e07bb1ef3d3921e948b7c9161bbb5bcc97
GET /v2/snpl_v2.js HTTP/1.1
Host: dumpster.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Cookie: cam4-AF="voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324"; cam4-UTM-campaigns=%7B%22utmCampaign%22%3A%22acquisition_mar-21-2024%22%2C%22utmSource%22%3A%22347%22%2C%22utmMedium%22%3A%22popunder%22%2C%22utmTerm%22%3A%22lander-female_nsfw_signup%22%2C%22utmContent%22%3A%22viewer_fr_frites_female_straight_leads_wifi_mobile_french%22%7D; cam4-AF-params=remoteAction=register; _ga_Y9E01LQ1PZ=GS1.1.1714165691.1.0.1714165691.0.0.0; _ga=GA1.1.94216714.1714165691; smart-agents-ws-cookie=1714165691.673.12784.506855
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 21:08:12 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
cache-control: public, max-age=864000
etag: W/"15132-ddYWR5bSVtNk/yIoOaTV51wxkbM"
content-encoding: gzip
|
|
| cam4-static-test.xcdnpro.com/web/images/loader.gif | 64.210.135.119 | 200 OK | 4.7 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/images/loader.gif IP64.210.135.119:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeGIF image data, version 89a, 25 x 25 Hasha2a03d86d45eaf30e24b3b0eb2a509f3 147f2e46383896ed097d28dec572e24aff074525 54ebdff8b3030f5b870ded09d7789bc798b11ab64bb743ac895d66b55b24bfa5
GET /web/images/loader.gif HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:12 GMT
content-type: image/gif
content-length: 4716
last-modified: Thu, 25 Jan 2024 12:20:22 GMT
etag: "20f3e119d-126c-60fc434140d80"
expires: Thu, 30 May 2024 01:00:13 GMT
cache-control: max-age=10759726
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
vary: Origin
accept-ranges: bytes
x-cdn-diag: ams5-6141-1-37116-h-0-0---;7846-24-34652----0-0-1
X-Firefox-Spdy: h2
|
|
| www.cam4.com/rest/v1.0/options/countries?full=true | 185.94.239.81 | 200 | 2.9 kB |
URL GET HTTP/1.1www.cam4.com/rest/v1.0/options/countries?full=true IP185.94.239.81:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hash2b6586f99e5b6b0228734b04a8da30c4 8c759da64cf096269f9f49b98f53720424ca72b1 a85d8b5bd1f02c1692907d9c7359128ecb9b23b3fcde799d3e58eb7d0081c8de
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Internal Revenue Service |
GET /rest/v1.0/options/countries?full=true HTTP/1.1
Host: www.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css
Cookie: cam4-AF="voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324"; cam4-UTM-campaigns=%7B%22utmCampaign%22%3A%22acquisition_mar-21-2024%22%2C%22utmSource%22%3A%22347%22%2C%22utmMedium%22%3A%22popunder%22%2C%22utmTerm%22%3A%22lander-female_nsfw_signup%22%2C%22utmContent%22%3A%22viewer_fr_frites_female_straight_leads_wifi_mobile_french%22%7D; INGRESSCOOKIE=a85d46bd56abf2f4eb1949715e9175f2|d6a68dccd9919960ff135dee3820d14b; JSESSIONID=615FA61BE60A7E1C3862E016A521CBF9; cam4-AF-params=remoteAction=register; _ga_Y9E01LQ1PZ=GS1.1.1714165691.1.0.1714165691.0.0.0; _ga=GA1.1.94216714.1714165691
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Fri, 26 Apr 2024 21:08:12 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
content-security-policy: frame-ancestors 'self' ;
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: origin, content-type, accept, authorization, x-b3-traceid, x-b3-spanid, x-b3-parentspanid, x-b3-sampled, x-b3-flags, x-zipkin-extension, x-process-id, x-span-name, x-span-export, Content-Disposition, Access-Hash, Username, Last-Cash-Out-Authorization, X-Redirect-To
access-control-allow-methods: GET, POST, PATCH , DELETE, PUT, OPTIONS, HEAD
access-control-expose-headers: totalCount
cache-control: max-age=86400
Content-Encoding: gzip
|
|
| cam4-static-test.xcdnpro.com/web/images/ajax-loader.gif | 64.210.135.119 | 200 OK | 1.7 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/images/ajax-loader.gif IP64.210.135.119:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeGIF image data, version 89a, 16 x 16 Hashc56adf6af9aee1bb3837c6f6a06ab817 fd5ab5cef5b992f5445bef2b9ae430593480ff9f 0ce063266ba4833d228b766bf8ba6e730b611ae1006c299a6efb44a5cfa9f34d
GET /web/images/ajax-loader.gif HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cam4-static-test.xcdnpro.com/web/js/jquery-mobile/jquery.mobile-1.2.0.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:12 GMT
content-type: image/gif
content-length: 1720
last-modified: Fri, 19 Jan 2024 11:34:18 GMT
etag: "20db96c84-6b8-60f4adc488280"
expires: Thu, 23 May 2024 23:47:29 GMT
cache-control: max-age=10798931
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
