| ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js |  142.250.74.106 | 200 OK | 34 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js IP142.250.74.106:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50 ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT
File typeJavaScript source, ASCII text, with very long lines (32038) Hashf03e5a3bf534f4a738bc350631fd05bd 37b1db88b57438f1072a8ebc7559c909c9d3a682 aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947
GET /ajax/libs/jquery/1.11.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33507
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 04:18:29 GMT
expires: Sat, 26 Apr 2025 04:18:29 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 69078
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-123348492-2 | 142.250.74.168 | 200 OK | 74 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=UA-123348492-2 IP142.250.74.168:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52 ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hashad0b15450b93d4c1f307552d52680844 44003b7868cd27c7885e34c2de96ebe35e4137fd acbdf0e28547a08bcf45c0296ff41cdd2d2a46af865766986e423963394aa8b0
GET /gtag/js?id=UA-123348492-2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:29:47 GMT
expires: Fri, 26 Apr 2024 23:29:47 GMT
cache-control: private, max-age=900
last-modified: Fri, 26 Apr 2024 22:05:23 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 73887
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-XJYEGHFCFQ&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 89 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-XJYEGHFCFQ&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52 ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Hash99c002c1d200f566863c8d60f27a69da 730dc82b26d6196d897397a51b691bbeba3ba77d a407d6dd5aa63e8203300406aa2c0e11988762b2e8575897cbb126eb7ae3c58c
GET /gtag/js?id=G-XJYEGHFCFQ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:29:47 GMT
expires: Fri, 26 Apr 2024 23:29:47 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 88744
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| netdna.bootstrapcdn.com/font-awesome/4.4.0/fonts/fontawesome-webfont.woff2?v=4.4.0 |  104.18.10.207 | 200 OK | 64 kB |
URL GET HTTP/3netdna.bootstrapcdn.com/font-awesome/4.4.0/fonts/fontawesome-webfont.woff2?v=4.4.0 IP104.18.10.207:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 64464, version 4.262 Hash4b5a84aaf1c9485e060c503a0ff8cadb 574ea2698c03ae9477db2ea3baf460ee32f1a7ea 3c4a1bb7ce3234407184f0d80cc4dec075e4ad616b44dcc5778e1cfb1bc24019
GET /font-awesome/4.4.0/fonts/fontawesome-webfont.woff2?v=4.4.0 HTTP/1.1
Host: netdna.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://f.aydogs.com
DNT: 1
Connection: keep-alive
Referer: https://netdna.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:47 GMT
content-type: font/woff2
content-length: 64464
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "4b5a84aaf1c9485e060c503a0ff8cadb"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 02/19/2024 11:12:32
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 756
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 30266eb9009020878b5c200ab35479f8
cdn-cache: HIT
cf-cache-status: HIT
age: 1738126
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87aa5b61be5856af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| i.dramafuntv.com/templates/3osss/css/bootstrap.min.rtl.css | 172.67.188.83 | 200 OK | 35 kB |
URL GET HTTP/3i.dramafuntv.com/templates/3osss/css/bootstrap.min.rtl.css IP172.67.188.83:443
Requested byhttps://f.aydogs.com/melody.php?post=eyJpbmZvIjp7ImhvbWUiOiJodHRwczpcL1wvaS5kcmFtYWZ1bnR2LmNvbSIsImJhY2siOiJodHRwczpcL1wvaS5kcmFtYWZ1bnR2LmNvbVwvd2F0Y2gucGhwP3ZpZD0xNWQ0ODJjZjYifSwic2VydmVycyI6eyJWaWRzcGVlZHMiOiJodHRwczpcL1wvd3d3LnZpZHNwZWVkcy5jb21cL2VtYmVkLW44ZGQzb3N3d3YweC5odG1sIiwiVXFsb2FkIjoiaHR0cHM6XC9cL3d3dy51cWxvYWQuaW9cL2VtYmVkLXVpNjNjeGkxaG5hbi5odG1sIiwiT2siOiJodHRwczpcL1wvd3d3Lm9rLnJ1XC92aWRlb2VtYmVkXC82NjM4MTMxODA4ODUzIiwiWW91ZGJveCI6Imh0dHBzOlwvXC95b3VkYm94LnNpdGVcL2VtYmVkLWtyd3E2dzZrYXV5dS5odG1sIiwiU2VnYXZpZCI6Imh0dHBzOlwvXC9zZWdhdmlkLmNvbVwvZW1iZWQta2swcGg3eGphNzFzLmh0bWwiLCJGaWxlbGlvbnMiOiJodHRwczpcL1wvZmlsZWxpb25zLmxpdmVcL3ZcL2RqNmJzN3g4bmpvcCIsIk1peGRyb3AiOiJodHRwczpcL1wvbWl4ZHJvcC5jb1wvZVwvbWQ3MzhtcjBmeDFtbjF4IiwiRmlsZW1vb24iOiJodHRwczpcL1wvZmlsZW1vb24uc3hcL2VcL2p5ZTNndW0xaTk2bCIsIlZvZSI6Imh0dHBzOlwvXC92b2Uuc3hcL2VcL3JscWpheWJrZWJwcCIsIkRvb2QiOiJodHRwczpcL1wvZG9vZC53c1wvZVwvN24xdnZlNWoydGJ3In19 CertificateIssuerGoogle Trust Services LLC Subjectdramafuntv.com Fingerprint1C:9B:EA:2E:14:38:06:7D:C3:95:38:BE:C8:C7:09:47:4D:14:D7:D6 ValidityTue, 09 Apr 2024 17:14:32 GMT - Mon, 08 Jul 2024 17:14:31 GMT
File typeASCII text, with very long lines (26153), with no line terminators Hash5c3488d9489fc4d2b0b2be5b79f64b25 038e38e21f485a2ce83c28df73e3c2d25f863028 2cd2ad752ad401367bdefc9379a5ae10d7d5b61241e60bda02bdcd25813577b9
GET /templates/3osss/css/bootstrap.min.rtl.css HTTP/1.1
Host: i.dramafuntv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f.aydogs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:47 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=34818
etag: W/"5fdc9eca-8802"
last-modified: Fri, 18 Dec 2020 12:21:30 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a440TplIZDpp%2FzTXWu650HJ%2FbAW7WBBUAeBEBRM6oR%2BP6%2BwexsMgZJKeKzHpDxYJU0K2LQaoEiqsW6lIgAl4y0PqD%2FxZOgDQ8iKIk%2FF6ro0BIZbdHh3lphot5M4bF0BPBk5Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b5f3bfcb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| a.dramafuntv.com/templates/3osss/css/echo.css | 172.67.188.83 | 301 Moved Permanently | 155 B |
URL GET HTTP/2a.dramafuntv.com/templates/3osss/css/echo.css IP172.67.188.83:443
Requested byhttps://f.aydogs.com/melody.php?post=eyJpbmZvIjp7ImhvbWUiOiJodHRwczpcL1wvaS5kcmFtYWZ1bnR2LmNvbSIsImJhY2siOiJodHRwczpcL1wvaS5kcmFtYWZ1bnR2LmNvbVwvd2F0Y2gucGhwP3ZpZD0xNWQ0ODJjZjYifSwic2VydmVycyI6eyJWaWRzcGVlZHMiOiJodHRwczpcL1wvd3d3LnZpZHNwZWVkcy5jb21cL2VtYmVkLW44ZGQzb3N3d3YweC5odG1sIiwiVXFsb2FkIjoiaHR0cHM6XC9cL3d3dy51cWxvYWQuaW9cL2VtYmVkLXVpNjNjeGkxaG5hbi5odG1sIiwiT2siOiJodHRwczpcL1wvd3d3Lm9rLnJ1XC92aWRlb2VtYmVkXC82NjM4MTMxODA4ODUzIiwiWW91ZGJveCI6Imh0dHBzOlwvXC95b3VkYm94LnNpdGVcL2VtYmVkLWtyd3E2dzZrYXV5dS5odG1sIiwiU2VnYXZpZCI6Imh0dHBzOlwvXC9zZWdhdmlkLmNvbVwvZW1iZWQta2swcGg3eGphNzFzLmh0bWwiLCJGaWxlbGlvbnMiOiJodHRwczpcL1wvZmlsZWxpb25zLmxpdmVcL3ZcL2RqNmJzN3g4bmpvcCIsIk1peGRyb3AiOiJodHRwczpcL1wvbWl4ZHJvcC5jb1wvZVwvbWQ3MzhtcjBmeDFtbjF4IiwiRmlsZW1vb24iOiJodHRwczpcL1wvZmlsZW1vb24uc3hcL2VcL2p5ZTNndW0xaTk2bCIsIlZvZSI6Imh0dHBzOlwvXC92b2Uuc3hcL2VcL3JscWpheWJrZWJwcCIsIkRvb2QiOiJodHRwczpcL1wvZG9vZC53c1wvZVwvN24xdnZlNWoydGJ3In19 CertificateIssuerGoogle Trust Services LLC Subjectdramafuntv.com Fingerprint1C:9B:EA:2E:14:38:06:7D:C3:95:38:BE:C8:C7:09:47:4D:14:D7:D6 ValidityTue, 09 Apr 2024 17:14:32 GMT - Mon, 08 Jul 2024 17:14:31 GMT
File typeHTML document, ASCII text Hash42c394b8f0152b372537ace9acc3f7bb 1219c55c4e3ea109c473aab65deb81f09a0fe0a6 6aaad3365c30c4f8d2504e569527e588d33eeae66dd7045bcfeef7413820db2a
GET /templates/3osss/css/echo.css HTTP/1.1
Host: a.dramafuntv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 26 Apr 2024 23:29:47 GMT
content-type: text/html
location: https://i.dramafuntv.com/templates/3osss/css/echo.css
cache-control: max-age=31536000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QQfj1ATI7Td%2B3B4Bm9LcWYNVadc2wECNYUSXRsKgUvGxWHa4XRsJBQ53lgfRk1jSkkvtjmDZfKmSBHQh94rixQwBmDsxyDu160CvXEH8asvVGuqdc8rX12rUEuOKIyJuaxCh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b5daeff0b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.vidspeeds.com/embed-n8dd3oswwv0x.html |  188.114.96.1 | 200 OK | 1.9 kB |
URL GET HTTP/2www.vidspeeds.com/embed-n8dd3oswwv0x.html IP188.114.96.1:443
