| fonts.googleapis.com/css?family=Source+Sans+Pro:400,600,700&display=swap | 142.250.74.10 | 200 OK | 7.8 kB |
URL GET fonts.googleapis.com/css?family=Source+Sans+Pro:400,600,700&display=swap IP 142.250.74.10:443
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint7E:14:87:08:DF:BA:04:65:17:BA:3B:4F:BA:EA:BC:8C:3F:0A:A4:00 ValidityMon, 31 Mar 2025 08:55:43 GMT - Mon, 23 Jun 2025 08:55:42 GMT
Hashc4bbb461f97583947d47dcf696ba2194 bd50715543f7afede1017fb9e7efc3f38c4efa9f 0625e1d27b09fb1b194f9a5ac9cfbc18a4321301294d77ecfe65e52a78416505
GET /css?family=Source+Sans+Pro:400,600,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 30 Apr 2025 21:23:22 GMT
date: Wed, 30 Apr 2025 21:23:22 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| txxx.me/api/json/main/14400/str.en.json | 62.122.168.133 | 200 OK | 7.4 kB |
URL GET txxx.me/api/json/main/14400/str.en.json IP 62.122.168.133:443
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjecttxxx.me Fingerprint1A:7D:DE:7F:DC:D8:73:9F:A7:81:74:C3:10:0C:F5:EF:5E:AF:02:C6 ValidityThu, 03 Apr 2025 08:06:43 GMT - Wed, 02 Jul 2025 08:06:42 GMT
Hasha6bcd93d7c293bd32f654e24539b0ac7 b3430b36047e119bdc603b2ce87d8a905f1b1942 9b3409e2d5fde6212aafa75c6a3adafc0f519e6b131ebaa844996b8010ab5477
GET /api/json/main/14400/str.en.json HTTP/1.1
Host: txxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/embed/6615715/?source=1053265611
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Wed, 30 Apr 2025 21:23:22 GMT
content-type: application/json
last-modified: Wed, 30 Apr 2025 17:33:13 GMT
vary: Accept-Encoding
etag: W/"68125ed9-1cc4"
expires: Wed, 30 Apr 2025 21:28:22 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| txxx.me/assets/jwplayer-8.21.2.4/vast.js | 62.122.168.133 | 200 OK | 111 kB |
URL GET txxx.me/assets/jwplayer-8.21.2.4/vast.js IP 62.122.168.133:443
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjecttxxx.me Fingerprint1A:7D:DE:7F:DC:D8:73:9F:A7:81:74:C3:10:0C:F5:EF:5E:AF:02:C6 ValidityThu, 03 Apr 2025 08:06:43 GMT - Wed, 02 Jul 2025 08:06:42 GMT
File typeJavaScript source, ASCII text, with very long lines (3270) Size111 kB (111155 bytes) Hashb1612c37306c7cb0afeb930c4494c52d 0f9c1b458f7f5600f74989a8d89acec658acf93d f7fdf75ee46d77919fcbd912db8ce32355702b534b02e9a622623f0d360f0fa0
GET /assets/jwplayer-8.21.2.4/vast.js HTTP/1.1
Host: txxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/embed/6615715/?source=1053265611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Wed, 30 Apr 2025 21:23:23 GMT
content-type: application/javascript
last-modified: Mon, 14 Apr 2025 14:00:25 GMT
vary: Accept-Encoding
etag: W/"67fd14f9-1b233"
expires: Fri, 30 May 2025 21:23:23 GMT
cache-control: max-age=2592000, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| txxx.me/get_file/21/f1d6282c8c65997f7392e9296f802d234b5a0d6cc7/6615000/6615715/6615715_hq.mp4/?d=3181&br=91&ti=1746048203&f=video.m3u8 | 62.122.168.133 | 302 Found | 250 B |
URL GET txxx.me/get_file/21/f1d6282c8c65997f7392e9296f802d234b5a0d6cc7/6615000/6615715/6615715_hq.mp4/?d=3181&br=91&ti=1746048203&f=video.m3u8 IP 62.122.168.133:443
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjecttxxx.me Fingerprint1A:7D:DE:7F:DC:D8:73:9F:A7:81:74:C3:10:0C:F5:EF:5E:AF:02:C6 ValidityThu, 03 Apr 2025 08:06:43 GMT - Wed, 02 Jul 2025 08:06:42 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get_file/21/f1d6282c8c65997f7392e9296f802d234b5a0d6cc7/6615000/6615715/6615715_hq.mp4/?d=3181&br=91&ti=1746048203&f=video.m3u8 HTTP/1.1
Host: txxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/embed/6615715/?source=1053265611
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.24.0
date: Wed, 30 Apr 2025 21:23:24 GMT
content-type: text/html; charset=UTF-8
location: https://txxx.ahcdn.com/key=x-7xdTa8uH0h2TRZiRAvLg,end=1746134604,limit=3/media=hlsA/referer=none,.txxx.me,.gstatic.com/multi=960x720:6615715_hq/c11/videos/6615000/6615715/_TPL_.mp4
x-powered-by: PHP/7.2.34
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| 18xxx.name/image/30/388_4.jpg | 172.67.150.176 | 200 OK | 8.1 kB |
URL GET 18xxx.name/image/30/388_4.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3 Hashe5c7f63885e08a94131c8d5364464961 61923bbd0c97176941b9f5163932258f720708e6 2bf964df8d2384b8985c0fd91b53a5ef21d84bde58cbc4c48874cd0af3b6a6f0
GET /image/30/388_4.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: image/jpeg
content-length: 8111
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jKKzWL5JFVWGmw%2BDyWAQrhLc6E%2FJkbMTewA0gv10cpZuE%2BOwEKULmYab7IHL5w0T%2BlJ6uEJ8CUZ9MMejAeZnPTf4Ep2dO0B3oNPNdC6BLB%2BIBwPl1qEmtqbTbeug"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 29 Dec 2021 10:28:40 GMT
etag: "61cc3858-1faf"
expires: Fri, 30 May 2025 08:53:27 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 44993
cf-cache-status: HIT
cf-ray: 938a198cca2eb51e-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2923&min_rtt=598&rtt_var=1965&sent=240&recv=236&lost=0&retrans=0&sent_bytes=94424&recv_bytes=17100&delivery_rate=8676529&cwnd=48000&unsent_bytes=0&cid=fa0fe3acafa88f88&ts=798&x=16"
|
|
| tn.txxx.tube/contents/other/player/embed/txxx-logo-embed.svg | 45.133.44.24 | 200 OK | 1.0 kB |
URL GET tn.txxx.tube/contents/other/player/embed/txxx-logo-embed.svg IP 45.133.44.24:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjecttn.txxx.tube FingerprintF7:15:D0:97:8A:E9:68:F8:77:0F:B4:03:F5:66:AE:C3:AA:73:0F:4C ValidityWed, 19 Mar 2025 02:33:52 GMT - Tue, 17 Jun 2025 02:33:51 GMT
File typeSVG Scalable Vector Graphics image Hash383bffd9f3e5e51dfac29803aae7198b 533e6846a84784fd5c223a674557fe23e9cbbd3e 10bb8a67299f84cd98e7f44a36cca653bc9197f36fbc84dd04c8591cb2423a60
GET /contents/other/player/embed/txxx-logo-embed.svg HTTP/1.1
Host: tn.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:24 GMT
content-type: image/svg+xml
content-length: 1007
server: nginx/1.18.0
last-modified: Thu, 24 Oct 2019 11:54:37 GMT
etag: "5db190fd-3ef"
cache-control: max-age=7776000
expires: Tue, 20 Feb 2024 17:19:51 GMT
x-cdn-host-id: ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| txxx.me/api/json/timelines/2592000/_hq.mp4/6000000/6615000/6615715.107.30.vtt | 62.122.168.133 | 200 OK | 16 kB |
URL GET txxx.me/api/json/timelines/2592000/_hq.mp4/6000000/6615000/6615715.107.30.vtt IP 62.122.168.133:443
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjecttxxx.me Fingerprint1A:7D:DE:7F:DC:D8:73:9F:A7:81:74:C3:10:0C:F5:EF:5E:AF:02:C6 ValidityThu, 03 Apr 2025 08:06:43 GMT - Wed, 02 Jul 2025 08:06:42 GMT
File typeWebVTT subtitles, ASCII text Hashae4e2ff75df37a126cfb8e3c0f51cacf dabaca42c3eaae1e526dc99953e3d68fb3cea7af d2c6f2d32b28057ccb684f614195d20acb3541b7ff9c64d01170ca1af625fc4e
GET /api/json/timelines/2592000/_hq.mp4/6000000/6615000/6615715.107.30.vtt HTTP/1.1
Host: txxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/embed/6615715/?source=1053265611
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Wed, 30 Apr 2025 21:23:23 GMT
content-type: text/plain
content-length: 15816
last-modified: Tue, 29 Apr 2025 09:55:43 GMT
etag: "6810a21f-3dc8"
expires: Wed, 30 Apr 2025 21:28:23 GMT
cache-control: max-age=300
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 18xxx.name/image/8/881_leman.jpg | 172.67.150.176 | 200 OK | 12 kB |
URL GET 18xxx.name/image/8/881_leman.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hash12ccfbae61410b30ee0715d892ec9482 fea113d88208e18fd5a31d228ae9d24e080c1910 2c1ba14265f578b51bcd6ba581fb3e4e5c4fbfb4f387b10647f03d99a45e783a
GET /image/8/881_leman.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: image/jpeg
content-length: 12382
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jZssVtmk8p2vDUeRnoJkOfBLlClN0ibmXlwSy2YF372Zj5wYt8xPJnT%2B01K6RZKC9FlU6LWNig%2BPrXzWrK60zporQEJhW0KZfB7nVgzAtmTY5aIcf8Vm081cNLvc"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 04:29:20 GMT
etag: "61ac4020-305e"
expires: Thu, 29 May 2025 15:44:01 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 106760
cf-cache-status: HIT
cf-ray: 938a198cba2ab51e-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3319&min_rtt=598&rtt_var=2270&sent=177&recv=232&lost=0&retrans=0&sent_bytes=25900&recv_bytes=16375&delivery_rate=31198&cwnd=12000&unsent_bytes=0&cid=fa0fe3acafa88f88&ts=793&x=16"
|
|
| 18xxx.name/image/7/940_spunked.jpg | 172.67.150.176 | 200 OK | 18 kB |
URL GET 18xxx.name/image/7/940_spunked.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3 Hasha60dcf7add644ad7a36c63bccb98c774 3050053eaab1b42eb1e52f41eedc4506c04c1ab5 9bf89de22a4a4fb9b3cff88c1565f9e547ab9f6c490b735c4edf29748a7f750a
GET /image/7/940_spunked.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: image/jpeg
content-length: 18243
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Krd7JzLruUZFLvTjIAkn1ux27y80CVSMcShCahaF1HJCubABpeP7tJrtsnTSQMeokLXSmWNe1T6NRPL1xzWcN0yhFbsBxgynA7cvc6hg8C%2BqWh6pA1oqnXE5Nxwl"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 03:59:09 GMT
etag: "61ac390d-4743"
expires: Thu, 29 May 2025 15:44:01 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 106760
cf-cache-status: HIT
cf-ray: 938a198cba2cb51e-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3111&min_rtt=598&rtt_var=2118&sent=200&recv=235&lost=0&retrans=0&sent_bytes=49952&recv_bytes=17055&delivery_rate=790198&cwnd=24000&unsent_bytes=0&cid=fa0fe3acafa88f88&ts=796&x=16"
|
|
| 18xxx.name/image/2/026_by.jpg | 172.67.150.176 | 200 OK | 17 kB |
URL GET 18xxx.name/image/2/026_by.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hashf138664849a092fb6d0e87cf3f4d984d f0be98a1131b99f0b8c74cf38bd52c76ccd8e734 acefc3a3f6b09fb3ad3004213e06ae2846647454553b5bdf4c0eaecb00829605
GET /image/2/026_by.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: image/jpeg
content-length: 16705
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QV007hNxdbvwy2T0hg2ACkcFe95Dfjskwe%2FmS2iT3BbEbLmbDNS6rC4IqQnel5T%2BA6gIFLQ1jvwvW2HaFmzhXb1EhVn3N8RRiiYsnfCUVrVoDmb1xE0VHh1RYL2x"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 03:17:38 GMT
etag: "61ac2f52-4141"
expires: Fri, 30 May 2025 04:32:56 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 60625
accept-ranges: bytes
cf-ray: 938a198cca2fb51e-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2923&min_rtt=598&rtt_var=1965&sent=243&recv=236&lost=0&retrans=0&sent_bytes=97952&recv_bytes=17100&delivery_rate=8676529&cwnd=48000&unsent_bytes=0&cid=fa0fe3acafa88f88&ts=801&x=16"
|
|
| txxx.me/embed/6615715/?source=1053265611 | 62.122.168.133 | 200 OK | 70 kB |
URL GET txxx.me/embed/6615715/?source=1053265611 IP 62.122.168.133:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerLet's Encrypt Subjecttxxx.me Fingerprint1A:7D:DE:7F:DC:D8:73:9F:A7:81:74:C3:10:0C:F5:EF:5E:AF:02:C6 ValidityThu, 03 Apr 2025 08:06:43 GMT - Wed, 02 Jul 2025 08:06:42 GMT
File typeHTML document, ASCII text, with very long lines (36605) Hash4f822adc4953d04fe91dcbe39fb75e01 248f330bf999f7545f2be15e39c64b5df3951067 e5d6cfd410f8de2887fc6d4d2ee15d7979c335111a0a6e67de38b3623605202e