vary: Origin
accept-ranges: bytes
x-cdn-diag: ams5-6140-3-36508-h-0-0---;7846-24-34652----0-0-1
X-Firefox-Spdy: h2
|
|
| dumpster.cam4.com/v2/chat/config.json | 185.94.239.83 | 200 OK | 96 B |
URL GET HTTP/1.1dumpster.cam4.com/v2/chat/config.json IP185.94.239.83:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hashf880f4b2c5db062eda95bf308932d121 615841bf67bb2d9690a1efb3051fbf78a55ab7f7 57f8b9891a622f92b0eccc979c4bda741ea1c442feb893b7d2f729c16dc58630
GET /v2/chat/config.json HTTP/1.1
Host: dumpster.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.cam4.com/
Origin: https://www.cam4.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 21:08:12 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 96
Connection: keep-alive
set-cookie: smart-agents-ws-cookie=1714165692.165.3111.508543; Expires=Sun, 28-Apr-24 21:08:12 GMT; Max-Age=172800; Path=/; HttpOnly
access-control-allow-origin: https://www.cam4.com
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
cache-control: public, max-age=60
etag: W/"60-YVhBv2e7LZaQoe+zBR+/eKVat/c"
|
|
| dumpster.cam4.com/me | 185.94.239.83 | 200 OK | 150 B |
IP185.94.239.83:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hash939fe5924e865a672f4c6dd2c5db2b87 b1137d1b59feed7962b4bda5f7fb7580ae1cf545 9389aa343989bf8fa405b5df348d8e0ea89048831f2abd61a02b7ba71db94974
GET /me HTTP/1.1
Host: dumpster.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.cam4.com/
Origin: https://www.cam4.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 21:08:12 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 150
Connection: keep-alive
set-cookie: smart-agents-ws-cookie=1714165692.168.3136.481917; Expires=Sun, 28-Apr-24 21:08:12 GMT; Max-Age=172800; Path=/; HttpOnly
access-control-allow-origin: https://www.cam4.com
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
etag: W/"96-sRN9G1n+7XlitL2l9/t1gK4c9UU"
|
|
| www.cam4.com/api/directoryCams?directoryJson=true&online=true&url=true&recommendationsForUser=guest&recommendationsRoomName=&resultsPerPage=16&gender=&recommendationEnginePayload= | 185.94.239.81 | 200 | 4.4 kB |
URL GET HTTP/1.1www.cam4.com/api/directoryCams?directoryJson=true&online=true&url=true&recommendationsForUser=guest&recommendationsRoomName=&resultsPerPage=16&gender=&recommendationEnginePayload= IP185.94.239.81:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hash0e4f3929a3de02a1e03af96b6d35ef45 29c2e51552a7aa5d73ad2ba27c19d15353b30cd4 3f2d9720ce2f9b53390a89875db9af6a6a4c7c399c198fd45a490ca7f89ae4cf
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Internal Revenue Service |
GET /api/directoryCams?directoryJson=true&online=true&url=true&recommendationsForUser=guest&recommendationsRoomName=&resultsPerPage=16&gender=&recommendationEnginePayload= HTTP/1.1
Host: www.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css
Cookie: cam4-AF="voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324"; cam4-UTM-campaigns=%7B%22utmCampaign%22%3A%22acquisition_mar-21-2024%22%2C%22utmSource%22%3A%22347%22%2C%22utmMedium%22%3A%22popunder%22%2C%22utmTerm%22%3A%22lander-female_nsfw_signup%22%2C%22utmContent%22%3A%22viewer_fr_frites_female_straight_leads_wifi_mobile_french%22%7D; INGRESSCOOKIE=a85d46bd56abf2f4eb1949715e9175f2|d6a68dccd9919960ff135dee3820d14b; JSESSIONID=615FA61BE60A7E1C3862E016A521CBF9; cam4-AF-params=remoteAction=register; _ga_Y9E01LQ1PZ=GS1.1.1714165691.1.0.1714165691.0.0.0; _ga=GA1.1.94216714.1714165691
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Fri, 26 Apr 2024 21:08:12 GMT
Content-Type: application/json;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS, HEAD
access-control-allow-headers: Origin, Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Username, Access-Hash
content-security-policy: frame-ancestors 'self' ;
Content-Encoding: gzip
|
|
| welcome.cam4.com/graph/? | 185.94.239.81 | 200 OK | 0 B |
IP185.94.239.81:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /graph/? HTTP/1.1
Host: welcome.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.cam4.com/
Origin: https://www.cam4.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx
Date: Fri, 26 Apr 2024 21:08:12 GMT
Content-Length: 0
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: https://www.cam4.com
Vary: Origin, Access-Control-Request-Headers
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Headers: content-type
|
|
| dumpster.cam4.com/v2/snpl-web-vitals.js | 185.94.239.83 | 200 OK | 2.0 kB |
