GET storage.multstorage.com/log/count.html
104.21.30.242200 OK 882 B URL GET storage.multstorage.com/log/count.html
IP 104.21.30.242:443
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerGoogle Trust Services
Subjectmultstorage.com
Fingerprint59:ED:1A:AB:95:92:38:D9:66:74:41:E4:8C:B2:05:19:44:EA:2C:F0
ValidityWed, 02 Jul 2025 05:46:27 GMT - Tue, 30 Sep 2025 06:45:00 GMT
File type HTML document, ASCII text, with very long lines (700)
Hash b728ca9cd183d1b7c3f72116b19b22a3
c1fd73f6b02cf00b8bc60b09cc99495e8494b739
8a7b1ca4bbf273b32ea865d4785a1944d1b2b133678d9b5fe7ee0406f6fd64b2
GET /log/count.html HTTP/1.1
Host: storage.multstorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:38 GMT
content-type: text/html
server: cloudflare
last-modified: Mon, 18 Sep 2023 14:39:06 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=OPi7JpePuIJQbYVT3YpFKQTklvxMMPUAf3fgaXMoenxCROEzClzn8iRcl9AiKPiDNoQRXBTgOji1KfXaKnHBbfmKSKHqpLiinmCMfxSSTGjgEIzGVQ%3D%3D"}]}
vary: Accept-Encoding
x-request-id: 347cee439b0fc2866d8262beae3cbec6
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 9591e1724927b4ff-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET txxx.me/assets/jwplayer-8.21.2.4/vast.js
62.122.168.133200 OK 111 kB URL GET txxx.me/assets/jwplayer-8.21.2.4/vast.js
IP 62.122.168.133:443
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjecttxxx.me
FingerprintDE:06:F1:19:49:C7:92:24:44:19:C5:CC:E3:47:1F:16:0C:A5:CA:C1
ValidityTue, 03 Jun 2025 03:07:46 GMT - Mon, 01 Sep 2025 03:07:45 GMT
File type JavaScript source, ASCII text, with very long lines (3270)
Size 111 kB (111155 bytes)
Hash b1612c37306c7cb0afeb930c4494c52d
0f9c1b458f7f5600f74989a8d89acec658acf93d
f7fdf75ee46d77919fcbd912db8ce32355702b534b02e9a622623f0d360f0fa0
GET /assets/jwplayer-8.21.2.4/vast.js HTTP/1.1
Host: txxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/embed/13625062/?source=1034714855
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Wed, 02 Jul 2025 23:21:39 GMT
content-type: application/javascript
last-modified: Fri, 27 Jun 2025 10:18:39 GMT
vary: Accept-Encoding
etag: W/"685e6fff-1b233"
expires: Fri, 01 Aug 2025 23:21:39 GMT
cache-control: max-age=2592000, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
GET ip270120703.ahcdn.com/key=sCJun9N36FIB2MPcD0Ar1g,s=,end=1751584900,limit=3/data=3JPe8S/state=aGW-W1oq/buffer=778000:1186698,598.1/speed=396836/referer=none,.txxx.me,.gstatic.com/reftag=063878343/ssd8/121/9/186130139/tx/c12/videos/13625000/13625062/13625062_hq.mp4
188.209.213.180206 Partial Content 2.1 MB URL GET ip270120703.ahcdn.com/key=sCJun9N36FIB2MPcD0Ar1g,s=,end=1751584900,limit=3/data=3JPe8S/state=aGW-W1oq/buffer=778000:1186698,598.1/speed=396836/referer=none,.txxx.me,.gstatic.com/reftag=063878343/ssd8/121/9/186130139/tx/c12/videos/13625000/13625062/13625062_hq.mp4
IP 188.209.213.180:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerGoGetSSL
Subject*.ahcdn.com
Fingerprint99:99:89:EB:9F:31:C2:E3:B2:10:F6:4F:E6:6D:E6:59:B7:6F:EA:13
ValidityThu, 29 May 2025 00:00:00 GMT - Sun, 28 Jun 2026 23:59:59 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Size 2.1 MB (2097152 bytes)
Hash 9f8229fea941bb2cfa32ab9157300f73
4150734861e61e47e7a8a1aafacf380712d1c0b2
94a79e1b31fba4bd210adea3190ee991a4c27228ab12660630e0e80d33b95349
GET /key=sCJun9N36FIB2MPcD0Ar1g,s=,end=1751584900,limit=3/data=3JPe8S/state=aGW-W1oq/buffer=778000:1186698,598.1/speed=396836/referer=none,.txxx.me,.gstatic.com/reftag=063878343/ssd8/121/9/186130139/tx/c12/videos/13625000/13625062/13625062_hq.mp4 HTTP/1.1
Host: ip270120703.ahcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-
Referer: https://txxx.me/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
server: nginx/1.22.0
date: Wed, 02 Jul 2025 23:21:40 GMT
content-type: video/mp4
content-length: 79113249
last-modified: Fri, 16 May 2025 21:41:58 GMT
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
etag: "6827b126-4b72c21"
expires: Thu, 03 Jul 2025 01:21:40 GMT
cache-control: max-age=7200, private
content-range: bytes 0-79113248/79113249
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtm.js?id=GTM-MVMB4DG
142.250.74.136200 OK 263 kB URL GET www.googletagmanager.com/gtm.js?id=GTM-MVMB4DG
IP 142.250.74.136:443
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
File type JavaScript source, ASCII text, with very long lines (2508)
Size 263 kB (263419 bytes)
Hash 2ccc00c2b1f5553e3ca74bba4d30629c
50ef2997ea4371818057ed0e67c7b60497bbff6e
157dae291132c9f374944499d2f3b885f73f72c0b5538acc9f89cf2e19e61105
GET /gtm.js?id=GTM-MVMB4DG HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 02 Jul 2025 23:21:38 GMT
expires: Wed, 02 Jul 2025 23:21:38 GMT
cache-control: private, max-age=900
last-modified: Wed, 02 Jul 2025 22:08:25 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1319:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1319:0
report-to: {"group":"ascgcycc:1319:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1319:0"}],}
server: Google Tag Manager
content-length: 92184
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET js.txxx.tube/upd/20250627.101839.0/static/js/chunk-75ce1354.js
45.133.44.25200 OK 568 B URL GET js.txxx.tube/upd/20250627.101839.0/static/js/chunk-75ce1354.js
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectjs.txxx.tube
Fingerprint21:8D:05:8A:40:50:3A:54:55:F0:55:D7:4A:00:6B:C6:52:65:D3:61
ValidityThu, 26 Jun 2025 02:32:00 GMT - Wed, 24 Sep 2025 02:31:59 GMT
File type JavaScript source, ASCII text, with very long lines (568), with no line terminators
Hash 1ad6d4a650b7c6487e0c47dda10331a4
a1188dd26db35ce1d75e091261125bba198785f7
647727316cbbbeea1355c81acbe03bed85da885cea5021cd9de80e3e73b2e1fc
GET /upd/20250627.101839.0/static/js/chunk-75ce1354.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:38 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Fri, 27 Jun 2025 10:19:05 GMT
vary: Accept-Encoding
etag: W/"685e7019-238"
expires: Sat, 28 Jun 2025 10:30:36 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET tn.txxx.tube/contents/other/player/embed/txxx-logo-embed.svg
45.133.44.25200 OK 1.0 kB URL GET tn.txxx.tube/contents/other/player/embed/txxx-logo-embed.svg
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjecttn.txxx.tube
FingerprintB3:16:20:25:9F:92:69:84:76:26:3D:EF:51:79:A2:44:88:C8:01:7D
ValiditySun, 18 May 2025 02:34:20 GMT - Sat, 16 Aug 2025 02:34:19 GMT
File type SVG Scalable Vector Graphics image
Hash 383bffd9f3e5e51dfac29803aae7198b
533e6846a84784fd5c223a674557fe23e9cbbd3e
10bb8a67299f84cd98e7f44a36cca653bc9197f36fbc84dd04c8591cb2423a60
GET /contents/other/player/embed/txxx-logo-embed.svg HTTP/1.1
Host: tn.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:39 GMT
content-type: image/svg+xml
content-length: 1007
server: nginx/1.18.0
last-modified: Thu, 24 Oct 2019 11:54:37 GMT
etag: "5db190fd-3ef"
cache-control: max-age=7776000
expires: Tue, 20 Feb 2024 17:19:51 GMT
x-cdn-host-id: ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
OPTIONS vast.vstserv.com/vast
109.206.161.16204 No Content 0 B IP 109.206.161.16:443
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectvast.vstserv.com
FingerprintC7:70:FA:CB:6A:D1:96:78:22:03:4A:C1:9A:1C:AB:A8:6D:A8:EB:C1
ValidityMon, 16 Jun 2025 03:19:36 GMT - Sun, 14 Sep 2025 03:19:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /vast HTTP/1.1
Host: vast.vstserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://txxx.me/
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Wed, 02 Jul 2025 23:21:39 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://txxx.me
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
content-type: text/plain; charset=utf-8
content-length: 0
X-Firefox-Spdy: h2
GET 18xxx.name/favicon-196x196.png
104.21.11.238200 OK 21 kB URL GET 18xxx.name/favicon-196x196.png
IP 104.21.11.238:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type PNG image data, 196 x 196, 8-bit/color RGBA, non-interlaced
Hash 4d4bf8205dad5085973d0b6ce10ba876
008ae5d3ce72a00481c1abb2e562e75103c783f2
93dab20e9668ed1823bca8269fb8902209a7b74077bd61ac662ffd0952004ea3
GET /favicon-196x196.png HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:37 GMT
content-type: image/png
content-length: 21275
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CKDZKeg9WBbGVtgDkLAUGshZKwIHhIzbzuvzWx%2BpRZ%2Fqrxk8DxVZH0oOxrBIR6VOu7RChwS9URLGdHARv8kl7DSv1zOpOzhU0AOpQ53PWLtEsVUH67zf%2F%2FwY2jRY"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Nov 2022 13:51:25 GMT
etag: "636bb05d-531b"
expires: Sat, 19 Jul 2025 04:04:16 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 1192641
cf-cache-status: HIT
cf-ray: 9591e166be3b56ab-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=766&min_rtt=0&rtt_var=419&sent=315&recv=135&lost=0&retrans=0&sent_bytes=301130&recv_bytes=13121&delivery_rate=17215485&ss_exit_cwnd=28261&ss_exit_reason=2&cwnd=38068&unsent_bytes=0&cid=fc1bd553e1d878ad&ts=730&inflight_dur=95&x=40"
GET js.txxx.tube/upd/20250627.101905.236950/static/css/chunk-common.css
45.133.44.25200 OK 237 kB URL GET js.txxx.tube/upd/20250627.101905.236950/static/css/chunk-common.css
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectjs.txxx.tube
Fingerprint21:8D:05:8A:40:50:3A:54:55:F0:55:D7:4A:00:6B:C6:52:65:D3:61
ValidityThu, 26 Jun 2025 02:32:00 GMT - Wed, 24 Sep 2025 02:31:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 237 kB (236950 bytes)
Hash be5e9ed5b2904c08dc2ce2a02327eadd
8c3930fc30b8270534308da2733ec3c633065e70
c6ba622a0ae60d5023824956048e63bef1baa49a45ddbbea4bcb5a62b8789fe7
GET /upd/20250627.101905.236950/static/css/chunk-common.css HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:37 GMT
content-type: text/css
server: nginx/1.24.0
last-modified: Fri, 27 Jun 2025 10:19:05 GMT
vary: Accept-Encoding
etag: W/"685e7019-39d96"
expires: Sat, 28 Jun 2025 10:33:34 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET js.wpushsdk.com/npc/embed.json
45.133.44.53200 OK 51 B URL GET js.wpushsdk.com/npc/embed.json
IP 45.133.44.53:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectjs.wpushsdk.com
Fingerprint0A:DC:0B:A8:1A:A8:C8:90:9C:96:FF:5B:B2:8B:1F:6D:1A:05:B2:B7
ValidityTue, 06 May 2025 02:34:10 GMT - Mon, 04 Aug 2025 02:34:09 GMT
Hash 54ac94deff344cdf8181d0d5ecef4f54
8509dc0f6710ac2228efc6c26460833f1444462e
fb431326d9475e0118b5bc83467a59a97bed0bc55b3d72de450b66ff3c55971e
GET /npc/embed.json HTTP/1.1
Host: js.wpushsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://txxx.me/
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:38 GMT
content-type: application/json
content-length: 51
server: nginx/1.18.0
last-modified: Fri, 27 Jan 2023 14:43:22 GMT
etag: "63d3e30a-33"
expires: Wed, 02 Jul 2025 23:26:38 GMT
cache-control: max-age=300
x-cdn-host-id: ah1742
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET txxx.me/api/json/main/14400/str.en.json
62.122.168.133200 OK 7.5 kB URL GET txxx.me/api/json/main/14400/str.en.json
IP 62.122.168.133:443
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjecttxxx.me
FingerprintDE:06:F1:19:49:C7:92:24:44:19:C5:CC:E3:47:1F:16:0C:A5:CA:C1
ValidityTue, 03 Jun 2025 03:07:46 GMT - Mon, 01 Sep 2025 03:07:45 GMT
Hash 86cfae350167c9bf543ceeb4ad4d34f2
09cb26742a1cc56990054562e5da43b4bde883fc
fa8a67e604993c66790724b744bcb9b4a94e3300fba5002ed5aacf4f0d390b96
GET /api/json/main/14400/str.en.json HTTP/1.1
Host: txxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/embed/13625062/?source=1034714855
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Wed, 02 Jul 2025 23:21:38 GMT
content-type: application/json
last-modified: Wed, 02 Jul 2025 23:00:07 GMT
vary: Accept-Encoding
etag: W/"6865b9f7-1d45"
expires: Wed, 02 Jul 2025 23:26:38 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
OPTIONS vast.yomeno.xyz/prepare
62.122.173.28204 No Content 0 B IP 62.122.173.28:443
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint8B:6A:4D:FB:A4:A1:8B:3B:9F:CA:01:82:F0:42:F1:27:57:DE:C7:33
