| jcdn.tsyndicate.com/JEIdM47uR47yig2Brzskr30ZCXRK9W8I.js | 45.133.44.70 | 200 OK | 2.0 kB |
URL GET jcdn.tsyndicate.com/JEIdM47uR47yig2Brzskr30ZCXRK9W8I.js IP 45.133.44.70:443
ASN#39572 DataWeb Global Group B.V.
CertificateIssuerLet's Encrypt Subjectjcdn.tsyndicate.com Fingerprint77:A8:E7:75:4B:8F:66:72:11:55:A0:B4:69:1C:05:A4:62:C2:00:FE ValiditySat, 03 May 2025 04:32:17 GMT - Fri, 01 Aug 2025 04:32:16 GMT
File typeJavaScript source, ASCII text, with very long lines (1990), with no line terminators Hash21d188691923abda04c23fdc6de82418 61c654497556b705d613e484e50d1b483a1fa176 04a73c00016f8538cd2e1b8b7378a47657b42331df26dacb8a899696d65c3cd8
GET /JEIdM47uR47yig2Brzskr30ZCXRK9W8I.js HTTP/1.1
Host: jcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 06:26:36 GMT
content-type: application/javascript; charset=utf-8
content-length: 1990
server: nginx
x-request-id: a03631b0-77ff-4fbd-b343-a90bbc034e8e
strict-transport-security: max-age=31536000 always
expires: Fri, 09 May 2025 06:31:36 GMT
cache-control: max-age=300
vary: Accept-Encoding
x-cdn-host-id: ds9201
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=UOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 | 188.114.96.1 | 200 OK | 790 B |
URL GET creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=UOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 IP 188.114.96.1:443
CertificateIssuerLet's Encrypt Subjectxlivrdr.com FingerprintF1:8A:E4:52:03:8A:96:88:B3:EE:D5:B5:F1:63:D0:E5:15:C4:D6:1E ValidityMon, 17 Mar 2025 10:33:05 GMT - Sun, 15 Jun 2025 10:33:04 GMT
File typeHTML document, ASCII text, with very long lines (790), with no line terminators Hashf29289949e2726b2e9760f7ecbcbd156 9fe938e751ea33a3e95b02613c16731c5d42de59 9774291924c3eb435823267064e18fa8b32b898f36c78ccaa546851ad67a3aba
GET /widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=UOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 HTTP/1.1
Host: creative.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nhentai.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 06:26:37 GMT
content-type: text/html; charset=utf-8
last-modified: Wed, 07 May 2025 08:33:15 GMT
expires: Fri, 09 May 2025 06:26:38 GMT
cache-control: max-age=10
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
age: 8
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ec9eS47e5Blsv5sOdn3Nn7YQsXAkfvESgv3%2F80Rs0dIZEPMk%2BdIxf5oU4tUIXoVrM3gSsLfYBBZMJLAfV80sdnUkF0EIC5IyH8nDE34cMi5wQ%2BytFUMuVbCAAdMZDvAWxgqr05jkQA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93cf2057aaf456a9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=487&min_rtt=440&rtt_var=140&sent=6&recv=10&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2076&delivery_rate=5353049&cwnd=253&unsent_bytes=0&cid=72259bdee255024d&ts=37&x=0"
X-Firefox-Spdy: h2
|
|
| go.xlivrdr.com/abc.gif?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&thumbSizeKey=big&language=en&thumbFit=cover&stripcashR=0&thumbType=default&kbLimit=25000&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=2&segment=hls-oldAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Fnhentai.net%2F&i=0&abTest=widgetv4universal_test_31m&abTestVariant=widgetv4universal_test_31m_paidUsers_1&seenAbTest=0&seenDomain=0&seenLanding=0&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A660%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A366%2C%22duration%22%3A47%2C%22transferSize%22%3A177695%7D%2C%7B%22type%22%3A%22first-contentful-paint%22%2C%22startTime%22%3A881%2C%22duration%22%3A0%7D%5D&mh=1800906765 | 104.18.40.50 | 200 OK | 0 B |
URL GET go.xlivrdr.com/abc.gif?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&thumbSizeKey=big&language=en&thumbFit=cover&stripcashR=0&thumbType=default&kbLimit=25000&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=2&segment=hls-oldAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Fnhentai.net%2F&i=0&abTest=widgetv4universal_test_31m&abTestVariant=widgetv4universal_test_31m_paidUsers_1&seenAbTest=0&seenDomain=0&seenLanding=0&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A660%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A366%2C%22duration%22%3A47%2C%22transferSize%22%3A177695%7D%2C%7B%22type%22%3A%22first-contentful-paint%22%2C%22startTime%22%3A881%2C%22duration%22%3A0%7D%5D&mh=1800906765 IP 104.18.40.50:443
Requested byhttps://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=UOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 CertificateIssuerLet's Encrypt Subjectxlivrdr.com FingerprintF1:8A:E4:52:03:8A:96:88:B3:EE:D5:B5:F1:63:D0:E5:15:C4:D6:1E ValidityMon, 17 Mar 2025 10:33:05 GMT - Sun, 15 Jun 2025 10:33:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /abc.gif?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&thumbSizeKey=big&language=en&thumbFit=cover&stripcashR=0&thumbType=default&kbLimit=25000&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=2&segment=hls-oldAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Fnhentai.net%2F&i=0&abTest=widgetv4universal_test_31m&abTestVariant=widgetv4universal_test_31m_paidUsers_1&seenAbTest=0&seenDomain=0&seenLanding=0&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A660%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A366%2C%22duration%22%3A47%2C%22transferSize%22%3A177695%7D%2C%7B%22type%22%3A%22first-contentful-paint%22%2C%22startTime%22%3A881%2C%22duration%22%3A0%7D%5D&mh=1800906765 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 06:26:38 GMT
content-type: image/gif
content-length: 103
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
priority: u=4,i=?0
server: cloudflare
cf-ray: 93cf205c5eda568f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| es.stripchat.com/checkUrl | 104.17.118.12 | 200 OK | 15 B |
URL GET es.stripchat.com/checkUrl IP 104.17.118.12:443
Requested byhttps://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=UOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 CertificateIssuerGoogle Trust Services Subjectstripchat.com Fingerprint59:C5:39:58:8E:45:42:46:32:B3:D8:43:DB:FE:4C:36:80:AF:A2:AF ValiditySun, 23 Mar 2025 23:47:14 GMT - Sun, 22 Jun 2025 00:46:58 GMT
Hash7fb97eb7c8636552ad068f6d56b5ea34 b69679936779fb02503bc0fe1374a737cc762ecb e78008828abaa93c4462e326ef384dcda1443352a0f24bdeedada6a6fdbfd1d5
GET /checkUrl HTTP/1.1
Host: es.stripchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 06:26:38 GMT
content-type: application/json
content-length: 15
access-control-allow-origin: https://creative.xlivrdr.com
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
set-cookie: __cf_bm=7nRFGPWQwczAEPua8cQZWCIQcr9MkA5sxnY7Ah3ABJM-1746771998-1.0.1.1-KDmDmotxYnQdWC.O05Sr9m8usju80sy7EuxkZeJwg4ZWhiedarWXFBZoCLF568wQ7ktaPynJW7DdYS21069O8FSc0yVVQwe5VPYQxsE5ZMTqyHSzOd.dAA88dGiu3mIC; path=/; expires=Fri, 09-May-25 06:56:38 GMT; domain=.stripchat.com; HttpOnly; Secure; SameSite=None
_cfuvid=iAVYRqaq39JmR6hMPIjNo5vQXfu60Zkpk5V_35BtQX4-1746771998453-0.0.1.1-604800000; path=/; domain=.stripchat.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 93cf205e0f6f56a3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/notosans/v39/o-0kIpQlx3QUlC5A4PNr4C5OaxRsfNNlKbCePevHtVtX57DGjDU1QDce2VDSyA.woff2 | 142.250.74.35 | 200 OK | 14 kB |
URL GET fonts.gstatic.com/s/notosans/v39/o-0kIpQlx3QUlC5A4PNr4C5OaxRsfNNlKbCePevHtVtX57DGjDU1QDce2VDSyA.woff2 IP 142.250.74.35:443
CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 13876, version 1.0 Hash50f5e13912e2316fec143df59ab0c6b8 4a21970555713986818fc5ff032c08b86ea2d2e7 051ddbef7c49273430a39c6d450e562a3fed920498eb9a73234f0ae9c5a1dcde
GET /s/notosans/v39/o-0kIpQlx3QUlC5A4PNr4C5OaxRsfNNlKbCePevHtVtX57DGjDU1QDce2VDSyA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nhentai.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13876
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 May 2025 09:35:50 GMT
expires: Fri, 08 May 2026 09:35:50 GMT
cache-control: public, max-age=31536000
age: 75046
last-modified: Tue, 11 Mar 2025 01:12:12 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| t1.nhentai.net/galleries/3346892/thumb.webp | 77.247.178.1 | 200 OK | 17 kB |
URL GET t1.nhentai.net/galleries/3346892/thumb.webp IP 77.247.178.1:443
ASN#43350 NForce Entertainment B.V.
CertificateIssuerDigiCert Inc Subject*.nhentai.net Fingerprint95:16:43:9A:66:C7:70:1D:D5:79:81:E5:B2:88:59:93:F7:5F:11:35 ValiditySun, 06 Oct 2024 00:00:00 GMT - Mon, 06 Oct 2025 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 500x729, Scaling: [none]x[none], YUV color, decoders should clamp Hash179f53ab42d32241f31daaa535db3f4d 818ad942703432d48770aac73dc51260f7a020d7 6410f47413ca2508edc0fe9b9a7f6c5f7700ae2ca8ad9e6a689e7c72e1a755a6
GET /galleries/3346892/thumb.webp HTTP/1.1
Host: t1.nhentai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 06:26:36 GMT
content-type: image/webp
content-length: 17096
last-modified: Thu, 08 May 2025 08:28:51 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| t1.nhentai.net/galleries/3346876/thumb.webp | 77.247.178.1 | 200 OK | 20 kB |
URL GET t1.nhentai.net/galleries/3346876/thumb.webp IP 77.247.178.1:443
ASN#43350 NForce Entertainment B.V.
CertificateIssuerDigiCert Inc Subject*.nhentai.net Fingerprint95:16:43:9A:66:C7:70:1D:D5:79:81:E5:B2:88:59:93:F7:5F:11:35 ValiditySun, 06 Oct 2024 00:00:00 GMT - Mon, 06 Oct 2025 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 500x710, Scaling: [none]x[none], YUV color, decoders should clamp Hash06c50c7a12cd546b4e2a1ccbd7d52a12 a70527727e0155b6ff81cfa744bf29ad7de2aecb 5491318f52fdf9c9385c3b13b7f4445f7fc43372dcc3e6c57509e1ab73a319e3
GET /galleries/3346876/thumb.webp HTTP/1.1
Host: t1.nhentai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 06:26:36 GMT
content-type: image/webp
content-length: 19614
last-modified: Thu, 08 May 2025 07:52:45 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| img.doppiocdn.com/thumbs/1746771930/200291127_webp | 104.17.223.114 | 200 OK | 17 kB |
URL GET img.doppiocdn.com/thumbs/1746771930/200291127_webp IP 104.17.223.114:443
Requested byhttps://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=mzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 CertificateIssuerGoogle Trust Services Subjectdoppiocdn.com FingerprintAD:A5:3A:00:76:34:18:F2:64:89:A6:A5:D1:D3:F9:63:E3:9C:E9:CC ValidityMon, 07 Apr 2025 04:19:05 GMT - Sun, 06 Jul 2025 05:19:01 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp Hashbb8e57e6d634a77368543b36d2e49bc1 1c4c70cb1726fe28d81d7f6d81798f2b28d2dc06 1be3ac928be81e761590ce7c0e0dbe81bac8fe32ff1b81e0078965d44f5a52e8
GET /thumbs/1746771930/200291127_webp HTTP/1.1
Host: img.doppiocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 06:26:38 GMT
content-type: image/webp
content-length: 16624
etag: "bb8e57e6d634a77368543b36d2e49bc1"
last-modified: Fri, 09 May 2025 06:24:44 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 57
accept-ranges: bytes
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
cf-ray: 93cf205d3afc7127-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| edge-hls.doppiocdn.live/checkUrl | 212.102.62.46 | 200 OK | 14 B |
URL GET edge-hls.doppiocdn.live/checkUrl IP 212.102.62.46:443
ASN#60068 Datacamp Limited
Requested byhttps://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=mzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 CertificateIssuerLet's Encrypt Subject1004540777.rsc.cdn77.org FingerprintD4:52:AE:96:A4:7C:C1:6B:F6:F7:DB:2F:D0:AB:CF:C5:B8:DC:28:F3 ValidityFri, 14 Mar 2025 10:49:59 GMT - Thu, 12 Jun 2025 10:49:58 GMT
Hash5adb849d1e5031fa27c14f861f6700da a5b1658db04aa9183a780d00838f638c7936446a c45272c1b33373d94fb6786698d5145ba0cb558fc7494d91cbbb380b4fc561a8
GET /checkUrl HTTP/1.1
Host: edge-hls.doppiocdn.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 06:26:38 GMT
content-type: application/json
content-length: 14
access-control-allow-origin: *
cache-control: public, max-age=0, s-maxage=30, no-transform
x-77-nzt: EgwB1GY+LgG3HgAAAAwBT3/TDgG3AAAAAA
x-77-nzt-ray: db5cda090223955e1ea01d684f225a1a
x-77-cache: HIT
x-77-age: 30
server: CDN77-Turbo
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| t1.nhentai.net/galleries/3343846/thumb.webp | 77.247.178.1 | 200 OK | 16 kB |
URL GET t1.nhentai.net/galleries/3343846/thumb.webp IP 77.247.178.1:443
ASN#43350 NForce Entertainment B.V.
CertificateIssuerDigiCert Inc Subject*.nhentai.net Fingerprint95:16:43:9A:66:C7:70:1D:D5:79:81:E5:B2:88:59:93:F7:5F:11:35 ValiditySun, 06 Oct 2024 00:00:00 GMT - Mon, 06 Oct 2025 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 500x750, Scaling: [none]x[none], YUV color, decoders should clamp Hashc6dbf624a939b444fcff52a524ae8715 20919bad6a1dcd2dcb8d39f5c4054130000ac761 c3dc7e7d4528d0d1fbf40739fb59afb5aa69db382a2181b4bfa2a2060fbd003d
GET /galleries/3343846/thumb.webp HTTP/1.1
Host: t1.nhentai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 06:26:36 GMT
content-type: image/webp
content-length: 15518
last-modified: Tue, 06 May 2025 18:28:36 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn.tsyndicate.com/sdk/v1/video.instant.message.v2.css | 45.133.44.71 | 200 OK | 5.5 kB |
URL GET cdn.tsyndicate.com/sdk/v1/video.instant.message.v2.css IP 45.133.44.71:443
ASN#39572 DataWeb Global Group B.V.