URL GET HTTP/1.1dumpster.cam4.com/v2/snpl-web-vitals.js IP185.94.239.83:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
File typeJavaScript source, ASCII text, with very long lines (4457) Hash896fe5a1a506ef3c5ab75c0ff8df40b4 37f66f4dd3afc021df5c1032ed6dbc53a9df6f1e ab059235d2556a3dee0d594a37effb842ee02ab4fcce3925f596e7eccc188e6b
GET /v2/snpl-web-vitals.js HTTP/1.1
Host: dumpster.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Cookie: cam4-AF="voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324"; cam4-UTM-campaigns=%7B%22utmCampaign%22%3A%22acquisition_mar-21-2024%22%2C%22utmSource%22%3A%22347%22%2C%22utmMedium%22%3A%22popunder%22%2C%22utmTerm%22%3A%22lander-female_nsfw_signup%22%2C%22utmContent%22%3A%22viewer_fr_frites_female_straight_leads_wifi_mobile_french%22%7D; cam4-AF-params=remoteAction=register; _ga_Y9E01LQ1PZ=GS1.1.1714165691.1.0.1714165691.0.0.0; _ga=GA1.1.94216714.1714165691; smart-agents-ws-cookie=1714165691.673.12784.506855; _sp_ses.dd07=*; _sp_id.dd07=c50cc1e0-007b-40fd-a745-062720a1a2c1.1714165692.1.1714165692..6de08a1c-0630-4747-99cd-157f47d2cb62....0; cam4rt8=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 21:08:12 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
cache-control: public, max-age=86400
etag: W/"128c-N/ZvTdOvwCHfXBAy7W28U6nfbx4"
content-encoding: gzip
|
|
| dumpster.cam4.com/v2/chat/config.json | 185.94.239.83 | 200 OK | 96 B |
URL GET HTTP/1.1dumpster.cam4.com/v2/chat/config.json IP185.94.239.83:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hashf880f4b2c5db062eda95bf308932d121 615841bf67bb2d9690a1efb3051fbf78a55ab7f7 57f8b9891a622f92b0eccc979c4bda741ea1c442feb893b7d2f729c16dc58630
GET /v2/chat/config.json HTTP/1.1
Host: dumpster.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.cam4.com/
Origin: https://www.cam4.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 21:08:12 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 96
Connection: keep-alive
set-cookie: smart-agents-ws-cookie=1714165692.271.12791.780857; Expires=Sun, 28-Apr-24 21:08:12 GMT; Max-Age=172800; Path=/; HttpOnly
access-control-allow-origin: https://www.cam4.com
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
cache-control: public, max-age=60
etag: W/"60-YVhBv2e7LZaQoe+zBR+/eKVat/c"
|
|
| welcome.cam4.com/graph/? | 185.94.239.81 | 200 OK | 626 B |
IP185.94.239.81:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hash9be8fce9c7571fcbd30404687b041ff4 afa1c03d51b06718d7d1e634c92d639bb850bdde d12017fe5ac115bf4f7dc6a848f536c6a1cd92013fd45b47f7fd5971826f8ce6
POST /graph/? HTTP/1.1
Host: welcome.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.cam4.com/
content-type: application/json
Content-Length: 136
Origin: https://www.cam4.com
DNT: 1
Connection: keep-alive
Cookie: cam4-AF="voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324"; cam4-UTM-campaigns=%7B%22utmCampaign%22%3A%22acquisition_mar-21-2024%22%2C%22utmSource%22%3A%22347%22%2C%22utmMedium%22%3A%22popunder%22%2C%22utmTerm%22%3A%22lander-female_nsfw_signup%22%2C%22utmContent%22%3A%22viewer_fr_frites_female_straight_leads_wifi_mobile_french%22%7D; cam4-AF-params=remoteAction=register; _ga_Y9E01LQ1PZ=GS1.1.1714165691.1.0.1714165691.0.0.0; _ga=GA1.1.94216714.1714165691
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 21:08:12 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: https://www.cam4.com
Vary: Origin
Access-Control-Allow-Credentials: true
NEL: {"report_to":"default","max_age":31536000,"include_subdomains":true,"failure_fraction":0.5,"success_fraction":0.001}
Report-To: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://collector.net-logger.com/report"}]}
ETag: W/"980-r6HAPVGwZxjX0eY0yS1jm7hQvd4"
Content-Encoding: gzip
|
|
| dumpster.cam4.com/ws/ | 185.94.239.83 | | 0 B |
IP185.94.239.83:0
CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ws/ HTTP/1.1
Host: dumpster.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.cam4.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Ii2ACQhi26FBq/k2FXDl7g==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: cam4-AF="voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324"; cam4-UTM-campaigns=%7B%22utmCampaign%22%3A%22acquisition_mar-21-2024%22%2C%22utmSource%22%3A%22347%22%2C%22utmMedium%22%3A%22popunder%22%2C%22utmTerm%22%3A%22lander-female_nsfw_signup%22%2C%22utmContent%22%3A%22viewer_fr_frites_female_straight_leads_wifi_mobile_french%22%7D; cam4-AF-params=remoteAction=register; _ga_Y9E01LQ1PZ=GS1.1.1714165691.1.0.1714165691.0.0.0; _ga=GA1.1.94216714.1714165691; smart-agents-ws-cookie=1714165691.673.12784.506855; _sp_ses.dd07=*; _sp_id.dd07=c50cc1e0-007b-40fd-a745-062720a1a2c1.1714165692.1.1714165692..6de08a1c-0630-4747-99cd-157f47d2cb62....0; cam4rt8=true