ValidityWed, 04 Jun 2025 03:21:44 GMT - Tue, 02 Sep 2025 03:21:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://txxx.me/
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Wed, 02 Jul 2025 23:21:39 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://txxx.me
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
content-type: text/plain; charset=utf-8
content-length: 0
X-Firefox-Spdy: h2
GET txxx.me/get_file/22/72766b05f88e068f3db70bdba0e289d1eec37f9e09/13625000/13625062/13625062_hq.mp4/?d=598&br=198&ti=1751498499
62.122.168.133302 Found 2.4 MB URL GET txxx.me/get_file/22/72766b05f88e068f3db70bdba0e289d1eec37f9e09/13625000/13625062/13625062_hq.mp4/?d=598&br=198&ti=1751498499
IP 62.122.168.133:443
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjecttxxx.me
FingerprintDE:06:F1:19:49:C7:92:24:44:19:C5:CC:E3:47:1F:16:0C:A5:CA:C1
ValidityTue, 03 Jun 2025 03:07:46 GMT - Mon, 01 Sep 2025 03:07:45 GMT
Size 2.4 MB (2358884 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get_file/22/72766b05f88e068f3db70bdba0e289d1eec37f9e09/13625000/13625062/13625062_hq.mp4/?d=598&br=198&ti=1751498499 HTTP/1.1
Host: txxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/embed/13625062/?source=1034714855
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.24.0
date: Wed, 02 Jul 2025 23:21:39 GMT
content-type: text/html; charset=UTF-8
location: https://txxx.ahcdn.com/key=1VuR1OmHKX80hssF+SP+rg,end=1751584899,limit=3/data=yUiYcQ/speed=3.0/buffer=778K/referer=none,.txxx.me,.gstatic.com/c12/videos/13625000/13625062/13625062_hq.mp4
x-powered-by: PHP/7.2.34
access-control-allow-origin: *
X-Firefox-Spdy: h2
POST vast.vstserv.com/vast
109.206.161.16200 OK 4.0 kB IP 109.206.161.16:443
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectvast.vstserv.com
FingerprintC7:70:FA:CB:6A:D1:96:78:22:03:4A:C1:9A:1C:AB:A8:6D:A8:EB:C1
ValidityMon, 16 Jun 2025 03:19:36 GMT - Sun, 14 Sep 2025 03:19:35 GMT
Hash cb0bd6947683dd5d8b52602b7e2f5faf
9cd13a583fe31aa6da2b25cd66791ff314727857
f5aeda39ed99a3441a6b9b23f5a769be5ea2fc7da51c0d7d0cab6d614d761257
POST /vast HTTP/1.1
Host: vast.vstserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1400
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 02 Jul 2025 23:21:39 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: Accept-Encoding, *
access-control-allow-credentials: true
access-control-allow-origin: https://txxx.me
access-control-expose-headers: Content-Length,Content-Range
content-encoding: gzip
X-Firefox-Spdy: h2
GET a.labadena.com/api/spots/458877?p=1
37.27.230.125200 OK 11 kB URL GET a.labadena.com/api/spots/458877?p=1
IP 37.27.230.125:443
ASN #24940 Hetzner Online GmbH
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerLet's Encrypt
Subjecta.labadena.com
Fingerprint95:52:FA:DF:EF:05:5E:A0:C0:62:A7:75:51:E5:2D:B7:50:B0:EC:F6
ValidityWed, 14 May 2025 23:28:38 GMT - Tue, 12 Aug 2025 23:28:37 GMT
File type HTML document, ASCII text, with very long lines (4733)
Hash e44a4c63f84eb0765e4dde8249050a81
059d833ed6ff55d3d45930e02ad6b3aff2808de0
61b76bacced7452af13403d65fd696d84fbc2ddc8c30b9d243bbaf680966f34f
GET /api/spots/458877?p=1 HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: nauid=ABL6wCfHl0PPZDKj6f6U; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
GET 18xxx.name/image/16/732_kats.jpg
104.21.11.238200 OK 15 kB URL GET 18xxx.name/image/16/732_kats.jpg
IP 104.21.11.238:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3
Hash a5b42e69e2509163a2185773e41b6a4d
138960f4f559da47d9f05e54f7d822fe8c9993bf
694299058a1c94e0412a69a6313be5fd8b27f3f629c456072bf6859cd6c5b243
GET /image/16/732_kats.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: image/jpeg
content-length: 14738
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=57c6WmMdLCa7rvcw690DFb%2BE5seEQyWGr5xO9joVtn8fohCMLpZcp67Dm8dMOG3PsbkaWUuGV9A7GWSYsvQWCEOT3SKxNzId%2FUQZGy7B0rMqcuQpACCXJQCZQ4Y5"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 16 Dec 2021 06:40:44 GMT
etag: "61badf6c-3992"
expires: Fri, 01 Aug 2025 08:40:03 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 52893
cf-cache-status: HIT
cf-ray: 9591e1661e3356ab-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2102&min_rtt=354&rtt_var=1791&sent=171&recv=116&lost=0&retrans=0&sent_bytes=119354&recv_bytes=11669&delivery_rate=14406863&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=28261&unsent_bytes=0&cid=fc1bd553e1d878ad&ts=626&inflight_dur=76&x=40"
GET a.labadena.com/api/click/11382214394441083115?c=90
37.27.230.125200 OK 0 B URL GET a.labadena.com/api/click/11382214394441083115?c=90
IP 37.27.230.125:443
ASN #24940 Hetzner Online GmbH
Requested by https://a.labadena.com/api/spots/458877?p=1
Certificate IssuerLet's Encrypt
Subjecta.labadena.com
Fingerprint95:52:FA:DF:EF:05:5E:A0:C0:62:A7:75:51:E5:2D:B7:50:B0:EC:F6
ValidityWed, 14 May 2025 23:28:38 GMT - Tue, 12 Aug 2025 23:28:37 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/11382214394441083115?c=90 HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/api/spots/458877?p=1
Cookie: nauid=meCfRMmq7e21PC65tRho
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:37 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
GET 18xxx.name/image/1/090_japanese.jpg
104.21.11.238200 OK 17 kB URL GET 18xxx.name/image/1/090_japanese.jpg
IP 104.21.11.238:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3
Hash d7f88d108781c4d71fa51acfaa0245c7
889760ebbe40105b73bdef4697d55b0cc2a3c83a
6d780800ff64b7be8c7828d7a26df1e042751e5665e692c9b11cce1e150c1ca1
GET /image/1/090_japanese.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: image/jpeg
content-length: 17180
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xu7SoXx1whKoGo145r17s%2BWkDvKUozy9DmqoeygwVLCOWJDLtLQf34UACq54QHKnHdUDqiG5HWYDdrOM5cqg%2BTQ8YzTcrJn3V2qFZ8wJYNVNd02yue2xjcdrfF09"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 03:16:13 GMT
etag: "61ac2efd-431c"
expires: Sat, 26 Jul 2025 18:49:08 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 534748
cf-cache-status: HIT
cf-ray: 9591e1660e2b56ab-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3143&min_rtt=354&rtt_var=2973&sent=99&recv=109&lost=0&retrans=0&sent_bytes=26145&recv_bytes=10232&delivery_rate=3303943&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=28261&unsent_bytes=0&cid=fc1bd553e1d878ad&ts=618&inflight_dur=67&x=40"
GET playhubconnect.com/bn/475/0d8/09c/4750d809c08b7714931e4b6765ac926a3a0382e8.mp4
104.18.14.39206 Partial Content 233 kB URL GET playhubconnect.com/bn/475/0d8/09c/4750d809c08b7714931e4b6765ac926a3a0382e8.mp4
IP 104.18.14.39:443
Requested by https://a.labadena.com/api/spots/458877?p=1
Certificate IssuerGoogle Trust Services
Subjectplayhubconnect.com
Fingerprint2D:1F:FB:2B:88:35:8C:8D:A2:9A:DC:7D:D0:1A:7E:79:7F:76:1A:AA
ValidityMon, 19 May 2025 17:44:53 GMT - Sun, 17 Aug 2025 18:44:46 GMT
File type ISO Media, MP4 v2 [ISO 14496-14]
Size 233 kB (233333 bytes)
Hash 5541e875b54c4c94af7b92e00e597b9f
4750d809c08b7714931e4b6765ac926a3a0382e8
375d1cd51c4b9ac3f27b0d446384df03ab7b300da620c6333c06dc1c2db440ff
GET /bn/475/0d8/09c/4750d809c08b7714931e4b6765ac926a3a0382e8.mp4 HTTP/1.1
Host: playhubconnect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Wed, 02 Jul 2025 23:21:38 GMT
content-type: video/mp4
content-length: 233333
x-amz-id-2: LRaAZZcwIHB5kXETxdm7XwSDTJfbGfQ7vLNlcmvHJXN+jBacgYDE7JHHPZnw/vbaNIlnJheKOaLWjm4Ly9/zpA==
x-amz-request-id: 49A43SCA7AHFEK2M
last-modified: Wed, 18 Dec 2024 11:22:49 GMT
etag: "5541e875b54c4c94af7b92e00e597b9f"
x-amz-server-side-encryption: AES256
cf-cache-status: HIT
age: 1170688
expires: Sat, 02 Aug 2025 23:21:38 GMT
cache-control: public, max-age=2678400
content-range: bytes 0-233332/233333
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 9591e16f48835689-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET js.txxx.tube/upd/20250627.101822.13998/assets/previewl1b.20190620.1.js
45.133.44.25200 OK 14 kB URL GET js.txxx.tube/upd/20250627.101822.13998/assets/previewl1b.20190620.1.js
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectjs.txxx.tube
Fingerprint21:8D:05:8A:40:50:3A:54:55:F0:55:D7:4A:00:6B:C6:52:65:D3:61
ValidityThu, 26 Jun 2025 02:32:00 GMT - Wed, 24 Sep 2025 02:31:59 GMT
File type JavaScript source, ASCII text, with very long lines (2132)
Hash 016250689f92c50834dd9fdd69aea4bd
04fb454df0b572299ff24696138a3002b0eade94
d2cd90ddc320247e99ba4950e09a2e2dac61318f93abe8d02fdd95c6ef00f62a
GET /upd/20250627.101822.13998/assets/previewl1b.20190620.1.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:37 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Fri, 27 Jun 2025 10:18:22 GMT
vary: Accept-Encoding
etag: W/"685e6fee-36ae"
expires: Sat, 28 Jun 2025 10:33:34 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
142.250.74.35200 OK 15 kB URL GET fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
IP 142.250.74.35:443
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File type Web Open Font Format (Version 2), TrueType, length 14892, version 1.0
Hash 9ec6deaf6bada919e20b98f9f7b718b1
501d36403ad8205e4644532600019ecb10f5cb0a
7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jun 2025 10:13:40 GMT
expires: Fri, 26 Jun 2026 10:13:40 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 565678
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET bullionglidingscuttle.com/get/2005586?zoneid=2005586&pid=__clb-2005586_1&jp=_clggaqhjqvwqhtcsofplao&dr=52&cuaa=2&nojs=0&bavar=0&febuild=1.0.562&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&psr=OCJJF9KaHR0cHM6Ly8xOHh4eC5uYW1lLw&ix=0&x=801&y=801&md=0&psu=cbu618baHR0cHM6Ly9hLmxhYmFkZW5hLmNvbS9hcGkvc3BvdHMvNDU4ODc3P3A9MQ&afid=6588710669896192&eclog=0&seu=9MhB5lZaHR0cHM6Ly8xOHh4eC5uYW1lLw&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5&bp=0&uf=0&freq=0
94.242.247.20200 OK 11 kB URL GET bullionglidingscuttle.com/get/2005586?zoneid=2005586&pid=__clb-2005586_1&jp=_clggaqhjqvwqhtcsofplao&dr=52&cuaa=2&nojs=0&bavar=0&febuild=1.0.562&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&psr=OCJJF9KaHR0cHM6Ly8xOHh4eC5uYW1lLw&ix=0&x=801&y=801&md=0&psu=cbu618baHR0cHM6Ly9hLmxhYmFkZW5hLmNvbS9hcGkvc3BvdHMvNDU4ODc3P3A9MQ&afid=6588710669896192&eclog=0&seu=9MhB5lZaHR0cHM6Ly8xOHh4eC5uYW1lLw&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5&bp=0&uf=0&freq=0
IP 94.242.247.20:443
Requested by https://a.labadena.com/api/spots/458877?p=1
Certificate IssuerBuypass AS-983163327
Subject
FingerprintC1:41:36:2B:0F:2D:49:78:DA:E4:70:2C:6A:68:9E:0C:A4:8A:8D:5F
ValidityTue, 04 Mar 2025 00:04:45 GMT - Sat, 30 Aug 2025 21:59:00 GMT
File type ASCII text, with very long lines (11058), with no line terminators
Hash b7e9e5422e24721e53d76e39f2aca6bc
92b62eaa2b84ca0f617e06b0b094b7c390981bad
f1abc5043ada26bd282ac0dca60d51b929338d464856d5e9c7376ed3fb70a5bc
GET /get/2005586?zoneid=2005586&pid=__clb-2005586_1&jp=_clggaqhjqvwqhtcsofplao&dr=52&cuaa=2&nojs=0&bavar=0&febuild=1.0.562&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&psr=OCJJF9KaHR0cHM6Ly8xOHh4eC5uYW1lLw&ix=0&x=801&y=801&md=0&psu=cbu618baHR0cHM6Ly9hLmxhYmFkZW5hLmNvbS9hcGkvc3BvdHMvNDU4ODc3P3A9MQ&afid=6588710669896192&eclog=0&seu=9MhB5lZaHR0cHM6Ly8xOHh4eC5uYW1lLw&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5&bp=0&uf=0&freq=0 HTTP/1.1
Host: bullionglidingscuttle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:38 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2507021821ebf2fc6e929a4032a8e07bc974; Path=/; Expires=Wed, 05 Aug 2026 23:21:38 GMT; Secure; SameSite=None
CHCK=1; Path=/; Expires=Wed, 05 Aug 2026 23:21:38 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
GET playhubconnect.com/bn/118/69f/cf6/11869fcf666ed7d8e2dce913175f1c9a4e69e38c.mp4
104.18.14.39206 Partial Content 20 kB URL GET playhubconnect.com/bn/118/69f/cf6/11869fcf666ed7d8e2dce913175f1c9a4e69e38c.mp4
IP 104.18.14.39:443
Requested by https://a.labadena.com/api/spots/458877?p=1
Certificate IssuerGoogle Trust Services
