www.googletagmanager.com/gtag/js?id=G-ZKNV2SDJ50
200 OK 80 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-ZKNV2SDJ50
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Hash b5145ac272eea0fb6e1c8903e311fd11
f82f8fe89e47032fbf32a17950a994fce925859a
bc256fee272fcdd2b6396b68469f8778e61afd513cd33371ce497edafdfa9614
GET /gtag/js?id=G-ZKNV2SDJ50 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 23 Nov 2023 06:53:15 GMT
expires: Thu, 23 Nov 2023 06:53:15 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79766
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
vxxx.com/static/css/app.f14d3b65.css
200 OK 16 kB URL GET HTTP/3 vxxx.com/static/css/app.f14d3b65.css
IP
Certificate IssuerLet's Encrypt
Subjectvxxx.com
Fingerprint93:0F:B9:71:36:94:FF:F7:C6:48:22:6C:9B:23:01:95:93:29:E9:C1
ValidityWed, 25 Oct 2023 03:22:46 GMT - Tue, 23 Jan 2024 03:22:45 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1fc73ad03df4cdbd38eaf90a90f5d0d7
33427597de6ad0c4ff834b5a8dddc815a9d7f2d5
ee134d47d2bef1058922a6dfe74935fcf612ad5665cf2be1d8667904c2d4f06e
GET /static/css/app.f14d3b65.css HTTP/1.1
Host: vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:53:15 GMT
content-type: text/css
last-modified: Wed, 22 Nov 2023 13:05:33 GMT
vary: Accept-Encoding
etag: W/"655dfc9d-1ef9e"
expires: Thu, 23 Nov 2023 07:16:02 GMT
cache-control: public, max-age=14400
pragma: public
cf-cache-status: HIT
age: 433
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XJ%2BMrkYlkjXkvl3%2FSQu%2FOujrzLJ3ojNt2c32UzLJjuF8lDEj95nIS9rEpNwvJFEP1%2FDFtOfJwE%2FjQZzdNIKpvwlwg9GXddKCLm%2FkkcL79xrdpDNT2cj0O9ERVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e7cc9564142-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
vxxx.com/static/js/chunk-app-vendors.f58cd4e4.js
200 OK 114 kB URL GET HTTP/3 vxxx.com/static/js/chunk-app-vendors.f58cd4e4.js
IP
Certificate IssuerLet's Encrypt
Subjectvxxx.com
Fingerprint93:0F:B9:71:36:94:FF:F7:C6:48:22:6C:9B:23:01:95:93:29:E9:C1
ValidityWed, 25 Oct 2023 03:22:46 GMT - Tue, 23 Jan 2024 03:22:45 GMT
File type Unicode text, UTF-8 text, with very long lines (29899)
Size 114 kB (113499 bytes)
Hash f3bec9d4a954900dde0018a0cf95b91e
447a14c65ae4bf49d549e4da509ca72dc8f1e10c
0363e4785a58906c69ecf76e2248f0c3050bcef6e4099fb2f279962ea0c486f1
GET /static/js/chunk-app-vendors.f58cd4e4.js HTTP/1.1
Host: vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:53:15 GMT
content-type: application/javascript
last-modified: Wed, 22 Nov 2023 13:05:33 GMT
vary: Accept-Encoding
etag: W/"655dfc9d-507bc"
expires: Thu, 23 Nov 2023 07:16:02 GMT
cache-control: public, max-age=14400
pragma: public
cf-cache-status: HIT
age: 433
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dlwnbMJlSHV6QxAg1pQfnZTGjidli16zkthcw0btJEsupqLiDFiRIsPiPxxqzXHH2432ZksEjZgP7elpBiQIfSeIFq3fFhZu7KEAVNvJn4wnD%2FO7DCqxYERfRw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e7cc9584142-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
vxxx.com/1js75mxd4v/j4e7r3bui2.js
200 OK 149 kB URL GET HTTP/3 vxxx.com/1js75mxd4v/j4e7r3bui2.js
IP
Certificate IssuerLet's Encrypt
Subjectvxxx.com
Fingerprint93:0F:B9:71:36:94:FF:F7:C6:48:22:6C:9B:23:01:95:93:29:E9:C1
ValidityWed, 25 Oct 2023 03:22:46 GMT - Tue, 23 Jan 2024 03:22:45 GMT
File type Unicode text, UTF-8 text, with very long lines (65499), with no line terminators
Size 149 kB (149416 bytes)
Hash f3f501fa3d68d69efadbdc98c113e5d6
689615167aaac75e889c2aca710baf8f80c6451d
adb4cd6881f5b99f529bca92cc3c2296f3b9131647ae83d8ba5e1715c0f465ef
GET /1js75mxd4v/j4e7r3bui2.js HTTP/1.1
Host: vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:53:15 GMT
content-type: application/javascript
last-modified: Thu, 23 Nov 2023 06:02:49 GMT
vary: Accept-Encoding
etag: W/"655eeb09-56b66"
expires: Sat, 23 Dec 2023 06:02:52 GMT
cache-control: public, max-age=2592000
pragma: public
cf-cache-status: HIT
age: 3023
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4lnvbayqjhmk3b3ZF00qeE2NZOHcWGwLsrUYa%2Bm%2BfZlJYCseBX2ou7x8nAzvU6gLc0mdSIbjZciCm9SSTGTJkErVhBttX4zO1l1QKXJoF6ytDS64xW7N3JEodw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e7cb9534142-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
200 OK 17 kB URL User Request GET HTTP/2 IP
Certificate IssuerLet's Encrypt
Subjectvxxx.com
Fingerprint93:0F:B9:71:36:94:FF:F7:C6:48:22:6C:9B:23:01:95:93:29:E9:C1
ValidityWed, 25 Oct 2023 03:22:46 GMT - Tue, 23 Jan 2024 03:22:45 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (48060)
Hash d852ce175bc88710a5d1b7aa9e451830
43cc7e78ca6b9070db01ef71629ef9b684b682ca
06f744b80cb62267a8a1ea874f7471247151356914a6d744fe1a00dbcd627f03
GET / HTTP/1.1
Host: vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.2.26
access-control-allow-origin: *
set-cookie: kt_lang=en; expires=Sun, 17-Nov-2024 06:53:15 GMT; Max-Age=31104000; path=/; domain=.vxxx.com
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FVSKNLsuKBm%2BUInTvLO3sXRkDGwsluVznJyvj%2Bus8YHtfkD%2FvWeflTlP2EFmjHBKbWGmmoPgPAVonz6maxUNcXemH%2F8Ub41aNvzVgtrqkXDeO1HKqEpUGHNEvA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e79d812d188-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vxxx.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 05:05:30 GMT
expires: Fri, 22 Nov 2024 05:05:30 GMT
cache-control: public, max-age=31536000
age: 6466
last-modified: Tue, 02 May 2023 15:17:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
200 OK 23 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vxxx.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 21 Nov 2023 21:36:52 GMT
expires: Wed, 20 Nov 2024 21:36:52 GMT
cache-control: public, max-age=31536000
age: 119784
last-modified: Tue, 02 May 2023 15:07:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-T2E4VLTEEG&l=dataLayer&cx=c
200 OK 81 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-T2E4VLTEEG&l=dataLayer&cx=c
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash 908075149039b400fb24fb651b7678a3
70861d654bdd70dfcc5c8169104263b676298e71
3be24fb639d901e6e036fbd92d0b43d1457e8d4be80c257bb407ac7385ae98ed
GET /gtag/js?id=G-T2E4VLTEEG&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 23 Nov 2023 06:53:16 GMT
expires: Thu, 23 Nov 2023 06:53:16 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81010
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
tn.vxxx.com/contents/videos_screenshots/1377000/1377135/420x236/1.jpg
200 OK 24 kB URL GET HTTP/2 tn.vxxx.com/contents/videos_screenshots/1377000/1377135/420x236/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.vxxx.com
Fingerprint10:E5:E7:B9:1F:67:54:CA:EE:7F:27:99:2A:12:46:E9:78:93:F4:E5
ValidityTue, 14 Nov 2023 03:00:57 GMT - Mon, 12 Feb 2024 03:00:56 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash a67cd329a7fcf542feb1b305c2f57922
86d2b96f7f4fdba897295b0632e6f4b5e2b2602c
fb1be92e08f8c3c3c9cdb9ec1b54954b7a8b01016351aaa4ddb0908bc52e4555
GET /contents/videos_screenshots/1377000/1377135/420x236/1.jpg HTTP/1.1
Host: tn.vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: image/jpeg
content-length: 23454
server: nginx/1.24.0
last-modified: Sat, 28 Oct 2023 06:18:16 GMT
etag: "653ca7a8-5b9e"
cache-control: max-age=7776000
expires: Wed, 21 Feb 2024 06:53:17 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vxxx.com/contents/videos_screenshots/1361000/1361041/420x236/1.jpg
200 OK 20 kB URL GET HTTP/2 tn.vxxx.com/contents/videos_screenshots/1361000/1361041/420x236/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.vxxx.com
Fingerprint10:E5:E7:B9:1F:67:54:CA:EE:7F:27:99:2A:12:46:E9:78:93:F4:E5
ValidityTue, 14 Nov 2023 03:00:57 GMT - Mon, 12 Feb 2024 03:00:56 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 4395b7c7aa0067096d05481baa164183
bde3a07c2eb738097068b03821019d8091144078
65a7c6a3350399382c7187e7a0dcdc45e90d51c2af99e8a9f4a982a9b623f9db
GET /contents/videos_screenshots/1361000/1361041/420x236/1.jpg HTTP/1.1
Host: tn.vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: image/jpeg
content-length: 20439
server: nginx/1.24.0
last-modified: Wed, 25 Oct 2023 11:02:57 GMT
etag: "6538f5e1-4fd7"
cache-control: max-age=7776000
expires: Wed, 21 Feb 2024 06:53:17 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vxxx.com/contents/videos_screenshots/1433000/1433137/420x236/1.jpg
200 OK 30 kB URL GET HTTP/2 tn.vxxx.com/contents/videos_screenshots/1433000/1433137/420x236/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.vxxx.com
Fingerprint10:E5:E7:B9:1F:67:54:CA:EE:7F:27:99:2A:12:46:E9:78:93:F4:E5
ValidityTue, 14 Nov 2023 03:00:57 GMT - Mon, 12 Feb 2024 03:00:56 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 1de2350f3abca0aa9396eb9f4ee5d2aa
0b750fa0086cf99e2a7faf6921b9db64bd8db941
796b4441c1bc05ecbdcc582c1250ae35c42ff19d4616f6715fee5872f7161d4f
GET /contents/videos_screenshots/1433000/1433137/420x236/1.jpg HTTP/1.1
Host: tn.vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: image/jpeg
content-length: 30252
server: nginx/1.24.0
last-modified: Wed, 22 Nov 2023 00:59:17 GMT
etag: "655d5265-762c"
cache-control: max-age=7776000
expires: Wed, 21 Feb 2024 06:53:17 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vxxx.com/contents/videos_screenshots/1370000/1370831/420x236/1.jpg
200 OK 29 kB URL GET HTTP/2 tn.vxxx.com/contents/videos_screenshots/1370000/1370831/420x236/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.vxxx.com
Fingerprint10:E5:E7:B9:1F:67:54:CA:EE:7F:27:99:2A:12:46:E9:78:93:F4:E5
ValidityTue, 14 Nov 2023 03:00:57 GMT - Mon, 12 Feb 2024 03:00:56 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 9bcd9bb34b7d7acbce0c218f49cbd658
4d2a68e12d992a4a170a64ff27b51897ead1fdf0
9ee2bcbc61f4bf34454a500ccbdad5f7ef8d8c290b3f50d569b713537cf39b98
GET /contents/videos_screenshots/1370000/1370831/420x236/1.jpg HTTP/1.1
Host: tn.vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: image/jpeg
content-length: 28796
server: nginx/1.24.0
last-modified: Fri, 27 Oct 2023 05:55:14 GMT
etag: "653b50c2-707c"
cache-control: max-age=7776000
expires: Wed, 21 Feb 2024 06:53:17 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vxxx.com/contents/videos_screenshots/1378000/1378815/420x236/1.jpg
200 OK 20 kB URL GET HTTP/2 tn.vxxx.com/contents/videos_screenshots/1378000/1378815/420x236/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.vxxx.com
Fingerprint10:E5:E7:B9:1F:67:54:CA:EE:7F:27:99:2A:12:46:E9:78:93:F4:E5
ValidityTue, 14 Nov 2023 03:00:57 GMT - Mon, 12 Feb 2024 03:00:56 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash ef30b14024d5f8482d1daccef77bdd6a
5bb865dfcc9e28d4ce18ffb80c16f3991d81a12b
cbed84490962fc2ea27217346e4df7b032060ffe9c22ec0e4578e430096656d5
GET /contents/videos_screenshots/1378000/1378815/420x236/1.jpg HTTP/1.1
Host: tn.vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: image/jpeg
content-length: 20086
server: nginx/1.24.0
last-modified: Sat, 28 Oct 2023 13:22:51 GMT
etag: "653d0b2b-4e76"
cache-control: max-age=7776000
expires: Wed, 21 Feb 2024 06:53:17 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vxxx.com/contents/videos_screenshots/1382000/1382553/420x236/1.jpg
200 OK 25 kB URL GET HTTP/2 tn.vxxx.com/contents/videos_screenshots/1382000/1382553/420x236/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.vxxx.com
Fingerprint10:E5:E7:B9:1F:67:54:CA:EE:7F:27:99:2A:12:46:E9:78:93:F4:E5
ValidityTue, 14 Nov 2023 03:00:57 GMT - Mon, 12 Feb 2024 03:00:56 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 148e47892b0fb2dd18f9d8da11af7b3f
e028261b651ba49e8174e9cbf34a1b5c8a6d83e2
9a2ebfd6323af3e53c3c2b4d0561a74a572cce346ee6b6fc284754d4c8c1b79a
GET /contents/videos_screenshots/1382000/1382553/420x236/1.jpg HTTP/1.1
Host: tn.vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: image/jpeg
content-length: 24592
server: nginx/1.24.0
last-modified: Sun, 29 Oct 2023 04:43:42 GMT
etag: "653de2fe-6010"
cache-control: max-age=7776000
expires: Wed, 21 Feb 2024 06:53:17 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vxxx.com/contents/videos_screenshots/1412000/1412329/420x236/1.jpg
200 OK 13 kB URL GET HTTP/2 tn.vxxx.com/contents/videos_screenshots/1412000/1412329/420x236/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.vxxx.com
Fingerprint10:E5:E7:B9:1F:67:54:CA:EE:7F:27:99:2A:12:46:E9:78:93:F4:E5
ValidityTue, 14 Nov 2023 03:00:57 GMT - Mon, 12 Feb 2024 03:00:56 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash d0c2492bfd98054cd648ac017b028073
9fefb2ee7cfb5db81053e58e4d891823204c5b77
af8ebfd792380be0067b96989f4ed94a6fdf987f82cc17eacab9b0fb43aff56e
GET /contents/videos_screenshots/1412000/1412329/420x236/1.jpg HTTP/1.1
Host: tn.vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: image/jpeg
content-length: 13076
server: nginx/1.24.0
last-modified: Fri, 10 Nov 2023 01:41:08 GMT
etag: "654d8a34-3314"
cache-control: max-age=7776000
expires: Wed, 21 Feb 2024 06:53:17 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vxxx.com/contents/videos_screenshots/1427000/1427203/420x236/1.jpg
200 OK 33 kB URL GET HTTP/2 tn.vxxx.com/contents/videos_screenshots/1427000/1427203/420x236/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.vxxx.com
Fingerprint10:E5:E7:B9:1F:67:54:CA:EE:7F:27:99:2A:12:46:E9:78:93:F4:E5
ValidityTue, 14 Nov 2023 03:00:57 GMT - Mon, 12 Feb 2024 03:00:56 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 46a739937bf9b7fffd9f334e5ea96163
7f9c4f19e9551e9f9a37d98d347788cca567cc16
4e92fda81cebbc0d1bc3e95c92599a8eaedf61a5cfbe0658ab66c6699768bd96
GET /contents/videos_screenshots/1427000/1427203/420x236/1.jpg HTTP/1.1
Host: tn.vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: image/jpeg
content-length: 33002
server: nginx/1.24.0
last-modified: Sun, 19 Nov 2023 17:27:24 GMT
etag: "655a457c-80ea"
cache-control: max-age=7776000
expires: Wed, 21 Feb 2024 06:53:17 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vxxx.com/contents/videos_screenshots/1411000/1411595/420x236/1.jpg
200 OK 14 kB URL GET HTTP/2 tn.vxxx.com/contents/videos_screenshots/1411000/1411595/420x236/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.vxxx.com
Fingerprint10:E5:E7:B9:1F:67:54:CA:EE:7F:27:99:2A:12:46:E9:78:93:F4:E5
ValidityTue, 14 Nov 2023 03:00:57 GMT - Mon, 12 Feb 2024 03:00:56 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 818c4681fc0a0919eb3972611b86db72
2dfa7442d37d0aa9d6247948fb2a95f5f1d418a2
3a6b233834ebc59344525ee9e40de6f441d242dcffa44654c7f0e6a5f9aba0a5
GET /contents/videos_screenshots/1411000/1411595/420x236/1.jpg HTTP/1.1
Host: tn.vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: image/jpeg
content-length: 14520
server: nginx/1.24.0
last-modified: Thu, 09 Nov 2023 23:11:36 GMT
etag: "654d6728-38b8"
cache-control: max-age=7776000
expires: Wed, 21 Feb 2024 06:53:17 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vxxx.com/contents/videos_screenshots/1427000/1427467/420x236/1.jpg
200 OK 20 kB URL GET HTTP/2 tn.vxxx.com/contents/videos_screenshots/1427000/1427467/420x236/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.vxxx.com
Fingerprint10:E5:E7:B9:1F:67:54:CA:EE:7F:27:99:2A:12:46:E9:78:93:F4:E5
ValidityTue, 14 Nov 2023 03:00:57 GMT - Mon, 12 Feb 2024 03:00:56 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 31e3982630fac03cc6e18572bf9e1708
90cb80c7a49939002e0b830497a3eddb7f598bb1
fd93ada256b56f584fb7fd27fdf1baddabe15c04e1a721b7d37df3bdb06e65b1
GET /contents/videos_screenshots/1427000/1427467/420x236/1.jpg HTTP/1.1
Host: tn.vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: image/jpeg
content-length: 20229
server: nginx/1.24.0
last-modified: Sun, 19 Nov 2023 20:17:25 GMT
etag: "655a6d55-4f05"
cache-control: max-age=7776000
expires: Wed, 21 Feb 2024 06:53:17 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vxxx.com/contents/videos_screenshots/1404000/1404065/420x236/1.jpg
200 OK 16 kB URL GET HTTP/2 tn.vxxx.com/contents/videos_screenshots/1404000/1404065/420x236/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.vxxx.com
Fingerprint10:E5:E7:B9:1F:67:54:CA:EE:7F:27:99:2A:12:46:E9:78:93:F4:E5
ValidityTue, 14 Nov 2023 03:00:57 GMT - Mon, 12 Feb 2024 03:00:56 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 7f83f86029e29382ba3031f5e969ada3
b4d7a1e5bbdcc1d15c65b5e9de6c02e387477982
01f2e5c0a7e97b4eff1c5d16827c83d5fea3a8305f1eecb47122e1ddfbf1022a
GET /contents/videos_screenshots/1404000/1404065/420x236/1.jpg HTTP/1.1
Host: tn.vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: image/jpeg
content-length: 15647
server: nginx/1.24.0
last-modified: Thu, 02 Nov 2023 08:56:05 GMT
etag: "65436425-3d1f"
cache-control: max-age=7776000
expires: Wed, 21 Feb 2024 06:53:17 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vxxx.com/contents/videos_screenshots/1379000/1379071/420x236/1.jpg
200 OK 36 kB URL GET HTTP/2 tn.vxxx.com/contents/videos_screenshots/1379000/1379071/420x236/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.vxxx.com
Fingerprint10:E5:E7:B9:1F:67:54:CA:EE:7F:27:99:2A:12:46:E9:78:93:F4:E5
ValidityTue, 14 Nov 2023 03:00:57 GMT - Mon, 12 Feb 2024 03:00:56 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 1e8be08b063eb76adf7a5baddd75210b
259851aee00cd01e1f06dd39a72fb855b234edef
0cd9a4291aa986e47cc5f09fa5dc7c2012cb75524cebd57730fee6b76f398d2f
GET /contents/videos_screenshots/1379000/1379071/420x236/1.jpg HTTP/1.1
Host: tn.vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: image/jpeg
content-length: 36412
server: nginx/1.24.0
last-modified: Sat, 28 Oct 2023 14:09:14 GMT
etag: "653d160a-8e3c"
cache-control: max-age=7776000
expires: Wed, 21 Feb 2024 06:53:17 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vxxx.com/contents/videos_screenshots/1397000/1397997/420x236/1.jpg
200 OK 21 kB URL GET HTTP/2 tn.vxxx.com/contents/videos_screenshots/1397000/1397997/420x236/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.vxxx.com
Fingerprint10:E5:E7:B9:1F:67:54:CA:EE:7F:27:99:2A:12:46:E9:78:93:F4:E5
ValidityTue, 14 Nov 2023 03:00:57 GMT - Mon, 12 Feb 2024 03:00:56 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash b51593e3bd952d7b80d44fdd1eccfffd
2e57bdcb41212c92449a6cc9648d3bfbe69fd260
f70ac5650919379cfb382c63b023ffdb65396747e289742474e1782903d023cb
GET /contents/videos_screenshots/1397000/1397997/420x236/1.jpg HTTP/1.1
Host: tn.vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: image/jpeg
content-length: 21106
server: nginx/1.24.0
last-modified: Wed, 01 Nov 2023 01:16:34 GMT
etag: "6541a6f2-5272"
cache-control: max-age=7776000
expires: Wed, 21 Feb 2024 06:53:17 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vxxx.com/contents/videos_screenshots/1408000/1408789/420x236/1.jpg
200 OK 34 kB URL GET HTTP/2 tn.vxxx.com/contents/videos_screenshots/1408000/1408789/420x236/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.vxxx.com
Fingerprint10:E5:E7:B9:1F:67:54:CA:EE:7F:27:99:2A:12:46:E9:78:93:F4:E5
ValidityTue, 14 Nov 2023 03:00:57 GMT - Mon, 12 Feb 2024 03:00:56 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 16fc37b500033eb94d2310501b8443a7
082c1a27d791720440a1558cc1693d000b34485d
fbde4f5d112e7d02d4b11cf8c880c94c8b06a2a8ea187fe8342334e9a89a6fd9
GET /contents/videos_screenshots/1408000/1408789/420x236/1.jpg HTTP/1.1
Host: tn.vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: image/jpeg
content-length: 34417
server: nginx/1.24.0
last-modified: Thu, 09 Nov 2023 07:25:39 GMT
etag: "654c8973-8671"
cache-control: max-age=7776000
expires: Wed, 21 Feb 2024 06:53:17 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
vxxx.com/loystoness/pineapple7.10.13.c6869e00279afd2abde2d080bac7bb98.js
200 OK 78 kB URL GET HTTP/3 vxxx.com/loystoness/pineapple7.10.13.c6869e00279afd2abde2d080bac7bb98.js
IP
Certificate IssuerLet's Encrypt
Subjectvxxx.com
Fingerprint93:0F:B9:71:36:94:FF:F7:C6:48:22:6C:9B:23:01:95:93:29:E9:C1
ValidityWed, 25 Oct 2023 03:22:46 GMT - Tue, 23 Jan 2024 03:22:45 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 2e9cf7895c79c8baef234a6c09e647f7
eab98ee76c21299cdf6023bd54cd3bd7398d85ca
1fa4722719ce78ee127061047a9cfb2d41d7b86aba4c2680f7a7cad81d58448c
GET /loystoness/pineapple7.10.13.c6869e00279afd2abde2d080bac7bb98.js HTTP/1.1
Host: vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:53:15 GMT
content-type: application/javascript