Requested byhttps://f.aydogs.com/melody.php?post=eyJpbmZvIjp7ImhvbWUiOiJodHRwczpcL1wvaS5kcmFtYWZ1bnR2LmNvbSIsImJhY2siOiJodHRwczpcL1wvaS5kcmFtYWZ1bnR2LmNvbVwvd2F0Y2gucGhwP3ZpZD0xNWQ0ODJjZjYifSwic2VydmVycyI6eyJWaWRzcGVlZHMiOiJodHRwczpcL1wvd3d3LnZpZHNwZWVkcy5jb21cL2VtYmVkLW44ZGQzb3N3d3YweC5odG1sIiwiVXFsb2FkIjoiaHR0cHM6XC9cL3d3dy51cWxvYWQuaW9cL2VtYmVkLXVpNjNjeGkxaG5hbi5odG1sIiwiT2siOiJodHRwczpcL1wvd3d3Lm9rLnJ1XC92aWRlb2VtYmVkXC82NjM4MTMxODA4ODUzIiwiWW91ZGJveCI6Imh0dHBzOlwvXC95b3VkYm94LnNpdGVcL2VtYmVkLWtyd3E2dzZrYXV5dS5odG1sIiwiU2VnYXZpZCI6Imh0dHBzOlwvXC9zZWdhdmlkLmNvbVwvZW1iZWQta2swcGg3eGphNzFzLmh0bWwiLCJGaWxlbGlvbnMiOiJodHRwczpcL1wvZmlsZWxpb25zLmxpdmVcL3ZcL2RqNmJzN3g4bmpvcCIsIk1peGRyb3AiOiJodHRwczpcL1wvbWl4ZHJvcC5jb1wvZVwvbWQ3MzhtcjBmeDFtbjF4IiwiRmlsZW1vb24iOiJodHRwczpcL1wvZmlsZW1vb24uc3hcL2VcL2p5ZTNndW0xaTk2bCIsIlZvZSI6Imh0dHBzOlwvXC92b2Uuc3hcL2VcL3JscWpheWJrZWJwcCIsIkRvb2QiOiJodHRwczpcL1wvZG9vZC53c1wvZVwvN24xdnZlNWoydGJ3In19 CertificateIssuerGoogle Trust Services LLC Subjectvidspeeds.com FingerprintA7:BD:28:0E:94:10:78:DC:FA:C3:D0:58:DF:85:4E:B1:13:BA:FD:8D ValiditySat, 09 Mar 2024 21:18:35 GMT - Fri, 07 Jun 2024 21:18:34 GMT
File typeHTML document, ASCII text Hashe39c9c70293b2c9209c3b33792b76085 9392ebd3e44eea8edbda337b0f611e2e431c507e cac0da19e5bfbb8a9deb9140c9b9c2aab127bcb0b481f2ac69413b9ad8e23c78
GET /embed-n8dd3oswwv0x.html HTTP/1.1
Host: www.vidspeeds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:29:47 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 25 Apr 2024 23:29:47 GMT
x-frame-options: 1
set-cookie: lang=1; domain=.vidspeeds.com; path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JgmGfjbUPNB%2Fv1qSvCHZ8sxi9vMqw8tyuwvrPorzylvyAIJhQFG8TRUVaRTAIGuaqxb2%2F2Cp2mOJtgfisfbqgyPLN55FjLPLWJ1aWVMxlIFA3%2BiQQ%2FDQ88%2Fnlfga25XdVIeVPQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87aa5b625fa8b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-128078349-1 | 142.250.74.168 | 200 OK | 73 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=UA-128078349-1 IP142.250.74.168:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52 ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hashd7f406a27e0d4a1c2625a5a089bb4937 c05e1a5b0608515fe3a56289868090ecfd991691 4144910a108506d46647c6973874dba079b693c742b021fc46d6853533a8f30c
GET /gtag/js?id=UA-128078349-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:29:48 GMT
expires: Fri, 26 Apr 2024 23:29:48 GMT
cache-control: private, max-age=900
last-modified: Fri, 26 Apr 2024 22:05:23 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 73176
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| vsped-cached-qans-4-cfg.dailymotians.cam/i/02/00134/n8dd3oswwv0x.jpg |  185.181.60.33 | 200 OK | 29 kB |
URL GET HTTP/1.1vsped-cached-qans-4-cfg.dailymotians.cam/i/02/00134/n8dd3oswwv0x.jpg IP185.181.60.33:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGlobalSign nv-sa Subject*.dailymotians.cam Fingerprint7A:4D:6C:B2:E5:A5:8D:C0:12:2C:03:AB:45:FD:07:E8:B9:BD:E6:2E ValidityWed, 12 Jul 2023 19:59:59 GMT - Mon, 12 Aug 2024 19:59:58 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc58.55.100", baseline, precision 8, 720x405, components 3 Hashbc70f8c4e3496b01c16caa091ce94914 b78fb743f1c3b2d35db812bd50d335fb42c4438d e4dffc611be3f2bca205b2ddc105472bb90d082f6cf157c08d9aba016dd55805
GET /i/02/00134/n8dd3oswwv0x.jpg HTTP/1.1
Host: vsped-cached-qans-4-cfg.dailymotians.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 23:29:48 GMT
Content-Type: image/jpeg
Content-Length: 29129
Last-Modified: Sun, 31 Dec 2023 17:44:52 GMT
Connection: keep-alive
ETag: "6591a894-71c9"
Expires: Fri, 10 May 2024 23:29:48 GMT
Cache-Control: max-age=1209600
Accept-Ranges: bytes
|
|
| netdna.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css | 104.18.10.207 | 200 OK | 6.0 kB |
URL GET HTTP/2netdna.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css IP104.18.10.207:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeASCII text, with very long lines (26548) Hash0831cba6a670e405168b84aa20798347 05ea25bc9b3ac48993e1fee322d3bc94b49a6e22 936ffccdc35bc55221e669d0e76034af76ba8c080c1b1149144dbbd3b5311829
GET /font-awesome/4.4.0/css/font-awesome.min.css HTTP/1.1
Host: netdna.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:29:47 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"0831cba6a670e405168b84aa20798347"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 11/18/2022 06:19:10
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 863
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 2562857f0a167db0963d48453a4431f8
cdn-cache: HIT
cf-cache-status: HIT
age: 13464469
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87aa5b5da97056b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| live.demand.supply/e/e.js?r=aydogs.com_728x90_sticky_display_top_top-ads&pdc=0.2780973091721535&e=tcp&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= | 104.17.38.115 | 200 OK | 0 B |
URL HEAD HTTP/3live.demand.supply/e/e.js?r=aydogs.com_728x90_sticky_display_top_top-ads&pdc=0.2780973091721535&e=tcp&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= IP104.17.38.115:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /e/e.js?r=aydogs.com_728x90_sticky_display_top_top-ads&pdc=0.2780973091721535&e=tcp&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f.aydogs.com
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: s-maxage=2592000,stale-if-error=604800
cache-status: "Netlify Edge"; hit
cf-bgj: minify
cf-polished: origSize=2
etag: "fbee6989874cef86694d7a2d31af072a-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01HRWM7TR9SZ429P53WRA8SHQ0
cf-cache-status: HIT
age: 1410218
accept-ranges: bytes
set-cookie: __cf_bm=6eE4D_RYwkwauxqVKFthTLJCwpEFWulG.BNHvCAEDWA-1714174188-1.0.1.1-wXsUeS9HEnIpEC4oMNBl_oW.DoIqVDUyOhTRlCIoCOvzoSppprGG.EeHaCJYYtR6Jx1IK5C72PIb.7ESgo_siA; path=/; expires=Fri, 26-Apr-24 23:59:48 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b654ef6b527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| live.demand.supply/cp/aydogs.com_fluid_all_down.ad?mlcu=84cb251a-4e5c-4c01-b27b-556590636949&mlos=li&mlbr=fi&mlla=en&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= | 104.17.38.115 | 200 OK | 30 B |
URL GET HTTP/3live.demand.supply/cp/aydogs.com_fluid_all_down.ad?mlcu=84cb251a-4e5c-4c01-b27b-556590636949&mlos=li&mlbr=fi&mlla=en&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= IP104.17.38.115:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hash52bac29cacc5fbeac2bb48b24cd2fbfd 24df4b43c54c6fd99383b6c25e14818cccf89409 e5cfde5b0368d80a60a453f672299f26275e9092e87747757d1f4dfe1fd66694
GET /cp/aydogs.com_fluid_all_down.ad?mlcu=84cb251a-4e5c-4c01-b27b-556590636949&mlos=li&mlbr=fi&mlla=en&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f.aydogs.com
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: text/plain;charset=UTF-8
content-length: 30
access-control-allow-origin: *
cache-control: private,max-age=3600
set-cookie: __cf_bm=Zy4iqJYJr6zSROn_bwhkhdHV6qtBayWAkVu5ObZ1lqI-1714174188-1.0.1.1-1g9dsrr6IgfZruOeT5Fj3NygTn4Iai_cOTthxYWWyqKk6RbnNBLu9G.enyZM1BWXyP4qaJM0QkBbuO.DlGxXLw; path=/; expires=Fri, 26-Apr-24 23:59:48 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b634d68b527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ssl.p.jwpcdn.com/player/v/8.9.5/jwpsrv.js | 151.101.66.114 | 200 OK | 17 kB |
URL GET HTTP/2ssl.p.jwpcdn.com/player/v/8.9.5/jwpsrv.js IP151.101.66.114:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGlobalSign nv-sa Subject*.jwplayer.com FingerprintAB:15:C6:40:38:53:10:D6:CD:12:E9:B3:27:A9:9A:A9:79:8D:B2:9A ValidityWed, 30 Aug 2023 18:09:48 GMT - Mon, 30 Sep 2024 18:09:47 GMT
File typeJavaScript source, ASCII text, with very long lines (59078) Hashdc6ac994f6a929ba177587504ee3c159 cd0d3f77e72d7fd250f4e8156326e5d95a4539b1 917650b0b99dcfa1360b8ace75ab13d3278e88506985af114193d3611febaac5
GET /player/v/8.9.5/jwpsrv.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Wed, 25 Nov 2020 15:46:32 GMT
etag: "dc6ac994f6a929ba177587504ee3c159"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Fri, 26 Apr 2024 23:29:48 GMT
via: 1.1 varnish
age: 3226
x-served-by: cache-hel1410030-HEL
x-cache: HIT
x-cache-hits: 7
x-timer: S1714174188.429389,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 17400
X-Firefox-Spdy: h2
|
|
| ssl.p.jwpcdn.com/player/v/8.9.5/provider.hlsjs.js | 151.101.66.114 | 200 OK | 88 kB |
URL GET HTTP/2ssl.p.jwpcdn.com/player/v/8.9.5/provider.hlsjs.js IP151.101.66.114:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGlobalSign nv-sa Subject*.jwplayer.com FingerprintAB:15:C6:40:38:53:10:D6:CD:12:E9:B3:27:A9:9A:A9:79:8D:B2:9A ValidityWed, 30 Aug 2023 18:09:48 GMT - Mon, 30 Sep 2024 18:09:47 GMT
File typeJavaScript source, ASCII text, with very long lines (31596) Hashc1b935a682ff8774bd95d07321409839 98b616e937578c2bab36b66828d10138fe2676de 35373276dcac97c7c7a39cc6d56e71d86e586cd305f59834d5c2b2a0741e4d72