Subjectplayhubconnect.com
Fingerprint2D:1F:FB:2B:88:35:8C:8D:A2:9A:DC:7D:D0:1A:7E:79:7F:76:1A:AA
ValidityMon, 19 May 2025 17:44:53 GMT - Sun, 17 Aug 2025 18:44:46 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Hash 50d6ce4fc8649a78928ae1128fd2250d
11869fcf666ed7d8e2dce913175f1c9a4e69e38c
e44fa3e01bc3a5ea81469891164d69dd4cd7df92b86a069c5310ff6bdc87319a
GET /bn/118/69f/cf6/11869fcf666ed7d8e2dce913175f1c9a4e69e38c.mp4 HTTP/1.1
Host: playhubconnect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Wed, 02 Jul 2025 23:21:38 GMT
content-type: video/mp4
content-length: 19601
x-amz-id-2: aeNXKuYLqIL/8mNcijTNo0Kqjj9fO50eVnxl1XJk7RNrS6I6slrkVgJanyYxmE5tJJo+5cmBpyxnoUgczBoj9g==
x-amz-request-id: 6RS8N58PYW9ZKBQR
last-modified: Wed, 11 Jun 2025 15:25:59 GMT
etag: "50d6ce4fc8649a78928ae1128fd2250d"
x-amz-server-side-encryption: AES256
cf-cache-status: HIT
age: 1712758
expires: Sat, 02 Aug 2025 23:21:38 GMT
cache-control: public, max-age=2678400
content-range: bytes 0-19600/19601
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 9591e16f487d5689-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
OPTIONS fp.metricswpsh.com/fp?tag_id=755
157.90.84.242204 No Content 0 B URL OPTIONS fp.metricswpsh.com/fp?tag_id=755
IP 157.90.84.242:443
ASN #24940 Hetzner Online GmbH
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
Fingerprint7E:67:6E:60:DA:54:65:A6:A2:F7:52:44:8A:5F:F2:EF:60:96:4D:A7
ValidityMon, 16 Jun 2025 02:50:45 GMT - Sun, 14 Sep 2025 02:50:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=755 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://txxx.me/
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Wed, 02 Jul 2025 23:21:39 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://txxx.me
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
GET 18xxx.name/js/scripts.js
104.21.11.238200 OK 2.6 kB IP 104.21.11.238:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type JavaScript source, ASCII text, with CRLF line terminators
Hash a7e729247d8bacbc8a3a4b196e53a7b2
dbccfe97550cec819592408f75480b88efafaed5
254f09ea176987beb80b8452e9de5c82135b0891c4ddcf4ec0ca48488c79bfc2
GET /js/scripts.js HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PPC2kDMHeyMpbVBVxy3zAH2mJAAcErpGaJiTM4gsTs2AzmgylW%2B2cO2YX%2BWT4cEPKKCS9ihjjnfLcBbrmavQR7BSnjAp2gMOq9X5%2BaaNhJ9dL2RN8YnFMpO%2BOcPh"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Nov 2022 13:50:47 GMT
etag: W/"636bb037-a2a"
expires: Sat, 19 Jul 2025 04:04:05 GMT
cache-control: max-age=31536000
age: 1192651
cf-cache-status: HIT
content-encoding: br
cf-ray: 9591e163be1156ab-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3255&min_rtt=485&rtt_var=2583&sent=73&recv=92&lost=0&retrans=0&sent_bytes=8409&recv_bytes=5564&delivery_rate=579122&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=18066&unsent_bytes=0&cid=fc1bd553e1d878ad&ts=254&inflight_dur=31&x=40"
GET a.labadena.com/api/settings/459138
37.27.230.125200 OK 33 B URL GET a.labadena.com/api/settings/459138
IP 37.27.230.125:443
ASN #24940 Hetzner Online GmbH
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerLet's Encrypt
Subjecta.labadena.com
Fingerprint95:52:FA:DF:EF:05:5E:A0:C0:62:A7:75:51:E5:2D:B7:50:B0:EC:F6
ValidityWed, 14 May 2025 23:28:38 GMT - Tue, 12 Aug 2025 23:28:37 GMT
Hash 1be64b6d6652effba7dcf744e90def6a
d9fbc7d1fa49fa4733f90a3739882d63972c2352
72d79d0ad9a70ef53c1bab65c588d44bffb1a1b5aba0eb2f9f6a886c4c3aec4f
GET /api/settings/459138 HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://18xxx.name
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
GET 18xxx.name/image/8/252_near-for.jpg
104.21.11.238200 OK 15 kB URL GET 18xxx.name/image/8/252_near-for.jpg
IP 104.21.11.238:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3
Hash 372a5e513f4cffcfccbfe93f63e31c09
4867c8cc3c50bc2a9045e2325bb8e780006f27df
b4bfa1fc967779f33bd2e1ec2804994b269b372c155b17e827a22c7785e3e0a2
GET /image/8/252_near-for.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: image/jpeg
content-length: 15308
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UtjUCsIl%2BzWUJkC1qkOyRlRQOCKXqGWnKWvN8gj9k3IZUTgJC3Bydu2AFJmZrAcwONtXsFQm5M93uRG9Y%2Fng5MxvtLqytxzE1vLpjEhx1p2F%2FVHsF9TtJ56Ieau%2F"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 04:09:30 GMT
etag: "61ac3b7a-3bcc"
expires: Fri, 01 Aug 2025 16:44:31 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 23825
cf-cache-status: HIT
cf-ray: 9591e1660e2d56ab-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2838&min_rtt=354&rtt_var=2839&sent=115&recv=110&lost=0&retrans=0&sent_bytes=48465&recv_bytes=10279&delivery_rate=4992878&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=28261&unsent_bytes=0&cid=fc1bd553e1d878ad&ts=620&inflight_dur=69&x=40"
GET ip270120703.ahcdn.com/key=nODpU1XcwwwII51X7-nOTw,s=,end=1751584901,limit=3/data=gVcQpd/state=aGW-W1oq/buffer=778000:1186698,598.1/speed=396836/referer=none,.txxx.me,.gstatic.com/reftag=063878343/ssd8/121/9/186130139/tx/c12/videos/13625000/13625062/13625062_hq.mp4
188.209.213.180206 Partial Content 2.1 MB URL GET ip270120703.ahcdn.com/key=nODpU1XcwwwII51X7-nOTw,s=,end=1751584901,limit=3/data=gVcQpd/state=aGW-W1oq/buffer=778000:1186698,598.1/speed=396836/referer=none,.txxx.me,.gstatic.com/reftag=063878343/ssd8/121/9/186130139/tx/c12/videos/13625000/13625062/13625062_hq.mp4
IP 188.209.213.180:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerGoGetSSL
Subject*.ahcdn.com
Fingerprint99:99:89:EB:9F:31:C2:E3:B2:10:F6:4F:E6:6D:E6:59:B7:6F:EA:13
ValidityThu, 29 May 2025 00:00:00 GMT - Sun, 28 Jun 2026 23:59:59 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Size 2.1 MB (2097152 bytes)
Hash 9f8229fea941bb2cfa32ab9157300f73
4150734861e61e47e7a8a1aafacf380712d1c0b2
94a79e1b31fba4bd210adea3190ee991a4c27228ab12660630e0e80d33b95349
GET /key=nODpU1XcwwwII51X7-nOTw,s=,end=1751584901,limit=3/data=gVcQpd/state=aGW-W1oq/buffer=778000:1186698,598.1/speed=396836/referer=none,.txxx.me,.gstatic.com/reftag=063878343/ssd8/121/9/186130139/tx/c12/videos/13625000/13625062/13625062_hq.mp4 HTTP/1.1
Host: ip270120703.ahcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-
Referer: https://txxx.me/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
server: nginx/1.22.0
date: Wed, 02 Jul 2025 23:21:41 GMT
content-type: video/mp4
content-length: 79113249
last-modified: Fri, 16 May 2025 21:41:58 GMT
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
etag: "6827b126-4b72c21"
expires: Thu, 03 Jul 2025 01:21:41 GMT
cache-control: max-age=7200, private
content-range: bytes 0-79113248/79113249
X-Firefox-Spdy: h2
GET bullionglidingscuttle.com/check.html
94.242.247.20200 OK 926 B URL GET bullionglidingscuttle.com/check.html
IP 94.242.247.20:443
Requested by https://a.labadena.com/api/spots/458877?p=1
Certificate IssuerBuypass AS-983163327
Subject
FingerprintC1:41:36:2B:0F:2D:49:78:DA:E4:70:2C:6A:68:9E:0C:A4:8A:8D:5F
ValidityTue, 04 Mar 2025 00:04:45 GMT - Sat, 30 Aug 2025 21:59:00 GMT
File type HTML document, ASCII text
Hash 088dba8e97eede53134c93219f7ebbae
adb707654d1fe0af7d0d7a9f55660d22bd3625e4
6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff
GET /check.html HTTP/1.1
Host: bullionglidingscuttle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:37 GMT
content-type: text/html; charset=utf-8
last-modified: Mon, 30 Jun 2025 09:44:32 GMT
vary: Accept-Encoding
etag: W/"68625c80-39e"
x-js-ab: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
POST fp.metricswpsh.com/fp?tag_id=755
157.90.84.242200 OK 60 B URL POST fp.metricswpsh.com/fp?tag_id=755
IP 157.90.84.242:443
ASN #24940 Hetzner Online GmbH
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
Fingerprint7E:67:6E:60:DA:54:65:A6:A2:F7:52:44:8A:5F:F2:EF:60:96:4D:A7
ValidityMon, 16 Jun 2025 02:50:45 GMT - Sun, 14 Sep 2025 02:50:44 GMT
Hash f70144a999de9a4466217c06015bc215
80c4e448a3fc5f2e1ecd89faa2ecd64e3d60cc68
be6b7108af31688e442b429e552bd19fff8fbe851731358342e4d79d55678218
POST /fp?tag_id=755 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1980
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Wed, 02 Jul 2025 23:21:39 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 60
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://txxx.me
Set-Cookie: id=13707594033220057248; Expires=Thu, 02 Jul 2026 23:21:39 GMT; Secure; SameSite=None
Vary: Origin
GET maucn.yomeno.xyz/in/dip?event_id=ad7c568a-a2f5-4db5-ba9e-0d7fce2bdc5f
116.202.73.32200 OK 0 B URL GET maucn.yomeno.xyz/in/dip?event_id=ad7c568a-a2f5-4db5-ba9e-0d7fce2bdc5f
IP 116.202.73.32:443
ASN #24940 Hetzner Online GmbH
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectvideo.infrapu.sh
Fingerprint24:45:D2:52:BA:BC:C8:C4:F5:C9:C3:E8:F7:A2:4B:5E:D4:54:11:31
ValidityTue, 20 May 2025 02:42:26 GMT - Mon, 18 Aug 2025 02:42:25 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?event_id=ad7c568a-a2f5-4db5-ba9e-0d7fce2bdc5f HTTP/1.1
Host: maucn.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Wed, 02 Jul 2025 23:21:40 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET txxx.ahcdn.com/key=STxR1yVASnSwAjw7QkdZdw,end=1751584900,limit=3/data=3JPe8S/speed=3.0/buffer=778K/referer=none,.txxx.me,.gstatic.com/c12/videos/13625000/13625062/13625062_hq.mp4
185.185.15.4302 Found 2.1 MB URL GET txxx.ahcdn.com/key=STxR1yVASnSwAjw7QkdZdw,end=1751584900,limit=3/data=3JPe8S/speed=3.0/buffer=778K/referer=none,.txxx.me,.gstatic.com/c12/videos/13625000/13625062/13625062_hq.mp4
IP 185.185.15.4:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjecttxxx.ahcdn.com
FingerprintAD:43:57:72:3B:39:2E:1F:30:F1:48:52:87:D9:9D:2E:34:81:B8:B4
ValiditySun, 01 Jun 2025 02:33:33 GMT - Sat, 30 Aug 2025 02:33:32 GMT
Size 2.1 MB (2097152 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /key=STxR1yVASnSwAjw7QkdZdw,end=1751584900,limit=3/data=3JPe8S/speed=3.0/buffer=778K/referer=none,.txxx.me,.gstatic.com/c12/videos/13625000/13625062/13625062_hq.mp4 HTTP/1.1
Host: txxx.ahcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-
Referer: https://txxx.me/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.20.1
date: Wed, 02 Jul 2025 23:21:40 GMT
content-length: 0
location: https://ip270120703.ahcdn.com/key=sCJun9N36FIB2MPcD0Ar1g,s=,end=1751584900,limit=3/data=3JPe8S/state=aGW-W1oq/buffer=778000:1186698,598.1/speed=396836/referer=none,.txxx.me,.gstatic.com/reftag=063878343/ssd8/121/9/186130139/tx/c12/videos/13625000/13625062/13625062_hq.mp4
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
cache-control: private, max-age=300
expires: Wed, 02 Jul 2025 23:26:40 GMT
X-Firefox-Spdy: h2
GET 18xxx.name/image/1/063_be.jpg
104.21.11.238200 OK 21 kB URL GET 18xxx.name/image/1/063_be.jpg
IP 104.21.11.238:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3
Hash 43d8a2c2d5694f20362fd61b3d75e050
839a7cbcc60f72419619bce8ffd9cdd9c8ed0e40
3a1465c31221676675a220d5fa8773752afc2bd645e62d57395e53f24ecbac9d
GET /image/1/063_be.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: image/jpeg
content-length: 20681
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J%2F4P%2BvnREqcBg4UEmG1HlwlHxRneUHiedzldoDB%2B9ZjkyWygYmWnGLYuxsKhKlYBkPCQmqAdejy7tPb5JPMPpdFPwWLBLmYA1Z%2FvKKDzLMtmr5mTN5lDjpkJTSk%2B"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 03:16:07 GMT
etag: "61ac2ef7-50c9"
expires: Thu, 17 Jul 2025 01:58:23 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 1372993
cf-cache-status: HIT
cf-ray: 9591e1661e2f56ab-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2542&min_rtt=354&rtt_var=2723&sent=123&recv=111&lost=0&retrans=0&sent_bytes=59665&recv_bytes=10325&delivery_rate=6806773&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=28261&unsent_bytes=0&cid=fc1bd553e1d878ad&ts=620&inflight_dur=70&x=40"
GET 18xxx.name/image/11/596_sloppy-schoolgirl-of.jpg
104.21.11.238200 OK 13 kB URL GET 18xxx.name/image/11/596_sloppy-schoolgirl-of.jpg
IP 104.21.11.238:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3
Hash d7083891db694ea1d500769391cb0302