last-modified: Wed, 25 Oct 2023 08:59:53 GMT
vary: Accept-Encoding
etag: W/"6538d909-26356"
expires: Thu, 30 Nov 2023 05:50:43 GMT
cache-control: public, max-age=2592000
pragma: public
cf-cache-status: HIT
age: 1990952
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6btNobJSR9yGUK39hCF%2FOwAIeELAshH4kr8MyDxdTZgleymQRvS5qAyfBSdC3xYrT2wYA08omuBIcweACkHc2dHlHm41g8s8P%2FbhmpbUtjiTIXsUZp8AaVK84Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e7cb9494142-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
tn.vxxx.com/contents/videos_screenshots/1398000/1398437/420x236/1.jpg
200 OK 29 kB URL GET HTTP/2 tn.vxxx.com/contents/videos_screenshots/1398000/1398437/420x236/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.vxxx.com
Fingerprint10:E5:E7:B9:1F:67:54:CA:EE:7F:27:99:2A:12:46:E9:78:93:F4:E5
ValidityTue, 14 Nov 2023 03:00:57 GMT - Mon, 12 Feb 2024 03:00:56 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash c884f6bfbdd7ec3820f0b11a153ef6d6
54bb5c2792f6cb813d8671b61baef6fa8f430a79
3164eb1b0210bfb021f5528b9bd1a635ab0d31bb8cb1ad7fd9137b0a48533fdb
GET /contents/videos_screenshots/1398000/1398437/420x236/1.jpg HTTP/1.1
Host: tn.vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: image/jpeg
content-length: 29003
server: nginx/1.24.0
last-modified: Wed, 01 Nov 2023 03:51:19 GMT
etag: "6541cb37-714b"
cache-control: max-age=7776000
expires: Wed, 21 Feb 2024 06:53:17 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vxxx.com/contents/videos_screenshots/1406000/1406125/420x236/1.jpg
200 OK 35 kB URL GET HTTP/2 tn.vxxx.com/contents/videos_screenshots/1406000/1406125/420x236/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.vxxx.com
Fingerprint10:E5:E7:B9:1F:67:54:CA:EE:7F:27:99:2A:12:46:E9:78:93:F4:E5
ValidityTue, 14 Nov 2023 03:00:57 GMT - Mon, 12 Feb 2024 03:00:56 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 0f020806fc334dc0b2fb537e570bc269
929f6b72003f3ebc23beeab15091fc86a21bd36e
a0272b6062894e3d1a67c18400ba34be143f17dae047b9119de3d09ba27bed7a
GET /contents/videos_screenshots/1406000/1406125/420x236/1.jpg HTTP/1.1
Host: tn.vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: image/jpeg
content-length: 34926
server: nginx/1.24.0
last-modified: Wed, 08 Nov 2023 16:02:21 GMT
etag: "654bb10d-886e"
cache-control: max-age=7776000
expires: Wed, 21 Feb 2024 06:53:17 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vxxx.com/contents/videos_screenshots/1362000/1362997/420x236/1.jpg
200 OK 16 kB URL GET HTTP/2 tn.vxxx.com/contents/videos_screenshots/1362000/1362997/420x236/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.vxxx.com
Fingerprint10:E5:E7:B9:1F:67:54:CA:EE:7F:27:99:2A:12:46:E9:78:93:F4:E5
ValidityTue, 14 Nov 2023 03:00:57 GMT - Mon, 12 Feb 2024 03:00:56 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash bc6300295aa86fc18c502289b36e0c55
86051d239be69eefc30d703f5ff3447c7ec256af
46b96a4d241afbdb9113b20ecee880fced9bb8a93ab0e43444ad7da1298920d8
GET /contents/videos_screenshots/1362000/1362997/420x236/1.jpg HTTP/1.1
Host: tn.vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: image/jpeg
content-length: 16297
server: nginx/1.24.0
last-modified: Wed, 25 Oct 2023 18:56:48 GMT
etag: "653964f0-3fa9"
cache-control: max-age=7776000
expires: Wed, 21 Feb 2024 06:53:17 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vxxx.com/contents/videos_screenshots/1422000/1422985/420x236/1.jpg
200 OK 22 kB URL GET HTTP/2 tn.vxxx.com/contents/videos_screenshots/1422000/1422985/420x236/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.vxxx.com
Fingerprint10:E5:E7:B9:1F:67:54:CA:EE:7F:27:99:2A:12:46:E9:78:93:F4:E5
ValidityTue, 14 Nov 2023 03:00:57 GMT - Mon, 12 Feb 2024 03:00:56 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash cbc2ee421d2fa959db075f04c53bfb4a
0e42b36aeeebdfdc31c93bb6465ca8ca2ed1b434
c75faff09e09e1346ae1896d5fb05c0f0b217cb19425bfbf7dfdfada9006851f
GET /contents/videos_screenshots/1422000/1422985/420x236/1.jpg HTTP/1.1
Host: tn.vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: image/jpeg
content-length: 21460
server: nginx/1.24.0
last-modified: Thu, 16 Nov 2023 01:19:43 GMT
etag: "65556e2f-53d4"
cache-control: max-age=7776000
expires: Wed, 21 Feb 2024 06:53:17 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vxxx.com/contents/videos_screenshots/1369000/1369187/420x236/1.jpg
200 OK 24 kB URL GET HTTP/2 tn.vxxx.com/contents/videos_screenshots/1369000/1369187/420x236/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.vxxx.com
Fingerprint10:E5:E7:B9:1F:67:54:CA:EE:7F:27:99:2A:12:46:E9:78:93:F4:E5
ValidityTue, 14 Nov 2023 03:00:57 GMT - Mon, 12 Feb 2024 03:00:56 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 59cdf4a6b004729958888d6aec69eb5c
697f835d7540d65e237da19ce8316508dcdc2e74
c1d9808a5730ef17d7530ca19ce5ea2188495bc55eda8b203053bd5167bdaca6
GET /contents/videos_screenshots/1369000/1369187/420x236/1.jpg HTTP/1.1
Host: tn.vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: image/jpeg
content-length: 24364
server: nginx/1.24.0
last-modified: Thu, 26 Oct 2023 22:45:48 GMT
etag: "653aec1c-5f2c"
cache-control: max-age=7776000
expires: Wed, 21 Feb 2024 06:53:17 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
storage.multstorage.com/log/count.html
200 OK 893 B URL GET HTTP/2 storage.multstorage.com/log/count.html
IP
Certificate IssuerGoogle Trust Services LLC
Subjectmultstorage.com
Fingerprint1F:90:8C:BB:6B:B0:99:41:3A:23:DF:A4:57:1A:25:0F:88:BA:C6:DE
ValidityMon, 20 Nov 2023 10:07:51 GMT - Sun, 18 Feb 2024 10:07:50 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (700)
Hash b728ca9cd183d1b7c3f72116b19b22a3
c1fd73f6b02cf00b8bc60b09cc99495e8494b739
8a7b1ca4bbf273b32ea865d4785a1944d1b2b133678d9b5fe7ee0406f6fd64b2
GET /log/count.html HTTP/1.1
Host: storage.multstorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: text/html
last-modified: Mon, 18 Sep 2023 14:39:06 GMT
vary: Accept-Encoding
x-request-id: bbbc8022de31f01b2875335b113a1b7b
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YL2J6DlzvmlsGPXzqP1zgiGet6vEPbXz2WylgFCKFuPkoqEmnA5OsmvAfp6Opq2nBMRxt7he4NRayUN5ZP9giSJX8NRE5xdjRx4sL9zf%2FV%2FBLNc1NnjdqI6tWb1EblBCKED6n7AR2kFIdw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e899cbd6431-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=127
204 No Content 0 B URL OPTIONS HTTP/1.1 fp.metricswpsh.com/fp?tag_id=127
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
Fingerprint0D:7A:7C:53:DB:15:35:28:E9:E6:2B:90:43:BB:EF:E5:AB:BE:DA:E3
ValidityThu, 09 Nov 2023 09:29:43 GMT - Wed, 07 Feb 2024 09:29:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=127 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://vxxx.com/
Origin: https://vxxx.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Thu, 23 Nov 2023 06:53:17 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://vxxx.com
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
ntvpforever.com/keywords
200 OK 0 B IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
Fingerprint0D:7A:7C:53:DB:15:35:28:E9:E6:2B:90:43:BB:EF:E5:AB:BE:DA:E3
ValidityThu, 09 Nov 2023 09:29:43 GMT - Wed, 07 Feb 2024 09:29:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /keywords HTTP/1.1
Host: ntvpforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://vxxx.com/
Origin: https://vxxx.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.18.0
date: Thu, 23 Nov 2023 06:53:17 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
vast.yomeno.xyz/prepare
204 No Content 0 B IP
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint7D:BB:AE:A0:E1:1D:A7:E1:A9:D2:A6:5C:78:E2:41:83:8E:DA:4C:59
ValidityMon, 25 Sep 2023 03:11:03 GMT - Sun, 24 Dec 2023 03:11:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://vxxx.com/
Origin: https://vxxx.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Thu, 23 Nov 2023 06:53:17 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://vxxx.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
content-type: text/plain; charset=utf-8
content-length: 0
X-Firefox-Spdy: h2
vxxx.com/static//static/images/favicons/favicon-16x16.png?v=4
301 Moved Permanently 169 B URL GET HTTP/3 vxxx.com/static//static/images/favicons/favicon-16x16.png?v=4
IP
Certificate IssuerLet's Encrypt
Subjectvxxx.com
Fingerprint93:0F:B9:71:36:94:FF:F7:C6:48:22:6C:9B:23:01:95:93:29:E9:C1
ValidityWed, 25 Oct 2023 03:22:46 GMT - Tue, 23 Jan 2024 03:22:45 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 5584cd241a762d7a7488f14d5409293c
a88c6560e46f39dca33a1bbbc74c319e89adfe2a
56fd937f2948b7fc1b223fc1da61e781a93f6b4c74cfd88e1115bb74418c7dff
GET /static//static/images/favicons/favicon-16x16.png?v=4 HTTP/1.1
Host: vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 301 Moved Permanently
date: Thu, 23 Nov 2023 06:53:16 GMT
content-type: text/html
location: https://vxxx.com/mobile_page-404/
cache-control: max-age=14400
cf-cache-status: HIT
age: 1157
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TgM2usYBcsFA%2BeVA%2Fsck3I2iwB5XHZEUugqMd%2FrvUl5ltFwj4Zh7luFyvRLau8Kb9E%2FuDDBRW7tK9HBesH1vdWTItTHk3wG5R9pndhu2Cf38qov2R9Ps5TA2Cw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77e83c8254142-LHR
alt-svc: h3=":443"; ma=86400
ntvpforever.com/keywords
200 OK 32 B IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
Fingerprint0D:7A:7C:53:DB:15:35:28:E9:E6:2B:90:43:BB:EF:E5:AB:BE:DA:E3
ValidityThu, 09 Nov 2023 09:29:43 GMT - Wed, 07 Feb 2024 09:29:42 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 1451d025db2f06a0bbad555a7c72dea2
d27ebd0036604007c13474c41ed804078fbf7447
6ec2b1740da23b36e673f3afbf501ccbe69957d33355b0b79dbf7692f4d88ddc
POST /keywords HTTP/1.1
Host: ntvpforever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 276
Origin: https://vxxx.com
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: application/json
content-length: 32
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
vxxx.com/api/json/videos2/86400/str/latest-updates/20/top-country.no.1....json
200 OK 8.2 kB URL GET HTTP/3 vxxx.com/api/json/videos2/86400/str/latest-updates/20/top-country.no.1....json
IP
Certificate IssuerLet's Encrypt
Subjectvxxx.com
Fingerprint93:0F:B9:71:36:94:FF:F7:C6:48:22:6C:9B:23:01:95:93:29:E9:C1
ValidityWed, 25 Oct 2023 03:22:46 GMT - Tue, 23 Jan 2024 03:22:45 GMT
File type JSON data\012- , ASCII text, with very long lines (36440), with no line terminators
Hash 2d79429e0a676d72d23f14fa8329a16d
ddfb01ea81cba132c93405234c471975885ddb9c
e684712e0d8fcc145e226fa7a0ed3ca10b9a480c724500003d14054382cb8efb
GET /api/json/videos2/86400/str/latest-updates/20/top-country.no.1....json HTTP/1.1
Host: vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:53:16 GMT
content-type: application/json
last-modified: Wed, 22 Nov 2023 21:31:39 GMT
vary: Accept-Encoding
etag: W/"655e733b-8e58"
expires: Thu, 23 Nov 2023 06:58:16 GMT
cache-control: max-age=300
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PsJCoskP1PE3zQLCbqbL4rx19QKDVelAa0Dq3zMU13yaaPjtpA0XauCDiaxLykSTrurCarhjwUN%2Fj87mbbDifedRfCqbXp3recK2eaQ9fgFIyE1LS8HNZSatyg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e829ed54142-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
vast.yomeno.xyz/prepare
204 No Content 0 B IP
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint7D:BB:AE:A0:E1:1D:A7:E1:A9:D2:A6:5C:78:E2:41:83:8E:DA:4C:59
ValidityMon, 25 Sep 2023 03:11:03 GMT - Sun, 24 Dec 2023 03:11:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 878
Origin: https://vxxx.com
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx/1.20.1
date: Thu, 23 Nov 2023 06:53:17 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://vxxx.com
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
magapab.com/get?go=1&data=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
200 OK 1.3 kB URL GET HTTP/2 magapab.com/get?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint95:34:E5:C6:3C:8C:8F:5D:19:0D:6B:41:72:00:76:73:85:86:B3:E5
ValidityFri, 17 Nov 2023 12:45:58 GMT - Thu, 15 Feb 2024 12:45:57 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1463)
Hash db2785b70723d72b1c1f7ee7efe5826d
fbf58f3f4a5c8faa2f904ae7ab8492db6c444664
92c76414b7b818c14260576a52bf1d92f002599a498ad7703b3d5d24d70a64c1
GET /get?go=1&data=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 HTTP/1.1
Host: magapab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 23 Nov 2023 06:53:18 GMT
content-type: text/html
content-length: 1252
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: br
X-Firefox-Spdy: h2
magapab.com/get?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MzEyNjAsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQxODcxNDYsImFkX3RhZ3MiOiJTdHJhaWdodCwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwicmVmcmVzaCI6MSwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6MzEyNjAsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjgsInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1NiwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjpmYWxzZX0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH0sIm1ldHJpY3MiOnsidG9waWNzIjpbXX19XSwic2l0ZSI6eyJpZCI6IjMxMjYwIiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL3Z4eHguY29tLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI0Y2I3MjU2NjBjNDMwMzFlM2IwNmM3NTg5MmQ5NmM1YSIsImZwIjpudWxsLCJmcF9zdHIiOiIiLCJ1YV9kYXRhIjpudWxsfSwiZXh0Ijp7ImR0IjoxNzAwNzIyNDAwMjA4fX0=
200 OK 1.2 kB URL GET HTTP/2 magapab.com/get?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MzEyNjAsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQxODcxNDYsImFkX3RhZ3MiOiJTdHJhaWdodCwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwicmVmcmVzaCI6MSwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6MzEyNjAsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjgsInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1NiwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjpmYWxzZX0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH0sIm1ldHJpY3MiOnsidG9waWNzIjpbXX19XSwic2l0ZSI6eyJpZCI6IjMxMjYwIiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL3Z4eHguY29tLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI0Y2I3MjU2NjBjNDMwMzFlM2IwNmM3NTg5MmQ5NmM1YSIsImZwIjpudWxsLCJmcF9zdHIiOiIiLCJ1YV9kYXRhIjpudWxsfSwiZXh0Ijp7ImR0IjoxNzAwNzIyNDAwMjA4fX0=
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint95:34:E5:C6:3C:8C:8F:5D:19:0D:6B:41:72:00:76:73:85:86:B3:E5
ValidityFri, 17 Nov 2023 12:45:58 GMT - Thu, 15 Feb 2024 12:45:57 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1471)
Hash f2598b155731af1c2afebf56b92a7a33
6da0891a335aaee61e2c67f0540bda6672d1c370
76fd76c04f7ec2b5a5d7cd73f15573d13483f052494ba5f7defe8e5da51bfb58
GET /get?go=1&data=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 HTTP/1.1
Host: magapab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 23 Nov 2023 06:53:18 GMT
content-type: text/html
content-length: 1237
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: br
X-Firefox-Spdy: h2
magapab.com/banner/in/show/?mid=3036865286347574901&pid=0&site=31262&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vxxx.com&hostname=auc-banner-hz-3&site_id=0&spot_id=31262&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=default&iabcat=IAB25&min_cpm=0.00236&placement_type_id=8&skin_test=&verify_hash=&score=7.063223530066132&ml=&tag_ab=b&v2=0&ttl=&space_id=31262&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31262%26source%3D0%26idzone%3D4187150%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31262%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D31262%26p%3Dhttps%253A%252F%252Fvxxx.com%252F%26katds_labels%3D%26btype%3D0%26score%3D7.063223530066132%26bf%3D0.00236&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.00236&label_ids=&site_id64=0&container=ClickadillaTuple&original_bid_usd=0&comeback=&topics=&o_d=&ectr=0
302 Found 0 B URL GET HTTP/2 magapab.com/banner/in/show/?mid=3036865286347574901&pid=0&site=31262&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vxxx.com&hostname=auc-banner-hz-3&site_id=0&spot_id=31262&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=default&iabcat=IAB25&min_cpm=0.00236&placement_type_id=8&skin_test=&verify_hash=&score=7.063223530066132&ml=&tag_ab=b&v2=0&ttl=&space_id=31262&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31262%26source%3D0%26idzone%3D4187150%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31262%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D31262%26p%3Dhttps%253A%252F%252Fvxxx.com%252F%26katds_labels%3D%26btype%3D0%26score%3D7.063223530066132%26bf%3D0.00236&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.00236&label_ids=&site_id64=0&container=ClickadillaTuple&original_bid_usd=0&comeback=&topics=&o_d=&ectr=0
IP
ASN #24940 Hetzner Online GmbH
Requested by https://magapab.com/get?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MzEyNjIsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQxODcxNTAsImFkX3RhZ3MiOiJTdHJhaWdodCwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwicmVmcmVzaCI6MSwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6MzEyNjIsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjgsInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1NiwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjpmYWxzZX0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH0sIm1ldHJpY3MiOnsidG9waWNzIjpbXX19XSwic2l0ZSI6eyJpZCI6IjMxMjYyIiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL3Z4eHguY29tLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI0Y2I3MjU2NjBjNDMwMzFlM2IwNmM3NTg5MmQ5NmM1YSIsImZwIjpudWxsLCJmcF9zdHIiOiIiLCJ1YV9kYXRhIjpudWxsfSwiZXh0Ijp7ImR0IjoxNzAwNzIyNDAwMjI0fX0=
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint95:34:E5:C6:3C:8C:8F:5D:19:0D:6B:41:72:00:76:73:85:86:B3:E5
ValidityFri, 17 Nov 2023 12:45:58 GMT - Thu, 15 Feb 2024 12:45:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=3036865286347574901&pid=0&site=31262&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vxxx.com&hostname=auc-banner-hz-3&site_id=0&spot_id=31262&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=default&iabcat=IAB25&min_cpm=0.00236&placement_type_id=8&skin_test=&verify_hash=&score=7.063223530066132&ml=&tag_ab=b&v2=0&ttl=&space_id=31262&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31262%26source%3D0%26idzone%3D4187150%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31262%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D31262%26p%3Dhttps%253A%252F%252Fvxxx.com%252F%26katds_labels%3D%26btype%3D0%26score%3D7.063223530066132%26bf%3D0.00236&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.00236&label_ids=&site_id64=0&container=ClickadillaTuple&original_bid_usd=0&comeback=&topics=&o_d=&ectr=0 HTTP/1.1
Host: magapab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magapab.com/get?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MzEyNjIsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQxODcxNTAsImFkX3RhZ3MiOiJTdHJhaWdodCwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwicmVmcmVzaCI6MSwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6MzEyNjIsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjgsInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1NiwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjpmYWxzZX0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH0sIm1ldHJpY3MiOnsidG9waWNzIjpbXX19XSwic2l0ZSI6eyJpZCI6IjMxMjYyIiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL3Z4eHguY29tLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI0Y2I3MjU2NjBjNDMwMzFlM2IwNmM3NTg5MmQ5NmM1YSIsImZwIjpudWxsLCJmcF9zdHIiOiIiLCJ1YV9kYXRhIjpudWxsfSwiZXh0Ijp7ImR0IjoxNzAwNzIyNDAwMjI0fX0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 23 Nov 2023 06:53:18 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=31262&source=0&idzone=4187150&w=300&h=250&mo=&ve=&site_id=31262&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=31262&p=https%3A%2F%2Fvxxx.com%2F&katds_labels=&btype=0&score=7.063223530066132&bf=0.00236
X-Firefox-Spdy: h2