GET /embed/6615715/?source=1053265611 HTTP/1.1
Host: txxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.2.34
access-control-allow-origin: *
set-cookie: source=1053265611; expires=Fri, 01-May-2026 03:12:07 GMT; Max-Age=31556926; path=/; domain=txxx.me
tccloak=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=txxx.me
kt_lang=en; expires=Sat, 25-Apr-2026 21:23:21 GMT; Max-Age=31104000; path=/; domain=.txxx.me
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| js.txxx.tube/upd/20250414.140050.339447/static/js/chunk-common.js | 45.133.44.24 | 200 OK | 339 kB |
URL GET js.txxx.tube/upd/20250414.140050.339447/static/js/chunk-common.js IP 45.133.44.24:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectjs.txxx.tube FingerprintA5:2F:45:64:9F:C5:98:93:E5:80:A2:06:51:8D:ED:22:ED:DA:FB:A5 ValiditySun, 27 Apr 2025 02:32:00 GMT - Sat, 26 Jul 2025 02:31:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators Size339 kB (339447 bytes) Hash188f27b72d1162fdefc10cee9d6e5400 95db7af344dfca7719d6586340986e022798390f 33ad0fa7cd7b1d41c5a721cc494b261f61985502f1479edbb312648827822860
GET /upd/20250414.140050.339447/static/js/chunk-common.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:22 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Mon, 14 Apr 2025 14:00:50 GMT
vary: Accept-Encoding
etag: W/"67fd1512-52df7"
expires: Wed, 16 Apr 2025 09:25:22 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| js.txxx.tube/upd/20250414.140025.0/static/css/chunk-1d2b69f6.css | 45.133.44.24 | 200 OK | 35 kB |
URL GET js.txxx.tube/upd/20250414.140025.0/static/css/chunk-1d2b69f6.css IP 45.133.44.24:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectjs.txxx.tube FingerprintA5:2F:45:64:9F:C5:98:93:E5:80:A2:06:51:8D:ED:22:ED:DA:FB:A5 ValiditySun, 27 Apr 2025 02:32:00 GMT - Sat, 26 Jul 2025 02:31:59 GMT
File typeASCII text, with very long lines (35096), with no line terminators Hash4cc5e1e6a421324335084cd183f6c2f2 f7f66a9d21d4492d65e0efef144c4edafa7a378a a4f67c3665f4f026397906ba96410a66e7627d71ad2325cd860c706a25a13466
GET /upd/20250414.140025.0/static/css/chunk-1d2b69f6.css HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:23 GMT
content-type: text/css
server: nginx/1.24.0
last-modified: Mon, 14 Apr 2025 14:00:50 GMT
vary: Accept-Encoding
etag: W/"67fd1512-8918"
expires: Wed, 16 Apr 2025 09:22:23 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| js.txxx.tube/xtulat2a55/ruejor571g.js | 45.133.44.24 | 200 OK | 37 kB |
URL GET js.txxx.tube/xtulat2a55/ruejor571g.js IP 45.133.44.24:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectjs.txxx.tube FingerprintA5:2F:45:64:9F:C5:98:93:E5:80:A2:06:51:8D:ED:22:ED:DA:FB:A5 ValiditySun, 27 Apr 2025 02:32:00 GMT - Sat, 26 Jul 2025 02:31:59 GMT
File typeJavaScript source, ASCII text, with very long lines (37197), with no line terminators Hashf8530f5f141400da86942e214001fcd6 7555f0843092fabe573c9c6a1c8b29a2ff22954c 18c479210d55211529cbd24b034d1934d907b866e430c7a8901959962654050d
GET /xtulat2a55/ruejor571g.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:24 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Wed, 30 Apr 2025 12:03:41 GMT
vary: Accept-Encoding
etag: W/"6812119d-914d"
expires: Thu, 01 May 2025 12:03:42 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| txxx.ahcdn.com/key=7+0gha6ZvxyNkB7zZ3vtfQ,end=1746134604,limit=3/media=hlsA/referer=none,.txxx.me,.gstatic.com/c11/videos/6615000/6615715/6615715_hq.mp4.m3u8 | 185.185.15.4 | 200 OK | 69 kB |
URL GET txxx.ahcdn.com/key=7+0gha6ZvxyNkB7zZ3vtfQ,end=1746134604,limit=3/media=hlsA/referer=none,.txxx.me,.gstatic.com/c11/videos/6615000/6615715/6615715_hq.mp4.m3u8 IP 185.185.15.4:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjecttxxx.ahcdn.com FingerprintC6:A6:EC:04:BA:2A:5E:E6:F7:AE:17:AA:7E:CC:83:4E:A0:79:16:AB ValidityWed, 02 Apr 2025 12:31:37 GMT - Tue, 01 Jul 2025 12:31:36 GMT
Hasheb2b55a9e262140e8f7bd0529405a556 4fba793aba203e410a587197d0e9c9618d92493a be7ee05a1ba13b2d8233881064c7d97d84349ee6d3166a1e0d1b640d82599417
GET /key=7+0gha6ZvxyNkB7zZ3vtfQ,end=1746134604,limit=3/media=hlsA/referer=none,.txxx.me,.gstatic.com/c11/videos/6615000/6615715/6615715_hq.mp4.m3u8 HTTP/1.1
Host: txxx.ahcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 30 Apr 2025 21:23:24 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
cache-control: no-cache
x-message: https://ip409213490.ahcdn.com/key=8sVfd3Vm6xUK+fHGHfCDeA,s=,end=1746134604,limit=3/state=aBKUW1oq/referer=none,.txxx.me,.gstatic.com/reftag=063878343/media=hlsA/55/121/7/107705367.mp4/index.m3u8
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php | 172.67.150.176 | 200 OK | 48 kB |
URL User Request GET 18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php IP 172.67.150.176:443
CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (16684), with CRLF, LF line terminators Hash66ebf4a517dbae96e4d9f465473bc959 536d6064e1ddf5d098100375228195ef2e4a198f 6fe06a3d7967894f59d162692125b608ca2fa9897a6bd0cc6d9a2902e1575f14
GET /ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:20 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.25
set-cookie: force_lng=ar; expires=Thu, 01-May-2025 21:23:20 GMT; Max-Age=86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qNFt7U6rFGWFuSycfNyfnf1tLcaziRO2kj84PZDJ89Pm0QMYYYD4P%2FfXBT2uvUGstR7x6Toff4z%2BreRoIR0alnsHzJK1LvGS3dczq1iCJ5seuqoqz21xr4k8pMe9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 938a19854b9b56a9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=471&min_rtt=436&rtt_var=113&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3248&recv_bytes=1281&delivery_rate=7827027&cwnd=253&unsent_bytes=0&cid=95c99f05276b2a59&ts=420&x=0"
X-Firefox-Spdy: h2
|
|
| bullionglidingscuttle.com/get/2005586?zoneid=2005586&pid=__clb-2005586_1&jp=_clwmaftgprslcwzocwbhch&dr=52&nojs=0&abvar=0&febuild=1.0.539&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&psr=c5XDANhaHR0cHM6Ly8xOHh4eC5uYW1lLw&ix=0&x=801&y=801&md=0&psu=ColnxnZaHR0cHM6Ly9hLmxhYmFkZW5hLmNvbS9hcGkvc3BvdHMvNDU4ODc3P3A9MQ&afid=3210653758791168&eclog=0&seu=P5fx6GhaHR0cHM6Ly8xOHh4eC5uYW1lLw&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5&bp=0&uf=0&freq=0 | 94.242.247.20 | 200 OK | 6.9 kB |
URL GET bullionglidingscuttle.com/get/2005586?zoneid=2005586&pid=__clb-2005586_1&jp=_clwmaftgprslcwzocwbhch&dr=52&nojs=0&abvar=0&febuild=1.0.539&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&psr=c5XDANhaHR0cHM6Ly8xOHh4eC5uYW1lLw&ix=0&x=801&y=801&md=0&psu=ColnxnZaHR0cHM6Ly9hLmxhYmFkZW5hLmNvbS9hcGkvc3BvdHMvNDU4ODc3P3A9MQ&afid=3210653758791168&eclog=0&seu=P5fx6GhaHR0cHM6Ly8xOHh4eC5uYW1lLw&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5&bp=0&uf=0&freq=0 IP 94.242.247.20:443
Requested byhttps://a.labadena.com/api/spots/458877?p=1 CertificateIssuerBuypass AS-983163327 Subject FingerprintC1:41:36:2B:0F:2D:49:78:DA:E4:70:2C:6A:68:9E:0C:A4:8A:8D:5F ValidityTue, 04 Mar 2025 00:04:45 GMT - Sat, 30 Aug 2025 21:59:00 GMT
File typeASCII text, with very long lines (6893), with no line terminators Hashf3ea8ebfaae7edc42154bc4d4cd888bf 2ed31af9017241245809395399be39e7e4cc17ce 2a8b963cb79096606d7c2326ace811492c766c76dcc8c4264086bba68b4d819e
GET /get/2005586?zoneid=2005586&pid=__clb-2005586_1&jp=_clwmaftgprslcwzocwbhch&dr=52&nojs=0&abvar=0&febuild=1.0.539&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&psr=c5XDANhaHR0cHM6Ly8xOHh4eC5uYW1lLw&ix=0&x=801&y=801&md=0&psu=ColnxnZaHR0cHM6Ly9hLmxhYmFkZW5hLmNvbS9hcGkvc3BvdHMvNDU4ODc3P3A9MQ&afid=3210653758791168&eclog=0&seu=P5fx6GhaHR0cHM6Ly8xOHh4eC5uYW1lLw&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5&bp=0&uf=0&freq=0 HTTP/1.1
Host: bullionglidingscuttle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 30 Apr 2025 21:23:22 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Wed, 03 Jun 2026 21:23:22 GMT; Secure; SameSite=None
UID=2504301623a973850a63b349aa9d017433a8; Path=/; Expires=Wed, 03 Jun 2026 21:23:22 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| citadelpathstatue.com/get/2005665?zoneid=2005665&jp=_clozqycjaggyxuzrledemp&dr=102&nojs=0&abvar=0&febuild=1.0.539&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=A3bFsIUP_lSSx4gptan9jWLirIchfYmcWfw2V91&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=X2P96qNaHR0cHM6Ly8xOHh4eC5uYW1lL2FyL3R1YmVzL2I1YjQxZmFjMDM2MWQxNTdkOTY3M2VjYjkyNmFmNWFlL2luZGV4LnBocA&afid=4336553665627648&eclog=0&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5&uf=0&freq=0 | 94.242.247.27 | 200 OK | 0 B |
URL GET citadelpathstatue.com/get/2005665?zoneid=2005665&jp=_clozqycjaggyxuzrledemp&dr=102&nojs=0&abvar=0&febuild=1.0.539&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=A3bFsIUP_lSSx4gptan9jWLirIchfYmcWfw2V91&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=X2P96qNaHR0cHM6Ly8xOHh4eC5uYW1lL2FyL3R1YmVzL2I1YjQxZmFjMDM2MWQxNTdkOTY3M2VjYjkyNmFmNWFlL2luZGV4LnBocA&afid=4336553665627648&eclog=0&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5&uf=0&freq=0 IP 94.242.247.27:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerBuypass AS-983163327 Subject Fingerprint06:E6:2D:49:92:9F:EC:9D:12:04:3B:68:EB:B2:30:0A:30:7B:4A:D2 ValidityMon, 03 Mar 2025 23:48:25 GMT - Sat, 30 Aug 2025 21:59:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get/2005665?zoneid=2005665&jp=_clozqycjaggyxuzrledemp&dr=102&nojs=0&abvar=0&febuild=1.0.539&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=A3bFsIUP_lSSx4gptan9jWLirIchfYmcWfw2V91&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=X2P96qNaHR0cHM6Ly8xOHh4eC5uYW1lL2FyL3R1YmVzL2I1YjQxZmFjMDM2MWQxNTdkOTY3M2VjYjkyNmFmNWFlL2luZGV4LnBocA&afid=4336553665627648&eclog=0&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5&uf=0&freq=0 HTTP/1.1
Host: citadelpathstatue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 30 Apr 2025 21:23:23 GMT
content-type: text/plain; charset=utf-8
content-length: 0
x-route-id: config
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| js.txxx.tube/upd/20250414.140050.5970/static/js/embed.js | 45.133.44.24 | 200 OK | 6.0 kB |
URL GET js.txxx.tube/upd/20250414.140050.5970/static/js/embed.js IP 45.133.44.24:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectjs.txxx.tube FingerprintA5:2F:45:64:9F:C5:98:93:E5:80:A2:06:51:8D:ED:22:ED:DA:FB:A5 ValiditySun, 27 Apr 2025 02:32:00 GMT - Sat, 26 Jul 2025 02:31:59 GMT
File typeJavaScript source, ASCII text, with very long lines (5970), with no line terminators Hash121964b54bc73a44242ef8dca0f1f2bb c443192dfddb8a3c20f804ea97f8eefa9f8ff79b 8eb5ac49e50ea9a7114a1f6317d3f00a58a5348c1354dae1d73709202c728941
GET /upd/20250414.140050.5970/static/js/embed.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:22 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Mon, 14 Apr 2025 14:00:50 GMT
vary: Accept-Encoding
etag: W/"67fd1512-1752"
expires: Wed, 16 Apr 2025 09:25:22 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| 18xxx.name/image/30/832_flow.jpg | 172.67.150.176 | 200 OK | 14 kB |