CertificateIssuerLet's Encrypt Subjectcdn.tsyndicate.com FingerprintC8:21:B5:22:CE:B2:90:D0:CE:CF:F7:57:FA:B4:14:52:BA:AF:3B:EF ValidityFri, 04 Apr 2025 07:32:05 GMT - Thu, 03 Jul 2025 07:32:04 GMT
File typeASCII text, with very long lines (5506), with no line terminators Hashe3e4488f398253942394c3f34413ce5f 16cc19782a98a9eed6cc43c99cb4edf2193569be 40fb178ba50be1a76cae6e653c125280258c7ad30b027d21e347f5a28649af51
GET /sdk/v1/video.instant.message.v2.css HTTP/1.1
Host: cdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 06:26:36 GMT
content-type: text/css
server: nginx
last-modified: Thu, 17 Apr 2025 08:58:09 GMT
etag: W/"6800c2a1-1582"
x-robots-tag: noindex, nofollow
content-encoding: gzip
cache-control: max-age=172800
expires: Sun, 11 May 2025 06:26:36 GMT
vary: Accept-Encoding
x-cdn-host-id: ah1742,ds9893
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=mzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 | 188.114.96.1 | 200 OK | 790 B |
URL GET creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=mzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 IP 188.114.96.1:443
CertificateIssuerLet's Encrypt Subjectxlivrdr.com FingerprintF1:8A:E4:52:03:8A:96:88:B3:EE:D5:B5:F1:63:D0:E5:15:C4:D6:1E ValidityMon, 17 Mar 2025 10:33:05 GMT - Sun, 15 Jun 2025 10:33:04 GMT
File typeHTML document, ASCII text, with very long lines (790), with no line terminators Hashf29289949e2726b2e9760f7ecbcbd156 9fe938e751ea33a3e95b02613c16731c5d42de59 9774291924c3eb435823267064e18fa8b32b898f36c78ccaa546851ad67a3aba
GET /widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=mzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 HTTP/1.1
Host: creative.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nhentai.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 06:26:37 GMT
content-type: text/html; charset=utf-8
last-modified: Wed, 07 May 2025 08:33:15 GMT
expires: Fri, 09 May 2025 06:26:38 GMT
cache-control: max-age=10
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
age: 8
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3u5PL0LYp8%2BBr7mZWym2DRMrumZmI9cRe2txrq%2FL2Xs2%2BolOtQp5Ff%2BFTECDkVRlo0058VqUNLuGAGzpafOy4uIXur7yP%2Ffh2LC9Bnw2HTBdYV6kIdgvUtYKurQ7j9e8pwzMLUyAJg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93cf2057aaea56a9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=487&min_rtt=440&rtt_var=140&sent=9&recv=10&lost=0&retrans=0&sent_bytes=4028&recv_bytes=2076&delivery_rate=5353049&cwnd=253&unsent_bytes=0&cid=72259bdee255024d&ts=38&x=0"
X-Firefox-Spdy: h2
|
|
| creative.xlivrdr.com/static/2025831e/s/widgets/v4/Universal/lang/en.json | 188.114.96.1 | 200 OK | 172 B |
URL GET creative.xlivrdr.com/static/2025831e/s/widgets/v4/Universal/lang/en.json IP 188.114.96.1:443
Requested byhttps://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=mzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 CertificateIssuerLet's Encrypt Subjectxlivrdr.com FingerprintF1:8A:E4:52:03:8A:96:88:B3:EE:D5:B5:F1:63:D0:E5:15:C4:D6:1E ValidityMon, 17 Mar 2025 10:33:05 GMT - Sun, 15 Jun 2025 10:33:04 GMT
Hash69a54638b649d7ce4748bd42c4b6dade a2dfe9f8791952fbc5cc44d4757b031a6cee1731 0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750
GET /static/2025831e/s/widgets/v4/Universal/lang/en.json HTTP/1.1
Host: creative.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=mzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 06:26:37 GMT
content-type: application/json
access-control-expose-headers: Content-Disposition
content-disposition: inline; filename="en.json"
etag: W/"69a54638b649d7ce4748bd42c4b6dade"
last-modified: Wed, 07 May 2025 11:04:18 GMT
cache-control: max-age=10
expires: Fri, 09 May 2025 06:26:44 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: HIT
age: 3
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X1lO6qe4%2BSlVejDzZKf7ZGYyKsBZPTzqscQkXDvwVmNDEZAhJxBNvWOMZ0KuP2063ds16se0bV9kj0KxkoE2GryyZgWqDvW4cV9K4tSECceMruGA0jKO%2B2%2B2aA1uX0TT0ZySfszHJA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93cf205a6cfeb518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1918&min_rtt=1134&rtt_var=487&sent=332&recv=25&lost=0&retrans=0&sent_bytes=374027&recv_bytes=5165&delivery_rate=27881&cwnd=254400&unsent_bytes=0&cid=113a8adf1aa4fb20&ts=436&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| img.doppiocdn.com/thumbs/1746771900/81634910_webp | 104.17.223.114 | 200 OK | 11 kB |
URL GET img.doppiocdn.com/thumbs/1746771900/81634910_webp IP 104.17.223.114:443
Requested byhttps://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=UOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 CertificateIssuerGoogle Trust Services Subjectdoppiocdn.com FingerprintAD:A5:3A:00:76:34:18:F2:64:89:A6:A5:D1:D3:F9:63:E3:9C:E9:CC ValidityMon, 07 Apr 2025 04:19:05 GMT - Sun, 06 Jul 2025 05:19:01 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp Hashd91e3c2c3d467feca97bb2d476230dd4 c087e56f4c2ad60f60a264ee01a3f2e38eff13f6 b70c80bfd1ec88951a0c8473e089c3066d242ea5664921e14858c43ba5c86482
GET /thumbs/1746771900/81634910_webp HTTP/1.1
Host: img.doppiocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 06:26:38 GMT
content-type: image/webp
content-length: 11232
etag: "d91e3c2c3d467feca97bb2d476230dd4"
last-modified: Fri, 09 May 2025 06:23:52 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 94
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 93cf205cbd32568e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| creative.xlivrdr.com/static/2025831e/s/widgets/v4/Universal/main.d4cb1dbc4cd38f2241ba.js | 188.114.96.1 | 200 OK | 671 kB |
URL GET creative.xlivrdr.com/static/2025831e/s/widgets/v4/Universal/main.d4cb1dbc4cd38f2241ba.js IP 188.114.96.1:443
Requested byhttps://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=mzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 CertificateIssuerLet's Encrypt Subjectxlivrdr.com FingerprintF1:8A:E4:52:03:8A:96:88:B3:EE:D5:B5:F1:63:D0:E5:15:C4:D6:1E ValidityMon, 17 Mar 2025 10:33:05 GMT - Sun, 15 Jun 2025 10:33:04 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (50688), with NEL line terminators Size671 kB (670645 bytes) Hash97692018775409602661145e7679eed5 6cd521e5f4596a228c94e647ac266e3c12f27e6f 6084ead70831d2baba3ce03cadf5a90eb9255d7360ccf34b617008444e1766c9
GET /static/2025831e/s/widgets/v4/Universal/main.d4cb1dbc4cd38f2241ba.js HTTP/1.1
Host: creative.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=mzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 06:26:37 GMT
content-type: application/javascript; charset=utf-8
access-control-expose-headers: Content-Disposition
content-disposition: inline; filename="main.d4cb1dbc4cd38f2241ba.js"
etag: W/"97692018775409602661145e7679eed5"
last-modified: Wed, 07 May 2025 11:04:18 GMT
cache-control: max-age=10
expires: Fri, 09 May 2025 06:26:43 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
age: 3
cf-cache-status: HIT
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LCJCnKQ4FzD%2FwtUb2r8LYLKnBe4v%2FvJOm2wGD3zVeWF0%2F4s0BGVvCgR05FSvmNaKrCLXOMPoP6yX3en%2BPHnSUlZr3yndvc6C0nG16W%2BUExc0asihhxsKYStRpM%2FwREQzBYdVQzMn9A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93cf20589a15b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3199&min_rtt=3146&rtt_var=1286&sent=13&recv=10&lost=0&retrans=0&sent_bytes=4699&recv_bytes=3135&delivery_rate=178988&cwnd=12000&unsent_bytes=0&cid=113a8adf1aa4fb20&ts=147&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| go.xlivrdr.com/app/domain-checker/get-check | 104.18.40.50 | 200 OK | 206 B |
URL POST go.xlivrdr.com/app/domain-checker/get-check IP 104.18.40.50:443
Requested byhttps://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=mzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 CertificateIssuerLet's Encrypt Subjectxlivrdr.com FingerprintF1:8A:E4:52:03:8A:96:88:B3:EE:D5:B5:F1:63:D0:E5:15:C4:D6:1E ValidityMon, 17 Mar 2025 10:33:05 GMT - Sun, 15 Jun 2025 10:33:04 GMT
Hash0c5bdd69a2fc751c0dcabd9fea4442d9 1e25b4353411b683eaa33fdda0c592b8f54d28de d9963bb6264d174df90af62af00d3ad42cb8699e49940bdfe1da948685de94ec
POST /app/domain-checker/get-check HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/3 200 OK
date: Fri, 09 May 2025 06:26:38 GMT
content-type: application/json
access-control-allow-origin: https://creative.xlivrdr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
content-encoding: gzip
cf-cache-status: DYNAMIC
vary: accept-encoding
priority: u=4,i=?0
server: cloudflare
cf-ray: 93cf205ce878569f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| t1.nhentai.net/galleries/3344848/thumb.webp | 77.247.178.1 | 200 OK | 18 kB |
URL GET t1.nhentai.net/galleries/3344848/thumb.webp IP 77.247.178.1:443
ASN#43350 NForce Entertainment B.V.
CertificateIssuerDigiCert Inc Subject*.nhentai.net Fingerprint95:16:43:9A:66:C7:70:1D:D5:79:81:E5:B2:88:59:93:F7:5F:11:35 ValiditySun, 06 Oct 2024 00:00:00 GMT - Mon, 06 Oct 2025 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 500x375, Scaling: [none]x[none], YUV color, decoders should clamp Hash0f765fa31ccf572a603492b39ac12a52 971d0ecb03a5b05190bb0e59178cbe1f0192227f f26706e983521171b41c4e8bb7cb64ebe0f88b9ec7dd56632662409f16b592b9
GET /galleries/3344848/thumb.webp HTTP/1.1
Host: t1.nhentai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 06:26:36 GMT
content-type: image/webp
content-length: 18370
last-modified: Wed, 07 May 2025 08:20:28 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| vacdn.tsyndicate.com/videos/5/2/cb22d6a2703dfc6ce15aab441becba1354de80/440x250.mp4 | 45.133.44.71 | 206 Partial Content | 98 kB |
URL GET vacdn.tsyndicate.com/videos/5/2/cb22d6a2703dfc6ce15aab441becba1354de80/440x250.mp4 IP 45.133.44.71:443
ASN#39572 DataWeb Global Group B.V.
CertificateIssuerLet's Encrypt Subjectvacdn.tsyndicate.com Fingerprint4A:16:30:0B:02:D9:FA:22:C5:D1:89:E3:BE:C0:73:90:00:19:35:D1 ValidityTue, 08 Apr 2025 06:18:34 GMT - Mon, 07 Jul 2025 06:18:33 GMT
File typeISO Media, MP4 Base Media v1 [ISO 14496-12:2003] Hash9a36b3d87d2b6928947562a0b94867c1 ec8e9e41ee4465f1251051e71d11db64ccd5e2b1 eeed724945e840e9fa0cb0c2348d3259ac47ea5c775a4f98ff7502b1f989519e
GET /videos/5/2/cb22d6a2703dfc6ce15aab441becba1354de80/440x250.mp4 HTTP/1.1
Host: vacdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Fri, 09 May 2025 06:26:36 GMT
content-type: video/mp4
content-length: 670463
server: nginx/1.20.1
cache-control: max-age=172800
last-modified: Tue, 08 Apr 2025 07:37:51 GMT
access-control-allow-origin: *
etag: "67f4d24f-a3aff"
expires: Sun, 11 May 2025 06:26:36 GMT
vary: Accept-Encoding
x-cdn-host-id: ah1742,ds9611,ds9201
x-proxy-cache: HIT
content-range: bytes 0-670462/670463
X-Firefox-Spdy: h2
|
|
| go.xlivrdr.com/smartpop/d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&sourceId=743433&memberId=mzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi&p1=4522306 | 104.18.40.50 | 302 Found | 790 B |
URL GET go.xlivrdr.com/smartpop/d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&sourceId=743433&memberId=mzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi&p1=4522306 IP 104.18.40.50:443
CertificateIssuerLet's Encrypt Subjectxlivrdr.com FingerprintF1:8A:E4:52:03:8A:96:88:B3:EE:D5:B5:F1:63:D0:E5:15:C4:D6:1E ValidityMon, 17 Mar 2025 10:33:05 GMT - Sun, 15 Jun 2025 10:33:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smartpop/d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&sourceId=743433&memberId=mzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi&p1=4522306 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nhentai.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 09 May 2025 06:26:37 GMT
content-length: 0
location: https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=mzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 93cf2056e837b4f1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| creative.xlivrdr.com/static/2025831e/s/widgets/v4/Universal/main.d4cb1dbc4cd38f2241ba.js | 188.114.96.1 | 200 OK | 671 kB |
URL GET creative.xlivrdr.com/static/2025831e/s/widgets/v4/Universal/main.d4cb1dbc4cd38f2241ba.js IP 188.114.96.1:443
Requested byhttps://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=UOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 CertificateIssuerLet's Encrypt Subjectxlivrdr.com FingerprintF1:8A:E4:52:03:8A:96:88:B3:EE:D5:B5:F1:63:D0:E5:15:C4:D6:1E ValidityMon, 17 Mar 2025 10:33:05 GMT - Sun, 15 Jun 2025 10:33:04 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (50688), with NEL line terminators Size671 kB (670645 bytes) Hash97692018775409602661145e7679eed5 6cd521e5f4596a228c94e647ac266e3c12f27e6f 6084ead70831d2baba3ce03cadf5a90eb9255d7360ccf34b617008444e1766c9
GET /static/2025831e/s/widgets/v4/Universal/main.d4cb1dbc4cd38f2241ba.js HTTP/1.1
Host: creative.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=UOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 06:26:37 GMT
content-type: application/javascript; charset=utf-8
access-control-expose-headers: Content-Disposition
content-disposition: inline; filename="main.d4cb1dbc4cd38f2241ba.js"
etag: W/"97692018775409602661145e7679eed5"
last-modified: Wed, 07 May 2025 11:04:18 GMT
cache-control: max-age=10
expires: Fri, 09 May 2025 06:26:43 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
age: 3
cf-cache-status: HIT
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MRjfXSQ56LhXlVMi3KW7d2T26V0kUW7MDFj6GAwsvh4R%2Ba3rJRpgapsRTfgQ%2BpPdAUpKpUhvcYBdJYiv68NewNocEMKGney1Butr%2FVjYhX%2B8tkjByuJbBchVDWLHwlsKXCAfQ0zqoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93cf2058aa2bb518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2070&min_rtt=1134&rtt_var=1123&sent=102&recv=17&lost=0&retrans=0&sent_bytes=106364&recv_bytes=3444&delivery_rate=17083970&cwnd=48000&unsent_bytes=0&cid=113a8adf1aa4fb20&ts=156&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| go.xlivrdr.com/api/models?landing=WidgetV4Universal&masterSmartpopId=1605&quality=240p&smartpopId=13951&sortBy=topScore&stripcashR=0&forceClient=0&usePreroll=0&modelPromotion=1&limit=2 | 104.18.40.50 | 200 OK | 3.8 kB |
URL GET go.xlivrdr.com/api/models?landing=WidgetV4Universal&masterSmartpopId=1605&quality=240p&smartpopId=13951&sortBy=topScore&stripcashR=0&forceClient=0&usePreroll=0&modelPromotion=1&limit=2 IP 104.18.40.50:443
Requested byhttps://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=mzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 CertificateIssuerLet's Encrypt Subjectxlivrdr.com FingerprintF1:8A:E4:52:03:8A:96:88:B3:EE:D5:B5:F1:63:D0:E5:15:C4:D6:1E ValidityMon, 17 Mar 2025 10:33:05 GMT - Sun, 15 Jun 2025 10:33:04 GMT
Hash1a22642ca3cd349c423257567ac97784 aa4aee499990d4eeaf26a6f7efdd793d1452612b 9e8637eaaeabb0224134e48c7a35bdd885450bf6c5ddf0e6d2bad9d361358ba9
GET /api/models?landing=WidgetV4Universal&masterSmartpopId=1605&quality=240p&smartpopId=13951&sortBy=topScore&stripcashR=0&forceClient=0&usePreroll=0&modelPromotion=1&limit=2 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 06:26:38 GMT
content-type: application/json
access-control-allow-origin: https://creative.xlivrdr.com
access-control-allow-credentials: true
vary: Origin, Accept-Encoding
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
content-encoding: gzip
last-modified: Fri, 09 May 2025 06:26:19 GMT
cf-cache-status: HIT
age: 10
priority: u=4,i=?0
server: cloudflare