7c9a640cc21685993e3a52d906f055779d9955de
6c7303aa0e1a10cc61853617f6d12120374d320e651e6dfaf0c52c8d172573d1
GET /image/11/596_sloppy-schoolgirl-of.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: image/jpeg
content-length: 12617
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UGT51uCL69CsdS4jRyM3EXNFt9l%2B2tvnTSRadd4Qid7aNdkDzU1Ir7Wm7P%2FEIgZ3Jq7UIP9rKlc12jgKMM0fI6P2MaMADMAV4h%2F1BzD9MRJGj8AruyaL28t8p%2F%2B%2F"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 05:25:17 GMT
etag: "61ac4d3d-3149"
expires: Fri, 01 Aug 2025 23:02:37 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 1139
cf-cache-status: HIT
cf-ray: 9591e1661e3056ab-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2542&min_rtt=354&rtt_var=2723&sent=126&recv=112&lost=0&retrans=0&sent_bytes=62806&recv_bytes=11215&delivery_rate=6806773&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=28261&unsent_bytes=0&cid=fc1bd553e1d878ad&ts=621&inflight_dur=71&x=40"
GET vast.yomeno.xyz/s/tubecorp/embed?source=1034714855
62.122.173.28200 OK 17 B URL GET vast.yomeno.xyz/s/tubecorp/embed?source=1034714855
IP 62.122.173.28:443
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint8B:6A:4D:FB:A4:A1:8B:3B:9F:CA:01:82:F0:42:F1:27:57:DE:C7:33
ValidityWed, 04 Jun 2025 03:21:44 GMT - Tue, 02 Sep 2025 03:21:43 GMT
Hash 32fde8aac4ef964567ca367a253e8ef6
f411099fb4ffbb8730e242935aea722856b171dd
9c8968018d78912f578210884f3285fdc963934d02785e4e0bd141f66bc92d09
GET /s/tubecorp/embed?source=1034714855 HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://txxx.me/
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 02 Jul 2025 23:21:38 GMT
content-type: application/json
content-length: 17
access-control-allow-credentials: true
access-control-allow-origin: https://txxx.me
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
GET js.txxx.tube/flytrain/exort7.10.13.415a150d8ca331c798f49c864e02c543.js
45.133.44.25200 OK 163 kB URL GET js.txxx.tube/flytrain/exort7.10.13.415a150d8ca331c798f49c864e02c543.js
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectjs.txxx.tube
Fingerprint21:8D:05:8A:40:50:3A:54:55:F0:55:D7:4A:00:6B:C6:52:65:D3:61
ValidityThu, 26 Jun 2025 02:32:00 GMT - Wed, 24 Sep 2025 02:31:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Size 163 kB (163086 bytes)
Hash 681c0c3220aeebe58c500d60e3e3032a
ecf476171b00e60dd9a225ebd9c716b93c1d8090
a0c172d12e8fd726c068e432fc822d6070021aa5daa4429bbd291419188944cf
GET /flytrain/exort7.10.13.415a150d8ca331c798f49c864e02c543.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:37 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Fri, 27 Jun 2025 10:30:39 GMT
vary: Accept-Encoding
etag: W/"685e72cf-27d0e"
expires: Sun, 29 Jun 2025 10:14:46 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET txxx.me/api/json/categories/14400/str.all.en.json
62.122.168.133200 OK 98 kB URL GET txxx.me/api/json/categories/14400/str.all.en.json
IP 62.122.168.133:443
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjecttxxx.me
FingerprintDE:06:F1:19:49:C7:92:24:44:19:C5:CC:E3:47:1F:16:0C:A5:CA:C1
ValidityTue, 03 Jun 2025 03:07:46 GMT - Mon, 01 Sep 2025 03:07:45 GMT
Hash a9bf870347cc9ed81400bf4ae2ec4969
ecf1fccf18db292aff39f2fc87db9c162066e4bd
9c99f1f3cd6f47830ab32d6e446ba761db75d694b0da445157135c9b671ae8ee
GET /api/json/categories/14400/str.all.en.json HTTP/1.1
Host: txxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/embed/13625062/?source=1034714855
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Wed, 02 Jul 2025 23:21:38 GMT
content-type: application/json
last-modified: Wed, 02 Jul 2025 23:00:07 GMT
vary: Accept-Encoding
etag: W/"6865b9f7-17e02"
expires: Wed, 02 Jul 2025 23:26:38 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
GET 18xxx.name/image/10/133_knuckle.jpg
104.21.11.238200 OK 6.4 kB URL GET 18xxx.name/image/10/133_knuckle.jpg
IP 104.21.11.238:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3
Hash 25c46ea4d90fe260ae130b1d9e1d5f7f
dd4ba70c9d6d4ab0d940cfcde2db2c5c2c9463d8
121506fe87bc6ee3c121890cfb60bb0a2c353e0621fd418854d197cca174119e
GET /image/10/133_knuckle.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: image/jpeg
content-length: 6408
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eCHtHNlojgqKhWO%2Baur%2FYoijNi%2Fij9zSGlGp9aKsQuBZzGJ0JcqOyRl9LFOK4RKvKUptbBCX8P%2FhpLHAreTkhwPb%2B5IcYdU4GvzhDJMdv0Fricqq9qF8PbdGV%2Beo"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 05:05:59 GMT
etag: "61ac48b7-1908"
expires: Tue, 15 Jul 2025 05:52:34 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 1531741
cf-cache-status: HIT
cf-ray: 9591e1660e2956ab-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3542&min_rtt=485&rtt_var=2901&sent=89&recv=106&lost=0&retrans=0&sent_bytes=13290&recv_bytes=9263&delivery_rate=1191468&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=22661&unsent_bytes=0&cid=fc1bd553e1d878ad&ts=615&inflight_dur=66&x=40"
GET bullionglidingscuttle.com/lv/esnk/2005586/code.js
94.242.247.20200 OK 161 kB URL GET bullionglidingscuttle.com/lv/esnk/2005586/code.js
IP 94.242.247.20:443
Requested by https://a.labadena.com/api/spots/458877?p=1
Certificate IssuerBuypass AS-983163327
Subject
FingerprintC1:41:36:2B:0F:2D:49:78:DA:E4:70:2C:6A:68:9E:0C:A4:8A:8D:5F
ValidityTue, 04 Mar 2025 00:04:45 GMT - Sat, 30 Aug 2025 21:59:00 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 161 kB (161156 bytes)
Hash a65d9f9fad18c02f1bc6299b892d9e4c
cb731d8a32c5e5690b5ffe5cba4668bf95a7e481
45c14663e98301f144027f5f734a50cfb002e2424f37ba1bc04f14d27b193b94
GET /lv/esnk/2005586/code.js HTTP/1.1
Host: bullionglidingscuttle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:37 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 30 Jun 2025 09:49:14 GMT
vary: Accept-Encoding
etag: W/"68625d9a-2762c"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css?family=Source+Sans+Pro:400,600,700&display=swap
142.250.74.10200 OK 7.8 kB URL GET fonts.googleapis.com/css?family=Source+Sans+Pro:400,600,700&display=swap
IP 142.250.74.10:443
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
Hash c4bbb461f97583947d47dcf696ba2194
bd50715543f7afede1017fb9e7efc3f38c4efa9f
0625e1d27b09fb1b194f9a5ac9cfbc18a4321301294d77ecfe65e52a78416505
GET /css?family=Source+Sans+Pro:400,600,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 02 Jul 2025 23:21:37 GMT
date: Wed, 02 Jul 2025 23:21:37 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET js.txxx.tube/zgsk9shzp8/40x3ui84go.js
45.133.44.25200 OK 19 kB URL GET js.txxx.tube/zgsk9shzp8/40x3ui84go.js
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectjs.txxx.tube
Fingerprint21:8D:05:8A:40:50:3A:54:55:F0:55:D7:4A:00:6B:C6:52:65:D3:61
ValidityThu, 26 Jun 2025 02:32:00 GMT - Wed, 24 Sep 2025 02:31:59 GMT
File type JavaScript source, ASCII text, with very long lines (18712), with no line terminators
Hash 1bbb52bbb895e1303fa41dc28b1ec064
3dec43de9d2bbf7d49944f3b59411831406a03d0
5aa86b0dc83ad24749f337261eec1f3a035afa84ee520b2f248d742bafa507d6
GET /zgsk9shzp8/40x3ui84go.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:38 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Wed, 02 Jul 2025 15:52:39 GMT
vary: Accept-Encoding
etag: W/"686555c7-4918"
expires: Thu, 03 Jul 2025 15:52:40 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET bullionglidingscuttle.com/jserror?type=banner&bavar=0&build=1.0.562&zoneid=2005586&e=Error&m=BCLC&aa=0&trid=&url=https%3A%2F%2Fa.labadena.com%2Fapi%2Fspots%2F458877%3Fp%3D1
94.242.247.20200 OK 0 B URL GET bullionglidingscuttle.com/jserror?type=banner&bavar=0&build=1.0.562&zoneid=2005586&e=Error&m=BCLC&aa=0&trid=&url=https%3A%2F%2Fa.labadena.com%2Fapi%2Fspots%2F458877%3Fp%3D1
IP 94.242.247.20:443
Requested by https://a.labadena.com/api/spots/458877?p=1
Certificate IssuerBuypass AS-983163327
Subject
FingerprintC1:41:36:2B:0F:2D:49:78:DA:E4:70:2C:6A:68:9E:0C:A4:8A:8D:5F
ValidityTue, 04 Mar 2025 00:04:45 GMT - Sat, 30 Aug 2025 21:59:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jserror?type=banner&bavar=0&build=1.0.562&zoneid=2005586&e=Error&m=BCLC&aa=0&trid=&url=https%3A%2F%2Fa.labadena.com%2Fapi%2Fspots%2F458877%3Fp%3D1 HTTP/1.1
Host: bullionglidingscuttle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/
Cookie: cart=1; cart_p=2; UID=2507021821ebf2fc6e929a4032a8e07bc974; CHCK=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:38 GMT
content-type: application/octet-stream
content-length: 0
X-Firefox-Spdy: h2
GET tn.txxx.tube/contents/videos_screenshots/13625000/13625062/preview.jpg
45.133.44.25200 OK 80 kB URL GET tn.txxx.tube/contents/videos_screenshots/13625000/13625062/preview.jpg
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjecttn.txxx.tube
FingerprintB3:16:20:25:9F:92:69:84:76:26:3D:EF:51:79:A2:44:88:C8:01:7D
ValiditySun, 18 May 2025 02:34:20 GMT - Sat, 16 Aug 2025 02:34:19 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3
Hash 0638fe3a336da3e965d815107b6f76cf
9f067262aa92cb590de5c5e707fdd321bdb9ce17
98cb5c206a3433fbcf78fa36a1cc61092f8083045613534beb68348a21302653
GET /contents/videos_screenshots/13625000/13625062/preview.jpg HTTP/1.1
Host: tn.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:39 GMT
content-type: image/jpeg
content-length: 79967
server: nginx/1.21.2
last-modified: Tue, 09 Mar 2021 08:55:22 GMT
etag: "604737fa-1385f"
cache-control: max-age=7776000
expires: Sat, 27 Jul 2024 18:04:36 GMT
x-cdn-host-id: ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET js.txxx.tube/zgsk9shzp8/5iby4rgw0y.js
45.133.44.25200 OK 39 kB URL GET js.txxx.tube/zgsk9shzp8/5iby4rgw0y.js
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectjs.txxx.tube
Fingerprint21:8D:05:8A:40:50:3A:54:55:F0:55:D7:4A:00:6B:C6:52:65:D3:61
ValidityThu, 26 Jun 2025 02:32:00 GMT - Wed, 24 Sep 2025 02:31:59 GMT
File type JavaScript source, ASCII text, with very long lines (38663), with no line terminators
Hash fb7b41f9c2b4320a719b1e0951d3ffa0
a535f1399cef61590b812b53826f352deffe9926
66fbaff9037f3e43d2bd17e8ad307c72fdaf7bc8bc7c92c3d3325d07a131071e
GET /zgsk9shzp8/5iby4rgw0y.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:39 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Wed, 02 Jul 2025 15:52:39 GMT
vary: Accept-Encoding
etag: W/"686555c7-9707"
expires: Thu, 03 Jul 2025 15:52:40 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET a.labadena.com/api/spots/459138?kw=amateur%2Carab%2Cass%2Cblowjob%2Cbritish%2Cbutt%2Ccelebrities%2Cdeepthroat%2Chandjob%2Chd%2Cfetish%2Csmalltits%2Chomemade&i=1&url=https%3A%2F%2F18xxx.name%2Fcr%2Ftubes%2F919fbb6632a27fd57413b0fdba8edde8%2Findex.php&sid=044d75ec-a136-4a23-aff0-13adc1c2a519
37.27.230.125200 OK 0 B URL GET a.labadena.com/api/spots/459138?kw=amateur%2Carab%2Cass%2Cblowjob%2Cbritish%2Cbutt%2Ccelebrities%2Cdeepthroat%2Chandjob%2Chd%2Cfetish%2Csmalltits%2Chomemade&i=1&url=https%3A%2F%2F18xxx.name%2Fcr%2Ftubes%2F919fbb6632a27fd57413b0fdba8edde8%2Findex.php&sid=044d75ec-a136-4a23-aff0-13adc1c2a519
IP 37.27.230.125:443
ASN #24940 Hetzner Online GmbH
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerLet's Encrypt
Subjecta.labadena.com
Fingerprint95:52:FA:DF:EF:05:5E:A0:C0:62:A7:75:51:E5:2D:B7:50:B0:EC:F6
ValidityWed, 14 May 2025 23:28:38 GMT - Tue, 12 Aug 2025 23:28:37 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/spots/459138?kw=amateur%2Carab%2Cass%2Cblowjob%2Cbritish%2Cbutt%2Ccelebrities%2Cdeepthroat%2Chandjob%2Chd%2Cfetish%2Csmalltits%2Chomemade&i=1&url=https%3A%2F%2F18xxx.name%2Fcr%2Ftubes%2F919fbb6632a27fd57413b0fdba8edde8%2Findex.php&sid=044d75ec-a136-4a23-aff0-13adc1c2a519 HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:36 GMT
content-length: 0
set-cookie: nauid=meCfRMmq7e21PC65tRho; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
GET 18xxx.name/stylesmain/flags/en.svg
104.21.11.238200 OK 538 B URL GET 18xxx.name/stylesmain/flags/en.svg
IP 104.21.11.238:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type SVG Scalable Vector Graphics image