GET /player/v/8.9.5/provider.hlsjs.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=31536000, immutable
last-modified: Fri, 26 Jul 2019 21:30:52 GMT
etag: "c1b935a682ff8774bd95d07321409839"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Fri, 26 Apr 2024 23:29:48 GMT
via: 1.1 varnish
age: 855804
x-served-by: cache-hel1410030-HEL
x-cache: HIT
x-cache-hits: 908
x-timer: S1714174188.431888,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 87639
X-Firefox-Spdy: h2
|
|
| ssl.p.jwpcdn.com/player/v/8.9.5/jwplayer.core.controls.js | 151.101.66.114 | 200 OK | 67 kB |
URL GET HTTP/2ssl.p.jwpcdn.com/player/v/8.9.5/jwplayer.core.controls.js IP151.101.66.114:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGlobalSign nv-sa Subject*.jwplayer.com FingerprintAB:15:C6:40:38:53:10:D6:CD:12:E9:B3:27:A9:9A:A9:79:8D:B2:9A ValidityWed, 30 Aug 2023 18:09:48 GMT - Mon, 30 Sep 2024 18:09:47 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65134) Hash1a9869122184328930c8b5dcb9124cc0 30bdc9850a57e30ef34de3147429a00df7677510 a3db025e4faa2e904c5b99522f90205bbc5d9f0d43a42916eec2e6d2ffa8b06e
GET /player/v/8.9.5/jwplayer.core.controls.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=31536000, immutable
last-modified: Fri, 26 Jul 2019 21:30:49 GMT
etag: "1a9869122184328930c8b5dcb9124cc0"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Fri, 26 Apr 2024 23:29:48 GMT
via: 1.1 varnish
age: 1557768
x-served-by: cache-hel1410030-HEL
x-cache: HIT
x-cache-hits: 883
x-timer: S1714174188.448948,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 67405
X-Firefox-Spdy: h2
|
|
| live.demand.supply/p4/v17-24-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 | 104.17.38.115 | 200 OK | 121 B |
URL GET HTTP/3live.demand.supply/p4/v17-24-0/Zi5heWRvZ3MuY29tL21lbG9keS5waHA/cG9zdD1leUpwYm1adklqcDdJbWh2YldVaU9pSm9kSFJ3Y3pwY0wxd3ZhUzVrY21GdFlXWjFiblIyTG1OdmJTSXNJbUpoWTJzaU9pSm9kSFJ3Y3pwY0wxd3ZhUzVrY21GdFlXWjFiblIyTG1OdmJWd3ZkMkYwWTJndWNHaHdQM1pwWkQweE5XUTBPREpqWmpZaWZTd2ljMlZ5ZG1WeWN5STZleUpXYVdSemNHVmxaSE1pT2lKb2RIUndjenBjTDF3dmQzZDNMblpwWkhOd1pXVmtjeTVqYjIxY0wyVnRZbVZrTFc0NFpHUXpiM04zZDNZd2VDNW9kRzFzSWl3aVZYRnNiMkZrSWpvaWFIUjBjSE02WEM5Y0wzZDNkeTUxY1d4dllXUXVhVzljTDJWdFltVmtMWFZwTmpOamVHa3hhRzVoYmk1b2RHMXNJaXdpVDJzaU9pSm9kSFJ3Y3pwY0wxd3ZkM2QzTG05ckxuSjFYQzkyYVdSbGIyVnRZbVZrWEM4Mk5qTTRNVE14T0RBNE9EVXpJaXdpV1c5MVpHSnZlQ0k2SW1oMGRIQnpPbHd2WEM5NWIzVmtZbTk0TG5OcGRHVmNMMlZ0WW1Wa0xXdHlkM0UyZHpacllYVjVkUzVvZEcxc0lpd2lVMlZuWVhacFpDSTZJbWgwZEhCek9sd3ZYQzl6WldkaGRtbGtMbU52YlZ3dlpXMWlaV1F0YTJzd2NHZzNlR3BoTnpGekxtaDBiV3dpTENKR2FXeGxiR2x2Ym5NaU9pSm9kSFJ3Y3pwY0wxd3ZabWxzWld4cGIyNXpMbXhwZG1WY0wzWmNMMlJxTm1Kek4zZzRibXB2Y0NJc0lrMXBlR1J5YjNBaU9pSm9kSFJ3Y3pwY0wxd3ZiV2w0WkhKdmNDNWpiMXd2WlZ3dmJXUTNNemh0Y2pCbWVERnRiakY0SWl3aVJtbHNaVzF2YjI0aU9pSm9kSFJ3Y3pwY0wxd3ZabWxzWlcxdmIyNHVjM2hjTDJWY0wycDVaVE5uZFcweGFUazJiQ0lzSWxadlpTSTZJbWgwZEhCek9sd3ZYQzkyYjJVdWMzaGNMMlZjTDNKc2NXcGhlV0pyWldKd2NDSXNJa1J2YjJRaU9pSm9kSFJ3Y3pwY0wxd3ZaRzl2WkM1M2Mxd3ZaVnd2TjI0eGRuWmxOV295ZEdKM0luMTk= IP104.17.38.115:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with no line terminators Hashab3db78294876480edccd2b9ffe2259b 7690642b47fcef4e5be8e8c10d83633267eb02df fb94b462f27f138f78bc2f58584c8e4377ea23828ec4bf2de9a76b624419b6d0
GET /p4/v17-24-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 HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Cookie: __cf_bm=jJtRQbp94pN.Hk6b5KuDy_Bf.PADcApUIvTyWhQSopo-1714174187-1.0.1.1-R5uM.XvKTTghUqKZjGAnel7GRC8msRKWhNAxAoxkb7UCg3OGqcB_YscKVAzIZokW.W60JMh.VMwi99lHBVwNGA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:47 GMT
content-type: text/javascript
access-control-allow-origin: *
cache-control: max-age=3600, s-maxage=7200, stale-while-revalidate=3600, stale-if-error=84600
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b62bbe05691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| live.demand.supply/e/e.js?r=aydogs.com_fluid_all_down.ad&pdc=0.29404645040631294&e=tcp&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= | 104.17.38.115 | 200 OK | 0 B |
URL HEAD HTTP/3live.demand.supply/e/e.js?r=aydogs.com_fluid_all_down.ad&pdc=0.29404645040631294&e=tcp&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= IP104.17.38.115:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /e/e.js?r=aydogs.com_fluid_all_down.ad&pdc=0.29404645040631294&e=tcp&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f.aydogs.com
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: s-maxage=2592000,stale-if-error=604800
cache-status: "Netlify Edge"; hit
cf-bgj: minify
cf-polished: origSize=2
etag: "fbee6989874cef86694d7a2d31af072a-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01HRWM7TR9SZ429P53WRA8SHQ0
cf-cache-status: HIT
age: 1410218
accept-ranges: bytes
set-cookie: __cf_bm=b353eKFPmUEdnr7Cbb4VHmma2I_mixcCxkq1cS9pQKw-1714174188-1.0.1.1-2Smu3uWDf3.hqnqR9u6xlLV88WSeYKoc1iWtRrkVB00Pi22.e9RBGy_g67t0hB.ttCHwD4ir9pYf4kOCzbv__w; path=/; expires=Fri, 26-Apr-24 23:59:48 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b66d808b527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cappuccinoinaneconsiderate.com/8b/73/a6/8b73a63260500bbbdbb851183ed42916.js | 172.240.253.132 | 200 OK | 30 kB |
URL GET HTTP/1.1cappuccinoinaneconsiderate.com/8b/73/a6/8b73a63260500bbbdbb851183ed42916.js IP172.240.253.132:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerLet's Encrypt Subjectcappuccinoinaneconsiderate.com Fingerprint0D:4F:23:91:85:17:3B:0A:0C:17:35:4B:9C:CD:70:67:BB:84:C9:32 ValidityWed, 13 Mar 2024 10:07:36 GMT - Tue, 11 Jun 2024 10:07:35 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash9c1223ea5d4936841ae7ec3d6946a410 c991a9ed598694cf09ea4f53db9e1990a510516f c536c6b46a64cb10654bd6b6a22c7e2de82ce0b1cbc846942dd8857903a465b9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /8b/73/a6/8b73a63260500bbbdbb851183ed42916.js HTTP/1.1
Host: cappuccinoinaneconsiderate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 23:29:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_CF-2931_layer=0; expires=Sun, 28 Apr 2024 23:29:48 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ff73a9bacf2b3d7e3122840ebf64c3b0
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| api.demand.supply/v17-24-0/a/aydogs.com_fluid_all_down.ad?&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= | 104.17.38.115 | 200 OK | 253 B |
URL GET HTTP/3api.demand.supply/v17-24-0/a/aydogs.com_fluid_all_down.ad?&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= IP104.17.38.115:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd2fac3ddbf4e21e04227a4d01ae74810 bc572cfda244fdcedcc385ad22d4fb175b293b9d ea18295e391e31c3f1bb6b46bafb6d4ceea60d710f6d131826929e906e817af8
GET /v17-24-0/a/aydogs.com_fluid_all_down.ad?&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= HTTP/1.1
Host: api.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f.aydogs.com
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: max-age=3600, s-maxage=7200, stale-while-revalidate=3600, stale-if-error=84600
etag: W/"182-vFcs/aJE/c7cw4WtItT7F1spO50"
cf-cache-status: HIT
age: 196
set-cookie: __cf_bm=zeY7ocxXFMTGvUluik.xgzVCltzfauTPDEwX5YPnMNU-1714174188-1.0.1.1-ppJWf0bevGwZWZAJ321nwddcwuPhFmMO9KNbVmQF1h6nQ0vcyu04hgqCv5eCP1nwR_H0lmNxerMxsTWt17HzHQ; path=/; expires=Fri, 26-Apr-24 23:59:48 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b66deae5691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| g.jwpsrv.com/g/gcid-0.1.2.html?notrack | 151.101.66.114 | 204 No Content | 0 B |
URL GET HTTP/2g.jwpsrv.com/g/gcid-0.1.2.html?notrack IP151.101.66.114:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGlobalSign nv-sa Subject*.jwplayer.com FingerprintAB:15:C6:40:38:53:10:D6:CD:12:E9:B3:27:A9:9A:A9:79:8D:B2:9A ValidityWed, 30 Aug 2023 18:09:48 GMT - Mon, 30 Sep 2024 18:09:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /g/gcid-0.1.2.html?notrack HTTP/1.1
Host: g.jwpsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: Varnish
retry-after: 0
content-type: text/html; charset=utf-8
accept-ranges: bytes
date: Fri, 26 Apr 2024 23:29:48 GMT
via: 1.1 varnish
x-served-by: cache-hel1410030-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714174189.760383,VS0,VE0