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Fri, 26 Apr 2024 21:08:12 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: Vvh9JwxJCksBKU7YGBDyPwD7s7s=
set-cookie: SESSIONIDv2=786c486a9bbe3419bbfeb137e3a4ff3526e1ca8e; Domain=.cam4.com; Path=/; SameSite=Lax; Secure; HttpOnly
|
|
| landers.cam4.com/video/videos/straight/selene1975-2.mp4 | 99.192.248.164 | | 3.1 MB |
URL GET landers.cam4.com/video/videos/straight/selene1975-2.mp4 IP99.192.248.164:0
Requested byhttps://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup CertificateIssuerLet's Encrypt Subjectlanders.cam4.com Fingerprint58:A6:4E:49:D2:79:11:78:62:5D:8C:CA:27:0A:A4:AA:FD:AC:50:50 ValidityThu, 18 Apr 2024 07:24:31 GMT - Wed, 17 Jul 2024 07:24:30 GMT
Size3.1 MB (3052159 bytes) Hashb9bfb559bc71a92041d1bec33e69e4a0 429e090714c73e1852c1718a270be680ea029139 b3ab86e28ca8dedd422d5ca1c6e1b383e78966d9cd979d97499cf0c4ef786e85
GET /video/videos/straight/selene1975-2.mp4 HTTP/1.1
Host: landers.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=32768-
DNT: 1
Connection: keep-alive
Referer: https://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup
Cookie: PHPSESSID=jqn6rk2rc9171cbuvhaavh5p4a; cam4-AF="voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324"; cam4-UTM-campaigns=%7B%22utmCampaign%22%3A%22acquisition_mar-21-2024%22%2C%22utmSource%22%3A%22347%22%2C%22utmMedium%22%3A%22popunder%22%2C%22utmTerm%22%3A%22lander-female_nsfw_signup%22%2C%22utmContent%22%3A%22viewer_fr_frites_female_straight_leads_wifi_mobile_french%22%7D; cam4-AF-params=remoteAction=register; _ga_Y9E01LQ1PZ=GS1.1.1714165691.1.0.1714165691.0.0.0; _ga=GA1.1.94216714.1714165691
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
date: Fri, 26 Apr 2024 21:08:12 GMT
server: Apache
last-modified: Tue, 31 May 2022 18:17:30 GMT
etag: "2f127f-5e052c92d077a"
accept-ranges: bytes
content-length: 3052159
content-range: bytes 32768-3084926/3084927
content-type: video/mp4
X-Firefox-Spdy: h2
|
|
| dumpster.cam4.com/v2/fp1.js | 185.94.239.83 | 200 OK | 14 kB |
URL GET HTTP/1.1dumpster.cam4.com/v2/fp1.js IP185.94.239.83:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (33906) Hash6c8689234a1c0bbbd2711ba685157ecd a71b00334f871425ba408adc5bee9f859aa0329c 5a4ce9720e3a1bceae6e699ccba89f9f002ece6b563758092d144cdf4d0928f4
GET /v2/fp1.js HTTP/1.1
Host: dumpster.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Cookie: cam4-AF="voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324"; cam4-UTM-campaigns=%7B%22utmCampaign%22%3A%22acquisition_mar-21-2024%22%2C%22utmSource%22%3A%22347%22%2C%22utmMedium%22%3A%22popunder%22%2C%22utmTerm%22%3A%22lander-female_nsfw_signup%22%2C%22utmContent%22%3A%22viewer_fr_frites_female_straight_leads_wifi_mobile_french%22%7D; cam4-AF-params=remoteAction=register; _ga_Y9E01LQ1PZ=GS1.1.1714165691.1.0.1714165691.0.0.0; _ga=GA1.1.94216714.1714165691; smart-agents-ws-cookie=1714165691.673.12784.506855; _sp_ses.dd07=*; _sp_id.dd07=c50cc1e0-007b-40fd-a745-062720a1a2c1.1714165692.1.1714165692..6de08a1c-0630-4747-99cd-157f47d2cb62....0; cam4rt8=true; ds_recsys_alloc_DS0002b=true; SESSIONIDv2=786c486a9bbe3419bbfeb137e3a4ff3526e1ca8e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 21:08:22 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
cache-control: public, max-age=864000
etag: W/"85bf-pxsAM0+HFCW6QIrcW+6fhZqgMpw"
content-encoding: gzip
|
|
| collector.scarletwood.com/com.snowplowanalytics.snowplow/tp2 | 3.224.220.142 | 200 OK | 0 B |
URL OPTIONS HTTP/2collector.scarletwood.com/com.snowplowanalytics.snowplow/tp2 IP3.224.220.142:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerAmazon Subjectcollector.scarletwood.com Fingerprint91:D1:88:82:A6:F0:8E:05:1A:00:10:BE:2B:DD:16:D2:07:A3:22:67 ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: collector.scarletwood.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.cam4.com/
Origin: https://www.cam4.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:22 GMT
content-length: 0
access-control-allow-origin: https://www.cam4.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 86400
server: akka-http/10.2.7
X-Firefox-Spdy: h2
|
|
| collector.scarletwood.com/com.snowplowanalytics.snowplow/tp2 | 3.224.220.142 | 200 OK | 2 B |