URL GET 18xxx.name/image/30/832_flow.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hashda9176791802bfa94f969388461ffd02 f794d4f7e9bef1ae42e3cc9fe7218c33cc6b9c9f f8c5f4aea28f8bad93ee16525a8fd7c5dd7d478ede0bfbab01709f43a06e4107
GET /image/30/832_flow.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: image/jpeg
content-length: 14490
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wGsOKQWGDlWPkfff3u4S8sCnMXnYntbgL9uqeP7PdU3duwRVlWGsTDEe1BzEE5fIEt569icq%2FItfctZRwSmBo%2Bj4nzCUkdocgySmlY4FhpVJE3aiNZxlzkoLTPBU"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 29 Dec 2021 13:07:06 GMT
etag: "61cc5d7a-389a"
expires: Fri, 30 May 2025 04:32:56 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 60625
accept-ranges: bytes
cf-ray: 938a198cca30b51e-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2923&min_rtt=598&rtt_var=1965&sent=243&recv=236&lost=0&retrans=0&sent_bytes=97952&recv_bytes=17100&delivery_rate=8676529&cwnd=48000&unsent_bytes=0&cid=fa0fe3acafa88f88&ts=801&x=16"
|
|
| js.txxx.tube/xtulat2a55/ifj8ehq80g.js | 45.133.44.24 | 200 OK | 124 kB |
URL GET js.txxx.tube/xtulat2a55/ifj8ehq80g.js IP 45.133.44.24:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectjs.txxx.tube FingerprintA5:2F:45:64:9F:C5:98:93:E5:80:A2:06:51:8D:ED:22:ED:DA:FB:A5 ValiditySun, 27 Apr 2025 02:32:00 GMT - Sat, 26 Jul 2025 02:31:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators Size124 kB (124276 bytes) Hash49f8c8686bf565c472a9206ccea5a2f8 88246caf431dd41cbc99974543e09615abd555b9 cd3a41b36eba0cf86633ff2aa5da76c120d79201108cb6b7e2aeffef2f4a69e6
GET /xtulat2a55/ifj8ehq80g.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:22 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Wed, 30 Apr 2025 12:03:41 GMT
vary: Accept-Encoding
etag: W/"6812119d-1e574"
expires: Thu, 01 May 2025 12:03:42 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| txxx.me/api/json/videos_related2/432000/50/6000000/6615000/6615715.all.1.json | 62.122.168.133 | 200 OK | 26 kB |
URL GET txxx.me/api/json/videos_related2/432000/50/6000000/6615000/6615715.all.1.json IP 62.122.168.133:443
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjecttxxx.me Fingerprint1A:7D:DE:7F:DC:D8:73:9F:A7:81:74:C3:10:0C:F5:EF:5E:AF:02:C6 ValidityThu, 03 Apr 2025 08:06:43 GMT - Wed, 02 Jul 2025 08:06:42 GMT
Hash1db7aa4fcddec1bf7072603eaabb331c fad609e5de69a745306ae078899bf0b5fc055224 b7eba1dee08b82314b9ea841ea9f2a7a32dc0aaccd7134c7a04da11c2f5e93c7
GET /api/json/videos_related2/432000/50/6000000/6615000/6615715.all.1.json HTTP/1.1
Host: txxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/embed/6615715/?source=1053265611
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Wed, 30 Apr 2025 21:23:22 GMT
content-type: application/json
last-modified: Wed, 30 Apr 2025 09:39:55 GMT
vary: Accept-Encoding
etag: W/"6811efeb-673c"
expires: Wed, 30 Apr 2025 21:28:22 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| metricswpsh.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjEwNTMyNjU2MTEsInVzZXJfaWQiOiI3MjQ1NzI1NjM3MTg4MjU2MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM4LjMiLCJ0YWdfaWQiOjc1NSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjI5LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 | 168.119.25.64 | 200 OK | 0 B |
URL GET metricswpsh.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjEwNTMyNjU2MTEsInVzZXJfaWQiOiI3MjQ1NzI1NjM3MTg4MjU2MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM4LjMiLCJ0YWdfaWQiOjc1NSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjI5LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 IP 168.119.25.64:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectnotification.tubecup.net Fingerprint6A:AF:05:21:7E:87:22:9C:BB:20:DB:34:F6:0A:88:06:79:E3:A0:78 ValidityThu, 17 Apr 2025 02:58:33 GMT - Wed, 16 Jul 2025 02:58:32 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjEwNTMyNjU2MTEsInVzZXJfaWQiOiI3MjQ1NzI1NjM3MTg4MjU2MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM4LjMiLCJ0YWdfaWQiOjc1NSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjI5LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 HTTP/1.1
Host: metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 30 Apr 2025 21:23:23 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| cdn.tapioni.com/asg-iframe.js | 104.22.38.71 | 200 OK | 124 kB |
URL GET cdn.tapioni.com/asg-iframe.js IP 104.22.38.71:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subjectcdn.tapioni.com Fingerprint2F:19:09:F1:95:75:EB:3B:D1:F5:B5:EE:E7:26:67:59:AE:9D:D6:4D ValiditySun, 23 Mar 2025 20:01:06 GMT - Sat, 21 Jun 2025 21:01:04 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65498), with no line terminators Size124 kB (124137 bytes) Hash03cce69df9bf57d67cc167a9a5bee218 d36fea3dffa0044329ef8f1099d2be91ab9dbaa0 dd2436398958166f5868f09eb8986bfc745b2d222a2889a319283fc55bf47564
GET /asg-iframe.js HTTP/1.1
Host: cdn.tapioni.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: application/javascript
content-length: 43178
last-modified: Thu, 10 Apr 2025 14:35:30 GMT
vary: Accept-Encoding
etag: "67f7d732-a8aa"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 216545
accept-ranges: bytes
server: cloudflare
cf-ray: 938a198a6f8e12a5-CPH
X-Firefox-Spdy: h2
|
|
| 18xxx.name/image/13/019_zoya-daal.jpg | 172.67.150.176 | 200 OK | 16 kB |
URL GET 18xxx.name/image/13/019_zoya-daal.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hash5c05adc38a12365dd532b450c2e36e5b 99557572362fff0f0583dd2bd8a96e03ac62a705 fa8ec755553de0c81f58a8051dcf0ee6269d0f88f76fb74f3b96daa60d459cb6
GET /image/13/019_zoya-daal.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: image/jpeg
content-length: 15827
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nd7HhZ9Zw6EHd9WPcHmuWFbUkNC%2BFbmoYz558UmDtAOVxxaUORM540bIaW9VXHzBZAkA9%2FPbMez1lZP9CNV%2FoSZsVQoI9oxpEl9RvZyKITpCI0ccTaGHjVTUwu1a"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 06:12:01 GMT
etag: "61ac5831-3dd3"
expires: Thu, 29 May 2025 15:44:01 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 106760
accept-ranges: bytes
cf-ray: 938a198cba2db51e-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2923&min_rtt=598&rtt_var=1965&sent=240&recv=236&lost=0&retrans=0&sent_bytes=94424&recv_bytes=17100&delivery_rate=8676529&cwnd=48000&unsent_bytes=0&cid=fa0fe3acafa88f88&ts=798&x=16"
|
|
| 18xxx.name/favicon-196x196.png | 172.67.150.176 | 200 OK | 21 kB |
URL GET 18xxx.name/favicon-196x196.png IP 172.67.150.176:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typePNG image data, 196 x 196, 8-bit/color RGBA, non-interlaced Hash4d4bf8205dad5085973d0b6ce10ba876 008ae5d3ce72a00481c1abb2e562e75103c783f2 93dab20e9668ed1823bca8269fb8902209a7b74077bd61ac662ffd0952004ea3
GET /favicon-196x196.png HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 30 Apr 2025 21:23:22 GMT
content-type: image/png
content-length: 21275
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NiESvQ94gpMZKNC91mUsPxopF7Pyy8N5YxiZ6n8dwx1iBl15Jiu%2BOAn12TV5k47m%2BtLzmCce9eHJLwleDqdFDsKj3t9Zy80qThPspX0z4REsXpfK6feRdwFpgqpV"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Nov 2022 13:51:25 GMT
etag: "636bb05d-531b"
expires: Thu, 29 May 2025 15:44:02 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 106760
accept-ranges: bytes
cf-ray: 938a198e6a43b51e-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2493&min_rtt=598&rtt_var=1004&sent=388&recv=246&lost=0&retrans=0&sent_bytes=257552&recv_bytes=18654&delivery_rate=5132753&cwnd=125100&unsent_bytes=0&cid=fa0fe3acafa88f88&ts=1072&x=16"
|
|
| vast.yomeno.xyz/s/tubecorp/embed?source=1053265611 | 91.216.220.30 | 200 OK | 17 B |
URL GET vast.yomeno.xyz/s/tubecorp/embed?source=1053265611 IP 91.216.220.30:443
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectvast.yomeno.xyz Fingerprint79:E3:D3:8E:1A:DB:0F:2E:A0:D5:0E:32:44:CE:2B:DC:01:AA:24:95 ValiditySat, 05 Apr 2025 03:24:21 GMT - Fri, 04 Jul 2025 03:24:20 GMT
Hash32fde8aac4ef964567ca367a253e8ef6 f411099fb4ffbb8730e242935aea722856b171dd 9c8968018d78912f578210884f3285fdc963934d02785e4e0bd141f66bc92d09
GET /s/tubecorp/embed?source=1053265611 HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://txxx.me/
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 30 Apr 2025 21:23:22 GMT
content-type: application/json
content-length: 17
access-control-allow-credentials: true
access-control-allow-origin: https://txxx.me
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
|
|
| txxx.me/api/json/categories/14400/str.all.en.json | 62.122.168.133 | 200 OK | 98 kB |
URL GET txxx.me/api/json/categories/14400/str.all.en.json IP 62.122.168.133:443
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjecttxxx.me Fingerprint1A:7D:DE:7F:DC:D8:73:9F:A7:81:74:C3:10:0C:F5:EF:5E:AF:02:C6 ValidityThu, 03 Apr 2025 08:06:43 GMT - Wed, 02 Jul 2025 08:06:42 GMT
Hash52e457db275e704640f983a91faf8377 a19d20ddd9cf5f2ced83d72bd95fae83b0a88440 a9d3752c3fa06586222797e4d0ff5719c87812734859833850224109f7d92c3d
GET /api/json/categories/14400/str.all.en.json HTTP/1.1
Host: txxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/embed/6615715/?source=1053265611
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Wed, 30 Apr 2025 21:23:22 GMT
content-type: application/json
last-modified: Wed, 30 Apr 2025 17:33:13 GMT
vary: Accept-Encoding
etag: W/"68125ed9-17dff"
expires: Wed, 30 Apr 2025 21:28:22 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fp.metricswpsh.com/fp?tag_id=755 | 157.90.84.242 | 200 OK | 60 B |
URL POST fp.metricswpsh.com/fp?tag_id=755 IP 157.90.84.242:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectnotification.tubecup.net Fingerprint6A:AF:05:21:7E:87:22:9C:BB:20:DB:34:F6:0A:88:06:79:E3:A0:78 ValidityThu, 17 Apr 2025 02:58:33 GMT - Wed, 16 Jul 2025 02:58:32 GMT
Hashf70144a999de9a4466217c06015bc215 80c4e448a3fc5f2e1ecd89faa2ecd64e3d60cc68 be6b7108af31688e442b429e552bd19fff8fbe851731358342e4d79d55678218
POST /fp?tag_id=755 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1980
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Wed, 30 Apr 2025 21:23:23 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 60
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://txxx.me
Set-Cookie: id=10332675454599226037; Expires=Thu, 30 Apr 2026 21:23:23 GMT; Secure; SameSite=None
Vary: Origin
|
|
| maucn.yomeno.xyz/in/dip?event_id=795f2717-49cf-4466-995f-ab6440e384b5 | 168.119.45.30 | 200 OK | 0 B |
URL GET maucn.yomeno.xyz/in/dip?event_id=795f2717-49cf-4466-995f-ab6440e384b5 IP 168.119.45.30:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectvideo.infrapu.sh Fingerprint01:28:A3:82:27:D8:66:E3:7C:11:10:0C:D6:D1:5F:8E:2F:FE:B2:51 ValidityThu, 20 Mar 2025 06:04:57 GMT - Wed, 18 Jun 2025 06:04:56 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?event_id=795f2717-49cf-4466-995f-ab6440e384b5 HTTP/1.1
Host: maucn.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Wed, 30 Apr 2025 21:23:24 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| 18xxx.name/stylesmain/flags/ar.svg | 172.67.150.176 | 200 OK | 10 kB |