Hash d3ddd6025a06a78535b0d432d14905bf
2b5148a18b90f933e47bf895c26d61a52d21d9d8
825310f9bcc8892559317bfc87fc28d5d7bad06c02d562b5740aafcf4b040803
GET /stylesmain/flags/en.svg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: image/svg+xml
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1T4GWvT3Kbc1sMZ95wvat5CJKWWDpSkSZ%2B9dfdBIBSrVvX0knAaT3Nq0ouTQyWhuOGPv0XDHw0f%2F4jbjymq5wrlvQynDGf2xuavneRKK5Dk1jyv3RtpfP5eeLs5W"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Nov 2022 13:50:56 GMT
etag: W/"636bb040-21a"
expires: Fri, 01 Aug 2025 10:01:29 GMT
cache-control: max-age=31536000
age: 48007
cf-cache-status: HIT
content-encoding: br
cf-ray: 9591e164de2056ab-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3393&min_rtt=485&rtt_var=2213&sent=75&recv=94&lost=0&retrans=0&sent_bytes=9728&recv_bytes=5927&delivery_rate=579122&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=19359&unsent_bytes=0&cid=fc1bd553e1d878ad&ts=428&inflight_dur=55&x=40"
GET 18xxx.name/image/10/663_bushwa-tuktukpatrol.jpg
104.21.11.238200 OK 15 kB URL GET 18xxx.name/image/10/663_bushwa-tuktukpatrol.jpg
IP 104.21.11.238:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3
Hash ccaa31190a6b6f57ceed0eab75a3e60a
99556a875ccfe743cc877d1581f035a36f08f015
b91ad4229686e64656c0d355493fbf5e39a933f6beed00d00d4190261d01afd0
GET /image/10/663_bushwa-tuktukpatrol.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: image/jpeg
content-length: 15308
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ITdWXWae97AxWo5DWtm4BFfAPvmGiUUJgzyzCcItAbIIIMO5i76uGGcknABt7cM%2FbnnvMfK6CRna5LGSY24A5x6nmmKrDs5n8nI%2BTdjrBfXoBj339PbylzmMrByq"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 05:11:25 GMT
etag: "61ac49fd-3bcc"
expires: Sun, 27 Jul 2025 16:22:25 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 457151
cf-cache-status: HIT
cf-ray: 9591e1661e2e56ab-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2542&min_rtt=354&rtt_var=2723&sent=123&recv=111&lost=0&retrans=0&sent_bytes=59665&recv_bytes=10325&delivery_rate=6806773&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=28261&unsent_bytes=0&cid=fc1bd553e1d878ad&ts=620&inflight_dur=70&x=40"
GET ip270120703.ahcdn.com/key=fyfjUMXj2kXH+HZcSNph1Q,s=,end=1751584900,limit=3/data=DJmQrZ/state=aGW-W1oq/buffer=778000:1186698,598.1/speed=396836/referer=none,.txxx.me,.gstatic.com/reftag=063878343/ssd8/121/9/186130139/tx/c12/videos/13625000/13625062/13625062_hq.mp4
188.209.213.180206 Partial Content 2.1 MB URL GET ip270120703.ahcdn.com/key=fyfjUMXj2kXH+HZcSNph1Q,s=,end=1751584900,limit=3/data=DJmQrZ/state=aGW-W1oq/buffer=778000:1186698,598.1/speed=396836/referer=none,.txxx.me,.gstatic.com/reftag=063878343/ssd8/121/9/186130139/tx/c12/videos/13625000/13625062/13625062_hq.mp4
IP 188.209.213.180:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerGoGetSSL
Subject*.ahcdn.com
Fingerprint99:99:89:EB:9F:31:C2:E3:B2:10:F6:4F:E6:6D:E6:59:B7:6F:EA:13
ValidityThu, 29 May 2025 00:00:00 GMT - Sun, 28 Jun 2026 23:59:59 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Size 2.1 MB (2097152 bytes)
Hash 9f8229fea941bb2cfa32ab9157300f73
4150734861e61e47e7a8a1aafacf380712d1c0b2
94a79e1b31fba4bd210adea3190ee991a4c27228ab12660630e0e80d33b95349
GET /key=fyfjUMXj2kXH+HZcSNph1Q,s=,end=1751584900,limit=3/data=DJmQrZ/state=aGW-W1oq/buffer=778000:1186698,598.1/speed=396836/referer=none,.txxx.me,.gstatic.com/reftag=063878343/ssd8/121/9/186130139/tx/c12/videos/13625000/13625062/13625062_hq.mp4 HTTP/1.1
Host: ip270120703.ahcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-
Referer: https://txxx.me/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
server: nginx/1.22.0
date: Wed, 02 Jul 2025 23:21:40 GMT
content-type: video/mp4
content-length: 79113249
last-modified: Fri, 16 May 2025 21:41:58 GMT
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
etag: "6827b126-4b72c21"
expires: Thu, 03 Jul 2025 01:21:40 GMT
cache-control: max-age=7200, private
content-range: bytes 0-79113248/79113249
X-Firefox-Spdy: h2
GET bullionglidingscuttle.com/jserror?type=banner&bavar=0&build=1.0.562&zoneid=2005586&e=Error&m=BCLC&aa=0&trid=&url=https%3A%2F%2Fa.labadena.com%2Fapi%2Fspots%2F458877%3Fp%3D1
94.242.247.20200 OK 0 B URL GET bullionglidingscuttle.com/jserror?type=banner&bavar=0&build=1.0.562&zoneid=2005586&e=Error&m=BCLC&aa=0&trid=&url=https%3A%2F%2Fa.labadena.com%2Fapi%2Fspots%2F458877%3Fp%3D1
IP 94.242.247.20:443
Requested by https://a.labadena.com/api/spots/458877?p=1
Certificate IssuerBuypass AS-983163327
Subject
FingerprintC1:41:36:2B:0F:2D:49:78:DA:E4:70:2C:6A:68:9E:0C:A4:8A:8D:5F
ValidityTue, 04 Mar 2025 00:04:45 GMT - Sat, 30 Aug 2025 21:59:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jserror?type=banner&bavar=0&build=1.0.562&zoneid=2005586&e=Error&m=BCLC&aa=0&trid=&url=https%3A%2F%2Fa.labadena.com%2Fapi%2Fspots%2F458877%3Fp%3D1 HTTP/1.1
Host: bullionglidingscuttle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/
Cookie: cart=1; cart_p=2; UID=2507021821ebf2fc6e929a4032a8e07bc974; CHCK=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:38 GMT
content-type: application/octet-stream
content-length: 0
X-Firefox-Spdy: h2
GET txxx.me/get_file/22/72766b05f88e068f3db70bdba0e289d1eec37f9e09/13625000/13625062/13625062_hq.mp4/?d=598&br=198&ti=1751498499
62.122.168.133302 Found 2.1 MB URL GET txxx.me/get_file/22/72766b05f88e068f3db70bdba0e289d1eec37f9e09/13625000/13625062/13625062_hq.mp4/?d=598&br=198&ti=1751498499
IP 62.122.168.133:443
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjecttxxx.me
FingerprintDE:06:F1:19:49:C7:92:24:44:19:C5:CC:E3:47:1F:16:0C:A5:CA:C1
ValidityTue, 03 Jun 2025 03:07:46 GMT - Mon, 01 Sep 2025 03:07:45 GMT
Size 2.1 MB (2097152 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get_file/22/72766b05f88e068f3db70bdba0e289d1eec37f9e09/13625000/13625062/13625062_hq.mp4/?d=598&br=198&ti=1751498499 HTTP/1.1
Host: txxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/embed/13625062/?source=1034714855
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.24.0
date: Wed, 02 Jul 2025 23:21:40 GMT
content-type: text/html; charset=UTF-8
location: https://txxx.ahcdn.com/key=STxR1yVASnSwAjw7QkdZdw,end=1751584900,limit=3/data=3JPe8S/speed=3.0/buffer=778K/referer=none,.txxx.me,.gstatic.com/c12/videos/13625000/13625062/13625062_hq.mp4
x-powered-by: PHP/7.2.34
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET 18xxx.name/image/29/984_view.jpg
104.21.11.238200 OK 24 kB URL GET 18xxx.name/image/29/984_view.jpg
IP 104.21.11.238:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3
Hash c72068cb5e11158c9bed36550124aa15
e0a339e0c5a523defc77f271b67c3956476bee37
41b666f82b32a8e1ee5592ce7595b5d689e91e0135306701256ec95ef2218c5e
GET /image/29/984_view.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: image/jpeg
content-length: 23936
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wCiJbHMquPVNPxZtdbupinbaxxfs6adq3%2Bt4PObNeoNigbsYDYeZFLwdxnPXlOIw5nMFnqcz3Sh%2B8hqI6UEWWutE1RM4d7IQUOntuOk0bjdbqucJ6xWlkHdORHWW"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 29 Dec 2021 08:03:55 GMT
etag: "61cc166b-5d80"
expires: Fri, 01 Aug 2025 23:19:27 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 129
cf-cache-status: HIT
cf-ray: 9591e1660e2a56ab-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3542&min_rtt=485&rtt_var=2901&sent=93&recv=107&lost=0&retrans=0&sent_bytes=18890&recv_bytes=9584&delivery_rate=1191468&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=22661&unsent_bytes=0&cid=fc1bd553e1d878ad&ts=616&inflight_dur=66&x=40"
GET js.txxx.tube/upd/20250627.101905.339430/static/js/chunk-common.js
45.133.44.25200 OK 339 kB URL GET js.txxx.tube/upd/20250627.101905.339430/static/js/chunk-common.js
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectjs.txxx.tube
Fingerprint21:8D:05:8A:40:50:3A:54:55:F0:55:D7:4A:00:6B:C6:52:65:D3:61
ValidityThu, 26 Jun 2025 02:32:00 GMT - Wed, 24 Sep 2025 02:31:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size 339 kB (339430 bytes)
Hash 2458f01bdc81c6d4f24407b70a43ca94
aa824ac3c4d4e81867d62f35a5fc7a26b13d55bd
2cfcefc475496b640c0d8db54adf8e1f80cb9eb5cfdd91b90896e4b76c8305e6
GET /upd/20250627.101905.339430/static/js/chunk-common.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:37 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Fri, 27 Jun 2025 10:19:05 GMT
vary: Accept-Encoding
etag: W/"685e7019-52de6"
expires: Sat, 28 Jun 2025 10:33:34 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET txxx.me/api/json/videos_related2/432000/50/13000000/13625000/13625062.all.1.json
62.122.168.133200 OK 28 kB URL GET txxx.me/api/json/videos_related2/432000/50/13000000/13625000/13625062.all.1.json
IP 62.122.168.133:443
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjecttxxx.me
FingerprintDE:06:F1:19:49:C7:92:24:44:19:C5:CC:E3:47:1F:16:0C:A5:CA:C1
ValidityTue, 03 Jun 2025 03:07:46 GMT - Mon, 01 Sep 2025 03:07:45 GMT
Hash ca77ac42be43344f5b3746a7cd37a242
0c11ce1602bc781d0080f84fee855d9a5fe22e3c
8d30671bb3dbd825208c92e3efee32ab9eaabb15613865f776bd0af92bd42015
GET /api/json/videos_related2/432000/50/13000000/13625000/13625062.all.1.json HTTP/1.1
Host: txxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/embed/13625062/?source=1034714855
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Wed, 02 Jul 2025 23:21:38 GMT
content-type: application/json
last-modified: Mon, 23 Jun 2025 15:11:15 GMT
vary: Accept-Encoding
etag: W/"68596e93-6f68"
expires: Wed, 02 Jul 2025 23:26:38 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
GET txxx.me/api/json/video/86400/13000000/13625000/13625062.json
62.122.168.133200 OK 2.1 kB URL GET txxx.me/api/json/video/86400/13000000/13625000/13625062.json
IP 62.122.168.133:443
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjecttxxx.me
FingerprintDE:06:F1:19:49:C7:92:24:44:19:C5:CC:E3:47:1F:16:0C:A5:CA:C1
ValidityTue, 03 Jun 2025 03:07:46 GMT - Mon, 01 Sep 2025 03:07:45 GMT
Hash 4de5e5aa965648abd00c659c087cc391
42c918119283725ecb6e91bc9f97afeadf7da332
d21ed54fc5c7f0edabe421640b440354bff95b2f02561d7dcf47f9aa29f76a86
GET /api/json/video/86400/13000000/13625000/13625062.json HTTP/1.1
Host: txxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/embed/13625062/?source=1034714855
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Wed, 02 Jul 2025 23:21:38 GMT
content-type: application/json
last-modified: Wed, 02 Jul 2025 07:07:33 GMT
vary: Accept-Encoding
etag: W/"6864dab5-83c"
expires: Wed, 02 Jul 2025 23:26:38 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
GET js.txxx.tube/upd/20250627.101839.0/static/css/chunk-cd857d7a.css
45.133.44.25200 OK 37 kB URL GET js.txxx.tube/upd/20250627.101839.0/static/css/chunk-cd857d7a.css
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectjs.txxx.tube
Fingerprint21:8D:05:8A:40:50:3A:54:55:F0:55:D7:4A:00:6B:C6:52:65:D3:61
ValidityThu, 26 Jun 2025 02:32:00 GMT - Wed, 24 Sep 2025 02:31:59 GMT
File type ASCII text, with very long lines (37003), with no line terminators
Hash 396c504017df0d4bc5a0be9c83aa6c8e
f5218f56a1d10323fbe30972327ef4a91248a7e9
ed89832352d67a5b7390ce952d0579beef15928db17446acc00d789b173f5da3
GET /upd/20250627.101839.0/static/css/chunk-cd857d7a.css HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:38 GMT
content-type: text/css
server: nginx/1.24.0
last-modified: Fri, 27 Jun 2025 10:19:05 GMT
vary: Accept-Encoding
etag: W/"685e7019-908b"
expires: Sat, 28 Jun 2025 10:30:35 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET 18xxx.name/image/14/234_girl.jpg
104.21.11.238200 OK 18 kB URL GET 18xxx.name/image/14/234_girl.jpg
IP 104.21.11.238:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3
Hash a4f7b6e1f1be03e155bdff347107a677
0b7ec9c9b86e5973161b83e701f433a64a4f32e8
795b1a70da23df3696cf0e1d75ed905397fa129f98c7b95f678df3028143f21e
GET /image/14/234_girl.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: image/jpeg
content-length: 18018