URL OPTIONS HTTP/2collector.scarletwood.com/com.snowplowanalytics.snowplow/tp2 IP3.224.220.142:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerAmazon Subjectcollector.scarletwood.com Fingerprint91:D1:88:82:A6:F0:8E:05:1A:00:10:BE:2B:DD:16:D2:07:A3:22:67 ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: collector.scarletwood.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 2412
Origin: https://www.cam4.com
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:22 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
set-cookie: sp=c3c3beda-582d-432e-94f2-f7a9e88ea688; Expires=Sat, 26 Apr 2025 21:08:22 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.cam4.com
access-control-allow-credentials: true
server: akka-http/10.2.7
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/js/jquery-mobile/jquery-1.8.2.min.js | 64.210.135.119 | 200 OK | 93 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/js/jquery-mobile/jquery-1.8.2.min.js IP64.210.135.119:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/js/jquery-mobile/jquery-1.8.2.min.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:11 GMT
content-type: application/javascript
vary: Origin
last-modified: Tue, 30 Jan 2024 16:08:36 GMT
etag: W/"20f0e9b5e-16cfb-6102bf982c900"
expires: Mon, 03 Jun 2024 16:26:59 GMT
cache-control: max-age=10794091
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6140-1-36344-h-0-0---;7846-22-34652----0-0-1
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.1.1/css/bootstrap.min.css |  104.18.11.207 | 200 OK | 100 kB |
URL GET HTTP/2maxcdn.bootstrapcdn.com/bootstrap/3.1.1/css/bootstrap.min.css IP104.18.11.207:443
Requested byhttps://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeASCII text, with very long lines (65366) Hash8a7442ca6bedd62cec4881040b9a9e83 e2d2b846e9ea72a1985458a3748aab4e01a8fb3a e9503448692b738dd260fbd7f7cabf2e11f09b600fa97e6eb3a56eba5b1a7e9b
GET /bootstrap/3.1.1/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landers.cam4.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:11 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"8a7442ca6bedd62cec4881040b9a9e83"
last-modified: Mon, 25 Jan 2021 22:03:57 GMT
cdn-cachedat: 08/25/2022 04:46:14
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 860
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 54f6bfd9ba83debd3c2b023913b6f901
cdn-cache: HIT
cf-cache-status: HIT
age: 13270657
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a98bf119d2712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/js/cam4-vidyo-connector_6c3a4f55.js | 64.210.135.119 | 200 OK | 3.9 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/js/cam4-vidyo-connector_6c3a4f55.js IP64.210.135.119:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJavaScript source, ASCII text, with very long lines (4067), with no line terminators Hash1fbde34b5140e7da6462ccd1045ba06d ccdbb436f9304bf402ef65fb0135ef57cf01109a bcc48c0bee144a0167cece6c2895fa22b637e7ee78b24e0b61a3890679db1c1d
GET /web/js/cam4-vidyo-connector_6c3a4f55.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:11 GMT
content-type: application/javascript
vary: Origin
last-modified: Wed, 10 Apr 2024 14:55:00 GMT
etag: W/"218b18ea2-f52-615bf39079900"
expires: Tue, 13 Aug 2024 14:29:39 GMT
cache-control: max-age=10777321
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6139-3-18201-h-0-0---;7846-23-34652----0-0-1
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/js/jquery-mobile/jquery.mobile-1.2.0.min.js | 64.210.135.119 | 200 OK | 113 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/js/jquery-mobile/jquery.mobile-1.2.0.min.js IP64.210.135.119:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJavaScript source, ASCII text, with very long lines (65377) Size113 kB (113181 bytes) Hashddabc6e77acfae444e9169c8bbae550d 0aadbf40969629561f3f9a7297f58a32d240d1f4 738a09f335c53353116cbde58185f0e59167278374aa1f49d77f53cb7956820b
GET /web/js/jquery-mobile/jquery.mobile-1.2.0.min.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:11 GMT
content-type: application/javascript
vary: Origin
last-modified: Tue, 12 Dec 2023 14:26:12 GMT
etag: W/"207010982-1ba1d-60c50d5136900"
expires: Fri, 12 Apr 2024 14:31:14 GMT
cache-control: max-age=10501546
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6140-1-36331-h-0-0---;7846-22-34652----0-0-2