URL GET 18xxx.name/stylesmain/flags/ar.svg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeSVG Scalable Vector Graphics image Hashc36d1991b52ce043a0ae18b32a4da5da 4907e7d35afbb093c7f653ad8860fa2d30b62648 d54e76d7ad9da5242aa26d5dbec120b8a4530c097ae45d0b22e539f2d9c6ad8b
GET /stylesmain/flags/ar.svg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: image/svg+xml
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nIgET%2F5CJWBJ%2BdjrTlMF4%2BwKbkAxPOMOe6bYjTIqgyTEGTYZ3mccCm8ICV%2Fi3U%2FtVOvM%2BYcX1l8sGq9cHEnxjiyPSeU3W2s%2BTobmoCiHt4Mf9sXNkNJcUClxbdAx"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Nov 2022 13:50:51 GMT
etag: W/"636bb03b-27fe"
expires: Fri, 30 May 2025 21:23:21 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
content-encoding: br
cf-ray: 938a198baa1eb51e-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2664&min_rtt=598&rtt_var=1203&sent=367&recv=242&lost=0&retrans=0&sent_bytes=237435&recv_bytes=17930&delivery_rate=5436366&cwnd=125100&unsent_bytes=0&cid=fa0fe3acafa88f88&ts=893&x=16"
|
|
| bullionglidingscuttle.com/lv/esnk/2005586/code.js | 94.242.247.20 | 200 OK | 175 kB |
URL GET bullionglidingscuttle.com/lv/esnk/2005586/code.js IP 94.242.247.20:443
Requested byhttps://a.labadena.com/api/spots/458877?p=1 CertificateIssuerBuypass AS-983163327 Subject FingerprintC1:41:36:2B:0F:2D:49:78:DA:E4:70:2C:6A:68:9E:0C:A4:8A:8D:5F ValidityTue, 04 Mar 2025 00:04:45 GMT - Sat, 30 Aug 2025 21:59:00 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size175 kB (174719 bytes) Hash5ac275e94ef6e29150e777aae268c7f9 7c056cf8fbc865a26a1d6a8636db1ad849f18952 359ce4c05996663f9703c9a5a73c92ebb2d0a7db1905f5cb402d6bea8850f679
GET /lv/esnk/2005586/code.js HTTP/1.1
Host: bullionglidingscuttle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 30 Apr 2025 21:23:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 28 Apr 2025 08:42:15 GMT
vary: Accept-Encoding
etag: W/"680f3f67-2ab27"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| js.wpushsdk.com/npc/embed.json | 45.133.44.52 | 200 OK | 51 B |
URL GET js.wpushsdk.com/npc/embed.json IP 45.133.44.52:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectjs.wpushsdk.com FingerprintBE:30:8F:A1:AC:8F:CF:E4:23:AB:39:31:C5:64:E7:54:84:A1:B5:5B ValidityFri, 07 Mar 2025 02:34:06 GMT - Thu, 05 Jun 2025 02:34:05 GMT
Hash54ac94deff344cdf8181d0d5ecef4f54 8509dc0f6710ac2228efc6c26460833f1444462e fb431326d9475e0118b5bc83467a59a97bed0bc55b3d72de450b66ff3c55971e
GET /npc/embed.json HTTP/1.1
Host: js.wpushsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://txxx.me/
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:22 GMT
content-type: application/json
content-length: 51
server: nginx/1.18.0
last-modified: Fri, 27 Jan 2023 14:43:22 GMT
etag: "63d3e30a-33"
expires: Wed, 30 Apr 2025 21:28:22 GMT
cache-control: max-age=300
x-cdn-host-id: ah1742
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| vast.yomeno.xyz/prepare | 91.216.220.30 | 204 No Content | 0 B |
IP 91.216.220.30:443
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectvast.yomeno.xyz Fingerprint79:E3:D3:8E:1A:DB:0F:2E:A0:D5:0E:32:44:CE:2B:DC:01:AA:24:95 ValiditySat, 05 Apr 2025 03:24:21 GMT - Fri, 04 Jul 2025 03:24:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1283
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Wed, 30 Apr 2025 21:23:23 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://txxx.me
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
|
|
| vast.vstserv.com/vast | 91.216.220.24 | 204 No Content | 0 B |
IP 91.216.220.24:443
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectvast.vstserv.com FingerprintFD:8B:7A:74:F1:3F:3B:13:45:84:58:8B:7C:22:94:1F:33:20:21:78 ValidityThu, 17 Apr 2025 03:15:51 GMT - Wed, 16 Jul 2025 03:15:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /vast HTTP/1.1
Host: vast.vstserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://txxx.me/
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Wed, 30 Apr 2025 21:23:23 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://txxx.me
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
content-type: text/plain; charset=utf-8
content-length: 0
X-Firefox-Spdy: h2
|
|
| cdn.tapioni.com/ip-push.js | 104.22.38.71 | 200 OK | 153 kB |
URL GET cdn.tapioni.com/ip-push.js IP 104.22.38.71:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subjectcdn.tapioni.com Fingerprint2F:19:09:F1:95:75:EB:3B:D1:F5:B5:EE:E7:26:67:59:AE:9D:D6:4D ValiditySun, 23 Mar 2025 20:01:06 GMT - Sat, 21 Jun 2025 21:01:04 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65503), with no line terminators Size153 kB (153442 bytes) Hasha36ae9c7a288c33f8152523c71b1383b 69db81da3b0555d43ca9a25da9bc8c112801aedf 748b5dac93cb26cb96b6c56ddf1ff3e3c209f04016dd682c1dcaae68af049cef
GET /ip-push.js HTTP/1.1
Host: cdn.tapioni.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: application/javascript
content-length: 47151
last-modified: Thu, 10 Apr 2025 14:35:30 GMT
vary: Accept-Encoding
etag: "67f7d732-b82f"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 216537
accept-ranges: bytes
server: cloudflare
cf-ray: 938a198a6f9912a5-CPH
X-Firefox-Spdy: h2
|
|
| 18xxx.name/image/9/093_hime-.jpg | 172.67.150.176 | 200 OK | 13 kB |
URL GET 18xxx.name/image/9/093_hime-.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hashaaa450e66e002bc57f593d9130f09f4c 1d43ce8c7f1b1414419fe19b99ff2ed7c5e8a2b1 2e5cf333503305cf623d744fa85ddd3f73cfb68ac2bef22b229bcd8ff7d9234f
GET /image/9/093_hime-.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: image/jpeg
content-length: 12744
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jpx8HV3xK8KiYnl2L61lzbyltSksYP83QfQLG0lFcCw7epJPXVxBuHVaZQ%2FR%2BpCHfutozRqOvev%2FMmfdIqFLwYNRqPH4B8ce6IhRCvQmBEfiQxpyCiMPvp1jbq2b"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 04:35:15 GMT
etag: "61ac4183-31c8"
expires: Fri, 30 May 2025 21:23:21 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: MISS
cf-ray: 938a198cca31b51e-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2633&min_rtt=598&rtt_var=964&sent=373&recv=243&lost=0&retrans=0&sent_bytes=242591&recv_bytes=17976&delivery_rate=1644199&cwnd=125100&unsent_bytes=0&cid=fa0fe3acafa88f88&ts=1037&x=16"
|
|
| www.googletagmanager.com/gtm.js?id=GTM-MVMB4DG | 142.250.74.168 | 200 OK | 248 kB |
URL GET www.googletagmanager.com/gtm.js?id=GTM-MVMB4DG IP 142.250.74.168:443
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintE4:97:12:2A:2B:30:84:66:33:9D:D6:09:14:D3:8F:CE:3E:20:73:24 ValidityMon, 31 Mar 2025 08:54:37 GMT - Mon, 23 Jun 2025 08:54:36 GMT
File typeJavaScript source, ASCII text, with very long lines (2587) Size248 kB (247668 bytes) Hash7c8c434eb7967cae4e4cfaa310d0d043 0e4c66b6a78fd45dbbce4956fc390a55e0bb1bcd a447698d9408a640dc200f2e2e0fcc52353b12b186a319a2a07badb75ce3cfc9
GET /gtm.js?id=GTM-MVMB4DG HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 30 Apr 2025 21:23:23 GMT
expires: Wed, 30 Apr 2025 21:23:23 GMT
cache-control: private, max-age=900
last-modified: Wed, 30 Apr 2025 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1314:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1314:0
report-to: {"group":"ascgcycc:1314:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1314:0"}],}
server: Google Tag Manager
content-length: 86467
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| playhubconnect.com/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4 | 104.18.14.39 | 206 Partial Content | 953 kB |
URL GET playhubconnect.com/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4 IP 104.18.14.39:443
Requested byhttps://a.labadena.com/api/spots/458877?p=1 CertificateIssuerGoogle Trust Services Subjectplayhubconnect.com Fingerprint41:34:43:06:D9:8E:33:32:9D:CF:FA:1D:6C:7F:F5:A2:43:0F:50:CC ValidityFri, 21 Mar 2025 15:11:05 GMT - Thu, 19 Jun 2025 16:11:01 GMT
File typeISO Media, MP4 v2 [ISO 14496-14] Size953 kB (952885 bytes) Hash87ef915cc39e1ca0204ebda8289b4f52 bf37d056d84d92ce50d337c48e4cb6ab143cda69 a5c2f77a616c7caf3801bb24f99ee6ac1c6cc2bc85c0d79f4224779e39a16249
GET /bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4 HTTP/1.1
Host: playhubconnect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Wed, 30 Apr 2025 21:23:23 GMT
content-type: video/mp4
content-length: 952885
x-amz-id-2: HD0L/UjDOsrgKzgLcNnxtcUoUtk/2Bg3WeJ4EerewbaHdRR76LfYt6HOb5OH9O/4njtj19Rgl+A=
x-amz-request-id: 01Z1A3SEZWF3GS1G
last-modified: Thu, 20 Mar 2025 14:21:13 GMT
etag: "87ef915cc39e1ca0204ebda8289b4f52"
x-amz-server-side-encryption: AES256
cf-cache-status: HIT
age: 1800694
expires: Sat, 31 May 2025 21:23:23 GMT
cache-control: public, max-age=2678400
content-range: bytes 0-952884/952885
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 938a19954c145685-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| txxx.ahcdn.com/key=7+0gha6ZvxyNkB7zZ3vtfQ,end=1746134604,limit=3/media=hlsA/referer=none,.txxx.me,.gstatic.com/c11/videos/6615000/6615715/6615715_hq.mp4/seg-1-v1-a1.ts | 185.185.15.4 | 200 OK | 352 kB |
URL GET txxx.ahcdn.com/key=7+0gha6ZvxyNkB7zZ3vtfQ,end=1746134604,limit=3/media=hlsA/referer=none,.txxx.me,.gstatic.com/c11/videos/6615000/6615715/6615715_hq.mp4/seg-1-v1-a1.ts IP 185.185.15.4:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjecttxxx.ahcdn.com FingerprintC6:A6:EC:04:BA:2A:5E:E6:F7:AE:17:AA:7E:CC:83:4E:A0:79:16:AB ValidityWed, 02 Apr 2025 12:31:37 GMT - Tue, 01 Jul 2025 12:31:36 GMT
File typeMPEG transport stream data Size352 kB (352312 bytes) Hashf85d7aeeaa715c71f92588ab3bab5056 1d9ea4e4e05be7e057f46b732535d1f4901c4a97 5a848b77ea46905bdae8f7e1757d734033be70ba871ca5a212c19f7d17fa7e18
GET /key=7+0gha6ZvxyNkB7zZ3vtfQ,end=1746134604,limit=3/media=hlsA/referer=none,.txxx.me,.gstatic.com/c11/videos/6615000/6615715/6615715_hq.mp4/seg-1-v1-a1.ts HTTP/1.1
Host: txxx.ahcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 30 Apr 2025 21:23:24 GMT
content-type: video/mp2t
content-length: 352312
last-modified: Sat, 11 Jan 2025 22:35:39 GMT
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
etag: "6782f23b-56038"
expires: Wed, 30 Apr 2025 21:53:24 GMT
cache-control: max-age=1800
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 18xxx.name/image/4/146_go-is.jpg | 172.67.150.176 | 200 OK | 18 kB |
URL GET 18xxx.name/image/4/146_go-is.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hash0ed7940c5b1853c25f5b71c28c273844 906dabe4a05508e407f6730899ec2f4db6f587ee 30ed930bd0279737320e62217e0ba7ff785f5446ae3ae74dcaa198390c6263b9
GET /image/4/146_go-is.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: image/jpeg
content-length: 18268
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P3i5uki9fd17n47my3dm7LX5X5m%2F%2BnEwIklF0g3leDVdPHLm0UPawsbMaLSi6lbSpvS2qYoBHB8QCrf2k%2FsSyjJI3vj2rnxCTttLTTXxVAVyBU9r9WzehxwURPLc"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 03:23:13 GMT
etag: "61ac30a1-475c"
expires: Fri, 30 May 2025 21:17:22 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 359
