static.mp4.center/static/images/favicon-16x16.png?v=2
172.67.151.22200 OK 922 B URL GET HTTP/2 static.mp4.center/static/images/favicon-16x16.png?v=2
IP 172.67.151.22:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerLet's Encrypt
Subjectmp4.center
FingerprintBD:77:73:68:E6:13:B1:C5:9B:A1:4A:05:47:46:D2:FB:79:C6:FD:47
ValidityFri, 30 Jun 2023 09:07:02 GMT - Thu, 28 Sep 2023 09:07:01 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash a7b71a8bb8feda9dfd188ad33b8996b7
3d6b803fc3104da8f86685cdca5b1f16b05db332
6105f4a99c7ddc21bd90fb41868192332b65570049ac1122491db04b760443bd
GET /static/images/favicon-16x16.png?v=2 HTTP/1.1
Host: static.mp4.center
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:16 GMT
content-type: image/png
content-length: 922
last-modified: Mon, 07 Aug 2023 11:55:10 GMT
etag: "64d0db9e-39a"
x-header-sub: Master
cache-control: max-age=14400
cf-cache-status: HIT
age: 2055
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aDxaoVgNle65Ync1mRpv9lLryk5zRdkpbQgALOemLIRB%2BId7ML8cNMOLM6VDYqbYYib9EAlOImzT1X3nTFqGbsjBk%2FTm6HrcEiJqxLyZd4r96zFKS%2Bch58Wu5eZ2kElb5NOD7g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8beeeda1b4f4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 581a362d08528e96212d28474b426504
f1b6cbd22e5dd6c52860ed433b1167c3aea0c2b3
8d6be995bdce6dfc00a5d9e11e4ea97089403badcc6a0ee76622d2759bd5b91d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 13 Aug 2023 02:32:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.mp4.center/static/xvideos/asset/js/jquery.min.js?v=202308112235
172.67.151.22200 OK 35 kB URL GET HTTP/2 static.mp4.center/static/xvideos/asset/js/jquery.min.js?v=202308112235
IP 172.67.151.22:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerLet's Encrypt
Subjectmp4.center
FingerprintBD:77:73:68:E6:13:B1:C5:9B:A1:4A:05:47:46:D2:FB:79:C6:FD:47
ValidityFri, 30 Jun 2023 09:07:02 GMT - Thu, 28 Sep 2023 09:07:01 GMT
File type ASCII text, with very long lines (32077)
Hash 4f252523d4af0b478c810c2547a63e19
5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb
668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404
GET /static/xvideos/asset/js/jquery.min.js?v=202308112235 HTTP/1.1
Host: static.mp4.center
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:16 GMT
content-type: application/javascript
last-modified: Mon, 07 Aug 2023 11:55:10 GMT
etag: W/"64d0db9e-17b8b"
x-header-sub: Master
cache-control: max-age=14400
cf-cache-status: HIT
age: 1165
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z3AOhLmQK8vVDrMU4O8%2FAxfYG10Kkc%2FXcULsMLSQ7aj2XaVq4l9E4WapeZm0yiRHO1MkTaiwSg0M5eIFBYL3iNXNchrp9%2B4Ut65NoLMowr6RtULlIptD1kTbD%2BLn6EBJ%2BcBvmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8beedd90b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/googlesans/v11/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2
216.58.207.227200 OK 22 kB URL GET HTTP/3 fonts.gstatic.com/s/googlesans/v11/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2
IP 216.58.207.227:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type Web Open Font Format (Version 2), TrueType, length 21744, version 1.0\012- data
Hash d6e7ae9212813fccebb58f6d0907c5c3
d8f15f3b6d6247c1e80bc42cbb4232e4f7b7d920
3c1721e85a4b5cd786a4d566abaf0d15ecd74fa791a5a9f7aaafba50e9e3da74
GET /s/googlesans/v11/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fap18.net
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Aug 2023 15:31:05 GMT
expires: Fri, 09 Aug 2024 15:31:05 GMT
cache-control: public, max-age=31536000
age: 212471
last-modified: Wed, 28 Nov 2018 16:23:38 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/googlesans/v11/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2
216.58.207.227200 OK 22 kB URL GET HTTP/2 fonts.gstatic.com/s/googlesans/v11/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2
IP 216.58.207.227:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type Web Open Font Format (Version 2), TrueType, length 21528, version 1.0\012- data
Hash 2967668ec83d4736140bd771afac18a6
821d35e9d9f5938608331029c974850b48138dfb
84469147c58b44c379aa25ce5013a4e545525726b2e7992f63161993b5d7a6c6
GET /s/googlesans/v11/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fap18.net
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21528
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 11 Aug 2023 10:51:38 GMT
expires: Sat, 10 Aug 2024 10:51:38 GMT
cache-control: public, max-age=31536000
age: 142838
last-modified: Wed, 28 Nov 2018 16:23:34 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fap18.net/assets/xvideos/asset2/css/default/iconfont.ttf
172.67.157.205200 OK 31 kB URL GET HTTP/3 fap18.net/assets/xvideos/asset2/css/default/iconfont.ttf
IP 172.67.157.205:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerGoogle Trust Services LLC
Subjectfap18.net
FingerprintF3:F6:4F:82:8F:F2:39:5B:FB:A0:C1:35:3E:B4:97:FE:AE:B1:C1:68
ValiditySun, 25 Jun 2023 04:11:31 GMT - Sat, 23 Sep 2023 04:11:30 GMT
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, iconfont \012- data
Hash 01eb4f97ad223a3405b3d69e60f7b01d
22e3f160adf5f9c6fb0eac9bb2330eb476cd15d2
4bfb8f8822bc36b22dab3736fa673c4fc51c43ed7310bae8d1c117b6df28c2d0
GET /assets/xvideos/asset2/css/default/iconfont.ttf HTTP/1.1
Host: fap18.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/xid/68421333/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:16 GMT
content-type: application/octet-stream
content-length: 30720
last-modified: Fri, 11 Aug 2023 15:36:15 GMT
etag: "64d6556f-7800"
expires: Sun, 13 Aug 2023 01:43:28 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4128
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wpd8SJJYWy71yM9F7cWYSp35v4DliN0ZAXS%2B%2F9pE2tALm%2FGmoy4O3hvDwVR%2Bw750%2FzAXdX5p7xxVBG8APNnv1JGkso8zHBZH9HJC6SFVTbeliOfbPOrgiq%2BA8l4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf0bb8bfac0-OSL
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 581a362d08528e96212d28474b426504
f1b6cbd22e5dd6c52860ed433b1167c3aea0c2b3
8d6be995bdce6dfc00a5d9e11e4ea97089403badcc6a0ee76622d2759bd5b91d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 13 Aug 2023 02:32:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
go.cdnjs.work/metrics.js
172.66.44.241200 OK 2.0 kB IP 172.66.44.241:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerLet's Encrypt
Subjectgo.cdnjs.work
Fingerprint17:CB:1D:12:E9:05:8B:E5:BE:CE:77:93:C7:06:F1:2A:B5:51:E7:38
ValidityThu, 20 Jul 2023 23:56:25 GMT - Wed, 18 Oct 2023 23:56:24 GMT
File type ASCII text, with very long lines (577)
Hash 7cf217311a3daf480efd031d945f3f44
9659db04b8f70ab88ff6e94ee020a38cf776a44c
7bcf920f691e90bee06c0f202203222e821f7736f3ab5b47545ec2db45c20d59
GET /metrics.js HTTP/1.1
Host: go.cdnjs.work
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:16 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"b2ce9d08477832b1ab91868f453c69b5"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zb%2BBvbt%2BQWoZG3Xw853Ijn%2BFtv9l%2Bjr4SpYlnidyJyfFZZud1u3gsXTfHYQXbW7Fv1CG7U5xa42g0h8SY%2F%2F76fiu7eUgCdIwIfGQVnD9%2FpIPJEIJn5nemG7L0MKTWQGe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf10be2b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pub.qwerty24.net/view
104.21.31.93200 OK 42 kB IP 104.21.31.93:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerLet's Encrypt
Subjectqwerty24.net
Fingerprint65:05:E1:A0:18:97:CF:EC:97:7C:5A:94:2A:0C:9B:8C:D7:A3:A6:F5
ValidityFri, 30 Jun 2023 04:31:53 GMT - Thu, 28 Sep 2023 04:31:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 154aff8c17921a65fbd7b2d3e5fd7bf5
148e6c4f6a780e12d19fa391fd1a9e28b9307332
4f96518d9959dd914ebf9243883a856a8873edcacfdcdba77de7249aedcdce4e
GET /view HTTP/1.1
Host: pub.qwerty24.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:16 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.2.18
x-header-sub: Master
cache-control: max-age=2678400
cf-cache-status: HIT
age: 1605535
last-modified: Tue, 25 Jul 2023 12:33:21 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lS5Yau6SBNnaF1cYr69jbrB%2B5hL8BiP0pywH7oYc4rq2z5rR8fAqcZcd1m6CoSQwz0911mYUz4B8rzk710W5GzXv5pxav0n7rTX4%2B%2F0YntY%2FPEU2x%2F%2BU1T2iMDw7orA%2FkTpa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf0ac91b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/f76b/aa08/7432/413e/a4d3/6aba/9870/f1f6/1.jpg
104.26.6.119200 OK 2.7 kB URL GET HTTP/2 evocdn.net/hb/xvideos/f76b/aa08/7432/413e/a4d3/6aba/9870/f1f6/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 352x198, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ecf12c9d364cfdfb15482e7cb4e0486c
cbaa28c9246fb9e261f2612eac1e0426fe1b7eba
96c5fb8be4bce39bed9c68b86d91a3a5210c46229923f3e6a5467cf604f5b11b
GET /hb/xvideos/f76b/aa08/7432/413e/a4d3/6aba/9870/f1f6/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/webp
content-length: 2676
age: 1180
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=5961
content-disposition: inline; filename="1.webp"
etag: "4b8f1032413da7786260413762f7914e"
last-modified: Tue, 27 Dec 2022 05:49:26 GMT
vary: Accept
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: HIT
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DsaKOyv%2FSuBrE8GKg5RFYnNbEHo0KRXjhaBy4ZhTnTixHS4H3iEFBsvkRCre%2BYKnv%2F40q7cVpSpmUgyNwQD8uGvbWKQoFqV34xCwP55fR3cy1gK4DSMKvpkmh4g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f5d8bf48d291c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/efc7/ed78/8ab1/9d7b/74df/3288/9b80/2181/1.jpg
104.26.6.119200 OK 11 kB URL GET HTTP/2 evocdn.net/hb/xvideos/efc7/ed78/8ab1/9d7b/74df/3288/9b80/2181/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 352x198, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5057eee5e5b6dcada54231cb3d7c1cb3
a9b911bdaa3151d619926e24f18a69fa82c4ec1e
9fe0c88356833ced9f71d45ef17596dc17c2edaba9f9ff17fa86c3dbd8f30118
GET /hb/xvideos/efc7/ed78/8ab1/9d7b/74df/3288/9b80/2181/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/webp
content-length: 10922
age: 98620
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=15435
content-disposition: inline; filename="1.webp"
etag: "9a0b984821706289ba854d5d2cae966a"
last-modified: Sun, 25 Dec 2022 13:11:45 GMT
vary: Accept
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: HIT
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=re0K2%2BMd82cmxI3f2buSzYZ6SUWSiDX4VNwIuvMSVHf18ZFzo8s%2FQUdpb6J%2BOwy5ZUXZCt0dP%2FN%2BdjZOR8DTIwm%2FNgqYKJgr%2FyPPg4T1DfOfgQEtGQeH7OR2IHs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f5d8bf48d331c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/5b2e/6720/5dd4/0da1/948a/53c1/61d7/1b79/1.jpg
104.26.6.119200 OK 3.7 kB URL GET HTTP/2 evocdn.net/hb/xvideos/5b2e/6720/5dd4/0da1/948a/53c1/61d7/1b79/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 352x198, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b4b706639f24b944186ffc40b19f2eae
1af69478ac2cefe5635cbee8d1fad9a4f738c3e6
46caa86b60a8b419da931940bfbd3e603c752caac50d71e7fac46f248be423d3
GET /hb/xvideos/5b2e/6720/5dd4/0da1/948a/53c1/61d7/1b79/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/webp
content-length: 3710
age: 24502
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=6609
content-disposition: inline; filename="1.webp"
etag: "95644681cbb35bdb2e23a7a3cbb6d8d1"
last-modified: Tue, 27 Dec 2022 14:22:45 GMT
vary: Accept
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: HIT
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CNmd94XOpH8lIGn6sMQA%2BZ8E4fj%2FV1BPdcXo9%2BAZM1eKSrE4HdbsnjDzFzjmeOlHPvB%2B5fdSGVXIPcZVfMQbXfj0iDJZlzyNV1z1yGRzFUE2LAoDHj6%2BL4Mmhxc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f5d8bf48d351c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/c390/27d9/f370/ab19/356d/707b/779f/b16d/1.jpg
104.26.6.119200 OK 4.9 kB URL GET HTTP/2 evocdn.net/hb/xvideos/c390/27d9/f370/ab19/356d/707b/779f/b16d/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 352x198, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 76b1e3d2cae26756dffa790028d853bd
def6c894eb2c230c8fce21c6469be0d68192bc1f
15c3db0a8cce304b49f72723868eb13623982e20e4833c0dc865967e60739833
GET /hb/xvideos/c390/27d9/f370/ab19/356d/707b/779f/b16d/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/webp
content-length: 4934
age: 24495
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7333
content-disposition: inline; filename="1.webp"
etag: "b10d7e6ecef67a31bb0c245b0b080296"
last-modified: Tue, 27 Dec 2022 06:36:33 GMT
vary: Accept
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: HIT
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EO7QI8ACXkMyeo2HE6T%2FFbmiaLjQBNWuXduFArbS9nvu2L34PjlfuKZmuV64QfHlOyeIq5QlZghIVbvaQFVn4nG6U%2FYfl5M7ZuP3UXKj4m496hjqivPeTxWJDas%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f5d8bf49d4e1c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/af3d/d9bc/a6da/bde7/f9c3/db28/61be/2fe6/1.jpg
104.26.6.119200 OK 9.2 kB URL GET HTTP/2 evocdn.net/hb/xvideos/af3d/d9bc/a6da/bde7/f9c3/db28/61be/2fe6/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash f94acf030046d47c71ce706aa7a86dad
380a39d4d67d4a597b727b6b2435850ebe202618
267ba83ea6e876cf21ed007dfc3361f834942a99021786e94511b3655e222c8b
GET /hb/xvideos/af3d/d9bc/a6da/bde7/f9c3/db28/61be/2fe6/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 9181
etag: "f94acf030046d47c71ce706aa7a86dad"
last-modified: Tue, 27 Dec 2022 14:12:50 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rYQpMe8gHlhK8xhwypMursxjO0CcADQ8y2KHXkjc7e5E2PgqlTLs1IgtEGnjMjNBLS6eVrcsyA0lMzN7LG3Xc0jtPyDvKZ%2B6I%2BG3r9UMpeK40UiaI%2F%2BWp6fgJi0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d341c16-OSL
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js
104.16.57.101200 OK 15 kB URL GET HTTP/2 static.cloudflareinsights.com/beacon.min.js
IP 104.16.57.101:443
Requested by https://e.xv-cdn.net/?id=68421333
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:79:35:ED:04:A2:CA:50:F7:9A:B8:FE:DF:A5:0C:B1:F2:E6:DD:E8
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 3e1dc23d12b48dcd50704cba497bf0fc
e49bddb802c3c557432d27b4f52f8ae16b2e1262
a7cf353135e54b86afd32e50bc365b1e57203278ca5f0b74a379ee7d0d7ec3cc
GET /beacon.min.js HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2023.7.1"
last-modified: Thu, 20 Jul 2023 18:10:27 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf2fe4db50c-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/cc65/c989/8af2/72b3/3eba/c439/cbe0/8e3b/1.jpg
104.26.6.119200 OK 8.4 kB URL GET HTTP/2 evocdn.net/hb/xvideos/cc65/c989/8af2/72b3/3eba/c439/cbe0/8e3b/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 11f1e6259c6c2236971de346e01df93e
2d7ea03fdab84179d3c6813efbbc9747aa060fd2
9e4e9fbde39fd36c97af03cb7ddee64b1e8ae7369f76944b36ad48613085106e
GET /hb/xvideos/cc65/c989/8af2/72b3/3eba/c439/cbe0/8e3b/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 8388
etag: "11f1e6259c6c2236971de346e01df93e"
last-modified: Mon, 26 Dec 2022 03:09:18 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0hh9T2%2Bb36AYgbFbGYxr68m9jHaHhKUZ2DVHfzWa9Q%2BYVbtPif%2F7xfmFcyMs3vaM5uZKw%2FM697CYKx335vWrCW2EPPpeDfBh2Q62kw9Scvo93tnPPOeZWv2CUR4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d3b1c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/9fcd/87fd/f915/1d4f/0543/98ff/0dc9/5133/1.jpg
104.26.6.119200 OK 6.0 kB URL GET HTTP/2 evocdn.net/hb/xvideos/9fcd/87fd/f915/1d4f/0543/98ff/0dc9/5133/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash cc4ff752fdc050fab07b5d28b2687546
fe255eaee19508518fd73ca3c4b4fced7dc786eb
820c64d3b9416c1232f4d770deaa03fb5b4b4e8b45d32db71bec034491411bd1
GET /hb/xvideos/9fcd/87fd/f915/1d4f/0543/98ff/0dc9/5133/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 6035
etag: "cc4ff752fdc050fab07b5d28b2687546"
last-modified: Tue, 27 Dec 2022 09:51:08 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1q3cHF7p9eQ2%2F3TZcFN14Y%2FwOjQ3yn%2BMELnl2%2FBhZPmv%2BPLDYyk3FLUUPMAHxzu%2By3YS6Oe6CagJfm5Naia4dhra8dVZHsSv0xBPHiPBcQVK%2BWuzcgJBU1Tp0nw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d281c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/f5d5/ccd1/4c99/293c/eba0/3acd/6a27/afbc/1.jpg
104.26.6.119200 OK 5.3 kB URL GET HTTP/2 evocdn.net/hb/xvideos/f5d5/ccd1/4c99/293c/eba0/3acd/6a27/afbc/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash faf8c2ddf28d17e0f4d55024c87d0d23
3fe9358072986d25bc16fa16349de62cc1e8a17d
ea8811440a893bde4f9e9f4a0091bc0d8d151c3e77cec8677512a6ac71d239be
GET /hb/xvideos/f5d5/ccd1/4c99/293c/eba0/3acd/6a27/afbc/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 5291
etag: "faf8c2ddf28d17e0f4d55024c87d0d23"
last-modified: Sun, 25 Dec 2022 02:18:36 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q%2BFPAdplDyCgwDebRDUPEHijvlYzoW7NSHhgjgnPntrr9w4Sr%2BONggGrwQosZZ4374%2BwESEf13g%2FO5lAruXUknxbMktB9a%2FEKBDZZFJne1dUHpOgOfxEOE4wkrw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf49d451c16-OSL
X-Firefox-Spdy: h2
api-search.xv-cdn.net/id/68421333/?format=ajax
172.67.131.70200 OK 12 kB URL GET HTTP/2 api-search.xv-cdn.net/id/68421333/?format=ajax
IP 172.67.131.70:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerGoogle Trust Services LLC
Subjectxv-cdn.net
Fingerprint33:02:84:A4:07:BA:A0:64:10:2D:8A:79:1A:02:A1:52:AC:CE:CE:C7
ValidityFri, 16 Jun 2023 03:25:17 GMT - Thu, 14 Sep 2023 03:25:16 GMT
File type JSON data\012- , ASCII text, with very long lines (15736), with no line terminators
Hash 9f89a89c82516899486384c4bae92139
a38236b87431e774ea7b3bb0eb3e268ec53ce4d0
4cac9e1a5e97d125eecfb330478c40e85f6a63e3dba1e916185016c0c237ad2c
GET /id/68421333/?format=ajax HTTP/1.1
Host: api-search.xv-cdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fap18.net
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:16 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.16
access-control-allow-origin: *
x-header-server: Api
x-host: Api
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Sun, 13 Aug 2023 02:32:16 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pp%2Bl9YUl8QgJNXglB1mTh00I4JPl0V1ulOIXf9PA6p9%2FK%2B1xbT%2FHdpgbuLSQrzE3Ql0MuJQ9a7oVkD1ray0%2BrU3sVKDRqm0w7sib0KWiML2penvSOc8QmBk2bKmXrErNI5V%2Fl6W8Q%2BU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f5d8bf0ec1db4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/8dd6/fc8f/c385/fe51/3a4c/f6d0/30c3/3bd6/1.jpg
104.26.6.119200 OK 8.9 kB URL GET HTTP/2 evocdn.net/hb/xvideos/8dd6/fc8f/c385/fe51/3a4c/f6d0/30c3/3bd6/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash 2248f8f5d7523b7b438dedaf645b10ef
7def8b06e884754faa801c0627d8dcacbaa0cf50
a42b3efe30bb4c845665e4b76f55b1df025067d45946c9836d7b20c446390bac
GET /hb/xvideos/8dd6/fc8f/c385/fe51/3a4c/f6d0/30c3/3bd6/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 8907
etag: "2248f8f5d7523b7b438dedaf645b10ef"
last-modified: Tue, 27 Dec 2022 18:15:33 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NJBGBWHW2Jo8NCk6eB0gJaox%2FMT2Nv413S7HRmPn3a%2BXTxJpVPPy30R%2BHaNDCl0ybNYkjI8XKLr1DfGK7fdAPZTGGS3L%2FQd0ZM1Ll%2B5mNxbQc%2BukXoPXN26675Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d391c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/c33d/eec8/b0a2/33b2/490a/2ba9/1b14/e0e0/1.jpg
104.26.6.119200 OK 11 kB URL GET HTTP/2 evocdn.net/hb/xvideos/c33d/eec8/b0a2/33b2/490a/2ba9/1b14/e0e0/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash 82a69249b40bc7cedaaa6807d505736c
bc8bca338e3d46ec521c229452a24b95bf05ce58
410ed591f0cb9425bcf0218484ff39583ebabdae2fa1b526911a34646d2a8ff4
GET /hb/xvideos/c33d/eec8/b0a2/33b2/490a/2ba9/1b14/e0e0/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 10827
etag: "82a69249b40bc7cedaaa6807d505736c"
last-modified: Sun, 25 Dec 2022 18:27:21 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FGMZOoP2w35y2LiYmWSUh2Z8wsaJj5krubQqNBV8FjuBytaokSPzyMzS2K5I7jFCWl%2BEh%2BGKqPcFgwJu678%2Bo5J2kVjcLlJ%2B%2BSJikk5l9mjSgyfJ82fUKMRMmnk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d371c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/42a8/5f02/00df/f0ac/eb0f/3323/6b99/38f4/1.jpg
104.26.6.119200 OK 9.3 kB URL GET HTTP/2 evocdn.net/hb/xvideos/42a8/5f02/00df/f0ac/eb0f/3323/6b99/38f4/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 94ec7572acf180bb55dbf1d4c93f1755
e201ec7f3462f89293fdb30c24608081f359cf4a
fdf662e4404ae1d021584a9c37cc00624b2c6aff6d79a595ad4a4b034663240f
GET /hb/xvideos/42a8/5f02/00df/f0ac/eb0f/3323/6b99/38f4/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 9325
etag: "94ec7572acf180bb55dbf1d4c93f1755"
last-modified: Tue, 27 Dec 2022 00:52:49 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8%2FD%2Bq5%2BKGowexZsZf%2BBxyY3j40BA2NCt1vS3hz0sul6qq2fvQbu71izejeo9dX0dgRWGL2RH%2BOuUZzvbRyvKEqVlPn6CXDSgDd%2BwN6%2F42GojTxxNSLBWFXkcihg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d431c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/d5f5/b2be/8e42/976f/c8a7/0338/5b3b/ffcf/1.jpg
104.26.6.119200 OK 6.4 kB URL GET HTTP/2 evocdn.net/hb/xvideos/d5f5/b2be/8e42/976f/c8a7/0338/5b3b/ffcf/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash b0424efbc49d3e14df46243057d90647
3fa998714a6d2ec749e9acff2c1845f0fa306a73
0f4bb937dbb6597f6fb9c29326eed0eaa8d824735286037e6c2450a514ef5fa9
GET /hb/xvideos/d5f5/b2be/8e42/976f/c8a7/0338/5b3b/ffcf/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 6404
etag: "b0424efbc49d3e14df46243057d90647"
last-modified: Sun, 25 Dec 2022 15:20:00 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7HMzcTfiPb5UdZYaWbbXRIno4U1%2F5HXEuCOKPwEK3CTmlYKyrPNpam2rgP%2FkDy105rRlbpnsUMsbXFnrfougNAJTIL%2FWzWpu4Dd6h8%2F0msbf7202arETbb6uxPI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d311c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/ac94/946d/ad11/b317/6348/3acf/3be0/560c/1.jpg
104.26.6.119200 OK 5.0 kB URL GET HTTP/2 evocdn.net/hb/xvideos/ac94/946d/ad11/b317/6348/3acf/3be0/560c/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 83716fb5737d53e5890674cc114f8608
ac9083349d991d52d1ace5f6699ae71278e6a58f
82ee5387deaea79036a16abc84c5bd32508fdf300b240534570b676f5be6929b
GET /hb/xvideos/ac94/946d/ad11/b317/6348/3acf/3be0/560c/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 4962
etag: "83716fb5737d53e5890674cc114f8608"
last-modified: Mon, 26 Dec 2022 05:08:37 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jtBM%2B2%2FMegUIgSvnU5%2Bi7%2BUxmJLwDTeNmLyJnShK9c%2B61dAH5h9Bj5wpljOk0ILy33Rs%2FtUrEgYbxa4LgSVIEaEqL52wg4y8XuUFaCGVYACO1GyKhdPrzvVrFVM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d3d1c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/f5e8/bc02/9034/0c63/59d2/f4f2/4245/d10f/1.jpg
104.26.6.119200 OK 6.7 kB URL GET HTTP/2 evocdn.net/hb/xvideos/f5e8/bc02/9034/0c63/59d2/f4f2/4245/d10f/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash fe7b77efa9118d6a19433eb9a42ae82c
886f1e2e80e7b75791e1c5e42d0710293772965e
3e79f39ad25c3aeaa77d1a0533d751b1bb5036477750e6f811fb7397d4ba0010
GET /hb/xvideos/f5e8/bc02/9034/0c63/59d2/f4f2/4245/d10f/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 6740
etag: "fe7b77efa9118d6a19433eb9a42ae82c"
last-modified: Mon, 26 Dec 2022 11:39:07 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TVMDbevhruWjTtOaLjBd55OX5Bj%2BsYjQ89R2kYqxCgwB2zoag6DQkKWX1aoyBt9LcQ6ENW4he1GYueWFBLYpAj8fVGVvfz7HZfO%2BkU%2BhKegXoMUrKVdZ%2BWufoXw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d2b1c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/52e4/df42/7862/361d/c70d/ac23/e53f/0daa/1.jpg
104.26.6.119200 OK 8.8 kB URL GET HTTP/2 evocdn.net/hb/xvideos/52e4/df42/7862/361d/c70d/ac23/e53f/0daa/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash 47366e47ee348ab92eabfa68e433fc6c
57e5d63009a41f3575682a96c1f465e1fc3d174c
2df198af87fff2aee4877113a4e00d49a6c4261f541aafb5437171b4b1d11d67
GET /hb/xvideos/52e4/df42/7862/361d/c70d/ac23/e53f/0daa/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 8768
etag: "47366e47ee348ab92eabfa68e433fc6c"
last-modified: Sun, 25 Dec 2022 16:24:20 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JTO5hPuIsfDigLVC7j4qO5M1WAZGBoecz5s0dkBn0fwtEuZmMsg%2FdEnIJOuK5S4PWY9BSZKP8a1betFUxH4zxA865R7f%2FStPYw5ZCRY%2B1g6mco%2FR3QKvuk5ZLXo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf49d4b1c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/dc1a/676e/53b9/552d/d047/9c75/221d/41ee/1.jpg
104.26.6.119200 OK 10 kB URL GET HTTP/2 evocdn.net/hb/xvideos/dc1a/676e/53b9/552d/d047/9c75/221d/41ee/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash f4f0e4b75ef9f1196e7e95da5dc6c1ad
ca40306e412ea80c7cec17d1a3293f6631cb94c0
457ac1911928be50ca5beb7212673d715d5d40e9587bd072857d14c8b3dce8ff
GET /hb/xvideos/dc1a/676e/53b9/552d/d047/9c75/221d/41ee/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 10007
etag: "f4f0e4b75ef9f1196e7e95da5dc6c1ad"
last-modified: Tue, 27 Dec 2022 11:11:58 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JiOKQqURZzqVGNxfXZP7SqeBhh63%2BK9atLaz6XZDa50tXEmzALe6m0lszbLIt2IJgZdDJ%2F66kjRJwGnk%2FlTvk%2B3Lo0sdsfC%2Fk%2FHDJeOoI2aeuQZ3c4Gwa9jXzrs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf49d4d1c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/daf7/64fd/5e5e/b876/8880/4698/dd65/e40b/1.jpg
104.26.6.119200 OK 5.0 kB URL GET HTTP/2 evocdn.net/hb/xvideos/daf7/64fd/5e5e/b876/8880/4698/dd65/e40b/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash b0eed8c266a16811ffb2fe6c5aaec439
835242b8106f88e58f2131800ea081039ef3a6b5
20b38ce63ccdf8537b76c9a946614282f028bf107501a6fc88ba3a6048e3356e
GET /hb/xvideos/daf7/64fd/5e5e/b876/8880/4698/dd65/e40b/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 4962
etag: "b0eed8c266a16811ffb2fe6c5aaec439"
last-modified: Sun, 25 Dec 2022 02:22:41 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RfFMGn%2FACRsIfWz8lEPgqMkD%2BXYtITwL03Gq%2FNQzozBW0pStJSGFNEHxJ15OFPeMm3KlQQ6IPDE6q5XQudLeoQQeG8Qsu5ULKJ1ZXECaG3XNjmuixWzTTQoLOGE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf49d441c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/262c/1cb0/830a/0ded/d422/8775/ba1e/aa41/1.jpg
104.26.6.119200 OK 6.5 kB URL GET HTTP/2 evocdn.net/hb/xvideos/262c/1cb0/830a/0ded/d422/8775/ba1e/aa41/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash a37ddf7e1fd6f23cc1b88ccd891bbaba
4d29a6a55a1820eada26e62256c2c933a6359321
9f15a4e99b1965794d940d0ce3a7110b889f34ddb1abc26a4015d0023389e88a