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| live.demand.supply/e/e.js?r=aydogs.com_fluid_all_down.ad&e=empdr&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= | 104.17.38.115 | 200 OK | 0 B |
URL HEAD HTTP/3live.demand.supply/e/e.js?r=aydogs.com_fluid_all_down.ad&e=empdr&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= IP104.17.38.115:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /e/e.js?r=aydogs.com_fluid_all_down.ad&e=empdr&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f.aydogs.com
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: s-maxage=2592000,stale-if-error=604800
cache-status: "Netlify Edge"; hit
cf-bgj: minify
cf-polished: origSize=2
etag: "fbee6989874cef86694d7a2d31af072a-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01HRWM7TR9SZ429P53WRA8SHQ0
cf-cache-status: HIT
age: 1410218
accept-ranges: bytes
set-cookie: __cf_bm=KmWtiFgJTpeWeDk4EpWXPByDAFkiMPpPHCnvr6vGOW0-1714174188-1.0.1.1-21OS88EOxv1VbqtpX._GVTKkKB86Gb1W68M63DUl3XdbvDkGh70pH.a_y90q82M2U7KdVwwHIFwaDJ1hVGvpoA; path=/; expires=Fri, 26-Apr-24 23:59:48 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b67a897b527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| live.demand.supply/e/e.js?r=aydogs.com_large_video&e=empdr&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= | 104.17.38.115 | 200 OK | 0 B |
URL HEAD HTTP/3live.demand.supply/e/e.js?r=aydogs.com_large_video&e=empdr&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= IP104.17.38.115:443
Requested byhttps://f.aydogs.com/melody.php?post=eyJpbmZvIjp7ImhvbWUiOiJodHRwczpcL1wvaS5kcmFtYWZ1bnR2LmNvbSIsImJhY2siOiJodHRwczpcL1wvaS5kcmFtYWZ1bnR2LmNvbVwvd2F0Y2gucGhwP3ZpZD0xNWQ0ODJjZjYifSwic2VydmVycyI6eyJWaWRzcGVlZHMiOiJodHRwczpcL1wvd3d3LnZpZHNwZWVkcy5jb21cL2VtYmVkLW44ZGQzb3N3d3YweC5odG1sIiwiVXFsb2FkIjoiaHR0cHM6XC9cL3d3dy51cWxvYWQuaW9cL2VtYmVkLXVpNjNjeGkxaG5hbi5odG1sIiwiT2siOiJodHRwczpcL1wvd3d3Lm9rLnJ1XC92aWRlb2VtYmVkXC82NjM4MTMxODA4ODUzIiwiWW91ZGJveCI6Imh0dHBzOlwvXC95b3VkYm94LnNpdGVcL2VtYmVkLWtyd3E2dzZrYXV5dS5odG1sIiwiU2VnYXZpZCI6Imh0dHBzOlwvXC9zZWdhdmlkLmNvbVwvZW1iZWQta2swcGg3eGphNzFzLmh0bWwiLCJGaWxlbGlvbnMiOiJodHRwczpcL1wvZmlsZWxpb25zLmxpdmVcL3ZcL2RqNmJzN3g4bmpvcCIsIk1peGRyb3AiOiJodHRwczpcL1wvbWl4ZHJvcC5jb1wvZVwvbWQ3MzhtcjBmeDFtbjF4IiwiRmlsZW1vb24iOiJodHRwczpcL1wvZmlsZW1vb24uc3hcL2VcL2p5ZTNndW0xaTk2bCIsIlZvZSI6Imh0dHBzOlwvXC92b2Uuc3hcL2VcL3JscWpheWJrZWJwcCIsIkRvb2QiOiJodHRwczpcL1wvZG9vZC53c1wvZVwvN24xdnZlNWoydGJ3In19 CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /e/e.js?r=aydogs.com_large_video&e=empdr&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f.aydogs.com
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: s-maxage=2592000,stale-if-error=604800
cache-status: "Netlify Edge"; hit
cf-bgj: minify
cf-polished: origSize=2
etag: "fbee6989874cef86694d7a2d31af072a-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01HRWM7TR9SZ429P53WRA8SHQ0
cf-cache-status: HIT
age: 1410218
accept-ranges: bytes
set-cookie: __cf_bm=sOFh5xQqEt7VN7odzQBMypuv2zABkthe3zIhVvhChXg-1714174188-1.0.1.1-RD1l.hW.SO.8Lj.kbzAOZwwYBsKaJOMkSS357bRBcZRbnJGb0f_23k6THlDX6sDARfKpaLB6AJ9yvDAH0OEO3A; path=/; expires=Fri, 26-Apr-24 23:59:48 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b6838d9b527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| api.demand.supply/v17-24-0/a/aydogs.com_large_video?&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= | 104.17.38.115 | 200 OK | 1.2 kB |
URL GET HTTP/3api.demand.supply/v17-24-0/a/aydogs.com_large_video?&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= IP104.17.38.115:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hash8f3e20b8bb52c61e10a6e6b9a62057e7 a1a9fc16ef03a8b257f1dc1931e3d385a5b117aa 86a7e28fd8573ef1560ee24cf0c4ad7f533626b230c6662c84757b37f215f9d8
GET /v17-24-0/a/aydogs.com_large_video?&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= HTTP/1.1
Host: api.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f.aydogs.com
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: max-age=3600, s-maxage=7200, stale-while-revalidate=3600, stale-if-error=84600
etag: W/"178-oan8Fu8DqLJX8dwZMePThaWxF6o"
cf-cache-status: HIT
age: 241
set-cookie: __cf_bm=RIKkCm.PWRl11dyLSV4XVaWZtxPx9sQVsES4LXqwls0-1714174188-1.0.1.1-Ku16CXdXNChAcMq_6OP5hyWepkBd9KG7wGuP.Z2cpzQi6h8JVCr7Rt5WyXDR4pLKTY3pGKS1Se_KEY0ThH7Zgw; path=/; expires=Fri, 26-Apr-24 23:59:48 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b674eeb5691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| f.aydogs.com/favicon.ico | 104.21.90.108 | 302 Found | 0 B |
IP104.21.90.108:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerGoogle Trust Services LLC Subjectaydogs.com Fingerprint61:78:5C:78:A5:5E:5B:9F:1E:B7:D1:89:98:4B:6E:90:9C:E4:E6:9C ValiditySun, 14 Apr 2024 13:12:12 GMT - Sat, 13 Jul 2024 13:12:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: f.aydogs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/melody.php?post=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
Cookie: _ga_XJYEGHFCFQ=GS1.1.1714174187.1.0.1714174187.0.0.0; _ga=GA1.1.457296179.1714174188
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: text/html; charset=UTF-8
location: https://f.aydogs.com/wp-content/uploads/2022/11/cropped-Ay-dogs-1-32x32.png
link: <https://f.aydogs.com/wp-json/>; rel="https://api.w.org/"
x-litespeed-tag: 9a2_HTTP.200,9a2_HTTP.302
x-redirect-by: WordPress
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aMHAE%2Bp4fFIiOtf0G8z4c7fD3z8weL4lWpRVfBC1DboFhybfsIxh7owqWhnN0heNxvPdDzRbhpmzq%2F1ciqz3jH2WBvF6dLudliRRMxkTwIf93a4FL6pwygaOW7BWPOo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b66faf07131-OSL
alt-svc: h3=":443"; ma=86400
|
|
| live.demand.supply/e/e.js?r=aydogs.com_large_video&pn=2&sn=3&pc=0.3883098065853119&ds=false&e=wdp&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= | 104.17.38.115 | 200 OK | 0 B |
URL HEAD HTTP/3live.demand.supply/e/e.js?r=aydogs.com_large_video&pn=2&sn=3&pc=0.3883098065853119&ds=false&e=wdp&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= IP104.17.38.115:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /e/e.js?r=aydogs.com_large_video&pn=2&sn=3&pc=0.3883098065853119&ds=false&e=wdp&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f.aydogs.com
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: s-maxage=2592000,stale-if-error=604800
cache-status: "Netlify Edge"; hit
cf-bgj: minify
cf-polished: origSize=2
etag: "fbee6989874cef86694d7a2d31af072a-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01HRWM7TR9SZ429P53WRA8SHQ0
cf-cache-status: HIT
age: 1410218
accept-ranges: bytes
set-cookie: __cf_bm=X0o6BuCOyQoAM30UPSbTDzCrxRkWup_7jyc5teGmwmE-1714174188-1.0.1.1-ZrjpPXDLE8HKeHNI81FQF2xlWGR9nzUENdTzvPPJY4uEsClZAgoojD9.kBMoNpvtdH2dcg2Yxhr9yzKc1q7rgg; path=/; expires=Fri, 26-Apr-24 23:59:48 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b6878f6b527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| live.demand.supply/e/e.js?r=aydogs.com_large_video&e=empdr&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= | 104.17.38.115 | 200 OK | 0 B |
URL HEAD HTTP/3live.demand.supply/e/e.js?r=aydogs.com_large_video&e=empdr&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= IP104.17.38.115:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /e/e.js?r=aydogs.com_large_video&e=empdr&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f.aydogs.com
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: s-maxage=2592000,stale-if-error=604800
cache-status: "Netlify Edge"; hit
cf-bgj: minify
cf-polished: origSize=2
etag: "fbee6989874cef86694d7a2d31af072a-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01HRWM7TR9SZ429P53WRA8SHQ0
cf-cache-status: HIT
age: 1410218
accept-ranges: bytes
set-cookie: __cf_bm=m7nWrCyH8QJcSZiTAxFqRA_Hx_2_emdV85XldBg6PVQ-1714174188-1.0.1.1-yRIG9IZ2nJJ6cgqs5T4jitnkRFweG_34mhBAwmButhWz1wA1KyqrXinvsxo0UsTmTq5k_gVpROcMVi_HXh2SPQ; path=/; expires=Fri, 26-Apr-24 23:59:48 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b6868f4b527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| i.dramafuntv.com/templates/3osss/css/jasny-bootstrap.min.css | 172.67.188.83 | 200 OK | 2.5 kB |
URL GET HTTP/3i.dramafuntv.com/templates/3osss/css/jasny-bootstrap.min.css IP172.67.188.83:443