accept-ranges: bytes
cf-ray: 938a198cba2bb51e-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3111&min_rtt=598&rtt_var=2118&sent=200&recv=235&lost=0&retrans=0&sent_bytes=49952&recv_bytes=17055&delivery_rate=790198&cwnd=24000&unsent_bytes=0&cid=fa0fe3acafa88f88&ts=796&x=16"
|
|
| 18xxx.name/image/9/558_of.jpg | 172.67.150.176 | 200 OK | 10 kB |
URL GET 18xxx.name/image/9/558_of.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hash312aa21433dfc27a5c82c78da912c90e 9cb1c40fd9e6f6166fffd685d776cbc1afe2f833 08186b8ee4254f4341118b6f33a7d8c60dbe3c715437f566e069c36fee8df3d7
GET /image/9/558_of.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: image/jpeg
content-length: 10469
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=87jE9gZKL4%2FWNErMClJe0e56nun9oUV2cvjd5zrDeEa%2BbsQcjf2E0DOW6NN7qQY1RrBHl0ueKrFEnrCJpaXyxfRDZ9t5dh9GJ%2BC%2Bjqe2Ds7oAtkLGofIRGjdrdw8"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 04:49:24 GMT
etag: "61ac44d4-28e5"
expires: Fri, 30 May 2025 01:20:16 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 72185
accept-ranges: bytes
cf-ray: 938a198cca35b51e-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2916&min_rtt=598&rtt_var=1424&sent=332&recv=240&lost=0&retrans=0&sent_bytes=196844&recv_bytes=17838&delivery_rate=7770162&cwnd=125100&unsent_bytes=0&cid=fa0fe3acafa88f88&ts=822&x=16"
|
|
| 18xxx.name/image/1/710_fo--.jpg | 172.67.150.176 | 200 OK | 16 kB |
URL GET 18xxx.name/image/1/710_fo--.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hash716d0534ed1d5928f7e85004b2fe0d1d 5e3e8903c4e416751eb42c53455fb06e3bd05e64 53bd4e352b9447e1dd528418bf86909d7f2f88b8b2328f04928e819c72858326
GET /image/1/710_fo--.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: image/jpeg
content-length: 15487
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vCV9ym5UsAjgUiOsVA2%2FJG0Pmm0v6bKwKBoKdxpVlLcvhgG878Do2nziXQkttBOLl0wC5xnlI6LAJ9L8jmiUbgr3%2FbTeG9uv6c6ZN2YgatLlXQDUp%2FDBbbhVMDCG"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 03:17:08 GMT
etag: "61ac2f34-3c7f"
expires: Fri, 30 May 2025 19:10:16 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 7985
accept-ranges: bytes
cf-ray: 938a198cea38b51e-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2711&min_rtt=598&rtt_var=1479&sent=353&recv=241&lost=0&retrans=0&sent_bytes=220911&recv_bytes=17884&delivery_rate=9023249&cwnd=125100&unsent_bytes=0&cid=fa0fe3acafa88f88&ts=827&x=16"
|
|
| bullionglidingscuttle.com/check.html | 94.242.247.20 | 200 OK | 926 B |
URL GET bullionglidingscuttle.com/check.html IP 94.242.247.20:443
Requested byhttps://a.labadena.com/api/spots/458877?p=1 CertificateIssuerBuypass AS-983163327 Subject FingerprintC1:41:36:2B:0F:2D:49:78:DA:E4:70:2C:6A:68:9E:0C:A4:8A:8D:5F ValidityTue, 04 Mar 2025 00:04:45 GMT - Sat, 30 Aug 2025 21:59:00 GMT
File typeHTML document, ASCII text Hash088dba8e97eede53134c93219f7ebbae adb707654d1fe0af7d0d7a9f55660d22bd3625e4 6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff
GET /check.html HTTP/1.1
Host: bullionglidingscuttle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 30 Apr 2025 21:23:22 GMT
content-type: text/html; charset=utf-8
last-modified: Wed, 16 Apr 2025 07:53:28 GMT
vary: Accept-Encoding
etag: W/"67ff61f8-39e"
x-js-ab: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| storage.multstorage.com/log/count.html | 104.21.30.242 | 200 OK | 882 B |
URL GET storage.multstorage.com/log/count.html IP 104.21.30.242:443
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerGoogle Trust Services Subjectmultstorage.com Fingerprint06:BD:0F:48:57:1C:35:BE:41:B7:96:34:65:D2:77:57:83:82:8E:3B ValidityThu, 06 Mar 2025 05:15:49 GMT - Wed, 04 Jun 2025 06:14:13 GMT
File typeHTML document, ASCII text, with very long lines (700) Hashb728ca9cd183d1b7c3f72116b19b22a3 c1fd73f6b02cf00b8bc60b09cc99495e8494b739 8a7b1ca4bbf273b32ea865d4785a1944d1b2b133678d9b5fe7ee0406f6fd64b2
GET /log/count.html HTTP/1.1
Host: storage.multstorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:23 GMT
content-type: text/html
last-modified: Mon, 18 Sep 2023 14:39:06 GMT
vary: Accept-Encoding
x-request-id: f67a57461d00f8846ee1e5a0bc04465a
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F2mOuWjme58EpiAbmsTz063vCyEOJfCmJaSGKsNy%2Bh5b2Hsp5aqBA7TrxZ%2Bc9PnqmFb0pIQWFi570Lhmb8dmWVRdFro950NmAOwi4wpDIzPZxw%2FJM7W7J3iNQDyHBK9T52MMx8kKGam4HQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 938a19971dee56ca-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=668&min_rtt=479&rtt_var=357&sent=8&recv=10&lost=0&retrans=0&sent_bytes=3210&recv_bytes=1153&delivery_rate=7476764&cwnd=254&unsent_bytes=0&cid=1f023e0e0a6cc2de&ts=83&x=0"
X-Firefox-Spdy: h2
|
|
| txxx.me/api/videofile.php?video_id=6615715&lifetime=8640000 | 62.122.168.133 | 200 OK | 345 B |
URL GET txxx.me/api/videofile.php?video_id=6615715&lifetime=8640000 IP 62.122.168.133:443
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjecttxxx.me Fingerprint1A:7D:DE:7F:DC:D8:73:9F:A7:81:74:C3:10:0C:F5:EF:5E:AF:02:C6 ValidityThu, 03 Apr 2025 08:06:43 GMT - Wed, 02 Jul 2025 08:06:42 GMT
Hash3091d50191e36b2fce8dcce7194e9711 90b4c6cf9e03ca8a57a4b3a934b24c06fcc04f6a 9e4308861481fabef23bea76b6cefa6e8542041ee4eac7aeba705c4d66e58875
GET /api/videofile.php?video_id=6615715&lifetime=8640000 HTTP/1.1
Host: txxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/embed/6615715/?source=1053265611
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Wed, 30 Apr 2025 21:23:23 GMT
content-type: application/json
vary: Accept-Encoding
x-powered-by: PHP/7.2.34
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| js.txxx.tube/assets//jwplayer-8.21.2.4/jwplayer.core.controls.js | 45.133.44.24 | 200 OK | 313 kB |
URL GET js.txxx.tube/assets//jwplayer-8.21.2.4/jwplayer.core.controls.js IP 45.133.44.24:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectjs.txxx.tube FingerprintA5:2F:45:64:9F:C5:98:93:E5:80:A2:06:51:8D:ED:22:ED:DA:FB:A5 ValiditySun, 27 Apr 2025 02:32:00 GMT - Sat, 26 Jul 2025 02:31:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65124) Size313 kB (313173 bytes) Hashf38c018b3608d610ee1a5a75f5f470f3 03db69270ccd1f6d3781e7a8bfd51a564ac87d39 7ae879587e6ae78c8408acbfc08952b84e0a1a2b7e35542aa718e0c0623e95b5
GET /assets//jwplayer-8.21.2.4/jwplayer.core.controls.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:23 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Mon, 14 Apr 2025 14:00:25 GMT
vary: Accept-Encoding
etag: W/"67fd14f9-4c755"
expires: Wed, 16 Apr 2025 10:23:37 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| 18xxx.name/stylesmain/icons/icons.ttf?a4saub | 172.67.150.176 | 200 OK | 1.5 kB |
URL GET 18xxx.name/stylesmain/icons/icons.ttf?a4saub IP 172.67.150.176:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeTrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icons Hashe1c2f1063187cbe99bc2ed118e0de439 81ef2846eb4aa54ada569adbb32daf91e96a8f0e 60ee4b5c61cd28db352be271f093dab983dfb01317cdacc31cf997a42c3efdc3
GET /stylesmain/icons/icons.ttf?a4saub HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: application/octet-stream
content-length: 1476
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F4yph0T2FsysQk%2BDCYVG%2FN1ZlHHj6T1lJDpnH6s0XIZpnOawJr4ECFUskl0dn3rPEKCNfxNtPzgHwDmlasF1PBvPS9E003BWt7v%2FIfaNU2MhHiT%2BOKUlbI3l5e7C"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Nov 2022 13:51:15 GMT
etag: "636bb053-5c4"
expires: Fri, 30 May 2025 01:05:26 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 73075
cf-cache-status: HIT
cf-ray: 938a198bfa1fb51e-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2652&min_rtt=598&rtt_var=1248&sent=152&recv=219&lost=0&retrans=0&sent_bytes=11363&recv_bytes=12508&delivery_rate=2365&cwnd=12000&unsent_bytes=0&cid=fa0fe3acafa88f88&ts=671&x=16"
|
|
| 18xxx.name/image/1/818_for-baby-.jpg | 172.67.150.176 | 200 OK | 14 kB |
URL GET 18xxx.name/image/1/818_for-baby-.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 320x240, components 3 Hash979d4a3b9b3e3a1a1655317d7b9264be 02c5af3c0faf0a1e31da0861305ff592f8e6abd6 23bc66f1d0d30128147ba181489e31b9fe518a6fdb690936bf6f396704028bfb
GET /image/1/818_for-baby-.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: image/jpeg
content-length: 13795
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mjjJxGlQmzw2C1ob6iZeCpBTuBIvStg92XGkr48I1yicwfKlFayTTqUlu6%2FEjzxtpouSyHK2yr30GnKUI0nuZK4aY4NmSYUvWQJ6Fg5kdFuI9LBYMfUReZ%2BPtQ8G"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 03:17:22 GMT
etag: "61ac2f42-35e3"
expires: Fri, 30 May 2025 17:59:08 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 12253
accept-ranges: bytes
cf-ray: 938a198cca36b51e-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2923&min_rtt=598&rtt_var=1965&sent=243&recv=236&lost=0&retrans=0&sent_bytes=97952&recv_bytes=17100&delivery_rate=8676529&cwnd=48000&unsent_bytes=0&cid=fa0fe3acafa88f88&ts=808&x=16"
|
|
| txxx.me/api/json/video/86400/6000000/6615000/6615715.json | 62.122.168.133 | 200 OK | 2.8 kB |
URL GET txxx.me/api/json/video/86400/6000000/6615000/6615715.json IP 62.122.168.133:443
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjecttxxx.me Fingerprint1A:7D:DE:7F:DC:D8:73:9F:A7:81:74:C3:10:0C:F5:EF:5E:AF:02:C6 ValidityThu, 03 Apr 2025 08:06:43 GMT - Wed, 02 Jul 2025 08:06:42 GMT
Hash0b55df323aeeb6302fe39ee7cf1f76b3 b44f8d2d10ba8d0354c7d6037542b82791a08bb8 09bad7f06eb6606d99954456ce742c9d790d3350bf1f7a0e3fde4c666282a4b5
GET /api/json/video/86400/6000000/6615000/6615715.json HTTP/1.1
Host: txxx.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/embed/6615715/?source=1053265611
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Wed, 30 Apr 2025 21:23:22 GMT
content-type: application/json
last-modified: Wed, 30 Apr 2025 01:22:52 GMT
vary: Accept-Encoding
etag: W/"68117b6c-af1"
expires: Wed, 30 Apr 2025 21:28:22 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| vast.yomeno.xyz/prepare | 91.216.220.30 | 204 No Content | 0 B |
IP 91.216.220.30:443
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectvast.yomeno.xyz Fingerprint79:E3:D3:8E:1A:DB:0F:2E:A0:D5:0E:32:44:CE:2B:DC:01:AA:24:95 ValiditySat, 05 Apr 2025 03:24:21 GMT - Fri, 04 Jul 2025 03:24:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://txxx.me/
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Wed, 30 Apr 2025 21:23:23 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://txxx.me
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
content-type: text/plain; charset=utf-8
content-length: 0
X-Firefox-Spdy: h2
|
|
| a.labadena.com/api/pageview/459138?host=18xxx.name&url=https%3A%2F%2F18xxx.name%2Far%2Ftubes%2Fb5b41fac0361d157d9673ecb926af5ae%2Findex.php&sid=3a3262d1-27f0-4614-9e26-e41e2e9b0ce1&i=true | 37.27.230.125 | 200 OK | 0 B |