GET /hb/xvideos/262c/1cb0/830a/0ded/d422/8775/ba1e/aa41/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 6549
etag: "a37ddf7e1fd6f23cc1b88ccd891bbaba"
last-modified: Sun, 25 Dec 2022 03:09:41 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fpsk0bw6eCkGhMU%2FEbRJXBvRcR1qfO0eb4BFoXWj81h8vSiRBRU90BHgeUJE69x4s0uolu8hlbsp%2B7qEij9BupJEcW7X8NuSy9rNRrALXmERl%2FDfT%2FUczwdcb%2F0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf49d491c16-OSL
X-Firefox-Spdy: h2
evocdn.net/bb/xvideos/7421/7f4f/47b0/4b71/944a/2c7c/c52d/5a5b/1.jpg
104.26.6.119200 OK 9.1 kB URL GET HTTP/2 evocdn.net/bb/xvideos/7421/7f4f/47b0/4b71/944a/2c7c/c52d/5a5b/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash f98b1051fdc5b3bdd13912b7ff7506af
a6dd05a8b9dbd9515a7c801efd6c0c7ae910a68d
5249d9bd19c7b368e41e98dce1c10091e88146a4512345fccad026071f09a62e
GET /bb/xvideos/7421/7f4f/47b0/4b71/944a/2c7c/c52d/5a5b/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 9127
last-modified: Wed, 02 Aug 2023 17:28:27 GMT
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9%2BUUlVgSsCWx2N9Ryf%2Byohdt%2Bkg4ip0LI31JoHkDWkLSraHyQ0Nw3%2ByrgN4RFQNyTNotWgUunc46fPktm8TPUIxnNXU6VZ%2BHUMJvTxGRGnVnOFQGxf2l8x%2FgWsE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d301c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/f2ba/7727/9ac9/7f16/f4b5/4b45/6ad2/96f6/1.jpg
104.26.6.119200 OK 11 kB URL GET HTTP/2 evocdn.net/hb/xvideos/f2ba/7727/9ac9/7f16/f4b5/4b45/6ad2/96f6/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash d5f511ad5787bb485c8e3c2774838881
ae8624b55c59cb9a84819a5b90d63741d8aa2753
7109e3add38d091411a76fcf6a548b793674f1a80c73aefb6e0d8c7934e522b9
GET /hb/xvideos/f2ba/7727/9ac9/7f16/f4b5/4b45/6ad2/96f6/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 11367
etag: "d5f511ad5787bb485c8e3c2774838881"
last-modified: Mon, 26 Dec 2022 11:38:17 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bi0%2FvjCPH6cidjmTOvo28SZaRtYpe1wIO30nppkxYty8SuY9rIgNJ8mtvoq3DRM0MJeXI%2FXv2DMHHUVLPBZLVgG6rhe2lmA9dIIkMbSHlE6%2Bn67Rbp2O81uXMxY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d2a1c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/c660/0ea0/d8c1/c3bf/3c48/cb93/800c/0b79/1.jpg
104.26.6.119200 OK 12 kB URL GET HTTP/2 evocdn.net/hb/xvideos/c660/0ea0/d8c1/c3bf/3c48/cb93/800c/0b79/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 033c7b49d670a798b8c63fe93ddf5281
c9d172abac48a27ff325c584e6d0515b3c4ffe19
d80b80a168ef8e399ea94e3e8d599d1645062918605e8bb6fc253d4afd557f66
GET /hb/xvideos/c660/0ea0/d8c1/c3bf/3c48/cb93/800c/0b79/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 11919
etag: "033c7b49d670a798b8c63fe93ddf5281"
last-modified: Mon, 26 Dec 2022 06:30:53 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0F%2FJ1DyiLcMatuRYnLDD1uXWHd1chw%2BxaqVzvYTuqHQD8q3zPJReOopE1HZh%2BP%2BltH7ZV8KcwvPwHgI6HxvAqRrqkJUi%2FFocVC8q7m4IGs3jGyr921NE4qhJ08A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d3f1c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/56cf/69a3/370d/689a/bcc5/2594/425b/9f2f/1.jpg
104.26.6.119200 OK 14 kB URL GET HTTP/2 evocdn.net/hb/xvideos/56cf/69a3/370d/689a/bcc5/2594/425b/9f2f/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 5e3aa7b82d17f227082b3e9b58291e7e
250f79e1d0a5e152ada9a3fc4125aca40206f4ba
cd06a37bcfae31f9a22909025a39fdeef4b456564950f8b3d62605fe24e97325
GET /hb/xvideos/56cf/69a3/370d/689a/bcc5/2594/425b/9f2f/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 14361
etag: "5e3aa7b82d17f227082b3e9b58291e7e"
last-modified: Sun, 25 Dec 2022 02:28:43 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mh6OjbVHxfOE59wETRzH02ooyNFKbNtKf1qJGl4DQhbQXGH9G%2BlJ7rgn0ipVhyYPtly2NbqsAJ63poZsBck%2B2pFaNGKnTLs9y7QJYkDXH9ZdN1dqDx4P1vXLufc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf49d471c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/d03b/a86d/e03f/a269/bf9d/fef9/4603/d919/1.jpg
104.26.6.119200 OK 6.8 kB URL GET HTTP/2 evocdn.net/hb/xvideos/d03b/a86d/e03f/a269/bf9d/fef9/4603/d919/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash d0c2d168f8d55f9c3193ff63c04f4a3e
42c9ffacdc5b2944404b3ac443250e69e7d03a7b
91d23580955a0772405ba79f4b39ee2ba1a4c48df305e598279ecc697e3064dd
GET /hb/xvideos/d03b/a86d/e03f/a269/bf9d/fef9/4603/d919/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 6776
etag: "d0c2d168f8d55f9c3193ff63c04f4a3e"
last-modified: Mon, 26 Dec 2022 04:42:14 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ExtfL1M5ihoKA0Ld1j%2BrrfZzJplCYAoAMT0MlsqTxtvXVEQbDU5P2c8%2Fpu%2F0RU3pjcCKdEhFf1SfXl%2BUPhO9WSSLBi04Jfk1hslOlY5y2%2FZDAl0uvQ7TXWf4AqA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d3c1c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/82e4/4478/589e/2992/4804/3074/f1a4/2515/1.jpg
104.26.6.119200 OK 7.3 kB URL GET HTTP/2 evocdn.net/hb/xvideos/82e4/4478/589e/2992/4804/3074/f1a4/2515/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash 60af1e6e5c1775aadf2e31e0260a2cc7
85d6a5aada002ec483567b79a085ed0352b8f499
60a28b137c5100a1e6e26b9ad9fe37dec2b03924b37ae75bc776b552f651b8a9
GET /hb/xvideos/82e4/4478/589e/2992/4804/3074/f1a4/2515/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 7325
etag: "60af1e6e5c1775aadf2e31e0260a2cc7"
last-modified: Mon, 26 Dec 2022 17:32:49 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ouIh%2FY2Xu2nlCHREJpFqU5DRplDJ%2FXXXSZUjdAyAfeTw9xrOPNg8cd3rs9v%2BavO7dKKsh7RnwUXLVDudf0vA1DDnijFZfUGDL%2BiONlZzL9BTHe4fpglkJPPvlAI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d2c1c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/b6a8/a201/6487/2e9b/5615/36e7/4e70/5ee0/1.jpg
104.26.6.119200 OK 9.0 kB URL GET HTTP/2 evocdn.net/hb/xvideos/b6a8/a201/6487/2e9b/5615/36e7/4e70/5ee0/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash 2e15d6d04463b5265e6b0d050352d641
02278f7ef12c01a29ee1fe1c04317833dbd42e7c
7badb6b6bcb7169e0b8890e9f3edeb256e32d25868b67d5f016ba58c26dd6af7
GET /hb/xvideos/b6a8/a201/6487/2e9b/5615/36e7/4e70/5ee0/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 9038
etag: "2e15d6d04463b5265e6b0d050352d641"
last-modified: Sun, 25 Dec 2022 21:04:42 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9Bz7hQi3VqZDkIBMOxDmB9vaZ19lqsfh59E7Q3r2q9WpZBxboT1FcUS%2FwxAihh9ohhd8yIJOwBpDSEFlXdkO2f44tssEYczKPWH8a2p2m33jWvgJ6o0%2F%2BXARamc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d321c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/b9d8/bb5c/91d6/460a/0258/819b/7a3e/474d/1.jpg
104.26.6.119200 OK 9.3 kB URL GET HTTP/2 evocdn.net/hb/xvideos/b9d8/bb5c/91d6/460a/0258/819b/7a3e/474d/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 4b643cb4638fee87f5657880a79d4143
cf253d3fec58441447dfc5df478d2b59049caa85
c09200ca7571aabb5c8d2584fe3d948cb0ab08ff3320eee0a7e421c8cc191e24
GET /hb/xvideos/b9d8/bb5c/91d6/460a/0258/819b/7a3e/474d/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 9253
etag: "4b643cb4638fee87f5657880a79d4143"
last-modified: Mon, 26 Dec 2022 03:13:43 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OODlUYxgHQh1cqto3QUFNUO6iXUWO2%2FPzK3Fz%2F4nzUOYR8Q7hChsN7H56zMlf9B4yJTA9GKPMt%2BdXqD5RO7UD0JBDQO88TXsAYeeVxyWBdJueJWMB6x5x2OQLHo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d361c16-OSL
X-Firefox-Spdy: h2
evocdn.net/bb/xvideos/284c/a789/139b/d0d1/61a1/ce99/e566/cb36/1.jpg
104.26.6.119200 OK 6.1 kB URL GET HTTP/2 evocdn.net/bb/xvideos/284c/a789/139b/d0d1/61a1/ce99/e566/cb36/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash eb710b87172016934396a582d803db9b
7e56e92e99b84d2868c6ecbda4bb5ee51006aa82
c3f1f996968a7312a65b3acc22cf6f7151990b2ffecbec2148c91cbdeb8baebf
GET /bb/xvideos/284c/a789/139b/d0d1/61a1/ce99/e566/cb36/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 6088
last-modified: Fri, 11 Aug 2023 03:27:10 GMT
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qjF%2BsCEm%2FHo2Kz9dmoNVFuwPw5PgXtOhk%2FjHUJ3OWsawHRBZNn%2FtkqjcuyUlXBWjZnDZAqgXuP5CG2yY%2FZdrvQkPMqXWy3AvWhJs7o%2FhCdaaCcNKHiVeiS8C8fk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d2d1c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/4209/7793/ba1e/6b97/3b3e/a0f2/7d40/4540/1.jpg
104.26.6.119200 OK 9.2 kB URL GET HTTP/2 evocdn.net/hb/xvideos/4209/7793/ba1e/6b97/3b3e/a0f2/7d40/4540/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 6d75662043ec929456ed89dee6667410
5a03497ccc04b54d6627f20a3781cc5fa1e5afed
50b598245b50144624708e50f7f4e80e290e5b3a5a81a7ebb238dec9c8daa7d6
GET /hb/xvideos/4209/7793/ba1e/6b97/3b3e/a0f2/7d40/4540/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 9166
etag: "6d75662043ec929456ed89dee6667410"
last-modified: Mon, 26 Dec 2022 02:33:32 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7rAnGWkfrtLZzZVl7NKalIF1vM9pc7hwcgLP19%2FmTRcRUTlVKuT5EICg3ZmAKm1Yqcf9ti2hahZV2EFI1Wrm6xh8pgTtRa8L8jY1XABrnFfSDQfn5vvh3FPu6hM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d2e1c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/feb2/0060/a602/e86d/b4dd/473e/7990/d573/1.jpg
104.26.6.119200 OK 10 kB URL GET HTTP/2 evocdn.net/hb/xvideos/feb2/0060/a602/e86d/b4dd/473e/7990/d573/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 89d6987e9a1c17ea77f3448b4d41ffe1
be0f73acb1ec514e078db17aab5b56ee73dec10f
675102254368c1bd6b1b9b5e4d3bd55f7b4c7d6486a0f2c42636b0372e5e183d
GET /hb/xvideos/feb2/0060/a602/e86d/b4dd/473e/7990/d573/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 10402
etag: "89d6987e9a1c17ea77f3448b4d41ffe1"
last-modified: Sun, 25 Dec 2022 23:12:20 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mORB3uoc1jHxcw6Bi9eGgrRErPPrLGMN%2BufhLeRH8w8bizxEIaJ4fpr8z7elvpvadAxHoI7cU6XQAC5%2Fr83%2BapQTK%2BQRz8MasHH9Y0GZ2r23yusEYJzp7rNjS%2B8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf49d4f1c16-OSL
X-Firefox-Spdy: h2
evocdn.net/bb/xvideos/941f/ca5a/f947/a7b9/7f34/c99f/bd45/3c6e/1.jpg
104.26.6.119200 OK 12 kB URL GET HTTP/2 evocdn.net/bb/xvideos/941f/ca5a/f947/a7b9/7f34/c99f/bd45/3c6e/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash b1d16feae26cd5fda139cb56e42c7c86
9bdac77dd295889198a84f5e81dbf571ca712154
7a86c1d1cc6b2ae605650159e42e75930d8227fea7d303b11c9989c83c8d1ac9
GET /bb/xvideos/941f/ca5a/f947/a7b9/7f34/c99f/bd45/3c6e/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 11708
last-modified: Wed, 02 Aug 2023 01:28:13 GMT
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MqFgwsoTfouMuaAkZfW0F7OHEga3WZEj8QsorivHD%2FoDT18CpmFSFKaY9hSBjpSs6fn1qcMuzSf3BRk5abRGTza%2BkhccL0ppMK7Hn5cBe3m1fiwgpkBcXsl%2FIz8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d2f1c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/4329/d687/1008/3b42/f309/30dd/0e86/6f4c/1.jpg
104.26.6.119200 OK 8.8 kB URL GET HTTP/2 evocdn.net/hb/xvideos/4329/d687/1008/3b42/f309/30dd/0e86/6f4c/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 4f04fcaad9ac29025900a57b6caa342f
829935a052541969ffa4cc4a89838c0bd4bebe4a
7169d58fc0ce6f5faff29285a16241f435ee9d0c9deb8b63d957fa5831e6eb58
GET /hb/xvideos/4329/d687/1008/3b42/f309/30dd/0e86/6f4c/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 8838
etag: "4f04fcaad9ac29025900a57b6caa342f"
last-modified: Tue, 27 Dec 2022 01:53:23 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TZ4qbqHdYH%2B7eXT8LhQEVUMFUIUL7Q9Koa3dLHuMjEjw6WWUMPnsoHGaTvmuUwTOc%2FCazarLDv3Pxi2BiIEjJk2AO5YgDpEX5DN%2F1viS%2FpqCPeDQEPtm2Q1QyjM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf49d511c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/2bd8/31ac/026a/5ad3/c16e/1549/02e5/abc6/1.jpg
104.26.6.119200 OK 10 kB URL GET HTTP/2 evocdn.net/hb/xvideos/2bd8/31ac/026a/5ad3/c16e/1549/02e5/abc6/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash 2244e9733dd9777bfa461a0614550e6e
8e8f2df0f764aebf96f5f701acf5b871cc54caef
864e0a7eecbf418c1c7c8d59f48245b15cd50dbb2b0b08c38b5e96c56a3e6214
GET /hb/xvideos/2bd8/31ac/026a/5ad3/c16e/1549/02e5/abc6/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 10214
etag: "2244e9733dd9777bfa461a0614550e6e"
last-modified: Mon, 26 Dec 2022 03:52:49 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W5ddwdJ6ezDVOwGqAvU50f16Pj3oyL%2BMabsqlz6xPk3LjkQV7rWiEJ4rVtK2EDzBe%2FyDK2KrQrPn4SyCwVZbHkemRDFIqwwpyHfjo7XtUS24g2yyeFRrkuxvQ2Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d381c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/d0b0/7ef1/dfa0/162d/fd70/ae4f/8205/6523/1.jpg
104.26.6.119200 OK 4.7 kB URL GET HTTP/2 evocdn.net/hb/xvideos/d0b0/7ef1/dfa0/162d/fd70/ae4f/8205/6523/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 1fec02e0d2ace508005e26f7d0d8ccab
a27b2431fa6d3aaf948f4617a68cf5387b2f46f3
ace8bea4e6c6936d0c38a72522b00d64f5b10e4b05cf46a5fdf8c91fc9e1d305
GET /hb/xvideos/d0b0/7ef1/dfa0/162d/fd70/ae4f/8205/6523/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 4696
etag: "1fec02e0d2ace508005e26f7d0d8ccab"
last-modified: Sun, 25 Dec 2022 05:48:18 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CxEdH8qGnNO7rPZ1mBiSVPT4VARLVPAO33HUzqckxVlVoq8g4YbEXPvjom%2BIVHbFLAPz6LrJ2K56ybE9zEKgfOTUCLlRKuf0HCpcsLoP%2Ff38rfnQPPg8y7LxS64%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf49d461c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/df2d/8427/5e29/ba96/c3f1/b32e/507d/9dae/1.jpg
104.26.6.119200 OK 7.1 kB URL GET HTTP/2 evocdn.net/hb/xvideos/df2d/8427/5e29/ba96/c3f1/b32e/507d/9dae/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 7afaad3bb0c80ad5447c0bb8336876e0
1a6896623036ab1eba21288f35ff220d247076f1
e9cd38856b9395f49d8422449df8edf26d95ace08d127497d336929608251590
GET /hb/xvideos/df2d/8427/5e29/ba96/c3f1/b32e/507d/9dae/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 7102
etag: "7afaad3bb0c80ad5447c0bb8336876e0"
last-modified: Sun, 25 Dec 2022 03:41:50 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B2Z0XxntzhjFZ1oH%2B%2FnKIzEpAlCpfA4B1HwenI06XVBqVp6od6dNjtBLIjXO5U1lsUGaonR1RIDdjYLFl%2BaaB3h5EGkpv5plroQMCnOtWiZZZrM3eK923a6l1%2Fo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf49d4c1c16-OSL
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/359d/5740/92cd/c504/48d7/d003/a87d/1a50/1.jpg
104.26.6.119200 OK 8.8 kB URL GET HTTP/2 evocdn.net/hb/xvideos/359d/5740/92cd/c504/48d7/d003/a87d/1a50/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 2f9dadefb8df5da7fc34fb98468eb32b
8871d32f9073dd81f6d57f95ed004202d1c93979
e3b5adf3e4296b1781fc5c96eefad098e2b16792439e6ecb9e4d0d76fe02321c
GET /hb/xvideos/359d/5740/92cd/c504/48d7/d003/a87d/1a50/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 8789
etag: "2f9dadefb8df5da7fc34fb98468eb32b"
last-modified: Tue, 27 Dec 2022 14:28:43 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lKMrleEBib%2FWEcL0XfnfWNf4SxJrrOTSKa8DBoKnLgWLkhJTiFDTnRFPtTiw3GdeYLTGfwV%2BFZOmPKDnncFM8kNQ09rXxq3Yey4lwa2Yq38Fg2wa1DdRZTrz2dI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf49d4a1c16-OSL
X-Firefox-Spdy: h2
beeg.porn/adsites/status.js
172.67.203.166200 OK 0 B URL HEAD HTTP/2 beeg.porn/adsites/status.js
IP 172.67.203.166:443
Requested by https://pub.qwerty24.net/desktop
Certificate IssuerGoogle Trust Services LLC
Subjectbeeg.porn
Fingerprint54:3D:42:A8:ED:AE:78:25:68:49:B3:5B:54:8B:DD:A7:08:4E:2B:48
ValidityMon, 26 Jun 2023 07:26:14 GMT - Sun, 24 Sep 2023 07:26:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /adsites/status.js HTTP/1.1
Host: beeg.porn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub.qwerty24.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:18 GMT
content-type: application/javascript
content-length: 19
cf-bgj: minify
cf-polished: origSize=21
etag: "6100e074-15"
last-modified: Wed, 28 Jul 2021 04:43:32 GMT
x-header-sub: Master
x-path-proxy: data-admedia-sites
cache-control: max-age=14400
cf-cache-status: HIT
age: 6391
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8r5Ox6DaJJ%2BcC1T3Vx42%2BRHrAFX1CUlhzJDtB0TZzKXE6dB%2FiPwWYqDgeHZuspMOxdXe%2BMAEjPgIxSGpjoUoHl84iBFPfiJ96dSuNk91jSHNY8gSd%2BS4S6p3Erw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bfb0fc9b4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
beeg.porn/adsites/status.js
172.67.203.166200 OK 0 B URL HEAD HTTP/2 beeg.porn/adsites/status.js
IP 172.67.203.166:443
Requested by https://pub.qwerty24.net/desktop
Certificate IssuerGoogle Trust Services LLC
Subjectbeeg.porn
Fingerprint54:3D:42:A8:ED:AE:78:25:68:49:B3:5B:54:8B:DD:A7:08:4E:2B:48
ValidityMon, 26 Jun 2023 07:26:14 GMT - Sun, 24 Sep 2023 07:26:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /adsites/status.js HTTP/1.1
Host: beeg.porn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub.qwerty24.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:18 GMT
content-type: application/javascript
content-length: 19
cf-bgj: minify
cf-polished: origSize=21
etag: "6100e074-15"
last-modified: Wed, 28 Jul 2021 04:43:32 GMT
x-header-sub: Master
x-path-proxy: data-admedia-sites
cache-control: max-age=14400
cf-cache-status: HIT
age: 6391
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zf23KxVPKBnhgfm0HZbjHaacfGKKSNVTn64RRrTX4PF6KggI1GeAfTlpoJWTKaKctqdrEz6P%2FJr%2Bq2KaiGEppfxpAz88fkBpuJOGOzAoxxNJONiI3n%2B9qNUd12A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bfb0fcfb4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
beeg.porn/adsites/status.js
172.67.203.166200 OK 0 B URL HEAD HTTP/2 beeg.porn/adsites/status.js
IP 172.67.203.166:443
Requested by https://pub.qwerty24.net/desktop
Certificate IssuerGoogle Trust Services LLC
Subjectbeeg.porn
Fingerprint54:3D:42:A8:ED:AE:78:25:68:49:B3:5B:54:8B:DD:A7:08:4E:2B:48
ValidityMon, 26 Jun 2023 07:26:14 GMT - Sun, 24 Sep 2023 07:26:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /adsites/status.js HTTP/1.1
Host: beeg.porn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub.qwerty24.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:18 GMT
content-type: application/javascript
content-length: 19
cf-bgj: minify
cf-polished: origSize=21
etag: "6100e074-15"
last-modified: Wed, 28 Jul 2021 04:43:32 GMT
x-header-sub: Master
x-path-proxy: data-admedia-sites
cache-control: max-age=14400
cf-cache-status: HIT
age: 6391
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dEMo5aElqfxX4EahP8v0Z33jLXs7%2B4UPzOiQB2Vk5yH1%2FAZTIAEM%2FMw3V1HkQfF7h2a1QvFMz6WQsFx%2F0xxVPyGnbspbiAX%2FX92mzl86jE0fATJrwkNO%2FiVdf%2BM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bfb0fd2b4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
beeg.porn/adsites/status.js
172.67.203.166200 OK 0 B URL HEAD HTTP/2 beeg.porn/adsites/status.js
IP 172.67.203.166:443
Requested by https://pub.qwerty24.net/desktop
Certificate IssuerGoogle Trust Services LLC
Subjectbeeg.porn
Fingerprint54:3D:42:A8:ED:AE:78:25:68:49:B3:5B:54:8B:DD:A7:08:4E:2B:48
ValidityMon, 26 Jun 2023 07:26:14 GMT - Sun, 24 Sep 2023 07:26:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /adsites/status.js HTTP/1.1
Host: beeg.porn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub.qwerty24.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:18 GMT
content-type: application/javascript
content-length: 19
cf-bgj: minify
cf-polished: origSize=21
etag: "6100e074-15"
last-modified: Wed, 28 Jul 2021 04:43:32 GMT
x-header-sub: Master
x-path-proxy: data-admedia-sites
cache-control: max-age=14400
cf-cache-status: HIT
age: 6391
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S8CQoEs43guWG%2FF7tZIFL7S1tPvQlL0%2FK0p%2Fvf%2Fn7wd%2FJUmsT1YSP6o4J7884Oix3PRkBL%2BDuHNjfpb%2Fq3JdBCS110Du9owt%2FRabbf9Yd2Mcx12Yo3KMHyUtZTs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bfb0fd1b4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
beeg.porn/adsites/status.js
172.67.203.166200 OK 0 B URL HEAD HTTP/2 beeg.porn/adsites/status.js
IP 172.67.203.166:443
Requested by https://pub.qwerty24.net/desktop
Certificate IssuerGoogle Trust Services LLC
Subjectbeeg.porn
Fingerprint54:3D:42:A8:ED:AE:78:25:68:49:B3:5B:54:8B:DD:A7:08:4E:2B:48
ValidityMon, 26 Jun 2023 07:26:14 GMT - Sun, 24 Sep 2023 07:26:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /adsites/status.js HTTP/1.1
Host: beeg.porn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub.qwerty24.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:18 GMT
content-type: application/javascript
content-length: 19
cf-bgj: minify
cf-polished: origSize=21
etag: "6100e074-15"
last-modified: Wed, 28 Jul 2021 04:43:32 GMT
x-header-sub: Master
x-path-proxy: data-admedia-sites
cache-control: max-age=14400
cf-cache-status: HIT
age: 6391
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hd7OIY40XyKQEqiTI%2BzD6S7jVn4xbx7pqSyS%2FMiCNsfRJBD6AM5lbWK%2BQZqQydnvyf%2F%2Bl719lTE9JhyGQwrt%2FiNFZB3fxBOTU5yvhp80UoUy2bAH6WcfYM0ezgA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bfb1fd5b4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
151.101.193.229200 OK 91 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
IP 151.101.193.229:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint88:D1:D3:FA:BE:69:45:71:5A:74:78:14:1A:E8:F3:5A:88:69:9C:7F
ValidityFri, 23 Dec 2022 10:55:14 GMT - Wed, 24 Jan 2024 10:55:13 GMT
File type Unicode text, UTF-8 (with BOM) text, with very long lines (558)
Hash 26f54fbd32d1714506d9c5e084077c1e
2cf4e33695781d18ab05eb19363994e55f907e39
1274a36b352de0c532d2a88dd8c7dc8ad34d4b9deb48e120742f3311b14e0dd7
GET /npm/yandex-metrica-watch/tag.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.289.0
x-jsd-version-type: version
etag: W/"36378-LPTjNpV4HRirBesZNjmU5V+Qfjk"
content-encoding: br
accept-ranges: bytes
date: Sun, 13 Aug 2023 02:32:18 GMT
age: 5261
x-served-by: cache-fra-eddf8230100-FRA, cache-bma1673-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 90579
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 5f1e05bc8656466ed7f19cbf61ce78e4
f9e5f6eefc197084c31e45173204d63ac5d1d205
b945ab01642936f842281d00a2ab1444d5541585022b74f74229ba9c7e789e9f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 13 Aug 2023 02:32:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
evocdn.net/bb/xvideos/68f8/ea7c/c381/82fb/4e91/357d/ed01/123b/1.jpg
104.26.6.119200 OK 1.3 kB URL GET HTTP/2 evocdn.net/bb/xvideos/68f8/ea7c/c381/82fb/4e91/357d/ed01/123b/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash b7c99d6d5ec4fbe9a5d7fe45f254c0b3
e2952246efa803851e93dc7232adb6db98bae169
7648b51b0db5d26995b28b3804a698909e7b6510309ea7ab83ecc199101a7d3f
GET /bb/xvideos/68f8/ea7c/c381/82fb/4e91/357d/ed01/123b/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:18 GMT
content-type: image/jpeg
content-length: 1260
last-modified: Sun, 13 Aug 2023 02:32:18 GMT
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:18 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XG3hpfeNA1B5jwpeX3uOOg7y4LlO%2B9Ocam1GXvgFw19%2Bbmprl01%2Bk%2F5HgQ7mhmi2TYSv3t%2B6e8%2BJWljSpI9Rgh%2B6vsP5UoUjYFC7p0wDoAMwqcnOyEhYiXdBpKQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d421c16-OSL
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-PHQJKRGYY5
142.250.74.168200 OK 83 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-PHQJKRGYY5
IP 142.250.74.168:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintB8:00:22:F1:F1:80:E5:11:65:10:02:04:DA:9B:FA:C3:3E:F6:7A:70
ValidityMon, 17 Jul 2023 08:16:31 GMT - Mon, 09 Oct 2023 08:16:30 GMT
File type ASCII text, with very long lines (3034)
Hash 8abb8a0c6da442615c7688e4a235634e
8afc954dfe411297db341be0b113a9cd83759177
5831c3e86d72353532a6fad501b4badf409037322360ced2520130689e25f978
GET /gtag/js?id=G-PHQJKRGYY5 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 13 Aug 2023 02:32:18 GMT
expires: Sun, 13 Aug 2023 02:32:18 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 82665
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 5f1e05bc8656466ed7f19cbf61ce78e4
f9e5f6eefc197084c31e45173204d63ac5d1d205
b945ab01642936f842281d00a2ab1444d5541585022b74f74229ba9c7e789e9f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 13 Aug 2023 02:32:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pub.qwerty24.net/one/mobile_top/?domain=fap18.net&area=player&size=300x100
104.21.31.93200 OK 1.4 kB URL GET HTTP/3 pub.qwerty24.net/one/mobile_top/?domain=fap18.net&area=player&size=300x100
IP 104.21.31.93:443
Requested by https://e.xv-cdn.net/?id=68421333
Certificate IssuerLet's Encrypt
Subjectqwerty24.net
Fingerprint65:05:E1:A0:18:97:CF:EC:97:7C:5A:94:2A:0C:9B:8C:D7:A3:A6:F5
ValidityFri, 30 Jun 2023 04:31:53 GMT - Thu, 28 Sep 2023 04:31:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 9562bda6c41c9e0791701b590740c14f
5eb3ba4fe4d98ef29fe57dcea42fa0754361b650
1a3fe2bf2bc709af353404b60b83765ea3cd37293c8831f0a31aa9762570032c
GET /one/mobile_top/?domain=fap18.net&area=player&size=300x100 HTTP/1.1
Host: pub.qwerty24.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: blocked_db1cb2203282b88db2e4b17854dba8e2=2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:18 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.2.18
x-header-sub: Master
cache-control: max-age=2678400
cf-cache-status: HIT
age: 1604736
last-modified: Tue, 25 Jul 2023 12:46:42 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pz3Vk5wJTo8vY9EaGWPU0NI0664qW9oWyHFBA5IkVe0uhAKJoCTqGsn8b78XrJWkyw2fRfGx0MydMZ2iC%2F8nmO58gVnogG2YHnbMEvYZkQpL%2FxD0d9ajwUfSXyQmtiS87UOV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bfd5870b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
go.fap18.net/ftt2/js.php
172.67.157.205200 OK 855 B IP 172.67.157.205:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerGoogle Trust Services LLC
Subjectfap18.net
FingerprintF3:F6:4F:82:8F:F2:39:5B:FB:A0:C1:35:3E:B4:97:FE:AE:B1:C1:68
ValiditySun, 25 Jun 2023 04:11:31 GMT - Sat, 23 Sep 2023 04:11:30 GMT
Hash bea29ce74e63b27ec740324f2ce34c54
17924b5c0eb6bc77cf32b5c0e9c9e79602207800
57496fd295863dc4ece1499ee50b2ad6744ac51700d469b2a5d3f55ceabc63f3
GET /ftt2/js.php HTTP/1.1
Host: go.fap18.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:16 GMT
content-type: application/x-javascript
x-powered-by: PHP/7.2.18
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate
x-robots-tag: noindex
access-control-allow-origin: *
version: 2021-09-01-2316
x-header-sub: Master
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7TYqvI5Y%2F89aWwkAdUnYFhj8Nz7IKyu0U8zwVWeBX3ZKJfGJZ1ZbpNrnQzk4EvIT4FPcmoPlhk0X1CSPPvchx3nHlcm5paHW0VtLVqsM%2F8wDRXpduyiui%2BguLqMwAps%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f5d8bf0db9afac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ocsp.buypass.com/
23.36.76.200 1.7 kB IP 23.36.76.200:0
ASN #20940 Akamai International B.V.