magapab.com/banner/in/show/?mid=767714381660442637&pid=0&site=31260&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vxxx.com&hostname=auc-banner-hz-8&site_id=0&spot_id=31260&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=default&iabcat=IAB25&min_cpm=0.00246231&placement_type_id=8&skin_test=&verify_hash=&score=6.491816151295256&ml=&tag_ab=b&v2=0&ttl=&space_id=31260&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31260%26source%3D0%26idzone%3D4187146%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31260%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D31260%26p%3Dhttps%253A%252F%252Fvxxx.com%252F%26katds_labels%3D%26btype%3D0%26score%3D6.491816151295256%26bf%3D0.00246231&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.00246231&label_ids=&site_id64=0&container=ClickadillaTuple&original_bid_usd=0&comeback=&topics=&o_d=&ectr=0
302 Found 0 B URL GET HTTP/2 magapab.com/banner/in/show/?mid=767714381660442637&pid=0&site=31260&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vxxx.com&hostname=auc-banner-hz-8&site_id=0&spot_id=31260&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=default&iabcat=IAB25&min_cpm=0.00246231&placement_type_id=8&skin_test=&verify_hash=&score=6.491816151295256&ml=&tag_ab=b&v2=0&ttl=&space_id=31260&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31260%26source%3D0%26idzone%3D4187146%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31260%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D31260%26p%3Dhttps%253A%252F%252Fvxxx.com%252F%26katds_labels%3D%26btype%3D0%26score%3D6.491816151295256%26bf%3D0.00246231&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.00246231&label_ids=&site_id64=0&container=ClickadillaTuple&original_bid_usd=0&comeback=&topics=&o_d=&ectr=0
IP
ASN #24940 Hetzner Online GmbH
Requested by https://magapab.com/get?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint95:34:E5:C6:3C:8C:8F:5D:19:0D:6B:41:72:00:76:73:85:86:B3:E5
ValidityFri, 17 Nov 2023 12:45:58 GMT - Thu, 15 Feb 2024 12:45:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=767714381660442637&pid=0&site=31260&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vxxx.com&hostname=auc-banner-hz-8&site_id=0&spot_id=31260&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=default&iabcat=IAB25&min_cpm=0.00246231&placement_type_id=8&skin_test=&verify_hash=&score=6.491816151295256&ml=&tag_ab=b&v2=0&ttl=&space_id=31260&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31260%26source%3D0%26idzone%3D4187146%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31260%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D31260%26p%3Dhttps%253A%252F%252Fvxxx.com%252F%26katds_labels%3D%26btype%3D0%26score%3D6.491816151295256%26bf%3D0.00246231&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.00246231&label_ids=&site_id64=0&container=ClickadillaTuple&original_bid_usd=0&comeback=&topics=&o_d=&ectr=0 HTTP/1.1
Host: magapab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magapab.com/get?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 23 Nov 2023 06:53:18 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=31260&source=0&idzone=4187146&w=300&h=250&mo=&ve=&site_id=31260&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=31260&p=https%3A%2F%2Fvxxx.com%2F&katds_labels=&btype=0&score=6.491816151295256&bf=0.00246231
X-Firefox-Spdy: h2
magapab.com/get?go=1&data=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
200 OK 1.3 kB URL GET HTTP/2 magapab.com/get?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint95:34:E5:C6:3C:8C:8F:5D:19:0D:6B:41:72:00:76:73:85:86:B3:E5
ValidityFri, 17 Nov 2023 12:45:58 GMT - Thu, 15 Feb 2024 12:45:57 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1473)
Hash f81337ef76f441c568de614e5f3e22d1
c2b004fae5a3513b8c49df55665ad1fda4b818b7
fb603c57eb171fd0cd0cea8e882ff38fe49e5fe5db0e0100d15efa9428c3f0c6
GET /get?go=1&data=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 HTTP/1.1
Host: magapab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 23 Nov 2023 06:53:18 GMT
content-type: text/html
content-length: 1252
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: br
X-Firefox-Spdy: h2
magapab.com/get?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MzEyNjEsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQxODcxNDgsImFkX3RhZ3MiOiJTdHJhaWdodCwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwicmVmcmVzaCI6MSwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6MzEyNjEsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjgsInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1NiwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjpmYWxzZX0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH0sIm1ldHJpY3MiOnsidG9waWNzIjpbXX19XSwic2l0ZSI6eyJpZCI6IjMxMjYxIiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL3Z4eHguY29tLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI0Y2I3MjU2NjBjNDMwMzFlM2IwNmM3NTg5MmQ5NmM1YSIsImZwIjpudWxsLCJmcF9zdHIiOiIiLCJ1YV9kYXRhIjpudWxsfSwiZXh0Ijp7ImR0IjoxNzAwNzIyNDAwMjE2fX0=
200 OK 1.3 kB URL GET HTTP/2 magapab.com/get?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint95:34:E5:C6:3C:8C:8F:5D:19:0D:6B:41:72:00:76:73:85:86:B3:E5
ValidityFri, 17 Nov 2023 12:45:58 GMT - Thu, 15 Feb 2024 12:45:57 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1472)
Hash b7dd728102284a343e5809a28b175cab
3b053a314057d3c9314f9073167bf3f9202eca98
86b428fe935b3fd76841395dd367b44093e82aaaffbe6f1035ce360933c36efd
GET /get?go=1&data=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 HTTP/1.1
Host: magapab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 23 Nov 2023 06:53:18 GMT
content-type: text/html
content-length: 1251
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: br
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=31262&source=0&idzone=4187150&w=300&h=250&mo=&ve=&site_id=31262&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=31262&p=https%3A%2F%2Fvxxx.com%2F&katds_labels=&btype=0&score=7.063223530066132&bf=0.00236
302 Found 0 B URL GET HTTP/2 btds.zog.link/in/912/?sid=31262&source=0&idzone=4187150&w=300&h=250&mo=&ve=&site_id=31262&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=31262&p=https%3A%2F%2Fvxxx.com%2F&katds_labels=&btype=0&score=7.063223530066132&bf=0.00236
IP
Requested by https://magapab.com/get?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MzEyNjIsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQxODcxNTAsImFkX3RhZ3MiOiJTdHJhaWdodCwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwicmVmcmVzaCI6MSwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6MzEyNjIsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjgsInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1NiwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjpmYWxzZX0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH0sIm1ldHJpY3MiOnsidG9waWNzIjpbXX19XSwic2l0ZSI6eyJpZCI6IjMxMjYyIiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL3Z4eHguY29tLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI0Y2I3MjU2NjBjNDMwMzFlM2IwNmM3NTg5MmQ5NmM1YSIsImZwIjpudWxsLCJmcF9zdHIiOiIiLCJ1YV9kYXRhIjpudWxsfSwiZXh0Ijp7ImR0IjoxNzAwNzIyNDAwMjI0fX0=
Certificate IssuerLet's Encrypt
Subjectbtds.zog.link
Fingerprint1A:49:61:04:36:57:4E:90:A7:3C:D4:FC:C6:29:CD:D6:C1:A1:D6:5C
ValiditySun, 24 Sep 2023 03:00:36 GMT - Sat, 23 Dec 2023 03:00:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=31262&source=0&idzone=4187150&w=300&h=250&mo=&ve=&site_id=31262&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=31262&p=https%3A%2F%2Fvxxx.com%2F&katds_labels=&btype=0&score=7.063223530066132&bf=0.00236 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://magapab.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.20.1
date: Thu, 23 Nov 2023 06:53:18 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://twinrdack.com/link.engine?z=56389&guid=a99d1668-bfc3-4c15-85ae-c1ab8a56edb8&tid=0&kw=Straight,
vary: *
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
set-cookie: 912.0=1; expires=Fri, 24 Nov 2023 06:53:18 GMT; path=/; secure; SameSite=None
1624.0=1; expires=Fri, 24 Nov 2023 06:53:18 GMT; path=/; secure; SameSite=None
1629.0=1; expires=Fri, 24 Nov 2023 06:53:18 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=31260&source=0&idzone=4187146&w=300&h=250&mo=&ve=&site_id=31260&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=31260&p=https%3A%2F%2Fvxxx.com%2F&katds_labels=&btype=0&score=6.491816151295256&bf=0.00246231
302 Found 0 B URL GET HTTP/2 btds.zog.link/in/912/?sid=31260&source=0&idzone=4187146&w=300&h=250&mo=&ve=&site_id=31260&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=31260&p=https%3A%2F%2Fvxxx.com%2F&katds_labels=&btype=0&score=6.491816151295256&bf=0.00246231
IP
Requested by https://magapab.com/get?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectbtds.zog.link
Fingerprint1A:49:61:04:36:57:4E:90:A7:3C:D4:FC:C6:29:CD:D6:C1:A1:D6:5C
ValiditySun, 24 Sep 2023 03:00:36 GMT - Sat, 23 Dec 2023 03:00:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=31260&source=0&idzone=4187146&w=300&h=250&mo=&ve=&site_id=31260&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=31260&p=https%3A%2F%2Fvxxx.com%2F&katds_labels=&btype=0&score=6.491816151295256&bf=0.00246231 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://magapab.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.20.1
date: Thu, 23 Nov 2023 06:53:18 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://tsyndicate.com/iframes2/9e2a490b1d10425386b89c4e050eda03.html?subid=0&categories=Straight,
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 912.0=1; expires=Fri, 24 Nov 2023 06:53:18 GMT; path=/; secure; SameSite=None
1624.0=1; expires=Fri, 24 Nov 2023 06:53:18 GMT; path=/; secure; SameSite=None
1629.0=1; expires=Fri, 24 Nov 2023 06:53:18 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
magapab.com/banner/in/show/?mid=5363240562941701515&pid=0&site=31259&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vxxx.com&hostname=auc-banner-hz-10&site_id=0&spot_id=31259&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=default&iabcat=IAB25&min_cpm=0.00291538&placement_type_id=8&skin_test=&verify_hash=&score=6.510355662032471&ml=&tag_ab=b&v2=0&ttl=&space_id=31259&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31259%26source%3D0%26idzone%3D4187142%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31259%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D31259%26p%3Dhttps%253A%252F%252Fvxxx.com%252F%26katds_labels%3D%26btype%3D0%26score%3D6.510355662032471%26bf%3D0.00291538&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.00291538&label_ids=&site_id64=0&container=ClickadillaTuple&original_bid_usd=0&comeback=&topics=&o_d=&ectr=0
302 Found 0 B URL GET HTTP/2 magapab.com/banner/in/show/?mid=5363240562941701515&pid=0&site=31259&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vxxx.com&hostname=auc-banner-hz-10&site_id=0&spot_id=31259&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=default&iabcat=IAB25&min_cpm=0.00291538&placement_type_id=8&skin_test=&verify_hash=&score=6.510355662032471&ml=&tag_ab=b&v2=0&ttl=&space_id=31259&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31259%26source%3D0%26idzone%3D4187142%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31259%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D31259%26p%3Dhttps%253A%252F%252Fvxxx.com%252F%26katds_labels%3D%26btype%3D0%26score%3D6.510355662032471%26bf%3D0.00291538&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.00291538&label_ids=&site_id64=0&container=ClickadillaTuple&original_bid_usd=0&comeback=&topics=&o_d=&ectr=0
IP
ASN #24940 Hetzner Online GmbH
Requested by https://magapab.com/get?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint95:34:E5:C6:3C:8C:8F:5D:19:0D:6B:41:72:00:76:73:85:86:B3:E5
ValidityFri, 17 Nov 2023 12:45:58 GMT - Thu, 15 Feb 2024 12:45:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=5363240562941701515&pid=0&site=31259&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vxxx.com&hostname=auc-banner-hz-10&site_id=0&spot_id=31259&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=default&iabcat=IAB25&min_cpm=0.00291538&placement_type_id=8&skin_test=&verify_hash=&score=6.510355662032471&ml=&tag_ab=b&v2=0&ttl=&space_id=31259&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31259%26source%3D0%26idzone%3D4187142%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31259%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D31259%26p%3Dhttps%253A%252F%252Fvxxx.com%252F%26katds_labels%3D%26btype%3D0%26score%3D6.510355662032471%26bf%3D0.00291538&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.00291538&label_ids=&site_id64=0&container=ClickadillaTuple&original_bid_usd=0&comeback=&topics=&o_d=&ectr=0 HTTP/1.1
Host: magapab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magapab.com/get?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 23 Nov 2023 06:53:18 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=31259&source=0&idzone=4187142&w=300&h=250&mo=&ve=&site_id=31259&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=31259&p=https%3A%2F%2Fvxxx.com%2F&katds_labels=&btype=0&score=6.510355662032471&bf=0.00291538
X-Firefox-Spdy: h2
magapab.com/banner/in/show/?mid=4334479403469375260&pid=0&site=31261&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vxxx.com&hostname=auc-banner-hz-2&site_id=0&spot_id=31261&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=default&iabcat=IAB25&min_cpm=0.00232154&placement_type_id=8&skin_test=&verify_hash=&score=7.050737542551498&ml=&tag_ab=b&v2=0&ttl=&space_id=31261&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31261%26source%3D0%26idzone%3D4187148%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31261%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D31261%26p%3Dhttps%253A%252F%252Fvxxx.com%252F%26katds_labels%3D%26btype%3D0%26score%3D7.050737542551498%26bf%3D0.00232154&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.00232154&label_ids=&site_id64=0&container=ClickadillaTuple&original_bid_usd=0&comeback=&topics=&o_d=&ectr=0
302 Found 0 B URL GET HTTP/2 magapab.com/banner/in/show/?mid=4334479403469375260&pid=0&site=31261&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vxxx.com&hostname=auc-banner-hz-2&site_id=0&spot_id=31261&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=default&iabcat=IAB25&min_cpm=0.00232154&placement_type_id=8&skin_test=&verify_hash=&score=7.050737542551498&ml=&tag_ab=b&v2=0&ttl=&space_id=31261&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31261%26source%3D0%26idzone%3D4187148%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31261%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D31261%26p%3Dhttps%253A%252F%252Fvxxx.com%252F%26katds_labels%3D%26btype%3D0%26score%3D7.050737542551498%26bf%3D0.00232154&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.00232154&label_ids=&site_id64=0&container=ClickadillaTuple&original_bid_usd=0&comeback=&topics=&o_d=&ectr=0
IP
ASN #24940 Hetzner Online GmbH
Requested by https://magapab.com/get?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MzEyNjEsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQxODcxNDgsImFkX3RhZ3MiOiJTdHJhaWdodCwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwicmVmcmVzaCI6MSwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6MzEyNjEsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjgsInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1NiwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjpmYWxzZX0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH0sIm1ldHJpY3MiOnsidG9waWNzIjpbXX19XSwic2l0ZSI6eyJpZCI6IjMxMjYxIiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL3Z4eHguY29tLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI0Y2I3MjU2NjBjNDMwMzFlM2IwNmM3NTg5MmQ5NmM1YSIsImZwIjpudWxsLCJmcF9zdHIiOiIiLCJ1YV9kYXRhIjpudWxsfSwiZXh0Ijp7ImR0IjoxNzAwNzIyNDAwMjE2fX0=
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint95:34:E5:C6:3C:8C:8F:5D:19:0D:6B:41:72:00:76:73:85:86:B3:E5
ValidityFri, 17 Nov 2023 12:45:58 GMT - Thu, 15 Feb 2024 12:45:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=4334479403469375260&pid=0&site=31261&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vxxx.com&hostname=auc-banner-hz-2&site_id=0&spot_id=31261&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=default&iabcat=IAB25&min_cpm=0.00232154&placement_type_id=8&skin_test=&verify_hash=&score=7.050737542551498&ml=&tag_ab=b&v2=0&ttl=&space_id=31261&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D31261%26source%3D0%26idzone%3D4187148%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D31261%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D31261%26p%3Dhttps%253A%252F%252Fvxxx.com%252F%26katds_labels%3D%26btype%3D0%26score%3D7.050737542551498%26bf%3D0.00232154&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.00232154&label_ids=&site_id64=0&container=ClickadillaTuple&original_bid_usd=0&comeback=&topics=&o_d=&ectr=0 HTTP/1.1
Host: magapab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magapab.com/get?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 23 Nov 2023 06:53:18 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=31261&source=0&idzone=4187148&w=300&h=250&mo=&ve=&site_id=31261&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=31261&p=https%3A%2F%2Fvxxx.com%2F&katds_labels=&btype=0&score=7.050737542551498&bf=0.00232154
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=31259&source=0&idzone=4187142&w=300&h=250&mo=&ve=&site_id=31259&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=31259&p=https%3A%2F%2Fvxxx.com%2F&katds_labels=&btype=0&score=6.510355662032471&bf=0.00291538
302 Found 0 B URL GET HTTP/2 btds.zog.link/in/912/?sid=31259&source=0&idzone=4187142&w=300&h=250&mo=&ve=&site_id=31259&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=31259&p=https%3A%2F%2Fvxxx.com%2F&katds_labels=&btype=0&score=6.510355662032471&bf=0.00291538
IP
Requested by https://magapab.com/get?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MzEyNTksInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQxODcxNDIsImFkX3RhZ3MiOiJTdHJhaWdodCwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwicmVmcmVzaCI6MSwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6MzEyNTksIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjgsInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1NiwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjpmYWxzZX0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH0sIm1ldHJpY3MiOnsidG9waWNzIjpbXX19XSwic2l0ZSI6eyJpZCI6IjMxMjU5IiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL3Z4eHguY29tLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI0Y2I3MjU2NjBjNDMwMzFlM2IwNmM3NTg5MmQ5NmM1YSIsImZwIjpudWxsLCJmcF9zdHIiOiIiLCJ1YV9kYXRhIjpudWxsfSwiZXh0Ijp7ImR0IjoxNzAwNzIyNDAwMTk3fX0=
Certificate IssuerLet's Encrypt
Subjectbtds.zog.link
Fingerprint1A:49:61:04:36:57:4E:90:A7:3C:D4:FC:C6:29:CD:D6:C1:A1:D6:5C
ValiditySun, 24 Sep 2023 03:00:36 GMT - Sat, 23 Dec 2023 03:00:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=31259&source=0&idzone=4187142&w=300&h=250&mo=&ve=&site_id=31259&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=31259&p=https%3A%2F%2Fvxxx.com%2F&katds_labels=&btype=0&score=6.510355662032471&bf=0.00291538 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://magapab.com/
DNT: 1
Connection: keep-alive
Cookie: 912.0=1; 1624.0=1; 1629.0=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Thu, 23 Nov 2023 06:53:18 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://tsyndicate.com/iframes2/4f8d52e244914e00bc5919be2d2fd798.html?subid=0&categories=Straight,
vary: *
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
set-cookie: 912.0=1; expires=Fri, 24 Nov 2023 06:53:18 GMT; path=/; secure; SameSite=None
1624.0=1; expires=Fri, 24 Nov 2023 06:53:18 GMT; path=/; secure; SameSite=None
1629.0=1; expires=Fri, 24 Nov 2023 06:53:18 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=31261&source=0&idzone=4187148&w=300&h=250&mo=&ve=&site_id=31261&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=31261&p=https%3A%2F%2Fvxxx.com%2F&katds_labels=&btype=0&score=7.050737542551498&bf=0.00232154
302 Found 0 B URL GET HTTP/2 btds.zog.link/in/912/?sid=31261&source=0&idzone=4187148&w=300&h=250&mo=&ve=&site_id=31261&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=31261&p=https%3A%2F%2Fvxxx.com%2F&katds_labels=&btype=0&score=7.050737542551498&bf=0.00232154