URL POST a.labadena.com/api/pageview/459138?host=18xxx.name&url=https%3A%2F%2F18xxx.name%2Far%2Ftubes%2Fb5b41fac0361d157d9673ecb926af5ae%2Findex.php&sid=3a3262d1-27f0-4614-9e26-e41e2e9b0ce1&i=true IP 37.27.230.125:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerLet's Encrypt Subjecta.labadena.com FingerprintCF:36:42:C5:51:DD:C3:E4:4F:13:3E:E4:67:E5:19:35:02:80:D5:3A ValidityMon, 17 Mar 2025 23:28:38 GMT - Sun, 15 Jun 2025 23:28:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/pageview/459138?host=18xxx.name&url=https%3A%2F%2F18xxx.name%2Far%2Ftubes%2Fb5b41fac0361d157d9673ecb926af5ae%2Findex.php&sid=3a3262d1-27f0-4614-9e26-e41e2e9b0ce1&i=true HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://18xxx.name
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Cookie: nauid=nqXQIqGwTgQ3t3VurIXU; asgfp=8d55004929240135af7d0f6cb8e03fde
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Wed, 30 Apr 2025 21:23:23 GMT
content-length: 0
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
|
|
| txxx.ahcdn.com/key=x-7xdTa8uH0h2TRZiRAvLg,end=1746134604,limit=3/media=hlsA/referer=none,.txxx.me,.gstatic.com/multi=960x720:6615715_hq/c11/videos/6615000/6615715/_TPL_.mp4 | 185.185.15.4 | 200 OK | 250 B |
URL GET txxx.ahcdn.com/key=x-7xdTa8uH0h2TRZiRAvLg,end=1746134604,limit=3/media=hlsA/referer=none,.txxx.me,.gstatic.com/multi=960x720:6615715_hq/c11/videos/6615000/6615715/_TPL_.mp4 IP 185.185.15.4:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjecttxxx.ahcdn.com FingerprintC6:A6:EC:04:BA:2A:5E:E6:F7:AE:17:AA:7E:CC:83:4E:A0:79:16:AB ValidityWed, 02 Apr 2025 12:31:37 GMT - Tue, 01 Jul 2025 12:31:36 GMT
Hash2e719041fb4248d5c167423aa48a628f ff1e295bacbb901438d795c35b083665a5fad141 d1edb7ac8fd0ccd499781f50551988e9507866acbc2ee29091b154d1cb537554
GET /key=x-7xdTa8uH0h2TRZiRAvLg,end=1746134604,limit=3/media=hlsA/referer=none,.txxx.me,.gstatic.com/multi=960x720:6615715_hq/c11/videos/6615000/6615715/_TPL_.mp4 HTTP/1.1
Host: txxx.ahcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://txxx.me
Referer: https://txxx.me/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 30 Apr 2025 21:23:24 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
cache-control: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| a.labadena.com/api/spots/458877?p=1 | 37.27.230.125 | 200 OK | 11 kB |
URL GET a.labadena.com/api/spots/458877?p=1 IP 37.27.230.125:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerLet's Encrypt Subjecta.labadena.com FingerprintCF:36:42:C5:51:DD:C3:E4:4F:13:3E:E4:67:E5:19:35:02:80:D5:3A ValidityMon, 17 Mar 2025 23:28:38 GMT - Sun, 15 Jun 2025 23:28:37 GMT
File typeHTML document, ASCII text, with very long lines (4733) Hash6224687a5ef2b3c5619600c8b4264476 a3e9d69ba2bf963e42e12d2a86b30e856f8996b1 d63d8ecaffbed307a14ab82d4a621a9b6d52f766fe651706447f1725d1de5436
GET /api/spots/458877?p=1 HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: nauid=vn8F49aZfX21X1nUJC1a; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| videotxxx.com/embed/6615715/?source=1053265611 | 62.122.168.133 | 302 Found | 70 kB |
URL GET videotxxx.com/embed/6615715/?source=1053265611 IP 62.122.168.133:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerLet's Encrypt Subjectvideotxxx.com FingerprintC6:3C:A8:C2:F9:20:A8:C5:13:EE:B1:AB:87:B1:6E:08:2E:5C:74:D0 ValiditySun, 27 Apr 2025 03:02:21 GMT - Sat, 26 Jul 2025 03:02:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/6615715/?source=1053265611 HTTP/1.1
Host: videotxxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.24.0
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: text/html
content-length: 145
location: https://txxx.me/embed/6615715/?source=1053265611
access-control-allow-origin: *
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: ACCEPT, ORIGIN, X-REQUESTED-WITH, CONTENT-TYPE, AUTHORIZATION, X-FANCYBOX
access-control-allow-credentials: true
X-Firefox-Spdy: h2
|
|
| 18xxx.name/image/0/524_mannered-cum-.jpg | 172.67.150.176 | 200 OK | 14 kB |
URL GET 18xxx.name/image/0/524_mannered-cum-.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hash470cf12bd3c6a2ff3aba246abc9b772b 2ec1a11c0dbd6bb0dd31750fc95152082ccab0e3 f3608c8467026869e9d9ed177662284009616729e4d763e894e436e383d504e5
GET /image/0/524_mannered-cum-.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: image/jpeg
content-length: 14174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ESie9GnLCAElPxdHhKbzNKFv9%2BqiA9aL3tcOexjpFyHTASHoZ%2BqfIfNR0b8oOmiZ9iLhoNDVbev41hIp3MIFi9JlXkbtmvD5C7dz1FZ%2F614O7DMbQtvztJNZzV6c"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 03:15:19 GMT
etag: "61ac2ec7-375e"
expires: Fri, 30 May 2025 21:17:21 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 360
accept-ranges: bytes
cf-ray: 938a198cba27b51e-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3319&min_rtt=598&rtt_var=2270&sent=166&recv=232&lost=0&retrans=0&sent_bytes=13900&recv_bytes=16375&delivery_rate=31198&cwnd=12000&unsent_bytes=0&cid=fa0fe3acafa88f88&ts=792&x=16"
|
|
| 18xxx.name/image/8/951_ultra-korean.jpg | 172.67.150.176 | 200 OK | 12 kB |
URL GET 18xxx.name/image/8/951_ultra-korean.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hashaf0819912945861427ddb75918d6b930 75b892b7189c13b0c03f240186dde6dcb80e3aec d1591dfc9e530df55bed0d6e7e8a8a960d0c68d545e60d38f1f2e65df80af9b4
GET /image/8/951_ultra-korean.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: image/jpeg
content-length: 11553
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q%2FRDW75DNJ%2ByPgMvPd%2BIjyXDIBiaT4iQCr4XOuto9WgvgCqhK8xfoVHmz155N%2FJBaqikzdKhrOzU5MhkkDut03WrCXkpEY494p9oReF7Q1azG46glO1gbiMKhk%2F%2F"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 04:30:56 GMT
etag: "61ac4080-2d21"
expires: Fri, 30 May 2025 07:45:02 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 49099
cf-cache-status: HIT
cf-ray: 938a198cca34b51e-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2923&min_rtt=598&rtt_var=1965&sent=243&recv=236&lost=0&retrans=0&sent_bytes=97952&recv_bytes=17100&delivery_rate=8676529&cwnd=48000&unsent_bytes=0&cid=fa0fe3acafa88f88&ts=803&x=16"
|
|
| 18xxx.name/favicon-16x16.png | 172.67.150.176 | 200 OK | 530 B |
URL GET 18xxx.name/favicon-16x16.png IP 172.67.150.176:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Hash635a63f45bb1c4b36ab4701d296d58ad a84dcf18f219d25ed159b6de138c3c8758ebc784 8cde6a33327cdde41c3a0870d07fa2fbc22861a833c796b91e6ef49a69c72234
GET /favicon-16x16.png HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: image/png
content-length: 530
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ibV85n6gfV2Pgj8YhjUeGmgJnNOqOBuIK8%2FF2nFjU2oPhxSlJJwOnOHyMIrIhKHEwAupw0poCxVxH7WePndeJdghjVUb38PgKiqXomC3owGRHrT%2F8Od41S0JPlwJ"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Nov 2022 13:51:24 GMT
etag: "636bb05c-212"
expires: Fri, 30 May 2025 01:05:27 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 73074
accept-ranges: bytes
cf-ray: 938a198e6a44b51e-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2493&min_rtt=598&rtt_var=1004&sent=387&recv=246&lost=0&retrans=0&sent_bytes=256353&recv_bytes=18654&delivery_rate=5132753&cwnd=125100&unsent_bytes=0&cid=fa0fe3acafa88f88&ts=1062&x=16"
|
|
| js.txxx.tube/upd/20250414.140050.236950/static/css/chunk-common.css | 45.133.44.24 | 200 OK | 237 kB |
URL GET js.txxx.tube/upd/20250414.140050.236950/static/css/chunk-common.css IP 45.133.44.24:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectjs.txxx.tube FingerprintA5:2F:45:64:9F:C5:98:93:E5:80:A2:06:51:8D:ED:22:ED:DA:FB:A5 ValiditySun, 27 Apr 2025 02:32:00 GMT - Sat, 26 Jul 2025 02:31:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size237 kB (236950 bytes) Hash6a3adb5e425a41ede269b57e0dc65e2e cc911cbbd2cfab1d56362fbdf149f48e359ac1b1 1ca5ff9cedad080c3ebc57fe81b937136f3bff281af63874e17fd4bc72efbbc4
GET /upd/20250414.140050.236950/static/css/chunk-common.css HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:22 GMT
content-type: text/css
server: nginx/1.24.0
last-modified: Mon, 14 Apr 2025 14:00:50 GMT
vary: Accept-Encoding
etag: W/"67fd1512-39d96"
expires: Wed, 16 Apr 2025 09:25:22 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| js.txxx.tube/flytrain/exort7.10.13.415a150d8ca331c798f49c864e02c543.js | 45.133.44.24 | 200 OK | 163 kB |
URL GET js.txxx.tube/flytrain/exort7.10.13.415a150d8ca331c798f49c864e02c543.js IP 45.133.44.24:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectjs.txxx.tube FingerprintA5:2F:45:64:9F:C5:98:93:E5:80:A2:06:51:8D:ED:22:ED:DA:FB:A5 ValiditySun, 27 Apr 2025 02:32:00 GMT - Sat, 26 Jul 2025 02:31:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators Size163 kB (163086 bytes) Hash681c0c3220aeebe58c500d60e3e3032a ecf476171b00e60dd9a225ebd9c716b93c1d8090 a0c172d12e8fd726c068e432fc822d6070021aa5daa4429bbd291419188944cf
GET /flytrain/exort7.10.13.415a150d8ca331c798f49c864e02c543.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:22 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Tue, 15 Apr 2025 09:22:27 GMT
vary: Accept-Encoding
etag: W/"67fe2553-27d0e"
expires: Wed, 16 Apr 2025 10:11:30 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| a.labadena.com/api/settings/459138 | 37.27.230.125 | 200 OK | 33 B |
URL GET a.labadena.com/api/settings/459138 IP 37.27.230.125:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerLet's Encrypt Subjecta.labadena.com FingerprintCF:36:42:C5:51:DD:C3:E4:4F:13:3E:E4:67:E5:19:35:02:80:D5:3A ValidityMon, 17 Mar 2025 23:28:38 GMT - Sun, 15 Jun 2025 23:28:37 GMT
Hash1be64b6d6652effba7dcf744e90def6a d9fbc7d1fa49fa4733f90a3739882d63972c2352 72d79d0ad9a70ef53c1bab65c588d44bffb1a1b5aba0eb2f9f6a886c4c3aec4f
GET /api/settings/459138 HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://18xxx.name
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| a.labadena.com/api/spots/459138?kw=amateur%2Casian%2Cbabes%2Cbigtits%2Cblowjob%2Cchinese%2Ccum%2Ccumshot%2Cdeepthroat%2Chd%2Cpussy%2Cfetish%2Cvagina%2Chomemade&i=1&url=https%3A%2F%2F18xxx.name%2Far%2Ftubes%2Fb5b41fac0361d157d9673ecb926af5ae%2Findex.php&sid=3a3262d1-27f0-4614-9e26-e41e2e9b0ce1 | 37.27.230.125 | 200 OK | 2.6 kB |
URL GET a.labadena.com/api/spots/459138?kw=amateur%2Casian%2Cbabes%2Cbigtits%2Cblowjob%2Cchinese%2Ccum%2Ccumshot%2Cdeepthroat%2Chd%2Cpussy%2Cfetish%2Cvagina%2Chomemade&i=1&url=https%3A%2F%2F18xxx.name%2Far%2Ftubes%2Fb5b41fac0361d157d9673ecb926af5ae%2Findex.php&sid=3a3262d1-27f0-4614-9e26-e41e2e9b0ce1 IP 37.27.230.125:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerLet's Encrypt Subjecta.labadena.com FingerprintCF:36:42:C5:51:DD:C3:E4:4F:13:3E:E4:67:E5:19:35:02:80:D5:3A ValidityMon, 17 Mar 2025 23:28:38 GMT - Sun, 15 Jun 2025 23:28:37 GMT
File typeASCII text, with very long lines (2050) Hashb212b69d8b5eba3fb839eb2732856af3 bcad57eeeff60630c247f60e9e6489bd488177d8 184ea2a6838615b9a833ccd930d69f684024804c1bac61ccefeb59511ef5f87e
GET /api/spots/459138?kw=amateur%2Casian%2Cbabes%2Cbigtits%2Cblowjob%2Cchinese%2Ccum%2Ccumshot%2Cdeepthroat%2Chd%2Cpussy%2Cfetish%2Cvagina%2Chomemade&i=1&url=https%3A%2F%2F18xxx.name%2Far%2Ftubes%2Fb5b41fac0361d157d9673ecb926af5ae%2Findex.php&sid=3a3262d1-27f0-4614-9e26-e41e2e9b0ce1 HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