Requested byhttps://f.aydogs.com/melody.php?post=eyJpbmZvIjp7ImhvbWUiOiJodHRwczpcL1wvaS5kcmFtYWZ1bnR2LmNvbSIsImJhY2siOiJodHRwczpcL1wvaS5kcmFtYWZ1bnR2LmNvbVwvd2F0Y2gucGhwP3ZpZD0xNWQ0ODJjZjYifSwic2VydmVycyI6eyJWaWRzcGVlZHMiOiJodHRwczpcL1wvd3d3LnZpZHNwZWVkcy5jb21cL2VtYmVkLW44ZGQzb3N3d3YweC5odG1sIiwiVXFsb2FkIjoiaHR0cHM6XC9cL3d3dy51cWxvYWQuaW9cL2VtYmVkLXVpNjNjeGkxaG5hbi5odG1sIiwiT2siOiJodHRwczpcL1wvd3d3Lm9rLnJ1XC92aWRlb2VtYmVkXC82NjM4MTMxODA4ODUzIiwiWW91ZGJveCI6Imh0dHBzOlwvXC95b3VkYm94LnNpdGVcL2VtYmVkLWtyd3E2dzZrYXV5dS5odG1sIiwiU2VnYXZpZCI6Imh0dHBzOlwvXC9zZWdhdmlkLmNvbVwvZW1iZWQta2swcGg3eGphNzFzLmh0bWwiLCJGaWxlbGlvbnMiOiJodHRwczpcL1wvZmlsZWxpb25zLmxpdmVcL3ZcL2RqNmJzN3g4bmpvcCIsIk1peGRyb3AiOiJodHRwczpcL1wvbWl4ZHJvcC5jb1wvZVwvbWQ3MzhtcjBmeDFtbjF4IiwiRmlsZW1vb24iOiJodHRwczpcL1wvZmlsZW1vb24uc3hcL2VcL2p5ZTNndW0xaTk2bCIsIlZvZSI6Imh0dHBzOlwvXC92b2Uuc3hcL2VcL3JscWpheWJrZWJwcCIsIkRvb2QiOiJodHRwczpcL1wvZG9vZC53c1wvZVwvN24xdnZlNWoydGJ3In19 CertificateIssuerGoogle Trust Services LLC Subjectdramafuntv.com Fingerprint1C:9B:EA:2E:14:38:06:7D:C3:95:38:BE:C8:C7:09:47:4D:14:D7:D6 ValidityTue, 09 Apr 2024 17:14:32 GMT - Mon, 08 Jul 2024 17:14:31 GMT
File typeASCII text, with very long lines (13803), with CRLF line terminators Hash56a224ccaaf1ad3df6ee7dbbc019aeac 2ce1ef76b342a8fafda1e03a62b99be5340812bf 777a9e5bb5d35fd671e5b252c67a0cf462baa8258db145ef6ea7dadf4de4b481
GET /templates/3osss/css/jasny-bootstrap.min.css HTTP/1.1
Host: i.dramafuntv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f.aydogs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:47 GMT
content-type: text/css
last-modified: Wed, 20 Apr 2016 09:46:42 GMT
etag: W/"57175002-36b3"
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3%2BSzgFYVciqbmYB6z7Sktyb4NjQOzk%2BrQVqd2Xclso5pMlboyOXablPRTpN00Vu6WmQHGWw8acp2AGeRcdLyoaa7hLJ43kAba3CHiV7rVraq67PwHv6AeNDBUPNJG%2BHJxiSN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b5f3bfdb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vsped-cached-qans-4-cfg.dailymotians.cam/hls/liwaixmwkm2nsti77hksuu2dwt2uuuozm7dx7idbuawzqkir7b63x2zo6jgq/index-v1-a1.m3u8 | 185.181.60.33 | 200 OK | 4.0 kB |
URL GET HTTP/1.1vsped-cached-qans-4-cfg.dailymotians.cam/hls/liwaixmwkm2nsti77hksuu2dwt2uuuozm7dx7idbuawzqkir7b63x2zo6jgq/index-v1-a1.m3u8 IP185.181.60.33:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGlobalSign nv-sa Subject*.dailymotians.cam Fingerprint7A:4D:6C:B2:E5:A5:8D:C0:12:2C:03:AB:45:FD:07:E8:B9:BD:E6:2E ValidityWed, 12 Jul 2023 19:59:59 GMT - Mon, 12 Aug 2024 19:59:58 GMT
Hash3aa66c198279fa52777f80ce0169bb05 4db495cfe9c1f372e8789f2ffa9ed5ea49748854 fcafef1752c86b2066971190d2588ba11769fc2ad34ee9f1e17514f259ad3dc6
GET /hls/liwaixmwkm2nsti77hksuu2dwt2uuuozm7dx7idbuawzqkir7b63x2zo6jgq/index-v1-a1.m3u8 HTTP/1.1
Host: vsped-cached-qans-4-cfg.dailymotians.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vidspeeds.com
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 23:29:48 GMT
Content-Type: application/vnd.apple.mpegurl
Content-Length: 4022
Connection: keep-alive
Expires: Sat, 27 Apr 2024 11:29:48 GMT
Cache-Control: max-age=43200
ETag: "-1-fb6"
Last-Modified: Sun, 11 Sep 2000 09:00:00 GMT
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| f.aydogs.com/wp-content/uploads/2022/11/cropped-Ay-dogs-1-32x32.png | 104.21.90.108 | 200 OK | 438 B |
URL GET HTTP/3f.aydogs.com/wp-content/uploads/2022/11/cropped-Ay-dogs-1-32x32.png IP104.21.90.108:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerGoogle Trust Services LLC Subjectaydogs.com Fingerprint61:78:5C:78:A5:5E:5B:9F:1E:B7:D1:89:98:4B:6E:90:9C:E4:E6:9C ValiditySun, 14 Apr 2024 13:12:12 GMT - Sat, 13 Jul 2024 13:12:11 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hashf6133b631c574b1782db2f1c851500dc 09a32d7a1eb785862712fea861ffc6bf16ee224c e8e5a108d1d2f7421872d8f7ec2119d70df90249c86653cc7a1a10e40164ce94
GET /wp-content/uploads/2022/11/cropped-Ay-dogs-1-32x32.png HTTP/1.1
Host: f.aydogs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f.aydogs.com/melody.php?post=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
DNT: 1
Connection: keep-alive
Cookie: _ga_XJYEGHFCFQ=GS1.1.1714174187.1.0.1714174187.0.0.0; _ga=GA1.1.457296179.1714174188
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: image/png
content-length: 438
last-modified: Fri, 30 Dec 2022 19:57:39 GMT
etag: "63af42b3-1b6"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2169
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XxMDoYm4FPpnZmkPleVqVmPB%2FpRMQW%2F3O8NXwiX9KI8%2F9%2BXp4Mth3PF4EGGVhGUu2bNYdmDCKO9rH9tzeHKgN92Dutcjc9Pv9zFtS4iEEK1GGA%2BNVcJf1tPD%2F66vmBg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b68abf57131-OSL
alt-svc: h3=":443"; ma=86400
|
|
| proftrafficcounter.com/stats |  18.159.11.169 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.159.11.169:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash45459747e36e5411d805c6a2fa89d8d6 246a3a2ac84397c9f28a63f7eec2be424b3d518b 4279e5ba5d4e738907e1f018e62bf276da7ffa829321b0f523c3347a15811fa7
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vidspeeds.com
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.vidspeeds.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=cfb1e16e-da03-4bf2-812b-d27973d883de:3:1; expires=Mon, 24 Apr 2034 23:29:48 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-SPT2L8NN46&l=dataLayer&cx=c | 142.250.74.168 | 404 Not Found | 1.6 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-SPT2L8NN46&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52 ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hash18032b23af927f785cdb1b29dbabd1b1 98bef1a65f204db6f63cc53063c8e8ff3f41a48f c2986ad8fd0f603009ef7ca632fce26ca44b37e75c24a71b9d3f3a9f3ce9fc97
GET /gtag/js?id=G-SPT2L8NN46&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
cross-origin-resource-policy: cross-origin
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: text/html; charset=UTF-8
server: Google Tag Manager
content-length: 1609
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| downstairsnegotiatebarren.com/sfp.js | 104.21.35.227 | 200 OK | 735 kB |
URL GET HTTP/3downstairsnegotiatebarren.com/sfp.js IP104.21.35.227:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint2C:6A:E1:8E:26:5B:1D:8B:86:CB:C1:72:4E:52:4B:8B:67:3A:D2:44 ValidityMon, 04 Mar 2024 21:53:07 GMT - Sun, 02 Jun 2024 21:53:06 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators Size735 kB (734717 bytes) Hashf4a2f8f9f99541c6f105bbd0a025bd40 1f8e3eff12168fdd9e719adfc098d24a45b6916a b717cb04231a10d425fd55b73c85a5407119c6826a8bac94142fddfff6958716
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 1b7a1f255b70b25159db5c3564d96db6
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Fri, 26 Apr 2024 23:29:48 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l841W3R0OIn%2FyaSqIlWjjgSE2g4ixZW5sFeR4GXRTggemoZiiIBZmz53i1agGUfWhpSPNzS5XzgPmEEgL8B%2BVcauHE2vSS5E%2BEjRjatBWAyobVxyZ8VXmFOEl03r35OziCLwUYU2qdyic6lGxbtHHg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b683965b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.vidspeeds.com/css/main.css | 188.114.96.1 | 200 OK | 11 kB |
URL GET HTTP/3www.vidspeeds.com/css/main.css IP188.114.96.1:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGoogle Trust Services LLC Subjectvidspeeds.com FingerprintA7:BD:28:0E:94:10:78:DC:FA:C3:D0:58:DF:85:4E:B1:13:BA:FD:8D ValiditySat, 09 Mar 2024 21:18:35 GMT - Fri, 07 Jun 2024 21:18:34 GMT
File typeassembler source, Unicode text, UTF-8 text Hash64004c5fde414f36904fc174889124ec c6045aa48bb043f6834d681e4aa80647d6f06adb 7e0e41e9e43420d3ffd5cebbf3184a558bd4b546aeb87b2544ba28f61a45a503
GET /css/main.css HTTP/1.1
Host: www.vidspeeds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/embed-n8dd3oswwv0x.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: text/css
last-modified: Mon, 24 Jan 2022 12:56:06 GMT
etag: W/"be25-5d6537de198d7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2583
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y%2B1GktV5YKEOIroApFJk6M%2FtFKfyw5bfzOnErFiOthkTfIiBOZvHU%2BqUlvsd3FoDBNP8HBCIFQQ%2FoBh6ih8jMm%2FQQ7V2ZFQ26Dd2OFFhpBGkPhvIM%2B%2BqSH8QMcOdvfXOmk2aOA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b63ed27b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.vidspeeds.com/js/xupload.js | 188.114.96.1 | 200 OK | 19 kB |
URL GET HTTP/3www.vidspeeds.com/js/xupload.js IP188.114.96.1:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGoogle Trust Services LLC Subjectvidspeeds.com FingerprintA7:BD:28:0E:94:10:78:DC:FA:C3:D0:58:DF:85:4E:B1:13:BA:FD:8D ValiditySat, 09 Mar 2024 21:18:35 GMT - Fri, 07 Jun 2024 21:18:34 GMT