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PTAfhm%2FeH%2BusIrg9rWkfROtf4YKxwlhCaLVbzFJJaZ69ThJLpgiT3IQrJl2Bwap9fz0h9HVXLDgok6alkubZFUxj34pM2kR%2BTQj0qL4vQTyhUBgFjShwgeBwR4no"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 16 Dec 2021 06:21:50 GMT
etag: "61badafe-4662"
expires: Fri, 01 Aug 2025 23:19:27 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 129
cf-cache-status: HIT
cf-ray: 9591e1661e3156ab-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2102&min_rtt=354&rtt_var=1791&sent=171&recv=116&lost=0&retrans=0&sent_bytes=119354&recv_bytes=11669&delivery_rate=14406863&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=28261&unsent_bytes=0&cid=fc1bd553e1d878ad&ts=626&inflight_dur=76&x=40"
GET txxx.me/embed/13625062/?source=1034714855
62.122.168.133200 OK 72 kB URL GET txxx.me/embed/13625062/?source=1034714855
IP 62.122.168.133:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerLet's Encrypt
Subjecttxxx.me
FingerprintDE:06:F1:19:49:C7:92:24:44:19:C5:CC:E3:47:1F:16:0C:A5:CA:C1
ValidityTue, 03 Jun 2025 03:07:46 GMT - Mon, 01 Sep 2025 03:07:45 GMT
File type HTML document, ASCII text, with very long lines (36677)
Hash 6b21fb7bed9e8fccc4a6bbadfc840945
e1736d376bf04c0dafaf01e5881f7b137e12fd51
163d436af5b523eb2a28ce9d89e5934cb3e3ff86c4a180f3248aef520e3a6c1c
GET /embed/13625062/?source=1034714855 HTTP/1.1
Host: txxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Wed, 02 Jul 2025 23:21:37 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.2.34
access-control-allow-origin: *
set-cookie: source=1034714855; expires=Fri, 03-Jul-2026 05:10:23 GMT; Max-Age=31556926; path=/; domain=txxx.me
tccloak=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=txxx.me
kt_lang=en; expires=Sat, 27-Jun-2026 23:21:37 GMT; Max-Age=31104000; path=/; domain=.txxx.me
content-encoding: gzip
X-Firefox-Spdy: h2
GET js.txxx.tube/upd/20250627.101905.5970/static/js/embed.js
45.133.44.25200 OK 6.0 kB URL GET js.txxx.tube/upd/20250627.101905.5970/static/js/embed.js
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectjs.txxx.tube
Fingerprint21:8D:05:8A:40:50:3A:54:55:F0:55:D7:4A:00:6B:C6:52:65:D3:61
ValidityThu, 26 Jun 2025 02:32:00 GMT - Wed, 24 Sep 2025 02:31:59 GMT
File type JavaScript source, ASCII text, with very long lines (5970), with no line terminators
Hash d7ed069b4d3bddd5177b1a89030df108
b1bae85c736d8d0e6e329e03f8fedab58a387514
367b1dd76b309e579e7e86b2880f494fb3837b0f5f94c008fe097a30ea636405
GET /upd/20250627.101905.5970/static/js/embed.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:37 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Fri, 27 Jun 2025 10:19:05 GMT
vary: Accept-Encoding
etag: W/"685e7019-1752"
expires: Sat, 28 Jun 2025 10:33:34 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET 18xxx.name/image/18/193_plus.jpg
104.21.11.238200 OK 11 kB URL GET 18xxx.name/image/18/193_plus.jpg
IP 104.21.11.238:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3
Hash c2a39f31032bb03b56cfafbc1881b232
de47991777cb106cbf3bb7cefab53a3ba93f5518
e0825f95a05d1487105221b9b832e730eae2e51a24162c43ffefecb4b1917fb2
GET /image/18/193_plus.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: image/jpeg
content-length: 11092
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z3m5Gt4egbbSnRs1HLFutCp%2F2RpSvCs1ykG8Z8%2FHd42WV6oNUHAsqD0cXXVHOrEgXey%2BfxZqAq9u5e74Kf8lwRkHiYu122J07ACp7cCJcxWBZc6BO%2F3GwFQBzjrw"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 16 Dec 2021 06:51:47 GMT
etag: "61bae203-2b54"
expires: Tue, 29 Jul 2025 12:19:38 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 298918
cf-cache-status: HIT
cf-ray: 9591e1662e3856ab-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1885&min_rtt=354&rtt_var=1349&sent=193&recv=118&lost=0&retrans=0&sent_bytes=147615&recv_bytes=11763&delivery_rate=14406863&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=28261&unsent_bytes=0&cid=fc1bd553e1d878ad&ts=631&inflight_dur=80&x=40"
GET js.txxx.tube/zgsk9shzp8/2grfgf3rh3.js
45.133.44.25200 OK 126 kB URL GET js.txxx.tube/zgsk9shzp8/2grfgf3rh3.js
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectjs.txxx.tube
Fingerprint21:8D:05:8A:40:50:3A:54:55:F0:55:D7:4A:00:6B:C6:52:65:D3:61
ValidityThu, 26 Jun 2025 02:32:00 GMT - Wed, 24 Sep 2025 02:31:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size 126 kB (125549 bytes)
Hash c31384eb8371e0b97a4cb57d6c27e347
92479da3ae2cdb89d2b2746680550bee4fadc297
8d9c661bcc1a51d80895042f05cd20e4d6f5d6a1199a6791d1832de7e1e5be4b
GET /zgsk9shzp8/2grfgf3rh3.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:37 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Wed, 02 Jul 2025 15:52:39 GMT
vary: Accept-Encoding
etag: W/"686555c7-1ea6d"
expires: Thu, 03 Jul 2025 15:52:39 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET js.txxx.tube/assets//jwplayer-8.21.2.4/jwplayer.js
45.133.44.25200 OK 112 kB URL GET js.txxx.tube/assets//jwplayer-8.21.2.4/jwplayer.js
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectjs.txxx.tube
Fingerprint21:8D:05:8A:40:50:3A:54:55:F0:55:D7:4A:00:6B:C6:52:65:D3:61
ValidityThu, 26 Jun 2025 02:32:00 GMT - Wed, 24 Sep 2025 02:31:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 112 kB (111911 bytes)
Hash fa44c53a82bce33aa202293dca76f432
369aec665bff0c10f2cd9bc4dffb63ea0fefd334
3c49209cb05af93dca5189dbf11ebe083adb1e5713e0330ddcf5a22f1ee522f8
GET /assets//jwplayer-8.21.2.4/jwplayer.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:39 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Fri, 27 Jun 2025 10:18:39 GMT
vary: Accept-Encoding
etag: W/"685e6fff-1b527"
expires: Sat, 28 Jun 2025 20:36:39 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
POST vast.yomeno.xyz/prepare
62.122.173.28204 No Content 0 B IP 62.122.173.28:443
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint8B:6A:4D:FB:A4:A1:8B:3B:9F:CA:01:82:F0:42:F1:27:57:DE:C7:33
ValidityWed, 04 Jun 2025 03:21:44 GMT - Tue, 02 Sep 2025 03:21:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1323
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Wed, 02 Jul 2025 23:21:39 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://txxx.me
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
GET txxx.me/api/json/timelines/2592000/_hq.mp4/13000000/13625000/13625062.20.30.vtt
62.122.168.133200 OK 3.0 kB URL GET txxx.me/api/json/timelines/2592000/_hq.mp4/13000000/13625000/13625062.20.30.vtt
IP 62.122.168.133:443
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjecttxxx.me
FingerprintDE:06:F1:19:49:C7:92:24:44:19:C5:CC:E3:47:1F:16:0C:A5:CA:C1
ValidityTue, 03 Jun 2025 03:07:46 GMT - Mon, 01 Sep 2025 03:07:45 GMT
File type WebVTT subtitles, ASCII text
Hash 4d83eccb27201b4df67a9103c4449a2e
e058b417d368f410a075f32dd6c99e21273597c0
06b47167db6a54b0e75ba7068833e42a4e80005ea613ca6bb6a564bd0d21e940
GET /api/json/timelines/2592000/_hq.mp4/13000000/13625000/13625062.20.30.vtt HTTP/1.1
Host: txxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/embed/13625062/?source=1034714855
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Wed, 02 Jul 2025 23:21:39 GMT
content-type: text/plain
content-length: 2998
last-modified: Sat, 07 Jun 2025 21:13:44 GMT
etag: "6844ab88-bb6"
expires: Wed, 02 Jul 2025 23:26:39 GMT
cache-control: max-age=300
accept-ranges: bytes
X-Firefox-Spdy: h2
GET getscriptjs.com/p.js
172.67.154.57200 OK 95 kB IP 172.67.154.57:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subjectgetscriptjs.com
Fingerprint78:65:91:33:07:B5:6F:25:E0:D3:EB:3C:59:0F:98:AF:9B:83:FA:F1
ValidityFri, 06 Jun 2025 17:35:07 GMT - Thu, 04 Sep 2025 18:34:55 GMT
File type JavaScript source, ASCII text, with very long lines (61826)
Hash f7d26c616da65cc91b6be625c1f1163c
bae162dcd6650a9c49eb6968abd584d8ea334883
e505ede406f5b159018927a170dd0b37fac3d915bc19d7b55ae606193e1b315d
GET /p.js HTTP/1.1
Host: getscriptjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: application/javascript
cf-cache-status: REVALIDATED
content-encoding: br
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"171eee9316d9d3dfa2ec654268de3946"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LsBnfjP8F6RXlyhJkkZqdHzQn38LLJNq0pQ%2FZxHErjABQ2VcyMawFtigpSlhdZZ2w%2Btb9DTbGvjoW2i%2FB4WBxyeJZWiz3uKT5oPlb%2FMSaVjhK%2FGVoreANAdj8srxtGQJi7U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9591e1644fee0b69-OSL
X-Firefox-Spdy: h2
GET 18xxx.name/stylesmain/icons/icons.ttf?a4saub
104.21.11.238200 OK 1.5 kB URL GET 18xxx.name/stylesmain/icons/icons.ttf?a4saub
IP 104.21.11.238:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icons
Hash e1c2f1063187cbe99bc2ed118e0de439
81ef2846eb4aa54ada569adbb32daf91e96a8f0e
60ee4b5c61cd28db352be271f093dab983dfb01317cdacc31cf997a42c3efdc3
GET /stylesmain/icons/icons.ttf?a4saub HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: application/octet-stream
content-length: 1476
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jnYyJf0DXew3Y7%2B72YBTytODQOWDjxB8mZ7WG34LRZqfTrDOUyDO%2FDMP7zx9DlkKRWx8CqwWmHFSZIHDfnJRWJ%2B3XwFeVPQ1k75QR61cvHPxkxD646k9XkSFCQ1A"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Nov 2022 13:51:15 GMT
etag: "636bb053-5c4"
expires: Sat, 26 Jul 2025 00:31:25 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 600611
cf-cache-status: HIT
cf-ray: 9591e164fe2356ab-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3951&min_rtt=485&rtt_var=2776&sent=78&recv=96&lost=0&retrans=0&sent_bytes=10830&recv_bytes=6324&delivery_rate=579122&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=20435&unsent_bytes=0&cid=fc1bd553e1d878ad&ts=448&inflight_dur=64&x=40"
GET 18xxx.name/image/19/502_compilation-photograph.jpg
104.21.11.238200 OK 16 kB URL GET 18xxx.name/image/19/502_compilation-photograph.jpg
IP 104.21.11.238:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3
Hash c684c55a59b98579d6ced5a0019d212c
b4ec892acfb5de1a8f4b1b8aa8fe3c3306dbbe2f
2099dc4ca7ebc54dcdf7367c58dcfa57e409b1db1fecc7925e252e47ce699e8b
GET /image/19/502_compilation-photograph.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: image/jpeg
content-length: 16187
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CCe62t96IzV80yOTlcYrMUb%2B1RU8%2B2kE8xGpqKiZdGtba5R78vdQ8kk7q9nbj2oR7CjTvWA2t5pW6Axf30UTja0u6OFcE3GXexXs9Rgl%2FRcM90Z9LpJXifXQeIEu"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 16 Dec 2021 07:08:30 GMT
etag: "61bae5ee-3f3b"
expires: Wed, 30 Jul 2025 17:35:54 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 193542
cf-cache-status: HIT
cf-ray: 9591e1660e2c56ab-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3143&min_rtt=354&rtt_var=2973&sent=99&recv=109&lost=0&retrans=0&sent_bytes=26145&recv_bytes=10232&delivery_rate=3303943&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=28261&unsent_bytes=0&cid=fc1bd553e1d878ad&ts=618&inflight_dur=67&x=40"
GET txxx.ahcdn.com/key=L-5GAreEdheS4px6pbDJXg,end=1751584901,limit=3/data=gVcQpd/speed=3.0/buffer=778K/referer=none,.txxx.me,.gstatic.com/c12/videos/13625000/13625062/13625062_hq.mp4
185.185.15.4302 Found 2.1 MB URL GET txxx.ahcdn.com/key=L-5GAreEdheS4px6pbDJXg,end=1751584901,limit=3/data=gVcQpd/speed=3.0/buffer=778K/referer=none,.txxx.me,.gstatic.com/c12/videos/13625000/13625062/13625062_hq.mp4
IP 185.185.15.4:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjecttxxx.ahcdn.com
FingerprintAD:43:57:72:3B:39:2E:1F:30:F1:48:52:87:D9:9D:2E:34:81:B8:B4
ValiditySun, 01 Jun 2025 02:33:33 GMT - Sat, 30 Aug 2025 02:33:32 GMT
Size 2.1 MB (2097152 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /key=L-5GAreEdheS4px6pbDJXg,end=1751584901,limit=3/data=gVcQpd/speed=3.0/buffer=778K/referer=none,.txxx.me,.gstatic.com/c12/videos/13625000/13625062/13625062_hq.mp4 HTTP/1.1
Host: txxx.ahcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-
Referer: https://txxx.me/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.20.1
date: Wed, 02 Jul 2025 23:21:41 GMT
content-length: 0