IP
Requested by https://magapab.com/get?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectbtds.zog.link
Fingerprint1A:49:61:04:36:57:4E:90:A7:3C:D4:FC:C6:29:CD:D6:C1:A1:D6:5C
ValiditySun, 24 Sep 2023 03:00:36 GMT - Sat, 23 Dec 2023 03:00:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=31261&source=0&idzone=4187148&w=300&h=250&mo=&ve=&site_id=31261&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=31261&p=https%3A%2F%2Fvxxx.com%2F&katds_labels=&btype=0&score=7.050737542551498&bf=0.00232154 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://magapab.com/
DNT: 1
Connection: keep-alive
Cookie: 912.0=1; 1624.0=1; 1629.0=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Thu, 23 Nov 2023 06:53:18 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://twinrdack.com/link.engine?z=56391&guid=a99d1668-bfc3-4c15-85ae-c1ab8a56edb8&tid=0&kw=Straight,
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: *
set-cookie: 912.0=1; expires=Fri, 24 Nov 2023 06:53:18 GMT; path=/; secure; SameSite=None
1624.0=1; expires=Fri, 24 Nov 2023 06:53:18 GMT; path=/; secure; SameSite=None
1629.0=1; expires=Fri, 24 Nov 2023 06:53:18 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
200 OK 2.6 kB URL GET HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP
Requested by https://tsyndicate.com/iframes2/4f8d52e244914e00bc5919be2d2fd798.html?subid=0&categories=Straight,
Certificate IssuerSectigo Limited
Subjectlcdn.tsyndicate.com
FingerprintAA:DB:E6:65:05:5A:83:46:D1:77:83:25:84:3D:B2:B5:F5:99:97:00
ValidityWed, 08 Mar 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (2590)
Hash b0a8eae036a72f605538b002e33f7023
5916ea9eeb0b676d6f44637601c40d0dc69542d1
7b9affd37cf01ac1a4c5f4a4ccb1936f0412ff771fb24e36a55682d2bf0ac554
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=5e9c53d7-89c6-4d99-8b22-bc6108f7b9e8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:19 GMT
content-type: application/javascript
content-length: 2640
server: nginx
last-modified: Tue, 25 Jul 2023 12:28:26 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"64bfbfea-1f37"
content-encoding: gzip
age: 9710987
accept-ranges: bytes
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
200 OK 2.6 kB URL GET HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP
Requested by https://tsyndicate.com/iframes2/4f8d52e244914e00bc5919be2d2fd798.html?subid=0&categories=Straight,
Certificate IssuerSectigo Limited
Subjectlcdn.tsyndicate.com
FingerprintAA:DB:E6:65:05:5A:83:46:D1:77:83:25:84:3D:B2:B5:F5:99:97:00
ValidityWed, 08 Mar 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (2590)
Hash b0a8eae036a72f605538b002e33f7023
5916ea9eeb0b676d6f44637601c40d0dc69542d1
7b9affd37cf01ac1a4c5f4a4ccb1936f0412ff771fb24e36a55682d2bf0ac554
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=5e9c53d7-89c6-4d99-8b22-bc6108f7b9e8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:19 GMT
content-type: application/javascript
content-length: 2640
server: nginx
last-modified: Tue, 25 Jul 2023 12:28:26 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"64bfbfea-1f37"
content-encoding: gzip
age: 9710987
accept-ranges: bytes
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/images/0/e/12fcc8e2365c193bb666ce9c948b9551d7be80/main.jpg
11 kB URL GET lcdn.tsyndicate.com/images/0/e/12fcc8e2365c193bb666ce9c948b9551d7be80/main.jpg
IP
Requested by https://tsyndicate.com/iframes2/9e2a490b1d10425386b89c4e050eda03.html?subid=0&categories=Straight,
Certificate IssuerSectigo Limited
Subjectlcdn.tsyndicate.com
FingerprintAA:DB:E6:65:05:5A:83:46:D1:77:83:25:84:3D:B2:B5:F5:99:97:00
ValidityWed, 08 Mar 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 300x250, components 3\012- data
Hash 728bd45ce040901b39bf9c3dd9dd51cb
8ce294f78302a14c7ae09e00fd8a1a826db67c02
36dcafa65687bd8a070e2c63552a34d6cc9ee9ffcda7b0025dcfa8e9868f796c
GET /images/0/e/12fcc8e2365c193bb666ce9c948b9551d7be80/main.jpg HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=5e9c53d7-89c6-4d99-8b22-bc6108f7b9e8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:19 GMT
content-type: image/jpeg
content-length: 11064
server: nginx
last-modified: Tue, 19 Jul 2022 11:21:35 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"62d693bf-2ba8"
content-encoding: gzip
age: 9653123
accept-ranges: bytes
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/images/c/b/2d8fb090f29bd3882c40365ecc1641ac988bf8/main.jpg
12 kB URL GET lcdn.tsyndicate.com/images/c/b/2d8fb090f29bd3882c40365ecc1641ac988bf8/main.jpg
IP
Requested by https://tsyndicate.com/iframes2/4f8d52e244914e00bc5919be2d2fd798.html?subid=0&categories=Straight,
Certificate IssuerSectigo Limited
Subjectlcdn.tsyndicate.com
FingerprintAA:DB:E6:65:05:5A:83:46:D1:77:83:25:84:3D:B2:B5:F5:99:97:00
ValidityWed, 08 Mar 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 300x250, components 3\012- data
Hash c8c302647c85bfdc9e493569599b702c
ea604329b0b600e99caa48dc226e61732aa4bd13
830341e6f58bdc0b9d3c632640662b71c296c45b4f4d9a45a35c78ebd55981a2
GET /images/c/b/2d8fb090f29bd3882c40365ecc1641ac988bf8/main.jpg HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=5e9c53d7-89c6-4d99-8b22-bc6108f7b9e8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:19 GMT
content-type: image/jpeg
content-length: 12065
server: nginx
last-modified: Fri, 19 Mar 2021 20:30:49 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"605509f9-2fff"
content-encoding: gzip
age: 9710624
accept-ranges: bytes
X-Firefox-Spdy: h2
tsyndicate.com/iframes2/4f8d52e244914e00bc5919be2d2fd798.html?subid=0&categories=Straight,
200 OK 43 kB URL GET HTTP/2 tsyndicate.com/iframes2/4f8d52e244914e00bc5919be2d2fd798.html?subid=0&categories=Straight,
IP
ASN #24940 Hetzner Online GmbH
Requested by https://magapab.com/get?go=1&data=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
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type gzip compressed data, from Unix\012- data
Hash 1e6d380f0b051e5702037d6a28e084de
ef0f5a0a75a9c429a05bd87753bc7c330eae954d
904b2f8e5f068b306c6ac3dccba12d3505266f2a96c1c0fa29ef5cae7a256850
GET /iframes2/4f8d52e244914e00bc5919be2d2fd798.html?subid=0&categories=Straight, HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://magapab.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 06:53:18 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: d21e138c35ee6252
set-cookie: ts_uid=d77e2b17-6391-486e-bac0-4f2e0245292f; expires=Thu, 23 May 2024 06:53:18 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/images/c/b/2d8fb090f29bd3882c40365ecc1641ac988bf8/main.mp4
206 Partial Content 39 kB URL GET HTTP/2 lcdn.tsyndicate.com/images/c/b/2d8fb090f29bd3882c40365ecc1641ac988bf8/main.mp4
IP
Requested by https://tsyndicate.com/iframes2/4f8d52e244914e00bc5919be2d2fd798.html?subid=0&categories=Straight,
Certificate IssuerSectigo Limited
Subjectlcdn.tsyndicate.com
FingerprintAA:DB:E6:65:05:5A:83:46:D1:77:83:25:84:3D:B2:B5:F5:99:97:00
ValidityWed, 08 Mar 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 63edbde56da826432fbe922d929dabb1
3c018db636d2d02b452b9acb57be93f3a0a8b27f
d6af014721a354ced52c6cd8251f0ef492109772febc5b7f456eb6cac518c571
GET /images/c/b/2d8fb090f29bd3882c40365ecc1641ac988bf8/main.mp4 HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=5e9c53d7-89c6-4d99-8b22-bc6108f7b9e8
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
date: Thu, 23 Nov 2023 06:53:19 GMT
content-type: video/mp4
content-length: 38612
server: nginx
last-modified: Fri, 19 Mar 2021 20:30:49 GMT
etag: "605509f9-96d4"
x-robots-tag: noindex, nofollow
age: 9141060
content-range: bytes 0-38611/38612
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.js?p=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_-tUUYed1gX4BR0yBFGGmcYV4IMQ7hIhgw9tAhrVmTEkGFlMgk7Qw8wCEtDiILlgIOwNfTgxBPC2tCDHXiE-90bbQh7Qw9ihPEZQl-Y8cYbdLBL4bEA4hCisDn0MINbcLTBmQhv9PsvGeRm1EYYZ_AYhhjj-gtZGIdtwVtSImTXlA4qstjZZhivWJEIctgxWQyY3VZHGhnVUIaX7pEBEw5eakXDTV59JIMMLdRkQwyKmVFSDim5lcZkIuQQgws5qEiaCw3R4JYcXwydkdFIKy0D0zU4LVwYGTXxhh5psMFGGC_UsCIIKGBB2w4gMJGGG3XgAQIeon0xGtshM9TViimAcERHa7zxwlw8w8BzDCAYkYYcZbiLxwu0HX0UZBeLsK1b1n1hX0aXP8RG5UU44dZBdnzBuG4MkRTSDJ7695AchsqVU18alVG6GHIstNhDpH_RxhtkhLYz73K8sdtDbwwlg13F45HHQqYxzvFAxyW33AsHJwzHwg2_4NYcIWdUPB0QW9eCdGnQ0QJtLpAxhmCYgx-XDjPgUIOnczVmmvsZHfSF-_CziL8Y0pid3GwG1hIgcQjonxsc0Fo3yEHJDGK6MswBDl-AGEUK6EAZINA2tssgGxBCh6FIjAYUW9hhameGpbBhInb53EJcI4IxqAYGfVBAQAA%3D&s=78f0b54a466c6bc10b408b3deb556eab6fe419bf8283e6e6a4fa649500bb7c9b1700722398&w=t&r=1&d=58&priv=true
200 OK 24 B URL GET HTTP/2 pxl.tsyndicate.com/api/v1/p/p.js?p=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_-tUUYed1gX4BR0yBFGGmcYV4IMQ7hIhgw9tAhrVmTEkGFlMgk7Qw8wCEtDiILlgIOwNfTgxBPC2tCDHXiE-90bbQh7Qw9ihPEZQl-Y8cYbdLBL4bEA4hCisDn0MINbcLTBmQhv9PsvGeRm1EYYZ_AYhhjj-gtZGIdtwVtSImTXlA4qstjZZhivWJEIctgxWQyY3VZHGhnVUIaX7pEBEw5eakXDTV59JIMMLdRkQwyKmVFSDim5lcZkIuQQgws5qEiaCw3R4JYcXwydkdFIKy0D0zU4LVwYGTXxhh5psMFGGC_UsCIIKGBB2w4gMJGGG3XgAQIeon0xGtshM9TViimAcERHa7zxwlw8w8BzDCAYkYYcZbiLxwu0HX0UZBeLsK1b1n1hX0aXP8RG5UU44dZBdnzBuG4MkRTSDJ7695AchsqVU18alVG6GHIstNhDpH_RxhtkhLYz73K8sdtDbwwlg13F45HHQqYxzvFAxyW33AsHJwzHwg2_4NYcIWdUPB0QW9eCdGnQ0QJtLpAxhmCYgx-XDjPgUIOnczVmmvsZHfSF-_CziL8Y0pid3GwG1hIgcQjonxsc0Fo3yEHJDGK6MswBDl-AGEUK6EAZINA2tssgGxBCh6FIjAYUW9hhameGpbBhInb53EJcI4IxqAYGfVBAQAA%3D&s=78f0b54a466c6bc10b408b3deb556eab6fe419bf8283e6e6a4fa649500bb7c9b1700722398&w=t&r=1&d=58&priv=true
IP
ASN #24940 Hetzner Online GmbH
Requested by https://tsyndicate.com/iframes2/9e2a490b1d10425386b89c4e050eda03.html?subid=0&categories=Straight,
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type ASCII text, with no line terminators
Hash 0959ba36d476b6dc1994ba3c678b07c4
d30b94da72daa02766965206a85b7e0356375f5e
897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=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_-tUUYed1gX4BR0yBFGGmcYV4IMQ7hIhgw9tAhrVmTEkGFlMgk7Qw8wCEtDiILlgIOwNfTgxBPC2tCDHXiE-90bbQh7Qw9ihPEZQl-Y8cYbdLBL4bEA4hCisDn0MINbcLTBmQhv9PsvGeRm1EYYZ_AYhhjj-gtZGIdtwVtSImTXlA4qstjZZhivWJEIctgxWQyY3VZHGhnVUIaX7pEBEw5eakXDTV59JIMMLdRkQwyKmVFSDim5lcZkIuQQgws5qEiaCw3R4JYcXwydkdFIKy0D0zU4LVwYGTXxhh5psMFGGC_UsCIIKGBB2w4gMJGGG3XgAQIeon0xGtshM9TViimAcERHa7zxwlw8w8BzDCAYkYYcZbiLxwu0HX0UZBeLsK1b1n1hX0aXP8RG5UU44dZBdnzBuG4MkRTSDJ7695AchsqVU18alVG6GHIstNhDpH_RxhtkhLYz73K8sdtDbwwlg13F45HHQqYxzvFAxyW33AsHJwzHwg2_4NYcIWdUPB0QW9eCdGnQ0QJtLpAxhmCYgx-XDjPgUIOnczVmmvsZHfSF-_CziL8Y0pid3GwG1hIgcQjonxsc0Fo3yEHJDGK6MswBDl-AGEUK6EAZINA2tssgGxBCh6FIjAYUW9hhameGpbBhInb53EJcI4IxqAYGfVBAQAA%3D&s=78f0b54a466c6bc10b408b3deb556eab6fe419bf8283e6e6a4fa649500bb7c9b1700722398&w=t&r=1&d=58&priv=true HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=5e9c53d7-89c6-4d99-8b22-bc6108f7b9e8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 06:53:19 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WIGSNDTA0ZYXC0gFEmR5kWNHKModEChxkzLDuKiRimBswZMmSIeDhHTBoyCnVsEQFDRJeHYeqMyWimTJkaMHDMqNGiBo0wJ2nAyNlCzIwYMlqQGfOxjA0xYnKQqRFmJ0QydhbKgHGj7kM4dcRQlJHjBlI4cOSCzYGDJ5yJOrTiwHEDhkMRY9oEThzjBo6USMmYofhQjBs3cnHYoMF3xsM2bjDqkGEZB4y7qFXHoBEjRmERdeSwWfj161YZD-vo1DGQDh04c3S8eCHmjRsXddykGfNGjhs4cn6WATvDBfU2L9i4gIMGzg84PcbocFNjBg09eNagFaNmzJgvavTk4FIHxlYbZPRgA2s21CAGDjGIEYNZOcUwhmgyzFDGDWLIwJ9_MtgwRw-KMebYhf-J0YMMopGWwwwgZuhTgDC44F8MKdoAx089rOGEDXQwUcQXWSilRxBfxKBFEleoIUcQVJyRxQ1vPGFEDEHUoEcbZixhxhBxKNHCGkHUgUYLZ5wBRxMyCMGEGkToYQQMRsyhxRpuFIGHDFLkkYMZcbghBRJUEFEDGjVIkcMZN9QhxBtaGGEFEncsgQQWUgyhxBE5uDFDCznUgYcVd5ARxRBPUDGDGuUNkUcQUXxxRhVJECFFFWnEGBl6tFmWUoxrlJHHHdUFOAUdcoSRxhlo0FGCDEPESIYMPcDY339kxMBhZZft92yGZMzQAwzK0jDiYDgoW0MPTjyhrA092IHHut690YayN_Qw02cIfWHGG2_QUa-zGAKIw4jK5tDDDG7B0QZnIrxhMMJkuJtRG2GcEQYcYYjR7sEPjREGYlt8dZQI2C2lQ4svdrbZyC5WJIIcdkwWQw7B1ZFGRmTUVUZHlbVgwww5xICSaCfNNAYMKJkhQxlb0fBRDjJs9lAak4nQsws5tEiaCw3R4JYcX0Cd0dRVu3B11m7V0RZxTbyhRxpssBHGCzW4CAIKWNS2AwhMpOGGpiDgIdoXo93NMkMw5OBiCiAcUcYYa7zxwlwxvAhDDCAYkYYcZdyLxwu1xeCiW_ZlVK5b1X0ROnGjP8SGyCIU4YRbB9nxBea7MVRDXVLZ4NprK58B2mo1MPZQ7F-IIcdCiw1fhuxtvEFGaDaoTIYcb_D20BtBAQcy9XjksdBjmJ9c3HHJLQexxBRb_N0Lbs3BckbU07FxdS1ElwYdOnc3Flikux8XQ1JxDeRyYIPhse4gX9ifTixyMIY0hi454dlt6NCG4VTGPzeIIGFukAOYvWV2ZZgDHL6wMYo8MIMRIsxDlkdCNiCEDkHpGA0-VjHEiOAgZkgKGyZyl9UthHdjUA0M-qCAgAA%3D&s=f5354cde97ff4e658756981a0d819ed5215038c3a44910609dba13783c17a8cd1700722398&w=t&r=1&d=12&priv=true
200 OK 24 B URL GET HTTP/2 pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WIGSNDTA0ZYXC0gFEmR5kWNHKModEChxkzLDuKiRimBswZMmSIeDhHTBoyCnVsEQFDRJeHYeqMyWimTJkaMHDMqNGiBo0wJ2nAyNlCzIwYMlqQGfOxjA0xYnKQqRFmJ0QydhbKgHGj7kM4dcRQlJHjBlI4cOSCzYGDJ5yJOrTiwHEDhkMRY9oEThzjBo6USMmYofhQjBs3cnHYoMF3xsM2bjDqkGEZB4y7qFXHoBEjRmERdeSwWfj161YZD-vo1DGQDh04c3S8eCHmjRsXddykGfNGjhs4cn6WATvDBfU2L9i4gIMGzg84PcbocFNjBg09eNagFaNmzJgvavTk4FIHxlYbZPRgA2s21CAGDjGIEYNZOcUwhmgyzFDGDWLIwJ9_MtgwRw-KMebYhf-J0YMMopGWwwwgZuhTgDC44F8MKdoAx089rOGEDXQwUcQXWSilRxBfxKBFEleoIUcQVJyRxQ1vPGFEDEHUoEcbZixhxhBxKNHCGkHUgUYLZ5wBRxMyCMGEGkToYQQMRsyhxRpuFIGHDFLkkYMZcbghBRJUEFEDGjVIkcMZN9QhxBtaGGEFEncsgQQWUgyhxBE5uDFDCznUgYcVd5ARxRBPUDGDGuUNkUcQUXxxRhVJECFFFWnEGBl6tFmWUoxrlJHHHdUFOAUdcoSRxhlo0FGCDEPESIYMPcDY339kxMBhZZft92yGZMzQAwzK0jDiYDgoW0MPTjyhrA092IHHut690YayN_Qw02cIfWHGG2_QUa-zGAKIw4jK5tDDDG7B0QZnIrxhMMJkuJtRG2GcEQYcYYjR7sEPjREGYlt8dZQI2C2lQ4svdrbZyC5WJIIcdkwWQw7B1ZFGRmTUVUZHlbVgwww5xICSaCfNNAYMKJkhQxlb0fBRDjJs9lAak4nQsws5tEiaCw3R4JYcX0Cd0dRVu3B11m7V0RZxTbyhRxpssBHGCzW4CAIKWNS2AwhMpOGGpiDgIdoXo93NMkMw5OBiCiAcUcYYa7zxwlwxvAhDDCAYkYYcZdyLxwu1xeCiW_ZlVK5b1X0ROnGjP8SGyCIU4YRbB9nxBea7MVRDXVLZ4NprK58B2mo1MPZQ7F-IIcdCiw1fhuxtvEFGaDaoTIYcb_D20BtBAQcy9XjksdBjmJ9c3HHJLQexxBRb_N0Lbs3BckbU07FxdS1ElwYdOnc3Flikux8XQ1JxDeRyYIPhse4gX9ifTixyMIY0hi454dlt6NCG4VTGPzeIIGFukAOYvWV2ZZgDHL6wMYo8MIMRIsxDlkdCNiCEDkHpGA0-VjHEiOAgZkgKGyZyl9UthHdjUA0M-qCAgAA%3D&s=f5354cde97ff4e658756981a0d819ed5215038c3a44910609dba13783c17a8cd1700722398&w=t&r=1&d=12&priv=true
IP
ASN #24940 Hetzner Online GmbH
Requested by https://tsyndicate.com/iframes2/4f8d52e244914e00bc5919be2d2fd798.html?subid=0&categories=Straight,
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type ASCII text, with no line terminators
Hash 0959ba36d476b6dc1994ba3c678b07c4
d30b94da72daa02766965206a85b7e0356375f5e
897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WIGSNDTA0ZYXC0gFEmR5kWNHKModEChxkzLDuKiRimBswZMmSIeDhHTBoyCnVsEQFDRJeHYeqMyWimTJkaMHDMqNGiBo0wJ2nAyNlCzIwYMlqQGfOxjA0xYnKQqRFmJ0QydhbKgHGj7kM4dcRQlJHjBlI4cOSCzYGDJ5yJOrTiwHEDhkMRY9oEThzjBo6USMmYofhQjBs3cnHYoMF3xsM2bjDqkGEZB4y7qFXHoBEjRmERdeSwWfj161YZD-vo1DGQDh04c3S8eCHmjRsXddykGfNGjhs4cn6WATvDBfU2L9i4gIMGzg84PcbocFNjBg09eNagFaNmzJgvavTk4FIHxlYbZPRgA2s21CAGDjGIEYNZOcUwhmgyzFDGDWLIwJ9_MtgwRw-KMebYhf-J0YMMopGWwwwgZuhTgDC44F8MKdoAx089rOGEDXQwUcQXWSilRxBfxKBFEleoIUcQVJyRxQ1vPGFEDEHUoEcbZixhxhBxKNHCGkHUgUYLZ5wBRxMyCMGEGkToYQQMRsyhxRpuFIGHDFLkkYMZcbghBRJUEFEDGjVIkcMZN9QhxBtaGGEFEncsgQQWUgyhxBE5uDFDCznUgYcVd5ARxRBPUDGDGuUNkUcQUXxxRhVJECFFFWnEGBl6tFmWUoxrlJHHHdUFOAUdcoSRxhlo0FGCDEPESIYMPcDY339kxMBhZZft92yGZMzQAwzK0jDiYDgoW0MPTjyhrA092IHHut690YayN_Qw02cIfWHGG2_QUa-zGAKIw4jK5tDDDG7B0QZnIrxhMMJkuJtRG2GcEQYcYYjR7sEPjREGYlt8dZQI2C2lQ4svdrbZyC5WJIIcdkwWQw7B1ZFGRmTUVUZHlbVgwww5xICSaCfNNAYMKJkhQxlb0fBRDjJs9lAak4nQsws5tEiaCw3R4JYcX0Cd0dRVu3B11m7V0RZxTbyhRxpssBHGCzW4CAIKWNS2AwhMpOGGpiDgIdoXo93NMkMw5OBiCiAcUcYYa7zxwlwxvAhDDCAYkYYcZdyLxwu1xeCiW_ZlVK5b1X0ROnGjP8SGyCIU4YRbB9nxBea7MVRDXVLZ4NprK58B2mo1MPZQ7F-IIcdCiw1fhuxtvEFGaDaoTIYcb_D20BtBAQcy9XjksdBjmJ9c3HHJLQexxBRb_N0Lbs3BckbU07FxdS1ElwYdOnc3Flikux8XQ1JxDeRyYIPhse4gX9ifTixyMIY0hi454dlt6NCG4VTGPzeIIGFukAOYvWV2ZZgDHL6wMYo8MIMRIsxDlkdCNiCEDkHpGA0-VjHEiOAgZkgKGyZyl9UthHdjUA0M-qCAgAA%3D&s=f5354cde97ff4e658756981a0d819ed5215038c3a44910609dba13783c17a8cd1700722398&w=t&r=1&d=12&priv=true HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=5e9c53d7-89c6-4d99-8b22-bc6108f7b9e8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 06:53:19 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
twinrdack.com//Redirect.eng?MediaSegmentId=41684&dcid=3_ctx_be0b9aed-5013-4bea-b358-e3662bac938d&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=&v=00HFlAh7-4xG0EGdcUDTtxTORWGgPq7hdbZA5evfThpn2vJeoSe-K3I7-OrxWBgZdqoApjozh9Sr2OelTkYPNv86b8iTeXJgCxl6n8rdSPo2UjRVleb6GDL2F3Lp6ByqIYE-zJmQ48UMb9jWiVm9BJ5kmM7vUU9DLwPft5fzY-RL6GqGMIWbuW_hDUIBYkOe0vxcodGLO1mx0M2uSFQguBxvna8jXLDL_XceE-tI9_8-1xn7QI56fcc0y_IBVlvlWB5D102VgOn5qIFazZS7yEKq2fKIPWAygUHF9ScAfAxg8MPuzg85F6uluhLO-hu78jveJ1uj-K_1Z0iXTpYnd210IGocZaBR8lbwk406XHigXtT5VLKRZdP8ePNx7gCzSdrY_UREewhimX52byQqg-SKb9RbnljZnM7eG0_N5-918qmmCahJtI_gcXpk01fKgy5PzcUsXTJCQCJGIswd9gH1MwlekE0nOwHQtoYxAnCcR3rWroxVlXkFuNLiHPfKS0qCTVt9qbMzdxOMvhIMuVhlyPuv7843YZjQq88z8TKfOHgzvy9q7_FiU1EINTWGXowr69Rn8RmIYSq-IPv9Rqt35CtAjQBG-umr6RkwCnp2c2nSg77OVModhhuUvAsOcCyBSNsbaFfg_ifjhKLHXGxf54cqNNQqKFCh6gYIn2hpK-R1vuKus50PyAxECWwmRXV3cHgm6vhkpBDlPcZS_zc7X2jY_OdEULr7PNLru7EgaGeP48DIs_K-9wNtsLWTv-qm3sUwPGF7qFBkt-aM2FSdaQswwiDWLm4aeiQuthF6sWjbaRaBLslaCDd8PkabgN-Dp5h2hMygzyQKOzHtjrxTyhHLi6hIPHpWntfyLoiLdRgjeTyT01ByUnG2yy4kQM-hTo3mp4PjUrhA6D4uqmmMOQPDBmzB8IgD7MvdBeZQ9Mjxz3EP13JrjbPIu_f6tu50UnJxM5OoYRPEwS_e4A2&kw=&mw=300&mh=250&ml=1&curlh=1550911973
302 Found 429 B URL GET HTTP/3 twinrdack.com//Redirect.eng?MediaSegmentId=41684&dcid=3_ctx_be0b9aed-5013-4bea-b358-e3662bac938d&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=&v=00HFlAh7-4xG0EGdcUDTtxTORWGgPq7hdbZA5evfThpn2vJeoSe-K3I7-OrxWBgZdqoApjozh9Sr2OelTkYPNv86b8iTeXJgCxl6n8rdSPo2UjRVleb6GDL2F3Lp6ByqIYE-zJmQ48UMb9jWiVm9BJ5kmM7vUU9DLwPft5fzY-RL6GqGMIWbuW_hDUIBYkOe0vxcodGLO1mx0M2uSFQguBxvna8jXLDL_XceE-tI9_8-1xn7QI56fcc0y_IBVlvlWB5D102VgOn5qIFazZS7yEKq2fKIPWAygUHF9ScAfAxg8MPuzg85F6uluhLO-hu78jveJ1uj-K_1Z0iXTpYnd210IGocZaBR8lbwk406XHigXtT5VLKRZdP8ePNx7gCzSdrY_UREewhimX52byQqg-SKb9RbnljZnM7eG0_N5-918qmmCahJtI_gcXpk01fKgy5PzcUsXTJCQCJGIswd9gH1MwlekE0nOwHQtoYxAnCcR3rWroxVlXkFuNLiHPfKS0qCTVt9qbMzdxOMvhIMuVhlyPuv7843YZjQq88z8TKfOHgzvy9q7_FiU1EINTWGXowr69Rn8RmIYSq-IPv9Rqt35CtAjQBG-umr6RkwCnp2c2nSg77OVModhhuUvAsOcCyBSNsbaFfg_ifjhKLHXGxf54cqNNQqKFCh6gYIn2hpK-R1vuKus50PyAxECWwmRXV3cHgm6vhkpBDlPcZS_zc7X2jY_OdEULr7PNLru7EgaGeP48DIs_K-9wNtsLWTv-qm3sUwPGF7qFBkt-aM2FSdaQswwiDWLm4aeiQuthF6sWjbaRaBLslaCDd8PkabgN-Dp5h2hMygzyQKOzHtjrxTyhHLi6hIPHpWntfyLoiLdRgjeTyT01ByUnG2yy4kQM-hTo3mp4PjUrhA6D4uqmmMOQPDBmzB8IgD7MvdBeZQ9Mjxz3EP13JrjbPIu_f6tu50UnJxM5OoYRPEwS_e4A2&kw=&mw=300&mh=250&ml=1&curlh=1550911973
IP
Requested by https://twinrdack.com/multipane.engine?vms=00HFlAh7-4xG0EGdcUDTt1LkETedipAi59zy4wwroYLYtMr-JfQ4YewGv6hCS4eAyvRrku9xCCo0jj3gbSijPeLdBt6Vtl1NBk_vSwMSMvJMEbdnyYnRWPNIr2ZnIHnbY_TW9xuZr0J73-W8Udf34GpXAMtqkdYHzv7ccdE_sgHOGAMSiB7kgUS2QCNQQQNI9swFX0ws39qZMV1LEySI1c6kQ5iN3KIZIF-CmjzTvOklFqkBSjqVR4qdJ9nseaCm-soinz4FAoFxavXGFFlgrIKqvxEDRR7h_MER9AxL57Z77bshgipFakK_IYFcR-HGf8rG5lMQvhobE8G7RqBoLzcw6r35MavvGH8avLf-E6uKg-ZZnPqHVi5aX3YrJhC3a2STPQOxgaw_oChVWOkAB7rvGZAnYows21WPY2RDsoFIxGhrmgACjzTOXuzzN2nG2bL_XlRy7q5Ls6K9UwkDxWTDDvXghTjzg9b9u2q9XeyIhjmV0fpgtdgOGGko54NC4_mQNfbZuVcVnyEqx3GDN89jBxNESKgwfYU7QxofKkTC0E0bTMFkpze0kAJ0JaedNzlrUG7qFildbLqfkxqvtK2CvcS-wePRAbNrg6PJ8CKUs0awZkhqW7kyEKk1hg14yAQWjp7mr_kTRjuYfNS3bP4Q14Ltt5khwx5wkaX0BG9w1qokptjpxXZaOFadRNcCXUeAU2Z3DLdDOVVcQvbtDmMkuWbpU7C7-80AYmtQpMZFh73AJd_7o_IB7IopRLQUDMAT_rcX0vTI7corev52hV3Rz4rBAlDBb9Ndcm_82ZqWrsl3eBCAKSwWGzdhlXZSWh_zb9KAHFFL3FiJi1Dq4UUvBbvvzd0JK7D2KGn-tEYbCqweS9JlX-HntdLKok9Ah8BRcFfQFeH7Xad8VZM2zzHFBYZCSjzlql7-NFFjZM1Nrppzjw8e962J0DwPAVPlUwBLyxJV6tR16IpGTyxJyg2&dcid=3_ctx_be0b9aed-5013-4bea-b358-e3662bac938d&w=300&h=250&ml=1
Certificate IssuerGoogle Trust Services LLC
Subjecttwinrdack.com
Fingerprint1E:F8:EF:EE:AF:E9:AB:8B:B6:3B:9E:16:4B:8A:AF:17:9F:0D:01:75
ValidityMon, 16 Oct 2023 04:04:30 GMT - Sun, 14 Jan 2024 04:04:29 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (357), with CRLF line terminators
Hash 1592a12009474888f8df2d04df1ed74f
d87ecb6ef242fbd3e5df6b758b6e4695b2e220d6
01b5d4438d8cdbc3776c4c9c1377ccd43839d8cfb0c60c79491585f22116ca7c