File typeJavaScript source, ASCII text Hashbd9ca6993c72a80ccf600e7d45832d81 44ba84027e7894fe1931c10c203eaf0cc0f36f41 f2f42bf6bd7d7ef2e610c717db7037be84a34c4085bbc299e498fe3251cd1222
GET /js/xupload.js HTTP/1.1
Host: www.vidspeeds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/embed-n8dd3oswwv0x.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: application/javascript
last-modified: Mon, 24 Jan 2022 12:56:06 GMT
etag: W/"2659-5d6537de2a277"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2583
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q2FMlJTrQ9RnA1Hmws7EPHXuuL6OlKMMP3Zna7gCk8Yf6nOQ5vk%2FuJk2rcXeCI6Wbqhu2GDxB%2BNR8MtxE%2BvoNplLOuAsioYSg5HL%2B8PaadKgvz2e7SlZUxARJUrexwkPsXiiaw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b63ed29b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| proftrafficcounter.com/stats | 18.159.11.169 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.159.11.169:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash45459747e36e5411d805c6a2fa89d8d6 246a3a2ac84397c9f28a63f7eec2be424b3d518b 4279e5ba5d4e738907e1f018e62bf276da7ffa829321b0f523c3347a15811fa7
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vidspeeds.com
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Cookie: uid_id2=cfb1e16e-da03-4bf2-812b-d27973d883de:3:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:29:49 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.vidspeeds.com
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
|
|
| capaciousdrewreligion.com/advertisers.js | 172.240.253.132 | 200 OK | 0 B |
URL GET HTTP/1.1capaciousdrewreligion.com/advertisers.js IP172.240.253.132:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerLet's Encrypt Subjectcapaciousdrewreligion.com Fingerprint53:B6:ED:C6:B5:B6:60:3E:6D:02:5A:92:2E:C3:12:74:64:A1:23:DC ValidityWed, 06 Mar 2024 11:57:32 GMT - Tue, 04 Jun 2024 11:57:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: capaciousdrewreligion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 23:29:49 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 06827ac56e9972f0c66b39da13aba427
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| proftrafficcounter.com/stats | 18.159.11.169 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.159.11.169:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash45459747e36e5411d805c6a2fa89d8d6 246a3a2ac84397c9f28a63f7eec2be424b3d518b 4279e5ba5d4e738907e1f018e62bf276da7ffa829321b0f523c3347a15811fa7
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vidspeeds.com
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Cookie: uid_id2=cfb1e16e-da03-4bf2-812b-d27973d883de:3:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:29:49 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.vidspeeds.com
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
|
|
| proftrafficcounter.com/stats | 18.159.11.169 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.159.11.169:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash45459747e36e5411d805c6a2fa89d8d6 246a3a2ac84397c9f28a63f7eec2be424b3d518b 4279e5ba5d4e738907e1f018e62bf276da7ffa829321b0f523c3347a15811fa7
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vidspeeds.com
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Cookie: uid_id2=cfb1e16e-da03-4bf2-812b-d27973d883de:3:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:29:49 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.vidspeeds.com
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
|
|
| unseenreport.com/pxf.gif?uuid=cfb1e16e-da03-4bf2-812b-d27973d883de&eb=45a089584ad8b09819d75dc6bb9c1bdf&te=7b9c6871c64c0dd6bcb9b452885243b8&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2327&b_frame=1&pk=8b73a63260500bbbdbb851183ed42916&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=23 | 192.243.61.225 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=cfb1e16e-da03-4bf2-812b-d27973d883de&eb=45a089584ad8b09819d75dc6bb9c1bdf&te=7b9c6871c64c0dd6bcb9b452885243b8&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2327&b_frame=1&pk=8b73a63260500bbbdbb851183ed42916&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=23 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=cfb1e16e-da03-4bf2-812b-d27973d883de&eb=45a089584ad8b09819d75dc6bb9c1bdf&te=7b9c6871c64c0dd6bcb9b452885243b8&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2327&b_frame=1&pk=8b73a63260500bbbdbb851183ed42916&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=23 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 23:29:50 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a3f769a46ced3ec8a7d8c1384f5eea2b
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| unseenreport.com/pxf.gif?uuid=cfb1e16e-da03-4bf2-812b-d27973d883de&eb=45a089584ad8b09819d75dc6bb9c1bdf&te=7b9c6871c64c0dd6bcb9b452885243b8&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2327&b_frame=1&pk=cdbac24573c32abd89d0ec1e09d0a76e&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=23 | 192.243.61.225 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=cfb1e16e-da03-4bf2-812b-d27973d883de&eb=45a089584ad8b09819d75dc6bb9c1bdf&te=7b9c6871c64c0dd6bcb9b452885243b8&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2327&b_frame=1&pk=cdbac24573c32abd89d0ec1e09d0a76e&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=23 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=cfb1e16e-da03-4bf2-812b-d27973d883de&eb=45a089584ad8b09819d75dc6bb9c1bdf&te=7b9c6871c64c0dd6bcb9b452885243b8&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2327&b_frame=1&pk=cdbac24573c32abd89d0ec1e09d0a76e&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=23 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 23:29:50 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ce8fec98558c391a1b4d92844a267409
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| skipdissatisfactionengland.com/sbar.json?key=cdbac24573c32abd89d0ec1e09d0a76e&uuid=cfb1e16e-da03-4bf2-812b-d27973d883de%3A3%3A1 | 192.243.59.12 | 200 OK | 8.5 kB |
URL GET HTTP/1.1skipdissatisfactionengland.com/sbar.json?key=cdbac24573c32abd89d0ec1e09d0a76e&uuid=cfb1e16e-da03-4bf2-812b-d27973d883de%3A3%3A1 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerLet's Encrypt Subjectskipdissatisfactionengland.com Fingerprint0C:F8:6F:97:80:DE:2F:0C:B8:7E:F8:BB:79:80:6A:D9:1E:1F:70:83 ValidityTue, 23 Apr 2024 10:43:21 GMT - Mon, 22 Jul 2024 10:43:20 GMT
Hasha92897d0c1136e8a7bfb7d6d74e11068 6b133c255fb93d608e092c950c71431920ef7aa0 46524856bf82e4e0942bd371c0fdeb00b423cc6afcd1fe3f8609b62d656e29a7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sbar.json?key=cdbac24573c32abd89d0ec1e09d0a76e&uuid=cfb1e16e-da03-4bf2-812b-d27973d883de%3A3%3A1 HTTP/1.1
Host: skipdissatisfactionengland.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vidspeeds.com
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 23:29:50 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.vidspeeds.com
Access-Control-Allow-Origin: https://www.vidspeeds.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=22729397; expires=Sat, 27 Apr 2024 23:29:50 GMT; secure; SameSite=None
uid_id2=cfb1e16e-da03-4bf2-812b-d27973d883de:3:1; expires=Fri, 03 May 2024 23:29:50 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 27 Apr 2024 23:29:50 GMT; secure; SameSite=None
uncs=1; expires=Sat, 27 Apr 2024 23:29:50 GMT; secure; SameSite=None
pdhtkv29=true; expires=Sat, 27 Apr 2024 23:29:50 GMT; secure; SameSite=None
uncs29=1; expires=Sat, 27 Apr 2024 23:29:50 GMT; secure; SameSite=None
sleccdbac24573c32abd89d0ec1e09d0a76e=[5194761,5194763]; expires=Fri, 26 Apr 2024 23:29:55 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3a210a1308f3bb39e1d3f99ff69d0dac