location: https://ip270120703.ahcdn.com/key=nODpU1XcwwwII51X7-nOTw,s=,end=1751584901,limit=3/data=gVcQpd/state=aGW-W1oq/buffer=778000:1186698,598.1/speed=396836/referer=none,.txxx.me,.gstatic.com/reftag=063878343/ssd8/121/9/186130139/tx/c12/videos/13625000/13625062/13625062_hq.mp4
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
cache-control: private, max-age=300
expires: Wed, 02 Jul 2025 23:26:41 GMT
X-Firefox-Spdy: h2
GET js.txxx.tube/upd/20250627.101839.0/static/js/chunk-cd857d7a.js
45.133.44.25200 OK 66 kB URL GET js.txxx.tube/upd/20250627.101839.0/static/js/chunk-cd857d7a.js
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectjs.txxx.tube
Fingerprint21:8D:05:8A:40:50:3A:54:55:F0:55:D7:4A:00:6B:C6:52:65:D3:61
ValidityThu, 26 Jun 2025 02:32:00 GMT - Wed, 24 Sep 2025 02:31:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (63841)
Hash 131fc9d721e3e94b4b81fd3c5d2d08c9
00f77e5cece1f0029292d5f7392a8a9c8ede3f19
a4c3abdf96f3265f55d35db5fd45ec11cca93cce1effc3651f83490e2c7056b9
GET /upd/20250627.101839.0/static/js/chunk-cd857d7a.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:38 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Fri, 27 Jun 2025 10:19:05 GMT
vary: Accept-Encoding
etag: W/"685e7019-100d6"
expires: Sat, 28 Jun 2025 10:30:35 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET txxx.me/api/videofile.php?video_id=13625062&lifetime=8640000
62.122.168.133200 OK 353 B URL GET txxx.me/api/videofile.php?video_id=13625062&lifetime=8640000
IP 62.122.168.133:443
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjecttxxx.me
FingerprintDE:06:F1:19:49:C7:92:24:44:19:C5:CC:E3:47:1F:16:0C:A5:CA:C1
ValidityTue, 03 Jun 2025 03:07:46 GMT - Mon, 01 Sep 2025 03:07:45 GMT
Hash 195fc5d1921a7434cdc387be749e9882
953ad537e3f9372162cdd8f6c9af899458f64f51
47456923833f1218d9e5a3a56db274daa0ac60ab0877dd3c8ca01dac494f7923
GET /api/videofile.php?video_id=13625062&lifetime=8640000 HTTP/1.1
Host: txxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/embed/13625062/?source=1034714855
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Wed, 02 Jul 2025 23:21:39 GMT
content-type: application/json
vary: Accept-Encoding
x-powered-by: PHP/7.2.34
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
GET js.txxx.tube/assets//jwplayer-8.21.2.4/jwplayer.core.controls.html5.js
45.133.44.25200 OK 352 kB URL GET js.txxx.tube/assets//jwplayer-8.21.2.4/jwplayer.core.controls.html5.js
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectjs.txxx.tube
Fingerprint21:8D:05:8A:40:50:3A:54:55:F0:55:D7:4A:00:6B:C6:52:65:D3:61
ValidityThu, 26 Jun 2025 02:32:00 GMT - Wed, 24 Sep 2025 02:31:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65124)
Size 352 kB (352205 bytes)
Hash 34b2f4814649a7c9b78a3093bf75fe1c
d2ab09ce65e2283089924c0df321cdc79f781a63
9f7031621ef6430d83040b3a20de0fb57cdc905e85cf67131ab5af5d66f61579
GET /assets//jwplayer-8.21.2.4/jwplayer.core.controls.html5.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:39 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Fri, 27 Jun 2025 10:18:39 GMT
vary: Accept-Encoding
etag: W/"685e6fff-55fcd"
expires: Sat, 28 Jun 2025 20:25:57 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET 18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
104.21.11.238200 OK 48 kB URL User Request GET 18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
IP 104.21.11.238:443
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (16684), with CRLF, LF line terminators
Hash e4a6c3d6a76c2c5368368e3cc322c624
61f8369c47f720e718b3dc72b06a9466635d6384
2042b248fc3afaf1d2e0476a57e0ec8046616ca9dff125790bf85c32ca6deb4e
GET /cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=BxopBFjoMZgTKrIjNyTcp4IfU7hrXfdrwRZXwySld4idjQ%2FUpQopwH%2F6pPe4Mc8kux%2F%2BggBRHFD4czVCemV2ijZeKXNAmW50"}]}
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 9591e160581d56ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET videotxxx.com/embed/13625062/?source=1034714855
62.122.168.133302 Found 72 kB URL GET videotxxx.com/embed/13625062/?source=1034714855
IP 62.122.168.133:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerLet's Encrypt
Subjectvideotxxx.com
Fingerprint21:3E:F6:06:13:34:86:F0:3E:C7:BA:A9:46:4C:58:FC:A9:6D:2C:CF
ValidityThu, 26 Jun 2025 03:08:33 GMT - Wed, 24 Sep 2025 03:08:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/13625062/?source=1034714855 HTTP/1.1
Host: videotxxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.24.0
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: text/html
content-length: 145
location: https://txxx.me/embed/13625062/?source=1034714855
access-control-allow-origin: *
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: ACCEPT, ORIGIN, X-REQUESTED-WITH, CONTENT-TYPE, AUTHORIZATION, X-FANCYBOX
access-control-allow-credentials: true
X-Firefox-Spdy: h2
GET js.txxx.tube/upd/20250627.101905.406265/static/js/chunk-vendors.js
45.133.44.25200 OK 406 kB URL GET js.txxx.tube/upd/20250627.101905.406265/static/js/chunk-vendors.js
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectjs.txxx.tube
Fingerprint21:8D:05:8A:40:50:3A:54:55:F0:55:D7:4A:00:6B:C6:52:65:D3:61
ValidityThu, 26 Jun 2025 02:32:00 GMT - Wed, 24 Sep 2025 02:31:59 GMT
File type JavaScript source, ASCII text, with very long lines (24689)
Size 406 kB (406265 bytes)
Hash a0efc65ed99c684f203b6f8d0ffa857d
fb381f0157a16796f48cfbecfbeea3f662e790be
82d256cddbc4ade1861cc096e2fa18fd1244c15d8c93e6325ae6fe8495752c91
GET /upd/20250627.101905.406265/static/js/chunk-vendors.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:37 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Fri, 27 Jun 2025 10:19:05 GMT
vary: Accept-Encoding
etag: W/"685e7019-632f9"
expires: Sat, 28 Jun 2025 10:33:34 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET 18xxx.name/image/20/830_teen-in-draining.jpg
104.21.11.238200 OK 17 kB URL GET 18xxx.name/image/20/830_teen-in-draining.jpg
IP 104.21.11.238:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3
Hash cf68df6ce369d1d94948f20d14393257
36bedcf9cafc9788470479e737d223d1fd4f317c
f9b912d1ca6e941718f7ca7718e48bcf88d1a5d66f15e8d53251559845fc889d
GET /image/20/830_teen-in-draining.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: image/jpeg
content-length: 17248
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mn6mEZKql0N7nIP6Mix1EsBgr45boiWBiKsXp5aw0j2IhHmbFwUS37odOcb3AMaxTPyTO001rQ3I4N7Gvp3S%2FHZi9M4v1H4%2B1bj7P4ohDQTIKHwf6T6cDGb6w9wi"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 16 Dec 2021 07:48:12 GMT
etag: "61baef3c-4360"
expires: Tue, 29 Jul 2025 20:18:50 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 270165
cf-cache-status: HIT
cf-ray: 9591e1661e3456ab-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1919&min_rtt=354&rtt_var=1709&sent=187&recv=117&lost=0&retrans=0&sent_bytes=140576&recv_bytes=11716&delivery_rate=14406863&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=28261&unsent_bytes=0&cid=fc1bd553e1d878ad&ts=629&inflight_dur=78&x=40"
GET 18xxx.name/favicon-16x16.png
104.21.11.238200 OK 530 B URL GET 18xxx.name/favicon-16x16.png
IP 104.21.11.238:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Hash 635a63f45bb1c4b36ab4701d296d58ad
a84dcf18f219d25ed159b6de138c3c8758ebc784
8cde6a33327cdde41c3a0870d07fa2fbc22861a833c796b91e6ef49a69c72234
GET /favicon-16x16.png HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:37 GMT
content-type: image/png
content-length: 530
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7W%2Bz5yweV%2B67N56dk8GLyLp%2FEoTDZloV6wM1nfKTYtwRKhbIEdUXmPO%2Bfvg9KGkGnNL6kKqvjrMmy6c%2BX4874x5Zj7eFKWYzqJsA6TVDDS5W8%2BLMV9VXg5ynw7Pz"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Nov 2022 13:51:24 GMT
etag: "636bb05c-212"
expires: Thu, 17 Jul 2025 01:42:02 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 1373974
cf-cache-status: HIT
cf-ray: 9591e166be3c56ab-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=766&min_rtt=0&rtt_var=419&sent=314&recv=135&lost=0&retrans=0&sent_bytes=299887&recv_bytes=13121&delivery_rate=17215485&ss_exit_cwnd=28261&ss_exit_reason=2&cwnd=38068&unsent_bytes=0&cid=fc1bd553e1d878ad&ts=727&inflight_dur=95&x=40"
GET 18xxx.name/image/18/164.jpg
104.21.11.238200 OK 18 kB URL GET 18xxx.name/image/18/164.jpg
IP 104.21.11.238:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3
Hash bd8c27950591f523a0e0d9817fffeb49
2ddef2f725be8e04c411daaa0a097addd0f02f5c
260dd140c0d90b14fbb1e0d365b04e29df9094e5528dbc90c9ab924449142883
GET /image/18/164.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: image/jpeg
content-length: 17452
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JmCxZqaQoye8sMgyTQ0N8O0XxWSUYnvmbmC5kTpLwpCf%2BfbGoBytrezmmaO6iD9Qcqegsqq2i6JPZx6ckVlL0owPQIAxIARmrlFClhMOUGrmtJyB2%2B%2FM%2FRjSCzXp"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 16 Dec 2021 06:51:35 GMT
etag: "61bae1f7-442c"
expires: Fri, 01 Aug 2025 23:19:27 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 129
cf-cache-status: HIT
cf-ray: 9591e1661e3756ab-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1285&min_rtt=0&rtt_var=1275&sent=227&recv=123&lost=0&retrans=0&sent_bytes=192326&recv_bytes=11996&delivery_rate=14541456&ss_exit_cwnd=28261&ss_exit_reason=2&cwnd=38719&unsent_bytes=0&cid=fc1bd553e1d878ad&ts=635&inflight_dur=85&x=40"
GET 18xxx.name/image/10/999_fellow-the.jpg
104.21.11.238200 OK 16 kB URL GET 18xxx.name/image/10/999_fellow-the.jpg
IP 104.21.11.238:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3
Hash f4142a53c5a6a323d379a80cd91157f6
fa0625d4a29f6aa06e5795ecf9545cb32e43890e
0974869483ae382de895df692f9b1acd78e3ae41923caa9fe38cf4bfc2aff6ba
GET /image/10/999_fellow-the.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: image/jpeg
content-length: 16282
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6rVIPsobpAow36NxOcfZ5KH5mwlVQD45oxHtVCJXmi5UNqbMylLoPAowRghoSBrfuTcTk2udBpqTu3p5jBZh8eD5uZaQzFv5Px5ZPBsj8h7AQkDOcILRr7FWUB%2Fq"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 05:13:54 GMT
etag: "61ac4a92-3f9a"
expires: Fri, 01 Aug 2025 23:19:27 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 129
cf-cache-status: HIT
cf-ray: 9591e1661e3656ab-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=951&min_rtt=0&rtt_var=834&sent=237&recv=127&lost=0&retrans=0&sent_bytes=205036&recv_bytes=12184&delivery_rate=14541456&ss_exit_cwnd=28261&ss_exit_reason=2&cwnd=38719&unsent_bytes=0&cid=fc1bd553e1d878ad&ts=637&inflight_dur=86&x=40"
GET cdn.tapioni.com/ip-push.js
172.67.31.117200 OK 133 kB URL GET cdn.tapioni.com/ip-push.js
IP 172.67.31.117:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subjectcdn.tapioni.com
Fingerprint9D:5E:8D:89:3F:44:95:41:D4:6B:BF:25:E3:95:5E:B8:BE:81:F7:17
ValidityThu, 22 May 2025 00:42:30 GMT - Wed, 20 Aug 2025 01:42:27 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65498), with no line terminators
Size 133 kB (133186 bytes)
Hash ddb8fa1618a75bfd94ade857c92f57f6
67f811328fb0430e36fd68af16b1288b3e74c5b2
e8df62a30079211085f2788cd3327c90cd668f150652db3f2daa4344d1b831ec
GET /ip-push.js HTTP/1.1
Host: cdn.tapioni.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: application/javascript
content-length: 40992
server: cloudflare
accept-ranges: bytes
last-modified: Mon, 23 Jun 2025 10:26:03 GMT
vary: Accept-Encoding
etag: "68592bbb-a020"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 749812
cf-ray: 9591e163eb795690-OSL
X-Firefox-Spdy: h2
GET cdn.tapioni.com/asg-iframe.js
172.67.31.117200 OK 106 kB URL GET cdn.tapioni.com/asg-iframe.js
IP 172.67.31.117:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subjectcdn.tapioni.com
Fingerprint9D:5E:8D:89:3F:44:95:41:D4:6B:BF:25:E3:95:5E:B8:BE:81:F7:17
ValidityThu, 22 May 2025 00:42:30 GMT - Wed, 20 Aug 2025 01:42:27 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65498), with no line terminators
Size 106 kB (105981 bytes)
Hash dbadeb932c4ff5c1e893148d7bd8edf2
560ae1188c8bcf5cc7f0b348253b651e332795ee
ec3bff2af64866f5b6f5a195c383e4a0d2553ac7e60bb80b1dfd9dd72e898117
GET /asg-iframe.js HTTP/1.1