Hash 233fb9011882348dcde5860be5dd4685
795c71783baf387ef27bbd946f5e21dbce46456c
a25c2d8639088e151e3939e82906670e4702eb0fefc1a995ec54784afae1331c
POST / HTTP/1.1
Host: ocsp.buypass.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 78
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Access-Control-Allow-Origin: https://www.buypass.no
Access-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With,Content-Length,Accept,Origin,X-Buypass-Session-Id,X-Buypass-Locale
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
MDC-correlationId: 29ec369a-d96e-423c-a30b-882f1d0762bb
Content-Length: 1701
Date: Sun, 13 Aug 2023 02:32:19 GMT
Connection: keep-alive
ocsp.buypass.com/
23.36.76.200 1.7 kB IP 23.36.76.200:0
ASN #20940 Akamai International B.V.
Hash 8b5c8345dbb200b231b98ff4fa4a3a7f
165311ec5e1ea20a8253044a14e4f3c551e56ba9
787280d9e2ab15caf45e191eaec295b86921f98b4688f8d79ba3558c6892d7df
POST / HTTP/1.1
Host: ocsp.buypass.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 78
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Access-Control-Allow-Origin: https://www.buypass.no
Access-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With,Content-Length,Accept,Origin,X-Buypass-Session-Id,X-Buypass-Locale
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
MDC-correlationId: 5d63cd67-d996-4784-9b4b-4c4d4c02f609
Content-Length: 1701
Date: Sun, 13 Aug 2023 02:32:19 GMT
Connection: keep-alive
ocsp.buypass.com/
23.36.76.200 1.7 kB IP 23.36.76.200:0
ASN #20940 Akamai International B.V.
Hash 65055e98a3b3bc06c8d6d34a6b40097d
40f75828f4fbde2fd636f8ffc46bee67c67705ac
7fb5477a318842f048a1e160fb395ff0b56771fbe2d79c145cb3e5ed225427df
POST / HTTP/1.1
Host: ocsp.buypass.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 78
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Access-Control-Allow-Origin: https://www.buypass.no
Access-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With,Content-Length,Accept,Origin,X-Buypass-Session-Id,X-Buypass-Locale
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
MDC-correlationId: d41c8777-ea08-45a0-a5bd-4c90d74d09af
Content-Length: 1701
Date: Sun, 13 Aug 2023 02:32:19 GMT
Connection: keep-alive
go.fap18.net/ftt2/check.php?t=1691893937&check=c3e5a6ab9135447e507f7787afe306c4&rand=641286
172.67.157.205200 OK 1.7 kB URL GET HTTP/3 go.fap18.net/ftt2/check.php?t=1691893937&check=c3e5a6ab9135447e507f7787afe306c4&rand=641286
IP 172.67.157.205:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerGoogle Trust Services LLC
Subjectfap18.net
FingerprintF3:F6:4F:82:8F:F2:39:5B:FB:A0:C1:35:3E:B4:97:FE:AE:B1:C1:68
ValiditySun, 25 Jun 2023 04:11:31 GMT - Sat, 23 Sep 2023 04:11:30 GMT
Hash dea3b58e4f7d78c446daa8398712d04e
e5f4535936e814e7b7480ebcc454ce6cc4eba42f
2ace10551e11f08dcf93947e5de29cb142d919ac6182057b61c1ca10c3693406
GET /ftt2/check.php?t=1691893937&check=c3e5a6ab9135447e507f7787afe306c4&rand=641286 HTTP/1.1
Host: go.fap18.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6MCwicyI6Im5vcmVmIiwidiI6W10sImNjIjowLCJpbiI6MX0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:18 GMT
content-type: image/jpeg
x-powered-by: PHP/7.2.18
access-control-allow-origin: *
version: 2021-09-01-2316
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate
x-robots-tag: noindex
x-header-sub: Master
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C70L4dc8dRmrGkMs98KERqI2WJ3VQ1Vt2CEGoia2GMAJaahj4RwZAt2k%2BNNzMS6mjYhQsBIELGfByByzh5twTy6FMpRpghhkYodXg1s00Lb1uuKsEU%2BuOgCQtNlqSRc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f5d8bfcce3efac0-OSL
alt-svc: h3=":443"; ma=86400
pub.qwerty24.net/one/desktop/?domain=fap18.net&area=player&size=300x250
104.21.31.93200 OK 3.1 kB URL GET HTTP/3 pub.qwerty24.net/one/desktop/?domain=fap18.net&area=player&size=300x250
IP 104.21.31.93:443
Requested by https://e.xv-cdn.net/?id=68421333
Certificate IssuerLet's Encrypt
Subjectqwerty24.net
Fingerprint65:05:E1:A0:18:97:CF:EC:97:7C:5A:94:2A:0C:9B:8C:D7:A3:A6:F5
ValidityFri, 30 Jun 2023 04:31:53 GMT - Thu, 28 Sep 2023 04:31:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash b1a27d106b68af0f1c52afab3dd3726d
7b0dbd10dcf57371036b0b5bf4030fee6b30efdf
0a7a58811aba604a65bb782e7bfcb170653ec0bd199da9c2251090b5fe8b4d3a
GET /one/desktop/?domain=fap18.net&area=player&size=300x250 HTTP/1.1
Host: pub.qwerty24.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: blocked_db1cb2203282b88db2e4b17854dba8e2=2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:18 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.2.18
x-header-sub: Master
cache-control: max-age=2678400
cf-cache-status: HIT
age: 1604736
last-modified: Tue, 25 Jul 2023 12:46:42 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3mMeUZsgES%2B5C8xJtRpEYYJDWLasGEINDuxU7n%2FJ9iXUi4ZLlznsH5XGn7XbsBQMz15g%2FDz05j%2BzLYZQFAKIiLnxovuCBDJQy7IkyoWRro3SP5MAOwQjhQ4GPJdJKTw34QFV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bfd586eb51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.mp4.center/api/tokens/keycdn/68421333?r=4745c949-d676-4124-bcce-74787c62ec5f&_=1691893933179
172.67.151.22200 OK 8.2 kB URL GET HTTP/2 embed.mp4.center/api/tokens/keycdn/68421333?r=4745c949-d676-4124-bcce-74787c62ec5f&_=1691893933179
IP 172.67.151.22:443
Requested by https://e.xv-cdn.net/?id=68421333
Certificate IssuerLet's Encrypt
Subjectmp4.center
FingerprintBD:77:73:68:E6:13:B1:C5:9B:A1:4A:05:47:46:D2:FB:79:C6:FD:47
ValidityFri, 30 Jun 2023 09:07:02 GMT - Thu, 28 Sep 2023 09:07:01 GMT
File type ASCII text, with no line terminators
Hash f76e6842497db19211229694282c3766
c8d483d1d2629d5a1b7355e9fc0255246b9feae3
d9f32c08a068e49d4192ee0db77f18a46f6787abd9ef16cebd1e4e3e68619658
GET /api/tokens/keycdn/68421333?r=4745c949-d676-4124-bcce-74787c62ec5f&_=1691893933179 HTTP/1.1
Host: embed.mp4.center
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://e.xv-cdn.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:18 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.16
access-control-allow-origin: https://e.xv-cdn.net
x-header-sub: Master
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Sun, 13 Aug 2023 02:32:18 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hAQoA6wacpQh00gBwWuyBrjk0iI3SO32DOBiof2Qlzf19CR0RsfNqmHOTpzeKKFhCP4cr0zjoIHcYNNmg3rc1W7nW%2BXL0809kPTSeolRhLE07Z55vTBikGDu8h%2FYRcbL1bMW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bfb2936b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
lby2kd27c.com/lv/esnk/1973663/code.js?pid=_cb-1973663_0
62.122.171.6200 OK 123 kB URL GET HTTP/2 lby2kd27c.com/lv/esnk/1973663/code.js?pid=_cb-1973663_0
IP 62.122.171.6:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint20:95:B0:7A:98:2B:A4:72:3F:CB:B4:39:21:48:5E:69:C8:8C:2F:ED
ValidityWed, 31 May 2023 13:41:31 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type ASCII text, with very long lines (64960)
Size 123 kB (123422 bytes)
Hash 4e7947af12e3bb4002b59f173cc0cdfb
a2253402d03d8ee03f4dff2b936f534415435e9c
185dfdabff25860cd7bea74b3113f35a44cbca3332631dbbedd759ad073baf4c
GET /lv/esnk/1973663/code.js?pid=_cb-1973663_0 HTTP/1.1
Host: lby2kd27c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: application/javascript
last-modified: Wed, 09 Aug 2023 16:07:35 GMT
vary: Accept-Encoding
etag: W/"64d3b9c7-1f959"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
lby2kd27c.com/lv/esnk/1973663/code.js?pid=_cb-1973663_0
62.122.171.6200 OK 140 kB URL GET HTTP/2 lby2kd27c.com/lv/esnk/1973663/code.js?pid=_cb-1973663_0
IP 62.122.171.6:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint20:95:B0:7A:98:2B:A4:72:3F:CB:B4:39:21:48:5E:69:C8:8C:2F:ED
ValidityWed, 31 May 2023 13:41:31 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type ASCII text, with very long lines (64960)
Size 140 kB (139473 bytes)
Hash db5582c74a9d315fac4a872ceabafa88
e6dfa6a4eaaa7aac4287331f2dffc6b3626d8247
20e21c631295fc6e74772b807621520c676bf08323558e3eb22d837710fe47a9
GET /lv/esnk/1973663/code.js?pid=_cb-1973663_0 HTTP/1.1
Host: lby2kd27c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: application/javascript
last-modified: Wed, 09 Aug 2023 16:07:35 GMT
vary: Accept-Encoding
etag: W/"64d3b9c7-1f959"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
ssl.p.jwpcdn.com/player/v/8.27.1/provider.hlsjs.js
151.101.130.114200 OK 126 kB URL GET HTTP/2 ssl.p.jwpcdn.com/player/v/8.27.1/provider.hlsjs.js
IP 151.101.130.114:443
Requested by https://e.xv-cdn.net/?id=68421333
Certificate IssuerGlobalSign nv-sa
Subject*.jwplayer.com
Fingerprint35:5D:BC:19:45:5F:CD:05:73:60:FB:BD:B3:FA:E1:55:3C:3B:25:F0
ValiditySat, 26 Nov 2022 18:00:09 GMT - Thu, 28 Dec 2023 18:00:08 GMT
File type ASCII text, with very long lines (65143)
Size 126 kB (125992 bytes)
Hash 4f4459c52455c57a5490992cac29595d
55790ba8e788ff62ddb68f640246acda2cdb4397
5172dcf83f6d622751ea688d1ba4b507d54e3eeed9e933ac38f87ada5ecc87fd
GET /player/v/8.27.1/provider.hlsjs.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=31536000, immutable
last-modified: Mon, 22 May 2023 06:27:32 GMT
etag: "4f4459c52455c57a5490992cac29595d"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 13 Aug 2023 02:32:19 GMT
via: 1.1 varnish
age: 6937575
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 236937
x-timer: S1691893939.466385,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 125992
X-Firefox-Spdy: h2
fonts.gstatic.com/s/googlesans/v11/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2
216.58.207.227200 OK 22 kB URL GET HTTP/3 fonts.gstatic.com/s/googlesans/v11/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2
IP 216.58.207.227:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type Web Open Font Format (Version 2), TrueType, length 21744, version 1.0\012- data
Hash d6e7ae9212813fccebb58f6d0907c5c3
d8f15f3b6d6247c1e80bc42cbb4232e4f7b7d920
3c1721e85a4b5cd786a4d566abaf0d15ecd74fa791a5a9f7aaafba50e9e3da74
GET /s/googlesans/v11/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fap18.net
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Aug 2023 15:31:05 GMT
expires: Fri, 09 Aug 2024 15:31:05 GMT
cache-control: public, max-age=31536000
age: 212474
last-modified: Wed, 28 Nov 2018 16:23:38 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/googlesans/v11/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2
216.58.207.227200 OK 22 kB URL GET HTTP/2 fonts.gstatic.com/s/googlesans/v11/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2
IP 216.58.207.227:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type Web Open Font Format (Version 2), TrueType, length 21528, version 1.0\012- data
Hash 2967668ec83d4736140bd771afac18a6
821d35e9d9f5938608331029c974850b48138dfb
84469147c58b44c379aa25ce5013a4e545525726b2e7992f63161993b5d7a6c6
GET /s/googlesans/v11/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fap18.net
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21528
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 11 Aug 2023 10:51:38 GMT
expires: Sat, 10 Aug 2024 10:51:38 GMT
cache-control: public, max-age=31536000
age: 142841
last-modified: Wed, 28 Nov 2018 16:23:34 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.bncloudfl.com/bn/397/54b/d69/39754bd69d6d5fb8c6da7e63e4879a5063d178ff.gif
172.67.214.86200 OK 447 kB URL GET HTTP/2 cdn.bncloudfl.com/bn/397/54b/d69/39754bd69d6d5fb8c6da7e63e4879a5063d178ff.gif
IP 172.67.214.86:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA0:6F:CE:1E:5C:62:F4:89:8E:4E:0C:40:FE:AE:79:4C:83:7B:90:C8
ValidityFri, 31 Mar 2023 00:00:00 GMT - Sat, 30 Mar 2024 23:59:59 GMT
File type GIF image data, version 89a, 300 x 100\012- data
Size 447 kB (447184 bytes)
Hash e274c3a197f385d3f053dfea528a1850
39754bd69d6d5fb8c6da7e63e4879a5063d178ff
f65f6c2624a4f9384cab2c1c79b103430d4ff95bb86f2bfc3ad5fdadd516149f
GET /bn/397/54b/d69/39754bd69d6d5fb8c6da7e63e4879a5063d178ff.gif HTTP/1.1
Host: cdn.bncloudfl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: image/gif
content-length: 447184
etag: e274c3a197f385d3f053dfea528a1850
last-modified: Fri, 28 Oct 2022 13:24:28 GMT
x-timestamp: 1666963467.00057
x-trans-id: tx1f985e1fe2ce4271b936f-006372fbe3
x-openstack-request-id: tx1f985e1fe2ce4271b936f-006372fbe3
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=432000
expires: Sun, 13 Aug 2023 17:41:23 GMT
x-proxy-cache: HIT
cf-cache-status: HIT
age: 118256
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yreu7l8trwEPMY%2FjPb9i2UjCn1pqCPN7%2Fj2ioTuO8qP%2B4UBlMfXakLiBJlJvBviAKrBfo41JTWtJigAtuyzY%2BqxOUKYR08QTZrGGHlIl55GpF97Yi3Re5fuACYZs%2FOJrSCem5A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 7f5d8c032cbd1bfe-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.bncloudfl.com/bn/40b/5ec/0d8/40b5ec0d856411d48502495e13e12802397e4bc1.gif
172.67.214.86200 OK 242 kB URL GET HTTP/2 cdn.bncloudfl.com/bn/40b/5ec/0d8/40b5ec0d856411d48502495e13e12802397e4bc1.gif
IP 172.67.214.86:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA0:6F:CE:1E:5C:62:F4:89:8E:4E:0C:40:FE:AE:79:4C:83:7B:90:C8
ValidityFri, 31 Mar 2023 00:00:00 GMT - Sat, 30 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Size 242 kB (241990 bytes)
Hash 05c37d9a4f701da4b569aefcecbe72ed
f1da35e295f7d370fecf16a475a53d43e45e9f3f
f6003abb56e2e3df544fcda158c975d42f1a2af9badd453f7b2798e38afe58d1
GET /bn/40b/5ec/0d8/40b5ec0d856411d48502495e13e12802397e4bc1.gif HTTP/1.1
Host: cdn.bncloudfl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: image/webp
content-length: 241990
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=432000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=gif, origSize=277140
content-disposition: inline; filename="40b5ec0d856411d48502495e13e12802397e4bc1.webp"
etag: 938afc4c6266c63ddb5b41c3fac36d77
expires: Sun, 13 Aug 2023 19:03:17 GMT
last-modified: Mon, 13 Mar 2023 11:13:06 GMT
vary: Accept
x-openstack-request-id: tx929944ebee194d63b9086-006436a219
x-proxy-cache: HIT
x-timestamp: 1678705985.10400
x-trans-id: tx929944ebee194d63b9086-006436a219
cf-cache-status: HIT
age: 113342
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cvfzWBtLhVyArDq6oLFYAAiJLRD5BVUINPqxHyHjbsVh3sV2J4KP95pNchdQcjHa3SLvELlS3OeWOEzjaiM5VD3lxKDyImiZzftjuvHUaLYdfXHwd%2BXciPwWJQeLjfZ4XupGnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
access-control-allow-origin: *
server: cloudflare
cf-ray: 7f5d8c033cc11bfe-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.pncloudfl.com/pn/79e/e98/4c1/79ee984c136eeaafbbc55791349bdf193fd80b97.jpg
104.22.58.221200 OK 7.0 kB URL GET HTTP/2 cdn.pncloudfl.com/pn/79e/e98/4c1/79ee984c136eeaafbbc55791349bdf193fd80b97.jpg
IP 104.22.58.221:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC6:42:10:11:EB:FA:38:01:62:34:DA:19:86:B6:89:D4:EF:B3:37:A8
ValidityFri, 31 Mar 2023 00:00:00 GMT - Sat, 30 Mar 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 192x192, components 3\012- data
Hash ed88391fed4684ab141f8cb59697ee11
79ee984c136eeaafbbc55791349bdf193fd80b97
c3a68b4324bd9c042c48b68e97d764e4d59dacfba493530e03c5ba85f2fd94da
GET /pn/79e/e98/4c1/79ee984c136eeaafbbc55791349bdf193fd80b97.jpg HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: image/jpeg
content-length: 6953
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=172800
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
etag: ed88391fed4684ab141f8cb59697ee11
expires: Mon, 14 Aug 2023 09:20:28 GMT
last-modified: Fri, 28 Apr 2023 13:33:16 GMT
x-openstack-request-id: txe308167ef69c4c7691c06-00645b6060
x-proxy-cache: HIT
x-timestamp: 1682688795.85918
x-trans-id: txe308167ef69c4c7691c06-00645b6060
cf-cache-status: HIT
age: 61911
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 7f5d8c038c3e0b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
lby2kd27c.com/get/1973661?zoneid=1973661&pid=_cb-1973661_0&jp=_cl8n2419e6ufthgoubjch1&nojs=0&ix=0&abvar=0&febuild=1.0.131&t=0&x=801&y=801&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=2925629728040682&sp=1
62.122.171.6200 OK 21 kB URL GET HTTP/2 lby2kd27c.com/get/1973661?zoneid=1973661&pid=_cb-1973661_0&jp=_cl8n2419e6ufthgoubjch1&nojs=0&ix=0&abvar=0&febuild=1.0.131&t=0&x=801&y=801&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=2925629728040682&sp=1
IP 62.122.171.6:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x250&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint20:95:B0:7A:98:2B:A4:72:3F:CB:B4:39:21:48:5E:69:C8:8C:2F:ED
ValidityWed, 31 May 2023 13:41:31 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type gzip compressed data, from Unix\012- data
Hash 098a7aa2d28bf97ace69da4fc8dde559
9ff02d9affe3b52df3dc2b799513e1bc7e66be62
8086b3756b85eeb6362fdb66feddbff58bdff70352ff48b11fc28418d7fe6d1f
GET /get/1973661?zoneid=1973661&pid=_cb-1973661_0&jp=_cl8n2419e6ufthgoubjch1&nojs=0&ix=0&abvar=0&febuild=1.0.131&t=0&x=801&y=801&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=2925629728040682&sp=1 HTTP/1.1
Host: lby2kd27c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Cookie: CHCK=1; UID=2308122132a566e69717df4a90a1b6582366
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Sun, 15 Sep 2024 02:32:19 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
cdn77-vid.xvideos-cdn.com/VB4G26w0XP9mTYiQZv4uZA==,1691904739/videos/hls/be/b3/9b/beb39b2afd4854a4dafde27f33b7ac19-2/hls.m3u8
195.181.166.11200 OK 510 B URL GET HTTP/2 cdn77-vid.xvideos-cdn.com/VB4G26w0XP9mTYiQZv4uZA==,1691904739/videos/hls/be/b3/9b/beb39b2afd4854a4dafde27f33b7ac19-2/hls.m3u8
IP 195.181.166.11:443
ASN #60068 Datacamp Limited
Requested by https://e.xv-cdn.net/?id=68421333
Certificate IssuerSectigo Limited
Subjectxvideos.com
Fingerprint41:22:B3:FE:2E:97:DB:C4:53:E3:77:FF:76:7D:61:20:CC:14:73:51
ValidityThu, 29 Sep 2022 00:00:00 GMT - Mon, 30 Oct 2023 23:59:59 GMT
Hash edbe059a22d80d23277e1a430810f6e1
3c9d6ecbca8262130aa57f9d402552fda6fdc5e7
caaf23046973ceb1554d2e895caac03236b2ff52607bb1c0897e38f1b09b22ea
GET /VB4G26w0XP9mTYiQZv4uZA==,1691904739/videos/hls/be/b3/9b/beb39b2afd4854a4dafde27f33b7ac19-2/hls.m3u8 HTTP/1.1
Host: cdn77-vid.xvideos-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://e.xv-cdn.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: application/x-mpegurl
content-length: 510
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
last-modified: Sun, 20 Nov 2022 23:50:25 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-77-nzt: A8O1pgoY0iah1GY4FZ6pMO9H1kMAj/Q63ej/daE
x-77-nzt-ray: d93319069221a19db340d8642ae5c62f
x-77-cache: HIT
x-accel-expires: @1697816172
x-accel-date: 1687448172
x-age-lb: 4445767
server: CDN77-Turbo
x-cache-lb: HIT, MISS
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.pncloudfl.com/pn/79e/e98/4c1/79ee984c136eeaafbbc55791349bdf193fd80b97.jpg
104.22.58.221200 OK 7.0 kB URL GET HTTP/2 cdn.pncloudfl.com/pn/79e/e98/4c1/79ee984c136eeaafbbc55791349bdf193fd80b97.jpg
IP 104.22.58.221:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC6:42:10:11:EB:FA:38:01:62:34:DA:19:86:B6:89:D4:EF:B3:37:A8
ValidityFri, 31 Mar 2023 00:00:00 GMT - Sat, 30 Mar 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 192x192, components 3\012- data
Hash ed88391fed4684ab141f8cb59697ee11
79ee984c136eeaafbbc55791349bdf193fd80b97
c3a68b4324bd9c042c48b68e97d764e4d59dacfba493530e03c5ba85f2fd94da
GET /pn/79e/e98/4c1/79ee984c136eeaafbbc55791349bdf193fd80b97.jpg HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: image/jpeg
content-length: 6953
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=172800
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
etag: ed88391fed4684ab141f8cb59697ee11
expires: Mon, 14 Aug 2023 09:20:28 GMT
last-modified: Fri, 28 Apr 2023 13:33:16 GMT
x-openstack-request-id: txe308167ef69c4c7691c06-00645b6060
x-proxy-cache: HIT
x-timestamp: 1682688795.85918
x-trans-id: txe308167ef69c4c7691c06-00645b6060
cf-cache-status: HIT
age: 61911
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 7f5d8c046f05b511-OSL
alt-svc: h3=":443"; ma=86400
aa.qwerty24.net/view/mobile/
104.21.31.93200 OK 22 kB URL GET HTTP/3 aa.qwerty24.net/view/mobile/
IP 104.21.31.93:443
Requested by https://pub.qwerty24.net/view
Certificate IssuerLet's Encrypt
Subjectqwerty24.net
Fingerprint65:05:E1:A0:18:97:CF:EC:97:7C:5A:94:2A:0C:9B:8C:D7:A3:A6:F5
ValidityFri, 30 Jun 2023 04:31:53 GMT - Thu, 28 Sep 2023 04:31:52 GMT
Hash 677aece83ccbd4df55bfb8115a12c805
f8cca9cb4c8d8503c9a23d7dfe38a3a0dd61e4dd
22a702ea0ce6352f96f68c271d002a46477b2cdf94dc687944865cb0153cf96e
GET /view/mobile/ HTTP/1.1
Host: aa.qwerty24.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub.qwerty24.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jDRfx6Yq0VXreWskketxCIR6E0aapRAbjTyexkrcoah7Ka12xJQynmfF%2FllJjXZ20%2FzD572ExPAKulQgm1UwUXkEq4hH02CR%2FJaoZvpR2y5W%2FjPSAmpRX3KHrj0UhViu8EE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7f5d8bf67cffb51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.bncloudfl.com/bn/eac/8e8/369/eac8e8369f822993a74bcd42cff79241c50fd011.gif
172.67.214.86200 OK 60 kB URL GET HTTP/3 cdn.bncloudfl.com/bn/eac/8e8/369/eac8e8369f822993a74bcd42cff79241c50fd011.gif
IP 172.67.214.86:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=player&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA0:6F:CE:1E:5C:62:F4:89:8E:4E:0C:40:FE:AE:79:4C:83:7B:90:C8
ValidityFri, 31 Mar 2023 00:00:00 GMT - Sat, 30 Mar 2024 23:59:59 GMT
File type GIF image data, version 89a, 300 x 100\012- data
Hash 8288ed0e1e132023537dfdcdda356cd2
eac8e8369f822993a74bcd42cff79241c50fd011
774d85e2bed782f9da27179f9fdf16c9ba2b7c7a66ce880017b5711e96bc5d31
GET /bn/eac/8e8/369/eac8e8369f822993a74bcd42cff79241c50fd011.gif HTTP/1.1
Host: cdn.bncloudfl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: image/gif
content-length: 59549
etag: 8288ed0e1e132023537dfdcdda356cd2
last-modified: Thu, 20 Apr 2023 09:38:39 GMT
x-timestamp: 1681983518.92304
x-trans-id: tx0864e65dcb0f45299a923-0064410aa0
x-openstack-request-id: tx0864e65dcb0f45299a923-0064410aa0
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Sun, 13 Aug 2023 18:28:49 GMT
cache-control: max-age=432000
x-proxy-cache: HIT
cf-cache-status: HIT
age: 115410
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NmHAPM3bV2LYad%2FP%2BbpjpiEEelFOMuW6Y6zbuJ24UmCUQwA86awQJqMET1pyxReaznpPrF0YWzRlpzjD7Be9GfJG7onAMlryDQ0XZrti8XmPclVGM0A60NVbIifXu2ZSrjznjA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 7f5d8c046e141c02-OSL
alt-svc: h3=":443"; ma=86400
lby2kd27c.com/chicken.gif?z=1973663&pid=_cb-1973663_0&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=CnN7nCW4ku91zPuykkmNqOitWLI7pTqt6JOjIb0adWRwR5bsRDes0t22vBVszp-_owqI26N3Oe3JLwW7Nx_lmvccXeqjKlCXyXSgI6UQA3HdfUF2VCl0tvtXJeGn0p4Xdce9VOiCLKYJmO2HVqUpGakyqkQsw8XXcs8pTE9Idf8zbaXFUB7zcYaI8QS45W0cVMnllj7jQYnc_uwCTYsXzRhsX73BZSLkxr863hEi1p6S3_s8uikkb8jDb-Vr_B86p3gnTAObvH1iIRPbXhN_w36Wu8btL3TVVeTlc5NpqSn-mE89Au-lab4RuMHVbNGw-ChQN3YSSHSp-6baBFcV6e9ntrG7PSxHozMZV-sRo6JJT9pN2ViLEb4-9EQzZrc-BOgLHO4JQQMGOeQfr_sPOUhpTSUI4fYSMtD3Vc0bWwQWB2njtYBQThYjL8bIIA6OqeFe6_hxN1hL7-349sV7rgpwK9r7211aCwtql7p78G8TS-5a-fGaPRGc7LZ5EHouIN5TJi6_sSaNTknNGd5yeg4m-X_Y0mmrnZKTepBbS2a6Zq9iEvdImzEuZHwHEZZpWztJDwvZ0UxTxXYMaF0AHWxSn_9u2SMw0HunPOKpBNA7HsMTrgAM1ch3OfqONBEiFcBD5d5o6i_BFapRl_UlxiSGjQAw4x8HuYrlBaCZHC2iBL1mlyGPpDGnS2rgvVn2Txb-TWT3SJdeYy80RxINNORWcfmUA9KJLRFPBAM4kGe54zQGhiXaILRR-CIEkT5cPE6u99LhfeKB0JOVFeFM16D3wiCb8xCJRcNPuimZCMs8RWxuaamvPiumiEWOtRKvvtouh8eT9VvTj8D8lQywCS50Z3TBbEb-MaZUokJGJiy-ma3jS3WQasAdBcPE8csuablRM9ZPBJUqbI9gJmEW11Enxu2HEsV90n-8NPTe9h5zDtrNk9eWGMV2gsiG3i20d5uLIG68r-HMQhixzSsZKDV7xnMQN935_cDderk=&im=1&abvar=0&febuild=1.0.131&os=0&pload=181