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| skipdissatisfactionengland.com/ren.gif?sid=H4sIAAAAAAAC%2F1RS32scVRS%2Bk6ao9KFY%2BqQI%2B6Cg0GxmZjczu%2FYhWGOkmDalURQR5M69dzfXvTN3uHdmZ5OnYEH6uPoXTL5NGvqDYgUfLXUTEQwoWZ8CGvwLBLH0xT7IrqHB83DPOff7Lnz3O%2BeLzfyI%2BMjp4cIVvS6VorNzVbfy%2Bkeed7GyJJO8V%2Bk1gk%2BD%2BsWK6b7ZDKruG5V3BevoWd%2F1XNdzvcqiNKKle7NjEDK91%2FSqTbda96veXB098%2F%2Fe5g4sdcC7R%2BQcJB9N7znnIdkQSfz1grCdTKcX3olzRTNt0OU7HySdRBcJ4pOyZRy0kp1jNrQ9WHwInWxP5EJ3nxEjOSLOjw8RJTvHIhF1tyY6IwWRIOJnUHSHEGoISYdg%2BgYkPyAA47i6jCS%2BdVWbgq79h9IxOiLTT%2F6GLEZk%2BvfzSOL7l5TsVVa0yjOpE4teq4TsDSHbQ6T5LrL1KchiFyz7HJL%2FTGafLCGJt5at0pD88FXWijzhBWKGU7c2U49a%2FkzD86MZ7ofNsMYbjRoXE4OkHEK2hlCiD2pPIbcOcukgbznIUwcxP6wwz%2FNClzPqNpqM1XgoooC7Hg1bHvXcoIGcjf%2FQR5b2wVQfzGwgNRvoyC8P5s7B5I9gV0tY7sBmBF1eohAEhSUoKEEhCYqMoOiW21xZ35a3uLJ55B1n%2FzjXyoHO2pt0W2dtkRBQ04fh5WZ6RF4ce%2Bh8PPoWHXFYYTyizK%2FPhTVW82nEG03uCuYJt8ldGgYCVpaQdgrUOliXIxL%2B8RtSOSIvxXcQ0V1YtQsmXwPNXwEtStDVEuvJXZrQLDedKjUZuC6RZtPI1pxNdURengxxeeEFCLY%2F%2F8s%2F5597%2FP3zYKZEakp8JvcI2urm4LouyNZ1XVjyYDnNZCzX6XjAKxnNxOk774m1Qht%2BecH2b7%2FFxsC4vPe%2BsNkSTbhM2pbcvSQ5F2ZRGybId5fthyK6ltvVS7lJ8nTp2tuLl%2BPUCGulToagckTIg9NgckTO3j872d0LjRVIM4TJS8T5PjkOSL0Llm7ApvvzP32y9%2FTxNz%2FAagKjTjhR6qDIy4Hxo5NLJQmUOOlpVMKK%2FflH0ZXRX7efIhLPDBkYOn5NZblpb6JtpkCzG0jiEl1ToqtKUNWHzU8NstTsz%2F9amwQiNTWIlJnaipRRX01sHh9nYOVhJazVXBo057wwpCKM6n6jFXicUr8e%2BEFAa8jsqHWh8ee%2FAAAA%2F%2F8BAAD%2F%2F0AbYOeVBAAA | 192.243.59.12 | 200 OK | 7 B |
URL GET HTTP/1.1skipdissatisfactionengland.com/ren.gif?sid=H4sIAAAAAAAC%2F1RS32scVRS%2Bk6ao9KFY%2BqQI%2B6Cg0GxmZjczu%2FYhWGOkmDalURQR5M69dzfXvTN3uHdmZ5OnYEH6uPoXTL5NGvqDYgUfLXUTEQwoWZ8CGvwLBLH0xT7IrqHB83DPOff7Lnz3O%2BeLzfyI%2BMjp4cIVvS6VorNzVbfy%2Bkeed7GyJJO8V%2Bk1gk%2BD%2BsWK6b7ZDKruG5V3BevoWd%2F1XNdzvcqiNKKle7NjEDK91%2FSqTbda96veXB098%2F%2Fe5g4sdcC7R%2BQcJB9N7znnIdkQSfz1grCdTKcX3olzRTNt0OU7HySdRBcJ4pOyZRy0kp1jNrQ9WHwInWxP5EJ3nxEjOSLOjw8RJTvHIhF1tyY6IwWRIOJnUHSHEGoISYdg%2BgYkPyAA47i6jCS%2BdVWbgq79h9IxOiLTT%2F6GLEZk%2BvfzSOL7l5TsVVa0yjOpE4teq4TsDSHbQ6T5LrL1KchiFyz7HJL%2FTGafLCGJt5at0pD88FXWijzhBWKGU7c2U49a%2FkzD86MZ7ofNsMYbjRoXE4OkHEK2hlCiD2pPIbcOcukgbznIUwcxP6wwz%2FNClzPqNpqM1XgoooC7Hg1bHvXcoIGcjf%2FQR5b2wVQfzGwgNRvoyC8P5s7B5I9gV0tY7sBmBF1eohAEhSUoKEEhCYqMoOiW21xZ35a3uLJ55B1n%2FzjXyoHO2pt0W2dtkRBQ04fh5WZ6RF4ce%2Bh8PPoWHXFYYTyizK%2FPhTVW82nEG03uCuYJt8ldGgYCVpaQdgrUOliXIxL%2B8RtSOSIvxXcQ0V1YtQsmXwPNXwEtStDVEuvJXZrQLDedKjUZuC6RZtPI1pxNdURengxxeeEFCLY%2F%2F8s%2F5597%2FP3zYKZEakp8JvcI2urm4LouyNZ1XVjyYDnNZCzX6XjAKxnNxOk774m1Qht%2BecH2b7%2FFxsC4vPe%2BsNkSTbhM2pbcvSQ5F2ZRGybId5fthyK6ltvVS7lJ8nTp2tuLl%2BPUCGulToagckTIg9NgckTO3j872d0LjRVIM4TJS8T5PjkOSL0Llm7ApvvzP32y9%2FTxNz%2FAagKjTjhR6qDIy4Hxo5NLJQmUOOlpVMKK%2FflH0ZXRX7efIhLPDBkYOn5NZblpb6JtpkCzG0jiEl1ToqtKUNWHzU8NstTsz%2F9amwQiNTWIlJnaipRRX01sHh9nYOVhJazVXBo057wwpCKM6n6jFXicUr8e%2BEFAa8jsqHWh8ee%2FAAAA%2F%2F8BAAD%2F%2F0AbYOeVBAAA IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerLet's Encrypt Subjectskipdissatisfactionengland.com Fingerprint0C:F8:6F:97:80:DE:2F:0C:B8:7E:F8:BB:79:80:6A:D9:1E:1F:70:83 ValidityTue, 23 Apr 2024 10:43:21 GMT - Mon, 22 Jul 2024 10:43:20 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RS32scVRS%2Bk6ao9KFY%2BqQI%2B6Cg0GxmZjczu%2FYhWGOkmDalURQR5M69dzfXvTN3uHdmZ5OnYEH6uPoXTL5NGvqDYgUfLXUTEQwoWZ8CGvwLBLH0xT7IrqHB83DPOff7Lnz3O%2BeLzfyI%2BMjp4cIVvS6VorNzVbfy%2Bkeed7GyJJO8V%2Bk1gk%2BD%2BsWK6b7ZDKruG5V3BevoWd%2F1XNdzvcqiNKKle7NjEDK91%2FSqTbda96veXB098%2F%2Fe5g4sdcC7R%2BQcJB9N7znnIdkQSfz1grCdTKcX3olzRTNt0OU7HySdRBcJ4pOyZRy0kp1jNrQ9WHwInWxP5EJ3nxEjOSLOjw8RJTvHIhF1tyY6IwWRIOJnUHSHEGoISYdg%2BgYkPyAA47i6jCS%2BdVWbgq79h9IxOiLTT%2F6GLEZk%2BvfzSOL7l5TsVVa0yjOpE4teq4TsDSHbQ6T5LrL1KchiFyz7HJL%2FTGafLCGJt5at0pD88FXWijzhBWKGU7c2U49a%2FkzD86MZ7ofNsMYbjRoXE4OkHEK2hlCiD2pPIbcOcukgbznIUwcxP6wwz%2FNClzPqNpqM1XgoooC7Hg1bHvXcoIGcjf%2FQR5b2wVQfzGwgNRvoyC8P5s7B5I9gV0tY7sBmBF1eohAEhSUoKEEhCYqMoOiW21xZ35a3uLJ55B1n%2FzjXyoHO2pt0W2dtkRBQ04fh5WZ6RF4ce%2Bh8PPoWHXFYYTyizK%2FPhTVW82nEG03uCuYJt8ldGgYCVpaQdgrUOliXIxL%2B8RtSOSIvxXcQ0V1YtQsmXwPNXwEtStDVEuvJXZrQLDedKjUZuC6RZtPI1pxNdURengxxeeEFCLY%2F%2F8s%2F5597%2FP3zYKZEakp8JvcI2urm4LouyNZ1XVjyYDnNZCzX6XjAKxnNxOk774m1Qht%2BecH2b7%2FFxsC4vPe%2BsNkSTbhM2pbcvSQ5F2ZRGybId5fthyK6ltvVS7lJ8nTp2tuLl%2BPUCGulToagckTIg9NgckTO3j872d0LjRVIM4TJS8T5PjkOSL0Llm7ApvvzP32y9%2FTxNz%2FAagKjTjhR6qDIy4Hxo5NLJQmUOOlpVMKK%2FflH0ZXRX7efIhLPDBkYOn5NZblpb6JtpkCzG0jiEl1ToqtKUNWHzU8NstTsz%2F9amwQiNTWIlJnaipRRX01sHh9nYOVhJazVXBo057wwpCKM6n6jFXicUr8e%2BEFAa8jsqHWh8ee%2FAAAA%2F%2F8BAAD%2F%2F0AbYOeVBAAA HTTP/1.1
Host: skipdissatisfactionengland.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Cookie: u_pl=22729397; uid_id2=cfb1e16e-da03-4bf2-812b-d27973d883de:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleccdbac24573c32abd89d0ec1e09d0a76e=[5194761,5194763]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 23:29:50 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2ca0a9a8bfd657cb5928433d78a4e079
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| skipdissatisfactionengland.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Fe1%2F6f%2Fbb%2Fe16fbbe9f31c82c23d1d57f9726b5fc7%2F1654616215.html&l=1038&fd=131 | 192.243.59.12 | 200 OK | 0 B |
URL GET HTTP/1.1skipdissatisfactionengland.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Fe1%2F6f%2Fbb%2Fe16fbbe9f31c82c23d1d57f9726b5fc7%2F1654616215.html&l=1038&fd=131 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerLet's Encrypt Subjectskipdissatisfactionengland.com Fingerprint0C:F8:6F:97:80:DE:2F:0C:B8:7E:F8:BB:79:80:6A:D9:1E:1F:70:83 ValidityTue, 23 Apr 2024 10:43:21 GMT - Mon, 22 Jul 2024 10:43:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Fe1%2F6f%2Fbb%2Fe16fbbe9f31c82c23d1d57f9726b5fc7%2F1654616215.html&l=1038&fd=131 HTTP/1.1
Host: skipdissatisfactionengland.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Cookie: u_pl=22729397; uid_id2=cfb1e16e-da03-4bf2-812b-d27973d883de:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleccdbac24573c32abd89d0ec1e09d0a76e=[5194761,5194763]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 23:29:50 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.creative-bars1.com/sb/ssp/in-page_push/os/android/2/img/close.png | 172.67.141.24 | 200 OK | 2.0 kB |
URL GET HTTP/3cdn.creative-bars1.com/sb/ssp/in-page_push/os/android/2/img/close.png IP172.67.141.24:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typePNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced Hash2cecae5111d5ff932a996679215ad573 f4c63abb5dc373aba5bc144c3831d98516cc7cc9 31f6aad6a88eca32f245dc6d0e030ef422f306b4f8479855b30e59b6dc134ebc
GET /sb/ssp/in-page_push/os/android/2/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:51 GMT
content-type: image/png
content-length: 2005
last-modified: Fri, 19 Jan 2024 14:19:44 GMT
etag: "65aa8500-7d5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 6247795
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=teizD%2FErfQmidiWPxIfM86GVWhQ2E32xv23guqXyIfijTbhfL2HReDPIKeuWzusaJt6G6LPvixoxZtS2xqgRc4YZyAsBCVYEgTQgSkbikmF8ghrP%2FHtbjIN6MytZYhrSpW2KN769UvJO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b75fcd4712e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.barscreative1.com/sb/au/e1/6f/bb/e16fbbe9f31c82c23d1d57f9726b5fc7/1654616215.html | 45.133.44.4 | 200 OK | 1.6 kB |
URL GET HTTP/2cdn.barscreative1.com/sb/au/e1/6f/bb/e16fbbe9f31c82c23d1d57f9726b5fc7/1654616215.html IP45.133.44.4:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerLet's Encrypt Subjectcdn.barscreative1.com FingerprintF6:54:F4:B9:EB:AD:1E:FA:8F:76:B9:75:20:9B:41:57:32:37:94:E3 ValiditySun, 10 Mar 2024 03:01:32 GMT - Sat, 08 Jun 2024 03:01:31 GMT
File typegzip compressed data, from Unix Hashd5c48554a101ab083721a687f0902ab2 f44d36aa268827ab1d63e93ed39299dd1f578236 b0e6ee1935f4f3eb47307eb0db48e87ef612c82fe13e6608a9cfdd8669bdfab5
GET /sb/au/e1/6f/bb/e16fbbe9f31c82c23d1d57f9726b5fc7/1654616215.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vidspeeds.com
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:29:50 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Tue, 07 Jun 2022 15:37:00 GMT
etag: W/"629f709c-40e"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Sat, 27 Apr 2024 00:29:50 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap | 142.250.74.106 | 200 OK | 1.2 kB |
URL GET HTTP/3fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap IP142.250.74.106:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50 ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT
File typegzip compressed data, max compression Hasha0d615207805f1404dc6379f1c9956fe d8a1691f386ed793691e125688747691882eeba2 47ce7a4be0255914b65c59f999bbad4d11dd854cf72f70ee8c13feccac86dba6
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 23:29:51 GMT