GET //Redirect.eng?MediaSegmentId=41684&dcid=3_ctx_be0b9aed-5013-4bea-b358-e3662bac938d&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=&v=00HFlAh7-4xG0EGdcUDTtxTORWGgPq7hdbZA5evfThpn2vJeoSe-K3I7-OrxWBgZdqoApjozh9Sr2OelTkYPNv86b8iTeXJgCxl6n8rdSPo2UjRVleb6GDL2F3Lp6ByqIYE-zJmQ48UMb9jWiVm9BJ5kmM7vUU9DLwPft5fzY-RL6GqGMIWbuW_hDUIBYkOe0vxcodGLO1mx0M2uSFQguBxvna8jXLDL_XceE-tI9_8-1xn7QI56fcc0y_IBVlvlWB5D102VgOn5qIFazZS7yEKq2fKIPWAygUHF9ScAfAxg8MPuzg85F6uluhLO-hu78jveJ1uj-K_1Z0iXTpYnd210IGocZaBR8lbwk406XHigXtT5VLKRZdP8ePNx7gCzSdrY_UREewhimX52byQqg-SKb9RbnljZnM7eG0_N5-918qmmCahJtI_gcXpk01fKgy5PzcUsXTJCQCJGIswd9gH1MwlekE0nOwHQtoYxAnCcR3rWroxVlXkFuNLiHPfKS0qCTVt9qbMzdxOMvhIMuVhlyPuv7843YZjQq88z8TKfOHgzvy9q7_FiU1EINTWGXowr69Rn8RmIYSq-IPv9Rqt35CtAjQBG-umr6RkwCnp2c2nSg77OVModhhuUvAsOcCyBSNsbaFfg_ifjhKLHXGxf54cqNNQqKFCh6gYIn2hpK-R1vuKus50PyAxECWwmRXV3cHgm6vhkpBDlPcZS_zc7X2jY_OdEULr7PNLru7EgaGeP48DIs_K-9wNtsLWTv-qm3sUwPGF7qFBkt-aM2FSdaQswwiDWLm4aeiQuthF6sWjbaRaBLslaCDd8PkabgN-Dp5h2hMygzyQKOzHtjrxTyhHLi6hIPHpWntfyLoiLdRgjeTyT01ByUnG2yy4kQM-hTo3mp4PjUrhA6D4uqmmMOQPDBmzB8IgD7MvdBeZQ9Mjxz3EP13JrjbPIu_f6tu50UnJxM5OoYRPEwS_e4A2&kw=&mw=300&mh=250&ml=1&curlh=1550911973 HTTP/1.1
Host: twinrdack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://twinrdack.com/multipane.engine?vms=00HFlAh7-4xG0EGdcUDTt1LkETedipAi59zy4wwroYLYtMr-JfQ4YewGv6hCS4eAyvRrku9xCCo0jj3gbSijPeLdBt6Vtl1NBk_vSwMSMvJMEbdnyYnRWPNIr2ZnIHnbY_TW9xuZr0J73-W8Udf34GpXAMtqkdYHzv7ccdE_sgHOGAMSiB7kgUS2QCNQQQNI9swFX0ws39qZMV1LEySI1c6kQ5iN3KIZIF-CmjzTvOklFqkBSjqVR4qdJ9nseaCm-soinz4FAoFxavXGFFlgrIKqvxEDRR7h_MER9AxL57Z77bshgipFakK_IYFcR-HGf8rG5lMQvhobE8G7RqBoLzcw6r35MavvGH8avLf-E6uKg-ZZnPqHVi5aX3YrJhC3a2STPQOxgaw_oChVWOkAB7rvGZAnYows21WPY2RDsoFIxGhrmgACjzTOXuzzN2nG2bL_XlRy7q5Ls6K9UwkDxWTDDvXghTjzg9b9u2q9XeyIhjmV0fpgtdgOGGko54NC4_mQNfbZuVcVnyEqx3GDN89jBxNESKgwfYU7QxofKkTC0E0bTMFkpze0kAJ0JaedNzlrUG7qFildbLqfkxqvtK2CvcS-wePRAbNrg6PJ8CKUs0awZkhqW7kyEKk1hg14yAQWjp7mr_kTRjuYfNS3bP4Q14Ltt5khwx5wkaX0BG9w1qokptjpxXZaOFadRNcCXUeAU2Z3DLdDOVVcQvbtDmMkuWbpU7C7-80AYmtQpMZFh73AJd_7o_IB7IopRLQUDMAT_rcX0vTI7corev52hV3Rz4rBAlDBb9Ndcm_82ZqWrsl3eBCAKSwWGzdhlXZSWh_zb9KAHFFL3FiJi1Dq4UUvBbvvzd0JK7D2KGn-tEYbCqweS9JlX-HntdLKok9Ah8BRcFfQFeH7Xad8VZM2zzHFBYZCSjzlql7-NFFjZM1Nrppzjw8e962J0DwPAVPlUwBLyxJV6tR16IpGTyxJyg2&dcid=3_ctx_be0b9aed-5013-4bea-b358-e3662bac938d&w=300&h=250&ml=1
Cookie: IKSR={}; INF_DFL8=false; IUID=e9d799e6-d5c9-4c4b-94e7-af992fb7d02b; ISSH=6F7CFD; VMI=; IPLH=#{"53364":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; IPLH_Q=#[53364]; CHN=#[]; MSSH=#{}; MSRH=#{}; ILP=null; ILPLU=#1/1/0001 12:00:00 AM; ILEALC=#1/1/0001 12:00:00 AM; ILMPF=#False; IPMPLU=#; IPMUID=#; BSWUID=#; IBL=#[]; IPLSH=#{}; IPLSH_Q=#[]; IZH=#{"56389":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; IZH_Q=#[56389]; IMCH=#{}; IMCH_Q=#[]; IMH=#{"72904":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; IMH_Q=#[72904]; ISH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:18"}]}; ISH_Q=#[14172]; ISPH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; ISPH_Q=#[14172]; ICH=#{"30675":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; ICH_Q=#[30675]
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Thu, 23 Nov 2023 06:53:19 GMT
content-type: text/html; charset=utf-8
content-length: 429
location: https://twinrdack.com/mediahosting.engine?MediaId=72904&AId=11491&CId=30675&PId=53364&SiteId=14172&ZoneId=56389&VolumeMetricId=0c5edabd-5d1c-4a5a-a56e-b8442bc7417d&PassBackUrl=&res=&dcid=3_ctx_be0b9aed-5013-4bea-b358-e3662bac938d&cu=&kw=&mw=300&mh=250&ml=1
cache-control: private, no-transform
access-control-allow-origin: *
set-cookie: IKSR={}; path=/; SameSite=None; secure
INF_DFL8=false; path=/; SameSite=None; secure
IUID=e9d799e6-d5c9-4c4b-94e7-af992fb7d02b; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure
ISSH=6F7CFD; path=/; SameSite=None; secure
VMI=0c5edabd-5d1c-4a5a-a56e-b8442bc7417d; path=/; SameSite=None; secure
IPLH=#{"53364":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPLH_Q=#[53364]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
CHN=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
MSSH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
MSRH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ILP=null; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure
ILPLU=#1/1/0001 12:00:00 AM; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ILEALC=#1/1/0001 12:00:00 AM; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ILMPF=#False; expires=Thu, 23-Nov-2023 10:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPMPLU=#; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPMUID=#; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
BSWUID=#; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IKSR={}; path=/; SameSite=None; secure
IBL=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IZH=#{"56389":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IZH_Q=#[56389]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMH=#{"72904":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMH_Q=#[72904]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:18"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISH_Q=#[14172]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH_Q=#[14172]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ICH=#{"30675":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ICH_Q=#[30675]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
p3p: CP="CAO PSA OUR IND"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FxMwLIF4g95Fdt3QrmyBtzpPBGsMGPt5ctHjCimGPGeXTGJjQOkvbHYEOWP12q1%2F9nLCLs7dYePvnZdJhm8MXuAM%2B%2FGjs%2FFC5sJXUlXssXTZTL37ZsCiBGI0PKNZMsE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e950cc7712e-OSL
alt-svc: h3=":443"; ma=86400
twinrdack.com/link.engine?z=56391&guid=a99d1668-bfc3-4c15-85ae-c1ab8a56edb8&tid=0&kw=Straight,
302 Found 5.5 kB URL GET HTTP/2 twinrdack.com/link.engine?z=56391&guid=a99d1668-bfc3-4c15-85ae-c1ab8a56edb8&tid=0&kw=Straight,
IP
Requested by https://magapab.com/get?go=1&data=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
Certificate IssuerGoogle Trust Services LLC
Subjecttwinrdack.com
Fingerprint1E:F8:EF:EE:AF:E9:AB:8B:B6:3B:9E:16:4B:8A:AF:17:9F:0D:01:75
ValidityMon, 16 Oct 2023 04:04:30 GMT - Sun, 14 Jan 2024 04:04:29 GMT
File type gzip compressed data, from Unix\012- data
Hash 955034c57f6be414b975f52df95ca2ad
2d1ded255fc5bbcc4493e3b88c265b7cb0947402
0e3ad9ddee50a9c53b972194bfffbea053e9f8271b07bb7b4c7ac1b14ca1e2c5
GET /link.engine?z=56391&guid=a99d1668-bfc3-4c15-85ae-c1ab8a56edb8&tid=0&kw=Straight, HTTP/1.1
Host: twinrdack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://magapab.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Thu, 23 Nov 2023 06:53:18 GMT
content-type: text/html; charset=utf-8
location: https://twinrdack.com/multipane.engine?vms=OIWMbaBIT4wOYOr8I5q5WlhjcXt4GHOsbMuMStIVGkGTYDv5Zt0OW_BCnT_YcOGMMMOR8V8e95uEbV8uA2D_zSkZTjxpgG32cA9LU7JlTKLv9pd7HWApgWBdesFDH-Bc2rRthmuPgapXuKDkqYDyU3aAxPxLy0AHcrLudVNwAnCjn_XcxQdCw4ZkwXXWDSYftBaWA3dHEycrJ7tXdRFcqXCw8uBG-tVz4-HtyHe4-U9HJqVNdU45NJR28RUrFMLsDsM1-Go74WHhAChTXkUxieZ9HGP-oEh2ZNed1zFtFMIgKHsw81dOYMhWue7Xrli7SnT4UthHaPDiZkYCdAiqxCy6NvnMomLhdpB__bd5vipd9N7WSJAqa7x86ji6Qa2LlsMaZxclGdnm3qprTmDtSy-ytL6I8xjh433Dtg-V2wkPEUD5JlWFV9IJHZGCkcJ9yaz8a-aoQ3dj3W7YCkp9DLJUMcYqYV62le5vHUt92yOgsDYNSZs2pvK4KNqJsUtpKlGdYTc5hD51bP_5sS0X6mJUdyndyT6SQNYgA1uE_5SDTWZUmTS2wbddjuNtqHhyN8qV-BC_tD2M5PMd1nTamZtyvda45VbkcQ350ZRUCyOCrVCH46-wy5pjtm8Wb9QMkdHP0cwalhLg0c8PTSoPaUsKf2Tt4FQxsNDABnzEFUkROg-zl7kakxjTGtQtP5qy4Og3qUYuPdaCOYNtPuJ_zSLKldjBXkGnIPpmSjuXRH4MdhOweySHqGhCAKdnsIfQDZlFaTSt07NHuDmVYO93ArHyLVL-1OuHfgcbKWOrp6kIyRzctRGOqtLu769dAEVQ_t03sh2drYvqBneeEvBHBDcVTzmylHebspUzbYnn3QMrInSIYgo-jrw7GrHIc1PKywdcEf3lUAx84Jj44F1gWGiie4ceyEllafCzMdwi-c1lyzydJwcx2EoX_tGiXXWGJVqTLlrFqW-TZ8ga4cO82g2&dcid=3_ctx_918e11ce-cfb7-46b2-8079-575956c07a77&w=300&h=250&ml=1
vary: Accept-Encoding
cache-control: private, no-transform
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: *
set-cookie: IKSR={}; path=/; SameSite=None; secure
INF_DFL8=false; path=/; SameSite=None; secure
IUID=53d9ff3a-d779-4cfa-8b27-a603f7a319c1; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure
ISSH=6F7CFD; path=/; SameSite=None; secure
VMI=; path=/; SameSite=None; secure
IPLH=#{}; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IPLH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
CHN=#[]; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
MSSH=#{}; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
MSRH=#{}; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
ILP=null; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure
ILPLU=#1/1/0001 12:00:00 AM; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
ILEALC=#1/1/0001 12:00:00 AM; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
ILMPF=#False; expires=Thu, 23-Nov-2023 10:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IPMPLU=#; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IPMUID=#; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
BSWUID=#; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IKSR={}; path=/; SameSite=None; secure
IBL=#[]; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH=#{}; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IZH=#{}; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IZH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH=#{}; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IMH=#{}; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IMH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
ISH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:18"}]}; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
ISH_Q=#[14172]; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH=#{}; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
ICH=#{}; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
ICH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZW3I%2FL3zck%2FSlP446cMNSRxLD8ap8cj4y3OaM6VC6L1MfF6SJWk2fYT2ApmY6uaHAg6VSNmixYiJCnWPfdzEE%2FNuiMG%2B1EhxydTMvMfWC8ZC1tUPw8ibZqOpdJKvXUE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e8f289e56a8-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
twinrdack.com/mediahosting.engine?MediaId=72904&AId=11491&CId=30675&PId=53364&SiteId=14172&ZoneId=56389&VolumeMetricId=0c5edabd-5d1c-4a5a-a56e-b8442bc7417d&PassBackUrl=&res=&dcid=3_ctx_be0b9aed-5013-4bea-b358-e3662bac938d&cu=&kw=&mw=300&mh=250&ml=1
200 OK 224 kB URL GET HTTP/3 twinrdack.com/mediahosting.engine?MediaId=72904&AId=11491&CId=30675&PId=53364&SiteId=14172&ZoneId=56389&VolumeMetricId=0c5edabd-5d1c-4a5a-a56e-b8442bc7417d&PassBackUrl=&res=&dcid=3_ctx_be0b9aed-5013-4bea-b358-e3662bac938d&cu=&kw=&mw=300&mh=250&ml=1
IP
Requested by https://twinrdack.com/multipane.engine?vms=00HFlAh7-4xG0EGdcUDTt1LkETedipAi59zy4wwroYLYtMr-JfQ4YewGv6hCS4eAyvRrku9xCCo0jj3gbSijPeLdBt6Vtl1NBk_vSwMSMvJMEbdnyYnRWPNIr2ZnIHnbY_TW9xuZr0J73-W8Udf34GpXAMtqkdYHzv7ccdE_sgHOGAMSiB7kgUS2QCNQQQNI9swFX0ws39qZMV1LEySI1c6kQ5iN3KIZIF-CmjzTvOklFqkBSjqVR4qdJ9nseaCm-soinz4FAoFxavXGFFlgrIKqvxEDRR7h_MER9AxL57Z77bshgipFakK_IYFcR-HGf8rG5lMQvhobE8G7RqBoLzcw6r35MavvGH8avLf-E6uKg-ZZnPqHVi5aX3YrJhC3a2STPQOxgaw_oChVWOkAB7rvGZAnYows21WPY2RDsoFIxGhrmgACjzTOXuzzN2nG2bL_XlRy7q5Ls6K9UwkDxWTDDvXghTjzg9b9u2q9XeyIhjmV0fpgtdgOGGko54NC4_mQNfbZuVcVnyEqx3GDN89jBxNESKgwfYU7QxofKkTC0E0bTMFkpze0kAJ0JaedNzlrUG7qFildbLqfkxqvtK2CvcS-wePRAbNrg6PJ8CKUs0awZkhqW7kyEKk1hg14yAQWjp7mr_kTRjuYfNS3bP4Q14Ltt5khwx5wkaX0BG9w1qokptjpxXZaOFadRNcCXUeAU2Z3DLdDOVVcQvbtDmMkuWbpU7C7-80AYmtQpMZFh73AJd_7o_IB7IopRLQUDMAT_rcX0vTI7corev52hV3Rz4rBAlDBb9Ndcm_82ZqWrsl3eBCAKSwWGzdhlXZSWh_zb9KAHFFL3FiJi1Dq4UUvBbvvzd0JK7D2KGn-tEYbCqweS9JlX-HntdLKok9Ah8BRcFfQFeH7Xad8VZM2zzHFBYZCSjzlql7-NFFjZM1Nrppzjw8e962J0DwPAVPlUwBLyxJV6tR16IpGTyxJyg2&dcid=3_ctx_be0b9aed-5013-4bea-b358-e3662bac938d&w=300&h=250&ml=1
Certificate IssuerGoogle Trust Services LLC
Subjecttwinrdack.com
Fingerprint1E:F8:EF:EE:AF:E9:AB:8B:B6:3B:9E:16:4B:8A:AF:17:9F:0D:01:75
ValidityMon, 16 Oct 2023 04:04:30 GMT - Sun, 14 Jan 2024 04:04:29 GMT
File type gzip compressed data, from Unix\012- data
Size 224 kB (223686 bytes)
Hash 6df8489b885aad5f4ee21e8db05cc84a
3a88f11ef007665d20052e3d85b45c7c6b4e4de9
0e442a8a6d3c5a0382e411dbf63bdba02c6a994f9958ccd911b1c0e4378602e1
GET /mediahosting.engine?MediaId=72904&AId=11491&CId=30675&PId=53364&SiteId=14172&ZoneId=56389&VolumeMetricId=0c5edabd-5d1c-4a5a-a56e-b8442bc7417d&PassBackUrl=&res=&dcid=3_ctx_be0b9aed-5013-4bea-b358-e3662bac938d&cu=&kw=&mw=300&mh=250&ml=1 HTTP/1.1
Host: twinrdack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://twinrdack.com/multipane.engine?vms=00HFlAh7-4xG0EGdcUDTt1LkETedipAi59zy4wwroYLYtMr-JfQ4YewGv6hCS4eAyvRrku9xCCo0jj3gbSijPeLdBt6Vtl1NBk_vSwMSMvJMEbdnyYnRWPNIr2ZnIHnbY_TW9xuZr0J73-W8Udf34GpXAMtqkdYHzv7ccdE_sgHOGAMSiB7kgUS2QCNQQQNI9swFX0ws39qZMV1LEySI1c6kQ5iN3KIZIF-CmjzTvOklFqkBSjqVR4qdJ9nseaCm-soinz4FAoFxavXGFFlgrIKqvxEDRR7h_MER9AxL57Z77bshgipFakK_IYFcR-HGf8rG5lMQvhobE8G7RqBoLzcw6r35MavvGH8avLf-E6uKg-ZZnPqHVi5aX3YrJhC3a2STPQOxgaw_oChVWOkAB7rvGZAnYows21WPY2RDsoFIxGhrmgACjzTOXuzzN2nG2bL_XlRy7q5Ls6K9UwkDxWTDDvXghTjzg9b9u2q9XeyIhjmV0fpgtdgOGGko54NC4_mQNfbZuVcVnyEqx3GDN89jBxNESKgwfYU7QxofKkTC0E0bTMFkpze0kAJ0JaedNzlrUG7qFildbLqfkxqvtK2CvcS-wePRAbNrg6PJ8CKUs0awZkhqW7kyEKk1hg14yAQWjp7mr_kTRjuYfNS3bP4Q14Ltt5khwx5wkaX0BG9w1qokptjpxXZaOFadRNcCXUeAU2Z3DLdDOVVcQvbtDmMkuWbpU7C7-80AYmtQpMZFh73AJd_7o_IB7IopRLQUDMAT_rcX0vTI7corev52hV3Rz4rBAlDBb9Ndcm_82ZqWrsl3eBCAKSwWGzdhlXZSWh_zb9KAHFFL3FiJi1Dq4UUvBbvvzd0JK7D2KGn-tEYbCqweS9JlX-HntdLKok9Ah8BRcFfQFeH7Xad8VZM2zzHFBYZCSjzlql7-NFFjZM1Nrppzjw8e962J0DwPAVPlUwBLyxJV6tR16IpGTyxJyg2&dcid=3_ctx_be0b9aed-5013-4bea-b358-e3662bac938d&w=300&h=250&ml=1
DNT: 1
Connection: keep-alive
Cookie: IKSR={}; INF_DFL8=false; IUID=e9d799e6-d5c9-4c4b-94e7-af992fb7d02b; ISSH=6F7CFD; VMI=d5760216-18c7-45a5-8b0e-a9836abe8ad0; IPLH=#{"53364":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; IPLH_Q=#[53364]; CHN=#[]; MSSH=#{}; MSRH=#{}; ILP=null; ILPLU=#1/1/0001 12:00:00 AM; ILEALC=#1/1/0001 12:00:00 AM; ILMPF=#False; IPMPLU=#; IPMUID=#; BSWUID=#; IBL=#[]; IPLSH=#{}; IPLSH_Q=#[]; IZH=#{"56389":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; IZH_Q=#[56389]; IMCH=#{}; IMCH_Q=#[]; IMH=#{"72904":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; IMH_Q=#[72904]; ISH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:18"}]}; ISH_Q=#[14172]; ISPH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; ISPH_Q=#[14172]; ICH=#{"30675":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; ICH_Q=#[30675]
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:53:19 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: private, no-transform
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: *
set-cookie: IKSR={}; path=/; SameSite=None; secure
INF_DFL8=false; path=/; SameSite=None; secure
IUID=e9d799e6-d5c9-4c4b-94e7-af992fb7d02b; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure
ISSH=6F7CFD; path=/; SameSite=None; secure
VMI=d5760216-18c7-45a5-8b0e-a9836abe8ad0; path=/; SameSite=None; secure
IPLH=#{"53364":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPLH_Q=#[53364]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
CHN=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
MSSH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
MSRH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ILP=null; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure
ILPLU=#1/1/0001 12:00:00 AM; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ILEALC=#1/1/0001 12:00:00 AM; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ILMPF=#False; expires=Thu, 23-Nov-2023 10:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPMPLU=#; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPMUID=#; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
BSWUID=#; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IKSR={}; path=/; SameSite=None; secure
IBL=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IZH=#{"56389":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IZH_Q=#[56389]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMH=#{"72904":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMH_Q=#[72904]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:18"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISH_Q=#[14172]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH_Q=#[14172]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ICH=#{"30675":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ICH_Q=#[30675]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TiKPDjjnnAU11DE6JkQf8aC1EC6qQtSLqpjocu3eKBctgYEnas4tXFdvsHXq1jwC27kN06DddvnbRK31KeXCQAQG6JJAnTbQ2f7h2E3g9a8uYALkdWp3GysWyVj8BJo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e963e03712e-OSL
alt-svc: h3=":443"; ma=86400
m3.twinredads.com/f4a010db-dd61-48b7-b7cb-fc880cb5e6f6
200 OK 276 kB URL GET HTTP/1.1 m3.twinredads.com/f4a010db-dd61-48b7-b7cb-fc880cb5e6f6
IP
Requested by https://twinrdack.com/mediahosting.engine?MediaId=72901&AId=11491&CId=30675&PId=53360&SiteId=14172&ZoneId=56391&VolumeMetricId=d5760216-18c7-45a5-8b0e-a9836abe8ad0&PassBackUrl=&res=&dcid=3_ctx_918e11ce-cfb7-46b2-8079-575956c07a77&cu=&kw=&mw=300&mh=250&ml=1
Certificate IssuerGoDaddy.com, Inc.
Subjectm3.twinredads.com
FingerprintB2:08:56:DF:D1:03:83:DE:20:1E:DB:6F:01:ED:DD:B8:EB:09:64:FB
ValidityTue, 25 Oct 2022 19:48:27 GMT - Sun, 26 Nov 2023 19:48:27 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 34x34, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 5D Mark III, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Adobe Photoshop 22.5 (Macintosh), datetime=2021:08:30 14:58:49], progressive, precision 8, 1360x765, components 3\012- data
Size 276 kB (275821 bytes)
Hash 404994c4cc785465eab3d50b73fc5e20
f93061c87f0b0dc4293ffef8abfd915e575fbff2
02dabb65472abffdb23c52b5b4b730a67f234179cf2e5c2070a40b717545acd8
GET /f4a010db-dd61-48b7-b7cb-fc880cb5e6f6 HTTP/1.1
Host: m3.twinredads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://twinrdack.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 23 Nov 2023 06:53:20 GMT
Connection: Keep-Alive
ETag: "1640096795"
Cache-Control: max-age=609
Content-Length: 275821
Content-Type: image/jpeg
Last-Modified: Tue, 21 Dec 2021 14:26:35 GMT
Accept-Ranges: bytes
X-HW: 1700722400.dop208.sk1.t,1700722400.cds010.sk1.shn,1700722400.dop208.sk1.t,1700722400.cds259.sk1.c
Access-Control-Allow-Origin: *
m3.twinredads.com/2d81dd1e-fb03-4e06-8ac0-b935253b3657
200 OK 165 kB URL GET HTTP/1.1 m3.twinredads.com/2d81dd1e-fb03-4e06-8ac0-b935253b3657
IP
Requested by https://twinrdack.com/mediahosting.engine?MediaId=72904&AId=11491&CId=30675&PId=53364&SiteId=14172&ZoneId=56389&VolumeMetricId=0c5edabd-5d1c-4a5a-a56e-b8442bc7417d&PassBackUrl=&res=&dcid=3_ctx_be0b9aed-5013-4bea-b358-e3662bac938d&cu=&kw=&mw=300&mh=250&ml=1
Certificate IssuerGoDaddy.com, Inc.
Subjectm3.twinredads.com
FingerprintB2:08:56:DF:D1:03:83:DE:20:1E:DB:6F:01:ED:DD:B8:EB:09:64:FB
ValidityTue, 25 Oct 2022 19:48:27 GMT - Sun, 26 Nov 2023 19:48:27 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 25x25, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 6D Mark II, orientation=upper-left, xresolution=186, yresolution=194, resolutionunit=2, software=Adobe Photoshop 22.4 (Macintosh), datetime=2021:07:13 12:32:31], baseline, precision 8, 1000x563, components 3\012- data
Size 165 kB (165066 bytes)
Hash f607aaaa97724bc9d589df0bb6ff9ad4
f3491d490d74225709f81f1ce34aa6ca0fa89b2e
14a33443afeb18b38fd728bdac255c0cc28a344249e6778bfe8f1025a3970b1b
GET /2d81dd1e-fb03-4e06-8ac0-b935253b3657 HTTP/1.1
Host: m3.twinredads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://twinrdack.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 23 Nov 2023 06:53:20 GMT
Connection: Keep-Alive
ETag: "1640097298"
Cache-Control: max-age=781
Content-Length: 165066
Content-Type: image/jpeg
Last-Modified: Tue, 21 Dec 2021 14:34:58 GMT
Accept-Ranges: bytes
X-HW: 1700722400.dop230.sk1.t,1700722400.cds260.sk1.shn,1700722400.dop230.sk1.t,1700722400.cds251.sk1.c
Access-Control-Allow-Origin: *
m3.twinredads.com/9feab0e8-68c5-4aaf-85d5-6ea35ab54869
200 OK 214 kB URL GET HTTP/1.1 m3.twinredads.com/9feab0e8-68c5-4aaf-85d5-6ea35ab54869
IP
Requested by https://twinrdack.com/mediahosting.engine?MediaId=72901&AId=11491&CId=30675&PId=53360&SiteId=14172&ZoneId=56391&VolumeMetricId=d5760216-18c7-45a5-8b0e-a9836abe8ad0&PassBackUrl=&res=&dcid=3_ctx_918e11ce-cfb7-46b2-8079-575956c07a77&cu=&kw=&mw=300&mh=250&ml=1
Certificate IssuerGoDaddy.com, Inc.