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/css/VidyoClient.css | 64.210.135.119 | 200 OK | 8.6 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/css/VidyoClient.css IP64.210.135.119:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeASCII text, with very long lines (8656), with no line terminators Hash54ac943756c592c7c5bb492335cbdb93 ddabe48f54aa6ecacaa5fb6a801271584743c2ff 744949b6c1913be4c29a42700a05732b0809eb58809e5c2bb6ae221b82781a54
GET /web/css/VidyoClient.css HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:11 GMT
content-type: text/css
vary: Origin
last-modified: Tue, 30 Jan 2024 21:02:20 GMT
etag: W/"20f8d2db5-218e-6103013fbaf00"
expires: Thu, 30 May 2024 05:12:43 GMT
cache-control: max-age=10394654
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-7619-2-20615-h-0-0---;7846-23-34652----0-0-1
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/js/jquery-mobile/jquery.mobile-1.2.0.min.css | 64.210.135.119 | 200 OK | 73 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/js/jquery-mobile/jquery.mobile-1.2.0.min.css IP64.210.135.119:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeASCII text, with very long lines (65378) Hash00dc711bd524c5bf796b3bb24ce5b43c 8ac4dbb14a86fe21784e9d25b1f8f987fe1ae510 738dd9d2c66db07508d0aab9736e88c4c0a01760c2b618e64e8a65c7b028a0b7
GET /web/js/jquery-mobile/jquery.mobile-1.2.0.min.css HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:11 GMT
content-type: text/css
vary: Origin
last-modified: Fri, 12 Apr 2024 14:02:14 GMT
etag: W/"219343489-11cc7-615e6b8010580"
expires: Tue, 13 Aug 2024 04:01:31 GMT
cache-control: max-age=10392788
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6249-1-37907-h-0-0---;7846-22-34652----0-0-0
X-Firefox-Spdy: h2
|
|
| landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup | 99.192.248.164 | 200 OK | 5.7 kB |
URL User Request GET HTTP/2landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup IP99.192.248.164:443
CertificateIssuerLet's Encrypt Subjectlanders.cam4.com Fingerprint58:A6:4E:49:D2:79:11:78:62:5D:8C:CA:27:0A:A4:AA:FD:AC:50:50 ValidityThu, 18 Apr 2024 07:24:31 GMT - Wed, 17 Jul 2024 07:24:30 GMT
File typeJavaScript source, ASCII text, with very long lines (6108), with no line terminators Hashf23e068fbad29869212d332e4ddec063 d0234f7c9331f5c7a502c72911acd074fe9c23fc 6827b3f8427f265dab03d1ab538e295909f458e8b7b429734069ba3dc2f8aacf
GET /video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup HTTP/1.1
Host: landers.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:10 GMT
server: Apache
x-powered-by: PHP/7.4.15
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=jqn6rk2rc9171cbuvhaavh5p4a; path=/
cam4-AF="voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324"; expires=Sun, 26-May-2024 21:08:10 GMT; Max-Age=2592000; path=/; domain=.cam4.com
cam4-UTM-campaigns=%7B%22utmCampaign%22%3A%22acquisition_mar-21-2024%22%2C%22utmSource%22%3A%22347%22%2C%22utmMedium%22%3A%22popunder%22%2C%22utmTerm%22%3A%22lander-female_nsfw_signup%22%2C%22utmContent%22%3A%22viewer_fr_frites_female_straight_leads_wifi_mobile_french%22%7D; expires=Sun, 26-May-2024 21:08:10 GMT; Max-Age=2592000; path=/; domain=.cam4.com
content-type: text/html; charset=UTF-8
X-Firefox-Spdy: h2
|
|
| dumpster.cam4.com/ws/ | 185.94.239.83 | 101 Switching Protocols | 0 B |
IP185.94.239.83:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ws/ HTTP/1.1
Host: dumpster.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.cam4.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Ii2ACQhi26FBq/k2FXDl7g==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: cam4-AF="voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324"; cam4-UTM-campaigns=%7B%22utmCampaign%22%3A%22acquisition_mar-21-2024%22%2C%22utmSource%22%3A%22347%22%2C%22utmMedium%22%3A%22popunder%22%2C%22utmTerm%22%3A%22lander-female_nsfw_signup%22%2C%22utmContent%22%3A%22viewer_fr_frites_female_straight_leads_wifi_mobile_french%22%7D; cam4-AF-params=remoteAction=register; _ga_Y9E01LQ1PZ=GS1.1.1714165691.1.0.1714165691.0.0.0; _ga=GA1.1.94216714.1714165691; smart-agents-ws-cookie=1714165691.673.12784.506855; _sp_ses.dd07=*; _sp_id.dd07=c50cc1e0-007b-40fd-a745-062720a1a2c1.1714165692.1.1714165692..6de08a1c-0630-4747-99cd-157f47d2cb62....0; cam4rt8=true
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Fri, 26 Apr 2024 21:08:12 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: Vvh9JwxJCksBKU7YGBDyPwD7s7s=
set-cookie: SESSIONIDv2=786c486a9bbe3419bbfeb137e3a4ff3526e1ca8e; Domain=.cam4.com; Path=/; SameSite=Lax; Secure; HttpOnly
|
|