set-cookie: nauid=nqXQIqGwTgQ3t3VurIXU; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.35 | 200 OK | 15 kB |
URL GET fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.35:443
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:27:9C:C9:95:FF:8F:83:34:D0:B1:42:CB:B7:63:C0:8E:6F:3E:F1 ValidityMon, 31 Mar 2025 08:55:41 GMT - Mon, 23 Jun 2025 08:55:40 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Apr 2025 09:23:25 GMT
expires: Fri, 24 Apr 2026 09:23:25 GMT
cache-control: public, max-age=31536000
age: 561597
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| js.txxx.tube/xtulat2a55/mybfa78eov.js | 45.133.44.24 | 200 OK | 19 kB |
URL GET js.txxx.tube/xtulat2a55/mybfa78eov.js IP 45.133.44.24:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectjs.txxx.tube FingerprintA5:2F:45:64:9F:C5:98:93:E5:80:A2:06:51:8D:ED:22:ED:DA:FB:A5 ValiditySun, 27 Apr 2025 02:32:00 GMT - Sat, 26 Jul 2025 02:31:59 GMT
File typeJavaScript source, ASCII text, with very long lines (18556), with no line terminators Hash784e93f1d293d9c45f13af7c853b52f6 5e059266ae2b3e093e7b6ce383f125a9291049e1 9b8c5b0a97475f17d09b4bcc9e4d336aee93e0a1d854933556a08b1850031bc8
GET /xtulat2a55/mybfa78eov.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:23 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Wed, 30 Apr 2025 12:03:41 GMT
vary: Accept-Encoding
etag: W/"6812119d-487c"
expires: Thu, 01 May 2025 12:03:42 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| 18xxx.name/js/scripts.js | 172.67.150.176 | 200 OK | 2.6 kB |
IP 172.67.150.176:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hasha7e729247d8bacbc8a3a4b196e53a7b2 dbccfe97550cec819592408f75480b88efafaed5 254f09ea176987beb80b8452e9de5c82135b0891c4ddcf4ec0ca48488c79bfc2
GET /js/scripts.js HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: application/javascript
last-modified: Wed, 09 Nov 2022 13:50:47 GMT
etag: W/"636bb037-a2a"
expires: Thu, 29 May 2025 15:44:01 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 106760
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XASP4LwiWYggq4YdETzsQzJMY08uNOxyVa%2F2Mx9ayIgzg6waf6fop9db%2FUsswWPmQDMTIwfOv2Bw3QeLBPZXS7WNK3z65vWIXDcoXXxgVFox8krPgH%2BzAHZQDYv0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 938a1989991b56a9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4797&min_rtt=436&rtt_var=8625&sent=18&recv=17&lost=0&retrans=0&sent_bytes=13294&recv_bytes=1437&delivery_rate=7827027&cwnd=256&unsent_bytes=0&cid=95c99f05276b2a59&ts=724&x=0"
X-Firefox-Spdy: h2
|
|
| 18xxx.name/image/2/542_uma-jolie-in.jpg | 172.67.150.176 | 200 OK | 12 kB |
URL GET 18xxx.name/image/2/542_uma-jolie-in.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hash65d4249db02971e5d1218d3be1492328 bc325a2d1fa1e70e2506304a732489b80c4e6771 b3f80eeb10bc884fbeeab43ac40be39466849758d8695c5ae8c1af5d0cf808e1
GET /image/2/542_uma-jolie-in.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: image/jpeg
content-length: 12225
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yEccGEqFDrFJ%2BbbBGKqaUPqzn%2BkYv0vzYl9zkZBttiVxL2E44mvOJmqNovNwY7UhZGbTC4%2FChwWssPTaSp1gfy3%2FiOwN3wOY6%2FRWNavtUATZR8npjpXZEb8jPIDk"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 03:18:28 GMT
etag: "61ac2f84-2fc1"
expires: Thu, 29 May 2025 15:44:01 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 106760
cf-cache-status: HIT
cf-ray: 938a198cba28b51e-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3319&min_rtt=598&rtt_var=2270&sent=178&recv=233&lost=0&retrans=0&sent_bytes=25926&recv_bytes=16690&delivery_rate=31198&cwnd=12000&unsent_bytes=0&cid=fa0fe3acafa88f88&ts=793&x=16"
|
|
| a.labadena.com/api/click/12798509436609254115?c=90 | 37.27.230.125 | 200 OK | 0 B |
URL GET a.labadena.com/api/click/12798509436609254115?c=90 IP 37.27.230.125:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://a.labadena.com/api/spots/458877?p=1 CertificateIssuerLet's Encrypt Subjecta.labadena.com FingerprintCF:36:42:C5:51:DD:C3:E4:4F:13:3E:E4:67:E5:19:35:02:80:D5:3A ValidityMon, 17 Mar 2025 23:28:38 GMT - Sun, 15 Jun 2025 23:28:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/12798509436609254115?c=90 HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/api/spots/458877?p=1
Cookie: nauid=nqXQIqGwTgQ3t3VurIXU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 30 Apr 2025 21:23:21 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
|
|
| js.txxx.tube/upd/20250414.140008.13998/assets/previewl1b.20190620.1.js | 45.133.44.24 | 200 OK | 14 kB |
URL GET js.txxx.tube/upd/20250414.140008.13998/assets/previewl1b.20190620.1.js IP 45.133.44.24:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectjs.txxx.tube FingerprintA5:2F:45:64:9F:C5:98:93:E5:80:A2:06:51:8D:ED:22:ED:DA:FB:A5 ValiditySun, 27 Apr 2025 02:32:00 GMT - Sat, 26 Jul 2025 02:31:59 GMT
File typeJavaScript source, ASCII text, with very long lines (2132) Hash016250689f92c50834dd9fdd69aea4bd 04fb454df0b572299ff24696138a3002b0eade94 d2cd90ddc320247e99ba4950e09a2e2dac61318f93abe8d02fdd95c6ef00f62a
GET /upd/20250414.140008.13998/assets/previewl1b.20190620.1.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:22 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Mon, 14 Apr 2025 14:00:08 GMT
vary: Accept-Encoding
etag: W/"67fd14e8-36ae"
expires: Wed, 16 Apr 2025 09:25:22 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| citadelpathstatue.com/check.html | 94.242.247.27 | 200 OK | 926 B |
URL GET citadelpathstatue.com/check.html IP 94.242.247.27:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerBuypass AS-983163327 Subject Fingerprint06:E6:2D:49:92:9F:EC:9D:12:04:3B:68:EB:B2:30:0A:30:7B:4A:D2 ValidityMon, 03 Mar 2025 23:48:25 GMT - Sat, 30 Aug 2025 21:59:00 GMT
File typeHTML document, ASCII text Hash088dba8e97eede53134c93219f7ebbae adb707654d1fe0af7d0d7a9f55660d22bd3625e4 6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff
GET /check.html HTTP/1.1
Host: citadelpathstatue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 30 Apr 2025 21:23:22 GMT
content-type: text/html; charset=utf-8
last-modified: Wed, 16 Apr 2025 07:53:28 GMT
vary: Accept-Encoding
etag: W/"67ff61f8-39e"
x-js-ab: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fp.metricswpsh.com/fp?tag_id=755 | 157.90.84.242 | 204 No Content | 0 B |
URL OPTIONS fp.metricswpsh.com/fp?tag_id=755 IP 157.90.84.242:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectnotification.tubecup.net Fingerprint6A:AF:05:21:7E:87:22:9C:BB:20:DB:34:F6:0A:88:06:79:E3:A0:78 ValidityThu, 17 Apr 2025 02:58:33 GMT - Wed, 16 Jul 2025 02:58:32 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=755 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://txxx.me/
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Wed, 30 Apr 2025 21:23:23 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://txxx.me
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
|
|
| vast.vstserv.com/vast | 91.216.220.24 | 200 OK | 4.4 kB |
IP 91.216.220.24:443
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectvast.vstserv.com FingerprintFD:8B:7A:74:F1:3F:3B:13:45:84:58:8B:7C:22:94:1F:33:20:21:78 ValidityThu, 17 Apr 2025 03:15:51 GMT - Wed, 16 Jul 2025 03:15:50 GMT
Hash6af5131cf13111de32cd7594f67bd491 41aef04fb166883f3589298bd969c183da3647a9 91616e26812bbb780716ccaffe382901edfa98bd6df46b73f3324a99ef699f8c
POST /vast HTTP/1.1
Host: vast.vstserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1360
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 30 Apr 2025 21:23:24 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: Accept-Encoding, *
access-control-allow-credentials: true
access-control-allow-origin: https://txxx.me
access-control-expose-headers: Content-Length,Content-Range
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.tapioni.com/adgpt.js | 104.22.38.71 | 200 OK | 1.3 kB |
IP 104.22.38.71:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subjectcdn.tapioni.com Fingerprint2F:19:09:F1:95:75:EB:3B:D1:F5:B5:EE:E7:26:67:59:AE:9D:D6:4D ValiditySun, 23 Mar 2025 20:01:06 GMT - Sat, 21 Jun 2025 21:01:04 GMT
File typeASCII text, with very long lines (1306), with no line terminators Hash6eead5ad059cc0cb4ebd99585822dc05 d5e7d6fadf5a21e84a279449357056cfe0986240 632355ca06bc020fc46cecbdcc35cd0e242cd05ab3790a0813d170d17cf8f70c
GET /adgpt.js HTTP/1.1
Host: cdn.tapioni.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: application/javascript
content-length: 642
last-modified: Thu, 10 Apr 2025 14:35:30 GMT
vary: Accept-Encoding
etag: "67f7d732-282"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 216551
accept-ranges: bytes
server: cloudflare
cf-ray: 938a198b8b7212a5-CPH
X-Firefox-Spdy: h2
|
|
| 18xxx.name/image/14/075_prop.jpg | 172.67.150.176 | 200 OK | 15 kB |
URL GET 18xxx.name/image/14/075_prop.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hashcebb35d10496aa5165e2c120a659a58d a7d9a7127c052aae19291accf591d24080e6a25a 2c546f70b417573a66d51672c0dd28a96a5d40673838c7739e3380cd7941d584
GET /image/14/075_prop.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: image/jpeg
content-length: 14927
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b5BcUNKuO0aguzis%2FBQnJbVKr8KCQ1qV%2F2Wp7fVtyl2wkDfGhSlWv2R1OaXaSpE%2FQxRiw5sA0eNs9dCEpP935iyluLiLIT2DV9e%2ByCzbxY5dMTrUeKkCAzlnT2Fy"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 16 Dec 2021 06:20:40 GMT
etag: "61badab8-3a4f"
expires: Fri, 30 May 2025 07:45:02 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 49099
cf-cache-status: HIT
cf-ray: 938a198cca32b51e-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2923&min_rtt=598&rtt_var=1965&sent=243&recv=236&lost=0&retrans=0&sent_bytes=97952&recv_bytes=17100&delivery_rate=8676529&cwnd=48000&unsent_bytes=0&cid=fa0fe3acafa88f88&ts=803&x=16"
|
|
| js.txxx.tube/upd/20250414.140050.406265/static/js/chunk-vendors.js | 45.133.44.24 | 200 OK | 406 kB |
URL GET js.txxx.tube/upd/20250414.140050.406265/static/js/chunk-vendors.js IP 45.133.44.24:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectjs.txxx.tube FingerprintA5:2F:45:64:9F:C5:98:93:E5:80:A2:06:51:8D:ED:22:ED:DA:FB:A5 ValiditySun, 27 Apr 2025 02:32:00 GMT - Sat, 26 Jul 2025 02:31:59 GMT
File typeJavaScript source, ASCII text, with very long lines (24689) Size406 kB (406265 bytes) Hash9fd3ee966d45f23e4d790bde73f0b9f5 7ed62c7e0c63b90423276776531ed89141c6f16c b4b7fcf0e5ceb0505baba1905acc93f73c3a6b2c5491ae703a874690e089cda0
GET /upd/20250414.140050.406265/static/js/chunk-vendors.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:22 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Mon, 14 Apr 2025 14:00:50 GMT
vary: Accept-Encoding
etag: W/"67fd1512-632f9"
expires: Wed, 16 Apr 2025 09:25:22 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| bullionglidingscuttle.com/jserror?type=banner&abvar=0&build=1.0.539&zoneid=2005586&e=Error&m=BCLC&aa=0&trid=&url=https%3A%2F%2Fa.labadena.com%2Fapi%2Fspots%2F458877%3Fp%3D1 | 94.242.247.20 | 200 OK | 0 B |