Subjectm3.twinredads.com
FingerprintB2:08:56:DF:D1:03:83:DE:20:1E:DB:6F:01:ED:DD:B8:EB:09:64:FB
ValidityTue, 25 Oct 2022 19:48:27 GMT - Sun, 26 Nov 2023 19:48:27 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 30x30, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 5D Mark III, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Adobe Photoshop 22.5 (Macintosh), datetime=2021:08:30 15:12:31], progressive, precision 8, 1200x675, components 3\012- data
Size 214 kB (214518 bytes)
Hash 3668d752f2e8393162453a55ad78356f
3a47c2b54da81b6d8a7e3164add8051b4b8c5c94
3b6952266a696d501f66d6929ed3880c6ca042aafe2dfd6fc89acf43252bafdd
GET /9feab0e8-68c5-4aaf-85d5-6ea35ab54869 HTTP/1.1
Host: m3.twinredads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://twinrdack.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 23 Nov 2023 06:53:20 GMT
Connection: Keep-Alive
ETag: "1640096795"
Cache-Control: max-age=754
Content-Length: 214518
Content-Type: image/jpeg
Last-Modified: Tue, 21 Dec 2021 14:26:35 GMT
Accept-Ranges: bytes
X-HW: 1700722399.dop210.sk1.t,1700722400.cds238.sk1.shn,1700722400.dop210.sk1.t,1700722400.cds253.sk1.c
Access-Control-Allow-Origin: *
fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap
200 OK 2.3 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap
IP
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (2353), with no line terminators
Hash 205bca929d84e188ff5544e4cfbc10bb
836eaefbedd5fe0befd27d76beed62454e0125f4
6b23326d85e0b374ca55e02fc2795bf40fb504d35d16e26356c19feff2b7b306
GET /css2?family=Lato:wght@400;700;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 23 Nov 2023 06:53:16 GMT
date: Thu, 23 Nov 2023 06:53:16 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
twinrdack.com/multipane.engine?vms=00HFlAh7-4xG0EGdcUDTt1LkETedipAi59zy4wwroYLYtMr-JfQ4YewGv6hCS4eAyvRrku9xCCo0jj3gbSijPeLdBt6Vtl1NBk_vSwMSMvJMEbdnyYnRWPNIr2ZnIHnbY_TW9xuZr0J73-W8Udf34GpXAMtqkdYHzv7ccdE_sgHOGAMSiB7kgUS2QCNQQQNI9swFX0ws39qZMV1LEySI1c6kQ5iN3KIZIF-CmjzTvOklFqkBSjqVR4qdJ9nseaCm-soinz4FAoFxavXGFFlgrIKqvxEDRR7h_MER9AxL57Z77bshgipFakK_IYFcR-HGf8rG5lMQvhobE8G7RqBoLzcw6r35MavvGH8avLf-E6uKg-ZZnPqHVi5aX3YrJhC3a2STPQOxgaw_oChVWOkAB7rvGZAnYows21WPY2RDsoFIxGhrmgACjzTOXuzzN2nG2bL_XlRy7q5Ls6K9UwkDxWTDDvXghTjzg9b9u2q9XeyIhjmV0fpgtdgOGGko54NC4_mQNfbZuVcVnyEqx3GDN89jBxNESKgwfYU7QxofKkTC0E0bTMFkpze0kAJ0JaedNzlrUG7qFildbLqfkxqvtK2CvcS-wePRAbNrg6PJ8CKUs0awZkhqW7kyEKk1hg14yAQWjp7mr_kTRjuYfNS3bP4Q14Ltt5khwx5wkaX0BG9w1qokptjpxXZaOFadRNcCXUeAU2Z3DLdDOVVcQvbtDmMkuWbpU7C7-80AYmtQpMZFh73AJd_7o_IB7IopRLQUDMAT_rcX0vTI7corev52hV3Rz4rBAlDBb9Ndcm_82ZqWrsl3eBCAKSwWGzdhlXZSWh_zb9KAHFFL3FiJi1Dq4UUvBbvvzd0JK7D2KGn-tEYbCqweS9JlX-HntdLKok9Ah8BRcFfQFeH7Xad8VZM2zzHFBYZCSjzlql7-NFFjZM1Nrppzjw8e962J0DwPAVPlUwBLyxJV6tR16IpGTyxJyg2&dcid=3_ctx_be0b9aed-5013-4bea-b358-e3662bac938d&w=300&h=250&ml=1
200 OK 15 kB URL GET HTTP/3 twinrdack.com/multipane.engine?vms=00HFlAh7-4xG0EGdcUDTt1LkETedipAi59zy4wwroYLYtMr-JfQ4YewGv6hCS4eAyvRrku9xCCo0jj3gbSijPeLdBt6Vtl1NBk_vSwMSMvJMEbdnyYnRWPNIr2ZnIHnbY_TW9xuZr0J73-W8Udf34GpXAMtqkdYHzv7ccdE_sgHOGAMSiB7kgUS2QCNQQQNI9swFX0ws39qZMV1LEySI1c6kQ5iN3KIZIF-CmjzTvOklFqkBSjqVR4qdJ9nseaCm-soinz4FAoFxavXGFFlgrIKqvxEDRR7h_MER9AxL57Z77bshgipFakK_IYFcR-HGf8rG5lMQvhobE8G7RqBoLzcw6r35MavvGH8avLf-E6uKg-ZZnPqHVi5aX3YrJhC3a2STPQOxgaw_oChVWOkAB7rvGZAnYows21WPY2RDsoFIxGhrmgACjzTOXuzzN2nG2bL_XlRy7q5Ls6K9UwkDxWTDDvXghTjzg9b9u2q9XeyIhjmV0fpgtdgOGGko54NC4_mQNfbZuVcVnyEqx3GDN89jBxNESKgwfYU7QxofKkTC0E0bTMFkpze0kAJ0JaedNzlrUG7qFildbLqfkxqvtK2CvcS-wePRAbNrg6PJ8CKUs0awZkhqW7kyEKk1hg14yAQWjp7mr_kTRjuYfNS3bP4Q14Ltt5khwx5wkaX0BG9w1qokptjpxXZaOFadRNcCXUeAU2Z3DLdDOVVcQvbtDmMkuWbpU7C7-80AYmtQpMZFh73AJd_7o_IB7IopRLQUDMAT_rcX0vTI7corev52hV3Rz4rBAlDBb9Ndcm_82ZqWrsl3eBCAKSwWGzdhlXZSWh_zb9KAHFFL3FiJi1Dq4UUvBbvvzd0JK7D2KGn-tEYbCqweS9JlX-HntdLKok9Ah8BRcFfQFeH7Xad8VZM2zzHFBYZCSjzlql7-NFFjZM1Nrppzjw8e962J0DwPAVPlUwBLyxJV6tR16IpGTyxJyg2&dcid=3_ctx_be0b9aed-5013-4bea-b358-e3662bac938d&w=300&h=250&ml=1
IP
Requested by https://magapab.com/get?go=1&data=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
Certificate IssuerGoogle Trust Services LLC
Subjecttwinrdack.com
Fingerprint1E:F8:EF:EE:AF:E9:AB:8B:B6:3B:9E:16:4B:8A:AF:17:9F:0D:01:75
ValidityMon, 16 Oct 2023 04:04:30 GMT - Sun, 14 Jan 2024 04:04:29 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1350), with CRLF line terminators
Hash 47304e4ed1d2f52b92b8fa693b39996b
bc71b7c40a22e12f2099616f894eab5cb602a838
5782268989cda81d06d780be67414ec31c565d961e88383959d7ea7db00eecef
GET /multipane.engine?vms=00HFlAh7-4xG0EGdcUDTt1LkETedipAi59zy4wwroYLYtMr-JfQ4YewGv6hCS4eAyvRrku9xCCo0jj3gbSijPeLdBt6Vtl1NBk_vSwMSMvJMEbdnyYnRWPNIr2ZnIHnbY_TW9xuZr0J73-W8Udf34GpXAMtqkdYHzv7ccdE_sgHOGAMSiB7kgUS2QCNQQQNI9swFX0ws39qZMV1LEySI1c6kQ5iN3KIZIF-CmjzTvOklFqkBSjqVR4qdJ9nseaCm-soinz4FAoFxavXGFFlgrIKqvxEDRR7h_MER9AxL57Z77bshgipFakK_IYFcR-HGf8rG5lMQvhobE8G7RqBoLzcw6r35MavvGH8avLf-E6uKg-ZZnPqHVi5aX3YrJhC3a2STPQOxgaw_oChVWOkAB7rvGZAnYows21WPY2RDsoFIxGhrmgACjzTOXuzzN2nG2bL_XlRy7q5Ls6K9UwkDxWTDDvXghTjzg9b9u2q9XeyIhjmV0fpgtdgOGGko54NC4_mQNfbZuVcVnyEqx3GDN89jBxNESKgwfYU7QxofKkTC0E0bTMFkpze0kAJ0JaedNzlrUG7qFildbLqfkxqvtK2CvcS-wePRAbNrg6PJ8CKUs0awZkhqW7kyEKk1hg14yAQWjp7mr_kTRjuYfNS3bP4Q14Ltt5khwx5wkaX0BG9w1qokptjpxXZaOFadRNcCXUeAU2Z3DLdDOVVcQvbtDmMkuWbpU7C7-80AYmtQpMZFh73AJd_7o_IB7IopRLQUDMAT_rcX0vTI7corev52hV3Rz4rBAlDBb9Ndcm_82ZqWrsl3eBCAKSwWGzdhlXZSWh_zb9KAHFFL3FiJi1Dq4UUvBbvvzd0JK7D2KGn-tEYbCqweS9JlX-HntdLKok9Ah8BRcFfQFeH7Xad8VZM2zzHFBYZCSjzlql7-NFFjZM1Nrppzjw8e962J0DwPAVPlUwBLyxJV6tR16IpGTyxJyg2&dcid=3_ctx_be0b9aed-5013-4bea-b358-e3662bac938d&w=300&h=250&ml=1 HTTP/1.1
Host: twinrdack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://magapab.com/
DNT: 1
Connection: keep-alive
Cookie: IKSR={}; INF_DFL8=false; IUID=e9d799e6-d5c9-4c4b-94e7-af992fb7d02b; ISSH=6F7CFD; VMI=; IPLH=#{}; IPLH_Q=#[]; CHN=#[]; MSSH=#{}; MSRH=#{}; ILP=null; ILPLU=#1/1/0001 12:00:00 AM; ILEALC=#1/1/0001 12:00:00 AM; ILMPF=#False; IPMPLU=#; IPMUID=#; BSWUID=#; IBL=#[]; IPLSH=#{}; IPLSH_Q=#[]; IZH=#{}; IZH_Q=#[]; IMCH=#{}; IMCH_Q=#[]; IMH=#{}; IMH_Q=#[]; ISH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:18"}]}; ISH_Q=#[14172]; ISPH=#{}; ISPH_Q=#[]; ICH=#{}; ICH_Q=#[]
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:53:19 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: private, no-transform
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: *
set-cookie: IKSR={}; path=/; SameSite=None; secure
INF_DFL8=false; path=/; SameSite=None; secure
IUID=e9d799e6-d5c9-4c4b-94e7-af992fb7d02b; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure
ISSH=6F7CFD; path=/; SameSite=None; secure
VMI=; path=/; SameSite=None; secure
IPLH=#{"53364":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPLH_Q=#[53364]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
CHN=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
MSSH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
MSRH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ILP=null; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure
ILPLU=#1/1/0001 12:00:00 AM; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ILEALC=#1/1/0001 12:00:00 AM; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ILMPF=#False; expires=Thu, 23-Nov-2023 10:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPMPLU=#; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPMUID=#; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
BSWUID=#; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IKSR={}; path=/; SameSite=None; secure
IBL=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IZH=#{"56389":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IZH_Q=#[56389]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMH=#{"72904":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMH_Q=#[72904]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:18"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISH_Q=#[14172]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH_Q=#[14172]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ICH=#{"30675":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ICH_Q=#[30675]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x4%2BmaLbjt0DKoSob69ve3BRb2rS1w93xiH8ZxU%2FRKePF9YYd07clQEJoJCXjlARC8XnSjxcCMnaG3R%2FQH9u2hhhzg25CnkuqHnpnzg%2BFDwpWpEoQqpL2Uk1UdF21LE4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e91da0d712e-OSL
alt-svc: h3=":443"; ma=86400
vxxx.com/api/json/suggester/43200/1000.json
200 OK 16 kB URL GET HTTP/3 vxxx.com/api/json/suggester/43200/1000.json
IP
Certificate IssuerLet's Encrypt
Subjectvxxx.com
Fingerprint93:0F:B9:71:36:94:FF:F7:C6:48:22:6C:9B:23:01:95:93:29:E9:C1
ValidityWed, 25 Oct 2023 03:22:46 GMT - Tue, 23 Jan 2024 03:22:45 GMT
File type JSON data\012- , ASCII text, with very long lines (15790), with no line terminators
Hash 4401b3740ef4823cdb07225d01c0dd88
9fe716ec0528101948f7eef0346bdd36f88c9d56
acd798fe0d8b9a67678f606035351047f2fec750397036900943c7bebbe41c70
GET /api/json/suggester/43200/1000.json HTTP/1.1
Host: vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:53:16 GMT
content-type: application/json
last-modified: Thu, 23 Nov 2023 04:54:07 GMT
vary: Accept-Encoding
etag: W/"655edaef-3dae"
expires: Thu, 23 Nov 2023 06:58:16 GMT
cache-control: max-age=300
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nq3tg9zB5d11vhPCMz%2BZiYzs9B6C4LFa1oiV7q4A8mmXL7vNGL1UzADuY7GT9k06h3n0gNrI3iog4NKnhTnftN4NN45BG8%2FIAGyUom43DMtD9A1b%2F9tAR47x0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e81ddc14142-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
vxxx.com/static/images/flags/no.svg
200 OK 321 B URL GET HTTP/3 vxxx.com/static/images/flags/no.svg
IP
Certificate IssuerLet's Encrypt
Subjectvxxx.com
Fingerprint93:0F:B9:71:36:94:FF:F7:C6:48:22:6C:9B:23:01:95:93:29:E9:C1
ValidityWed, 25 Oct 2023 03:22:46 GMT - Tue, 23 Jan 2024 03:22:45 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (354), with no line terminators
Hash d18bfc89aa5eb30dd12f2380619c8f86
7b2877aa02155d80107cdfe8258b99c91e6a4279
39243cf56fc05035f04c9f69089153a76549a209f9cab9985d09366382feec89
GET /static/images/flags/no.svg HTTP/1.1
Host: vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/static/css/app.f14d3b65.css
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:53:16 GMT
content-type: image/svg+xml
last-modified: Wed, 22 Nov 2023 13:04:03 GMT
etag: W/"655dfc43-141"
expires: Thu, 23 Nov 2023 07:23:16 GMT
cache-control: public, max-age=14400
pragma: public
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9JqFO%2BG7y5073mnA12XhX6t1lsl0oEEKjx3nremzQr5YymbUbNAMPAH5ORMBVuu96YDVlQZ4bNUMifx9P4p1LvzZVM6dJxYcKYxLwl%2F93sMIuVUNbSWwDFi1uw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77e81fde84142-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
twinrdack.com/link.engine?z=56389&guid=a99d1668-bfc3-4c15-85ae-c1ab8a56edb8&tid=0&kw=Straight,
302 Found 15 kB URL GET HTTP/2 twinrdack.com/link.engine?z=56389&guid=a99d1668-bfc3-4c15-85ae-c1ab8a56edb8&tid=0&kw=Straight,
IP
Requested by https://magapab.com/get?go=1&data=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
Certificate IssuerGoogle Trust Services LLC
Subjecttwinrdack.com
Fingerprint1E:F8:EF:EE:AF:E9:AB:8B:B6:3B:9E:16:4B:8A:AF:17:9F:0D:01:75
ValidityMon, 16 Oct 2023 04:04:30 GMT - Sun, 14 Jan 2024 04:04:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /link.engine?z=56389&guid=a99d1668-bfc3-4c15-85ae-c1ab8a56edb8&tid=0&kw=Straight, HTTP/1.1
Host: twinrdack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://magapab.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 23 Nov 2023 06:53:18 GMT
content-type: text/html; charset=utf-8
location: https://twinrdack.com/multipane.engine?vms=00HFlAh7-4xG0EGdcUDTt1LkETedipAi59zy4wwroYLYtMr-JfQ4YewGv6hCS4eAyvRrku9xCCo0jj3gbSijPeLdBt6Vtl1NBk_vSwMSMvJMEbdnyYnRWPNIr2ZnIHnbY_TW9xuZr0J73-W8Udf34GpXAMtqkdYHzv7ccdE_sgHOGAMSiB7kgUS2QCNQQQNI9swFX0ws39qZMV1LEySI1c6kQ5iN3KIZIF-CmjzTvOklFqkBSjqVR4qdJ9nseaCm-soinz4FAoFxavXGFFlgrIKqvxEDRR7h_MER9AxL57Z77bshgipFakK_IYFcR-HGf8rG5lMQvhobE8G7RqBoLzcw6r35MavvGH8avLf-E6uKg-ZZnPqHVi5aX3YrJhC3a2STPQOxgaw_oChVWOkAB7rvGZAnYows21WPY2RDsoFIxGhrmgACjzTOXuzzN2nG2bL_XlRy7q5Ls6K9UwkDxWTDDvXghTjzg9b9u2q9XeyIhjmV0fpgtdgOGGko54NC4_mQNfbZuVcVnyEqx3GDN89jBxNESKgwfYU7QxofKkTC0E0bTMFkpze0kAJ0JaedNzlrUG7qFildbLqfkxqvtK2CvcS-wePRAbNrg6PJ8CKUs0awZkhqW7kyEKk1hg14yAQWjp7mr_kTRjuYfNS3bP4Q14Ltt5khwx5wkaX0BG9w1qokptjpxXZaOFadRNcCXUeAU2Z3DLdDOVVcQvbtDmMkuWbpU7C7-80AYmtQpMZFh73AJd_7o_IB7IopRLQUDMAT_rcX0vTI7corev52hV3Rz4rBAlDBb9Ndcm_82ZqWrsl3eBCAKSwWGzdhlXZSWh_zb9KAHFFL3FiJi1Dq4UUvBbvvzd0JK7D2KGn-tEYbCqweS9JlX-HntdLKok9Ah8BRcFfQFeH7Xad8VZM2zzHFBYZCSjzlql7-NFFjZM1Nrppzjw8e962J0DwPAVPlUwBLyxJV6tR16IpGTyxJyg2&dcid=3_ctx_be0b9aed-5013-4bea-b358-e3662bac938d&w=300&h=250&ml=1
vary: Accept-Encoding
cache-control: private, no-transform
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: *
set-cookie: IKSR={}; path=/; SameSite=None; secure
INF_DFL8=false; path=/; SameSite=None; secure
IUID=e9d799e6-d5c9-4c4b-94e7-af992fb7d02b; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure
ISSH=6F7CFD; path=/; SameSite=None; secure
VMI=; path=/; SameSite=None; secure
IPLH=#{}; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IPLH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
CHN=#[]; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
MSSH=#{}; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
MSRH=#{}; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
ILP=null; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure
ILPLU=#1/1/0001 12:00:00 AM; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
ILEALC=#1/1/0001 12:00:00 AM; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
ILMPF=#False; expires=Thu, 23-Nov-2023 10:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IPMPLU=#; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IPMUID=#; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
BSWUID=#; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IKSR={}; path=/; SameSite=None; secure
IBL=#[]; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH=#{}; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IZH=#{}; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IZH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH=#{}; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IMH=#{}; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
IMH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
ISH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:18"}]}; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
ISH_Q=#[14172]; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH=#{}; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
ICH=#{}; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
ICH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:18 GMT; path=/; SameSite=None; secure; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KU0oSfckkZxt6kp8%2FMdk6gpt4t%2B%2FkuDPgzzpZ5mEZhCNoyaAn9cW%2BoVCZDQqgNDBufkJ97vcY1dW4TZBIH9UtjWDXbaj%2Faimqn8U4hdz4zf%2FFyIG9l%2FjH5V685soGTk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e8ef85a56a8-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
vxxx.com/static//static/images/favicons/apple-touch-icon.png?v=4
301 Moved Permanently 217 kB URL GET HTTP/3 vxxx.com/static//static/images/favicons/apple-touch-icon.png?v=4
IP
Certificate IssuerLet's Encrypt
Subjectvxxx.com
Fingerprint93:0F:B9:71:36:94:FF:F7:C6:48:22:6C:9B:23:01:95:93:29:E9:C1
ValidityWed, 25 Oct 2023 03:22:46 GMT - Tue, 23 Jan 2024 03:22:45 GMT
Size 217 kB (217178 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static//static/images/favicons/apple-touch-icon.png?v=4 HTTP/1.1
Host: vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 301 Moved Permanently
date: Thu, 23 Nov 2023 06:53:16 GMT
content-type: text/html
location: https://vxxx.com/page-404/
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eVJnCAWGEnNWXMxV6kjXX6mG1KzWhM5lH7M7gOk%2BzLguWK3JMi7Rm9gsXzaudLG866JSBvGJGjLpWQ4LE7y98W21JvWjlcT4xLM3jfzdWiRmh72KQmz%2FINqYvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77e83c8224142-LHR
alt-svc: h3=":443"; ma=86400
vxxx.com/api/json/videos2/7200/str/latest-updates/20/..1....json
200 OK 30 kB URL GET HTTP/3 vxxx.com/api/json/videos2/7200/str/latest-updates/20/..1....json
IP
Certificate IssuerLet's Encrypt
Subjectvxxx.com
Fingerprint93:0F:B9:71:36:94:FF:F7:C6:48:22:6C:9B:23:01:95:93:29:E9:C1
ValidityWed, 25 Oct 2023 03:22:46 GMT - Tue, 23 Jan 2024 03:22:45 GMT
File type JSON data\012- , ASCII text, with very long lines (30091), with no line terminators
Hash 6f131a869948d7ae48f0eb64cda7fe34
738a2ef6bfd8479234c433d946b20cf63f6762fa
2c39ef4ee37d14b2d1dbd01bfe7868baf8e847183532b2968a175f4fcd761a74
GET /api/json/videos2/7200/str/latest-updates/20/..1....json HTTP/1.1
Host: vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:53:16 GMT
content-type: application/json
last-modified: Thu, 23 Nov 2023 04:54:21 GMT
vary: Accept-Encoding
etag: W/"655edafd-758b"
expires: Thu, 23 Nov 2023 06:58:16 GMT
cache-control: max-age=300
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VNbotC%2FJYFKCHyIT64CUZtKh0zYLVaHjpQr7m3HM0TzRUsHw%2B9Cy3quIWET%2Bc3I71sQ%2FXDm4DgYL8Xm4KTxkDqq7VpkOzrh8wmfyJe0%2FANyO7%2FUZUEOKj5%2BQIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e81cdb34142-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
metricswpsh.com/in/track?data=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
200 OK 0 B URL GET HTTP/2 metricswpsh.com/in/track?data=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
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
Fingerprint0D:7A:7C:53:DB:15:35:28:E9:E6:2B:90:43:BB:EF:E5:AB:BE:DA:E3
ValidityThu, 09 Nov 2023 09:29:43 GMT - Wed, 07 Feb 2024 09:29:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/track?data=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 HTTP/1.1
Host: metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vxxx.com
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 23 Nov 2023 06:53:17 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
vxxx.com/mobile_page-404/