62.122.171.6200 OK 43 B URL GET HTTP/2 lby2kd27c.com/chicken.gif?z=1973663&pid=_cb-1973663_0&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=CnN7nCW4ku91zPuykkmNqOitWLI7pTqt6JOjIb0adWRwR5bsRDes0t22vBVszp-_owqI26N3Oe3JLwW7Nx_lmvccXeqjKlCXyXSgI6UQA3HdfUF2VCl0tvtXJeGn0p4Xdce9VOiCLKYJmO2HVqUpGakyqkQsw8XXcs8pTE9Idf8zbaXFUB7zcYaI8QS45W0cVMnllj7jQYnc_uwCTYsXzRhsX73BZSLkxr863hEi1p6S3_s8uikkb8jDb-Vr_B86p3gnTAObvH1iIRPbXhN_w36Wu8btL3TVVeTlc5NpqSn-mE89Au-lab4RuMHVbNGw-ChQN3YSSHSp-6baBFcV6e9ntrG7PSxHozMZV-sRo6JJT9pN2ViLEb4-9EQzZrc-BOgLHO4JQQMGOeQfr_sPOUhpTSUI4fYSMtD3Vc0bWwQWB2njtYBQThYjL8bIIA6OqeFe6_hxN1hL7-349sV7rgpwK9r7211aCwtql7p78G8TS-5a-fGaPRGc7LZ5EHouIN5TJi6_sSaNTknNGd5yeg4m-X_Y0mmrnZKTepBbS2a6Zq9iEvdImzEuZHwHEZZpWztJDwvZ0UxTxXYMaF0AHWxSn_9u2SMw0HunPOKpBNA7HsMTrgAM1ch3OfqONBEiFcBD5d5o6i_BFapRl_UlxiSGjQAw4x8HuYrlBaCZHC2iBL1mlyGPpDGnS2rgvVn2Txb-TWT3SJdeYy80RxINNORWcfmUA9KJLRFPBAM4kGe54zQGhiXaILRR-CIEkT5cPE6u99LhfeKB0JOVFeFM16D3wiCb8xCJRcNPuimZCMs8RWxuaamvPiumiEWOtRKvvtouh8eT9VvTj8D8lQywCS50Z3TBbEb-MaZUokJGJiy-ma3jS3WQasAdBcPE8csuablRM9ZPBJUqbI9gJmEW11Enxu2HEsV90n-8NPTe9h5zDtrNk9eWGMV2gsiG3i20d5uLIG68r-HMQhixzSsZKDV7xnMQN935_cDderk=&im=1&abvar=0&febuild=1.0.131&os=0&pload=181
IP 62.122.171.6:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint20:95:B0:7A:98:2B:A4:72:3F:CB:B4:39:21:48:5E:69:C8:8C:2F:ED
ValidityWed, 31 May 2023 13:41:31 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1973663&pid=_cb-1973663_0&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=CnN7nCW4ku91zPuykkmNqOitWLI7pTqt6JOjIb0adWRwR5bsRDes0t22vBVszp-_owqI26N3Oe3JLwW7Nx_lmvccXeqjKlCXyXSgI6UQA3HdfUF2VCl0tvtXJeGn0p4Xdce9VOiCLKYJmO2HVqUpGakyqkQsw8XXcs8pTE9Idf8zbaXFUB7zcYaI8QS45W0cVMnllj7jQYnc_uwCTYsXzRhsX73BZSLkxr863hEi1p6S3_s8uikkb8jDb-Vr_B86p3gnTAObvH1iIRPbXhN_w36Wu8btL3TVVeTlc5NpqSn-mE89Au-lab4RuMHVbNGw-ChQN3YSSHSp-6baBFcV6e9ntrG7PSxHozMZV-sRo6JJT9pN2ViLEb4-9EQzZrc-BOgLHO4JQQMGOeQfr_sPOUhpTSUI4fYSMtD3Vc0bWwQWB2njtYBQThYjL8bIIA6OqeFe6_hxN1hL7-349sV7rgpwK9r7211aCwtql7p78G8TS-5a-fGaPRGc7LZ5EHouIN5TJi6_sSaNTknNGd5yeg4m-X_Y0mmrnZKTepBbS2a6Zq9iEvdImzEuZHwHEZZpWztJDwvZ0UxTxXYMaF0AHWxSn_9u2SMw0HunPOKpBNA7HsMTrgAM1ch3OfqONBEiFcBD5d5o6i_BFapRl_UlxiSGjQAw4x8HuYrlBaCZHC2iBL1mlyGPpDGnS2rgvVn2Txb-TWT3SJdeYy80RxINNORWcfmUA9KJLRFPBAM4kGe54zQGhiXaILRR-CIEkT5cPE6u99LhfeKB0JOVFeFM16D3wiCb8xCJRcNPuimZCMs8RWxuaamvPiumiEWOtRKvvtouh8eT9VvTj8D8lQywCS50Z3TBbEb-MaZUokJGJiy-ma3jS3WQasAdBcPE8csuablRM9ZPBJUqbI9gJmEW11Enxu2HEsV90n-8NPTe9h5zDtrNk9eWGMV2gsiG3i20d5uLIG68r-HMQhixzSsZKDV7xnMQN935_cDderk=&im=1&abvar=0&febuild=1.0.131&os=0&pload=181 HTTP/1.1
Host: lby2kd27c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2308122132a566e69717df4a90a1b6582366
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
lby2kd27c.com/chicken.gif?z=1973663&pid=_cb-1973663_0&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=CxbK3Df3SXywMBJwcELgCV4ch_CJrO8l2_6pFdVpod5zLZdmTnSNOaT5-ZMr9ND8THfDbcViXKSTwSO2j9HbxpdDeLhj2I2iiW9eO7p7w5OblE7CkRzL70WimhD8XzF8IVdpLvG3vhEbRIlma0VHQgphbQOXaSGSW9MWlqk4Nvr1lnjGVVRLr91ZW47-OGnTvj8GwFpiQ_Jcw7GB-ktkcYmMEpkbZpAXtK9DX1FqrwI2sncGt8QoDIp8x1mrLItR6PMK04sp6appcpprXG5oJx8ZqXMOfAonjM1Jj6lRCgZQRBpiZ7wdiLn_YLjR9meaFO1vwjaQz5shPgaMiHqSltFIvz1xYuuyA13JOs7DdWEl885gOgJpIHN6IXQzJssPhpowDwGjVWwVZSqNUGPnJVSEQt4PTfxCXAt1i8wHF-9ZGbyhIebDA9py7N9nxB9TU_l2AlIXzS_dFL6jXAdYlnPusBYIJpusN9iaJbO3WDPH51qL7FsT6DnKaQusl6l1hZ--7s1yrgNZD24VtUpnDKCMklzAytE9SKz3-UlOT_BoCv-5fX3DtRdd4oOjFyOTmk2qKYb8O6dojTNLxljJGZagP8wPiG3g20Nw8-DnsUtmdPAlv_kUMnkC8yRQYbYKKyFNY3kIfNZe8ooTcTJYvucn5ONdaY6rPdLbr532Vw4B7bnut8IbfeYovIG8YVdE7bQczM-r5GsOaKoCd4Zl7adMl1TUScx2p5lxu1XxEG6KyxgdsDt2X95krKw5Vfmftz2lB9AfIl62Pgdcu6Tr6UDDhfHvt3HMLQo2zDS1i-IrDVxokHtgVKHJ_mJwdDEY5nQ09fq-rY0ktZvd8dC3MNKmzgVezdW7iDLHiLXakSPSItAE4QGkFhIPr2JBc4cGVVPWUROX-5l6hWFObr1OpqIBffQ4956u7ktdxHyB7Zw61NyULmD2Dxe7jhqa5r6H0iqUQjaoIynrYhEU3KoPdR5F3C6gn4uyZAr3LGc=&im=1&abvar=0&febuild=1.0.131&os=0&pload=142
62.122.171.6200 OK 43 B URL GET HTTP/2 lby2kd27c.com/chicken.gif?z=1973663&pid=_cb-1973663_0&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=CxbK3Df3SXywMBJwcELgCV4ch_CJrO8l2_6pFdVpod5zLZdmTnSNOaT5-ZMr9ND8THfDbcViXKSTwSO2j9HbxpdDeLhj2I2iiW9eO7p7w5OblE7CkRzL70WimhD8XzF8IVdpLvG3vhEbRIlma0VHQgphbQOXaSGSW9MWlqk4Nvr1lnjGVVRLr91ZW47-OGnTvj8GwFpiQ_Jcw7GB-ktkcYmMEpkbZpAXtK9DX1FqrwI2sncGt8QoDIp8x1mrLItR6PMK04sp6appcpprXG5oJx8ZqXMOfAonjM1Jj6lRCgZQRBpiZ7wdiLn_YLjR9meaFO1vwjaQz5shPgaMiHqSltFIvz1xYuuyA13JOs7DdWEl885gOgJpIHN6IXQzJssPhpowDwGjVWwVZSqNUGPnJVSEQt4PTfxCXAt1i8wHF-9ZGbyhIebDA9py7N9nxB9TU_l2AlIXzS_dFL6jXAdYlnPusBYIJpusN9iaJbO3WDPH51qL7FsT6DnKaQusl6l1hZ--7s1yrgNZD24VtUpnDKCMklzAytE9SKz3-UlOT_BoCv-5fX3DtRdd4oOjFyOTmk2qKYb8O6dojTNLxljJGZagP8wPiG3g20Nw8-DnsUtmdPAlv_kUMnkC8yRQYbYKKyFNY3kIfNZe8ooTcTJYvucn5ONdaY6rPdLbr532Vw4B7bnut8IbfeYovIG8YVdE7bQczM-r5GsOaKoCd4Zl7adMl1TUScx2p5lxu1XxEG6KyxgdsDt2X95krKw5Vfmftz2lB9AfIl62Pgdcu6Tr6UDDhfHvt3HMLQo2zDS1i-IrDVxokHtgVKHJ_mJwdDEY5nQ09fq-rY0ktZvd8dC3MNKmzgVezdW7iDLHiLXakSPSItAE4QGkFhIPr2JBc4cGVVPWUROX-5l6hWFObr1OpqIBffQ4956u7ktdxHyB7Zw61NyULmD2Dxe7jhqa5r6H0iqUQjaoIynrYhEU3KoPdR5F3C6gn4uyZAr3LGc=&im=1&abvar=0&febuild=1.0.131&os=0&pload=142
IP 62.122.171.6:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint20:95:B0:7A:98:2B:A4:72:3F:CB:B4:39:21:48:5E:69:C8:8C:2F:ED
ValidityWed, 31 May 2023 13:41:31 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1973663&pid=_cb-1973663_0&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=CxbK3Df3SXywMBJwcELgCV4ch_CJrO8l2_6pFdVpod5zLZdmTnSNOaT5-ZMr9ND8THfDbcViXKSTwSO2j9HbxpdDeLhj2I2iiW9eO7p7w5OblE7CkRzL70WimhD8XzF8IVdpLvG3vhEbRIlma0VHQgphbQOXaSGSW9MWlqk4Nvr1lnjGVVRLr91ZW47-OGnTvj8GwFpiQ_Jcw7GB-ktkcYmMEpkbZpAXtK9DX1FqrwI2sncGt8QoDIp8x1mrLItR6PMK04sp6appcpprXG5oJx8ZqXMOfAonjM1Jj6lRCgZQRBpiZ7wdiLn_YLjR9meaFO1vwjaQz5shPgaMiHqSltFIvz1xYuuyA13JOs7DdWEl885gOgJpIHN6IXQzJssPhpowDwGjVWwVZSqNUGPnJVSEQt4PTfxCXAt1i8wHF-9ZGbyhIebDA9py7N9nxB9TU_l2AlIXzS_dFL6jXAdYlnPusBYIJpusN9iaJbO3WDPH51qL7FsT6DnKaQusl6l1hZ--7s1yrgNZD24VtUpnDKCMklzAytE9SKz3-UlOT_BoCv-5fX3DtRdd4oOjFyOTmk2qKYb8O6dojTNLxljJGZagP8wPiG3g20Nw8-DnsUtmdPAlv_kUMnkC8yRQYbYKKyFNY3kIfNZe8ooTcTJYvucn5ONdaY6rPdLbr532Vw4B7bnut8IbfeYovIG8YVdE7bQczM-r5GsOaKoCd4Zl7adMl1TUScx2p5lxu1XxEG6KyxgdsDt2X95krKw5Vfmftz2lB9AfIl62Pgdcu6Tr6UDDhfHvt3HMLQo2zDS1i-IrDVxokHtgVKHJ_mJwdDEY5nQ09fq-rY0ktZvd8dC3MNKmzgVezdW7iDLHiLXakSPSItAE4QGkFhIPr2JBc4cGVVPWUROX-5l6hWFObr1OpqIBffQ4956u7ktdxHyB7Zw61NyULmD2Dxe7jhqa5r6H0iqUQjaoIynrYhEU3KoPdR5F3C6gn4uyZAr3LGc=&im=1&abvar=0&febuild=1.0.131&os=0&pload=142 HTTP/1.1
Host: lby2kd27c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2308122132a566e69717df4a90a1b6582366
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
lby2kd27c.com/chicken.gif?z=1973663&pid=_cb-1973663_0&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=3aM9Tu1FQ9qPANGFlwnt_5Q1mHl6UEJD_88fZ1F6RSvczUarU9HZN3KB0CUpxSfKnTQr43MWPW0mOpkAQCOkbtP1vaXx0era6Ws8BjEen7luM7opx1S1fJA5_RcZCwSoTlTsxm4z6fxsgh6R34IYL_QwqdRwrUPyz7LmkobjmHxMuOEzEX_SP1oA3Iq--CIcIj26hpYSYqna4gQmKckU2OGqIfrHGJiJjzY4sxHQnrRj-V8QQgZY2awFb_glOR0ux5o5yq-4wdMVm_rmsM6syGUrCQtaxp3F-o5tJw9KLGROkuOTGNQe1uZ1cIbAA2pP4i6br2axEQveFiEOB7TGJTHVllVcl-v-uzEhXnY-r-Oot3uWREkq3cDdlPwHJj7jgJcHLRLp2788CNvvUKmw3CjOuiqdRsV2ZSttgtyKZli5G7h4PVuIFYPIn17qv9ZNmzRIy7OGHRcSyIjSfUx_Z4685PqNwDF-809UBqN8iRLLSllebpiZpRaZ75UxqqqlRkFI0bkobfD2wgsdmoPV6UVCVt7HoTewqltmm2ZY8oASHg4GKgJs2bgnY-GwgPxDvmmKC1skAWSxXKmiY1bARDGFhuC9Mwm7CstNH1HhRWdwgYi6ssagnuZXXU8_9Rfi8eziEPn0lZVrMVH0uV-1GaU9mvu63DOGjLiu3_PWHbQc47O3wKsQXSp2IajvLhpQFF9NnI7lPIuBZLHoi11KcI97QTFgQl9ThpH_B6C729x-WT_6bU6OcaMi6yZtNpnJvY4eymfjv1tL_mSd-SHjwAOoZHdrwLFdRl2F7Jy9z2znl4P2V3-ZPo9cbU_d3vXZG9680ONG7a_RDDbwGU0h7ALFW7kgKOijjRXUCpVgl7jHtXBdAehpxeQP7PpVe82SUQXNE1J0wsmu8kQ53Wq27aYW50dNz0gOS8FZ4ekw8uZSoMbuf6snKqg0UqLOFjO_Wbn5Ncc4OBaW-fhSdoYeoKhbSVYWeeGuU3up1UA=&im=1&abvar=0&febuild=1.0.131&os=0&pload=179
62.122.171.6200 OK 43 B URL GET HTTP/2 lby2kd27c.com/chicken.gif?z=1973663&pid=_cb-1973663_0&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=3aM9Tu1FQ9qPANGFlwnt_5Q1mHl6UEJD_88fZ1F6RSvczUarU9HZN3KB0CUpxSfKnTQr43MWPW0mOpkAQCOkbtP1vaXx0era6Ws8BjEen7luM7opx1S1fJA5_RcZCwSoTlTsxm4z6fxsgh6R34IYL_QwqdRwrUPyz7LmkobjmHxMuOEzEX_SP1oA3Iq--CIcIj26hpYSYqna4gQmKckU2OGqIfrHGJiJjzY4sxHQnrRj-V8QQgZY2awFb_glOR0ux5o5yq-4wdMVm_rmsM6syGUrCQtaxp3F-o5tJw9KLGROkuOTGNQe1uZ1cIbAA2pP4i6br2axEQveFiEOB7TGJTHVllVcl-v-uzEhXnY-r-Oot3uWREkq3cDdlPwHJj7jgJcHLRLp2788CNvvUKmw3CjOuiqdRsV2ZSttgtyKZli5G7h4PVuIFYPIn17qv9ZNmzRIy7OGHRcSyIjSfUx_Z4685PqNwDF-809UBqN8iRLLSllebpiZpRaZ75UxqqqlRkFI0bkobfD2wgsdmoPV6UVCVt7HoTewqltmm2ZY8oASHg4GKgJs2bgnY-GwgPxDvmmKC1skAWSxXKmiY1bARDGFhuC9Mwm7CstNH1HhRWdwgYi6ssagnuZXXU8_9Rfi8eziEPn0lZVrMVH0uV-1GaU9mvu63DOGjLiu3_PWHbQc47O3wKsQXSp2IajvLhpQFF9NnI7lPIuBZLHoi11KcI97QTFgQl9ThpH_B6C729x-WT_6bU6OcaMi6yZtNpnJvY4eymfjv1tL_mSd-SHjwAOoZHdrwLFdRl2F7Jy9z2znl4P2V3-ZPo9cbU_d3vXZG9680ONG7a_RDDbwGU0h7ALFW7kgKOijjRXUCpVgl7jHtXBdAehpxeQP7PpVe82SUQXNE1J0wsmu8kQ53Wq27aYW50dNz0gOS8FZ4ekw8uZSoMbuf6snKqg0UqLOFjO_Wbn5Ncc4OBaW-fhSdoYeoKhbSVYWeeGuU3up1UA=&im=1&abvar=0&febuild=1.0.131&os=0&pload=179
IP 62.122.171.6:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint20:95:B0:7A:98:2B:A4:72:3F:CB:B4:39:21:48:5E:69:C8:8C:2F:ED
ValidityWed, 31 May 2023 13:41:31 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1973663&pid=_cb-1973663_0&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=3aM9Tu1FQ9qPANGFlwnt_5Q1mHl6UEJD_88fZ1F6RSvczUarU9HZN3KB0CUpxSfKnTQr43MWPW0mOpkAQCOkbtP1vaXx0era6Ws8BjEen7luM7opx1S1fJA5_RcZCwSoTlTsxm4z6fxsgh6R34IYL_QwqdRwrUPyz7LmkobjmHxMuOEzEX_SP1oA3Iq--CIcIj26hpYSYqna4gQmKckU2OGqIfrHGJiJjzY4sxHQnrRj-V8QQgZY2awFb_glOR0ux5o5yq-4wdMVm_rmsM6syGUrCQtaxp3F-o5tJw9KLGROkuOTGNQe1uZ1cIbAA2pP4i6br2axEQveFiEOB7TGJTHVllVcl-v-uzEhXnY-r-Oot3uWREkq3cDdlPwHJj7jgJcHLRLp2788CNvvUKmw3CjOuiqdRsV2ZSttgtyKZli5G7h4PVuIFYPIn17qv9ZNmzRIy7OGHRcSyIjSfUx_Z4685PqNwDF-809UBqN8iRLLSllebpiZpRaZ75UxqqqlRkFI0bkobfD2wgsdmoPV6UVCVt7HoTewqltmm2ZY8oASHg4GKgJs2bgnY-GwgPxDvmmKC1skAWSxXKmiY1bARDGFhuC9Mwm7CstNH1HhRWdwgYi6ssagnuZXXU8_9Rfi8eziEPn0lZVrMVH0uV-1GaU9mvu63DOGjLiu3_PWHbQc47O3wKsQXSp2IajvLhpQFF9NnI7lPIuBZLHoi11KcI97QTFgQl9ThpH_B6C729x-WT_6bU6OcaMi6yZtNpnJvY4eymfjv1tL_mSd-SHjwAOoZHdrwLFdRl2F7Jy9z2znl4P2V3-ZPo9cbU_d3vXZG9680ONG7a_RDDbwGU0h7ALFW7kgKOijjRXUCpVgl7jHtXBdAehpxeQP7PpVe82SUQXNE1J0wsmu8kQ53Wq27aYW50dNz0gOS8FZ4ekw8uZSoMbuf6snKqg0UqLOFjO_Wbn5Ncc4OBaW-fhSdoYeoKhbSVYWeeGuU3up1UA=&im=1&abvar=0&febuild=1.0.131&os=0&pload=179 HTTP/1.1
Host: lby2kd27c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2308122132a566e69717df4a90a1b6582366
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
lby2kd27c.com/chicken.gif?z=1973661&pid=_cb-1973661_0&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=Tyb2pP-uwvu8XD5WPI2U_w0kG_gWoK2g0GFAARI0G6ZE25lsSoYdmzaGHjV9Frn0YjeliGdQ5ZVM-GPlCRX56vcRsl-ks-jgw3pSkvmOrKzXFrX62H_j2F9Av00PEQauBBt3BxzIExoF3kbzZCSp-BgwcOJQWZQUKLoMMEJmedtG6NkZMJVIvaRsR4SjGu1X3EhxbpNL6pWVHrT_ekyS4B0x4vw5U6DtQ-POQgSKLyuBaKrMDuvnGBCYmqIzatQyzK4IIGTGdUuRJ74tKIpznimKXGt1s5Lag08lWtcpw8yFQiRmU-44cupv4FUGObxolLB0G_gy0pKFas3NQx4pqWWEFwsfcQJmNcSyH2JAiRvNVcV288qsPVnQqPzldIJBfrqATM6WO5tDV2n0LjTk1MWZGjpmgnLXCySq3HFcTzAhvwsNByeOFxvmkCBAsmVo9Rf4zlstjbNDXBCDi5laACtVG_gMN632OA4m_03qTT5YUPoVfF2TNdH4tgjo36OU-di1my0sDP3dSwF8ku21Md3DxBiIp1bcGjzkw-YhQ6KQEGLh_lAnSgbdOdetr36Op53VlXIg2K1h9qOznUcvzY-KKgk_FsCfgXvM4vPG9CVhzbTd0f02zFqZiOoobu94CTN9aaesAs6CV6tMOprN1bwiOrC_8wki7SLO2qC8eGwLTnNIsnfG2gA2VOIcM84zSuvsH5lcvOiSlXPWMNANEZTW3ViALO6vNG1Nlc0R7T7qav35Bofigz1HDNk1RECKaw0RCReIiPHkQjXCGAsi20IlCqsjiDoPDE3dorlw1BX6Dg-bk3VPgJRqo_2UPF9HoT6yg4FwLinkNArv3RW7ytmo6FKhF5KVOiDGtWQH84afjqN9bBbiNw4HQBbEVsMCbKK73ur3Hk0mDmNSOdlPaJKxJQj6LHXWIBBBBexLZw_y7TZVS9GJHXHA2nDR2MCEJcI0GzkDFV5bVTB5R67n9NuoDgd4XYx7O3TEVmw=&im=1&abvar=0&febuild=1.0.131&os=0&pload=137
62.122.171.6200 OK 43 B URL GET HTTP/2 lby2kd27c.com/chicken.gif?z=1973661&pid=_cb-1973661_0&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=Tyb2pP-uwvu8XD5WPI2U_w0kG_gWoK2g0GFAARI0G6ZE25lsSoYdmzaGHjV9Frn0YjeliGdQ5ZVM-GPlCRX56vcRsl-ks-jgw3pSkvmOrKzXFrX62H_j2F9Av00PEQauBBt3BxzIExoF3kbzZCSp-BgwcOJQWZQUKLoMMEJmedtG6NkZMJVIvaRsR4SjGu1X3EhxbpNL6pWVHrT_ekyS4B0x4vw5U6DtQ-POQgSKLyuBaKrMDuvnGBCYmqIzatQyzK4IIGTGdUuRJ74tKIpznimKXGt1s5Lag08lWtcpw8yFQiRmU-44cupv4FUGObxolLB0G_gy0pKFas3NQx4pqWWEFwsfcQJmNcSyH2JAiRvNVcV288qsPVnQqPzldIJBfrqATM6WO5tDV2n0LjTk1MWZGjpmgnLXCySq3HFcTzAhvwsNByeOFxvmkCBAsmVo9Rf4zlstjbNDXBCDi5laACtVG_gMN632OA4m_03qTT5YUPoVfF2TNdH4tgjo36OU-di1my0sDP3dSwF8ku21Md3DxBiIp1bcGjzkw-YhQ6KQEGLh_lAnSgbdOdetr36Op53VlXIg2K1h9qOznUcvzY-KKgk_FsCfgXvM4vPG9CVhzbTd0f02zFqZiOoobu94CTN9aaesAs6CV6tMOprN1bwiOrC_8wki7SLO2qC8eGwLTnNIsnfG2gA2VOIcM84zSuvsH5lcvOiSlXPWMNANEZTW3ViALO6vNG1Nlc0R7T7qav35Bofigz1HDNk1RECKaw0RCReIiPHkQjXCGAsi20IlCqsjiDoPDE3dorlw1BX6Dg-bk3VPgJRqo_2UPF9HoT6yg4FwLinkNArv3RW7ytmo6FKhF5KVOiDGtWQH84afjqN9bBbiNw4HQBbEVsMCbKK73ur3Hk0mDmNSOdlPaJKxJQj6LHXWIBBBBexLZw_y7TZVS9GJHXHA2nDR2MCEJcI0GzkDFV5bVTB5R67n9NuoDgd4XYx7O3TEVmw=&im=1&abvar=0&febuild=1.0.131&os=0&pload=137
IP 62.122.171.6:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x250&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint20:95:B0:7A:98:2B:A4:72:3F:CB:B4:39:21:48:5E:69:C8:8C:2F:ED
ValidityWed, 31 May 2023 13:41:31 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1973661&pid=_cb-1973661_0&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=Tyb2pP-uwvu8XD5WPI2U_w0kG_gWoK2g0GFAARI0G6ZE25lsSoYdmzaGHjV9Frn0YjeliGdQ5ZVM-GPlCRX56vcRsl-ks-jgw3pSkvmOrKzXFrX62H_j2F9Av00PEQauBBt3BxzIExoF3kbzZCSp-BgwcOJQWZQUKLoMMEJmedtG6NkZMJVIvaRsR4SjGu1X3EhxbpNL6pWVHrT_ekyS4B0x4vw5U6DtQ-POQgSKLyuBaKrMDuvnGBCYmqIzatQyzK4IIGTGdUuRJ74tKIpznimKXGt1s5Lag08lWtcpw8yFQiRmU-44cupv4FUGObxolLB0G_gy0pKFas3NQx4pqWWEFwsfcQJmNcSyH2JAiRvNVcV288qsPVnQqPzldIJBfrqATM6WO5tDV2n0LjTk1MWZGjpmgnLXCySq3HFcTzAhvwsNByeOFxvmkCBAsmVo9Rf4zlstjbNDXBCDi5laACtVG_gMN632OA4m_03qTT5YUPoVfF2TNdH4tgjo36OU-di1my0sDP3dSwF8ku21Md3DxBiIp1bcGjzkw-YhQ6KQEGLh_lAnSgbdOdetr36Op53VlXIg2K1h9qOznUcvzY-KKgk_FsCfgXvM4vPG9CVhzbTd0f02zFqZiOoobu94CTN9aaesAs6CV6tMOprN1bwiOrC_8wki7SLO2qC8eGwLTnNIsnfG2gA2VOIcM84zSuvsH5lcvOiSlXPWMNANEZTW3ViALO6vNG1Nlc0R7T7qav35Bofigz1HDNk1RECKaw0RCReIiPHkQjXCGAsi20IlCqsjiDoPDE3dorlw1BX6Dg-bk3VPgJRqo_2UPF9HoT6yg4FwLinkNArv3RW7ytmo6FKhF5KVOiDGtWQH84afjqN9bBbiNw4HQBbEVsMCbKK73ur3Hk0mDmNSOdlPaJKxJQj6LHXWIBBBBexLZw_y7TZVS9GJHXHA2nDR2MCEJcI0GzkDFV5bVTB5R67n9NuoDgd4XYx7O3TEVmw=&im=1&abvar=0&febuild=1.0.131&os=0&pload=137 HTTP/1.1
Host: lby2kd27c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2308122132a566e69717df4a90a1b6582366
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
evocdn.net/i/xv-cdn.net/xvideos/poster/68421333.jpg
104.26.6.119200 OK 16 kB URL GET HTTP/2 evocdn.net/i/xv-cdn.net/xvideos/poster/68421333.jpg
IP 104.26.6.119:443
Requested by https://e.xv-cdn.net/?id=68421333
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 600x337, components 3\012- data
Hash fea3945c73376001aad65806ac0dab84
76e5b01aab4bd8d8ab97b86362ae8e1c3e518429
89abe4a2ee9799188ea967548076d749808fa6d51947b13b1d72c55e37b1525f
GET /i/xv-cdn.net/xvideos/poster/68421333.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: image/jpeg
content-length: 16115
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
last-modified: Sun, 20 Nov 2022 23:50:28 GMT
access-control-allow-origin: *
x-77-nzt: A8O1pg2TjSD/PEkAACUTwisSKe3vUCMQAI/0Ot0gm6zB
x-77-nzt-ray: b1f3ea1bdb87bb3db340d864aa3aa235
x-77-cache: HIT
x-accel-date: 1691875191
x-cache-lb: HIT, HIT
x-age-lb: 1057616, 18748
x-77-pop: stockholmSE
proxy_type: Redirect
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:19 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6jFEzTaLaneB82%2FUl2xNKPAGe160U7cToq9ema0irn1SvwNORRd8iRy%2FJjE%2BDie69wkLAen1bik8J5H66mJCqp%2BZ9vMOGsyhgxko7jyhyBkUYNOS8f7UeUZqMV0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8c0319da1c16-OSL
X-Firefox-Spdy: h2
lby2kd27c.com/chicken.gif?z=1973661&pid=_cb-1973661_0&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=YdGk60IbcVhBXAMQqMyXHiprJscXwlBkxTCr9hnVy5_4J92LKNwFu7raoKVMaNBfCOXrYXG5xXYcOnpkXgSjTyyZ1qYUm185BirKR5-ZS7TTA3Kf_yO423pW5aYvUGzoTW-iBxab_gcxALb4xTcleJUtXeqss1DBlY4vpvfKtpWcf-tuxHjSQHn_s3vF39H1brVIJKbK88OCc2gIlFpq_QA_6k1MyE-bJ4IqAdgLSUVsoa6tIIHw-nqgjeCvkW5A6nIkY3tP3Qt_vm7-y1aQdp-qkGORZV81eiCUoVFOuUTxttwFaQ6LOBWqTKsnde7zTvZgi-d4t4IovP7ecLuStoQUOStf22E4v6WOKQb6AoOoOa_-QlGXZQtt3uGlAuj_geRzfvy6uSANOrnjb36WtZTQymcvGlH10IybRwa6t12ONHiLrN7jPKzVdgL6j5FzhmgkjQmnIUo1TOOdvCetAGF4Dy3qS2zk-ucPI6BfwWKEyJISXkSknWUUZmMSRup0ao8HqN9CFxzaVKqjhBmldYLd6yjqBnhoINezl3W9ZUohMoDoAed2VB0pGdN5Et3ihht1R5BPjnEhO9qTZl6yqzvX9lZURQlJmzSLicCOhFCr1qV06Sp2UDe_Hyh9656XLIwPEDJ0vwWdygfzkOxA9E2r8TMkC3V9uQYIvBK8mbZVCg0DKnYs3_lrpoKa6gr0GSSvs_P7v9HwzTEzX6OfwXCylVNIscTp6PakmfHrAOe7nrxN63SRmAPJNPKhGjj4SGib-sH3fiEbmOyHPv_-4s7g9vLaMdiD4qGGWaPHFxF1t5h_LdNZPUOLfFuhDA1kjVhe7pTYzcxM8jCA2EzRzohFavCKNwQXNsU2hd9dU39KaiGsU9V-jMvvSOR8q6B6P3ukzOzTwdxOOmReNcHLQu-3u-necTAMNt24U2HvvV7uxkBU4UQ3akrGaHv9eliX3plUoBJbBy3bZdUNtVp7ROlvqDpD7L3M-Q3fszNSOE-GJTIWwXdMrJ9QvttzOrF3Uz06lU1wzuSA9sFfoyLlRUeYvnDjmJjmZ4-HJnprCamYVT4c6Za5o2sdR2UVV7hAhjk5JKRPmZUoL5JamEDSJd_kJjey3spqTJ5-E5kttWMBwjMvK2eMfAXC30FnNumtah5MCNJqJcYkHen9Pe_Ftg5SndFb2L2ONLuin1yg7U4D&im=1&abvar=0&febuild=1.0.131&os=0&pload=171
62.122.171.6200 OK 43 B URL GET HTTP/2 lby2kd27c.com/chicken.gif?z=1973661&pid=_cb-1973661_0&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=YdGk60IbcVhBXAMQqMyXHiprJscXwlBkxTCr9hnVy5_4J92LKNwFu7raoKVMaNBfCOXrYXG5xXYcOnpkXgSjTyyZ1qYUm185BirKR5-ZS7TTA3Kf_yO423pW5aYvUGzoTW-iBxab_gcxALb4xTcleJUtXeqss1DBlY4vpvfKtpWcf-tuxHjSQHn_s3vF39H1brVIJKbK88OCc2gIlFpq_QA_6k1MyE-bJ4IqAdgLSUVsoa6tIIHw-nqgjeCvkW5A6nIkY3tP3Qt_vm7-y1aQdp-qkGORZV81eiCUoVFOuUTxttwFaQ6LOBWqTKsnde7zTvZgi-d4t4IovP7ecLuStoQUOStf22E4v6WOKQb6AoOoOa_-QlGXZQtt3uGlAuj_geRzfvy6uSANOrnjb36WtZTQymcvGlH10IybRwa6t12ONHiLrN7jPKzVdgL6j5FzhmgkjQmnIUo1TOOdvCetAGF4Dy3qS2zk-ucPI6BfwWKEyJISXkSknWUUZmMSRup0ao8HqN9CFxzaVKqjhBmldYLd6yjqBnhoINezl3W9ZUohMoDoAed2VB0pGdN5Et3ihht1R5BPjnEhO9qTZl6yqzvX9lZURQlJmzSLicCOhFCr1qV06Sp2UDe_Hyh9656XLIwPEDJ0vwWdygfzkOxA9E2r8TMkC3V9uQYIvBK8mbZVCg0DKnYs3_lrpoKa6gr0GSSvs_P7v9HwzTEzX6OfwXCylVNIscTp6PakmfHrAOe7nrxN63SRmAPJNPKhGjj4SGib-sH3fiEbmOyHPv_-4s7g9vLaMdiD4qGGWaPHFxF1t5h_LdNZPUOLfFuhDA1kjVhe7pTYzcxM8jCA2EzRzohFavCKNwQXNsU2hd9dU39KaiGsU9V-jMvvSOR8q6B6P3ukzOzTwdxOOmReNcHLQu-3u-necTAMNt24U2HvvV7uxkBU4UQ3akrGaHv9eliX3plUoBJbBy3bZdUNtVp7ROlvqDpD7L3M-Q3fszNSOE-GJTIWwXdMrJ9QvttzOrF3Uz06lU1wzuSA9sFfoyLlRUeYvnDjmJjmZ4-HJnprCamYVT4c6Za5o2sdR2UVV7hAhjk5JKRPmZUoL5JamEDSJd_kJjey3spqTJ5-E5kttWMBwjMvK2eMfAXC30FnNumtah5MCNJqJcYkHen9Pe_Ftg5SndFb2L2ONLuin1yg7U4D&im=1&abvar=0&febuild=1.0.131&os=0&pload=171
IP 62.122.171.6:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x250&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint20:95:B0:7A:98:2B:A4:72:3F:CB:B4:39:21:48:5E:69:C8:8C:2F:ED
ValidityWed, 31 May 2023 13:41:31 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1973661&pid=_cb-1973661_0&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=YdGk60IbcVhBXAMQqMyXHiprJscXwlBkxTCr9hnVy5_4J92LKNwFu7raoKVMaNBfCOXrYXG5xXYcOnpkXgSjTyyZ1qYUm185BirKR5-ZS7TTA3Kf_yO423pW5aYvUGzoTW-iBxab_gcxALb4xTcleJUtXeqss1DBlY4vpvfKtpWcf-tuxHjSQHn_s3vF39H1brVIJKbK88OCc2gIlFpq_QA_6k1MyE-bJ4IqAdgLSUVsoa6tIIHw-nqgjeCvkW5A6nIkY3tP3Qt_vm7-y1aQdp-qkGORZV81eiCUoVFOuUTxttwFaQ6LOBWqTKsnde7zTvZgi-d4t4IovP7ecLuStoQUOStf22E4v6WOKQb6AoOoOa_-QlGXZQtt3uGlAuj_geRzfvy6uSANOrnjb36WtZTQymcvGlH10IybRwa6t12ONHiLrN7jPKzVdgL6j5FzhmgkjQmnIUo1TOOdvCetAGF4Dy3qS2zk-ucPI6BfwWKEyJISXkSknWUUZmMSRup0ao8HqN9CFxzaVKqjhBmldYLd6yjqBnhoINezl3W9ZUohMoDoAed2VB0pGdN5Et3ihht1R5BPjnEhO9qTZl6yqzvX9lZURQlJmzSLicCOhFCr1qV06Sp2UDe_Hyh9656XLIwPEDJ0vwWdygfzkOxA9E2r8TMkC3V9uQYIvBK8mbZVCg0DKnYs3_lrpoKa6gr0GSSvs_P7v9HwzTEzX6OfwXCylVNIscTp6PakmfHrAOe7nrxN63SRmAPJNPKhGjj4SGib-sH3fiEbmOyHPv_-4s7g9vLaMdiD4qGGWaPHFxF1t5h_LdNZPUOLfFuhDA1kjVhe7pTYzcxM8jCA2EzRzohFavCKNwQXNsU2hd9dU39KaiGsU9V-jMvvSOR8q6B6P3ukzOzTwdxOOmReNcHLQu-3u-necTAMNt24U2HvvV7uxkBU4UQ3akrGaHv9eliX3plUoBJbBy3bZdUNtVp7ROlvqDpD7L3M-Q3fszNSOE-GJTIWwXdMrJ9QvttzOrF3Uz06lU1wzuSA9sFfoyLlRUeYvnDjmJjmZ4-HJnprCamYVT4c6Za5o2sdR2UVV7hAhjk5JKRPmZUoL5JamEDSJd_kJjey3spqTJ5-E5kttWMBwjMvK2eMfAXC30FnNumtah5MCNJqJcYkHen9Pe_Ftg5SndFb2L2ONLuin1yg7U4D&im=1&abvar=0&febuild=1.0.131&os=0&pload=171 HTTP/1.1
Host: lby2kd27c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2308122132a566e69717df4a90a1b6582366
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
pub.qwerty24.net/desktop
104.21.31.93200 OK 5.8 kB IP 104.21.31.93:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerLet's Encrypt
Subjectqwerty24.net
Fingerprint65:05:E1:A0:18:97:CF:EC:97:7C:5A:94:2A:0C:9B:8C:D7:A3:A6:F5
ValidityFri, 30 Jun 2023 04:31:53 GMT - Thu, 28 Sep 2023 04:31:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- C source text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6401), with CRLF, LF line terminators
Hash a915662ca8ba7ccefa6c524b610eadd7
4f513df42932a4418cb2478b26ddd5251d7ff007
1eb27f499209e3a1d4fa3d427913e88e2845feee11946280724dcb19913ef77b
GET /desktop HTTP/1.1
Host: pub.qwerty24.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:16 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.2.18
x-header-sub: Master
cache-control: max-age=2678400
cf-cache-status: HIT
age: 2002925
last-modified: Thu, 20 Jul 2023 22:10:11 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DG5yDL%2Ble8wA%2FnILrTCwtgei6cwPavt7MzakbuIcx954ZyHKf6Smu0GnunCxHCHE09Dreuy2rASOaTNqAa%2F%2BEjJ2BbmTEUgbe2xNuChE0bkcqxrdOS7%2BdAwnr04YxX%2BxQG0W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf08c7db503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn77-vid.xvideos-cdn.com/VB4G26w0XP9mTYiQZv4uZA==,1691904739/videos/hls/be/b3/9b/beb39b2afd4854a4dafde27f33b7ac19-2/hls-250p-401c6.m3u8
195.181.166.11200 OK 430 B URL GET HTTP/2 cdn77-vid.xvideos-cdn.com/VB4G26w0XP9mTYiQZv4uZA==,1691904739/videos/hls/be/b3/9b/beb39b2afd4854a4dafde27f33b7ac19-2/hls-250p-401c6.m3u8
IP 195.181.166.11:443
ASN #60068 Datacamp Limited
Requested by https://e.xv-cdn.net/?id=68421333
Certificate IssuerSectigo Limited
Subjectxvideos.com
Fingerprint41:22:B3:FE:2E:97:DB:C4:53:E3:77:FF:76:7D:61:20:CC:14:73:51
ValidityThu, 29 Sep 2022 00:00:00 GMT - Mon, 30 Oct 2023 23:59:59 GMT
Hash 9c548b92c06e7adbcc9952a40893ff48
834f150dbbffdd65ff789f8b34ae5c185a0f5d50
b4a25efd0e8d860a357fa9b6d0ed80c5471b4fdb752f98fb59367b60c76d04ec
GET /VB4G26w0XP9mTYiQZv4uZA==,1691904739/videos/hls/be/b3/9b/beb39b2afd4854a4dafde27f33b7ac19-2/hls-250p-401c6.m3u8 HTTP/1.1