| landers.cam4.com/video/thumbnails/selene1975-2.jpg | 99.192.248.164 | 200 OK | 2.6 kB |
URL GET HTTP/2landers.cam4.com/video/thumbnails/selene1975-2.jpg IP99.192.248.164:443
Requested byhttps://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup CertificateIssuerLet's Encrypt Subjectlanders.cam4.com Fingerprint58:A6:4E:49:D2:79:11:78:62:5D:8C:CA:27:0A:A4:AA:FD:AC:50:50 ValidityThu, 18 Apr 2024 07:24:31 GMT - Wed, 17 Jul 2024 07:24:30 GMT
File typeHTML document, ASCII text, with very long lines (2757), with no line terminators Hash3387aca8c107a4a2c0db07299f7ac6f3 308269dd5d56403020a923bd47f9be79245e447e 46e4e6f9e2bb584a6bcdcac18260618fe1341f22e6e7b8fb88ad19f0b34fcfe5
GET /video/thumbnails/selene1975-2.jpg HTTP/1.1
Host: landers.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup
Cookie: PHPSESSID=jqn6rk2rc9171cbuvhaavh5p4a; cam4-AF="voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324"; cam4-UTM-campaigns=%7B%22utmCampaign%22%3A%22acquisition_mar-21-2024%22%2C%22utmSource%22%3A%22347%22%2C%22utmMedium%22%3A%22popunder%22%2C%22utmTerm%22%3A%22lander-female_nsfw_signup%22%2C%22utmContent%22%3A%22viewer_fr_frites_female_straight_leads_wifi_mobile_french%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:11 GMT
server: Apache
x-powered-by: PHP/7.4.15
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/js/cam4-ads_3badabeb.js | 64.210.135.119 | 200 OK | 8.1 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/js/cam4-ads_3badabeb.js IP64.210.135.119:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJavaScript source, ASCII text, with very long lines (8349), with no line terminators Hashb91baf9c9a3f0de96db3c88009a03184 1cf8f2234008e41d0bdc2d7d3c47410d729d0224 80f9b192d44a5dd9bcb254885052265d564376ab147d7bd69be31f7bce0da460
GET /web/js/cam4-ads_3badabeb.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:11 GMT
content-type: application/javascript
vary: Origin
last-modified: Mon, 25 Mar 2024 14:59:30 GMT
etag: W/"21760042e-1f87-6147d6ba97880"
expires: Wed, 24 Jul 2024 09:06:25 GMT
cache-control: max-age=10425807
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6141-3-37216-h-0-0---;7846-22-34652----0-0-0
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/js/cam4-merged_4872de44.js | 64.210.135.119 | 200 OK | 1.4 MB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/js/cam4-merged_4872de44.js IP64.210.135.119:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
Size1.4 MB (1442692 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/js/cam4-merged_4872de44.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:11 GMT
content-type: application/javascript
vary: Origin
last-modified: Thu, 25 Apr 2024 11:24:34 GMT
etag: W/"21aa9870a-160384-616ea0814c080"
expires: Mon, 26 Aug 2024 01:17:02 GMT
cache-control: max-age=10501377
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6249-1-37907-h-0-0---;7846-22-34652----0-0-1
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/js/bootstrap-merged_41d3f2c3.js | 64.210.135.119 | 200 OK | 168 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/js/bootstrap-merged_41d3f2c3.js IP64.210.135.119:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJavaScript source, ASCII text, with very long lines (58715) Size168 kB (167474 bytes) Hash146364c0723a486b1f4ae2f050633506 9352e57ac70ae1290143168c37189fb00d2932a5 71cc89128b4a3df550ecbc3a3c1db402d981b335d1b43e666c5abfa662d19ccd
GET /web/js/bootstrap-merged_41d3f2c3.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:11 GMT
content-type: application/javascript
vary: Origin
last-modified: Fri, 29 Mar 2024 07:46:34 GMT
etag: W/"215e1db92-28e32-614c7d6bcaa80"
expires: Sat, 03 Aug 2024 13:51:05 GMT
cache-control: max-age=10774584
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-7846-3-15396-h-0-0---;7846-22-34652----0-0-0
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.1.1/js/bootstrap.min.js | 104.18.11.207 | 200 OK | 29 kB |
URL GET HTTP/2maxcdn.bootstrapcdn.com/bootstrap/3.1.1/js/bootstrap.min.js IP104.18.11.207:443
Requested byhttps://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeJavaScript source, ASCII text, with very long lines (28941) Hashba847811448ef90d98d272aeccef2a95 5814e91bb6276f4de8b7951c965f2f190a03978d 898d05a17f2cfc5120ddcdba47a885c378c0b466f30f0700e502757e24b403a1
GET /bootstrap/3.1.1/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landers.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:11 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"ba847811448ef90d98d272aeccef2a95"