200 OK 217 kB URL GET HTTP/3 vxxx.com/mobile_page-404/
IP
Certificate IssuerLet's Encrypt
Subjectvxxx.com
Fingerprint93:0F:B9:71:36:94:FF:F7:C6:48:22:6C:9B:23:01:95:93:29:E9:C1
ValidityWed, 25 Oct 2023 03:22:46 GMT - Tue, 23 Jan 2024 03:22:45 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (48044)
Size 217 kB (217185 bytes)
Hash 5ab4b9d032d3043788dc2c18e37ea132
a6e264103f3d5cc157ff101dd51efd18e8dfed0d
48d6e0617f22cfa19f1b8f077673191be4151c33f7f091af5772d92f877bcfad
GET /mobile_page-404/ HTTP/1.1
Host: vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vxxx.com/
DNT: 1
Connection: keep-alive
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:53:18 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.2.26
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PMsnDpRmKs6X97y23LqTQLtNpb5aQEQgPiN%2F0aEuzhbVAhmawtiHTdz7P5L6D8jsuGXGjFMuvC%2FRl1CLFjVaxdZUdqnr11FTymjaO6%2BnHS6cG2gAOn0ADdy%2BCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e8bdfc04142-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
tn.vxxx.com/contents/videos_screenshots/1366000/1366259/420x236/1.jpg
200 OK 30 kB URL GET HTTP/2 tn.vxxx.com/contents/videos_screenshots/1366000/1366259/420x236/1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecttn.vxxx.com
Fingerprint10:E5:E7:B9:1F:67:54:CA:EE:7F:27:99:2A:12:46:E9:78:93:F4:E5
ValidityTue, 14 Nov 2023 03:00:57 GMT - Mon, 12 Feb 2024 03:00:56 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash cbc32d75d07b24a053324d5b3247aa10
9bdb0134585dbbf950200ed9e83e27e9f166a8b1
b0d34b086464a1e8f83fe624266e078a9e7e905cb11620de4e7a263aca6efbf4
GET /contents/videos_screenshots/1366000/1366259/420x236/1.jpg HTTP/1.1
Host: tn.vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: image/jpeg
content-length: 30045
server: nginx/1.24.0
last-modified: Thu, 26 Oct 2023 09:26:58 GMT
etag: "653a30e2-755d"
cache-control: max-age=7776000
expires: Wed, 21 Feb 2024 06:53:17 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tsyndicate.com/iframes2/9e2a490b1d10425386b89c4e050eda03.html?subid=0&categories=Straight,
200 OK 8.5 kB URL GET HTTP/2 tsyndicate.com/iframes2/9e2a490b1d10425386b89c4e050eda03.html?subid=0&categories=Straight,
IP
ASN #24940 Hetzner Online GmbH
Requested by https://magapab.com/get?go=1&data=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
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8585), with no line terminators
Hash 4955d023a7ce6b17ab3b39ead7f27e64
c1dc65791e7fd6713f3975a12d9ec8775583fd47
74fe2df8a3292b85a22ada0166455aa3f093e512b99615bc199a85d7c63ba8be
GET /iframes2/9e2a490b1d10425386b89c4e050eda03.html?subid=0&categories=Straight, HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://magapab.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 06:53:18 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: 52cc4aa4720ce5c1
set-cookie: ts_uid=5e9c53d7-89c6-4d99-8b22-bc6108f7b9e8; expires=Thu, 23 May 2024 06:53:18 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
twinrdack.com/mediahosting.engine?MediaId=72901&AId=11491&CId=30675&PId=53360&SiteId=14172&ZoneId=56391&VolumeMetricId=d5760216-18c7-45a5-8b0e-a9836abe8ad0&PassBackUrl=&res=&dcid=3_ctx_918e11ce-cfb7-46b2-8079-575956c07a77&cu=&kw=&mw=300&mh=250&ml=1
200 OK 15 kB URL GET HTTP/3 twinrdack.com/mediahosting.engine?MediaId=72901&AId=11491&CId=30675&PId=53360&SiteId=14172&ZoneId=56391&VolumeMetricId=d5760216-18c7-45a5-8b0e-a9836abe8ad0&PassBackUrl=&res=&dcid=3_ctx_918e11ce-cfb7-46b2-8079-575956c07a77&cu=&kw=&mw=300&mh=250&ml=1
IP
Requested by https://twinrdack.com/multipane.engine?vms=OIWMbaBIT4wOYOr8I5q5WlhjcXt4GHOsbMuMStIVGkGTYDv5Zt0OW_BCnT_YcOGMMMOR8V8e95uEbV8uA2D_zSkZTjxpgG32cA9LU7JlTKLv9pd7HWApgWBdesFDH-Bc2rRthmuPgapXuKDkqYDyU3aAxPxLy0AHcrLudVNwAnCjn_XcxQdCw4ZkwXXWDSYftBaWA3dHEycrJ7tXdRFcqXCw8uBG-tVz4-HtyHe4-U9HJqVNdU45NJR28RUrFMLsDsM1-Go74WHhAChTXkUxieZ9HGP-oEh2ZNed1zFtFMIgKHsw81dOYMhWue7Xrli7SnT4UthHaPDiZkYCdAiqxCy6NvnMomLhdpB__bd5vipd9N7WSJAqa7x86ji6Qa2LlsMaZxclGdnm3qprTmDtSy-ytL6I8xjh433Dtg-V2wkPEUD5JlWFV9IJHZGCkcJ9yaz8a-aoQ3dj3W7YCkp9DLJUMcYqYV62le5vHUt92yOgsDYNSZs2pvK4KNqJsUtpKlGdYTc5hD51bP_5sS0X6mJUdyndyT6SQNYgA1uE_5SDTWZUmTS2wbddjuNtqHhyN8qV-BC_tD2M5PMd1nTamZtyvda45VbkcQ350ZRUCyOCrVCH46-wy5pjtm8Wb9QMkdHP0cwalhLg0c8PTSoPaUsKf2Tt4FQxsNDABnzEFUkROg-zl7kakxjTGtQtP5qy4Og3qUYuPdaCOYNtPuJ_zSLKldjBXkGnIPpmSjuXRH4MdhOweySHqGhCAKdnsIfQDZlFaTSt07NHuDmVYO93ArHyLVL-1OuHfgcbKWOrp6kIyRzctRGOqtLu769dAEVQ_t03sh2drYvqBneeEvBHBDcVTzmylHebspUzbYnn3QMrInSIYgo-jrw7GrHIc1PKywdcEf3lUAx84Jj44F1gWGiie4ceyEllafCzMdwi-c1lyzydJwcx2EoX_tGiXXWGJVqTLlrFqW-TZ8ga4cO82g2&dcid=3_ctx_918e11ce-cfb7-46b2-8079-575956c07a77&w=300&h=250&ml=1
Certificate IssuerGoogle Trust Services LLC
Subjecttwinrdack.com
Fingerprint1E:F8:EF:EE:AF:E9:AB:8B:B6:3B:9E:16:4B:8A:AF:17:9F:0D:01:75
ValidityMon, 16 Oct 2023 04:04:30 GMT - Sun, 14 Jan 2024 04:04:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mediahosting.engine?MediaId=72901&AId=11491&CId=30675&PId=53360&SiteId=14172&ZoneId=56391&VolumeMetricId=d5760216-18c7-45a5-8b0e-a9836abe8ad0&PassBackUrl=&res=&dcid=3_ctx_918e11ce-cfb7-46b2-8079-575956c07a77&cu=&kw=&mw=300&mh=250&ml=1 HTTP/1.1
Host: twinrdack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://twinrdack.com/multipane.engine?vms=OIWMbaBIT4wOYOr8I5q5WlhjcXt4GHOsbMuMStIVGkGTYDv5Zt0OW_BCnT_YcOGMMMOR8V8e95uEbV8uA2D_zSkZTjxpgG32cA9LU7JlTKLv9pd7HWApgWBdesFDH-Bc2rRthmuPgapXuKDkqYDyU3aAxPxLy0AHcrLudVNwAnCjn_XcxQdCw4ZkwXXWDSYftBaWA3dHEycrJ7tXdRFcqXCw8uBG-tVz4-HtyHe4-U9HJqVNdU45NJR28RUrFMLsDsM1-Go74WHhAChTXkUxieZ9HGP-oEh2ZNed1zFtFMIgKHsw81dOYMhWue7Xrli7SnT4UthHaPDiZkYCdAiqxCy6NvnMomLhdpB__bd5vipd9N7WSJAqa7x86ji6Qa2LlsMaZxclGdnm3qprTmDtSy-ytL6I8xjh433Dtg-V2wkPEUD5JlWFV9IJHZGCkcJ9yaz8a-aoQ3dj3W7YCkp9DLJUMcYqYV62le5vHUt92yOgsDYNSZs2pvK4KNqJsUtpKlGdYTc5hD51bP_5sS0X6mJUdyndyT6SQNYgA1uE_5SDTWZUmTS2wbddjuNtqHhyN8qV-BC_tD2M5PMd1nTamZtyvda45VbkcQ350ZRUCyOCrVCH46-wy5pjtm8Wb9QMkdHP0cwalhLg0c8PTSoPaUsKf2Tt4FQxsNDABnzEFUkROg-zl7kakxjTGtQtP5qy4Og3qUYuPdaCOYNtPuJ_zSLKldjBXkGnIPpmSjuXRH4MdhOweySHqGhCAKdnsIfQDZlFaTSt07NHuDmVYO93ArHyLVL-1OuHfgcbKWOrp6kIyRzctRGOqtLu769dAEVQ_t03sh2drYvqBneeEvBHBDcVTzmylHebspUzbYnn3QMrInSIYgo-jrw7GrHIc1PKywdcEf3lUAx84Jj44F1gWGiie4ceyEllafCzMdwi-c1lyzydJwcx2EoX_tGiXXWGJVqTLlrFqW-TZ8ga4cO82g2&dcid=3_ctx_918e11ce-cfb7-46b2-8079-575956c07a77&w=300&h=250&ml=1
DNT: 1
Connection: keep-alive
Cookie: IKSR={}; INF_DFL8=false; IUID=e9d799e6-d5c9-4c4b-94e7-af992fb7d02b; ISSH=6F7CFD; VMI=d5760216-18c7-45a5-8b0e-a9836abe8ad0; IPLH=#{"53364":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; IPLH_Q=#[53364]; CHN=#[]; MSSH=#{}; MSRH=#{}; ILP=null; ILPLU=#1/1/0001 12:00:00 AM; ILEALC=#1/1/0001 12:00:00 AM; ILMPF=#False; IPMPLU=#; IPMUID=#; BSWUID=#; IBL=#[]; IPLSH=#{}; IPLSH_Q=#[]; IZH=#{"56389":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; IZH_Q=#[56389]; IMCH=#{}; IMCH_Q=#[]; IMH=#{"72904":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; IMH_Q=#[72904]; ISH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:18"}]}; ISH_Q=#[14172]; ISPH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; ISPH_Q=#[14172]; ICH=#{"30675":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; ICH_Q=#[30675]
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:53:19 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: private, no-transform
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: *
set-cookie: IKSR={}; path=/; SameSite=None; secure
INF_DFL8=false; path=/; SameSite=None; secure
IUID=e9d799e6-d5c9-4c4b-94e7-af992fb7d02b; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure
ISSH=6F7CFD; path=/; SameSite=None; secure
VMI=d5760216-18c7-45a5-8b0e-a9836abe8ad0; path=/; SameSite=None; secure
IPLH=#{"53364":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPLH_Q=#[53364]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
CHN=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
MSSH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
MSRH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ILP=null; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure
ILPLU=#1/1/0001 12:00:00 AM; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ILEALC=#1/1/0001 12:00:00 AM; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ILMPF=#False; expires=Thu, 23-Nov-2023 10:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPMPLU=#; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPMUID=#; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
BSWUID=#; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IKSR={}; path=/; SameSite=None; secure
IBL=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IZH=#{"56389":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IZH_Q=#[56389]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMH=#{"72904":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMH_Q=#[72904]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:18"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISH_Q=#[14172]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH_Q=#[14172]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ICH=#{"30675":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ICH_Q=#[30675]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PzGzUpXzIU1a2qQOAqj1Qh0qn0%2BXrUQqBzYHhgGAlZUXMcMY96ZNygF7lNa8olRFnFygnwZSceUEXawDpBfXamN1Mby9qA%2FLFVyegzJd2%2FB%2BSHNNYjZAaRNWK6psjJE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e963e06712e-OSL
alt-svc: h3=":443"; ma=86400
vxxx.com/static/js/chunk-common.a4a234ad.js
200 OK 66 kB URL GET HTTP/3 vxxx.com/static/js/chunk-common.a4a234ad.js
IP
Certificate IssuerLet's Encrypt
Subjectvxxx.com
Fingerprint93:0F:B9:71:36:94:FF:F7:C6:48:22:6C:9B:23:01:95:93:29:E9:C1
ValidityWed, 25 Oct 2023 03:22:46 GMT - Tue, 23 Jan 2024 03:22:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/js/chunk-common.a4a234ad.js HTTP/1.1
Host: vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:53:15 GMT
content-type: application/javascript
last-modified: Wed, 22 Nov 2023 13:05:33 GMT
vary: Accept-Encoding
etag: W/"655dfc9d-1000a"
expires: Thu, 23 Nov 2023 07:14:38 GMT
cache-control: public, max-age=14400
pragma: public
cf-cache-status: HIT
age: 517
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ak7LTzkAXbFa94XdHFryKnsNfuLKvgJAQfoa6yDyBzDXjDV9SLPC8sDSMkSuVC17499%2F%2BRhMM8OBCRtRYbhtzZQe32UBIxZQng1qbFdNBahEzTaXBplkK2XoBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e7cc9594142-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
lcdn.tsyndicate.com/images/0/e/12fcc8e2365c193bb666ce9c948b9551d7be80/main.mp4
206 Partial Content 35 kB URL GET HTTP/2 lcdn.tsyndicate.com/images/0/e/12fcc8e2365c193bb666ce9c948b9551d7be80/main.mp4
IP
Requested by https://tsyndicate.com/iframes2/9e2a490b1d10425386b89c4e050eda03.html?subid=0&categories=Straight,
Certificate IssuerSectigo Limited
Subjectlcdn.tsyndicate.com
FingerprintAA:DB:E6:65:05:5A:83:46:D1:77:83:25:84:3D:B2:B5:F5:99:97:00
ValidityWed, 08 Mar 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 2073272a989ebfe810d8ca536f0da38a
f1a3bbf537773875e627e70bb082403deb9737ed
0c7a911c657c2d6f2add1fb91ce455af8df346ae394fc2211a4a45c11323cb50
GET /images/0/e/12fcc8e2365c193bb666ce9c948b9551d7be80/main.mp4 HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=5e9c53d7-89c6-4d99-8b22-bc6108f7b9e8
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Thu, 23 Nov 2023 06:53:19 GMT
content-type: video/mp4
content-length: 34906
server: nginx
last-modified: Tue, 19 Jul 2022 11:21:35 GMT
etag: "62d693bf-885a"
x-robots-tag: noindex, nofollow
age: 9141004
content-range: bytes 0-34905/34906
X-Firefox-Spdy: h2
vxxx.com/1js75mxd4v/6g1vzadow3.js
200 OK 54 kB URL GET HTTP/3 vxxx.com/1js75mxd4v/6g1vzadow3.js
IP
Certificate IssuerLet's Encrypt
Subjectvxxx.com
Fingerprint93:0F:B9:71:36:94:FF:F7:C6:48:22:6C:9B:23:01:95:93:29:E9:C1
ValidityWed, 25 Oct 2023 03:22:46 GMT - Tue, 23 Jan 2024 03:22:45 GMT
File type ASCII text, with very long lines (54079), with no line terminators
Hash c713cc6ec607031586667f762b05c0e2
c0840dd4e7643e880323e984fac70ef34da4ed84
f6c81fb99bab91a479c267584f48247f3ad3aaa3e583f0ec2e25dddbd75bdcaf
GET /1js75mxd4v/6g1vzadow3.js HTTP/1.1
Host: vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: application/javascript
last-modified: Thu, 23 Nov 2023 06:02:48 GMT
vary: Accept-Encoding
etag: W/"655eeb08-d33f"
expires: Sat, 23 Dec 2023 06:02:52 GMT
cache-control: public, max-age=2592000
pragma: public
cf-cache-status: HIT
age: 3025
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dKg9C4XTKg15ohr7xlSBSQvrUJzHQA9GR7CGGNkf1U6nb2a6qoKJMeoxO2otG0CYCwA5GobxZGlVWlu42daoQl%2B9dybYHPo%2BKxxZpR9EjVhWytrJGFDQXqw0Xw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e891d4a4142-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
m3.twinredads.com/f9552bff-d041-42da-8aa5-2b71760258ac
200 OK 220 kB URL GET HTTP/1.1 m3.twinredads.com/f9552bff-d041-42da-8aa5-2b71760258ac
IP
Requested by https://twinrdack.com/mediahosting.engine?MediaId=72904&AId=11491&CId=30675&PId=53364&SiteId=14172&ZoneId=56389&VolumeMetricId=0c5edabd-5d1c-4a5a-a56e-b8442bc7417d&PassBackUrl=&res=&dcid=3_ctx_be0b9aed-5013-4bea-b358-e3662bac938d&cu=&kw=&mw=300&mh=250&ml=1
Certificate IssuerGoDaddy.com, Inc.
Subjectm3.twinredads.com
FingerprintB2:08:56:DF:D1:03:83:DE:20:1E:DB:6F:01:ED:DD:B8:EB:09:64:FB
ValidityTue, 25 Oct 2022 19:48:27 GMT - Sun, 26 Nov 2023 19:48:27 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 30x30, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 6D Mark II, orientation=upper-left, xresolution=186, yresolution=194, resolutionunit=2, software=Adobe Photoshop 22.4 (Macintosh), datetime=2021:07:13 11:24:54], baseline, precision 8, 1200x675, components 3\012- data
Size 220 kB (219783 bytes)
Hash 3da2d584af1d56ad9e5cc1959ca42593
9dc8d8dd20c8fe5b22fb9c8e37901469ae028f58
f1c71557eccb440be81f93ffd3f4c08e78bca4008ab9db1c18dede1116c93ce5
GET /f9552bff-d041-42da-8aa5-2b71760258ac HTTP/1.1
Host: m3.twinredads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://twinrdack.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 23 Nov 2023 06:53:20 GMT
Connection: Keep-Alive
ETag: "1640097297"
Cache-Control: max-age=61
Content-Length: 219783
Content-Type: image/jpeg
Last-Modified: Tue, 21 Dec 2021 14:34:57 GMT
Accept-Ranges: bytes
X-HW: 1700722399.dop020.sk1.t,1700722400.cds017.sk1.shn,1700722400.dop020.sk1.t,1700722400.cds261.sk1.c
Access-Control-Allow-Origin: *
www.googletagmanager.com/gtag/js?id=UA-213377078-3&l=dataLayer&cx=c
200 OK 190 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=UA-213377078-3&l=dataLayer&cx=c
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Size 190 kB (190081 bytes)
Hash fc12cbcde625b4df9e9ffde8de2be312
8bf91e8d293473c5bb665c0b5b177561d00cf5d2
ce24c577e406533fea7d5ac7f7f14f8789c5ca59b1b1f290dd3cca47c6efb400
GET /gtag/js?id=UA-213377078-3&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 23 Nov 2023 06:53:16 GMT
expires: Thu, 23 Nov 2023 06:53:16 GMT
cache-control: private, max-age=900
last-modified: Thu, 23 Nov 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68799
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
vxxx.com/page-404/
200 OK 217 kB IP
Certificate IssuerLet's Encrypt
Subjectvxxx.com
Fingerprint93:0F:B9:71:36:94:FF:F7:C6:48:22:6C:9B:23:01:95:93:29:E9:C1
ValidityWed, 25 Oct 2023 03:22:46 GMT - Tue, 23 Jan 2024 03:22:45 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (48051)
Size 217 kB (217178 bytes)
Hash 0239e6f2ad92fb896aadcacc27c9a5d2
4951eb721e4d1cd9ce5bb306bfff8df65d001c59
46c544391681197efc72346f0e02148615a3c4fd5f5055a9f66af501b101f696
GET /page-404/ HTTP/1.1
Host: vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vxxx.com/
DNT: 1
Connection: keep-alive
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:53:18 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.2.26
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xe9qKV%2FozgzivWecHPrZvitbBFbUAgSeORvPhCp%2BfNp%2FFmXwZbdX8t4eS4nR3NaP4O%2BgPNvJ1c4KWxsueQ6gHsw25T0ZrDDxDWnGMMotb%2FKjHddh8QLrE%2FrS0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e8bdfc24142-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
twinrdack.com/multipane.engine?vms=OIWMbaBIT4wOYOr8I5q5WlhjcXt4GHOsbMuMStIVGkGTYDv5Zt0OW_BCnT_YcOGMMMOR8V8e95uEbV8uA2D_zSkZTjxpgG32cA9LU7JlTKLv9pd7HWApgWBdesFDH-Bc2rRthmuPgapXuKDkqYDyU3aAxPxLy0AHcrLudVNwAnCjn_XcxQdCw4ZkwXXWDSYftBaWA3dHEycrJ7tXdRFcqXCw8uBG-tVz4-HtyHe4-U9HJqVNdU45NJR28RUrFMLsDsM1-Go74WHhAChTXkUxieZ9HGP-oEh2ZNed1zFtFMIgKHsw81dOYMhWue7Xrli7SnT4UthHaPDiZkYCdAiqxCy6NvnMomLhdpB__bd5vipd9N7WSJAqa7x86ji6Qa2LlsMaZxclGdnm3qprTmDtSy-ytL6I8xjh433Dtg-V2wkPEUD5JlWFV9IJHZGCkcJ9yaz8a-aoQ3dj3W7YCkp9DLJUMcYqYV62le5vHUt92yOgsDYNSZs2pvK4KNqJsUtpKlGdYTc5hD51bP_5sS0X6mJUdyndyT6SQNYgA1uE_5SDTWZUmTS2wbddjuNtqHhyN8qV-BC_tD2M5PMd1nTamZtyvda45VbkcQ350ZRUCyOCrVCH46-wy5pjtm8Wb9QMkdHP0cwalhLg0c8PTSoPaUsKf2Tt4FQxsNDABnzEFUkROg-zl7kakxjTGtQtP5qy4Og3qUYuPdaCOYNtPuJ_zSLKldjBXkGnIPpmSjuXRH4MdhOweySHqGhCAKdnsIfQDZlFaTSt07NHuDmVYO93ArHyLVL-1OuHfgcbKWOrp6kIyRzctRGOqtLu769dAEVQ_t03sh2drYvqBneeEvBHBDcVTzmylHebspUzbYnn3QMrInSIYgo-jrw7GrHIc1PKywdcEf3lUAx84Jj44F1gWGiie4ceyEllafCzMdwi-c1lyzydJwcx2EoX_tGiXXWGJVqTLlrFqW-TZ8ga4cO82g2&dcid=3_ctx_918e11ce-cfb7-46b2-8079-575956c07a77&w=300&h=250&ml=1
200 OK 15 kB URL GET HTTP/3 twinrdack.com/multipane.engine?vms=OIWMbaBIT4wOYOr8I5q5WlhjcXt4GHOsbMuMStIVGkGTYDv5Zt0OW_BCnT_YcOGMMMOR8V8e95uEbV8uA2D_zSkZTjxpgG32cA9LU7JlTKLv9pd7HWApgWBdesFDH-Bc2rRthmuPgapXuKDkqYDyU3aAxPxLy0AHcrLudVNwAnCjn_XcxQdCw4ZkwXXWDSYftBaWA3dHEycrJ7tXdRFcqXCw8uBG-tVz4-HtyHe4-U9HJqVNdU45NJR28RUrFMLsDsM1-Go74WHhAChTXkUxieZ9HGP-oEh2ZNed1zFtFMIgKHsw81dOYMhWue7Xrli7SnT4UthHaPDiZkYCdAiqxCy6NvnMomLhdpB__bd5vipd9N7WSJAqa7x86ji6Qa2LlsMaZxclGdnm3qprTmDtSy-ytL6I8xjh433Dtg-V2wkPEUD5JlWFV9IJHZGCkcJ9yaz8a-aoQ3dj3W7YCkp9DLJUMcYqYV62le5vHUt92yOgsDYNSZs2pvK4KNqJsUtpKlGdYTc5hD51bP_5sS0X6mJUdyndyT6SQNYgA1uE_5SDTWZUmTS2wbddjuNtqHhyN8qV-BC_tD2M5PMd1nTamZtyvda45VbkcQ350ZRUCyOCrVCH46-wy5pjtm8Wb9QMkdHP0cwalhLg0c8PTSoPaUsKf2Tt4FQxsNDABnzEFUkROg-zl7kakxjTGtQtP5qy4Og3qUYuPdaCOYNtPuJ_zSLKldjBXkGnIPpmSjuXRH4MdhOweySHqGhCAKdnsIfQDZlFaTSt07NHuDmVYO93ArHyLVL-1OuHfgcbKWOrp6kIyRzctRGOqtLu769dAEVQ_t03sh2drYvqBneeEvBHBDcVTzmylHebspUzbYnn3QMrInSIYgo-jrw7GrHIc1PKywdcEf3lUAx84Jj44F1gWGiie4ceyEllafCzMdwi-c1lyzydJwcx2EoX_tGiXXWGJVqTLlrFqW-TZ8ga4cO82g2&dcid=3_ctx_918e11ce-cfb7-46b2-8079-575956c07a77&w=300&h=250&ml=1