URL GET bullionglidingscuttle.com/jserror?type=banner&abvar=0&build=1.0.539&zoneid=2005586&e=Error&m=BCLC&aa=0&trid=&url=https%3A%2F%2Fa.labadena.com%2Fapi%2Fspots%2F458877%3Fp%3D1 IP 94.242.247.20:443
Requested byhttps://a.labadena.com/api/spots/458877?p=1 CertificateIssuerBuypass AS-983163327 Subject FingerprintC1:41:36:2B:0F:2D:49:78:DA:E4:70:2C:6A:68:9E:0C:A4:8A:8D:5F ValidityTue, 04 Mar 2025 00:04:45 GMT - Sat, 30 Aug 2025 21:59:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jserror?type=banner&abvar=0&build=1.0.539&zoneid=2005586&e=Error&m=BCLC&aa=0&trid=&url=https%3A%2F%2Fa.labadena.com%2Fapi%2Fspots%2F458877%3Fp%3D1 HTTP/1.1
Host: bullionglidingscuttle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/
Cookie: cart=1; cart_p=2; CHCK=1; UID=2504301623a973850a63b349aa9d017433a8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 30 Apr 2025 21:23:23 GMT
content-type: application/octet-stream
content-length: 0
X-Firefox-Spdy: h2
|
|
| tn.txxx.tube/contents/videos_screenshots/6615000/6615715/preview.jpg | 45.133.44.24 | 200 OK | 50 kB |
URL GET tn.txxx.tube/contents/videos_screenshots/6615000/6615715/preview.jpg IP 45.133.44.24:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjecttn.txxx.tube FingerprintF7:15:D0:97:8A:E9:68:F8:77:0F:B4:03:F5:66:AE:C3:AA:73:0F:4C ValidityWed, 19 Mar 2025 02:33:52 GMT - Tue, 17 Jun 2025 02:33:51 GMT
File typeJPEG image data, baseline, precision 8, 960x720, components 3 Hash79c9dd40b4174a7e1378807f8c2e2c6e 053cf988ea6d7483ea0ca2286e42b2c345a0dece 314f60fc58f3808c1e026a81533c2a233e3025274b55e0261fb4dcb5f4eef238
GET /contents/videos_screenshots/6615000/6615715/preview.jpg HTTP/1.1
Host: tn.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:23 GMT
content-type: image/jpeg
content-length: 50505
server: nginx/1.21.2
last-modified: Sun, 02 Sep 2018 09:54:47 GMT
etag: "5b8bb367-c549"
cache-control: max-age=7776000
expires: Sat, 27 Jul 2024 16:41:32 GMT
x-cdn-host-id: ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| txxx.ahcdn.com/key=7+0gha6ZvxyNkB7zZ3vtfQ,end=1746134604,limit=3/media=hlsA/referer=none,.txxx.me,.gstatic.com/c11/videos/6615000/6615715/6615715_hq.mp4/seg-2-v1-a1.ts | 185.185.15.4 | 200 OK | 650 kB |
URL GET txxx.ahcdn.com/key=7+0gha6ZvxyNkB7zZ3vtfQ,end=1746134604,limit=3/media=hlsA/referer=none,.txxx.me,.gstatic.com/c11/videos/6615000/6615715/6615715_hq.mp4/seg-2-v1-a1.ts IP 185.185.15.4:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjecttxxx.ahcdn.com FingerprintC6:A6:EC:04:BA:2A:5E:E6:F7:AE:17:AA:7E:CC:83:4E:A0:79:16:AB ValidityWed, 02 Apr 2025 12:31:37 GMT - Tue, 01 Jul 2025 12:31:36 GMT
File typeMPEG transport stream data Size650 kB (650104 bytes) Hashc0aefdb38a06f9c19e850b74cde1f4b7 b06dbfc102702109af96963c74c16ab3dc0f59e5 3ebeb2b161e5151df1a697285b40d16df4101347d65f5ee9d342835f509ac8da
GET /key=7+0gha6ZvxyNkB7zZ3vtfQ,end=1746134604,limit=3/media=hlsA/referer=none,.txxx.me,.gstatic.com/c11/videos/6615000/6615715/6615715_hq.mp4/seg-2-v1-a1.ts HTTP/1.1
Host: txxx.ahcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://txxx.me
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 30 Apr 2025 21:23:24 GMT
content-type: video/mp2t
content-length: 650104
last-modified: Sat, 11 Jan 2025 22:35:39 GMT
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
etag: "6782f23b-9eb78"
expires: Wed, 30 Apr 2025 21:53:24 GMT
cache-control: max-age=1800
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| getscriptjs.com/p.js | 172.67.154.57 | 200 OK | 95 kB |
IP 172.67.154.57:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subjectgetscriptjs.com Fingerprint67:EC:B5:65:F7:5D:A6:7D:52:D1:FE:33:8C:A4:0E:A2:11:E4:61:4B ValidityTue, 08 Apr 2025 17:11:39 GMT - Mon, 07 Jul 2025 18:11:35 GMT
File typeJavaScript source, ASCII text, with very long lines (61722) Hash70594c024b1bea4a58cbade2bde8d413 ca3ab84f7cd9b14170a046fcacf3ab5fb39a1ef5 b42ad58ccfb93d5553717e9fb7a8c08a825a91986218279a1b304a07ecb3b738
GET /p.js HTTP/1.1
Host: getscriptjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"58075d3b999fca6df05927b849ab00ad"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GYX1UebZpEjTDJpPFFgFqSeADsj2WwigSLuo1jJs5s6N96dOYI2Slma%2B0hJxBVx2JNRs0M9VXQMZbU8oRmgR8NsNxF9wkISVHVPNrQUEwUNZbywbvQkHXz1%2BCWZurHMQXMQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 2859
server: cloudflare
cf-ray: 938a198a0ed55690-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=538&min_rtt=467&rtt_var=184&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3266&recv_bytes=1186&delivery_rate=7215946&cwnd=253&unsent_bytes=0&cid=97ef269488c71831&ts=44&x=0"
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/postscribe/2.0.8/postscribe.min.js | 104.17.24.14 | 200 OK | 18 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/postscribe/2.0.8/postscribe.min.js IP 104.17.24.14:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeJavaScript source, ASCII text, with very long lines (17660) Hash12dd498bf90c536803c2aad708b66c2b 5f9363d39a405d1c94328cf2303ff4a05c0ad163 c4e20f53f5ef0ed44b783437aa3f4638a9a56cc4aa29ae83ed9212eb2807052a
GET /ajax/libs/postscribe/2.0.8/postscribe.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: application/javascript; charset=utf-8
content-length: 5117
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03faa-45f4"
last-modified: Mon, 04 May 2020 16:15:38 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 109442
expires: Mon, 20 Apr 2026 21:23:21 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2fIrpRc52Uvn2mKeeeWpL6Hk%2FGpu1D2hN3bwXqtqjjMOid735ONWJ55JA1QI7y8O5%2FJjN95BZj7CZ2GU6XEkTaEr2sY4DO5brDfvYbsxEJorO5FHtglSYemvVM0DFSr%2FtOjI3T20"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 938a198ded101c06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| citadelpathstatue.com/bultykh/ipp24/7/bazinga/2005665 | 94.242.247.27 | 200 OK | 245 kB |
URL GET citadelpathstatue.com/bultykh/ipp24/7/bazinga/2005665 IP 94.242.247.27:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerBuypass AS-983163327 Subject Fingerprint06:E6:2D:49:92:9F:EC:9D:12:04:3B:68:EB:B2:30:0A:30:7B:4A:D2 ValidityMon, 03 Mar 2025 23:48:25 GMT - Sat, 30 Aug 2025 21:59:00 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size245 kB (245320 bytes) Hash19e09371613a3490f208bd11a4db5132 e677c12a1edcb6f508e2a08048c67687b21f3ff8 f3fae249fa8f4abddadb1edcfeda755b2b10861d50d620a325cee8e1ecc30b97
GET /bultykh/ipp24/7/bazinga/2005665 HTTP/1.1
Host: citadelpathstatue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 30 Apr 2025 21:23:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 28 Apr 2025 08:42:15 GMT
vary: Accept-Encoding
etag: W/"680f3f67-3bef8"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| js.txxx.tube/upd/20250414.140025.0/static/js/chunk-1d2b69f6.js | 45.133.44.24 | 200 OK | 64 kB |
URL GET js.txxx.tube/upd/20250414.140025.0/static/js/chunk-1d2b69f6.js IP 45.133.44.24:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectjs.txxx.tube FingerprintA5:2F:45:64:9F:C5:98:93:E5:80:A2:06:51:8D:ED:22:ED:DA:FB:A5 ValiditySun, 27 Apr 2025 02:32:00 GMT - Sat, 26 Jul 2025 02:31:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (62595) Hash989b457ee84c2af29417892bf509470b 6718f8b2257bc125c1684ab795e6904f0695ce37 faa19c2ca979cedae101050b0a624819dd74a2932de0b480c7481f16d2271cbf
GET /upd/20250414.140025.0/static/js/chunk-1d2b69f6.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:23 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Mon, 14 Apr 2025 14:00:50 GMT
vary: Accept-Encoding
etag: W/"67fd1512-fb09"
expires: Wed, 16 Apr 2025 09:22:23 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| js.txxx.tube/assets//jwplayer-8.21.2.4/provider.hlsjs.js | 45.133.44.24 | 200 OK | 419 kB |
URL GET js.txxx.tube/assets//jwplayer-8.21.2.4/provider.hlsjs.js IP 45.133.44.24:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectjs.txxx.tube FingerprintA5:2F:45:64:9F:C5:98:93:E5:80:A2:06:51:8D:ED:22:ED:DA:FB:A5 ValiditySun, 27 Apr 2025 02:32:00 GMT - Sat, 26 Jul 2025 02:31:59 GMT
File typeJavaScript source, ASCII text, with very long lines (44093) Size419 kB (419200 bytes) Hasha7793a89baf4a6036503dcb68f3b32fb 6415b4081413c9723f335f1c841aef27520637ed 5638c7c339f2a1b2fd029d4cf5ef12d7ffa1afb5b83a227ff994b144b269b9c8
GET /assets//jwplayer-8.21.2.4/provider.hlsjs.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:23 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Mon, 29 Jul 2024 14:37:31 GMT
vary: Accept-Encoding
etag: W/"66a7a92b-66580"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-cdn-host-id: ah1742,ds9876,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| 18xxx.name/image/9/092_a-s-boned.jpg | 172.67.150.176 | 200 OK | 12 kB |
URL GET 18xxx.name/image/9/092_a-s-boned.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hashce0eb11f988038197c51200e06b41940 3b18895e61b6c5ab019a6ed42ea5fce7f4a37c80 e0250f1b1d8de21cfcdc2c7b61f8f56fdef98c5dff1442b4bfa9f7175eff8f60
GET /image/9/092_a-s-boned.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ar/tubes/b5b41fac0361d157d9673ecb926af5ae/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 30 Apr 2025 21:23:21 GMT
content-type: image/jpeg
content-length: 11727
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ofurKYsiGOdZs6XsKJpzmM6u6FXk6WdRwYxlmck%2FdD3qhkeP7jXhnic8yPz%2F8cyFmVoWo61%2FnoX8VMMW2eUcr0bM09PQEksxk8mI5ceR22rPBAO3Oc9Op%2F7W7S5L"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 04:35:14 GMT
etag: "61ac4182-2dcf"
expires: Fri, 30 May 2025 01:20:16 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 72185
accept-ranges: bytes
cf-ray: 938a198cea39b51e-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2916&min_rtt=598&rtt_var=1424&sent=332&recv=240&lost=0&retrans=0&sent_bytes=196844&recv_bytes=17838&delivery_rate=7770162&cwnd=125100&unsent_bytes=0&cid=fa0fe3acafa88f88&ts=822&x=16"
|
|
| js.txxx.tube/assets//jwplayer-8.21.2.4/jwplayer.js | 45.133.44.24 | 200 OK | 112 kB |
URL GET js.txxx.tube/assets//jwplayer-8.21.2.4/jwplayer.js IP 45.133.44.24:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://txxx.me/embed/6615715/?source=1053265611 CertificateIssuerLet's Encrypt Subjectjs.txxx.tube FingerprintA5:2F:45:64:9F:C5:98:93:E5:80:A2:06:51:8D:ED:22:ED:DA:FB:A5 ValiditySun, 27 Apr 2025 02:32:00 GMT - Sat, 26 Jul 2025 02:31:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size112 kB (111911 bytes) Hashfa44c53a82bce33aa202293dca76f432 369aec665bff0c10f2cd9bc4dffb63ea0fefd334 3c49209cb05af93dca5189dbf11ebe083adb1e5713e0330ddcf5a22f1ee522f8
GET /assets//jwplayer-8.21.2.4/jwplayer.js HTTP/1.1
Host: js.txxx.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://txxx.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 30 Apr 2025 21:23:23 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.24.0
last-modified: Mon, 14 Apr 2025 14:00:25 GMT
vary: Accept-Encoding
etag: W/"67fd14f9-1b527"
expires: Wed, 16 Apr 2025 20:33:52 GMT
cache-control: max-age=86400
content-encoding: gzip
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|