cf-ray: 93cf205c3eaa568f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| img.doppiocdn.com/thumbs/1746771930/178868744_webp | 104.17.223.114 | 200 OK | 12 kB |
URL GET img.doppiocdn.com/thumbs/1746771930/178868744_webp IP 104.17.223.114:443
Requested byhttps://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=mzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 CertificateIssuerGoogle Trust Services Subjectdoppiocdn.com FingerprintAD:A5:3A:00:76:34:18:F2:64:89:A6:A5:D1:D3:F9:63:E3:9C:E9:CC ValidityMon, 07 Apr 2025 04:19:05 GMT - Sun, 06 Jul 2025 05:19:01 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp Hash53bf1d766c367354a16dd5722b1604f8 7b6d11f00b9db97592500ef799e4924ea62c69ad dfa0f5fefe14a1ecd1d780da54231af76946a6c5c69ce350960319399f25c0f5
GET /thumbs/1746771930/178868744_webp HTTP/1.1
Host: img.doppiocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 06:26:38 GMT
content-type: image/webp
content-length: 12178
etag: "53bf1d766c367354a16dd5722b1604f8"
last-modified: Fri, 09 May 2025 06:24:30 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 57
accept-ranges: bytes
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
cf-ray: 93cf205d3af77127-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| go.xlivrdr.com/app/domain-checker/check-result | 104.18.40.50 | 204 No Content | 0 B |
URL POST go.xlivrdr.com/app/domain-checker/check-result IP 104.18.40.50:443
Requested byhttps://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=UOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 CertificateIssuerLet's Encrypt Subjectxlivrdr.com FingerprintF1:8A:E4:52:03:8A:96:88:B3:EE:D5:B5:F1:63:D0:E5:15:C4:D6:1E ValidityMon, 17 Mar 2025 10:33:05 GMT - Sun, 15 Jun 2025 10:33:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /app/domain-checker/check-result HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 240
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
date: Fri, 09 May 2025 06:26:38 GMT
access-control-allow-origin: https://creative.xlivrdr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
priority: u=4,i=?0
server: cloudflare
cf-ray: 93cf205ebb9d569f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| | 104.26.5.188 | 200 OK | 24 kB |
IP 104.26.5.188:443
CertificateIssuerGoogle Trust Services Subjectnhentai.net Fingerprint60:A5:E9:05:94:DE:14:36:B4:14:4F:BA:D8:35:1F:46:A5:8F:A8:3F ValiditySun, 04 May 2025 19:41:57 GMT - Sat, 02 Aug 2025 20:41:53 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (23006) Hash231606cb285e4f9238b7b42cbc5a9c72 8d4dc2927d9df346f9c7aa98c45ef9d7c87eff36 f9398dbf035f5fc05f9dbc5a8640d434da0a986cc942984f046b3ca1411606ea
GET / HTTP/1.1
Host: nhentai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 06:26:35 GMT
content-type: text/html; charset=utf-8
set-cookie: session-affinity=1746771996.062.38.949888|2968378f2272707dac237fc5e1f12aaf; Max-Age=14400; Path=/; Secure; HttpOnly
csrftoken=FmVMqAtiYV8DS8qO8SkWByM05DWJCIBc; expires=Fri, 08 May 2026 06:26:35 GMT; Max-Age=31449600; Path=/; SameSite=Lax
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: same-origin
vary: Cookie, accept-encoding
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gCvfq8XeNmGYTZ5IheJy2ZPw0%2FHfvIW82f4XxA1fYCGlEATBQqdbR8TOBHhE0bSPf%2FFYgQls%2BpXGKInG07Vr%2BupNIugKUzHj52bHMbIh%2F5SQLmUnH9OMG%2BtxjA5f"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93cf2048e9f51c06-OSL
content-encoding: br
server-timing: cfCacheStatus;desc="DYNAMIC", cfL4;desc="?proto=TCP&rtt=5967&min_rtt=445&rtt_var=11015&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3199&recv_bytes=1122&delivery_rate=6454680&cwnd=254&unsent_bytes=0&cid=a72aef3133888019&ts=356&x=0"
X-Firefox-Spdy: h2
|
|
| static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 | 104.16.79.73 | 200 OK | 20 kB |
URL GET static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 IP 104.16.79.73:443
CertificateIssuerGoogle Trust Services Subjectcloudflareinsights.com FingerprintEA:C7:0D:68:3A:45:CB:AD:C5:33:41:B6:DF:F1:60:64:E1:0F:52:6A ValiditySun, 27 Apr 2025 18:18:02 GMT - Sat, 26 Jul 2025 19:17:55 GMT
File typeJavaScript source, ASCII text, with very long lines (19948), with no line terminators Hashec18af6d41f6f278b6aed3bdabffa7bc 62c9e2cab76b888829f3c5335e91c320b22329ae 8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f
GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nhentai.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 06:26:35 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2024.6.1"
last-modified: Thu, 06 Jun 2024 15:52:56 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 93cf204cf9170b06-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tsyndicate.com/do2/JEIdM47uR47yig2Brzskr30ZCXRK9W8I/master?xu=b295c059dace622b&w=1280&h=1024&tz=0&keywords=nhentai%20is%20a%20free%20hentai%20manga%20and%20doujinshi%20reader%20with%20over%20537%2C000%20galleries%20to%20read%20and%20download.%2Cnhentai%3A%20hentai%20doujinshi%20and%20manga&count=6 | 136.243.59.248 | 200 OK | 19 kB |
URL GET tsyndicate.com/do2/JEIdM47uR47yig2Brzskr30ZCXRK9W8I/master?xu=b295c059dace622b&w=1280&h=1024&tz=0&keywords=nhentai%20is%20a%20free%20hentai%20manga%20and%20doujinshi%20reader%20with%20over%20537%2C000%20galleries%20to%20read%20and%20download.%2Cnhentai%3A%20hentai%20doujinshi%20and%20manga&count=6 IP 136.243.59.248:443
ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjecttsyndicate.com Fingerprint1D:36:B3:AC:76:33:5C:64:BB:85:FE:5B:BA:AC:41:0D:8B:F7:20:65 ValidityTue, 25 Mar 2025 00:07:40 GMT - Mon, 23 Jun 2025 00:07:39 GMT
Hashe3e7dc0d95ca4f96b9cb94f826c1d1dc 78c6c1e61829283737778f95a105acf46528a11d 1e4644749eae8d72e4049017262da607d000707cf3889ef6d169182abce60302
GET /do2/JEIdM47uR47yig2Brzskr30ZCXRK9W8I/master?xu=b295c059dace622b&w=1280&h=1024&tz=0&keywords=nhentai%20is%20a%20free%20hentai%20manga%20and%20doujinshi%20reader%20with%20over%20537%2C000%20galleries%20to%20read%20and%20download.%2Cnhentai%3A%20hentai%20doujinshi%20and%20manga&count=6 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nhentai.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 06:26:37 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://nhentai.net
access-control-allow-methods: POST, GET, HEAD
access-control-allow-headers: Accept, X-Requested-With, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy
access-control-allow-credentials: true
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
set-cookie: cookie_user_id=d3d756cf-01a3-4d93-a733-97fa98551c38; expires=Sun, 09 Nov 2025 06:26:37 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
permissions-policy: ch-ua-model=(self "https://tsyndicate.com"), ch-ua-platform-version=(self)
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| go.xlivrdr.com/config?url=https%3A%2F%2Fcreative.xlivrdr.com%2Fwidgets%2Fv4%2FUniversal%3Faction%3DsbSignupWithModel%26campaignId%3Dd0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98%26campaignType%3Dsmartpop%26creativeId%3Db160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea%26iterationId%3D945939%26masterSmartpopId%3D1605%26memberId%3DUOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi%26modelPromotion%3D1%26p1%3D4522306%26quality%3D240p%26ruleId%3D3%26smartpopId%3D13951%26sourceId%3D743433%26usePreroll%3D0%26userId%3Dd100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca%26variationId%3D34450%26webp%3D1 | 104.18.40.50 | 200 OK | 7.3 kB |
URL GET go.xlivrdr.com/config?url=https%3A%2F%2Fcreative.xlivrdr.com%2Fwidgets%2Fv4%2FUniversal%3Faction%3DsbSignupWithModel%26campaignId%3Dd0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98%26campaignType%3Dsmartpop%26creativeId%3Db160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea%26iterationId%3D945939%26masterSmartpopId%3D1605%26memberId%3DUOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi%26modelPromotion%3D1%26p1%3D4522306%26quality%3D240p%26ruleId%3D3%26smartpopId%3D13951%26sourceId%3D743433%26usePreroll%3D0%26userId%3Dd100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca%26variationId%3D34450%26webp%3D1 IP 104.18.40.50:443
Requested byhttps://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=UOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 CertificateIssuerLet's Encrypt Subjectxlivrdr.com FingerprintF1:8A:E4:52:03:8A:96:88:B3:EE:D5:B5:F1:63:D0:E5:15:C4:D6:1E ValidityMon, 17 Mar 2025 10:33:05 GMT - Sun, 15 Jun 2025 10:33:04 GMT
Hashd0bc90867174734f0b1abaacb42d7cb2 eae8d5e88506bf8e5746f0070e970efff61bc5d8 494ba98b97fa050a62587c7316d68586b2d499baa50152bd46a767ddbec45e1c
GET /config?url=https%3A%2F%2Fcreative.xlivrdr.com%2Fwidgets%2Fv4%2FUniversal%3Faction%3DsbSignupWithModel%26campaignId%3Dd0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98%26campaignType%3Dsmartpop%26creativeId%3Db160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea%26iterationId%3D945939%26masterSmartpopId%3D1605%26memberId%3DUOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi%26modelPromotion%3D1%26p1%3D4522306%26quality%3D240p%26ruleId%3D3%26smartpopId%3D13951%26sourceId%3D743433%26usePreroll%3D0%26userId%3Dd100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca%26variationId%3D34450%26webp%3D1 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 06:26:37 GMT
content-type: application/json
access-control-allow-origin: https://creative.xlivrdr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
content-encoding: gzip
last-modified: Fri, 09 May 2025 06:26:37 GMT
cf-cache-status: MISS
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
cf-ray: 93cf205a4bb2569f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| go.xlivrdr.com/app/domain-checker/check-result | 104.18.40.50 | 204 No Content | 0 B |
URL POST go.xlivrdr.com/app/domain-checker/check-result IP 104.18.40.50:443
Requested byhttps://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=mzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 CertificateIssuerLet's Encrypt Subjectxlivrdr.com FingerprintF1:8A:E4:52:03:8A:96:88:B3:EE:D5:B5:F1:63:D0:E5:15:C4:D6:1E ValidityMon, 17 Mar 2025 10:33:05 GMT - Sun, 15 Jun 2025 10:33:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /app/domain-checker/check-result HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 240
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
date: Fri, 09 May 2025 06:26:38 GMT
access-control-allow-origin: https://creative.xlivrdr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
priority: u=4,i=?0
server: cloudflare
cf-ray: 93cf205eab94569f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/css/all.min.css | 104.17.24.14 | 200 OK | 59 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/css/all.min.css IP 104.17.24.14:443
CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeASCII text, with very long lines (58392) Hash76cb46c10b6c0293433b371bae2414b2 0038dc97c79451578b7bd48af60ba62282b4082b 876d023d9d10c97941b80c3b03e2a5b94631ff7a4af9cee5604a6a2d39718d84
GET /ajax/libs/font-awesome/5.13.0/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 06:26:35 GMT
content-type: text/css; charset=utf-8
content-length: 10301
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 93cf204cdfa556c9-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e60-e4d2"
last-modified: Mon, 04 May 2020 16:10:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 11047
expires: Wed, 29 Apr 2026 06:26:35 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QqQw1ayMAJIWqnwaZZCiM6x%2FkmjU9cK8R1Wub4JsB4Ul5kPclqH5gcdHedP3krHl6DTs70To1qWHQMjHSIy9rr3HEe7LG5XjMou%2BHik8TTajuH%2FSGgVwrtAbXihufLfF%2By15kegf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| t1.nhentai.net/galleries/3346895/thumb.webp | 77.247.178.1 | 200 OK | 26 kB |
URL GET t1.nhentai.net/galleries/3346895/thumb.webp IP 77.247.178.1:443
ASN#43350 NForce Entertainment B.V.
CertificateIssuerDigiCert Inc Subject*.nhentai.net Fingerprint95:16:43:9A:66:C7:70:1D:D5:79:81:E5:B2:88:59:93:F7:5F:11:35 ValiditySun, 06 Oct 2024 00:00:00 GMT - Mon, 06 Oct 2025 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 500x706, Scaling: [none]x[none], YUV color, decoders should clamp Hashb9b85c987ddf70124d413845bd7f2be6 d048fb9c91fe62b11dbac9a39994d1514532e579 4879b5c3f9a187f3f2a5f8fd3fb62019ebaa5e22f028bdfd79de17b104b7d0c6
GET /galleries/3346895/thumb.webp HTTP/1.1
Host: t1.nhentai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 06:26:36 GMT
content-type: image/webp
content-length: 26526
last-modified: Thu, 08 May 2025 08:33:08 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| nhentai.net/cdn-cgi/rum? | 104.26.5.188 | 204 No Content | 0 B |
IP 104.26.5.188:443
CertificateIssuerGoogle Trust Services Subjectnhentai.net Fingerprint60:A5:E9:05:94:DE:14:36:B4:14:4F:BA:D8:35:1F:46:A5:8F:A8:3F ValiditySun, 04 May 2025 19:41:57 GMT - Sat, 02 Aug 2025 20:41:53 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: nhentai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nhentai.net/
content-type: application/json
Content-Length: 1307
Origin: https://nhentai.net
DNT: 1
Connection: keep-alive
Cookie: session-affinity=1746771996.062.38.949888|2968378f2272707dac237fc5e1f12aaf; csrftoken=FmVMqAtiYV8DS8qO8SkWByM05DWJCIBc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 09 May 2025 06:26:37 GMT
access-control-allow-origin: https://nhentai.net
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 93cf2055caae1c06-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Noto+Sans:400,400i,700 | 142.250.74.10 | 200 OK | 9.1 kB |
URL GET fonts.googleapis.com/css?family=Noto+Sans:400,400i,700 IP 142.250.74.10:443
CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint06:13:4C:49:F4:23:BB:58:C3:31:41:0E:F9:E0:C5:EF:74:A9:0C:67 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
Hash0034f64967a99585f02b3edbad22b1af fae58bdea75d36adb0a5d5a2872bf85516b64c0c 3bd4bf8f9a655eb2807d6bb8f04f9749aa0840764c51c7526bd9810ff06f8b92
GET /css?family=Noto+Sans:400,400i,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 May 2025 06:26:35 GMT
date: Fri, 09 May 2025 06:26:35 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/webfonts/fa-solid-900.woff2 | 104.17.24.14 | 200 OK | 79 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/webfonts/fa-solid-900.woff2 IP 104.17.24.14:443
CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 79444, version 331.524 Hashb15db15f746f29ffa02638cb455b8ec0 75a88815c47a249eadb5f0edc1675957f860cca7 7f4d3fd0a705dbf8403298aad91d5de6972e6b5d536068eba8b24954a5a0a8c7
GET /ajax/libs/font-awesome/5.13.0/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nhentai.net
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 06:26:35 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 79444
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 93cf204ebb2d7131-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e60-13654"
last-modified: Mon, 04 May 2020 16:10:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 204145
expires: Wed, 29 Apr 2026 06:26:35 GMT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OKcPctO0Qlhxs7BcTlSLgl8XPzHoGvl91NxUhAAcqHuvXg9zddch%2BpE6hZq7WGF1uvphQaeTCAG8m%2FOmrPfM9xXOmPdfssOKIsy3oFytQeqXX3OpJtKxb7%2B2uutxC%2B8wrzsk5zGg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| t1.nhentai.net/galleries/3346894/thumb.webp | 77.247.178.1 | 200 OK | 23 kB |
URL GET t1.nhentai.net/galleries/3346894/thumb.webp IP 77.247.178.1:443
ASN#43350 NForce Entertainment B.V.