IP
Requested by https://magapab.com/get?go=1&data=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
Certificate IssuerGoogle Trust Services LLC
Subjecttwinrdack.com
Fingerprint1E:F8:EF:EE:AF:E9:AB:8B:B6:3B:9E:16:4B:8A:AF:17:9F:0D:01:75
ValidityMon, 16 Oct 2023 04:04:30 GMT - Sun, 14 Jan 2024 04:04:29 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1350), with CRLF line terminators
Hash 383746824a4b019950c03bfa339f915e
b6e4550343b80ec2c988ad90ec0db4e6f2944717
6e769f3b7268012285de96bf300e19e29efdc934de7efef0e6458ef800eacd59
GET /multipane.engine?vms=OIWMbaBIT4wOYOr8I5q5WlhjcXt4GHOsbMuMStIVGkGTYDv5Zt0OW_BCnT_YcOGMMMOR8V8e95uEbV8uA2D_zSkZTjxpgG32cA9LU7JlTKLv9pd7HWApgWBdesFDH-Bc2rRthmuPgapXuKDkqYDyU3aAxPxLy0AHcrLudVNwAnCjn_XcxQdCw4ZkwXXWDSYftBaWA3dHEycrJ7tXdRFcqXCw8uBG-tVz4-HtyHe4-U9HJqVNdU45NJR28RUrFMLsDsM1-Go74WHhAChTXkUxieZ9HGP-oEh2ZNed1zFtFMIgKHsw81dOYMhWue7Xrli7SnT4UthHaPDiZkYCdAiqxCy6NvnMomLhdpB__bd5vipd9N7WSJAqa7x86ji6Qa2LlsMaZxclGdnm3qprTmDtSy-ytL6I8xjh433Dtg-V2wkPEUD5JlWFV9IJHZGCkcJ9yaz8a-aoQ3dj3W7YCkp9DLJUMcYqYV62le5vHUt92yOgsDYNSZs2pvK4KNqJsUtpKlGdYTc5hD51bP_5sS0X6mJUdyndyT6SQNYgA1uE_5SDTWZUmTS2wbddjuNtqHhyN8qV-BC_tD2M5PMd1nTamZtyvda45VbkcQ350ZRUCyOCrVCH46-wy5pjtm8Wb9QMkdHP0cwalhLg0c8PTSoPaUsKf2Tt4FQxsNDABnzEFUkROg-zl7kakxjTGtQtP5qy4Og3qUYuPdaCOYNtPuJ_zSLKldjBXkGnIPpmSjuXRH4MdhOweySHqGhCAKdnsIfQDZlFaTSt07NHuDmVYO93ArHyLVL-1OuHfgcbKWOrp6kIyRzctRGOqtLu769dAEVQ_t03sh2drYvqBneeEvBHBDcVTzmylHebspUzbYnn3QMrInSIYgo-jrw7GrHIc1PKywdcEf3lUAx84Jj44F1gWGiie4ceyEllafCzMdwi-c1lyzydJwcx2EoX_tGiXXWGJVqTLlrFqW-TZ8ga4cO82g2&dcid=3_ctx_918e11ce-cfb7-46b2-8079-575956c07a77&w=300&h=250&ml=1 HTTP/1.1
Host: twinrdack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://magapab.com/
DNT: 1
Connection: keep-alive
Cookie: IKSR={}; INF_DFL8=false; IUID=e9d799e6-d5c9-4c4b-94e7-af992fb7d02b; ISSH=6F7CFD; VMI=; IPLH=#{}; IPLH_Q=#[]; CHN=#[]; MSSH=#{}; MSRH=#{}; ILP=null; ILPLU=#1/1/0001 12:00:00 AM; ILEALC=#1/1/0001 12:00:00 AM; ILMPF=#False; IPMPLU=#; IPMUID=#; BSWUID=#; IBL=#[]; IPLSH=#{}; IPLSH_Q=#[]; IZH=#{}; IZH_Q=#[]; IMCH=#{}; IMCH_Q=#[]; IMH=#{}; IMH_Q=#[]; ISH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:18"}]}; ISH_Q=#[14172]; ISPH=#{}; ISPH_Q=#[]; ICH=#{}; ICH_Q=#[]
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:53:19 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: private, no-transform
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: *
set-cookie: IKSR={}; path=/; SameSite=None; secure
INF_DFL8=false; path=/; SameSite=None; secure
IUID=e9d799e6-d5c9-4c4b-94e7-af992fb7d02b; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure
ISSH=6F7CFD; path=/; SameSite=None; secure
VMI=; path=/; SameSite=None; secure
IPLH=#{"53360":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPLH_Q=#[53360]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
CHN=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
MSSH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
MSRH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ILP=null; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure
ILPLU=#1/1/0001 12:00:00 AM; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ILEALC=#1/1/0001 12:00:00 AM; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ILMPF=#False; expires=Thu, 23-Nov-2023 10:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPMPLU=#; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPMUID=#; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
BSWUID=#; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IKSR={}; path=/; SameSite=None; secure
IBL=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IZH=#{"56391":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IZH_Q=#[56391]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMH=#{"72901":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMH_Q=#[72901]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:18"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISH_Q=#[14172]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH_Q=#[14172]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ICH=#{"30675":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ICH_Q=#[30675]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ibXWi26%2Fcr1fcTJss5QorafAuUHbaqtVIoP8a2DD2GBmcBn2wb%2FvKjDFpXIyvPlWNH2oy%2BJVypPpum%2FBsGDrdaY%2FiDIAqhy1eLGOgWeGGALMo1cNqzLGkUevk8SjX9I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e91da08712e-OSL
alt-svc: h3=":443"; ma=86400
vxxx.com/1js75mxd4v/dlkmata5fe.js
200 OK 25 kB URL GET HTTP/3 vxxx.com/1js75mxd4v/dlkmata5fe.js
IP
Certificate IssuerLet's Encrypt
Subjectvxxx.com
Fingerprint93:0F:B9:71:36:94:FF:F7:C6:48:22:6C:9B:23:01:95:93:29:E9:C1
ValidityWed, 25 Oct 2023 03:22:46 GMT - Tue, 23 Jan 2024 03:22:45 GMT
File type ASCII text, with very long lines (24927)
Hash 564fe9ee9b191e3b3f63096cfbfd69bd
51c552585c193d242d7f9ddab820c543b466301f
4e7f3e0c8e2b2a88651edf4e46dea765b8711c41b936e8a3191304477bc3f920
GET /1js75mxd4v/dlkmata5fe.js HTTP/1.1
Host: vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399; _ga_T2E4VLTEEG=GS1.1.1700722399.1.1.1700722399.0.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:53:17 GMT
content-type: application/javascript
last-modified: Thu, 23 Nov 2023 06:02:48 GMT
vary: Accept-Encoding
etag: W/"655eeb08-61a1"
expires: Sat, 23 Dec 2023 06:02:52 GMT
cache-control: public, max-age=2592000
pragma: public
cf-cache-status: HIT
age: 3025
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zt4ZUX%2FKF6UxbWYqaFSKz6l8RtKGAFe8m8J17UBu3Qq6IrJA2lizB%2B%2FOF8RzTT%2BadA0%2Fy5kLKmJmankdEWs4zQJvZN4FwIy%2Bi9FgRPQWLVDOLL9z%2FwT2Htu5Dg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e891d464142-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
vxxx.com/static/js/app.819353ca.js
200 OK 78 kB URL GET HTTP/3 vxxx.com/static/js/app.819353ca.js
IP
Certificate IssuerLet's Encrypt
Subjectvxxx.com
Fingerprint93:0F:B9:71:36:94:FF:F7:C6:48:22:6C:9B:23:01:95:93:29:E9:C1
ValidityWed, 25 Oct 2023 03:22:46 GMT - Tue, 23 Jan 2024 03:22:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/js/app.819353ca.js HTTP/1.1
Host: vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:53:15 GMT
content-type: application/javascript
last-modified: Wed, 22 Nov 2023 13:05:33 GMT
vary: Accept-Encoding
etag: W/"655dfc9d-130c3"
expires: Thu, 23 Nov 2023 07:16:02 GMT
cache-control: public, max-age=14400
pragma: public
cf-cache-status: HIT
age: 433
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EsqgUG%2BjOg0wGUusMZZET1gQqpSrw9vX6liwFPuQRALgRJJoC8T9VKXXp4BgtbFX%2Fyz1ebMbP7QlwTt7k0qtJlACTL3kFljG2BpWST25YF0QovplFcKyGPAsDw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e7cc9574142-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
vxxx.com/api/json/main/14400/str.en.json
200 OK 4.5 kB URL GET HTTP/3 vxxx.com/api/json/main/14400/str.en.json
IP
Certificate IssuerLet's Encrypt
Subjectvxxx.com
Fingerprint93:0F:B9:71:36:94:FF:F7:C6:48:22:6C:9B:23:01:95:93:29:E9:C1
ValidityWed, 25 Oct 2023 03:22:46 GMT - Tue, 23 Jan 2024 03:22:45 GMT
File type troff or preprocessor input, ASCII text, with very long lines (5288), with no line terminators
Hash d2bc0d65e1097f13d50abb11a23b58a1
bfd48f64c48c98c4c35c6ac541253d48affbceec
f2c08f21bbbfd69530119c952d7f28db506233a4bf0b9230551b4ed444abc615
GET /api/json/main/14400/str.en.json HTTP/1.1
Host: vxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vxxx.com/
Cookie: kt_lang=en; _ga_ZKNV2SDJ50=GS1.1.1700722398.1.0.1700722398.0.0.0; _ga=GA1.1.1127185722.1700722399
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:53:16 GMT
content-type: application/json
last-modified: Thu, 23 Nov 2023 06:12:08 GMT
vary: Accept-Encoding
etag: W/"655eed38-11b6"
expires: Thu, 23 Nov 2023 06:58:16 GMT
cache-control: max-age=300
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dYtMVYQbZHNGpK4UcEZRy26HCcq5BTJ0UZmtW%2BjnNUwwsyWdQ2WK5gOMSxpdLKZfAdBvAIRZDaAiSVeq0vAnaLMu06ZAT1arYtdhz2uGGlOWUeaK47zEP%2Fc9mQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e81ddc04142-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
twinrdack.com//Redirect.eng?MediaSegmentId=41681&dcid=3_ctx_918e11ce-cfb7-46b2-8079-575956c07a77&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=&v=OIWMbaBIT4wOYOr8I5q5Wpu5oaAmEI6Nh8JMfITqjEATI3ZPZBsUApC1y0drmJsmJMOL1-pCqVwsN-Nr6GFt8j_ldz_eMaqQwt7Exwmdc7JXLgdwIgkJA9gP-9N4rVXMAM1frdhzIdaFSaIjpmS60TP9-yiXoL9pqw8PXAj9Q71DnYlFcwwucmGPzLzCfX1KKYGGuj-pZ3KubtS5TOo9EnIPKQ3hroWDgenzUnVZUBgUiCg79yoSmn-B6lXkhrztIR6OHo69jzGA0wS5JxHoDtYVdW2WaqqTQgnYKnkwpT0ixBrj-LRSL-mTNOtWAetdpM55mZivpfP-49dhqxWXhH4rULbLvivl0BojWqR60AH2aivXshUZWtDXAZHXPhd69MIOKNSdY6Glrw-2RhJVRvO14hjiphlAStKw5bpqLVzjLa57_SXOlYhE1Z8_E_czTgPSuZl1onah1TwpOQeoyNfs9SO6vAK5EW21TEbyhEJt1rc05BZYqNgvf6TbwYzkrNAKXPwod-P4JS4PXbPe9QigOdv7v0VHMof7HCQeTYnXbVtfJ-LEQBQwXyTg4HP6ouajbbVhPgTEA2FOYr1wrLix6LQWYxPQWypcXKkQHf8glIImRW3o5pP2Kf-28T94f5QoHT73aO5LT3TQ_cTrho5TyBnPQjQ9p0aIJ6bPaB3DNi7zlGsYGkwojFOgnzSgUIjA1aOPhUIaZNa2JEBEW8W3ysN-AULkg2XVMIXu7yYercZSU3OZpBk3nhITRFJWIA2NLAAQvUelhKTqTveebKYawTwJC9uMp7x7E5FqBWgZEI-OoU2wcaCO-4wi3ylEX5th5I0qVt4G9U2elLj2VR1-oo79EZ4s7gnzIPIqtmuKIv7jHoeS748LkUhw1HG7EwRO5AV00oJRR9DCMuAu5Mo47rPwg5WRDKQ-jF22YD_zHuGJ1ygf7yHjXA7R81i_4C0rFUK8M11sjsajD9jxXQ2&kw=&mw=300&mh=250&ml=1&curlh=1550911973
302 Found 15 kB URL GET HTTP/3 twinrdack.com//Redirect.eng?MediaSegmentId=41681&dcid=3_ctx_918e11ce-cfb7-46b2-8079-575956c07a77&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=&v=OIWMbaBIT4wOYOr8I5q5Wpu5oaAmEI6Nh8JMfITqjEATI3ZPZBsUApC1y0drmJsmJMOL1-pCqVwsN-Nr6GFt8j_ldz_eMaqQwt7Exwmdc7JXLgdwIgkJA9gP-9N4rVXMAM1frdhzIdaFSaIjpmS60TP9-yiXoL9pqw8PXAj9Q71DnYlFcwwucmGPzLzCfX1KKYGGuj-pZ3KubtS5TOo9EnIPKQ3hroWDgenzUnVZUBgUiCg79yoSmn-B6lXkhrztIR6OHo69jzGA0wS5JxHoDtYVdW2WaqqTQgnYKnkwpT0ixBrj-LRSL-mTNOtWAetdpM55mZivpfP-49dhqxWXhH4rULbLvivl0BojWqR60AH2aivXshUZWtDXAZHXPhd69MIOKNSdY6Glrw-2RhJVRvO14hjiphlAStKw5bpqLVzjLa57_SXOlYhE1Z8_E_czTgPSuZl1onah1TwpOQeoyNfs9SO6vAK5EW21TEbyhEJt1rc05BZYqNgvf6TbwYzkrNAKXPwod-P4JS4PXbPe9QigOdv7v0VHMof7HCQeTYnXbVtfJ-LEQBQwXyTg4HP6ouajbbVhPgTEA2FOYr1wrLix6LQWYxPQWypcXKkQHf8glIImRW3o5pP2Kf-28T94f5QoHT73aO5LT3TQ_cTrho5TyBnPQjQ9p0aIJ6bPaB3DNi7zlGsYGkwojFOgnzSgUIjA1aOPhUIaZNa2JEBEW8W3ysN-AULkg2XVMIXu7yYercZSU3OZpBk3nhITRFJWIA2NLAAQvUelhKTqTveebKYawTwJC9uMp7x7E5FqBWgZEI-OoU2wcaCO-4wi3ylEX5th5I0qVt4G9U2elLj2VR1-oo79EZ4s7gnzIPIqtmuKIv7jHoeS748LkUhw1HG7EwRO5AV00oJRR9DCMuAu5Mo47rPwg5WRDKQ-jF22YD_zHuGJ1ygf7yHjXA7R81i_4C0rFUK8M11sjsajD9jxXQ2&kw=&mw=300&mh=250&ml=1&curlh=1550911973
IP
Requested by https://twinrdack.com/multipane.engine?vms=OIWMbaBIT4wOYOr8I5q5WlhjcXt4GHOsbMuMStIVGkGTYDv5Zt0OW_BCnT_YcOGMMMOR8V8e95uEbV8uA2D_zSkZTjxpgG32cA9LU7JlTKLv9pd7HWApgWBdesFDH-Bc2rRthmuPgapXuKDkqYDyU3aAxPxLy0AHcrLudVNwAnCjn_XcxQdCw4ZkwXXWDSYftBaWA3dHEycrJ7tXdRFcqXCw8uBG-tVz4-HtyHe4-U9HJqVNdU45NJR28RUrFMLsDsM1-Go74WHhAChTXkUxieZ9HGP-oEh2ZNed1zFtFMIgKHsw81dOYMhWue7Xrli7SnT4UthHaPDiZkYCdAiqxCy6NvnMomLhdpB__bd5vipd9N7WSJAqa7x86ji6Qa2LlsMaZxclGdnm3qprTmDtSy-ytL6I8xjh433Dtg-V2wkPEUD5JlWFV9IJHZGCkcJ9yaz8a-aoQ3dj3W7YCkp9DLJUMcYqYV62le5vHUt92yOgsDYNSZs2pvK4KNqJsUtpKlGdYTc5hD51bP_5sS0X6mJUdyndyT6SQNYgA1uE_5SDTWZUmTS2wbddjuNtqHhyN8qV-BC_tD2M5PMd1nTamZtyvda45VbkcQ350ZRUCyOCrVCH46-wy5pjtm8Wb9QMkdHP0cwalhLg0c8PTSoPaUsKf2Tt4FQxsNDABnzEFUkROg-zl7kakxjTGtQtP5qy4Og3qUYuPdaCOYNtPuJ_zSLKldjBXkGnIPpmSjuXRH4MdhOweySHqGhCAKdnsIfQDZlFaTSt07NHuDmVYO93ArHyLVL-1OuHfgcbKWOrp6kIyRzctRGOqtLu769dAEVQ_t03sh2drYvqBneeEvBHBDcVTzmylHebspUzbYnn3QMrInSIYgo-jrw7GrHIc1PKywdcEf3lUAx84Jj44F1gWGiie4ceyEllafCzMdwi-c1lyzydJwcx2EoX_tGiXXWGJVqTLlrFqW-TZ8ga4cO82g2&dcid=3_ctx_918e11ce-cfb7-46b2-8079-575956c07a77&w=300&h=250&ml=1
Certificate IssuerGoogle Trust Services LLC
Subjecttwinrdack.com
Fingerprint1E:F8:EF:EE:AF:E9:AB:8B:B6:3B:9E:16:4B:8A:AF:17:9F:0D:01:75
ValidityMon, 16 Oct 2023 04:04:30 GMT - Sun, 14 Jan 2024 04:04:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET //Redirect.eng?MediaSegmentId=41681&dcid=3_ctx_918e11ce-cfb7-46b2-8079-575956c07a77&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=&v=OIWMbaBIT4wOYOr8I5q5Wpu5oaAmEI6Nh8JMfITqjEATI3ZPZBsUApC1y0drmJsmJMOL1-pCqVwsN-Nr6GFt8j_ldz_eMaqQwt7Exwmdc7JXLgdwIgkJA9gP-9N4rVXMAM1frdhzIdaFSaIjpmS60TP9-yiXoL9pqw8PXAj9Q71DnYlFcwwucmGPzLzCfX1KKYGGuj-pZ3KubtS5TOo9EnIPKQ3hroWDgenzUnVZUBgUiCg79yoSmn-B6lXkhrztIR6OHo69jzGA0wS5JxHoDtYVdW2WaqqTQgnYKnkwpT0ixBrj-LRSL-mTNOtWAetdpM55mZivpfP-49dhqxWXhH4rULbLvivl0BojWqR60AH2aivXshUZWtDXAZHXPhd69MIOKNSdY6Glrw-2RhJVRvO14hjiphlAStKw5bpqLVzjLa57_SXOlYhE1Z8_E_czTgPSuZl1onah1TwpOQeoyNfs9SO6vAK5EW21TEbyhEJt1rc05BZYqNgvf6TbwYzkrNAKXPwod-P4JS4PXbPe9QigOdv7v0VHMof7HCQeTYnXbVtfJ-LEQBQwXyTg4HP6ouajbbVhPgTEA2FOYr1wrLix6LQWYxPQWypcXKkQHf8glIImRW3o5pP2Kf-28T94f5QoHT73aO5LT3TQ_cTrho5TyBnPQjQ9p0aIJ6bPaB3DNi7zlGsYGkwojFOgnzSgUIjA1aOPhUIaZNa2JEBEW8W3ysN-AULkg2XVMIXu7yYercZSU3OZpBk3nhITRFJWIA2NLAAQvUelhKTqTveebKYawTwJC9uMp7x7E5FqBWgZEI-OoU2wcaCO-4wi3ylEX5th5I0qVt4G9U2elLj2VR1-oo79EZ4s7gnzIPIqtmuKIv7jHoeS748LkUhw1HG7EwRO5AV00oJRR9DCMuAu5Mo47rPwg5WRDKQ-jF22YD_zHuGJ1ygf7yHjXA7R81i_4C0rFUK8M11sjsajD9jxXQ2&kw=&mw=300&mh=250&ml=1&curlh=1550911973 HTTP/1.1
Host: twinrdack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://twinrdack.com/multipane.engine?vms=OIWMbaBIT4wOYOr8I5q5WlhjcXt4GHOsbMuMStIVGkGTYDv5Zt0OW_BCnT_YcOGMMMOR8V8e95uEbV8uA2D_zSkZTjxpgG32cA9LU7JlTKLv9pd7HWApgWBdesFDH-Bc2rRthmuPgapXuKDkqYDyU3aAxPxLy0AHcrLudVNwAnCjn_XcxQdCw4ZkwXXWDSYftBaWA3dHEycrJ7tXdRFcqXCw8uBG-tVz4-HtyHe4-U9HJqVNdU45NJR28RUrFMLsDsM1-Go74WHhAChTXkUxieZ9HGP-oEh2ZNed1zFtFMIgKHsw81dOYMhWue7Xrli7SnT4UthHaPDiZkYCdAiqxCy6NvnMomLhdpB__bd5vipd9N7WSJAqa7x86ji6Qa2LlsMaZxclGdnm3qprTmDtSy-ytL6I8xjh433Dtg-V2wkPEUD5JlWFV9IJHZGCkcJ9yaz8a-aoQ3dj3W7YCkp9DLJUMcYqYV62le5vHUt92yOgsDYNSZs2pvK4KNqJsUtpKlGdYTc5hD51bP_5sS0X6mJUdyndyT6SQNYgA1uE_5SDTWZUmTS2wbddjuNtqHhyN8qV-BC_tD2M5PMd1nTamZtyvda45VbkcQ350ZRUCyOCrVCH46-wy5pjtm8Wb9QMkdHP0cwalhLg0c8PTSoPaUsKf2Tt4FQxsNDABnzEFUkROg-zl7kakxjTGtQtP5qy4Og3qUYuPdaCOYNtPuJ_zSLKldjBXkGnIPpmSjuXRH4MdhOweySHqGhCAKdnsIfQDZlFaTSt07NHuDmVYO93ArHyLVL-1OuHfgcbKWOrp6kIyRzctRGOqtLu769dAEVQ_t03sh2drYvqBneeEvBHBDcVTzmylHebspUzbYnn3QMrInSIYgo-jrw7GrHIc1PKywdcEf3lUAx84Jj44F1gWGiie4ceyEllafCzMdwi-c1lyzydJwcx2EoX_tGiXXWGJVqTLlrFqW-TZ8ga4cO82g2&dcid=3_ctx_918e11ce-cfb7-46b2-8079-575956c07a77&w=300&h=250&ml=1
Cookie: IKSR={}; INF_DFL8=false; IUID=e9d799e6-d5c9-4c4b-94e7-af992fb7d02b; ISSH=6F7CFD; VMI=; IPLH=#{"53364":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; IPLH_Q=#[53364]; CHN=#[]; MSSH=#{}; MSRH=#{}; ILP=null; ILPLU=#1/1/0001 12:00:00 AM; ILEALC=#1/1/0001 12:00:00 AM; ILMPF=#False; IPMPLU=#; IPMUID=#; BSWUID=#; IBL=#[]; IPLSH=#{}; IPLSH_Q=#[]; IZH=#{"56389":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; IZH_Q=#[56389]; IMCH=#{}; IMCH_Q=#[]; IMH=#{"72904":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; IMH_Q=#[72904]; ISH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:18"}]}; ISH_Q=#[14172]; ISPH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; ISPH_Q=#[14172]; ICH=#{"30675":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; ICH_Q=#[30675]
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Thu, 23 Nov 2023 06:53:19 GMT
content-type: text/html; charset=utf-8
content-length: 429
location: https://twinrdack.com/mediahosting.engine?MediaId=72901&AId=11491&CId=30675&PId=53360&SiteId=14172&ZoneId=56391&VolumeMetricId=d5760216-18c7-45a5-8b0e-a9836abe8ad0&PassBackUrl=&res=&dcid=3_ctx_918e11ce-cfb7-46b2-8079-575956c07a77&cu=&kw=&mw=300&mh=250&ml=1
cache-control: private, no-transform
access-control-allow-origin: *
set-cookie: IKSR={}; path=/; SameSite=None; secure
INF_DFL8=false; path=/; SameSite=None; secure
IUID=e9d799e6-d5c9-4c4b-94e7-af992fb7d02b; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure
ISSH=6F7CFD; path=/; SameSite=None; secure
VMI=d5760216-18c7-45a5-8b0e-a9836abe8ad0; path=/; SameSite=None; secure
IPLH=#{"53364":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPLH_Q=#[53364]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
CHN=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
MSSH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
MSRH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ILP=null; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure
ILPLU=#1/1/0001 12:00:00 AM; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ILEALC=#1/1/0001 12:00:00 AM; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ILMPF=#False; expires=Thu, 23-Nov-2023 10:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPMPLU=#; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPMUID=#; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
BSWUID=#; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IKSR={}; path=/; SameSite=None; secure
IBL=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IZH=#{"56389":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IZH_Q=#[56389]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH=#{}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH_Q=#[]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMH=#{"72904":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
IMH_Q=#[72904]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:18"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISH_Q=#[14172]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH=#{"14172":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH_Q=#[14172]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ICH=#{"30675":[{"SId":"6F7CFD","D":"23/11/22T22:53:19"}]}; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
ICH_Q=#[30675]; expires=Wed, 23-Nov-2033 06:53:19 GMT; path=/; SameSite=None; secure; HttpOnly
p3p: CP="CAO PSA OUR IND"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5Fhcdso%2BJ9%2BqVno8lrFvybaSfPfBc3eSpvQ09zWi8TwhnuWhMdJOBv3mF2Y%2Fc%2F%2BVvZBlHHDRKCbfwqsZYZ2BtBiXsRELy0AW42x3y5eH04TfW0zxwoioesB%2BDSCkAW4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a77e950cd1712e-OSL
alt-svc: h3=":443"; ma=86400
172.64.172.21
168.119.25.102
109.206.181.2
0.0.0.0