Host: cdn.tapioni.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: application/javascript
content-length: 36982
server: cloudflare
accept-ranges: bytes
last-modified: Mon, 23 Jun 2025 10:26:03 GMT
vary: Accept-Encoding
etag: "68592bbb-9076"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 749862
cf-ray: 9591e163fb845690-OSL
X-Firefox-Spdy: h2
GET 18xxx.name/image/4/330_sister56981.jpg
104.21.11.238200 OK 17 kB URL GET 18xxx.name/image/4/330_sister56981.jpg
IP 104.21.11.238:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3
Hash b87aff0800dcc273d0b743c218be35c0
156a06c09de0c385314466afbba34268baff9999
5633be3d1e36cdf413d2071d976605920b059ab5b73d9c2afeee824f1364c292
GET /image/4/330_sister56981.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: image/jpeg
content-length: 17293
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OYB%2FTW66OcC1Fo%2BH2A3j9HNnkSw1sgC994m7BKV3ih84B9fuwyVMgIxvo2f1fcXolQn5GVcAvFpw3X13t5D0Se3AufrjInJsqzJFNUHgQAFv8ZcPCTuCGOxJVDKE"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 03:24:32 GMT
etag: "61ac30f0-438d"
expires: Sun, 27 Jul 2025 14:11:25 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 465010
cf-cache-status: HIT
cf-ray: 9591e1661e3256ab-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1919&min_rtt=354&rtt_var=1709&sent=187&recv=117&lost=0&retrans=0&sent_bytes=140576&recv_bytes=11716&delivery_rate=14406863&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=28261&unsent_bytes=0&cid=fc1bd553e1d878ad&ts=628&inflight_dur=78&x=40"
GET ip270120703.ahcdn.com/key=b53H4lURNYp34bBumEIHQw,s=,end=1751584899,limit=3/data=yUiYcQ/state=aGW-W1oq/buffer=778000:1186698,598.1/speed=396836/referer=none,.txxx.me,.gstatic.com/reftag=063878343/ssd8/121/9/186130139/tx/c12/videos/13625000/13625062/13625062_hq.mp4
188.209.213.180206 Partial Content 2.4 MB URL GET ip270120703.ahcdn.com/key=b53H4lURNYp34bBumEIHQw,s=,end=1751584899,limit=3/data=yUiYcQ/state=aGW-W1oq/buffer=778000:1186698,598.1/speed=396836/referer=none,.txxx.me,.gstatic.com/reftag=063878343/ssd8/121/9/186130139/tx/c12/videos/13625000/13625062/13625062_hq.mp4
IP 188.209.213.180:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerGoGetSSL
Subject*.ahcdn.com
Fingerprint99:99:89:EB:9F:31:C2:E3:B2:10:F6:4F:E6:6D:E6:59:B7:6F:EA:13
ValidityThu, 29 May 2025 00:00:00 GMT - Sun, 28 Jun 2026 23:59:59 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Size 2.4 MB (2358884 bytes)
Hash b03a062f3096d6e7ec9b22282d031650
8194b4863a71aeb439a53dce198c15a6cae28926
dd4cbbe8a66ab65c5e988639e983a3f55b0e11c4f0824fc5e8141754a28b3b12
GET /key=b53H4lURNYp34bBumEIHQw,s=,end=1751584899,limit=3/data=yUiYcQ/state=aGW-W1oq/buffer=778000:1186698,598.1/speed=396836/referer=none,.txxx.me,.gstatic.com/reftag=063878343/ssd8/121/9/186130139/tx/c12/videos/13625000/13625062/13625062_hq.mp4 HTTP/1.1
Host: ip270120703.ahcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-
Referer: https://txxx.me/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
server: nginx/1.22.0
date: Wed, 02 Jul 2025 23:21:40 GMT
content-type: video/mp4
content-length: 79113249
last-modified: Fri, 16 May 2025 21:41:58 GMT
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
etag: "6827b126-4b72c21"
expires: Thu, 03 Jul 2025 01:21:40 GMT
cache-control: max-age=7200, private
content-range: bytes 0-79113248/79113249
X-Firefox-Spdy: h2
GET txxx.me/get_file/22/72766b05f88e068f3db70bdba0e289d1eec37f9e09/13625000/13625062/13625062_hq.mp4/?d=598&br=198&ti=1751498499
62.122.168.133302 Found 2.1 MB URL GET txxx.me/get_file/22/72766b05f88e068f3db70bdba0e289d1eec37f9e09/13625000/13625062/13625062_hq.mp4/?d=598&br=198&ti=1751498499
IP 62.122.168.133:443
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjecttxxx.me
FingerprintDE:06:F1:19:49:C7:92:24:44:19:C5:CC:E3:47:1F:16:0C:A5:CA:C1
ValidityTue, 03 Jun 2025 03:07:46 GMT - Mon, 01 Sep 2025 03:07:45 GMT
Size 2.1 MB (2097152 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get_file/22/72766b05f88e068f3db70bdba0e289d1eec37f9e09/13625000/13625062/13625062_hq.mp4/?d=598&br=198&ti=1751498499 HTTP/1.1
Host: txxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/embed/13625062/?source=1034714855
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.24.0
date: Wed, 02 Jul 2025 23:21:40 GMT
content-type: text/html; charset=UTF-8
location: https://txxx.ahcdn.com/key=bbvmwtvjbeEw3ueI0wH6ng,end=1751584900,limit=3/data=DJmQrZ/speed=3.0/buffer=778K/referer=none,.txxx.me,.gstatic.com/c12/videos/13625000/13625062/13625062_hq.mp4
x-powered-by: PHP/7.2.34
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET txxx.ahcdn.com/key=bbvmwtvjbeEw3ueI0wH6ng,end=1751584900,limit=3/data=DJmQrZ/speed=3.0/buffer=778K/referer=none,.txxx.me,.gstatic.com/c12/videos/13625000/13625062/13625062_hq.mp4
185.185.15.4302 Found 2.1 MB URL GET txxx.ahcdn.com/key=bbvmwtvjbeEw3ueI0wH6ng,end=1751584900,limit=3/data=DJmQrZ/speed=3.0/buffer=778K/referer=none,.txxx.me,.gstatic.com/c12/videos/13625000/13625062/13625062_hq.mp4
IP 185.185.15.4:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjecttxxx.ahcdn.com
FingerprintAD:43:57:72:3B:39:2E:1F:30:F1:48:52:87:D9:9D:2E:34:81:B8:B4
ValiditySun, 01 Jun 2025 02:33:33 GMT - Sat, 30 Aug 2025 02:33:32 GMT
Size 2.1 MB (2097152 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /key=bbvmwtvjbeEw3ueI0wH6ng,end=1751584900,limit=3/data=DJmQrZ/speed=3.0/buffer=778K/referer=none,.txxx.me,.gstatic.com/c12/videos/13625000/13625062/13625062_hq.mp4 HTTP/1.1
Host: txxx.ahcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-
Referer: https://txxx.me/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.20.1
date: Wed, 02 Jul 2025 23:21:40 GMT
content-length: 0
location: https://ip270120703.ahcdn.com/key=fyfjUMXj2kXH+HZcSNph1Q,s=,end=1751584900,limit=3/data=DJmQrZ/state=aGW-W1oq/buffer=778000:1186698,598.1/speed=396836/referer=none,.txxx.me,.gstatic.com/reftag=063878343/ssd8/121/9/186130139/tx/c12/videos/13625000/13625062/13625062_hq.mp4
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
cache-control: private, max-age=300
expires: Wed, 02 Jul 2025 23:26:40 GMT
X-Firefox-Spdy: h2
GET txxx.me/get_file/22/72766b05f88e068f3db70bdba0e289d1eec37f9e09/13625000/13625062/13625062_hq.mp4/?d=598&br=198&ti=1751498499
62.122.168.133302 Found 2.1 MB URL GET txxx.me/get_file/22/72766b05f88e068f3db70bdba0e289d1eec37f9e09/13625000/13625062/13625062_hq.mp4/?d=598&br=198&ti=1751498499
IP 62.122.168.133:443
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjecttxxx.me
FingerprintDE:06:F1:19:49:C7:92:24:44:19:C5:CC:E3:47:1F:16:0C:A5:CA:C1
ValidityTue, 03 Jun 2025 03:07:46 GMT - Mon, 01 Sep 2025 03:07:45 GMT
Size 2.1 MB (2097152 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get_file/22/72766b05f88e068f3db70bdba0e289d1eec37f9e09/13625000/13625062/13625062_hq.mp4/?d=598&br=198&ti=1751498499 HTTP/1.1
Host: txxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/embed/13625062/?source=1034714855
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.24.0
date: Wed, 02 Jul 2025 23:21:41 GMT
content-type: text/html; charset=UTF-8
location: https://txxx.ahcdn.com/key=L-5GAreEdheS4px6pbDJXg,end=1751584901,limit=3/data=gVcQpd/speed=3.0/buffer=778K/referer=none,.txxx.me,.gstatic.com/c12/videos/13625000/13625062/13625062_hq.mp4
x-powered-by: PHP/7.2.34
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET 18xxx.name/image/13/620_ke-leti-saarabhabhi6.jpg
104.21.11.238200 OK 30 kB URL GET 18xxx.name/image/13/620_ke-leti-saarabhabhi6.jpg
IP 104.21.11.238:443
Requested by https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
Certificate IssuerGoogle Trust Services
Subject18xxx.name
FingerprintF0:3B:F8:DC:5A:AA:94:E5:E3:8B:C9:94:C3:15:3F:EE:6B:0B:6C:AF
ValidityFri, 16 May 2025 05:59:36 GMT - Thu, 14 Aug 2025 06:58:17 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3
Hash c26f5f5648958297e0fbcba49fe34f74
23843010316e7444ada220b2bdde3046f10b0003
9547576f81f2d7907b52b1635387ea5ea1b39bafc229eff82f26704922be80a5
GET /image/13/620_ke-leti-saarabhabhi6.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/cr/tubes/919fbb6632a27fd57413b0fdba8edde8/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:36 GMT
content-type: image/jpeg
content-length: 29717
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o7OP4qv264o%2FJQ4nGl2OBIi7G9R%2BNfZmiTOTZwrgKCTC5zG%2Bw0AhUSdNxb9aWB0oztxkp9nnsLa7Gvb84yFE08InEGkJ1j7TT0uXa6WEbJbeLCVwXSvaiJ4SPlnn"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 06:35:02 GMT
etag: "61ac5d96-7415"
expires: Thu, 24 Jul 2025 06:20:27 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 752469
cf-cache-status: HIT
cf-ray: 9591e1661e3556ab-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1863&min_rtt=354&rtt_var=928&sent=199&recv=120&lost=0&retrans=0&sent_bytes=154878&recv_bytes=11856&delivery_rate=14541456&ss_exit_cwnd=28261&ss_exit_reason=2&cwnd=39634&unsent_bytes=0&cid=fc1bd553e1d878ad&ts=632&inflight_dur=81&x=40"
GET metricswpsh.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjEwMzQ3MTQ4NTUsInVzZXJfaWQiOiIxMDk0NzkxMjU3NDY3NTYyNjAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIzLjE0MS4xIiwidGFnX2lkIjo3NTUsInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MC40NiwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowfQ==
88.198.204.166200 OK 0 B URL GET metricswpsh.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjEwMzQ3MTQ4NTUsInVzZXJfaWQiOiIxMDk0NzkxMjU3NDY3NTYyNjAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIzLjE0MS4xIiwidGFnX2lkIjo3NTUsInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MC40NiwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowfQ==
IP 88.198.204.166:443
ASN #24940 Hetzner Online GmbH
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
Fingerprint7E:67:6E:60:DA:54:65:A6:A2:F7:52:44:8A:5F:F2:EF:60:96:4D:A7
ValidityMon, 16 Jun 2025 02:50:45 GMT - Sun, 14 Sep 2025 02:50:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjEwMzQ3MTQ4NTUsInVzZXJfaWQiOiIxMDk0NzkxMjU3NDY3NTYyNjAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIzLjE0MS4xIiwidGFnX2lkIjo3NTUsInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MC40NiwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowfQ== HTTP/1.1
Host: metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 02 Jul 2025 23:21:39 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET txxx.ahcdn.com/key=1VuR1OmHKX80hssF+SP+rg,end=1751584899,limit=3/data=yUiYcQ/speed=3.0/buffer=778K/referer=none,.txxx.me,.gstatic.com/c12/videos/13625000/13625062/13625062_hq.mp4
185.185.15.4302 Found 2.4 MB URL GET txxx.ahcdn.com/key=1VuR1OmHKX80hssF+SP+rg,end=1751584899,limit=3/data=yUiYcQ/speed=3.0/buffer=778K/referer=none,.txxx.me,.gstatic.com/c12/videos/13625000/13625062/13625062_hq.mp4
IP 185.185.15.4:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://txxx.me/embed/13625062/?source=1034714855
Certificate IssuerLet's Encrypt
Subjecttxxx.ahcdn.com
FingerprintAD:43:57:72:3B:39:2E:1F:30:F1:48:52:87:D9:9D:2E:34:81:B8:B4
ValiditySun, 01 Jun 2025 02:33:33 GMT - Sat, 30 Aug 2025 02:33:32 GMT
Size 2.4 MB (2358884 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /key=1VuR1OmHKX80hssF+SP+rg,end=1751584899,limit=3/data=yUiYcQ/speed=3.0/buffer=778K/referer=none,.txxx.me,.gstatic.com/c12/videos/13625000/13625062/13625062_hq.mp4 HTTP/1.1
Host: txxx.ahcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-
Referer: https://txxx.me/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.20.1
date: Wed, 02 Jul 2025 23:21:39 GMT
content-length: 0
location: https://ip270120703.ahcdn.com/key=b53H4lURNYp34bBumEIHQw,s=,end=1751584899,limit=3/data=yUiYcQ/state=aGW-W1oq/buffer=778000:1186698,598.1/speed=396836/referer=none,.txxx.me,.gstatic.com/reftag=063878343/ssd8/121/9/186130139/tx/c12/videos/13625000/13625062/13625062_hq.mp4
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
cache-control: private, max-age=300
expires: Wed, 02 Jul 2025 23:26:39 GMT
X-Firefox-Spdy: h2