Host: cdn77-vid.xvideos-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://e.xv-cdn.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: application/x-mpegurl
content-length: 430
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
last-modified: Sun, 20 Nov 2022 23:50:25 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-77-nzt: A8O1pgqS23yh1GY4FRPdH++uXEIAj/Q62DsHoP+ZkwAA
x-77-nzt-ray: d93319069221a19db340d864c3ecd237
x-accel-expires: @1697875052
x-accel-date: 1687544837
x-77-cache: HIT
x-age-lb: 4349102
server: CDN77-Turbo
x-cache-lb: HIT, MISS
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
lby2kd27c.com/chicken.gif?z=1976040&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=4O86YpoSvj09tWwBrPdvM99iiJn3dyE56rRAFOGySI7HrxuEXTuUAuLpC9IFw71jVZzf1sM_7fb0CV_elA5ksSsRGAlinDb64pQsLSsDrTu04VkNlvI77FOiKUDVzTotZRXS1gicJDO7BOQMGEnLA6xuzV_zycuk--2icmjMl2f6LTejM1hteJvrZzDOVSICENUZnQ81Pg4HtIFzjKorPwbfkHWyEqhEZdnecJfrxuUPhhoNm8HgTgef4x4IN8QgzSuMhSXI9vzCgr4G8QkN3I0MzTQx_0mTrCIWCS92w-QkLXFYhfTRNqTttXeavscI4432cAXRCaLzoL91CaRM3xoYwoaiv29UkKrKfgSJTAhztf1SHsipT8gXW_OHJYiJZuk_sFY3Km5ySLECms2dJGDPL9QXf5RJtGKJouzBlBonMReQAk1CmhwzyuBqMqlddvie0VRFvUCy4ujfzwW2MzaWGv3orAcionsqExK2jONhJ1FJpZg9fJ9LIyeLGOincXxsVfA4Crawv222l5g79H5eJwQ0WSm7ekFi3RO1qv4DkXhUFVIxpE104Sc5E-l01qjeOd0krFT6Rl-9m3Ktq2ipO4cnuQicxQndn9ew7SBnlmUIr_87bWXnNbpFU0e50S1KgrNVfAyGPIziaMKxlsWqmuALJ_Xv53kfl29fBbzVA4kZk_2RqV5uiRK86rdtvnfSR6qHeR5NeP-ipHK84GxFbKZ5-4Ul07x5F64mWSKddTLBzoTrg4g8ecbCxq_iVXEQIOr5K6Y6ul7puu4Rh5JsvjdXQ2RF7bIFv4UOk4ITuch2VYp5FBnE0AXYzAUrinYes7fNXgBPDPwPvRVqbN7zBqwrsNjSCcXKT7kcIRwAjkolyH12S_ua3DFlVa1_XjVG5HOlbYJmQ0vRseJ6kQ-Fo263yNolC8gBiLb5kQal8fw-lw==&im=1&abvar=0&febuild=1.0.131&os=0&pload=190
62.122.171.6200 OK 43 B URL GET HTTP/2 lby2kd27c.com/chicken.gif?z=1976040&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=4O86YpoSvj09tWwBrPdvM99iiJn3dyE56rRAFOGySI7HrxuEXTuUAuLpC9IFw71jVZzf1sM_7fb0CV_elA5ksSsRGAlinDb64pQsLSsDrTu04VkNlvI77FOiKUDVzTotZRXS1gicJDO7BOQMGEnLA6xuzV_zycuk--2icmjMl2f6LTejM1hteJvrZzDOVSICENUZnQ81Pg4HtIFzjKorPwbfkHWyEqhEZdnecJfrxuUPhhoNm8HgTgef4x4IN8QgzSuMhSXI9vzCgr4G8QkN3I0MzTQx_0mTrCIWCS92w-QkLXFYhfTRNqTttXeavscI4432cAXRCaLzoL91CaRM3xoYwoaiv29UkKrKfgSJTAhztf1SHsipT8gXW_OHJYiJZuk_sFY3Km5ySLECms2dJGDPL9QXf5RJtGKJouzBlBonMReQAk1CmhwzyuBqMqlddvie0VRFvUCy4ujfzwW2MzaWGv3orAcionsqExK2jONhJ1FJpZg9fJ9LIyeLGOincXxsVfA4Crawv222l5g79H5eJwQ0WSm7ekFi3RO1qv4DkXhUFVIxpE104Sc5E-l01qjeOd0krFT6Rl-9m3Ktq2ipO4cnuQicxQndn9ew7SBnlmUIr_87bWXnNbpFU0e50S1KgrNVfAyGPIziaMKxlsWqmuALJ_Xv53kfl29fBbzVA4kZk_2RqV5uiRK86rdtvnfSR6qHeR5NeP-ipHK84GxFbKZ5-4Ul07x5F64mWSKddTLBzoTrg4g8ecbCxq_iVXEQIOr5K6Y6ul7puu4Rh5JsvjdXQ2RF7bIFv4UOk4ITuch2VYp5FBnE0AXYzAUrinYes7fNXgBPDPwPvRVqbN7zBqwrsNjSCcXKT7kcIRwAjkolyH12S_ua3DFlVa1_XjVG5HOlbYJmQ0vRseJ6kQ-Fo263yNolC8gBiLb5kQal8fw-lw==&im=1&abvar=0&febuild=1.0.131&os=0&pload=190
IP 62.122.171.6:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=player&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint20:95:B0:7A:98:2B:A4:72:3F:CB:B4:39:21:48:5E:69:C8:8C:2F:ED
ValidityWed, 31 May 2023 13:41:31 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1976040&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=4O86YpoSvj09tWwBrPdvM99iiJn3dyE56rRAFOGySI7HrxuEXTuUAuLpC9IFw71jVZzf1sM_7fb0CV_elA5ksSsRGAlinDb64pQsLSsDrTu04VkNlvI77FOiKUDVzTotZRXS1gicJDO7BOQMGEnLA6xuzV_zycuk--2icmjMl2f6LTejM1hteJvrZzDOVSICENUZnQ81Pg4HtIFzjKorPwbfkHWyEqhEZdnecJfrxuUPhhoNm8HgTgef4x4IN8QgzSuMhSXI9vzCgr4G8QkN3I0MzTQx_0mTrCIWCS92w-QkLXFYhfTRNqTttXeavscI4432cAXRCaLzoL91CaRM3xoYwoaiv29UkKrKfgSJTAhztf1SHsipT8gXW_OHJYiJZuk_sFY3Km5ySLECms2dJGDPL9QXf5RJtGKJouzBlBonMReQAk1CmhwzyuBqMqlddvie0VRFvUCy4ujfzwW2MzaWGv3orAcionsqExK2jONhJ1FJpZg9fJ9LIyeLGOincXxsVfA4Crawv222l5g79H5eJwQ0WSm7ekFi3RO1qv4DkXhUFVIxpE104Sc5E-l01qjeOd0krFT6Rl-9m3Ktq2ipO4cnuQicxQndn9ew7SBnlmUIr_87bWXnNbpFU0e50S1KgrNVfAyGPIziaMKxlsWqmuALJ_Xv53kfl29fBbzVA4kZk_2RqV5uiRK86rdtvnfSR6qHeR5NeP-ipHK84GxFbKZ5-4Ul07x5F64mWSKddTLBzoTrg4g8ecbCxq_iVXEQIOr5K6Y6ul7puu4Rh5JsvjdXQ2RF7bIFv4UOk4ITuch2VYp5FBnE0AXYzAUrinYes7fNXgBPDPwPvRVqbN7zBqwrsNjSCcXKT7kcIRwAjkolyH12S_ua3DFlVa1_XjVG5HOlbYJmQ0vRseJ6kQ-Fo263yNolC8gBiLb5kQal8fw-lw==&im=1&abvar=0&febuild=1.0.131&os=0&pload=190 HTTP/1.1
Host: lby2kd27c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2308122132a566e69717df4a90a1b6582366
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
cdn77-vid.xvideos-cdn.com/VB4G26w0XP9mTYiQZv4uZA==,1691904739/videos/hls/be/b3/9b/beb39b2afd4854a4dafde27f33b7ac19-2/hls-250p-401c60.ts
195.181.166.11200 OK 260 kB URL GET HTTP/2 cdn77-vid.xvideos-cdn.com/VB4G26w0XP9mTYiQZv4uZA==,1691904739/videos/hls/be/b3/9b/beb39b2afd4854a4dafde27f33b7ac19-2/hls-250p-401c60.ts
IP 195.181.166.11:443
ASN #60068 Datacamp Limited
Requested by https://e.xv-cdn.net/?id=68421333
Certificate IssuerSectigo Limited
Subjectxvideos.com
Fingerprint41:22:B3:FE:2E:97:DB:C4:53:E3:77:FF:76:7D:61:20:CC:14:73:51
ValidityThu, 29 Sep 2022 00:00:00 GMT - Mon, 30 Oct 2023 23:59:59 GMT
Size 260 kB (260380 bytes)
Hash 4d2404d0d4bc2d9109827fee51a0a676
184df6d32c91a1f1e8e363559c433b6ebe7f5cea
8729735fc9dd266ffd3487de38a628e529c0436885dce2f736f789cbeb15b870
GET /VB4G26w0XP9mTYiQZv4uZA==,1691904739/videos/hls/be/b3/9b/beb39b2afd4854a4dafde27f33b7ac19-2/hls-250p-401c60.ts HTTP/1.1
Host: cdn77-vid.xvideos-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://e.xv-cdn.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:20 GMT
content-type: video/mp2t
content-length: 260380
x-frame-options: sameorigin
last-modified: Sun, 20 Nov 2022 23:50:25 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1700093905
x-77-nzt: A8O1pgo953qh1GY4nFX2E+/jFCEAj/Q63RC0b/+nDAAA
x-77-nzt-ray: d93319069221a19db340d86481ea573b
x-77-cache: HIT
x-accel-date: 1689725905
x-age-lb: 2168035
server: CDN77-Turbo
x-cache-lb: HIT, MISS
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
static.mp4.center/static/xvideos/asset/js/default.footer.static.js?v=202308112235
172.67.151.22200 OK 3.5 kB URL GET HTTP/2 static.mp4.center/static/xvideos/asset/js/default.footer.static.js?v=202308112235
IP 172.67.151.22:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerLet's Encrypt
Subjectmp4.center
FingerprintBD:77:73:68:E6:13:B1:C5:9B:A1:4A:05:47:46:D2:FB:79:C6:FD:47
ValidityFri, 30 Jun 2023 09:07:02 GMT - Thu, 28 Sep 2023 09:07:01 GMT
File type ASCII text, with very long lines (7152), with no line terminators
Hash cba3eaad7d1225702adaf95561d517e4
85e169049cf21d86a527670ff35c57998214e161
2f52d4a453bfae1b9609e297d7c6c494173405d6499800ceb8ed682720228cce
GET /static/xvideos/asset/js/default.footer.static.js?v=202308112235 HTTP/1.1
Host: static.mp4.center
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:16 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=7187
etag: W/"64d0db9e-1c13"
last-modified: Mon, 07 Aug 2023 11:55:10 GMT
x-header-sub: Master
cache-control: max-age=14400
cf-cache-status: HIT
age: 1165
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JUm0G72bQHMxt881BSKiy8xe97oocIQFWzn26Jo%2Bei4Eki1XsGHbi3BGB2P1aEsfRuWqyUzNERSUvPk87O9Aj4FNveC1ET%2Bo37kxNX5qiL8T5RK17ZVv84H%2FBU94mfUSGFfUKw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8beedd94b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cloudflareinsights.com/cdn-cgi/rum
104.16.56.101200 OK 0 B URL OPTIONS HTTP/2 cloudflareinsights.com/cdn-cgi/rum
IP 104.16.56.101:443
Requested by https://e.xv-cdn.net/?id=68421333
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:79:35:ED:04:A2:CA:50:F7:9A:B8:FE:DF:A5:0C:B1:F2:E6:DD:E8
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum HTTP/1.1
Host: cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 4221
Origin: https://e.xv-cdn.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sun, 13 Aug 2023 02:32:20 GMT
access-control-allow-origin: https://e.xv-cdn.net
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7f5d8c05dd5eb4ee-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
cloudflareinsights.com/cdn-cgi/rum
104.16.56.101200 OK 448 B URL OPTIONS HTTP/2 cloudflareinsights.com/cdn-cgi/rum
IP 104.16.56.101:443
Requested by https://e.xv-cdn.net/?id=68421333
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:79:35:ED:04:A2:CA:50:F7:9A:B8:FE:DF:A5:0C:B1:F2:E6:DD:E8
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 86c86f52f430ea6432071e7f4f5128e2
7b6e2ebf1a65e27f09c01d1988366be71801c358
9d42d9576d70742d9a3082fb601553d36a66c80e35aaf0c26827846459eb3226
OPTIONS /cdn-cgi/rum HTTP/1.1
Host: cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://e.xv-cdn.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:20 GMT
content-type: text/plain
access-control-allow-origin: https://e.xv-cdn.net
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7f5d8c05dd5cb4ee-OSL
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
cdn77-vid.xvideos-cdn.com/VB4G26w0XP9mTYiQZv4uZA==,1691904739/videos/hls/be/b3/9b/beb39b2afd4854a4dafde27f33b7ac19-2/hls-720p-e2be4.m3u8
195.181.166.11200 OK 430 B URL GET HTTP/2 cdn77-vid.xvideos-cdn.com/VB4G26w0XP9mTYiQZv4uZA==,1691904739/videos/hls/be/b3/9b/beb39b2afd4854a4dafde27f33b7ac19-2/hls-720p-e2be4.m3u8
IP 195.181.166.11:443
ASN #60068 Datacamp Limited
Requested by https://e.xv-cdn.net/?id=68421333
Certificate IssuerSectigo Limited
Subjectxvideos.com
Fingerprint41:22:B3:FE:2E:97:DB:C4:53:E3:77:FF:76:7D:61:20:CC:14:73:51
ValidityThu, 29 Sep 2022 00:00:00 GMT - Mon, 30 Oct 2023 23:59:59 GMT
Hash 635f69dd5b9df79c1ab8040dc82088a0
e7d033e01a17d9ca3a78dce15654f416ea9106a8
ae65a9039f2aa64a8dd05b2194132a86d7a6b8c65267b547738c9bb48d3323d3
GET /VB4G26w0XP9mTYiQZv4uZA==,1691904739/videos/hls/be/b3/9b/beb39b2afd4854a4dafde27f33b7ac19-2/hls-720p-e2be4.m3u8 HTTP/1.1
Host: cdn77-vid.xvideos-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://e.xv-cdn.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:20 GMT
content-type: application/x-mpegurl
content-length: 430
x-frame-options: sameorigin
last-modified: Sun, 20 Nov 2022 23:50:25 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1700246577
x-77-nzt: A8O1pgq4SUOh1GY4Cc18PO+DwB4Aj/Q6yFGrGtE
x-77-nzt-ray: d93319069221a19db440d864b65e840a
x-77-cache: HIT
x-accel-date: 1689878577
x-age-lb: 2015363
server: CDN77-Turbo
x-cache-lb: HIT, MISS
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-vid.xvideos-cdn.com/VB4G26w0XP9mTYiQZv4uZA==,1691904739/videos/hls/be/b3/9b/beb39b2afd4854a4dafde27f33b7ac19-2/hls-720p-e2be41.ts
195.181.166.11200 OK 2.0 MB URL GET HTTP/2 cdn77-vid.xvideos-cdn.com/VB4G26w0XP9mTYiQZv4uZA==,1691904739/videos/hls/be/b3/9b/beb39b2afd4854a4dafde27f33b7ac19-2/hls-720p-e2be41.ts
IP 195.181.166.11:443
ASN #60068 Datacamp Limited
Requested by https://e.xv-cdn.net/?id=68421333
Certificate IssuerSectigo Limited
Subjectxvideos.com
Fingerprint41:22:B3:FE:2E:97:DB:C4:53:E3:77:FF:76:7D:61:20:CC:14:73:51
ValidityThu, 29 Sep 2022 00:00:00 GMT - Mon, 30 Oct 2023 23:59:59 GMT
Size 2.0 MB (1960276 bytes)
Hash 3cd66e403e86e6f2c7619235bcb6b680
6a1d6c7363ac999b096cf93e054b57f242e022d2
a284263d12cb80ac067d0b355545a58bea38b3f4fdff390fd98f643969b154be
GET /VB4G26w0XP9mTYiQZv4uZA==,1691904739/videos/hls/be/b3/9b/beb39b2afd4854a4dafde27f33b7ac19-2/hls-720p-e2be41.ts HTTP/1.1
Host: cdn77-vid.xvideos-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://e.xv-cdn.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:20 GMT
content-type: video/mp2t
content-length: 1960276
x-frame-options: sameorigin
last-modified: Sun, 20 Nov 2022 23:50:25 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1700095062
x-77-nzt: A8O1pgo6aLeh1GY4mZnIMu9eECEAj/Q63ZtGgf9qAwEA
x-77-nzt-ray: d93319069221a19db440d8645ab96b0e
x-77-cache: HIT
x-accel-date: 1689727062
x-age-lb: 2166878
server: CDN77-Turbo
x-cache-lb: HIT, MISS
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
lby2kd27c.com/whob.gif?z=1976003&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=p-j2n1stLzsO1c7XGiG5Jf44IvCz_PSOxiTfdrjJCxFlJvz2CQikHS-zd2euOmRkn1BK92XkImAhEWMTOjrq4pc_UHCn7rwqqUBZo_G3K8MnRAzhKKzllu8VeFJLrKBNtTh28rJSoNirbwuBhuxjj9um3_RfOxg88fqiwo_5z5YSmS6BJRnwus13oGxGjQAsclDdGS4OZ4JNXPZxbhXtfu2rHCUE2t9-P7KWODWYgw6cFRqtac1o1vtnDO7wcLiIclFqEW2hcqNnH74h9nNkqEyGTR8ryFXiNi5AR8meuUo4yGNPi2I1ao9PFBI6hZgvvvrLqFBlzIN4tdA1avUYhrqpVgUeVcHRR2VXZ3Ia-g4H3EPsZqI91IXBxdEQGZLF7he2NBCoZ8lmnPZCLv4dfRY1FOSKkqULahsozkedlZYDbJRwZoOcEtK6-sPqLoZxbgE-Nb426wvtl8tnBs9MMJa4gVA1aYfHcxBc_kbkoOwcrW94mBc5IrVau2DjqUFDwABeuIhkjbsOE-2VqyDFh8pY7URfCCk0Ur_nsbO6VkLEczOM1-L8-wTHPcOqxmN5Lsn5Uso389_pgEKC2hNtkNrFXYT0xgeng8K6vQ6_LDe2dOaUmDBiPrpHstaBKWvAbCpujT3JyRg8Xs5rztTkcHqgAhcTigjcZHqN4eCsxBeu5u1KvjnLgR7I0CNbjxv4vn1Awo_47wqgQb4XOyfaF_SXNKSeFRDD8GijXwBE82gH8imq9jKh5R3o3tNA7pdokAFDDuRK9voJ9F4SwCh4dYbY2rfU-muPGHIGjF7yop1ZL_q4b5IeOvge5J7N3Zm_uO68rttT2ifTRJ-pLN-f4iA5zUpEPEcF1KKOV9aN7cx195t0yah-2CNrrJVAXToVb5cQPNOw0ilLjC4-GcVm8sl4_8AZzJObUwwFVFiX2O39Rh2OZjMdzLAayDw6ldpieIluq1hENq8EvQt6ars8ThcG1UNr56WHitG5TP4=&im=1&abvar=0&febuild=1.0.131&os=0&pload=169
62.122.171.6200 OK 43 B URL GET HTTP/2 lby2kd27c.com/whob.gif?z=1976003&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=p-j2n1stLzsO1c7XGiG5Jf44IvCz_PSOxiTfdrjJCxFlJvz2CQikHS-zd2euOmRkn1BK92XkImAhEWMTOjrq4pc_UHCn7rwqqUBZo_G3K8MnRAzhKKzllu8VeFJLrKBNtTh28rJSoNirbwuBhuxjj9um3_RfOxg88fqiwo_5z5YSmS6BJRnwus13oGxGjQAsclDdGS4OZ4JNXPZxbhXtfu2rHCUE2t9-P7KWODWYgw6cFRqtac1o1vtnDO7wcLiIclFqEW2hcqNnH74h9nNkqEyGTR8ryFXiNi5AR8meuUo4yGNPi2I1ao9PFBI6hZgvvvrLqFBlzIN4tdA1avUYhrqpVgUeVcHRR2VXZ3Ia-g4H3EPsZqI91IXBxdEQGZLF7he2NBCoZ8lmnPZCLv4dfRY1FOSKkqULahsozkedlZYDbJRwZoOcEtK6-sPqLoZxbgE-Nb426wvtl8tnBs9MMJa4gVA1aYfHcxBc_kbkoOwcrW94mBc5IrVau2DjqUFDwABeuIhkjbsOE-2VqyDFh8pY7URfCCk0Ur_nsbO6VkLEczOM1-L8-wTHPcOqxmN5Lsn5Uso389_pgEKC2hNtkNrFXYT0xgeng8K6vQ6_LDe2dOaUmDBiPrpHstaBKWvAbCpujT3JyRg8Xs5rztTkcHqgAhcTigjcZHqN4eCsxBeu5u1KvjnLgR7I0CNbjxv4vn1Awo_47wqgQb4XOyfaF_SXNKSeFRDD8GijXwBE82gH8imq9jKh5R3o3tNA7pdokAFDDuRK9voJ9F4SwCh4dYbY2rfU-muPGHIGjF7yop1ZL_q4b5IeOvge5J7N3Zm_uO68rttT2ifTRJ-pLN-f4iA5zUpEPEcF1KKOV9aN7cx195t0yah-2CNrrJVAXToVb5cQPNOw0ilLjC4-GcVm8sl4_8AZzJObUwwFVFiX2O39Rh2OZjMdzLAayDw6ldpieIluq1hENq8EvQt6ars8ThcG1UNr56WHitG5TP4=&im=1&abvar=0&febuild=1.0.131&os=0&pload=169
IP 62.122.171.6:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=player&size=300x250&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint20:95:B0:7A:98:2B:A4:72:3F:CB:B4:39:21:48:5E:69:C8:8C:2F:ED
ValidityWed, 31 May 2023 13:41:31 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /whob.gif?z=1976003&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=p-j2n1stLzsO1c7XGiG5Jf44IvCz_PSOxiTfdrjJCxFlJvz2CQikHS-zd2euOmRkn1BK92XkImAhEWMTOjrq4pc_UHCn7rwqqUBZo_G3K8MnRAzhKKzllu8VeFJLrKBNtTh28rJSoNirbwuBhuxjj9um3_RfOxg88fqiwo_5z5YSmS6BJRnwus13oGxGjQAsclDdGS4OZ4JNXPZxbhXtfu2rHCUE2t9-P7KWODWYgw6cFRqtac1o1vtnDO7wcLiIclFqEW2hcqNnH74h9nNkqEyGTR8ryFXiNi5AR8meuUo4yGNPi2I1ao9PFBI6hZgvvvrLqFBlzIN4tdA1avUYhrqpVgUeVcHRR2VXZ3Ia-g4H3EPsZqI91IXBxdEQGZLF7he2NBCoZ8lmnPZCLv4dfRY1FOSKkqULahsozkedlZYDbJRwZoOcEtK6-sPqLoZxbgE-Nb426wvtl8tnBs9MMJa4gVA1aYfHcxBc_kbkoOwcrW94mBc5IrVau2DjqUFDwABeuIhkjbsOE-2VqyDFh8pY7URfCCk0Ur_nsbO6VkLEczOM1-L8-wTHPcOqxmN5Lsn5Uso389_pgEKC2hNtkNrFXYT0xgeng8K6vQ6_LDe2dOaUmDBiPrpHstaBKWvAbCpujT3JyRg8Xs5rztTkcHqgAhcTigjcZHqN4eCsxBeu5u1KvjnLgR7I0CNbjxv4vn1Awo_47wqgQb4XOyfaF_SXNKSeFRDD8GijXwBE82gH8imq9jKh5R3o3tNA7pdokAFDDuRK9voJ9F4SwCh4dYbY2rfU-muPGHIGjF7yop1ZL_q4b5IeOvge5J7N3Zm_uO68rttT2ifTRJ-pLN-f4iA5zUpEPEcF1KKOV9aN7cx195t0yah-2CNrrJVAXToVb5cQPNOw0ilLjC4-GcVm8sl4_8AZzJObUwwFVFiX2O39Rh2OZjMdzLAayDw6ldpieIluq1hENq8EvQt6ars8ThcG1UNr56WHitG5TP4=&im=1&abvar=0&febuild=1.0.131&os=0&pload=169 HTTP/1.1
Host: lby2kd27c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2308122132a566e69717df4a90a1b6582366
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 13 Aug 2023 02:32:20 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.banner.view
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
fonts.gstatic.com/s/googlesans/v11/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2
216.58.207.227200 OK 22 kB URL GET HTTP/3 fonts.gstatic.com/s/googlesans/v11/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2
IP 216.58.207.227:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type Web Open Font Format (Version 2), TrueType, length 21744, version 1.0\012- data
Hash d6e7ae9212813fccebb58f6d0907c5c3
d8f15f3b6d6247c1e80bc42cbb4232e4f7b7d920
3c1721e85a4b5cd786a4d566abaf0d15ecd74fa791a5a9f7aaafba50e9e3da74
GET /s/googlesans/v11/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fap18.net
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Aug 2023 15:31:05 GMT
expires: Fri, 09 Aug 2024 15:31:05 GMT
cache-control: public, max-age=31536000
age: 212481
last-modified: Wed, 28 Nov 2018 16:23:38 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/googlesans/v11/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2
216.58.207.227200 OK 22 kB URL GET HTTP/2 fonts.gstatic.com/s/googlesans/v11/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2
IP 216.58.207.227:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type Web Open Font Format (Version 2), TrueType, length 21528, version 1.0\012- data
Hash 2967668ec83d4736140bd771afac18a6
821d35e9d9f5938608331029c974850b48138dfb
84469147c58b44c379aa25ce5013a4e545525726b2e7992f63161993b5d7a6c6
GET /s/googlesans/v11/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fap18.net
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21528
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 11 Aug 2023 10:51:38 GMT
expires: Sat, 10 Aug 2024 10:51:38 GMT
cache-control: public, max-age=31536000
age: 142848
last-modified: Wed, 28 Nov 2018 16:23:34 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lby2kd27c.com/lv/esnk/1976003/code.js
62.122.171.6200 OK 129 kB URL GET HTTP/2 lby2kd27c.com/lv/esnk/1976003/code.js
IP 62.122.171.6:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=player&size=300x250&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint20:95:B0:7A:98:2B:A4:72:3F:CB:B4:39:21:48:5E:69:C8:8C:2F:ED
ValidityWed, 31 May 2023 13:41:31 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type ASCII text, with very long lines (64960)
Size 129 kB (129294 bytes)
Hash 7571b71c8f1c35f25a81867f3c5b9b6b
d6146f902877639e54ee8390ea88960f3521c133
d3b8359995d05736adb19824ed56766aa3b2e43c2c362eec4db375ce4e48a242
GET /lv/esnk/1976003/code.js HTTP/1.1
Host: lby2kd27c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: application/javascript
last-modified: Wed, 09 Aug 2023 16:07:35 GMT
vary: Accept-Encoding
etag: W/"64d3b9c7-1f959"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
lby2kd27c.com/lv/esnk/1976040/code.js
62.122.171.6200 OK 129 kB URL GET HTTP/2 lby2kd27c.com/lv/esnk/1976040/code.js
IP 62.122.171.6:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=player&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint20:95:B0:7A:98:2B:A4:72:3F:CB:B4:39:21:48:5E:69:C8:8C:2F:ED
ValidityWed, 31 May 2023 13:41:31 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type ASCII text, with very long lines (64960)
Size 129 kB (129294 bytes)
Hash 87b8edd281a344953f2d08a8b12066cd
2d60d33e6b03407eafd35ae086a849413a0569b0
7140c46c755516b692ce62fa275b95dee9aac3f9a51ea9a62f6cee239e2f3cee
GET /lv/esnk/1976040/code.js HTTP/1.1
Host: lby2kd27c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: application/javascript
last-modified: Wed, 09 Aug 2023 16:07:35 GMT
vary: Accept-Encoding
etag: W/"64d3b9c7-1f959"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
lby2kd27c.com/chicken.gif?z=1976003&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=p-j2n1stLzsO1c7XGiG5Jf44IvCz_PSOxiTfdrjJCxFlJvz2CQikHS-zd2euOmRkn1BK92XkImAhEWMTOjrq4pc_UHCn7rwqqUBZo_G3K8MnRAzhKKzllu8VeFJLrKBNtTh28rJSoNirbwuBhuxjj9um3_RfOxg88fqiwo_5z5YSmS6BJRnwus13oGxGjQAsclDdGS4OZ4JNXPZxbhXtfu2rHCUE2t9-P7KWODWYgw6cFRqtac1o1vtnDO7wcLiIclFqEW2hcqNnH74h9nNkqEyGTR8ryFXiNi5AR8meuUo4yGNPi2I1ao9PFBI6hZgvvvrLqFBlzIN4tdA1avUYhrqpVgUeVcHRR2VXZ3Ia-g4H3EPsZqI91IXBxdEQGZLF7he2NBCoZ8lmnPZCLv4dfRY1FOSKkqULahsozkedlZYDbJRwZoOcEtK6-sPqLoZxbgE-Nb426wvtl8tnBs9MMJa4gVA1aYfHcxBc_kbkoOwcrW94mBc5IrVau2DjqUFDwABeuIhkjbsOE-2VqyDFh8pY7URfCCk0Ur_nsbO6VkLEczOM1-L8-wTHPcOqxmN5Lsn5Uso389_pgEKC2hNtkNrFXYT0xgeng8K6vQ6_LDe2dOaUmDBiPrpHstaBKWvAbCpujT3JyRg8Xs5rztTkcHqgAhcTigjcZHqN4eCsxBeu5u1KvjnLgR7I0CNbjxv4vn1Awo_47wqgQb4XOyfaF_SXNKSeFRDD8GijXwBE82gH8imq9jKh5R3o3tNA7pdokAFDDuRK9voJ9F4SwCh4dYbY2rfU-muPGHIGjF7yop1ZL_q4b5IeOvge5J7N3Zm_uO68rttT2ifTRJ-pLN-f4iA5zUpEPEcF1KKOV9aN7cx195t0yah-2CNrrJVAXToVb5cQPNOw0ilLjC4-GcVm8sl4_8AZzJObUwwFVFiX2O39Rh2OZjMdzLAayDw6ldpieIluq1hENq8EvQt6ars8ThcG1UNr56WHitG5TP4=&im=1&abvar=0&febuild=1.0.131&os=0&pload=169
62.122.171.6200 OK 43 B URL GET HTTP/2 lby2kd27c.com/chicken.gif?z=1976003&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=p-j2n1stLzsO1c7XGiG5Jf44IvCz_PSOxiTfdrjJCxFlJvz2CQikHS-zd2euOmRkn1BK92XkImAhEWMTOjrq4pc_UHCn7rwqqUBZo_G3K8MnRAzhKKzllu8VeFJLrKBNtTh28rJSoNirbwuBhuxjj9um3_RfOxg88fqiwo_5z5YSmS6BJRnwus13oGxGjQAsclDdGS4OZ4JNXPZxbhXtfu2rHCUE2t9-P7KWODWYgw6cFRqtac1o1vtnDO7wcLiIclFqEW2hcqNnH74h9nNkqEyGTR8ryFXiNi5AR8meuUo4yGNPi2I1ao9PFBI6hZgvvvrLqFBlzIN4tdA1avUYhrqpVgUeVcHRR2VXZ3Ia-g4H3EPsZqI91IXBxdEQGZLF7he2NBCoZ8lmnPZCLv4dfRY1FOSKkqULahsozkedlZYDbJRwZoOcEtK6-sPqLoZxbgE-Nb426wvtl8tnBs9MMJa4gVA1aYfHcxBc_kbkoOwcrW94mBc5IrVau2DjqUFDwABeuIhkjbsOE-2VqyDFh8pY7URfCCk0Ur_nsbO6VkLEczOM1-L8-wTHPcOqxmN5Lsn5Uso389_pgEKC2hNtkNrFXYT0xgeng8K6vQ6_LDe2dOaUmDBiPrpHstaBKWvAbCpujT3JyRg8Xs5rztTkcHqgAhcTigjcZHqN4eCsxBeu5u1KvjnLgR7I0CNbjxv4vn1Awo_47wqgQb4XOyfaF_SXNKSeFRDD8GijXwBE82gH8imq9jKh5R3o3tNA7pdokAFDDuRK9voJ9F4SwCh4dYbY2rfU-muPGHIGjF7yop1ZL_q4b5IeOvge5J7N3Zm_uO68rttT2ifTRJ-pLN-f4iA5zUpEPEcF1KKOV9aN7cx195t0yah-2CNrrJVAXToVb5cQPNOw0ilLjC4-GcVm8sl4_8AZzJObUwwFVFiX2O39Rh2OZjMdzLAayDw6ldpieIluq1hENq8EvQt6ars8ThcG1UNr56WHitG5TP4=&im=1&abvar=0&febuild=1.0.131&os=0&pload=169
IP 62.122.171.6:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=player&size=300x250&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint20:95:B0:7A:98:2B:A4:72:3F:CB:B4:39:21:48:5E:69:C8:8C:2F:ED
ValidityWed, 31 May 2023 13:41:31 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1976003&pb=380ef8c466cae7aa815b0034d5bd25a21691901139&psp=p-j2n1stLzsO1c7XGiG5Jf44IvCz_PSOxiTfdrjJCxFlJvz2CQikHS-zd2euOmRkn1BK92XkImAhEWMTOjrq4pc_UHCn7rwqqUBZo_G3K8MnRAzhKKzllu8VeFJLrKBNtTh28rJSoNirbwuBhuxjj9um3_RfOxg88fqiwo_5z5YSmS6BJRnwus13oGxGjQAsclDdGS4OZ4JNXPZxbhXtfu2rHCUE2t9-P7KWODWYgw6cFRqtac1o1vtnDO7wcLiIclFqEW2hcqNnH74h9nNkqEyGTR8ryFXiNi5AR8meuUo4yGNPi2I1ao9PFBI6hZgvvvrLqFBlzIN4tdA1avUYhrqpVgUeVcHRR2VXZ3Ia-g4H3EPsZqI91IXBxdEQGZLF7he2NBCoZ8lmnPZCLv4dfRY1FOSKkqULahsozkedlZYDbJRwZoOcEtK6-sPqLoZxbgE-Nb426wvtl8tnBs9MMJa4gVA1aYfHcxBc_kbkoOwcrW94mBc5IrVau2DjqUFDwABeuIhkjbsOE-2VqyDFh8pY7URfCCk0Ur_nsbO6VkLEczOM1-L8-wTHPcOqxmN5Lsn5Uso389_pgEKC2hNtkNrFXYT0xgeng8K6vQ6_LDe2dOaUmDBiPrpHstaBKWvAbCpujT3JyRg8Xs5rztTkcHqgAhcTigjcZHqN4eCsxBeu5u1KvjnLgR7I0CNbjxv4vn1Awo_47wqgQb4XOyfaF_SXNKSeFRDD8GijXwBE82gH8imq9jKh5R3o3tNA7pdokAFDDuRK9voJ9F4SwCh4dYbY2rfU-muPGHIGjF7yop1ZL_q4b5IeOvge5J7N3Zm_uO68rttT2ifTRJ-pLN-f4iA5zUpEPEcF1KKOV9aN7cx195t0yah-2CNrrJVAXToVb5cQPNOw0ilLjC4-GcVm8sl4_8AZzJObUwwFVFiX2O39Rh2OZjMdzLAayDw6ldpieIluq1hENq8EvQt6ars8ThcG1UNr56WHitG5TP4=&im=1&abvar=0&febuild=1.0.131&os=0&pload=169 HTTP/1.1