CertificateIssuerDigiCert Inc Subject*.nhentai.net Fingerprint95:16:43:9A:66:C7:70:1D:D5:79:81:E5:B2:88:59:93:F7:5F:11:35 ValiditySun, 06 Oct 2024 00:00:00 GMT - Mon, 06 Oct 2025 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 500x707, Scaling: [none]x[none], YUV color, decoders should clamp Hashac77728f10a1028423c9b508c8da9294 6bdda9336d943cc20500c009259bdf3239d0189b a13fbd0f19e54c0334fba4f7d3ac852d33e3350cd4ea35d14d0b2f50c52e36dc
GET /galleries/3346894/thumb.webp HTTP/1.1
Host: t1.nhentai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 06:26:36 GMT
content-type: image/webp
content-length: 22818
last-modified: Thu, 08 May 2025 08:32:08 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| t1.nhentai.net/galleries/3346891/thumb.jpg.webp | 77.247.178.1 | 200 OK | 18 kB |
URL GET t1.nhentai.net/galleries/3346891/thumb.jpg.webp IP 77.247.178.1:443
ASN#43350 NForce Entertainment B.V.
CertificateIssuerDigiCert Inc Subject*.nhentai.net Fingerprint95:16:43:9A:66:C7:70:1D:D5:79:81:E5:B2:88:59:93:F7:5F:11:35 ValiditySun, 06 Oct 2024 00:00:00 GMT - Mon, 06 Oct 2025 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 500x375, Scaling: [none]x[none], YUV color, decoders should clamp Hash4829360f797aaf1529565f59b4cc1abe d02b8866ad4196a88fe96a31871cca5258e6eeaa fc4e74aed92a2a90c1b1d53eefc9a43e0bedd48a3c129306b74d5670151e7195
GET /galleries/3346891/thumb.jpg.webp HTTP/1.1
Host: t1.nhentai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 06:26:36 GMT
content-type: image/webp
content-length: 17630
last-modified: Thu, 08 May 2025 08:24:07 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| t1.nhentai.net/galleries/3346865/thumb.webp | 77.247.178.1 | 200 OK | 72 kB |
URL GET t1.nhentai.net/galleries/3346865/thumb.webp IP 77.247.178.1:443
ASN#43350 NForce Entertainment B.V.
CertificateIssuerDigiCert Inc Subject*.nhentai.net Fingerprint95:16:43:9A:66:C7:70:1D:D5:79:81:E5:B2:88:59:93:F7:5F:11:35 ValiditySun, 06 Oct 2024 00:00:00 GMT - Mon, 06 Oct 2025 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 500x713, Scaling: [none]x[none], YUV color, decoders should clamp Hash358c48759b95bead3c7c032c4befd771 dec493d77ef1eb6a188f4f29c58d72d2e43084b2 06221d6a608570a068ace0fb825d10494a46d1591aee3ecf7125fae4865a2d16
GET /galleries/3346865/thumb.webp HTTP/1.1
Host: t1.nhentai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 06:26:36 GMT
content-type: image/webp
content-length: 72190
last-modified: Thu, 08 May 2025 07:37:46 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| acdn.tsyndicate.com/images/4/8/5a62e4b80693552ab4a94c2137aa65e76d103e.jpg | 45.133.44.70 | 200 OK | 4.0 kB |
URL GET acdn.tsyndicate.com/images/4/8/5a62e4b80693552ab4a94c2137aa65e76d103e.jpg IP 45.133.44.70:443
ASN#39572 DataWeb Global Group B.V.
CertificateIssuerLet's Encrypt Subjectacdn.tsyndicate.com Fingerprint7B:F2:5B:6E:AC:FE:5C:E7:F9:F5:2A:2A:97:D1:54:A4:94:BA:BA:3A ValidityTue, 25 Mar 2025 02:32:44 GMT - Mon, 23 Jun 2025 02:32:43 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, comment: "JPG edited with https://ezgif.com/resize", baseline, precision 8, 192x192, components 3 Hashd662272cf4d1b61b747e00d57f610173 c853a2a7fe36ac9ca36e726adccaa712262fb155 c621d245b85b8791d9419ba3a4bccd3ca6b4f0adccc3967bed4d3a18c345d7a0
GET /images/4/8/5a62e4b80693552ab4a94c2137aa65e76d103e.jpg HTTP/1.1
Host: acdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 06:26:36 GMT
content-type: image/jpeg
content-length: 4013
server: nginx
last-modified: Tue, 20 Feb 2024 13:25:32 GMT
etag: "65d4a84c-fad"
x-robots-tag: noindex, nofollow
cache-control: max-age=172800
expires: Sun, 11 May 2025 06:26:36 GMT
vary: Accept-Encoding
x-cdn-host-id: ah1742,ds5859
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| go.xlivrdr.com/smartpop/d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&sourceId=743433&memberId=UOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi&p1=4522306 | 104.18.40.50 | 302 Found | 790 B |
URL GET go.xlivrdr.com/smartpop/d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&sourceId=743433&memberId=UOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi&p1=4522306 IP 104.18.40.50:443
CertificateIssuerLet's Encrypt Subjectxlivrdr.com FingerprintF1:8A:E4:52:03:8A:96:88:B3:EE:D5:B5:F1:63:D0:E5:15:C4:D6:1E ValidityMon, 17 Mar 2025 10:33:05 GMT - Sun, 15 Jun 2025 10:33:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smartpop/d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&sourceId=743433&memberId=UOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi&p1=4522306 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nhentai.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 09 May 2025 06:26:37 GMT
content-length: 0
location: https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=UOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 93cf2056e831b4f1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.tsyndicate.com/sdk/v1/master.spot.js | 45.133.44.71 | 200 OK | 39 kB |
URL GET cdn.tsyndicate.com/sdk/v1/master.spot.js IP 45.133.44.71:443
ASN#39572 DataWeb Global Group B.V.
CertificateIssuerLet's Encrypt Subjectcdn.tsyndicate.com FingerprintC8:21:B5:22:CE:B2:90:D0:CE:CF:F7:57:FA:B4:14:52:BA:AF:3B:EF ValidityFri, 04 Apr 2025 07:32:05 GMT - Thu, 03 Jul 2025 07:32:04 GMT
File typeJavaScript source, ASCII text, with very long lines (39321) Hash36301405ab0c7f29ad3726be3acca062 150d7269ae3e134cd4a916794918615591988b90 54df2fec49d8587a174d75ab4bd63b9ab0552f33be1621f6e587e3d97c292b8a
GET /sdk/v1/master.spot.js HTTP/1.1
Host: cdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 06:26:36 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Tue, 29 Apr 2025 08:54:09 GMT
etag: W/"681093b1-99f1"
x-robots-tag: noindex, nofollow
content-encoding: gzip
cache-control: max-age=172800
expires: Sun, 11 May 2025 06:26:36 GMT
vary: Accept-Encoding
x-cdn-host-id: ds9612,ds9893
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| t1.nhentai.net/galleries/3346584/thumb.webp | 77.247.178.1 | 200 OK | 23 kB |
URL GET t1.nhentai.net/galleries/3346584/thumb.webp IP 77.247.178.1:443
ASN#43350 NForce Entertainment B.V.
CertificateIssuerDigiCert Inc Subject*.nhentai.net Fingerprint95:16:43:9A:66:C7:70:1D:D5:79:81:E5:B2:88:59:93:F7:5F:11:35 ValiditySun, 06 Oct 2024 00:00:00 GMT - Mon, 06 Oct 2025 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 500x706, Scaling: [none]x[none], YUV color, decoders should clamp Hashc26167be1a3fb19e916ac6634bdc5bbd e1f4deee0d42cb019e50f99045a21356b6acd122 7995e3642de10be5b9924756b0317e5435234027b45c0903d77af6d7ad3ebced
GET /galleries/3346584/thumb.webp HTTP/1.1
Host: t1.nhentai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 06:26:36 GMT
content-type: image/webp
content-length: 23444
last-modified: Thu, 08 May 2025 03:52:27 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| acdn.tsyndicate.com/sdk/v1/b.b.js | 45.133.44.70 | 200 OK | 6.1 kB |
URL GET acdn.tsyndicate.com/sdk/v1/b.b.js IP 45.133.44.70:443
ASN#39572 DataWeb Global Group B.V.
CertificateIssuerLet's Encrypt Subjectacdn.tsyndicate.com Fingerprint7B:F2:5B:6E:AC:FE:5C:E7:F9:F5:2A:2A:97:D1:54:A4:94:BA:BA:3A ValidityTue, 25 Mar 2025 02:32:44 GMT - Mon, 23 Jun 2025 02:32:43 GMT
File typeJavaScript source, ASCII text, with very long lines (6010) Hash92c690d5b14c53acfab5947ac24f0a09 bb5c242bac6ffd5239f499a275b86021e3d81d58 5630a4a1aa06d48e00c92864550d122ba338f592e60c7951ec94d5cd2b22a079
GET /sdk/v1/b.b.js HTTP/1.1
Host: acdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nhentai.net/
Cookie: cookie_user_id=d3d756cf-01a3-4d93-a733-97fa98551c38
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 06:26:37 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Fri, 28 Mar 2025 14:49:24 GMT
etag: W/"67e6b6f4-17ca"
x-robots-tag: noindex, nofollow
content-encoding: gzip
cache-control: max-age=172800
expires: Sun, 11 May 2025 06:26:37 GMT
vary: Accept-Encoding
x-cdn-host-id: ds9611,ds9612,ah1742,ds5859
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| creative.xlivrdr.com/static/2025831e/s/widgets/v4/Universal/lang/en.json | 188.114.96.1 | 200 OK | 172 B |
URL GET creative.xlivrdr.com/static/2025831e/s/widgets/v4/Universal/lang/en.json IP 188.114.96.1:443
Requested byhttps://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=UOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 CertificateIssuerLet's Encrypt Subjectxlivrdr.com FingerprintF1:8A:E4:52:03:8A:96:88:B3:EE:D5:B5:F1:63:D0:E5:15:C4:D6:1E ValidityMon, 17 Mar 2025 10:33:05 GMT - Sun, 15 Jun 2025 10:33:04 GMT
Hash69a54638b649d7ce4748bd42c4b6dade a2dfe9f8791952fbc5cc44d4757b031a6cee1731 0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750
GET /static/2025831e/s/widgets/v4/Universal/lang/en.json HTTP/1.1
Host: creative.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=UOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 06:26:37 GMT
content-type: application/json
access-control-expose-headers: Content-Disposition
content-disposition: inline; filename="en.json"
etag: W/"69a54638b649d7ce4748bd42c4b6dade"
last-modified: Wed, 07 May 2025 11:04:18 GMT
cache-control: max-age=10
expires: Fri, 09 May 2025 06:26:44 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: HIT
age: 3
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=015SrMXWeWj7LHUO0aDuR0A1KSI8R4nN6R4JiCwb%2Bm8fK607C9O4nHDq0FdsERl9yqdfwodV4lKkC0z8GfM2hI0X3IEd6JiR3VEMpG9Zv4cqE1e0POIxZP3mCYaA3JhZ6FE%2Fc4%2FAtg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93cf205a2c96b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1927&min_rtt=1134&rtt_var=626&sent=330&recv=23&lost=0&retrans=0&sent_bytes=373001&recv_bytes=4396&delivery_rate=13048441&cwnd=254400&unsent_bytes=0&cid=113a8adf1aa4fb20&ts=390&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| go.xlivrdr.com/config?url=https%3A%2F%2Fcreative.xlivrdr.com%2Fwidgets%2Fv4%2FUniversal%3Faction%3DsbSignupWithModel%26campaignId%3Dd0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98%26campaignType%3Dsmartpop%26creativeId%3Db160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea%26iterationId%3D945939%26masterSmartpopId%3D1605%26memberId%3DmzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi%26modelPromotion%3D1%26p1%3D4522306%26quality%3D240p%26ruleId%3D3%26smartpopId%3D13951%26sourceId%3D743433%26usePreroll%3D0%26userId%3Dd100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca%26variationId%3D34450%26webp%3D1 | 104.18.40.50 | 200 OK | 7.3 kB |
URL GET go.xlivrdr.com/config?url=https%3A%2F%2Fcreative.xlivrdr.com%2Fwidgets%2Fv4%2FUniversal%3Faction%3DsbSignupWithModel%26campaignId%3Dd0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98%26campaignType%3Dsmartpop%26creativeId%3Db160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea%26iterationId%3D945939%26masterSmartpopId%3D1605%26memberId%3DmzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi%26modelPromotion%3D1%26p1%3D4522306%26quality%3D240p%26ruleId%3D3%26smartpopId%3D13951%26sourceId%3D743433%26usePreroll%3D0%26userId%3Dd100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca%26variationId%3D34450%26webp%3D1 IP 104.18.40.50:443
Requested byhttps://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=mzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 CertificateIssuerLet's Encrypt Subjectxlivrdr.com FingerprintF1:8A:E4:52:03:8A:96:88:B3:EE:D5:B5:F1:63:D0:E5:15:C4:D6:1E ValidityMon, 17 Mar 2025 10:33:05 GMT - Sun, 15 Jun 2025 10:33:04 GMT
Hashdbd4685f5e10d757d615ecbb70ef4a5a e4a30405467f7b84b8f524fd7cc89744cd545597 12b2a05fc3e827b1cb6bd8c22d27b22bdd4c721ce37d5a47e80d7ffa0dfdb2cb
GET /config?url=https%3A%2F%2Fcreative.xlivrdr.com%2Fwidgets%2Fv4%2FUniversal%3Faction%3DsbSignupWithModel%26campaignId%3Dd0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98%26campaignType%3Dsmartpop%26creativeId%3Db160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea%26iterationId%3D945939%26masterSmartpopId%3D1605%26memberId%3DmzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi%26modelPromotion%3D1%26p1%3D4522306%26quality%3D240p%26ruleId%3D3%26smartpopId%3D13951%26sourceId%3D743433%26usePreroll%3D0%26userId%3Dd100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca%26variationId%3D34450%26webp%3D1 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 06:26:38 GMT
content-type: application/json
access-control-allow-origin: https://creative.xlivrdr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
content-encoding: gzip
last-modified: Fri, 09 May 2025 06:26:37 GMT
cf-cache-status: MISS
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
cf-ray: 93cf205a7beb569f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| nhentai.net/static/img/logo.090da3be7b51.svg | 104.26.5.188 | 200 OK | 1.5 kB |
URL GET nhentai.net/static/img/logo.090da3be7b51.svg IP 104.26.5.188:443
CertificateIssuerGoogle Trust Services Subjectnhentai.net Fingerprint60:A5:E9:05:94:DE:14:36:B4:14:4F:BA:D8:35:1F:46:A5:8F:A8:3F ValiditySun, 04 May 2025 19:41:57 GMT - Sat, 02 Aug 2025 20:41:53 GMT
File typeSVG Scalable Vector Graphics image Hashc66f484658ee6ee4ec95f79c1b750f13 b708de01b799f6a2cdc6c8e22f3985bdfe6d31a8 3a747acf233e20a9613cfac8906a95fcb91a350d98181cd4f7b75b4915274c3b
GET /static/img/logo.090da3be7b51.svg HTTP/1.1
Host: nhentai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nhentai.net/
DNT: 1
Connection: keep-alive
Cookie: session-affinity=1746771996.062.38.949888|2968378f2272707dac237fc5e1f12aaf; csrftoken=FmVMqAtiYV8DS8qO8SkWByM05DWJCIBc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 06:26:35 GMT
content-type: image/svg+xml
last-modified: Sun, 13 Apr 2025 03:23:38 GMT
etag: W/"67fb2e3a-5f3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: HIT
age: 104740
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H9r851qKvAZ6g3b3zncbVfa2Q7rGEkgXrQV3zubuOcOn3cwPRkK56tf3rmc9vqimzRlA%2FFKcFc%2BbK%2Faju9bOBhhaLFAcm%2FihaRzHAmkfxx%2FVW079qaaAE6aaXFzl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93cf204c9eae1c06-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=2685&min_rtt=445&rtt_var=4269&sent=18&recv=21&lost=0&retrans=0&sent_bytes=10002&recv_bytes=1578&delivery_rate=11277258&cwnd=257&unsent_bytes=0&cid=a72aef3133888019&ts=632&x=0"
X-Firefox-Spdy: h2
|
|
| t1.nhentai.net/galleries/3346887/thumb.webp | 77.247.178.1 | 200 OK | 35 kB |
URL GET t1.nhentai.net/galleries/3346887/thumb.webp IP 77.247.178.1:443
ASN#43350 NForce Entertainment B.V.