last-modified: Mon, 25 Jan 2021 22:03:57 GMT
cdn-cachedat: 12/24/2022 09:42:47
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 309a35b9541e54d726e806d52cb277ef
cdn-cache: HIT
cf-cache-status: HIT
age: 13443635
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a98bf119db712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/js/i18n/com_cam4/jsLang.en_GB_176e290b.js | 64.210.135.119 | 200 OK | 50 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/js/i18n/com_cam4/jsLang.en_GB_176e290b.js IP64.210.135.119:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/js/i18n/com_cam4/jsLang.en_GB_176e290b.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:11 GMT
content-type: application/javascript
vary: Origin
last-modified: Fri, 22 Mar 2024 21:49:30 GMT
etag: W/"216325619-c418-61446cc698e80"
expires: Tue, 23 Jul 2024 21:53:48 GMT
cache-control: max-age=10625671
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6140-1-36344-h-0-0---;7846-23-34652----0-0-1
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/js/cam4-runnable_670a275b.js | 64.210.135.119 | 200 OK | 114 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/js/cam4-runnable_670a275b.js IP64.210.135.119:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
Size114 kB (114507 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/js/cam4-runnable_670a275b.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:11 GMT
content-type: application/javascript
vary: Origin
last-modified: Mon, 01 Apr 2024 13:20:54 GMT
etag: W/"217f25700-1bf4b-61508dbee1980"
expires: Fri, 02 Aug 2024 12:04:19 GMT
cache-control: max-age=10472102
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-7619-1-20481-h-0-0---;7846-22-34652----0-0-1
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/js/build/bundle_dc1efe22.js | 64.210.135.119 | 200 OK | 30 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/js/build/bundle_dc1efe22.js IP64.210.135.119:443
Requested byhttps://www.cam4.com/remote/register?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&stylesheet=https://landers.cam4.com/video/css/form.css CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJavaScript source, ASCII text, with very long lines (18835) Hashf7cc42969087a295da221cf977805135 e1c8f649d4e40926ee3227a02d539e75b5682578 90ef79194d512cd95df4b2aa140468d08a44ed3a8538349b88f1692fc0854eb2
GET /web/js/build/bundle_dc1efe22.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:11 GMT
content-type: application/javascript
vary: Origin
last-modified: Thu, 25 Jan 2024 12:28:24 GMT
etag: W/"20d66b813-752a-60fc450ceca00"
expires: Tue, 28 May 2024 08:01:17 GMT
cache-control: max-age=10436311
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-7619-3-20666-h-0-0---;7846-23-34652----0-0-0
X-Firefox-Spdy: h2
|
|
| landers.cam4.com/video/thumbnails/selene1975-2.jpg | 99.192.248.164 | 200 OK | 5.7 kB |
URL GET HTTP/2landers.cam4.com/video/thumbnails/selene1975-2.jpg IP99.192.248.164:443
Requested byhttps://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup CertificateIssuerLet's Encrypt Subjectlanders.cam4.com Fingerprint58:A6:4E:49:D2:79:11:78:62:5D:8C:CA:27:0A:A4:AA:FD:AC:50:50 ValidityThu, 18 Apr 2024 07:24:31 GMT - Wed, 17 Jul 2024 07:24:30 GMT
File typeJavaScript source, ASCII text, with very long lines (6112), with no line terminators Hash986ccb7f496c968bb450f7af92a7829b bd1afff0042295cc587f71681fe0185a437889fc e9e6a7d48a2d699aefcc5b4666c4efba87e0e232fcb018173e0c16b12eab6b7a
GET /video/thumbnails/selene1975-2.jpg HTTP/1.1
Host: landers.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landers.cam4.com/video/female?act=voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324&utm_keyword=%7B%25platform%25%7D&utm_medium=popunder&utm_source=347&utm_campaign=acquisition_mar-21-2024&utm_content=viewer_fr_frites_female_straight_leads_wifi_mobile_french&utm_term=lander-female_nsfw_signup
Cookie: PHPSESSID=jqn6rk2rc9171cbuvhaavh5p4a; cam4-AF="voluum_wfpkottsqgciids03aklool6_200866:866_fr_flirtrev_mwf_0324"; cam4-UTM-campaigns=%7B%22utmCampaign%22%3A%22acquisition_mar-21-2024%22%2C%22utmSource%22%3A%22347%22%2C%22utmMedium%22%3A%22popunder%22%2C%22utmTerm%22%3A%22lander-female_nsfw_signup%22%2C%22utmContent%22%3A%22viewer_fr_frites_female_straight_leads_wifi_mobile_french%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:08:11 GMT
server: Apache
x-powered-by: PHP/7.4.15
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
X-Firefox-Spdy: h2
|
|