Host: lby2kd27c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2308122132a566e69717df4a90a1b6582366
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
mc.webvisor.org/watch/49199881/1?wmode=7&page-url=https%3A%2F%2Ffap18.net%2Fxid%2F68421333%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3Aeygqx1x5sixaiodx84qlgpr%3Afp%3A788%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1093%3Acn%3A1%3Adp%3A0%3Als%3A1266810389516%3Ahid%3A647565626%3Az%3A0%3Ai%3A20230813023214%3Aet%3A1691893935%3Ac%3A1%3Arn%3A315667370%3Arqn%3A1%3Au%3A1691893935587749602%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C37%2C384%2C4%2C32%2C0%2C%2C434%2C35%2C%2C%2C%2C903%3Aco%3A0%3Acpf%3A1%3Ans%3A1691893931590%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1691893936%3At%3Achibola%20en%20hotel%20-%20Fap18%20HD%20Tube%20-%20Fap18.net&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%281%29&redirnss=1
154.47.36.239200 OK 428 B URL GET HTTP/2 mc.webvisor.org/watch/49199881/1?wmode=7&page-url=https%3A%2F%2Ffap18.net%2Fxid%2F68421333%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3Aeygqx1x5sixaiodx84qlgpr%3Afp%3A788%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1093%3Acn%3A1%3Adp%3A0%3Als%3A1266810389516%3Ahid%3A647565626%3Az%3A0%3Ai%3A20230813023214%3Aet%3A1691893935%3Ac%3A1%3Arn%3A315667370%3Arqn%3A1%3Au%3A1691893935587749602%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C37%2C384%2C4%2C32%2C0%2C%2C434%2C35%2C%2C%2C%2C903%3Aco%3A0%3Acpf%3A1%3Ans%3A1691893931590%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1691893936%3At%3Achibola%20en%20hotel%20-%20Fap18%20HD%20Tube%20-%20Fap18.net&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%281%29&redirnss=1
IP 154.47.36.239:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerGlobalSign nv-sa
Subjectmc.webvisor.com
Fingerprint8E:96:A1:E8:24:E4:62:EE:9A:20:8F:A9:18:B7:C7:A1:B8:CD:57:26
ValidityWed, 31 May 2023 21:01:45 GMT - Wed, 22 Nov 2023 20:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (480), with no line terminators
Hash 3e7ca7102e3e103071def39bca5d65ee
15c5cef291f9f1b4bf1e9cc64e8561df72be8d38
dd882eb16236af786f69d1777269813bbec4e5b270284792ac6948d043c20193
GET /watch/49199881/1?wmode=7&page-url=https%3A%2F%2Ffap18.net%2Fxid%2F68421333%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3Aeygqx1x5sixaiodx84qlgpr%3Afp%3A788%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1093%3Acn%3A1%3Adp%3A0%3Als%3A1266810389516%3Ahid%3A647565626%3Az%3A0%3Ai%3A20230813023214%3Aet%3A1691893935%3Ac%3A1%3Arn%3A315667370%3Arqn%3A1%3Au%3A1691893935587749602%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C37%2C384%2C4%2C32%2C0%2C%2C434%2C35%2C%2C%2C%2C903%3Aco%3A0%3Acpf%3A1%3Ans%3A1691893931590%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1691893936%3At%3Achibola%20en%20hotel%20-%20Fap18%20HD%20Tube%20-%20Fap18.net&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%281%29&redirnss=1 HTTP/1.1
Host: mc.webvisor.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fap18.net
Referer: https://fap18.net/
DNT: 1
Connection: keep-alive
Cookie: yabs-sid=1861684011691893940; i=9PXz9EpchiStl9loP3Q7mIO6CLkiMTB/+zuVT5QjRcLaAOSlbnkvBIq2uPaTT5ySfehhXc9RIbwqoAIemr0r7r5612I=; yandexuid=1586428001691893940; yuidss=1586428001691893940; ymex=1723429940.yrts.1691893940#1723429940.yrtsi.1691893940
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 428
date: Sun, 13 Aug 2023 02:32:20 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://fap18.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 13-Aug-2023 02:32:20 GMT
last-modified: Sun, 13-Aug-2023 02:32:20 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
metrics.cdnjs.work/metrics/domain/fap18.net
104.21.68.77200 OK 78 B URL GET HTTP/2 metrics.cdnjs.work/metrics/domain/fap18.net
IP 104.21.68.77:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerGoogle Trust Services LLC
Subjectcdnjs.work
FingerprintC9:F5:A0:77:34:A2:B0:F4:6A:80:5A:74:21:6B:50:99:7B:BA:B1:5C
ValiditySun, 16 Jul 2023 06:06:42 GMT - Sat, 14 Oct 2023 06:06:41 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash a93364930b91d4d7d3c03f5095fad557
27ea8b3a9f4ef6659cb405a1370b1c54f5f2f642
c9542de6f482649ff9788333820577285b9f5c764a268df5a8d5faf881a95627
GET /metrics/domain/fap18.net HTTP/1.1
Host: metrics.cdnjs.work
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fap18.net
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: application/json; charset=utf-8
x-powered-by: PHP/7.4.16
access-control-allow-origin: *
access-control-allow-headers: *
x-header-sub: Master
cache-control: max-age=14400
cf-cache-status: HIT
age: 32850
last-modified: Sat, 12 Aug 2023 17:24:47 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VNvveF7XPHRu5EEnykipI0JIKSWgvyPxYrqWttL2O6ou5bxgNxOrPZdCzJdj3etyf56XNSbA%2Fr4T7iXofDfuEGELb2XnmjBn6QXFNJYK442AfN%2FjCqF0MGpr0kqyVBzJMJAWdP4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf3ef9ab518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.addtoany.com/menu/svg/icons/facebook_messenger.js
172.67.39.148200 OK 378 B URL GET HTTP/3 static.addtoany.com/menu/svg/icons/facebook_messenger.js
IP 172.67.39.148:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:A5:DB:83:09:73:10:48:06:97:65:2A:D9:27:B7:67:2D:7E:9D:6C
ValidityThu, 04 May 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (388), with no line terminators
Hash c2c49b3eda0b56a60602b0de9a1c253a
8d5ed94ac5eeee58abe1daec8f6dea4ebc2630c9
80200be4782ff1e73678811ee25c30ff0a3d3aa173935a2721930913445c2ed7
GET /menu/svg/icons/facebook_messenger.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fap18.net
DNT: 1
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:18 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
age: 22789338
etag: W/"17a-5edb43f5eca38"
last-modified: Fri, 18 Nov 2022 01:01:36 GMT
vary: Accept-Encoding
via: e2s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7f5d8bfaef5db505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fap18.net/adsites/status.js
172.67.157.205200 OK 0 B URL HEAD HTTP/3 fap18.net/adsites/status.js
IP 172.67.157.205:443
Requested by https://pub.qwerty24.net/one/desktop/?domain=fap18.net&area=player&size=300x250
Certificate IssuerGoogle Trust Services LLC
Subjectfap18.net
FingerprintF3:F6:4F:82:8F:F2:39:5B:FB:A0:C1:35:3E:B4:97:FE:AE:B1:C1:68
ValiditySun, 25 Jun 2023 04:11:31 GMT - Sat, 23 Sep 2023 04:11:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /adsites/status.js HTTP/1.1
Host: fap18.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub.qwerty24.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: application/javascript
content-length: 19
cf-bgj: minify
cf-polished: origSize=21
etag: "6100e074-15"
last-modified: Wed, 28 Jul 2021 04:43:32 GMT
x-header-sub: Master
x-path-proxy: data-admedia-sites
cache-control: max-age=14400
cf-cache-status: HIT
age: 6207
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oHEmACQMhlpTxNE%2FjxncgkJ4X07eWybw%2Bx6R3Cm4atkas1m74E7QfR0Tla7mlnDm3BmDMFE8%2BC21N783lc6ELPfrDqTXzxMfnoVo57RntbFSNtoA7Ypr5NNtR4Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bfebea3fac0-OSL
alt-svc: h3=":443"; ma=86400
cdn.jwplayer.com/libraries/O3ggcF8A.js
54.230.111.69200 OK 111 kB URL GET HTTP/2 cdn.jwplayer.com/libraries/O3ggcF8A.js
IP 54.230.111.69:443
Requested by https://e.xv-cdn.net/?id=68421333
Certificate IssuerAmazon
Subjectjwplayer.com
Fingerprint1E:37:35:FC:3F:05:B8:47:3C:72:2A:5E:B0:0A:95:77:BC:43:81:89
ValidityWed, 01 Mar 2023 00:00:00 GMT - Mon, 25 Dec 2023 23:59:59 GMT
Size 111 kB (111361 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /libraries/O3ggcF8A.js HTTP/1.1
Host: cdn.jwplayer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 41569
access-control-allow-origin: *
cache-control: max-age=180
content-encoding: gzip
date: Sun, 13 Aug 2023 02:29:44 GMT
server: openresty
x-robots-tag: noindex, indexifembedded
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DV1PD6o4dnJvkRKldACclx8lx36MNTKCbt_Hq_3zJ15Qzh0ktZYE6Q==
age: 153
X-Firefox-Spdy: h2
go.fap18.net/ftt2/in.php?ft=1691893936&fs=755d839d8eca386356e66a0bb957fe8c&fb=92a1fddd125fd66aebe6ff7ed938d074&referer=&id=
172.67.157.205200 OK 493 B URL GET HTTP/3 go.fap18.net/ftt2/in.php?ft=1691893936&fs=755d839d8eca386356e66a0bb957fe8c&fb=92a1fddd125fd66aebe6ff7ed938d074&referer=&id=
IP 172.67.157.205:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerGoogle Trust Services LLC
Subjectfap18.net
FingerprintF3:F6:4F:82:8F:F2:39:5B:FB:A0:C1:35:3E:B4:97:FE:AE:B1:C1:68
ValiditySun, 25 Jun 2023 04:11:31 GMT - Sat, 23 Sep 2023 04:11:30 GMT
File type HTML document, ASCII text, with very long lines (500), with no line terminators
Hash e28deee1e27cf54310737110595e0f9f
7516f4a559de75154eb41079f8248245cfb48a82
ee661030bda93732655eb3dd82b8c1ea9ed8d74d7b3abd7fcbcd5a9aa7777c33
GET /ftt2/in.php?ft=1691893936&fs=755d839d8eca386356e66a0bb957fe8c&fb=92a1fddd125fd66aebe6ff7ed938d074&referer=&id= HTTP/1.1
Host: go.fap18.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fap18.net
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.2.18
access-control-allow-origin: *
version: 2021-09-01-2316
x-header-sub: Master
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=42Nb07O3tM0ZmnptCOvsF6y85byTVv1UW8%2BI%2BR31yCEyleMfD4OcL07cnp%2FIFNzxGS4twMDFyWjSv%2BYxLd9Gi%2BVIiEfFWoPXwFilCDeFb3ZFh0e%2ByKyI3zdAdNsMAEg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f5d8bf4dc6efac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
go.cdnjs.work/view/
172.66.44.241200 OK 207 B IP 172.66.44.241:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerLet's Encrypt
Subjectgo.cdnjs.work
Fingerprint17:CB:1D:12:E9:05:8B:E5:BE:CE:77:93:C7:06:F1:2A:B5:51:E7:38
ValidityThu, 20 Jul 2023 23:56:25 GMT - Wed, 18 Oct 2023 23:56:24 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 278553b7e664692ead046bc7c912dc12
429505d9c05d46c1c7746475d4f0cdbd6b001723
7e325d8118adf472d3e0783f31c39fa6ed382053a13cbf379872bbd849e79924
GET /view/ HTTP/1.1
Host: go.cdnjs.work
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:18 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"7242ffea4afb3f67c70df451429518f8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xo7K3r2UOsXmEAUAnUBfs1WoIM%2BlT6vvOT2oBk88k7GxhpnWFqDbGSoiQi%2FHQ%2FVNY6aDYd9AbkNUUgwcMCuzz3AaCC7n2QZv4t4eCkRSbvqARfDsGKzt0IfgtfBiWyc1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bfabc34fab4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ssl.p.jwpcdn.com/player/v/8.27.1/jwplayer.core.controls.js
151.101.130.114200 OK 325 kB URL GET HTTP/2 ssl.p.jwpcdn.com/player/v/8.27.1/jwplayer.core.controls.js
IP 151.101.130.114:443
Requested by https://e.xv-cdn.net/?id=68421333
Certificate IssuerGlobalSign nv-sa
Subject*.jwplayer.com
Fingerprint35:5D:BC:19:45:5F:CD:05:73:60:FB:BD:B3:FA:E1:55:3C:3B:25:F0
ValiditySat, 26 Nov 2022 18:00:09 GMT - Thu, 28 Dec 2023 18:00:08 GMT
Size 325 kB (324591 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /player/v/8.27.1/jwplayer.core.controls.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=31536000, immutable
last-modified: Mon, 22 May 2023 06:27:29 GMT
etag: "3141cfbc04d2f12e7e4047ffd289780c"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 13 Aug 2023 02:32:19 GMT
via: 1.1 varnish
age: 6937601
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 357514
x-timer: S1691893939.464738,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 84863
X-Firefox-Spdy: h2
static.mp4.center/static/xvideos/asset/js/default.header.static.min.js?v=202308112235
172.67.151.22200 OK 65 kB URL GET HTTP/2 static.mp4.center/static/xvideos/asset/js/default.header.static.min.js?v=202308112235
IP 172.67.151.22:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerLet's Encrypt
Subjectmp4.center
FingerprintBD:77:73:68:E6:13:B1:C5:9B:A1:4A:05:47:46:D2:FB:79:C6:FD:47
ValidityFri, 30 Jun 2023 09:07:02 GMT - Thu, 28 Sep 2023 09:07:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/xvideos/asset/js/default.header.static.min.js?v=202308112235 HTTP/1.1
Host: static.mp4.center
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:16 GMT
content-type: application/javascript
last-modified: Mon, 07 Aug 2023 11:55:10 GMT
etag: W/"64d0db9e-fe3f"
x-header-sub: Master
cache-control: max-age=14400
cf-cache-status: HIT
age: 1165
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vORpefnC22Keq8%2FPDy48Vbs0Hz%2BNSOFNlsTvTZCV9zXiohr4C3wINMKE76GGhsGd5kcLb4js5Zkro7rn9H5Wr%2FtplkuzMwR1AApR%2Fcpcu8oo3YTkjV3WsS9Bcsf1LfRaXG8lvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8beedd8fb4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
mc.webvisor.org/watch/49199881?wmode=7&page-url=https%3A%2F%2Ffap18.net%2Fxid%2F68421333%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3Aeygqx1x5sixaiodx84qlgpr%3Afp%3A788%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1093%3Acn%3A1%3Adp%3A0%3Als%3A1266810389516%3Ahid%3A647565626%3Az%3A0%3Ai%3A20230813023214%3Aet%3A1691893935%3Ac%3A1%3Arn%3A315667370%3Arqn%3A1%3Au%3A1691893935587749602%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C37%2C384%2C4%2C32%2C0%2C%2C434%2C35%2C%2C%2C%2C903%3Aco%3A0%3Acpf%3A1%3Ans%3A1691893931590%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1691893936%3At%3Achibola%20en%20hotel%20-%20Fap18%20HD%20Tube%20-%20Fap18.net&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(1)
154.47.36.239302 Found 428 B URL GET HTTP/2 mc.webvisor.org/watch/49199881?wmode=7&page-url=https%3A%2F%2Ffap18.net%2Fxid%2F68421333%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3Aeygqx1x5sixaiodx84qlgpr%3Afp%3A788%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1093%3Acn%3A1%3Adp%3A0%3Als%3A1266810389516%3Ahid%3A647565626%3Az%3A0%3Ai%3A20230813023214%3Aet%3A1691893935%3Ac%3A1%3Arn%3A315667370%3Arqn%3A1%3Au%3A1691893935587749602%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C37%2C384%2C4%2C32%2C0%2C%2C434%2C35%2C%2C%2C%2C903%3Aco%3A0%3Acpf%3A1%3Ans%3A1691893931590%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1691893936%3At%3Achibola%20en%20hotel%20-%20Fap18%20HD%20Tube%20-%20Fap18.net&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(1)
IP 154.47.36.239:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerGlobalSign nv-sa
Subjectmc.webvisor.com
Fingerprint8E:96:A1:E8:24:E4:62:EE:9A:20:8F:A9:18:B7:C7:A1:B8:CD:57:26
ValidityWed, 31 May 2023 21:01:45 GMT - Wed, 22 Nov 2023 20:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch/49199881?wmode=7&page-url=https%3A%2F%2Ffap18.net%2Fxid%2F68421333%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3Aeygqx1x5sixaiodx84qlgpr%3Afp%3A788%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1093%3Acn%3A1%3Adp%3A0%3Als%3A1266810389516%3Ahid%3A647565626%3Az%3A0%3Ai%3A20230813023214%3Aet%3A1691893935%3Ac%3A1%3Arn%3A315667370%3Arqn%3A1%3Au%3A1691893935587749602%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C37%2C384%2C4%2C32%2C0%2C%2C434%2C35%2C%2C%2C%2C903%3Aco%3A0%3Acpf%3A1%3Ans%3A1691893931590%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1691893936%3At%3Achibola%20en%20hotel%20-%20Fap18%20HD%20Tube%20-%20Fap18.net&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(1) HTTP/1.1
Host: mc.webvisor.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fap18.net/
Origin: https://fap18.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: /watch/49199881/1?wmode=7&page-url=https%3A%2F%2Ffap18.net%2Fxid%2F68421333%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3Aeygqx1x5sixaiodx84qlgpr%3Afp%3A788%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1093%3Acn%3A1%3Adp%3A0%3Als%3A1266810389516%3Ahid%3A647565626%3Az%3A0%3Ai%3A20230813023214%3Aet%3A1691893935%3Ac%3A1%3Arn%3A315667370%3Arqn%3A1%3Au%3A1691893935587749602%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C37%2C384%2C4%2C32%2C0%2C%2C434%2C35%2C%2C%2C%2C903%3Aco%3A0%3Acpf%3A1%3Ans%3A1691893931590%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1691893936%3At%3Achibola%20en%20hotel%20-%20Fap18%20HD%20Tube%20-%20Fap18.net&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%281%29&redirnss=1
date: Sun, 13 Aug 2023 02:32:20 GMT
access-control-allow-origin: https://fap18.net
set-cookie: yabs-sid=1861684011691893940; Path=/; SameSite=None; Secure
i=9PXz9EpchiStl9loP3Q7mIO6CLkiMTB/+zuVT5QjRcLaAOSlbnkvBIq2uPaTT5ySfehhXc9RIbwqoAIemr0r7r5612I=; Expires=Wed, 10-Aug-2033 02:32:12 GMT; Domain=.webvisor.org; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=1586428001691893940; Expires=Wed, 10-Aug-2033 02:32:12 GMT; Domain=.webvisor.org; Path=/; Secure; SameSite=None
yuidss=1586428001691893940; Expires=Mon, 12-Aug-2024 02:32:20 GMT; Domain=.webvisor.org; Path=/; SameSite=None; Secure
ymex=1723429940.yrts.1691893940#1723429940.yrtsi.1691893940; Expires=Mon, 12-Aug-2024 02:32:20 GMT; Domain=.webvisor.org; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 13-Aug-2023 02:32:20 GMT
last-modified: Sun, 13-Aug-2023 02:32:20 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
xvideos-19ed4.kxcdn.com/embedframe/68421333?r=169189393864d840b273e6a&token=nQkMgBUwmTKlewHhVdtrTw&expire=1691897538
82.102.27.18200 OK 44 kB URL GET HTTP/2 xvideos-19ed4.kxcdn.com/embedframe/68421333?r=169189393864d840b273e6a&token=nQkMgBUwmTKlewHhVdtrTw&expire=1691897538
IP 82.102.27.18:443
Requested by https://e.xv-cdn.net/?id=68421333
Certificate IssuerDigiCert Inc
Subject*.kxcdn.com
FingerprintD0:15:68:FA:FC:2C:6A:CA:E2:A4:82:96:50:E7:84:16:44:E9:A7:84
ValidityFri, 23 Jun 2023 00:00:00 GMT - Tue, 23 Jul 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (38734)
Hash 68f2ae4ee1bc818ce41c8fa5a71feb16
1227e72f17f256c07e53f36a56e2d36c4cb34262
3c921eeab19b30b02475964dc0603a720de3d393e1756c8a73ca2865aff915c9
GET /embedframe/68421333?r=169189393864d840b273e6a&token=nQkMgBUwmTKlewHhVdtrTw&expire=1691897538 HTTP/1.1
Host: xvideos-19ed4.kxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://e.xv-cdn.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: keycdn-engine
date: Sun, 13 Aug 2023 02:32:19 GMT
content-length: 8103
p3p: policyref="/p3p.xml", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
accept-ch: Viewport-Width, Width, Device-Memory, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness
vary: Accept-Encoding,User-Agent,Accept-Language,Cookie
content-security-policy: default-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: *.xvideos.com *.xnxx.com *.red-cdn.com *.gold-cdn.com *.xvideos-cdn.com *.xnxx-cdn.com *.others-cdn.com 1868565294.rsc.cdn77.org *.trafficfactory.biz www.iwanttodeliver.com www.google.com www.gstatic.com fonts.gstatic.com fonts.googleapis.com ajax.googleapis.com fcm.googleapis.com accounts.google.com *.cdn77.org *.nk-img.com *.exoclick.com *.exosrv.com *.realsrv.com *.orbsrv.com *.exdynsrv.com *.ackcdn.net *.afcdn.net *.aucdn.net *.adglare.net www.flirt4free.com www.ohmybutt.com www.secretpartners.com cdn.asf4f.us *.livejasmin.com *.jsmcrptjmp.com *.awemwh.com etahub.com ctrack.trafficjunky.net tracking.sexcash.com *.gtflixtv.com wss://*.1ka.com https://*.1ka.com https://media.1ka.com https://u.1ka.com https://n.1ka.com;img-src 'self' 'unsafe-inline' data: blob: *.xvideos.com *.xnxx.com *.red-cdn.com *.gold-cdn.com *.xvideos-cdn.com *.xnxx-cdn.com *.others-cdn.com *.cdn77.org *.trafficfactory.biz www.google.com www.google-analytics.com ssl.gstatic.com *.nk-img.com *.camster.com *.vscdns.com *.doubleclick.net *.google.fr *.google.com *.gtflixtv.com *.1ka.com *.exoclick.com *.exosrv.com *.realsrv.com *.exdynsrv.com *.ackcdn.net *.afcdn.net *.aucdn.net bmedia.justservingfiles.net;
referrer-policy: no-referrer-when-downgrade
content-encoding: gzip
expires: Sun, 13 Aug 2023 02:31:19 GMT
cache-control: no-cache
x-cache: MISS
x-edge-location: noos
access-control-allow-origin: *
content-type: application/octet-stream
content-disposition: attachment
accept-ranges: bytes
X-Firefox-Spdy: h2
lby2kd27c.com/get/1976040?zoneid=1976040&jp=_cl5so7c3ub8w7bu2s8ov8l&nojs=0&ix=0&abvar=0&febuild=1.0.131&t=0&x=801&y=801&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=5458904518429905&sp=1
62.122.171.6200 OK 4.8 kB URL GET HTTP/2 lby2kd27c.com/get/1976040?zoneid=1976040&jp=_cl5so7c3ub8w7bu2s8ov8l&nojs=0&ix=0&abvar=0&febuild=1.0.131&t=0&x=801&y=801&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=5458904518429905&sp=1
IP 62.122.171.6:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=player&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint20:95:B0:7A:98:2B:A4:72:3F:CB:B4:39:21:48:5E:69:C8:8C:2F:ED
ValidityWed, 31 May 2023 13:41:31 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type ASCII text, with very long lines (4906), with no line terminators
Hash 3e43061d92127eccd9abfd00067accf4
d1b796aed086a7d6cf9a9dd7438f48152ff4cc5d
02f114c9aff8a9be6a66cba1d9461085bd74c131a0266c508b79943a1f28d4a0
GET /get/1976040?zoneid=1976040&jp=_cl5so7c3ub8w7bu2s8ov8l&nojs=0&ix=0&abvar=0&febuild=1.0.131&t=0&x=801&y=801&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=5458904518429905&sp=1 HTTP/1.1
Host: lby2kd27c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Cookie: CHCK=1; UID=2308122132a566e69717df4a90a1b6582366
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Sun, 15 Sep 2024 02:32:19 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
172.67.157.205200 OK 1.0 kB URL GET HTTP/3 fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
IP 172.67.157.205:443
Requested by https://pub.qwerty24.net/mobile
Certificate IssuerGoogle Trust Services LLC
Subjectfap18.net
FingerprintF3:F6:4F:82:8F:F2:39:5B:FB:A0:C1:35:3E:B4:97:FE:AE:B1:C1:68
ValiditySun, 25 Jun 2023 04:11:31 GMT - Sat, 23 Sep 2023 04:11:30 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1060), with no line terminators
Hash da438f0461ace23a86c9fbbaee5c7024
99b545f740d210fc1ba55491ad8944c5cbc8bc4e
fc57f5f33fd39ca3b0f9ceb11f36bf4058d6272751b25bd18ed0e97ef32456c2
GET /ad/show/clickadu/?domain=fap18.net&area=main&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98 HTTP/1.1
Host: fap18.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub.qwerty24.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.2.18
x-header-sub: Master
x-path-proxy: data-admedia
cache-control: max-age=14400
cf-cache-status: HIT
age: 6275
last-modified: Sun, 13 Aug 2023 00:47:42 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6pH5d6bVNf6EXB%2FqLnup%2B7eBymoJuYmLtBuEBTVIKEzYlP8DR0lw4dD8zi7v0aKpxKda9XiiL%2FjBxz8yfy1KLc10h18Veo6qYdjwegsaXszQj2ZigxoFRTVocVw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f5d8bf49c65fac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fap18.net/ad/show/clickadu/?domain=fap18.net&area=player&size=300x250&v=41daa7f26c4d78e0d59c9fb7d3331d98