CertificateIssuerDigiCert Inc Subject*.nhentai.net Fingerprint95:16:43:9A:66:C7:70:1D:D5:79:81:E5:B2:88:59:93:F7:5F:11:35 ValiditySun, 06 Oct 2024 00:00:00 GMT - Mon, 06 Oct 2025 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 500x710, Scaling: [none]x[none], YUV color, decoders should clamp Hasha9a2ad0d017fda08ddaa85eed5592ecd 7306483ac3f63bc25d9f3f91033f5bfc4fdcc485 a99045b344cb08973e6b2c658ad631eb6b5137ca7447417e0361bd27cd165aa8
GET /galleries/3346887/thumb.webp HTTP/1.1
Host: t1.nhentai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 06:26:36 GMT
content-type: image/webp
content-length: 35150
last-modified: Thu, 08 May 2025 08:16:02 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| nhentai.net/static/js/scripts.9659e62d57d4.js | 104.26.5.188 | 200 OK | 191 kB |
URL GET nhentai.net/static/js/scripts.9659e62d57d4.js IP 104.26.5.188:443
CertificateIssuerGoogle Trust Services Subjectnhentai.net Fingerprint60:A5:E9:05:94:DE:14:36:B4:14:4F:BA:D8:35:1F:46:A5:8F:A8:3F ValiditySun, 04 May 2025 19:41:57 GMT - Sat, 02 Aug 2025 20:41:53 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65504), with no line terminators Size191 kB (191432 bytes) Hashdcbb9c88c2a976f8b06970bb425b436e d61c3bfec79db77fe224e6f5d3d2748b3122fb5b 494c01020240964391d42f44d8d4c8756d18faa56883c9715381191eb1e6bafa
GET /static/js/scripts.9659e62d57d4.js HTTP/1.1
Host: nhentai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nhentai.net/
DNT: 1
Connection: keep-alive
Cookie: session-affinity=1746771996.062.38.949888|2968378f2272707dac237fc5e1f12aaf; csrftoken=FmVMqAtiYV8DS8qO8SkWByM05DWJCIBc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 06:26:35 GMT
content-type: application/javascript
last-modified: Sun, 13 Apr 2025 03:23:38 GMT
etag: W/"67fb2e3a-2ebc8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: HIT
age: 97786
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aty8%2FHMEZ3d8dZIztnEwV35D66NicspQIplPM01V1S4nHrb8YQv1YcuQCFL223zkWkhwlN2NNAvB3koTv5K8OzJXkV4WEHDYBIjn9gXzYuvEiGsKjr6wMWJQcm0j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93cf204c9ea81c06-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=945&min_rtt=445&rtt_var=499&sent=33&recv=36&lost=0&retrans=0&sent_bytes=26675&recv_bytes=1578&delivery_rate=19700680&cwnd=257&unsent_bytes=0&cid=a72aef3133888019&ts=654&x=0"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/notosans/v39/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2 | 142.250.74.35 | 200 OK | 36 kB |
URL GET fonts.gstatic.com/s/notosans/v39/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2 IP 142.250.74.35:443
CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 35832, version 1.0 Hash5b90942f3d9d6636cc70a2d56ef84663 ae7aacfc3258d2c84f8ff49a90afcd121b4d4d37 bf9245342d2e64845487ebd41dbbe26d52952292e4fbdad99a82ce9365db337b
GET /s/notosans/v39/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nhentai.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 May 2025 09:21:58 GMT
expires: Fri, 08 May 2026 09:21:58 GMT
cache-control: public, max-age=31536000
age: 75878
last-modified: Tue, 11 Mar 2025 01:08:13 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImyIkWEjR4wcNlqYiVFDRgsaOWSQaSHGzBgYLW7YMBMGRhkyZmbEuIFDhMMwdcZghHjjRo4yNEzOwCEmx8kyMcS0wGFjBkyIYsbgwGF15FafD8nYmUjjRgwcDuHUEbNwhoyzM37CgbNQRg0bXB3OgSNRB42SMqzacNhmb9-_MgLHiCtiTBu6DGnMkMzYoJm6DUWIceNmIY0YMnLkmJGDsJuLOhYnhpG2zem6MnDUYC2iTgyMaOjQgTNHx4sXZ964wMMmjR05ZOS4GPOmzYs5bcLI2f0GzgsyMMLYgFGDzGiSb83kwEGGJ4ymM8jUeHk0R5gaOtXjkMEzJQ0b9M3AoP9SzEEc-x10Qxnj_VDHHAglQUYPZMQAAwxm3IBTVEuVdMMYNeRghgw1xTBGGTbUQF5LYjDVUUcojQGaivd5ZAMNZtAAAw4x2CAhDWF4GAYXdTzI0Rxv1CHHhwr2cINklPHoow1tlNGGGAkuWMUTSUCBxx1oMKFEEUM0EUQdUxhlxRNU4DAGDTSoIUcdOJxhhRxEBLEEGVBYccQddgxxRhFfuHHDFEcUUYUReLRQQx4z9CgEGU9k98YdVcCRxRBwFGEEFl_OcAUVMgRxhBp1ZDHFGk_EEIVrehTXgh5TiMHEEjlQ0QQTWNQQBx05RATDF2dUkQQRUlSRhpL72QBHDD0gFhgMNoBFRnMYuUGQG3SEkYYLbpQhkUNjhNHXFjWwUGMXaQ05URktcOdQSwvB4AIMFDUGRxtfwGGuDu4-iJ9DctgB2VIOlTHGvO2-G28ddaSBERnp3XDXGGakG0MYM5zkXcVh3DBDxTncQNN4NdTg4VJgpQGZCB65kIO7SblAEg1gyfGFyRilvLILLb8MVh1hYNTEG3qkwQYbYbxQw7sgoHBFGm48e8ccIDhBBQgOvrsDCEu78eLVeGwNQr-pTfZuCiAcIfAab7wgA7wPOhgDCEakIUcZZryBxwuL0fAuWGMIpYMITjwB1hsy941R4GCx4bcIRTjhbBl2fDE3GxPVUBRXeD3I7xmd6WAXDpkdFLkYciy0lUOif9HGG2TURVW8yb3RlkNvKORXuXbnsVC4Ishsb-67o55H53SsWQbqkH9Bhx4YwQDWHRg5KAPMDqERfWzO69UvRnK8US0dhLdQhxtp0HFSDC6QIcPgc2yvg06iybSxjagvftAX6oNFRxsTHWmjWfGrSBvWlxr_FeUjHWMWWsIiuTLs5Qve6t99DhhAESQvDGxACB1stwWdkOshYuiLCA5CkzqwYVsigIPi2sUt1NBmDNbTwRZEAJYaOsSGNLyhDnPIQxzWsAt9UEBAAA%3D%3D&s=8a65b75309d16699078eb872ccc785580d421ba04cb6456e4a0e45ea734299161746771997&w=t&r=1&d=667&priv=true | 95.216.34.183 | 200 OK | 24 B |
URL GET pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImyIkWEjR4wcNlqYiVFDRgsaOWSQaSHGzBgYLW7YMBMGRhkyZmbEuIFDhMMwdcZghHjjRo4yNEzOwCEmx8kyMcS0wGFjBkyIYsbgwGF15FafD8nYmUjjRgwcDuHUEbNwhoyzM37CgbNQRg0bXB3OgSNRB42SMqzacNhmb9-_MgLHiCtiTBu6DGnMkMzYoJm6DUWIceNmIY0YMnLkmJGDsJuLOhYnhpG2zem6MnDUYC2iTgyMaOjQgTNHx4sXZ964wMMmjR05ZOS4GPOmzYs5bcLI2f0GzgsyMMLYgFGDzGiSb83kwEGGJ4ymM8jUeHk0R5gaOtXjkMEzJQ0b9M3AoP9SzEEc-x10Qxnj_VDHHAglQUYPZMQAAwxm3IBTVEuVdMMYNeRghgw1xTBGGTbUQF5LYjDVUUcojQGaivd5ZAMNZtAAAw4x2CAhDWF4GAYXdTzI0Rxv1CHHhwr2cINklPHoow1tlNGGGAkuWMUTSUCBxx1oMKFEEUM0EUQdUxhlxRNU4DAGDTSoIUcdOJxhhRxEBLEEGVBYccQddgxxRhFfuHHDFEcUUYUReLRQQx4z9CgEGU9k98YdVcCRxRBwFGEEFl_OcAUVMgRxhBp1ZDHFGk_EEIVrehTXgh5TiMHEEjlQ0QQTWNQQBx05RATDF2dUkQQRUlSRhpL72QBHDD0gFhgMNoBFRnMYuUGQG3SEkYYLbpQhkUNjhNHXFjWwUGMXaQ05URktcOdQSwvB4AIMFDUGRxtfwGGuDu4-iJ9DctgB2VIOlTHGvO2-G28ddaSBERnp3XDXGGakG0MYM5zkXcVh3DBDxTncQNN4NdTg4VJgpQGZCB65kIO7SblAEg1gyfGFyRilvLILLb8MVh1hYNTEG3qkwQYbYbxQw7sgoHBFGm48e8ccIDhBBQgOvrsDCEu78eLVeGwNQr-pTfZuCiAcIfAab7wgA7wPOhgDCEakIUcZZryBxwuL0fAuWGMIpYMITjwB1hsy941R4GCx4bcIRTjhbBl2fDE3GxPVUBRXeD3I7xmd6WAXDpkdFLkYciy0lUOif9HGG2TURVW8yb3RlkNvKORXuXbnsVC4Ishsb-67o55H53SsWQbqkH9Bhx4YwQDWHRg5KAPMDqERfWzO69UvRnK8US0dhLdQhxtp0HFSDC6QIcPgc2yvg06iybSxjagvftAX6oNFRxsTHWmjWfGrSBvWlxr_FeUjHWMWWsIiuTLs5Qve6t99DhhAESQvDGxACB1stwWdkOshYuiLCA5CkzqwYVsigIPi2sUt1NBmDNbTwRZEAJYaOsSGNLyhDnPIQxzWsAt9UEBAAA%3D%3D&s=8a65b75309d16699078eb872ccc785580d421ba04cb6456e4a0e45ea734299161746771997&w=t&r=1&d=667&priv=true IP 95.216.34.183:443
ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjecttsyndicate.com Fingerprint1D:36:B3:AC:76:33:5C:64:BB:85:FE:5B:BA:AC:41:0D:8B:F7:20:65 ValidityTue, 25 Mar 2025 00:07:40 GMT - Mon, 23 Jun 2025 00:07:39 GMT
File typeASCII text, with no line terminators Hash0959ba36d476b6dc1994ba3c678b07c4 d30b94da72daa02766965206a85b7e0356375f5e 897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImyIkWEjR4wcNlqYiVFDRgsaOWSQaSHGzBgYLW7YMBMGRhkyZmbEuIFDhMMwdcZghHjjRo4yNEzOwCEmx8kyMcS0wGFjBkyIYsbgwGF15FafD8nYmUjjRgwcDuHUEbNwhoyzM37CgbNQRg0bXB3OgSNRB42SMqzacNhmb9-_MgLHiCtiTBu6DGnMkMzYoJm6DUWIceNmIY0YMnLkmJGDsJuLOhYnhpG2zem6MnDUYC2iTgyMaOjQgTNHx4sXZ964wMMmjR05ZOS4GPOmzYs5bcLI2f0GzgsyMMLYgFGDzGiSb83kwEGGJ4ymM8jUeHk0R5gaOtXjkMEzJQ0b9M3AoP9SzEEc-x10Qxnj_VDHHAglQUYPZMQAAwxm3IBTVEuVdMMYNeRghgw1xTBGGTbUQF5LYjDVUUcojQGaivd5ZAMNZtAAAw4x2CAhDWF4GAYXdTzI0Rxv1CHHhwr2cINklPHoow1tlNGGGAkuWMUTSUCBxx1oMKFEEUM0EUQdUxhlxRNU4DAGDTSoIUcdOJxhhRxEBLEEGVBYccQddgxxRhFfuHHDFEcUUYUReLRQQx4z9CgEGU9k98YdVcCRxRBwFGEEFl_OcAUVMgRxhBp1ZDHFGk_EEIVrehTXgh5TiMHEEjlQ0QQTWNQQBx05RATDF2dUkQQRUlSRhpL72QBHDD0gFhgMNoBFRnMYuUGQG3SEkYYLbpQhkUNjhNHXFjWwUGMXaQ05URktcOdQSwvB4AIMFDUGRxtfwGGuDu4-iJ9DctgB2VIOlTHGvO2-G28ddaSBERnp3XDXGGakG0MYM5zkXcVh3DBDxTncQNN4NdTg4VJgpQGZCB65kIO7SblAEg1gyfGFyRilvLILLb8MVh1hYNTEG3qkwQYbYbxQw7sgoHBFGm48e8ccIDhBBQgOvrsDCEu78eLVeGwNQr-pTfZuCiAcIfAab7wgA7wPOhgDCEakIUcZZryBxwuL0fAuWGMIpYMITjwB1hsy941R4GCx4bcIRTjhbBl2fDE3GxPVUBRXeD3I7xmd6WAXDpkdFLkYciy0lUOif9HGG2TURVW8yb3RlkNvKORXuXbnsVC4Ishsb-67o55H53SsWQbqkH9Bhx4YwQDWHRg5KAPMDqERfWzO69UvRnK8US0dhLdQhxtp0HFSDC6QIcPgc2yvg06iybSxjagvftAX6oNFRxsTHWmjWfGrSBvWlxr_FeUjHWMWWsIiuTLs5Qve6t99DhhAESQvDGxACB1stwWdkOshYuiLCA5CkzqwYVsigIPi2sUt1NBmDNbTwRZEAJYaOsSGNLyhDnPIQxzWsAt9UEBAAA%3D%3D&s=8a65b75309d16699078eb872ccc785580d421ba04cb6456e4a0e45ea734299161746771997&w=t&r=1&d=667&priv=true HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nhentai.net/
Cookie: cookie_user_id=d3d756cf-01a3-4d93-a733-97fa98551c38
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 06:26:37 GMT
content-type: text/javascript
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
|
|
| pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImjggCGGzAwbZFqECVNDTAsaM8TAaJEjRhmTOG7kGCNGIw4cMkCKcBimzhiMEG_ILENDRosZOMTkOFkmBkwbM1ZCFDPmZlQzMW7ufEjGzkQaN7I6hFNHzMIZMrLO4AkHzkIZNWzgWCtiDhyJOmjUkCEjqg2Hbezi1ct3Rgy6Y9q4ZYgSJV2DZt42FCHGjZuFNGLIyJFjRg7Abi7qOMwXxtg2od_KwFHDtIg6MTCioUMHzhwdL16ceeMCD5s0duSQkeNizJs2L-a0CSOn9hs4L8jACGMDRg0ynWPsjWEmBw4yNzYqnUGmxhgYOcrkIGm4PM7wOWTQsCHjhhkY9c93LLNRxsEb6uHwQx1zIJQEGT2QEQMMMJhxAxlYiYHUXjeMUUMOZsgQBgwxjFGGDTV8J4YZYiRlQw4n0jCTZmPEMF9LNtBgBg0w4BCDDQ_SEEaHYXBRB4M5zfFGHXJ4eGAPNzQ2www-AmlDG2W0IYaBCLahRxFNzEHDcWx8MQUSU5xR0wxXyACDEmgs4UYWb8iAxBBlCJFFDm-4cccM_J0RRxxs4KCGEWagcYNIWdgxRB6euZFDeC3g4MQaZ8yoRBRa1HCDHDc4cUURbLSBXhlS2PAGE0ZQscQVb1ChRRYtGEEHElfKYUMRQhAxxhNWwMFEHl-cUUUSREhRRRpN4mcDHDH0QFhfMNiwFRnHYeQGQW7QEUYaLrhRhkQOjREGXlvUwMKNXYxV5ERltGCdQyMuBIMLHHYLRxtfwHGuDu8ySJ9DctixGFIOlTHGvO7CS9FrdaSBkUfgxTWGGerGEMYMJ2FHcRg3LMmSfWF4V0MNHSK1VRqLidCSCzm8W5QL2tGwlRxfkIzRySm7sHLLW9URBkZNvKFHGmywEcYLNcALAgpXpOEGtHfMAYITVICwILw7gJC0GzFWjUfWIPQ72gw0wJsCCEcIvMYbL5i5IIccgmBEGnKUYcYbeLxwWNgwbDXGTzqI4MQTW70B894Y_b0VG3yLUIQTz5ZhxxdxszGRpeF9tJFrcpxxmQ5wxeTQQY-LIcdCN33u-BdtvEHGWzjYcPBwb5zl0BsK5WUu3XksJK4IMNuLu-6f57E5HXLUUYbpj9OhB0Z5O3QHRgvKtxUa0K_WfF39YiTHG9bSIXgLdbiRBh0nxeACGTIEPkf2OhjG2Q1QfTQZGYkf9AX6W9HRxkRJ4hjW-xVpQ_pG0z-hxOB9zcIBT8gAuTLY5Qvf4t98DAhAEZwuDGxACB1qtwXDlOshYsCLCA5ihp6wgVsigAPi3NUt0bhmDNTTwRZEsJUaOsSGNLyhDnPIQxzWsAt9UEBAAA%3D%3D&s=1287c691d4712c2d3343ab28c9a6dc11b11ad470dac9c382c9e5facf6a317df51746771997&w=t&r=1&d=656&priv=true | 95.216.34.183 | 200 OK | 24 B |
URL GET pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImjggCGGzAwbZFqECVNDTAsaM8TAaJEjRhmTOG7kGCNGIw4cMkCKcBimzhiMEG_ILENDRosZOMTkOFkmBkwbM1ZCFDPmZlQzMW7ufEjGzkQaN7I6hFNHzMIZMrLO4AkHzkIZNWzgWCtiDhyJOmjUkCEjqg2Hbezi1ct3Rgy6Y9q4ZYgSJV2DZt42FCHGjZuFNGLIyJFjRg7Abi7qOMwXxtg2od_KwFHDtIg6MTCioUMHzhwdL16ceeMCD5s0duSQkeNizJs2L-a0CSOn9hs4L8jACGMDRg0ynWPsjWEmBw4yNzYqnUGmxhgYOcrkIGm4PM7wOWTQsCHjhhkY9c93LLNRxsEb6uHwQx1zIJQEGT2QEQMMMJhxAxlYiYHUXjeMUUMOZsgQBgwxjFGGDTV8J4YZYiRlQw4n0jCTZmPEMF9LNtBgBg0w4BCDDQ_SEEaHYXBRB4M5zfFGHXJ4eGAPNzQ2www-AmlDG2W0IYaBCLahRxFNzEHDcWx8MQUSU5xR0wxXyACDEmgs4UYWb8iAxBBlCJFFDm-4cccM_J0RRxxs4KCGEWagcYNIWdgxRB6euZFDeC3g4MQaZ8yoRBRa1HCDHDc4cUURbLSBXhlS2PAGE0ZQscQVb1ChRRYtGEEHElfKYUMRQhAxxhNWwMFEHl-cUUUSREhRRRpN4mcDHDH0QFhfMNiwFRnHYeQGQW7QEUYaLrhRhkQOjREGXlvUwMKNXYxV5ERltGCdQyMuBIMLHHYLRxtfwHGuDu8ySJ9DctixGFIOlTHGvO7CS9FrdaSBkUfgxTWGGerGEMYMJ2FHcRg3LMmSfWF4V0MNHSK1VRqLidCSCzm8W5QL2tGwlRxfkIzRySm7sHLLW9URBkZNvKFHGmywEcYLNcALAgpXpOEGtHfMAYITVICwILw7gJC0GzFWjUfWIPQ72gw0wJsCCEcIvMYbL5i5IIccgmBEGnKUYcYbeLxwWNgwbDXGTzqI4MQTW70B894Y_b0VG3yLUIQTz5ZhxxdxszGRpeF9tJFrcpxxmQ5wxeTQQY-LIcdCN33u-BdtvEHGWzjYcPBwb5zl0BsK5WUu3XksJK4IMNuLu-6f57E5HXLUUYbpj9OhB0Z5O3QHRgvKtxUa0K_WfF39YiTHG9bSIXgLdbiRBh0nxeACGTIEPkf2OhjG2Q1QfTQZGYkf9AX6W9HRxkRJ4hjW-xVpQ_pG0z-hxOB9zcIBT8gAuTLY5Qvf4t98DAhAEZwuDGxACB1qtwXDlOshYsCLCA5ihp6wgVsigAPi3NUt0bhmDNTTwRZEsJUaOsSGNLyhDnPIQxzWsAt9UEBAAA%3D%3D&s=1287c691d4712c2d3343ab28c9a6dc11b11ad470dac9c382c9e5facf6a317df51746771997&w=t&r=1&d=656&priv=true IP 95.216.34.183:443
ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjecttsyndicate.com Fingerprint1D:36:B3:AC:76:33:5C:64:BB:85:FE:5B:BA:AC:41:0D:8B:F7:20:65 ValidityTue, 25 Mar 2025 00:07:40 GMT - Mon, 23 Jun 2025 00:07:39 GMT
File typeASCII text, with no line terminators Hash0959ba36d476b6dc1994ba3c678b07c4 d30b94da72daa02766965206a85b7e0356375f5e 897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImjggCGGzAwbZFqECVNDTAsaM8TAaJEjRhmTOG7kGCNGIw4cMkCKcBimzhiMEG_ILENDRosZOMTkOFkmBkwbM1ZCFDPmZlQzMW7ufEjGzkQaN7I6hFNHzMIZMrLO4AkHzkIZNWzgWCtiDhyJOmjUkCEjqg2Hbezi1ct3Rgy6Y9q4ZYgSJV2DZt42FCHGjZuFNGLIyJFjRg7Abi7qOMwXxtg2od_KwFHDtIg6MTCioUMHzhwdL16ceeMCD5s0duSQkeNizJs2L-a0CSOn9hs4L8jACGMDRg0ynWPsjWEmBw4yNzYqnUGmxhgYOcrkIGm4PM7wOWTQsCHjhhkY9c93LLNRxsEb6uHwQx1zIJQEGT2QEQMMMJhxAxlYiYHUXjeMUUMOZsgQBgwxjFGGDTV8J4YZYiRlQw4n0jCTZmPEMF9LNtBgBg0w4BCDDQ_SEEaHYXBRB4M5zfFGHXJ4eGAPNzQ2www-AmlDG2W0IYaBCLahRxFNzEHDcWx8MQUSU5xR0wxXyACDEmgs4UYWb8iAxBBlCJFFDm-4cccM_J0RRxxs4KCGEWagcYNIWdgxRB6euZFDeC3g4MQaZ8yoRBRa1HCDHDc4cUURbLSBXhlS2PAGE0ZQscQVb1ChRRYtGEEHElfKYUMRQhAxxhNWwMFEHl-cUUUSREhRRRpN4mcDHDH0QFhfMNiwFRnHYeQGQW7QEUYaLrhRhkQOjREGXlvUwMKNXYxV5ERltGCdQyMuBIMLHHYLRxtfwHGuDu8ySJ9DctixGFIOlTHGvO7CS9FrdaSBkUfgxTWGGerGEMYMJ2FHcRg3LMmSfWF4V0MNHSK1VRqLidCSCzm8W5QL2tGwlRxfkIzRySm7sHLLW9URBkZNvKFHGmywEcYLNcALAgpXpOEGtHfMAYITVICwILw7gJC0GzFWjUfWIPQ72gw0wJsCCEcIvMYbL5i5IIccgmBEGnKUYcYbeLxwWNgwbDXGTzqI4MQTW70B894Y_b0VG3yLUIQTz5ZhxxdxszGRpeF9tJFrcpxxmQ5wxeTQQY-LIcdCN33u-BdtvEHGWzjYcPBwb5zl0BsK5WUu3XksJK4IMNuLu-6f57E5HXLUUYbpj9OhB0Z5O3QHRgvKtxUa0K_WfF39YiTHG9bSIXgLdbiRBh0nxeACGTIEPkf2OhjG2Q1QfTQZGYkf9AX6W9HRxkRJ4hjW-xVpQ_pG0z-hxOB9zcIBT8gAuTLY5Qvf4t98DAhAEZwuDGxACB1qtwXDlOshYsCLCA5ihp6wgVsigAPi3NUt0bhmDNTTwRZEsJUaOsSGNLyhDnPIQxzWsAt9UEBAAA%3D%3D&s=1287c691d4712c2d3343ab28c9a6dc11b11ad470dac9c382c9e5facf6a317df51746771997&w=t&r=1&d=656&priv=true HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nhentai.net/
Cookie: cookie_user_id=d3d756cf-01a3-4d93-a733-97fa98551c38
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 06:26:37 GMT
content-type: text/javascript
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
|
|
| go.xlivrdr.com/abc.gif?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&thumbSizeKey=big&language=en&thumbFit=cover&stripcashR=0&thumbType=default&kbLimit=25000&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=2&segment=hls-oldAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Fnhentai.net%2F&i=0&abTest=widgetv4universal_test_31m&abTestVariant=widgetv4universal_test_31m_topScore_1&seenAbTest=1&seenDomain=1&seenLanding=1&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A645%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A338%2C%22duration%22%3A52%2C%22transferSize%22%3A177733%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A338%2C%22duration%22%3A28%2C%22transferSize%22%3A5721%7D%2C%7B%22type%22%3A%22first-contentful-paint%22%2C%22startTime%22%3A920%2C%22duration%22%3A0%7D%5D&mh=-831781672 | 104.18.40.50 | 200 OK | 0 B |
URL GET go.xlivrdr.com/abc.gif?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&thumbSizeKey=big&language=en&thumbFit=cover&stripcashR=0&thumbType=default&kbLimit=25000&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=2&segment=hls-oldAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Fnhentai.net%2F&i=0&abTest=widgetv4universal_test_31m&abTestVariant=widgetv4universal_test_31m_topScore_1&seenAbTest=1&seenDomain=1&seenLanding=1&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A645%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A338%2C%22duration%22%3A52%2C%22transferSize%22%3A177733%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A338%2C%22duration%22%3A28%2C%22transferSize%22%3A5721%7D%2C%7B%22type%22%3A%22first-contentful-paint%22%2C%22startTime%22%3A920%2C%22duration%22%3A0%7D%5D&mh=-831781672 IP 104.18.40.50:443
Requested byhttps://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=mzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 CertificateIssuerLet's Encrypt Subjectxlivrdr.com FingerprintF1:8A:E4:52:03:8A:96:88:B3:EE:D5:B5:F1:63:D0:E5:15:C4:D6:1E ValidityMon, 17 Mar 2025 10:33:05 GMT - Sun, 15 Jun 2025 10:33:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /abc.gif?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&thumbSizeKey=big&language=en&thumbFit=cover&stripcashR=0&thumbType=default&kbLimit=25000&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=2&segment=hls-oldAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Fnhentai.net%2F&i=0&abTest=widgetv4universal_test_31m&abTestVariant=widgetv4universal_test_31m_topScore_1&seenAbTest=1&seenDomain=1&seenLanding=1&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A645%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A338%2C%22duration%22%3A52%2C%22transferSize%22%3A177733%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A338%2C%22duration%22%3A28%2C%22transferSize%22%3A5721%7D%2C%7B%22type%22%3A%22first-contentful-paint%22%2C%22startTime%22%3A920%2C%22duration%22%3A0%7D%5D&mh=-831781672 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 06:26:38 GMT
content-type: image/gif
content-length: 103
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
priority: u=4,i=?0
server: cloudflare
cf-ray: 93cf205d68cc568f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| t1.nhentai.net/galleries/3346889/thumb.webp | 77.247.178.1 | 200 OK | 19 kB |
URL GET t1.nhentai.net/galleries/3346889/thumb.webp IP 77.247.178.1:443
ASN#43350 NForce Entertainment B.V.