172.67.157.205200 OK 634 B URL GET HTTP/3 fap18.net/ad/show/clickadu/?domain=fap18.net&area=player&size=300x250&v=41daa7f26c4d78e0d59c9fb7d3331d98
IP 172.67.157.205:443
Requested by https://pub.qwerty24.net/one/desktop/?domain=fap18.net&area=player&size=300x250
Certificate IssuerGoogle Trust Services LLC
Subjectfap18.net
FingerprintF3:F6:4F:82:8F:F2:39:5B:FB:A0:C1:35:3E:B4:97:FE:AE:B1:C1:68
ValiditySun, 25 Jun 2023 04:11:31 GMT - Sat, 23 Sep 2023 04:11:30 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (684), with no line terminators
Hash 5fd5aff24a86c04b4ef1f7ba7eb5ac19
c531d827c1aee66de4b5c26e0897032a6334685b
05bc639ec6868f2b89cc8f33ef5eee71fb47d087b31a79f829fd7753c0706263
GET /ad/show/clickadu/?domain=fap18.net&area=player&size=300x250&v=41daa7f26c4d78e0d59c9fb7d3331d98 HTTP/1.1
Host: fap18.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub.qwerty24.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.2.18
x-header-sub: Master
x-path-proxy: data-admedia
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Sun, 13 Aug 2023 00:30:12 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yb3yDGB1opgDp5RdAgN4aopN%2B10zDcQH7NYfu%2Fjrvy1DvQfLXNm4TiTvvzxFTj%2FMbkX3lgRDB8XBj0IG7%2BsNUpdQ1xHEqPFr%2FQVwt18oV3farmfLRWUpqGOJGqk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f5d8bfeae99fac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
lby2kd27c.com/get/1973663?zoneid=1973663&pid=_cb-1973663_0&jp=_clhkqec5ek6jbtvaxbdwgs&nojs=0&ix=0&abvar=0&febuild=1.0.131&t=0&x=801&y=801&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=955304891096667&sp=1
62.122.171.6200 OK 5.1 kB URL GET HTTP/2 lby2kd27c.com/get/1973663?zoneid=1973663&pid=_cb-1973663_0&jp=_clhkqec5ek6jbtvaxbdwgs&nojs=0&ix=0&abvar=0&febuild=1.0.131&t=0&x=801&y=801&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=955304891096667&sp=1
IP 62.122.171.6:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint20:95:B0:7A:98:2B:A4:72:3F:CB:B4:39:21:48:5E:69:C8:8C:2F:ED
ValidityWed, 31 May 2023 13:41:31 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type ASCII text, with very long lines (5185), with no line terminators
Hash b376a963143d454f9a6d5f46dfbfaaa5
90cdd430fbbeb1bf4bff536bee7879a2894f6a72
85da94021ea98e1b11c3bfd8707b035f6e210cc1553582ac64c8b24f49cd170c
GET /get/1973663?zoneid=1973663&pid=_cb-1973663_0&jp=_clhkqec5ek6jbtvaxbdwgs&nojs=0&ix=0&abvar=0&febuild=1.0.131&t=0&x=801&y=801&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=955304891096667&sp=1 HTTP/1.1
Host: lby2kd27c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Sun, 15 Sep 2024 02:32:19 GMT; HttpOnly; Secure; SameSite=None
UID=2308122132a566e69717df4a90a1b6582366; Path=/; Expires=Sun, 15 Sep 2024 02:32:19 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
lby2kd27c.com/get/1973661?zoneid=1973661&pid=_cb-1973661_0&jp=_cluy2619gxbt2lbe06tfrf&nojs=0&ix=0&abvar=0&febuild=1.0.131&t=0&x=801&y=801&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=5458904518461027&sp=1
62.122.171.6200 OK 5.2 kB URL GET HTTP/2 lby2kd27c.com/get/1973661?zoneid=1973661&pid=_cb-1973661_0&jp=_cluy2619gxbt2lbe06tfrf&nojs=0&ix=0&abvar=0&febuild=1.0.131&t=0&x=801&y=801&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=5458904518461027&sp=1
IP 62.122.171.6:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x250&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint20:95:B0:7A:98:2B:A4:72:3F:CB:B4:39:21:48:5E:69:C8:8C:2F:ED
ValidityWed, 31 May 2023 13:41:31 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type ASCII text, with very long lines (5269), with no line terminators
Hash b3c291b9b3a0815a46dfa96c30efeb25
00cc92a8d5733ea0e1ae99527b18f743863f6d44
2f9264219d46878e87c6957ca571820883ba2c72e427f1050d9ee83c2d5d608e
GET /get/1973661?zoneid=1973661&pid=_cb-1973661_0&jp=_cluy2619gxbt2lbe06tfrf&nojs=0&ix=0&abvar=0&febuild=1.0.131&t=0&x=801&y=801&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=5458904518461027&sp=1 HTTP/1.1
Host: lby2kd27c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Cookie: CHCK=1; UID=2308122132a566e69717df4a90a1b6582366
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Sun, 15 Sep 2024 02:32:19 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
static.mp4.center/skin/fap18.net/asset/favicon.ico
0.0.0.0 0 B URL GET static.mp4.center/skin/fap18.net/asset/favicon.ico
IP 0.0.0.0:0
Requested by https://fap18.net/xid/68421333/
Certificate IssuerLet's Encrypt
Subjectmp4.center
FingerprintBD:77:73:68:E6:13:B1:C5:9B:A1:4A:05:47:46:D2:FB:79:C6:FD:47
ValidityFri, 30 Jun 2023 09:07:02 GMT - Thu, 28 Sep 2023 09:07:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /skin/fap18.net/asset/favicon.ico HTTP/1.1
Host: static.mp4.center
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:18 GMT
content-type: image/x-icon
last-modified: Mon, 07 Aug 2023 11:55:09 GMT
etag: W/"64d0db9d-3a4"
x-header-sub: Master
cache-control: max-age=14400
cf-cache-status: HIT
age: 870
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=leCpcJ7%2FPGcVYX45w4oCQhYZtqKHrGUzxWmycNI8klHfnX3sYx7uec9VC53DzyDu0sOpSQqt4rdy9Xq5lLJqpHdFrhHV%2BdpGb3DxDxvTL2YucvtcnJPRZj9m9ah2xDvqa%2Bkscw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bfeb915b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fap18.net/ad/show/clickadu/?domain=fap18.net&area=player&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
172.67.157.205200 OK 634 B URL GET HTTP/3 fap18.net/ad/show/clickadu/?domain=fap18.net&area=player&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
IP 172.67.157.205:443
Requested by https://pub.qwerty24.net/one/mobile_top/?domain=fap18.net&area=player&size=300x100
Certificate IssuerGoogle Trust Services LLC
Subjectfap18.net
FingerprintF3:F6:4F:82:8F:F2:39:5B:FB:A0:C1:35:3E:B4:97:FE:AE:B1:C1:68
ValiditySun, 25 Jun 2023 04:11:31 GMT - Sat, 23 Sep 2023 04:11:30 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (684), with no line terminators
Hash 206fe8fae4c35d2a22cc6a5cc2b4f4d4
7e80b0f374ec885f6d431956d7061bde2fd326ce
6b61617ce8064cb4303f8a5aa927d09993f727eaf1f897c95ff4c5d443a90178
GET /ad/show/clickadu/?domain=fap18.net&area=player&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98 HTTP/1.1
Host: fap18.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub.qwerty24.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.2.18
x-header-sub: Master
x-path-proxy: data-admedia
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Sun, 13 Aug 2023 00:30:12 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LXwOroEjrtxPz1rqi5dplwhbZ8NxW91I7PfWkrRSDGNgE9ee%2FBG%2F9zpfN8yyz89Aj6VsVrVL9eA7Wc1CfCSFHlCIzzRVUOMA7dSegKiMpGaE1dMm7YoTuFgK17E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f5d8bfe8e94fac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x250&v=41daa7f26c4d78e0d59c9fb7d3331d98
172.67.157.205200 OK 1.0 kB URL GET HTTP/3 fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x250&v=41daa7f26c4d78e0d59c9fb7d3331d98
IP 172.67.157.205:443
Requested by https://pub.qwerty24.net/desktop
Certificate IssuerGoogle Trust Services LLC
Subjectfap18.net
FingerprintF3:F6:4F:82:8F:F2:39:5B:FB:A0:C1:35:3E:B4:97:FE:AE:B1:C1:68
ValiditySun, 25 Jun 2023 04:11:31 GMT - Sat, 23 Sep 2023 04:11:30 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1060), with no line terminators
Hash 6c25b5734a4d8554eced7e43b8929e1e
e5eed30d6a2625560f896d403bcc3902e8ef60ec
0b6f0f204aab9b6146c71dba1ecd607a2ef064ff4307ba50572990a18704f451
GET /ad/show/clickadu/?domain=fap18.net&area=main&size=300x250&v=41daa7f26c4d78e0d59c9fb7d3331d98 HTTP/1.1
Host: fap18.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub.qwerty24.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.2.18
x-header-sub: Master
x-path-proxy: data-admedia
cache-control: max-age=14400
cf-cache-status: HIT
age: 3193
last-modified: Sun, 13 Aug 2023 01:39:04 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AZ29Vw3kRfp51ohzRqoKFAQyWCJlheihHKr05Z97SNret7TBflYlgO%2F2624bfeWPPk%2BgslaBGdytfehNkCb7jszdFf21qMXV65S49Jo4YEk5lJXMR6SrRpypBsw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f5d8bf44c58fac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
static.addtoany.com/menu/svg/icons/twitter.js
172.67.39.148200 OK 695 B URL GET HTTP/3 static.addtoany.com/menu/svg/icons/twitter.js
IP 172.67.39.148:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:A5:DB:83:09:73:10:48:06:97:65:2A:D9:27:B7:67:2D:7E:9D:6C
ValidityThu, 04 May 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (705), with no line terminators
Hash 995fdafe1159f77fdd8c1f053a281bc4
ae931dbcb462f897540a696186dfa4147b02ce8d
ccff3da2d5b8974ef5758f1306d36c234c0763539177d2c36d6eda545dec2a2e
GET /menu/svg/icons/twitter.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fap18.net
DNT: 1
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:18 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
age: 22789145
etag: W/"2b7-5edb43f86f378"
last-modified: Fri, 18 Nov 2022 01:01:39 GMT
vary: Accept-Encoding
via: e4s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7f5d8bfaef5ab505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
e.xv-cdn.net/?id=68421333
104.21.10.95200 OK 115 kB URL GET HTTP/2 e.xv-cdn.net/?id=68421333
IP 104.21.10.95:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerLet's Encrypt
Subjecte.xv-cdn.net
FingerprintFA:D4:88:FC:47:46:43:2F:8A:B9:C7:28:A3:70:44:84:B1:A6:AE:D4
ValidityMon, 07 Aug 2023 10:03:38 GMT - Sun, 05 Nov 2023 10:03:37 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (62940), with CRLF line terminators
Size 115 kB (115327 bytes)
Hash a721cab2da0eccf6ea63c04d7470c922
2385ca58eff04328506cb8396f8d43d1ac928f19
750108e3ec9cfd31c8b4136a22dac5483aa6c64c2ae6c3b24dae804ad0aa9277
GET /?id=68421333 HTTP/1.1
Host: e.xv-cdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:16 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R5fo1moReQ0qYFZKsZ9MOT4o6PymbDrmsLYj5VHXCgXgmM%2Bfj8ygrpcaHcQ28PATqtpz4YI4oL7ntCyxxX%2BI9sRqh99Ua3%2BRVE9dW93yJGGj77M8EhXHPF2uW42HDE0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7f5d8beeff640b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.addtoany.com/menu/modules/core.c78901bc.js
172.67.39.148200 OK 71 kB URL GET HTTP/3 static.addtoany.com/menu/modules/core.c78901bc.js
IP 172.67.39.148:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:A5:DB:83:09:73:10:48:06:97:65:2A:D9:27:B7:67:2D:7E:9D:6C
ValidityThu, 04 May 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 5bff8a92e2aa9a2b5decead3ffa11ca2
4ce405183cf896c930da9b53455ace837397adcf
05d18955853a018a783dde77bcf072fb4e36df5bffafefb7be0e5e97411ab092
GET /menu/modules/core.c78901bc.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fap18.net
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: application/javascript; charset=utf-8
cache-control: max-age=315360000, immutable
cf-bgj: minify
access-control-allow-origin: *
etag: W/"1140a-6027af129c545"
last-modified: Wed, 09 Aug 2023 10:28:35 GMT
vary: Accept-Encoding
via: e2s
x-content-type-options: nosniff
cf-cache-status: HIT
age: 316847
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7f5d8bf34bb4b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
static.addtoany.com/menu/svg/icons/facebook.js
172.67.39.148200 OK 318 B URL GET HTTP/3 static.addtoany.com/menu/svg/icons/facebook.js
IP 172.67.39.148:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:A5:DB:83:09:73:10:48:06:97:65:2A:D9:27:B7:67:2D:7E:9D:6C
ValidityThu, 04 May 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (328), with no line terminators
Hash b52fce5a4ae8b5c315fcc56358334927
e07ab8715c98ae46d0f13c8ab3d705b00cf17bcf
61b79d67506370597d404c27ab7f37cd0b9f47bde7c8b45b04b43c03e6e6b262
GET /menu/svg/icons/facebook.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fap18.net
DNT: 1
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:18 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
age: 22789338
etag: W/"13e-5edb43f5ee978"
last-modified: Fri, 18 Nov 2022 01:01:36 GMT
vary: Accept-Encoding
via: e4s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7f5d8bfaef58b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
lby2kd27c.com/get/1973663?zoneid=1973663&pid=_cb-1973663_0&jp=_cl9rw2yjidbs51vkqwx73r&nojs=0&ix=0&abvar=0&febuild=1.0.131&t=0&x=801&y=801&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=8273654285554850&sp=1
62.122.171.6200 OK 5.3 kB URL GET HTTP/2 lby2kd27c.com/get/1973663?zoneid=1973663&pid=_cb-1973663_0&jp=_cl9rw2yjidbs51vkqwx73r&nojs=0&ix=0&abvar=0&febuild=1.0.131&t=0&x=801&y=801&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=8273654285554850&sp=1
IP 62.122.171.6:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint20:95:B0:7A:98:2B:A4:72:3F:CB:B4:39:21:48:5E:69:C8:8C:2F:ED
ValidityWed, 31 May 2023 13:41:31 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type Unicode text, UTF-8 text, with very long lines (5267), with no line terminators
Hash b18d41249595caa732c92b2cd148c0d9
3a51c2decf8b3295fed0f83aa79387311ac72328
af453e695f19a5b2be0fe318432ab8bdfc6280dda68ecf8bbb77d2dbd58f2e0c
GET /get/1973663?zoneid=1973663&pid=_cb-1973663_0&jp=_cl9rw2yjidbs51vkqwx73r&nojs=0&ix=0&abvar=0&febuild=1.0.131&t=0&x=801&y=801&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=8273654285554850&sp=1 HTTP/1.1
Host: lby2kd27c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Cookie: CHCK=1; UID=2308122132a566e69717df4a90a1b6582366
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Sun, 15 Sep 2024 02:32:19 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
static.mp4.center/skin/fap18.net/asset/images/apple-touch-icon-180x180.png
172.67.151.22404 Not Found 0 B URL GET HTTP/3 static.mp4.center/skin/fap18.net/asset/images/apple-touch-icon-180x180.png
IP 172.67.151.22:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerLet's Encrypt
Subjectmp4.center
FingerprintBD:77:73:68:E6:13:B1:C5:9B:A1:4A:05:47:46:D2:FB:79:C6:FD:47
ValidityFri, 30 Jun 2023 09:07:02 GMT - Thu, 28 Sep 2023 09:07:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /skin/fap18.net/asset/images/apple-touch-icon-180x180.png HTTP/1.1
Host: static.mp4.center
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.16
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5ia5sRNbLskcCHVR5CWCC0m%2Bm7aGZdv5C%2B%2BMpCt4o%2ByuhTD%2FTXZ%2Flk69Yi8LqSJOx%2FPaT6ytaRv4mWF6Q3vOmF7wWf8ASGohof3zswseiB8yAFrHTJAYIDT8P8q6BOmGGcH6vg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bfeb913b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
go.fap18.net/ftt2/video.php?link=video&pct=100&ft=1691893936&fs=755d839d8eca386356e66a0bb957fe8c&fb=92a1fddd125fd66aebe6ff7ed938d074&referer=&id=
172.67.157.205200 OK 1 B URL GET HTTP/3 go.fap18.net/ftt2/video.php?link=video&pct=100&ft=1691893936&fs=755d839d8eca386356e66a0bb957fe8c&fb=92a1fddd125fd66aebe6ff7ed938d074&referer=&id=
IP 172.67.157.205:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerGoogle Trust Services LLC
Subjectfap18.net
FingerprintF3:F6:4F:82:8F:F2:39:5B:FB:A0:C1:35:3E:B4:97:FE:AE:B1:C1:68
ValiditySun, 25 Jun 2023 04:11:31 GMT - Sat, 23 Sep 2023 04:11:30 GMT
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
GET /ftt2/video.php?link=video&pct=100&ft=1691893936&fs=755d839d8eca386356e66a0bb957fe8c&fb=92a1fddd125fd66aebe6ff7ed938d074&referer=&id= HTTP/1.1
Host: go.fap18.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fap18.net
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:18 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.2.18
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate
access-control-allow-origin: *
version: 2021-09-01-2316
x-robots-tag: noindex
set-cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6IjAiLCJzIjoibm9yZWYiLCJ2IjpbXSwiY2MiOjF9; expires=Mon, 14-Aug-2023 02:32:18 GMT; Max-Age=86400; path=/; domain=.fap18.net
x-header-sub: Master
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L%2B%2F%2BJmpar6ap9bNfI2RzVDn51fmuyKjMEvPiHP%2BYzdhhoQXkaUUEO%2BhRSrasusklw4PybHfWcvBEeCYXsLbkrX%2FJSTP%2BqfOV%2FNXB%2FSKvxhpnBuqz9678MupfAIqQW0g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f5d8bfcce3ffac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
aa.qwerty24.net/view/desktop/
104.21.31.93200 OK 0 B URL GET HTTP/3 aa.qwerty24.net/view/desktop/
IP 104.21.31.93:443
Requested by https://pub.qwerty24.net/view
Certificate IssuerLet's Encrypt
Subjectqwerty24.net
Fingerprint65:05:E1:A0:18:97:CF:EC:97:7C:5A:94:2A:0C:9B:8C:D7:A3:A6:F5
ValidityFri, 30 Jun 2023 04:31:53 GMT - Thu, 28 Sep 2023 04:31:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /view/desktop/ HTTP/1.1
Host: aa.qwerty24.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub.qwerty24.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fu%2BQMWzcubIWlZeyTuAHLza8mvgMM8CqD8cbeRP4DnXd3%2Bu9IyjQ88yjxRa20q0kxw6yQYH9CE5iJRezQWXngwB2YC%2F0EjvQaJFPnuyuPHG3WYUaccNewzhesZKZzx60DR4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7f5d8bf67d00b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
lby2kd27c.com/get/1976003?zoneid=1976003&jp=_clzpcbfru8wz5c4mkod4o2&nojs=0&ix=0&abvar=0&febuild=1.0.131&t=0&x=801&y=801&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=2362679774669940&sp=1
62.122.171.6200 OK 5.1 kB URL GET HTTP/2 lby2kd27c.com/get/1976003?zoneid=1976003&jp=_clzpcbfru8wz5c4mkod4o2&nojs=0&ix=0&abvar=0&febuild=1.0.131&t=0&x=801&y=801&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=2362679774669940&sp=1
IP 62.122.171.6:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=player&size=300x250&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint20:95:B0:7A:98:2B:A4:72:3F:CB:B4:39:21:48:5E:69:C8:8C:2F:ED
ValidityWed, 31 May 2023 13:41:31 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type ASCII text, with very long lines (5186), with no line terminators
Hash 69035734f267042275336540521b3c5d
dea73f849e818ace911479e361e14ed8440ba810
df88eefc27e62156fe39ac3e94095c66ce1f39b5bbf1f1018854b9b20a0f3c9e
GET /get/1976003?zoneid=1976003&jp=_clzpcbfru8wz5c4mkod4o2&nojs=0&ix=0&abvar=0&febuild=1.0.131&t=0&x=801&y=801&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=2362679774669940&sp=1 HTTP/1.1
Host: lby2kd27c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Cookie: CHCK=1; UID=2308122132a566e69717df4a90a1b6582366
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Sun, 15 Sep 2024 02:32:19 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
lby2kd27c.com/get/1973663?zoneid=1973663&pid=_cb-1973663_0&jp=_clmatt2dyipn8rcfbe1nmb&nojs=0&ix=0&abvar=0&febuild=1.0.131&t=0&x=801&y=801&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=3207104704793226&sp=1
62.122.171.6200 OK 5.1 kB URL GET HTTP/2 lby2kd27c.com/get/1973663?zoneid=1973663&pid=_cb-1973663_0&jp=_clmatt2dyipn8rcfbe1nmb&nojs=0&ix=0&abvar=0&febuild=1.0.131&t=0&x=801&y=801&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=3207104704793226&sp=1
IP 62.122.171.6:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint20:95:B0:7A:98:2B:A4:72:3F:CB:B4:39:21:48:5E:69:C8:8C:2F:ED
ValidityWed, 31 May 2023 13:41:31 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type ASCII text, with very long lines (5185), with no line terminators
Hash 3f18009f8a65d18b490a50a8bd24cf45
09efe91f56466b3f79323ef59350b20ce7301ed2
8802d61964bdac7a8459faef9e4d1678099c78efe7045fc4406e15c067752fc0
GET /get/1973663?zoneid=1973663&pid=_cb-1973663_0&jp=_clmatt2dyipn8rcfbe1nmb&nojs=0&ix=0&abvar=0&febuild=1.0.131&t=0&x=801&y=801&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=3207104704793226&sp=1 HTTP/1.1
Host: lby2kd27c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Cookie: CHCK=1; UID=2308122132a566e69717df4a90a1b6582366
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Sun, 15 Sep 2024 02:32:19 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
172.67.157.205200 OK 163 kB URL User Request GET HTTP/2 IP 172.67.157.205:443
Certificate IssuerGoogle Trust Services LLC
Subjectfap18.net
FingerprintF3:F6:4F:82:8F:F2:39:5B:FB:A0:C1:35:3E:B4:97:FE:AE:B1:C1:68
ValiditySun, 25 Jun 2023 04:11:31 GMT - Sat, 23 Sep 2023 04:11:30 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- assembler source text\012- exported SGML document, ASCII text, with very long lines (7956)
Size 163 kB (162812 bytes)
Hash 810c2157313a7736f09235dc9229dd33
7caa5a1b87ae83ebe27c647bb5cc2a3d717696ec
3c5669fdeac4c65039259b120bdb5ca50fb18fe8a33368ca6a7f03822adb8b2e
GET /xid/68421333/ HTTP/1.1
Host: fap18.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:16 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Sun, 13 Aug 2023 02:52:15 GMT
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Sun, 13 Aug 2023 02:32:16 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UgkZXdhQToSpL27IXdbocJeEofuhqhhDQ%2B9tJXIJfhBGm%2BlGHHYruTFEw7uGLb5F1SQvmP6PJHL3ehiXPaCjOiHB26UKDol4yru10S40CWe1PgEQY48wHHkXE%2BA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f5d8beaab9eb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pub.qwerty24.net/mobile
104.21.31.93200 OK 14 kB IP 104.21.31.93:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerLet's Encrypt
Subjectqwerty24.net
Fingerprint65:05:E1:A0:18:97:CF:EC:97:7C:5A:94:2A:0C:9B:8C:D7:A3:A6:F5
ValidityFri, 30 Jun 2023 04:31:53 GMT - Thu, 28 Sep 2023 04:31:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- C source text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6401), with CRLF, LF line terminators
Hash b411b27f54568d8cbac2880cec48af99
57c8ec31c0b24a4d118dcee4422eaae750351b53
59c277e3e6f836d91236ced4248517bfafae81b3903a1b4920b95ca6b84a0755
GET /mobile HTTP/1.1
Host: pub.qwerty24.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:16 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.2.18
x-header-sub: Master
cache-control: max-age=2678400
cf-cache-status: HIT
age: 1605510
last-modified: Tue, 25 Jul 2023 12:33:46 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fTxZQKwoagKQSxWCijfm0cOUVB%2BW%2F79fx%2FrJKcEIBwNoBO0J6MX3fIVLAXvcHNx1etU0QEHNRL9WObyUqkb%2BwkD9Chb2KvzJEjVEeXGeWYhlqxOpRD6J36SzAt72OE7jAvQF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf09c84b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
172.67.157.205200 OK 1.0 kB URL GET HTTP/3 fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
IP 172.67.157.205:443
Requested by https://pub.qwerty24.net/mobile
Certificate IssuerGoogle Trust Services LLC
Subjectfap18.net
FingerprintF3:F6:4F:82:8F:F2:39:5B:FB:A0:C1:35:3E:B4:97:FE:AE:B1:C1:68
ValiditySun, 25 Jun 2023 04:11:31 GMT - Sat, 23 Sep 2023 04:11:30 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1060), with no line terminators
Hash da438f0461ace23a86c9fbbaee5c7024
99b545f740d210fc1ba55491ad8944c5cbc8bc4e
fc57f5f33fd39ca3b0f9ceb11f36bf4058d6272751b25bd18ed0e97ef32456c2
GET /ad/show/clickadu/?domain=fap18.net&area=main&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98 HTTP/1.1