CertificateIssuerDigiCert Inc Subject*.nhentai.net Fingerprint95:16:43:9A:66:C7:70:1D:D5:79:81:E5:B2:88:59:93:F7:5F:11:35 ValiditySun, 06 Oct 2024 00:00:00 GMT - Mon, 06 Oct 2025 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 500x707, Scaling: [none]x[none], YUV color, decoders should clamp Hashfd50ebaf7b8329cf8c42bf070bf7c871 c04ae9cb5146aebe80aa7214b8798df8b7f58442 fb432a1b30b95d0019dcd37c0dd4e0d60e9a743501b0ada8a22a0050941fa4fc
GET /galleries/3346889/thumb.webp HTTP/1.1
Host: t1.nhentai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 06:26:36 GMT
content-type: image/webp
content-length: 18752
last-modified: Thu, 08 May 2025 08:19:15 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImCMETPjBgwbMVrQuCFGhsgaN260CINDDI0WOGLMkGEDBw4aM3DAuCHCYZg6YzDWoFEmxkcZZFrAIDOjhkgzNXC0yEHDjEmZOMiEuaF1TA0yOXo-JGNn4s0cOBzCqSNm4cwYOGb4hANnoYwaNeWKmANHog4agNHmkOFwTJu6OmzkMErDhk8yZhba0CvGjRu3gyffICyijZuLOmTKkAFDrWfQo3HUKC2ijhw2C2nEWE1DRsPWMjCioUMHzhwdL16ceeNCTps5aOKEcTHmTZsXc9qEkdP7DZwXMmJANnNjjEcYNcrkIAMjh9etYcqQR2qG6A0aq7XPgDEDJIwYY2YQJS-mxpjZZdwHQxljhDEDVTL8UMccCCVBRg_qEaUfDYPBIEMYgIVhBksyzbZTGOPFcCF-Odggw1s42DAgDWKYMcYYF4YRA0czyGhTDiSpWAYXdcBgoQ1zvOHaGGU42INijNnAo480tVFGG2I0-KAUVawxQxJzzMFEDE18gcYQUixBwxw2mEFFDG7UQQURRczAhhZXvMFEC1hoQcMXUGhRhhZstDADEXTEQd4VSzDxhRBr3ABFGVgQ5YYQegxhhhhoyLFEm0O8IUQdZNhwxB12fERDGG1I8cQYaKzRxJthtGBGG3TY4IQTZ8iRAx1paAEHElDMIEQQX5xRRRJEUJnGkj_CEUMPgFGIw2BikeEcRm4Q5AYdYaThghtlSFRYGH5tUQMLMdjQhUMtLgSDC_c5JIcdiOXkUB11pCGUi-mREZOrJc3wVIAr5SdGCy8-u1p_d9WQm0NpICbCYi7ksG5tLsxGg1hyfNEwRhBL7ALFFotVRxgYNfGGHmmwwUYYL9TALggoXJGGG9LeMQcITlABglHs7gCCzG7YQIPPeAjt87uh6cduCiAcQeAab2AnoIAxgGBEGnKUYcYbeLwgEw3sivUiRk48IdYbGY-tgwhli8VGUGsX4US0ZdjxRdawhYbSDXHV5KO7Z1ymw1043HaQ3WLIsZBNDh3-RRtvkGFXihSJQIYcb7jl0BsK_aUW5njksdC4ImQMB-ii60A6GXkIToccdZTReN1f0KEHRjCIdQdGRslwsUNo8C6DTmLBMQNGdqRxEHEzz4HttS44mWUYZ5ThghoKOTTHuxhhji0daLdQhxtp0NGCiS6QsbAInHOvQ3303bCYDSg1DrflZXyhvlh0tDHRezZISQxyUKKKtCE3oQGgAAkotKY85m5l4MsXwPW_xiywgCKgXRjYgBA6dG4LM6CIfs71EDH4BX8bqgMbvCUCOLxNXYUBDWtQtZAtiEAsOHRIDm-owx7y8Ic7xGEX-qCAgAA%3D&s=e48f84aed4b6d77e498f71a63dcd235035d29ad291f07044526d25752e247d811746771996 | 95.216.34.183 | 200 OK | 43 B |
URL GET pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImCMETPjBgwbMVrQuCFGhsgaN260CINDDI0WOGLMkGEDBw4aM3DAuCHCYZg6YzDWoFEmxkcZZFrAIDOjhkgzNXC0yEHDjEmZOMiEuaF1TA0yOXo-JGNn4s0cOBzCqSNm4cwYOGb4hANnoYwaNeWKmANHog4agNHmkOFwTJu6OmzkMErDhk8yZhba0CvGjRu3gyffICyijZuLOmTKkAFDrWfQo3HUKC2ijhw2C2nEWE1DRsPWMjCioUMHzhwdL16ceeNCTps5aOKEcTHmTZsXc9qEkdP7DZwXMmJANnNjjEcYNcrkIAMjh9etYcqQR2qG6A0aq7XPgDEDJIwYY2YQJS-mxpjZZdwHQxljhDEDVTL8UMccCCVBRg_qEaUfDYPBIEMYgIVhBksyzbZTGOPFcCF-Odggw1s42DAgDWKYMcYYF4YRA0czyGhTDiSpWAYXdcBgoQ1zvOHaGGU42INijNnAo480tVFGG2I0-KAUVawxQxJzzMFEDE18gcYQUixBwxw2mEFFDG7UQQURRczAhhZXvMFEC1hoQcMXUGhRhhZstDADEXTEQd4VSzDxhRBr3ABFGVgQ5YYQegxhhhhoyLFEm0O8IUQdZNhwxB12fERDGG1I8cQYaKzRxJthtGBGG3TY4IQTZ8iRAx1paAEHElDMIEQQX5xRRRJEUJnGkj_CEUMPgFGIw2BikeEcRm4Q5AYdYaThghtlSFRYGH5tUQMLMdjQhUMtLgSDC_c5JIcdiOXkUB11pCGUi-mREZOrJc3wVIAr5SdGCy8-u1p_d9WQm0NpICbCYi7ksG5tLsxGg1hyfNEwRhBL7ALFFotVRxgYNfGGHmmwwUYYL9TALggoXJGGG9LeMQcITlABglHs7gCCzG7YQIPPeAjt87uh6cduCiAcQeAab2AnoIAxgGBEGnKUYcYbeLwgEw3sivUiRk48IdYbGY-tgwhli8VGUGsX4US0ZdjxRdawhYbSDXHV5KO7Z1ymw1043HaQ3WLIsZBNDh3-RRtvkGFXihSJQIYcb7jl0BsK_aUW5njksdC4ImQMB-ii60A6GXkIToccdZTReN1f0KEHRjCIdQdGRslwsUNo8C6DTmLBMQNGdqRxEHEzz4HttS44mWUYZ5ThghoKOTTHuxhhji0daLdQhxtp0NGCiS6QsbAInHOvQ3303bCYDSg1DrflZXyhvlh0tDHRezZISQxyUKKKtCE3oQGgAAkotKY85m5l4MsXwPW_xiywgCKgXRjYgBA6dG4LM6CIfs71EDH4BX8bqgMbvCUCOLxNXYUBDWtQtZAtiEAsOHRIDm-owx7y8Ic7xGEX-qCAgAA%3D&s=e48f84aed4b6d77e498f71a63dcd235035d29ad291f07044526d25752e247d811746771996 IP 95.216.34.183:443
ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjecttsyndicate.com Fingerprint1D:36:B3:AC:76:33:5C:64:BB:85:FE:5B:BA:AC:41:0D:8B:F7:20:65 ValidityTue, 25 Mar 2025 00:07:40 GMT - Mon, 23 Jun 2025 00:07:39 GMT
File typeGIF image data, version 89a, 1 x 1 Hashba036c43037cfe89320d1ef7b64cd43f 88c72d3e26047eb1e45e5564a76427734f120efe 42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb
GET /api/v1/p/p.gif?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFImCMETPjBgwbMVrQuCFGhsgaN260CINDDI0WOGLMkGEDBw4aM3DAuCHCYZg6YzDWoFEmxkcZZFrAIDOjhkgzNXC0yEHDjEmZOMiEuaF1TA0yOXo-JGNn4s0cOBzCqSNm4cwYOGb4hANnoYwaNeWKmANHog4agNHmkOFwTJu6OmzkMErDhk8yZhba0CvGjRu3gyffICyijZuLOmTKkAFDrWfQo3HUKC2ijhw2C2nEWE1DRsPWMjCioUMHzhwdL16ceeNCTps5aOKEcTHmTZsXc9qEkdP7DZwXMmJANnNjjEcYNcrkIAMjh9etYcqQR2qG6A0aq7XPgDEDJIwYY2YQJS-mxpjZZdwHQxljhDEDVTL8UMccCCVBRg_qEaUfDYPBIEMYgIVhBksyzbZTGOPFcCF-Odggw1s42DAgDWKYMcYYF4YRA0czyGhTDiSpWAYXdcBgoQ1zvOHaGGU42INijNnAo480tVFGG2I0-KAUVawxQxJzzMFEDE18gcYQUixBwxw2mEFFDG7UQQURRczAhhZXvMFEC1hoQcMXUGhRhhZstDADEXTEQd4VSzDxhRBr3ABFGVgQ5YYQegxhhhhoyLFEm0O8IUQdZNhwxB12fERDGG1I8cQYaKzRxJthtGBGG3TY4IQTZ8iRAx1paAEHElDMIEQQX5xRRRJEUJnGkj_CEUMPgFGIw2BikeEcRm4Q5AYdYaThghtlSFRYGH5tUQMLMdjQhUMtLgSDC_c5JIcdiOXkUB11pCGUi-mREZOrJc3wVIAr5SdGCy8-u1p_d9WQm0NpICbCYi7ksG5tLsxGg1hyfNEwRhBL7ALFFotVRxgYNfGGHmmwwUYYL9TALggoXJGGG9LeMQcITlABglHs7gCCzG7YQIPPeAjt87uh6cduCiAcQeAab2AnoIAxgGBEGnKUYcYbeLwgEw3sivUiRk48IdYbGY-tgwhli8VGUGsX4US0ZdjxRdawhYbSDXHV5KO7Z1ymw1043HaQ3WLIsZBNDh3-RRtvkGFXihSJQIYcb7jl0BsK_aUW5njksdC4ImQMB-ii60A6GXkIToccdZTReN1f0KEHRjCIdQdGRslwsUNo8C6DTmLBMQNGdqRxEHEzz4HttS44mWUYZ5ThghoKOTTHuxhhji0daLdQhxtp0NGCiS6QsbAInHOvQ3303bCYDSg1DrflZXyhvlh0tDHRezZISQxyUKKKtCE3oQGgAAkotKY85m5l4MsXwPW_xiywgCKgXRjYgBA6dG4LM6CIfs71EDH4BX8bqgMbvCUCOLxNXYUBDWtQtZAtiEAsOHRIDm-owx7y8Ic7xGEX-qCAgAA%3D&s=e48f84aed4b6d77e498f71a63dcd235035d29ad291f07044526d25752e247d811746771996 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 06:26:36 GMT
content-type: image/gif
content-length: 43
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
|
|
| img.doppiocdn.com/thumbs/1746771900/40392648_webp | 104.17.223.114 | 200 OK | 7.8 kB |
URL GET img.doppiocdn.com/thumbs/1746771900/40392648_webp IP 104.17.223.114:443
Requested byhttps://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=UOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 CertificateIssuerGoogle Trust Services Subjectdoppiocdn.com FingerprintAD:A5:3A:00:76:34:18:F2:64:89:A6:A5:D1:D3:F9:63:E3:9C:E9:CC ValidityMon, 07 Apr 2025 04:19:05 GMT - Sun, 06 Jul 2025 05:19:01 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp Hash09116a7c0c52c7ae68d0f467aa3c9fff 073a31b691be4a1cf9c2d1b09aa70cd55f20338e e0e2e16279f30b3d3809e67f1513f99140713000fa76bc43aa03071288e64926
GET /thumbs/1746771900/40392648_webp HTTP/1.1
Host: img.doppiocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 06:26:38 GMT
content-type: image/webp
content-length: 7792
etag: "09116a7c0c52c7ae68d0f467aa3c9fff"
last-modified: Fri, 09 May 2025 06:23:49 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 88
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 93cf205ccd44568e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| t1.nhentai.net/galleries/3346923/thumb.jpg.webp | 77.247.178.1 | 200 OK | 23 kB |
URL GET t1.nhentai.net/galleries/3346923/thumb.jpg.webp IP 77.247.178.1:443
ASN#43350 NForce Entertainment B.V.
CertificateIssuerDigiCert Inc Subject*.nhentai.net Fingerprint95:16:43:9A:66:C7:70:1D:D5:79:81:E5:B2:88:59:93:F7:5F:11:35 ValiditySun, 06 Oct 2024 00:00:00 GMT - Mon, 06 Oct 2025 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 500x714, Scaling: [none]x[none], YUV color, decoders should clamp Hash8c40c578b60ad4444850d279e7dff997 3e99383825a1898ec01de543c011eb2bd68089bd c8084be6f7f78f49fd7f350f6020cfa85321656cc8f642e47a8863a5ca52a2b1
GET /galleries/3346923/thumb.jpg.webp HTTP/1.1
Host: t1.nhentai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 06:26:36 GMT
content-type: image/webp
content-length: 22772
last-modified: Thu, 08 May 2025 08:46:22 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| creative.xlivrdr.com/static/2025831e/s/widgets/v4/Universal/main.1660312ca4784f45ae08.css | 188.114.96.1 | 200 OK | 14 kB |
URL GET creative.xlivrdr.com/static/2025831e/s/widgets/v4/Universal/main.1660312ca4784f45ae08.css IP 188.114.96.1:443
Requested byhttps://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=mzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 CertificateIssuerLet's Encrypt Subjectxlivrdr.com FingerprintF1:8A:E4:52:03:8A:96:88:B3:EE:D5:B5:F1:63:D0:E5:15:C4:D6:1E ValidityMon, 17 Mar 2025 10:33:05 GMT - Sun, 15 Jun 2025 10:33:04 GMT
File typeASCII text, with very long lines (14081), with no line terminators Hash28424fc9ec1f01c03d7e5d2769242de3 aed0cdcd41555552f04a8cbbe38d25c591b7458a 531a3ac715890a33b6fe715b21a1b58ce8549d1b3fb8bef4697a9de66f0556e9
GET /static/2025831e/s/widgets/v4/Universal/main.1660312ca4784f45ae08.css HTTP/1.1
Host: creative.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=mzEMs4oml_SHSgb43W20JhKnYo2HCeBY9onw3e8gqql8jFfh7-aYvCy39n978-8Nkgf4JQZ57r7NWElm09eR6oLFTKWoTZY-FtHzEr6EBDcOVpLy_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 06:26:37 GMT
content-type: text/css
access-control-expose-headers: Content-Disposition
content-disposition: inline; filename="main.1660312ca4784f45ae08.css"
etag: W/"28424fc9ec1f01c03d7e5d2769242de3"
last-modified: Wed, 07 May 2025 11:04:18 GMT
cache-control: max-age=10
expires: Fri, 09 May 2025 06:26:44 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
age: 3
cf-cache-status: HIT
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MW7F0Ebm4AoRSGaTuBa4ZY6NBGzCZUbFnpkAl8b4llHEaDK74cUg%2F20Yw%2FqhiJAmSawDqVSVrcMlb2swDks8Azn4fFjv81IvDsFu67cKAlAlZsN91NhLeGj2Hu%2FlAomKoDuA8qYtlg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93cf20589a11b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3199&min_rtt=3146&rtt_var=1286&sent=12&recv=10&lost=0&retrans=0&sent_bytes=3749&recv_bytes=3135&delivery_rate=178988&cwnd=12000&unsent_bytes=0&cid=113a8adf1aa4fb20&ts=143&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| go.xlivrdr.com/api/models?landing=WidgetV4Universal&masterSmartpopId=1605&quality=240p&smartpopId=13951&sortBy=paidUsers&stripcashR=0&forceClient=1&usePreroll=0&modelPromotion=1&limit=2 | 104.18.40.50 | 200 OK | 3.3 kB |
URL GET go.xlivrdr.com/api/models?landing=WidgetV4Universal&masterSmartpopId=1605&quality=240p&smartpopId=13951&sortBy=paidUsers&stripcashR=0&forceClient=1&usePreroll=0&modelPromotion=1&limit=2 IP 104.18.40.50:443
Requested byhttps://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=UOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 CertificateIssuerLet's Encrypt Subjectxlivrdr.com FingerprintF1:8A:E4:52:03:8A:96:88:B3:EE:D5:B5:F1:63:D0:E5:15:C4:D6:1E ValidityMon, 17 Mar 2025 10:33:05 GMT - Sun, 15 Jun 2025 10:33:04 GMT
Hashe0356fa50cfb0d3e235c87a4c4d7bb17 ff752d672a5f120655df90e9820a127224390cf6 f94cfef7372d7100441f937b4b00f154268dcbacb0e79523f507d5d07fce4c01
GET /api/models?landing=WidgetV4Universal&masterSmartpopId=1605&quality=240p&smartpopId=13951&sortBy=paidUsers&stripcashR=0&forceClient=1&usePreroll=0&modelPromotion=1&limit=2 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 06:26:38 GMT
content-type: application/json
access-control-allow-origin: https://creative.xlivrdr.com
access-control-allow-credentials: true
vary: Origin, Accept-Encoding
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
content-encoding: gzip
last-modified: Fri, 09 May 2025 06:26:30 GMT
cf-cache-status: HIT
age: 7
priority: u=4,i=?0
server: cloudflare
cf-ray: 93cf205bfdf4568f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| fonts.gstatic.com/s/notosans/v39/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2 | 142.250.74.35 | 200 OK | 36 kB |
URL GET fonts.gstatic.com/s/notosans/v39/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2 IP 142.250.74.35:443
CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 35832, version 1.0 Hash5b90942f3d9d6636cc70a2d56ef84663 ae7aacfc3258d2c84f8ff49a90afcd121b4d4d37 bf9245342d2e64845487ebd41dbbe26d52952292e4fbdad99a82ce9365db337b
GET /s/notosans/v39/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nhentai.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 May 2025 09:21:58 GMT
expires: Fri, 08 May 2026 09:21:58 GMT
cache-control: public, max-age=31536000
age: 75878
last-modified: Tue, 11 Mar 2025 01:08:13 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| t1.nhentai.net/galleries/3346881/thumb.webp | 77.247.178.1 | 200 OK | 21 kB |
URL GET t1.nhentai.net/galleries/3346881/thumb.webp IP 77.247.178.1:443
ASN#43350 NForce Entertainment B.V.
CertificateIssuerDigiCert Inc Subject*.nhentai.net Fingerprint95:16:43:9A:66:C7:70:1D:D5:79:81:E5:B2:88:59:93:F7:5F:11:35 ValiditySun, 06 Oct 2024 00:00:00 GMT - Mon, 06 Oct 2025 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 500x709, Scaling: [none]x[none], YUV color, decoders should clamp Hash903468c03a234d5b221d480850c47815 073390ffe0ea2e90f81c3d9858967a0f0d9ae34c 0e9c82ea88d284cd2047febc8dbfcb2ac12f07ed4158076d634ebe4555f6e319
GET /galleries/3346881/thumb.webp HTTP/1.1
Host: t1.nhentai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 06:26:36 GMT
content-type: image/webp
content-length: 20786
last-modified: Thu, 08 May 2025 08:11:19 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| nhentai.net/favicon.ico | 104.26.5.188 | 200 OK | 4.3 kB |
IP 104.26.5.188:443
CertificateIssuerGoogle Trust Services Subjectnhentai.net Fingerprint60:A5:E9:05:94:DE:14:36:B4:14:4F:BA:D8:35:1F:46:A5:8F:A8:3F ValiditySun, 04 May 2025 19:41:57 GMT - Sat, 02 Aug 2025 20:41:53 GMT
File typeMS Windows icon resource - 1 icon, 32x32, 32 bits/pixel Hash893c66f1af0c79cbbaaa4bde9ac99d8a e55e16f0e6e2d8ed1b8d4f0dc618424858029df1 1adf72d595b3e8bb1570b03a7f7ec3010214ace4673c8b431e911133a1d1cd18
GET /favicon.ico HTTP/1.1
Host: nhentai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nhentai.net/
DNT: 1
Connection: keep-alive
Cookie: session-affinity=1746771996.062.38.949888|2968378f2272707dac237fc5e1f12aaf; csrftoken=FmVMqAtiYV8DS8qO8SkWByM05DWJCIBc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 06:26:37 GMT
content-type: image/x-icon
last-modified: Wed, 26 Mar 2025 22:23:02 GMT
etag: W/"67e47e46-10be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: HIT
age: 2352532
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d3o8H0pK7Ikjaz6CdB%2BvogG9erNszuB%2FyW8bkHUbI8lfR1jVyNM0QPMpxLH8nRa6F5A2N5YLxHj%2F2ukLJ0Kob14O2TykcO5yOdBZe%2B4h4pXvbSId15V7Ggw7TVEF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93cf2055fade1c06-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=649&min_rtt=370&rtt_var=240&sent=96&recv=54&lost=0&retrans=0&sent_bytes=103198&recv_bytes=3226&delivery_rate=16886297&cwnd=257&unsent_bytes=0&cid=a72aef3133888019&ts=2128&x=0"
X-Firefox-Spdy: h2
|
|
| nhentai.net/static/css/styles.cb4b6ae0fa52.css | 104.26.5.188 | 200 OK | 44 kB |
URL GET nhentai.net/static/css/styles.cb4b6ae0fa52.css IP 104.26.5.188:443
CertificateIssuerGoogle Trust Services Subjectnhentai.net Fingerprint60:A5:E9:05:94:DE:14:36:B4:14:4F:BA:D8:35:1F:46:A5:8F:A8:3F ValiditySun, 04 May 2025 19:41:57 GMT - Sat, 02 Aug 2025 20:41:53 GMT
File typeASCII text, with very long lines (43942), with no line terminators Hash0e5b7360a483dabc127e6344966139d5 4f0376abec908f6e82376e88a9b1f7216fc4f5d6 7999a370c1a7f08fbc1dbc52d284f94135a180ac0cc37dff594cc5450fed5ab9
GET /static/css/styles.cb4b6ae0fa52.css HTTP/1.1
Host: nhentai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nhentai.net/
DNT: 1
Connection: keep-alive
Cookie: session-affinity=1746771996.062.38.949888|2968378f2272707dac237fc5e1f12aaf; csrftoken=FmVMqAtiYV8DS8qO8SkWByM05DWJCIBc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 06:26:35 GMT
content-type: text/css
last-modified: Sun, 13 Apr 2025 03:22:35 GMT
etag: W/"67fb2dfb-aba6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: HIT
age: 2248018
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2G8dgG66hxUv6LThP8xQAl%2B9jXBJlnpLv7UWWeIBogGBSGOVkiwT%2By57aNHPn0HJPpmmBq2bfcIJQ9TLp4sh%2BkQLehQk%2F5FdwVl0%2FMpZLEThyfWgIJmtXt0V0KA4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93cf204c9ea21c06-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1983&min_rtt=445&rtt_var=2860&sent=21&recv=24&lost=0&retrans=0&sent_bytes=11454&recv_bytes=1578&delivery_rate=11277258&cwnd=257&unsent_bytes=0&cid=a72aef3133888019&ts=639&x=0"
X-Firefox-Spdy: h2
|
|
| nhentai.net/api/inventory | 104.26.5.188 | 200 OK | 26 B |
URL GET nhentai.net/api/inventory IP 104.26.5.188:443
CertificateIssuerGoogle Trust Services Subjectnhentai.net Fingerprint60:A5:E9:05:94:DE:14:36:B4:14:4F:BA:D8:35:1F:46:A5:8F:A8:3F ValiditySun, 04 May 2025 19:41:57 GMT - Sat, 02 Aug 2025 20:41:53 GMT
Hash8e53b4b2950e84f19493bdf52d4a51ad c43f220c15c7b9635a9ef943e544bcafda116512 3432f92ce4f0fade7194719a9c0808d5030b877ea5026eef13157eb6b5ea6dcb
GET /api/inventory HTTP/1.1
Host: nhentai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nhentai.net/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: session-affinity=1746771996.062.38.949888|2968378f2272707dac237fc5e1f12aaf; csrftoken=FmVMqAtiYV8DS8qO8SkWByM05DWJCIBc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 06:26:36 GMT
content-type: application/json
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: same-origin
vary: Cookie, accept-encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lx%2B0utP8nCsN7n7bZg1G3vhK4WWnMf%2Bv%2BPSwfbRU3e5PlLDM7109r1sDnWaMZ3igiX4cjzCvkex3eqFm5g8rCChQPpezFNC2aX%2Bx16Js%2Bg8ze4PmYvTdCQQ7M%2Fn%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93cf204f199a1c06-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=805&min_rtt=418&rtt_var=254&sent=90&recv=47&lost=0&retrans=0&sent_bytes=102390&recv_bytes=1693&delivery_rate=16886297&cwnd=257&unsent_bytes=0&cid=a72aef3133888019&ts=1159&x=0"
X-Firefox-Spdy: h2
|
|
| cdn.tsyndicate.com/sdk/v1/video.instant.message.js | 45.133.44.71 | 200 OK | 17 kB |
URL GET cdn.tsyndicate.com/sdk/v1/video.instant.message.js IP 45.133.44.71:443
ASN#39572 DataWeb Global Group B.V.
CertificateIssuerLet's Encrypt Subjectcdn.tsyndicate.com FingerprintC8:21:B5:22:CE:B2:90:D0:CE:CF:F7:57:FA:B4:14:52:BA:AF:3B:EF ValidityFri, 04 Apr 2025 07:32:05 GMT - Thu, 03 Jul 2025 07:32:04 GMT
File typeJavaScript source, ASCII text, with very long lines (16564) Hashe923f8046330210930817d3dcb513507 d60fe50cabb52d5e7314eb7ea5547c583ab3d6b2 ea7d286a751c056acb17fcd954478e81b1fdf5b8107bb1407a017d5c4520d479
GET /sdk/v1/video.instant.message.js HTTP/1.1
Host: cdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 06:26:36 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Thu, 17 Apr 2025 08:58:04 GMT
etag: W/"6800c29c-4113"
x-robots-tag: noindex, nofollow
content-encoding: gzip
cache-control: max-age=172800
expires: Sun, 11 May 2025 06:26:36 GMT
vary: Accept-Encoding
x-cdn-host-id: ah1742,ds9893
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| t1.nhentai.net/galleries/3345531/thumb.webp | 77.247.178.1 | 200 OK | 14 kB |
URL GET t1.nhentai.net/galleries/3345531/thumb.webp IP 77.247.178.1:443
ASN#43350 NForce Entertainment B.V.
CertificateIssuerDigiCert Inc Subject*.nhentai.net Fingerprint95:16:43:9A:66:C7:70:1D:D5:79:81:E5:B2:88:59:93:F7:5F:11:35 ValiditySun, 06 Oct 2024 00:00:00 GMT - Mon, 06 Oct 2025 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 500x375, Scaling: [none]x[none], YUV color, decoders should clamp Hash56d582b7d50ca1b9b3d9b0233f30d7f1 857406b8cfcda32def958252a73d7838681b04b1 af4cff9afb1efba34d43812b0ebe43fa2e47c920cec53930f2a73446063daa1b
GET /galleries/3345531/thumb.webp HTTP/1.1
Host: t1.nhentai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 06:26:36 GMT
content-type: image/webp
content-length: 14206
last-modified: Wed, 07 May 2025 16:50:32 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tsyndicate.com/do2/c7aa50958cfd455ea6895840c8b0924a/vast?t=im-slider¶m3=video.instant.message.js&keywords=nhentai%20is%20a%20free%20hentai%20manga%20and%20doujinshi%20reader%20with%20over%20537%2C000%20galleries%20to%20read%20and%20download.%2Cnhentai%3A%20hentai%20doujinshi%20and%20manga&w=1280&h=1024&tz=0 | 136.243.59.248 | 200 OK | 8.6 kB |
URL GET tsyndicate.com/do2/c7aa50958cfd455ea6895840c8b0924a/vast?t=im-slider¶m3=video.instant.message.js&keywords=nhentai%20is%20a%20free%20hentai%20manga%20and%20doujinshi%20reader%20with%20over%20537%2C000%20galleries%20to%20read%20and%20download.%2Cnhentai%3A%20hentai%20doujinshi%20and%20manga&w=1280&h=1024&tz=0 IP 136.243.59.248:443
ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjecttsyndicate.com Fingerprint1D:36:B3:AC:76:33:5C:64:BB:85:FE:5B:BA:AC:41:0D:8B:F7:20:65 ValidityTue, 25 Mar 2025 00:07:40 GMT - Mon, 23 Jun 2025 00:07:39 GMT
File typeXML 1.0 document, ASCII text, with very long lines (8317) Hash0572005555a8154876c33c003875059d 2f44507369dbd415011e5f03b5b688648f62fe83 85310c5a48db6eea882e5d1fad8bfcc24a36f628f86eb2dba4ed040ebd760367
GET /do2/c7aa50958cfd455ea6895840c8b0924a/vast?t=im-slider¶m3=video.instant.message.js&keywords=nhentai%20is%20a%20free%20hentai%20manga%20and%20doujinshi%20reader%20with%20over%20537%2C000%20galleries%20to%20read%20and%20download.%2Cnhentai%3A%20hentai%20doujinshi%20and%20manga&w=1280&h=1024&tz=0 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nhentai.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 06:26:36 GMT
content-type: application/xml; charset=utf-8
access-control-allow-origin: https://nhentai.net
access-control-allow-methods: POST, GET, HEAD
access-control-allow-headers: Accept, X-Requested-With, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy
access-control-allow-credentials: true
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-vast: 3.0
set-cookie: cookie_user_id=5fcaed81-fb23-4fe0-ac3b-cc8950b52552; expires=Sun, 09 Nov 2025 06:26:36 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCx5YZOWTYmHFDRhcWIsYU3BLjoYgyE2PcoGEDRw0cCG106aMg; expires=Sat, 10 May 2025 06:26:36 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
permissions-policy: ch-ua-model=(self "https://tsyndicate.com"), ch-ua-platform-version=(self)
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| acdn.tsyndicate.com/sdk/v1/b.b.js | 45.133.44.70 | 200 OK | 6.1 kB |
URL GET acdn.tsyndicate.com/sdk/v1/b.b.js IP 45.133.44.70:443
ASN#39572 DataWeb Global Group B.V.
CertificateIssuerLet's Encrypt Subjectacdn.tsyndicate.com Fingerprint7B:F2:5B:6E:AC:FE:5C:E7:F9:F5:2A:2A:97:D1:54:A4:94:BA:BA:3A ValidityTue, 25 Mar 2025 02:32:44 GMT - Mon, 23 Jun 2025 02:32:43 GMT
File typeJavaScript source, ASCII text, with very long lines (6010) Hash92c690d5b14c53acfab5947ac24f0a09 bb5c242bac6ffd5239f499a275b86021e3d81d58 5630a4a1aa06d48e00c92864550d122ba338f592e60c7951ec94d5cd2b22a079
GET /sdk/v1/b.b.js HTTP/1.1
Host: acdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nhentai.net/
Cookie: cookie_user_id=d3d756cf-01a3-4d93-a733-97fa98551c38
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 06:26:37 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Fri, 28 Mar 2025 14:49:24 GMT
etag: W/"67e6b6f4-17ca"
x-robots-tag: noindex, nofollow
content-encoding: gzip
cache-control: max-age=172800
expires: Sun, 11 May 2025 06:26:37 GMT
vary: Accept-Encoding
x-cdn-host-id: ds9611,ds9612,ah1742,ds5859
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| go.xlivrdr.com/app/domain-checker/get-check | 104.18.40.50 | 200 OK | 199 B |
URL POST go.xlivrdr.com/app/domain-checker/get-check IP 104.18.40.50:443
Requested byhttps://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=d0a605d931521f98d780b93d5c09e9a531d58278924627f027c0bde802de7e98&campaignType=smartpop&creativeId=b160433c2853da2b5fcdd96aad45f0decdee3f81ac66505bfb91d936621845ea&iterationId=945939&masterSmartpopId=1605&memberId=UOIPxwhLJECMAuS79VOT8c44jru8gVrDAKdPVGwvCgE_n7SGEUFx-5y3u0BdO0aowUpYCpEFXAu3WT2AGjuYSkO1Qmnzli-zSbLK9TMLX5qt9ct0_gUIDRUi&modelPromotion=1&p1=4522306&quality=240p&ruleId=3&smartpopId=13951&sourceId=743433&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=34450&webp=1 CertificateIssuerLet's Encrypt Subjectxlivrdr.com FingerprintF1:8A:E4:52:03:8A:96:88:B3:EE:D5:B5:F1:63:D0:E5:15:C4:D6:1E ValidityMon, 17 Mar 2025 10:33:05 GMT - Sun, 15 Jun 2025 10:33:04 GMT
Hashcfe143acbf48c82df971e647230ca417 eafe0a6b983253ec54e0e7ec894b3f8e310ed4dc 27b152a88a2c6640921928b1932752649b325161ee5db76c435712a88758c185
POST /app/domain-checker/get-check HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Origin: https://creative.xlivrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/3 200 OK
date: Fri, 09 May 2025 06:26:38 GMT
content-type: application/json
access-control-allow-origin: https://creative.xlivrdr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
content-encoding: gzip
cf-cache-status: DYNAMIC
vary: accept-encoding
priority: u=4,i=?0
server: cloudflare
cf-ray: 93cf205cf88c569f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|