Host: fap18.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub.qwerty24.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.2.18
x-header-sub: Master
x-path-proxy: data-admedia
cache-control: max-age=14400
cf-cache-status: HIT
age: 6275
last-modified: Sun, 13 Aug 2023 00:47:42 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ODYVGinILsMoHDC4jhA3aSU01W0apuxOvSeDENO6bNNEgFQPRt%2BTnNz0Ec%2FGDnZByxWEZqurG9kSOEeKIhdsVtPdZO23lYeaAD5uA9NVbmZJbyeU0ZrLuNb90mg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f5d8bf56c93fac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
static.addtoany.com/menu/svg/icons/link.js
172.67.39.148200 OK 1.8 kB URL GET HTTP/3 static.addtoany.com/menu/svg/icons/link.js
IP 172.67.39.148:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:A5:DB:83:09:73:10:48:06:97:65:2A:D9:27:B7:67:2D:7E:9D:6C
ValidityThu, 04 May 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (1794), with no line terminators
Hash e144649db5f68c7f31cedf22d5f30b7b
e57c17a271056dc164c68d290e05d96b5266f8a3
9b478e3efec38b7fbec1a70e5c7df2f672a3b1dc5903e0550c8999ad1151d82e
GET /menu/svg/icons/link.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fap18.net
DNT: 1
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:18 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
age: 22789338
etag: W/"6f8-5edb43f695958"
last-modified: Fri, 18 Nov 2022 01:01:37 GMT
vary: Accept-Encoding
via: e3s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7f5d8bfaef5fb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pub.qwerty24.net/mobile
104.21.31.93200 OK 14 kB IP 104.21.31.93:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerLet's Encrypt
Subjectqwerty24.net
Fingerprint65:05:E1:A0:18:97:CF:EC:97:7C:5A:94:2A:0C:9B:8C:D7:A3:A6:F5
ValidityFri, 30 Jun 2023 04:31:53 GMT - Thu, 28 Sep 2023 04:31:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- C source text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6401), with CRLF, LF line terminators
Hash b411b27f54568d8cbac2880cec48af99
57c8ec31c0b24a4d118dcee4422eaae750351b53
59c277e3e6f836d91236ced4248517bfafae81b3903a1b4920b95ca6b84a0755
GET /mobile HTTP/1.1
Host: pub.qwerty24.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:16 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.2.18
x-header-sub: Master
cache-control: max-age=2678400
cf-cache-status: HIT
age: 1605510
last-modified: Tue, 25 Jul 2023 12:33:46 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z%2BN86Q7PAqlc2uB9VhN3nllAYxxi7TWSZaHr%2B1uANVtQyoGO6cP6NvNBYnzjMCqGTSsKNPPMZUl5fL2hlnjlFDZ6vT8zqPBo61Ykn%2FhOhKm34zGHo3116gy5HmWNVmhtpM%2FO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf09c82b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.addtoany.com/menu/svg/icons/tumblr.js
172.67.39.148200 OK 392 B URL GET HTTP/3 static.addtoany.com/menu/svg/icons/tumblr.js
IP 172.67.39.148:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:A5:DB:83:09:73:10:48:06:97:65:2A:D9:27:B7:67:2D:7E:9D:6C
ValidityThu, 04 May 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (402), with no line terminators
Hash d5bec526c5a14524b5d3118772ffa999
22eb4f2b7565dd5566fcdd88d34fdd0d8107bf85
997e0cf3308848637c58080a4549c58c287dfebfe53cf9b294cd0394a7ae93a2
GET /menu/svg/icons/tumblr.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fap18.net
DNT: 1
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:18 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
etag: W/"188-5edb43f864798"
last-modified: Fri, 18 Nov 2022 01:01:39 GMT
vary: Accept-Encoding
via: e1s
x-content-type-options: nosniff
cf-cache-status: HIT
age: 13428092
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7f5d8bfaef5cb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.pncloudfl.com/pn/ed0/383/1a4/ed03831a46b255a74f378370cfbe78b360741624.webp
104.22.58.221200 OK 20 kB URL GET HTTP/2 cdn.pncloudfl.com/pn/ed0/383/1a4/ed03831a46b255a74f378370cfbe78b360741624.webp
IP 104.22.58.221:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x250&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC6:42:10:11:EB:FA:38:01:62:34:DA:19:86:B6:89:D4:EF:B3:37:A8
ValidityFri, 31 Mar 2023 00:00:00 GMT - Sat, 30 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash fbab92d6de3538e29786605f350d5c58
ed03831a46b255a74f378370cfbe78b360741624
65d835b6c47b7461d851f7ea556833e8133a0c96494227f3df9bf8debb5ef73f
GET /pn/ed0/383/1a4/ed03831a46b255a74f378370cfbe78b360741624.webp HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: application/octet-stream
content-length: 19470
etag: fbab92d6de3538e29786605f350d5c58
last-modified: Fri, 28 Apr 2023 13:32:53 GMT
x-timestamp: 1682688772.22347
x-trans-id: txfa66edb0dfb248d29885e-00645b606d
x-openstack-request-id: txfa66edb0dfb248d29885e-00645b606d
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Mon, 14 Aug 2023 09:32:15 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
cf-cache-status: HIT
age: 61204
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 7f5d8c038c400b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x250&v=41daa7f26c4d78e0d59c9fb7d3331d98
172.67.157.205200 OK 1.0 kB URL GET HTTP/3 fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x250&v=41daa7f26c4d78e0d59c9fb7d3331d98
IP 172.67.157.205:443
Requested by https://pub.qwerty24.net/desktop
Certificate IssuerGoogle Trust Services LLC
Subjectfap18.net
FingerprintF3:F6:4F:82:8F:F2:39:5B:FB:A0:C1:35:3E:B4:97:FE:AE:B1:C1:68
ValiditySun, 25 Jun 2023 04:11:31 GMT - Sat, 23 Sep 2023 04:11:30 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1060), with no line terminators
Hash 6c25b5734a4d8554eced7e43b8929e1e
e5eed30d6a2625560f896d403bcc3902e8ef60ec
0b6f0f204aab9b6146c71dba1ecd607a2ef064ff4307ba50572990a18704f451
GET /ad/show/clickadu/?domain=fap18.net&area=main&size=300x250&v=41daa7f26c4d78e0d59c9fb7d3331d98 HTTP/1.1
Host: fap18.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub.qwerty24.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.2.18
x-header-sub: Master
x-path-proxy: data-admedia
cache-control: max-age=14400
cf-cache-status: HIT
age: 3193
last-modified: Sun, 13 Aug 2023 01:39:04 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rhgY9AxU6QdBwjs6kPJF1ajgUK6sdwmRAV8XkOobF5aow%2Bq8%2BrXTEcDLI15T1Klr7QCw4pTRmEX9hVZfCvLzjVo2txPeewQ%2BCMklX2tVHEFGJAlgMoxQfvjKvrc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f5d8bf51c7afac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.pncloudfl.com/pn/76e/fc1/ef5/76efc1ef508c0e1bb235943a2c9d303e6ad7e28c.webp
104.22.58.221200 OK 22 kB URL GET HTTP/3 cdn.pncloudfl.com/pn/76e/fc1/ef5/76efc1ef508c0e1bb235943a2c9d303e6ad7e28c.webp
IP 104.22.58.221:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=player&size=300x250&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC6:42:10:11:EB:FA:38:01:62:34:DA:19:86:B6:89:D4:EF:B3:37:A8
ValidityFri, 31 Mar 2023 00:00:00 GMT - Sat, 30 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8f4a41145b04ff11cc6d7afeed4fddbc
76efc1ef508c0e1bb235943a2c9d303e6ad7e28c
58a5e4e40e25150e439480fc29a44b34b6bb01c1f9bfd328bd9ad0a18512fe84
GET /pn/76e/fc1/ef5/76efc1ef508c0e1bb235943a2c9d303e6ad7e28c.webp HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: application/octet-stream
content-length: 21506
etag: 8f4a41145b04ff11cc6d7afeed4fddbc
last-modified: Fri, 28 Apr 2023 11:23:21 GMT
x-timestamp: 1682681000.95190
x-trans-id: tx182657604fdb433e98b0f-00645b6068
x-openstack-request-id: tx182657604fdb433e98b0f-00645b6068
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Mon, 14 Aug 2023 09:33:58 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
cf-cache-status: HIT
age: 61101
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 7f5d8c046f08b511-OSL
alt-svc: h3=":443"; ma=86400
static.mp4.center/static/xvideos/asset/js/require.static.js?v=202308112235
172.67.151.22200 OK 26 kB URL GET HTTP/2 static.mp4.center/static/xvideos/asset/js/require.static.js?v=202308112235
IP 172.67.151.22:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerLet's Encrypt
Subjectmp4.center
FingerprintBD:77:73:68:E6:13:B1:C5:9B:A1:4A:05:47:46:D2:FB:79:C6:FD:47
ValidityFri, 30 Jun 2023 09:07:02 GMT - Thu, 28 Sep 2023 09:07:01 GMT
File type ASCII text, with very long lines (26224), with no line terminators
Hash 7397e476e5712814f1988977a4e53a46
26f2afa2cb572ef9f96c76e6b1b88752adad61b3
a73d9c1182212da19f05297349b16c25a6e59fd28c1d6b471281186f01018686
GET /static/xvideos/asset/js/require.static.js?v=202308112235 HTTP/1.1
Host: static.mp4.center
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:16 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=26370
etag: W/"64d0db9e-6702"
last-modified: Mon, 07 Aug 2023 11:55:10 GMT
x-header-sub: Master
cache-control: max-age=14400
cf-cache-status: HIT
age: 1165
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KYzBCoAf3Q25lnIcRffxf%2FePZGVqRS5owpM5cCRqynDuNtufbAcpk%2FSW%2FzBoYlA8fYLGfl00P9hq5OYG0tWgRt2TiCq4NtxTpbg1Z1Ut42Bd81WcyZkR5eMImjw4tDnKvQsltQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8beeeda4b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
lby2kd27c.com/lv/esnk/1973661/code.js?pid=_cb-1973661_0
62.122.171.6200 OK 129 kB URL GET HTTP/2 lby2kd27c.com/lv/esnk/1973661/code.js?pid=_cb-1973661_0
IP 62.122.171.6:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x250&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint20:95:B0:7A:98:2B:A4:72:3F:CB:B4:39:21:48:5E:69:C8:8C:2F:ED
ValidityWed, 31 May 2023 13:41:31 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type ASCII text, with very long lines (64960)
Size 129 kB (129312 bytes)
Hash 68364a0ac3d46bcc4de58ca183d2aa2e
56cc51f728d1a880f8ccc2ae884a24e2caf2ff15
dd4f0da290c05c52e5c88703d7ee8495e6c14241386c084099d38d5b6052a8dd
GET /lv/esnk/1973661/code.js?pid=_cb-1973661_0 HTTP/1.1
Host: lby2kd27c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: application/javascript
last-modified: Wed, 09 Aug 2023 16:07:35 GMT
vary: Accept-Encoding
etag: W/"64d3b9c7-1f959"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
static.addtoany.com/menu/svg/icons/a2a.js
172.67.39.148200 OK 182 B URL GET HTTP/3 static.addtoany.com/menu/svg/icons/a2a.js
IP 172.67.39.148:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:A5:DB:83:09:73:10:48:06:97:65:2A:D9:27:B7:67:2D:7E:9D:6C
ValidityThu, 04 May 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 4db08a52ad8927bb87884526a96beb94
da541aec9c65b613f83ecfc56cd3c80a3221932a
4172078aeb1306c9c9f454cb78cee31e0d09c25742197e59fa6718c3bb2b4abc
GET /menu/svg/icons/a2a.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fap18.net
DNT: 1
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:18 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
age: 22789338
etag: W/"b6-5edb43f58ee38"
last-modified: Fri, 18 Nov 2022 01:01:36 GMT
vary: Accept-Encoding
via: e2s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7f5d8bfaef60b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
evocdn.net/hb/xvideos/7cc9/c7f1/e0a2/2330/a145/889a/56b9/a3b0/1.jpg
104.26.6.119200 OK 8.1 kB URL GET HTTP/2 evocdn.net/hb/xvideos/7cc9/c7f1/e0a2/2330/a145/889a/56b9/a3b0/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash e2a3ad06ea239b7a8c2ec426844aac35
32946f035234a555c692b8ea785d5760e431d0c4
2f5691f1beb3c9e9fdf36688f1cd22f6deb1a17fe2550e7fb510cd9283f53500
GET /hb/xvideos/7cc9/c7f1/e0a2/2330/a145/889a/56b9/a3b0/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 8067
etag: "e2a3ad06ea239b7a8c2ec426844aac35"
last-modified: Sun, 25 Dec 2022 04:14:47 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QzmIXNz6UC3fJmaIqXLVKuLDFAk6BbBX10ALleDAYW2mX1ey3VJZ4dGPlMejILlrlzuqYVXpsQ9j4AZQViB%2FX691749p%2FA8zCy6l%2BSNrjtlguBRzT0t5imBCkOk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf49d501c16-OSL
X-Firefox-Spdy: h2
fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
172.67.157.205200 OK 1.0 kB URL GET HTTP/3 fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98
IP 172.67.157.205:443
Requested by https://pub.qwerty24.net/mobile
Certificate IssuerGoogle Trust Services LLC
Subjectfap18.net
FingerprintF3:F6:4F:82:8F:F2:39:5B:FB:A0:C1:35:3E:B4:97:FE:AE:B1:C1:68
ValiditySun, 25 Jun 2023 04:11:31 GMT - Sat, 23 Sep 2023 04:11:30 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1060), with no line terminators
Hash da438f0461ace23a86c9fbbaee5c7024
99b545f740d210fc1ba55491ad8944c5cbc8bc4e
fc57f5f33fd39ca3b0f9ceb11f36bf4058d6272751b25bd18ed0e97ef32456c2
GET /ad/show/clickadu/?domain=fap18.net&area=main&size=300x100&v=41daa7f26c4d78e0d59c9fb7d3331d98 HTTP/1.1
Host: fap18.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub.qwerty24.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.2.18
x-header-sub: Master
x-path-proxy: data-admedia
cache-control: max-age=14400
cf-cache-status: HIT
age: 6275
last-modified: Sun, 13 Aug 2023 00:47:42 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gX%2BhR1JYVRaMGvLu4sL1uZ7jE3ljq5i0Ue%2FaCOhGzueQAwHxzEbY%2Fd0XpSOmBwyvHl%2FeFpE5wn%2B%2BwzOIS2XhLy5etgXjz7DoUpx2HTL9ReDDUwTdyDoWUxhTB3o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f5d8bf5ac9dfac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
static.addtoany.com/menu/svg/icons/email.js
172.67.39.148200 OK 393 B URL GET HTTP/3 static.addtoany.com/menu/svg/icons/email.js
IP 172.67.39.148:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:A5:DB:83:09:73:10:48:06:97:65:2A:D9:27:B7:67:2D:7E:9D:6C
ValidityThu, 04 May 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (403), with no line terminators
Hash 4f39c5aca12e3ac6addff8125319e771
c2ff4a322093511de8ca52b082e90f18fc568ac2
c4f323595ba849e1563c9689882372b436cb8b81dce983d8de5698f4b4b5cd46
GET /menu/svg/icons/email.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fap18.net
DNT: 1
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:18 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
age: 22789145
etag: W/"189-5edb43f5e5cd8"
last-modified: Fri, 18 Nov 2022 01:01:36 GMT
vary: Accept-Encoding
via: e4s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7f5d8bfaef5eb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ssl.p.jwpcdn.com/player/v/8.27.1/jwpsrv.js
151.101.130.114200 OK 66 kB URL GET HTTP/2 ssl.p.jwpcdn.com/player/v/8.27.1/jwpsrv.js
IP 151.101.130.114:443
Requested by https://e.xv-cdn.net/?id=68421333
Certificate IssuerGlobalSign nv-sa
Subject*.jwplayer.com
Fingerprint35:5D:BC:19:45:5F:CD:05:73:60:FB:BD:B3:FA:E1:55:3C:3B:25:F0
ValiditySat, 26 Nov 2022 18:00:09 GMT - Thu, 28 Dec 2023 18:00:08 GMT
File type ASCII text, with very long lines (65496)
Hash 33991e5d8ab91e3099e980e873ac383e
f9889ef29897f94551afed42090d9fc98afec261
5d43c598e2818c95943dae6325d770f93f7a2adf383d4df880766c077bfd0380
GET /player/v/8.27.1/jwpsrv.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=900, immutable
last-modified: Wed, 26 Jul 2023 19:06:21 GMT
etag: "33991e5d8ab91e3099e980e873ac383e"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 13 Aug 2023 02:32:19 GMT
via: 1.1 varnish
age: 236
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 36
x-timer: S1691893939.459590,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 19644
X-Firefox-Spdy: h2
static.addtoany.com/menu/page.js
172.67.39.148200 OK 3.1 kB URL GET HTTP/2 static.addtoany.com/menu/page.js
IP 172.67.39.148:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:A5:DB:83:09:73:10:48:06:97:65:2A:D9:27:B7:67:2D:7E:9D:6C
ValidityThu, 04 May 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (3218), with no line terminators
Hash 1951ca33daed8c7a3876863c07acf12b
f1f089cb2edb78d7cfaee1f45fccdcdfaed59ed9
59922c8dc07001f190cc592b1d81db6c3e1fedb394db2426cee71050ea780c30
GET /menu/page.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:16 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=172800
cf-bgj: minify
access-control-allow-origin: *
etag: W/"c09-6027af130ca25"
last-modified: Wed, 09 Aug 2023 10:28:36 GMT
vary: Accept-Encoding
via: e2s
x-content-type-options: nosniff
cf-cache-status: HIT
age: 144180
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7f5d8bf0ff7bb4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.mp4.center/static/xvideos/asset/js/require/skins/min/default.js
172.67.151.22200 OK 0 B URL GET HTTP/3 static.mp4.center/static/xvideos/asset/js/require/skins/min/default.js
IP 172.67.151.22:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerLet's Encrypt
Subjectmp4.center
FingerprintBD:77:73:68:E6:13:B1:C5:9B:A1:4A:05:47:46:D2:FB:79:C6:FD:47
ValidityFri, 30 Jun 2023 09:07:02 GMT - Thu, 28 Sep 2023 09:07:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/xvideos/asset/js/require/skins/min/default.js HTTP/1.1
Host: static.mp4.center
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:16 GMT
content-type: application/javascript
content-length: 0
cf-bgj: minify
etag: "64d0db9e-0"
last-modified: Mon, 07 Aug 2023 11:55:10 GMT
x-header-sub: Master
cache-control: max-age=14400
cf-cache-status: HIT
age: 2267
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NptoACgU82hrg%2BDhFwueEtjhbqOaMSK6WAejzZt21MSDJJESvjhCKTa4Uu0kqOASVsQMn1okolncm2%2BzEdgPoWhAa4wEPLd%2BtHdh3xJu7uMD9GxBW2JK6ud3tT9dwxcPxnN5Og%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf22ab4b51d-OSL
alt-svc: h3=":443"; ma=86400
lby2kd27c.com/lv/esnk/1973661/code.js?pid=_cb-1973661_0
62.122.171.6200 OK 129 kB URL GET HTTP/2 lby2kd27c.com/lv/esnk/1973661/code.js?pid=_cb-1973661_0
IP 62.122.171.6:443
Requested by https://fap18.net/ad/show/clickadu/?domain=fap18.net&area=main&size=300x250&v=41daa7f26c4d78e0d59c9fb7d3331d98
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint20:95:B0:7A:98:2B:A4:72:3F:CB:B4:39:21:48:5E:69:C8:8C:2F:ED
ValidityWed, 31 May 2023 13:41:31 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type ASCII text, with very long lines (64960)
Size 129 kB (129312 bytes)
Hash 68364a0ac3d46bcc4de58ca183d2aa2e
56cc51f728d1a880f8ccc2ae884a24e2caf2ff15
dd4f0da290c05c52e5c88703d7ee8495e6c14241386c084099d38d5b6052a8dd
GET /lv/esnk/1973661/code.js?pid=_cb-1973661_0 HTTP/1.1
Host: lby2kd27c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 13 Aug 2023 02:32:19 GMT
content-type: application/javascript
last-modified: Wed, 09 Aug 2023 16:07:35 GMT
vary: Accept-Encoding
etag: W/"64d3b9c7-1f959"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
evocdn.net/hb/xvideos/2bd8/d077/beff/ba30/2dcc/eafd/195b/948e/1.jpg
104.26.6.119200 OK 8.0 kB URL GET HTTP/2 evocdn.net/hb/xvideos/2bd8/d077/beff/ba30/2dcc/eafd/195b/948e/1.jpg
IP 104.26.6.119:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB0:8A:27:2B:1B:E0:45:98:92:D6:5F:DA:02:E9:85:85:50:4B:69:43
ValidityFri, 23 Sep 2022 00:00:00 GMT - Sat, 23 Sep 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash ef4000a8982e3facfeb5dcf2ffa4cf3b
1a7b219b6b9a5808d22c6a13d26a8d73f99e961d
e2435b6ea8edd97b045ad8f715fc3d2fa3f81a7b15d2ee97e4c5ba0f85d2d12b
GET /hb/xvideos/2bd8/d077/beff/ba30/2dcc/eafd/195b/948e/1.jpg HTTP/1.1
Host: evocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: image/jpeg
content-length: 8027
etag: "ef4000a8982e3facfeb5dcf2ffa4cf3b"
last-modified: Tue, 27 Dec 2022 01:48:29 GMT
x-proxy-hb: Driect.Hb.S3.Wasabi.Cdn
cf-cache-status: MISS
expires: Mon, 12 Aug 2024 02:32:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=23a0McxZxNrsdCoHa0un%2BcKjp4drxebbB3vX7oHA1ii4VVuOyKXfe%2FYvj%2BYrOoiDgXaXZ320am1467F%2FOXM1ddZ7EY1Ki9vIe6p%2B24H0nBbRUxESqPY85Svlx8o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf48d3a1c16-OSL
X-Firefox-Spdy: h2
pub.qwerty24.net/mobile
104.21.31.93200 OK 14 kB IP 104.21.31.93:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerLet's Encrypt
Subjectqwerty24.net
Fingerprint65:05:E1:A0:18:97:CF:EC:97:7C:5A:94:2A:0C:9B:8C:D7:A3:A6:F5
ValidityFri, 30 Jun 2023 04:31:53 GMT - Thu, 28 Sep 2023 04:31:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- C source text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6401), with CRLF, LF line terminators
Hash b411b27f54568d8cbac2880cec48af99
57c8ec31c0b24a4d118dcee4422eaae750351b53
59c277e3e6f836d91236ced4248517bfafae81b3903a1b4920b95ca6b84a0755
GET /mobile HTTP/1.1
Host: pub.qwerty24.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 13 Aug 2023 02:32:16 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.2.18
x-header-sub: Master
cache-control: max-age=2678400
cf-cache-status: HIT
age: 1605510
last-modified: Tue, 25 Jul 2023 12:33:46 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pBAhpGxnWJgZNTn%2FL8hlwS%2B3OHXbuHcBzOFY17zITR4HK9P%2BWSWLQq%2B6b2jN1K2b3nRNOeD4DjDmEOfTDTJR2I2eGfGD8V%2BXR6yNhAMNGvHUxOjzG%2FH1iLL6lCYYkdF4xn8J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bf09c90b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.addtoany.com/menu/sm.24.html
172.67.39.148200 OK 677 B URL GET HTTP/3 static.addtoany.com/menu/sm.24.html
IP 172.67.39.148:443
Requested by https://fap18.net/xid/68421333/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:A5:DB:83:09:73:10:48:06:97:65:2A:D9:27:B7:67:2D:7E:9D:6C
ValidityThu, 04 May 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (700), with no line terminators
Hash cfd119cf6bef57fab6c6d11a41f5551a
479462a99e186c36e68e3fc8f12dd795c65d4366
8460305d50a708748c228ecefae928f9392d4e451b89106021434c989eef106b
GET /menu/sm.24.html HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fap18.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:17 GMT
content-type: text/html; charset=utf-8
last-modified: Fri, 18 Nov 2022 00:47:55 GMT
etag: W/"2a5-5edb40e6d10d8"
cache-control: max-age=315360000, immutable
vary: Accept-Encoding
via: e2s
cf-cache-status: HIT
age: 885327
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7f5d8bf2eb79b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fap18.net/adsites/status.js
172.67.157.205200 OK 0 B URL HEAD HTTP/3 fap18.net/adsites/status.js
IP 172.67.157.205:443
Requested by https://pub.qwerty24.net/one/mobile_top/?domain=fap18.net&area=player&size=300x100
Certificate IssuerGoogle Trust Services LLC
Subjectfap18.net
FingerprintF3:F6:4F:82:8F:F2:39:5B:FB:A0:C1:35:3E:B4:97:FE:AE:B1:C1:68
ValiditySun, 25 Jun 2023 04:11:31 GMT - Sat, 23 Sep 2023 04:11:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /adsites/status.js HTTP/1.1
Host: fap18.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub.qwerty24.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 13 Aug 2023 02:32:18 GMT
content-type: application/javascript
content-length: 19
cf-bgj: minify
cf-polished: origSize=21
etag: "6100e074-15"
last-modified: Wed, 28 Jul 2021 04:43:32 GMT
x-header-sub: Master
x-path-proxy: data-admedia-sites
cache-control: max-age=14400
cf-cache-status: HIT
age: 6206
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dJfNM4FLI%2FlYgp4kYft7Wz4ihl0C9OP%2BRaw%2Bdxgr4rQU6HwY4Gzw4GKsdpKffWQX6i9iGjQMLJGE0hC1T6nUoDBF9K9zglDNRVlowZ0PoC%2B2h4pyUqXKFoYsNeQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f5d8bfeae9bfac0-OSL
alt-svc: h3=":443"; ma=86400