date: Fri, 26 Apr 2024 23:29:51 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdn.cloudimagesb.com/si/dd/6f/49/dd6f49d52be04421c9e92e386605427c/1616775483.jpg | 45.133.44.9 | 200 OK | 12 kB |
URL GET HTTP/2cdn.cloudimagesb.com/si/dd/6f/49/dd6f49d52be04421c9e92e386605427c/1616775483.jpg IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3 Hash117939297b964c82e50b6a48b565ac27 31b347c0e45912494b3602104e4886f6fcb56075 b581117d281a718d921c7c8493c088ff8ea5c98d173a0e6a392bed6f6cf916a5
GET /si/dd/6f/49/dd6f49d52be04421c9e92e386605427c/1616775483.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:29:51 GMT
content-type: image/jpeg
content-length: 12115
server: nginx/1.21.6
last-modified: Fri, 26 Mar 2021 16:18:13 GMT
etag: "605e0945-2f53"
expires: Sun, 28 Apr 2024 23:29:51 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| skipdissatisfactionengland.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fstyle.css&l=4682&fd=38 | 192.243.59.20 | 200 OK | 0 B |
URL GET HTTP/1.1skipdissatisfactionengland.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fstyle.css&l=4682&fd=38 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerLet's Encrypt Subjectskipdissatisfactionengland.com Fingerprint0C:F8:6F:97:80:DE:2F:0C:B8:7E:F8:BB:79:80:6A:D9:1E:1F:70:83 ValidityTue, 23 Apr 2024 10:43:21 GMT - Mon, 22 Jul 2024 10:43:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fstyle.css&l=4682&fd=38 HTTP/1.1
Host: skipdissatisfactionengland.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Cookie: u_pl=22729397; uid_id2=cfb1e16e-da03-4bf2-812b-d27973d883de:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleccdbac24573c32abd89d0ec1e09d0a76e=[5194761,5194763]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 23:29:51 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.vidspeeds.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:02:10 GMT
expires: Sat, 26 Apr 2025 06:02:10 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 62861
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.vidspeeds.com/js/jquery.min.js | 188.114.96.1 | 200 OK | 50 kB |
URL GET HTTP/3www.vidspeeds.com/js/jquery.min.js IP188.114.96.1:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGoogle Trust Services LLC Subjectvidspeeds.com FingerprintA7:BD:28:0E:94:10:78:DC:FA:C3:D0:58:DF:85:4E:B1:13:BA:FD:8D ValiditySat, 09 Mar 2024 21:18:35 GMT - Fri, 07 Jun 2024 21:18:34 GMT
File typeJavaScript source, ASCII text, with very long lines (32086) Hash8101d596b2b8fa35fe3a634ea342d7c3 d6c1f41972de07b09bfa63d2e50f9ab41ec372bd 540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441
GET /js/jquery.min.js HTTP/1.1
Host: www.vidspeeds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/embed-n8dd3oswwv0x.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: application/javascript
last-modified: Mon, 24 Jan 2022 12:56:06 GMT
etag: W/"1762a-5d6537de27f4f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2583
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r901Hq8%2FEPDcSyWcbESQH1KWDSTVdARW0Y4Cdw7gHQlbWrSJRUPaxZfjtlrWAIs25u0aE0%2Bwffmrobr02KuqzVYdtXwDyEcPPcqu7fbOEYk607d%2BDH0DuphlUWXYbwDdiMZTVg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b63ed28b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| skipdissatisfactionengland.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fjs%2Fscript.js&l=404&fd=36 | 192.243.59.20 | 200 OK | 0 B |
URL GET HTTP/1.1skipdissatisfactionengland.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fjs%2Fscript.js&l=404&fd=36 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerLet's Encrypt Subjectskipdissatisfactionengland.com Fingerprint0C:F8:6F:97:80:DE:2F:0C:B8:7E:F8:BB:79:80:6A:D9:1E:1F:70:83 ValidityTue, 23 Apr 2024 10:43:21 GMT - Mon, 22 Jul 2024 10:43:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fjs%2Fscript.js&l=404&fd=36 HTTP/1.1
Host: skipdissatisfactionengland.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Cookie: u_pl=22729397; uid_id2=cfb1e16e-da03-4bf2-812b-d27973d883de:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleccdbac24573c32abd89d0ec1e09d0a76e=[5194761,5194763]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 23:29:51 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| skipdissatisfactionengland.com/pixel/sbs?c=1 | 192.243.59.20 | 200 OK | 0 B |
URL GET HTTP/1.1skipdissatisfactionengland.com/pixel/sbs?c=1 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerLet's Encrypt Subjectskipdissatisfactionengland.com Fingerprint0C:F8:6F:97:80:DE:2F:0C:B8:7E:F8:BB:79:80:6A:D9:1E:1F:70:83 ValidityTue, 23 Apr 2024 10:43:21 GMT - Mon, 22 Jul 2024 10:43:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbs?c=1 HTTP/1.1
Host: skipdissatisfactionengland.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Cookie: u_pl=22729397; uid_id2=cfb1e16e-da03-4bf2-812b-d27973d883de:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleccdbac24573c32abd89d0ec1e09d0a76e=[5194761,5194763]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 23:29:51 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| skipdissatisfactionengland.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2tcVRS%2BL01R6aJYulKEWSgoNJP35vfYRbDGSDFtSqsoIsj99abXue%2Fdx73vzZtkFSxIl6N%2Fwcs3SUN%2FUKzg0lInEcGAknEV0OBfIIilG7uQGUODZ3HPOff7Lnz3O%2BeLjeyQVJDRg8VLZk1pTefrZb%2F0%2BkdBcL60rOKsX%2Bq3Gp82audLtvdmu1H23yi9K3nXzFf8wPcDPygtKStD05%2BfgFDJvXZQbvvlWqUc1Gvo2%2F%2F3LvPgqAfROyRnoMR4dtc7C8VHiKOvF6XrpiY5906UaZoai57Y%2FiDuxiaPER2XofUQxttHbBi3v%2FQQJt6ayoXpPSMyNSbejw%2FB4u0jkWC9zalOpiFjMHEKeW8EqUdQdARubkCJfQJwgcsriKNbl43N6ep%2FKJ2gYzL75G%2BofExmfz%2BLOLp%2FQat%2B6ZrRWapM7NAPC6j%2BCKozQpLtIF2bgcp3wNPPocTPZP7JMuJoc8VpAyUOXuUhC2TQkHOC%2BtW5Ggsrc62gwuZEpdluVkWrVRVyapBSI6hwBC0HoO4EMuchUx6y0EOWeIjEQYkHQdD0Bad%2Bq815VTQlawg%2FoM0woIHfaCHjkz8MkCYDcD0At%2BtI7Dq66sv9%2BhnY7BHc9QJOeHApQU8UyCVB7ghySpArgjwlyHvFltCu4opbQruMBUe5cpSrxdCknQ26ZdKOjAmoHcCKYiM5JC9OPPQ%2BHn%2BLrjwoccEor9TqzSqvVigTrbbwJQ%2Bk3xY%2BbTYknCqg3Ayo87CmxqT5x29I1Ji8FN0BoztwegdcvQaavQKaF6DXC6zFd2lM08x2y9SmEKZAks4iXfU29CF5eTrElcUXIPnewi%2F%2FnH3u8ffPg9sCiS3wmdol6Oibw6smJ5tXTe7Ig5UkVZFao5MBX0tpKk%2FeeU%2Bu5saKi4tucPstPgEm5b33pUuXaSxU3HHk7gUlhLRLxnJJvrvoPpTsSuauX8hsnCXLV95euhglVjqnTDwCVWNCHpwEV2Ny%2Bv7p6e6ea12DsiPYrECU7ZGjgDI74Mk6XLK38NMnu08ff%2FMDnCGw%2BpjDEg95VgxthR1fakWg5XFPWQEn9xYesUvjv24%2FBZPPDBlaOnlNVbHhbqJjZ0DTG4ijAj1boKcLUD2Ay04M08TuLfxanQaYnhkybWc2mbb6q6nNk%2BMUnDooVX3RZDKUTSZr9VoouWD1OvN5yNlk0TlSNw7Ptf78FwAA%2F%2F8BAAD%2F%2F8DPtQ%2BVBAAA | 192.243.59.12 | 200 OK | 7 B |
URL GET HTTP/1.1skipdissatisfactionengland.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2tcVRS%2BL01R6aJYulKEWSgoNJP35vfYRbDGSDFtSqsoIsj99abXue%2Fdx73vzZtkFSxIl6N%2Fwcs3SUN%2FUKzg0lInEcGAknEV0OBfIIilG7uQGUODZ3HPOff7Lnz3O%2BeLjeyQVJDRg8VLZk1pTefrZb%2F0%2BkdBcL60rOKsX%2Bq3Gp82audLtvdmu1H23yi9K3nXzFf8wPcDPygtKStD05%2BfgFDJvXZQbvvlWqUc1Gvo2%2F%2F3LvPgqAfROyRnoMR4dtc7C8VHiKOvF6XrpiY5906UaZoai57Y%2FiDuxiaPER2XofUQxttHbBi3v%2FQQJt6ayoXpPSMyNSbejw%2FB4u0jkWC9zalOpiFjMHEKeW8EqUdQdARubkCJfQJwgcsriKNbl43N6ep%2FKJ2gYzL75G%2BofExmfz%2BLOLp%2FQat%2B6ZrRWapM7NAPC6j%2BCKozQpLtIF2bgcp3wNPPocTPZP7JMuJoc8VpAyUOXuUhC2TQkHOC%2BtW5Ggsrc62gwuZEpdluVkWrVRVyapBSI6hwBC0HoO4EMuchUx6y0EOWeIjEQYkHQdD0Bad%2Bq815VTQlawg%2FoM0woIHfaCHjkz8MkCYDcD0At%2BtI7Dq66sv9%2BhnY7BHc9QJOeHApQU8UyCVB7ghySpArgjwlyHvFltCu4opbQruMBUe5cpSrxdCknQ26ZdKOjAmoHcCKYiM5JC9OPPQ%2BHn%2BLrjwoccEor9TqzSqvVigTrbbwJQ%2Bk3xY%2BbTYknCqg3Ayo87CmxqT5x29I1Ji8FN0BoztwegdcvQaavQKaF6DXC6zFd2lM08x2y9SmEKZAks4iXfU29CF5eTrElcUXIPnewi%2F%2FnH3u8ffPg9sCiS3wmdol6Oibw6smJ5tXTe7Ig5UkVZFao5MBX0tpKk%2FeeU%2Bu5saKi4tucPstPgEm5b33pUuXaSxU3HHk7gUlhLRLxnJJvrvoPpTsSuauX8hsnCXLV95euhglVjqnTDwCVWNCHpwEV2Ny%2Bv7p6e6ea12DsiPYrECU7ZGjgDI74Mk6XLK38NMnu08ff%2FMDnCGw%2BpjDEg95VgxthR1fakWg5XFPWQEn9xYesUvjv24%2FBZPPDBlaOnlNVbHhbqJjZ0DTG4ijAj1boKcLUD2Ay04M08TuLfxanQaYnhkybWc2mbb6q6nNk%2BMUnDooVX3RZDKUTSZr9VoouWD1OvN5yNlk0TlSNw7Ptf78FwAA%2F%2F8BAAD%2F%2F8DPtQ%2BVBAAA IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerLet's Encrypt Subjectskipdissatisfactionengland.com Fingerprint0C:F8:6F:97:80:DE:2F:0C:B8:7E:F8:BB:79:80:6A:D9:1E:1F:70:83 ValidityTue, 23 Apr 2024 10:43:21 GMT - Mon, 22 Jul 2024 10:43:20 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz2tcVRS%2BL01R6aJYulKEWSgoNJP35vfYRbDGSDFtSqsoIsj99abXue%2Fdx73vzZtkFSxIl6N%2Fwcs3SUN%2FUKzg0lInEcGAknEV0OBfIIilG7uQGUODZ3HPOff7Lnz3O%2BeLjeyQVJDRg8VLZk1pTefrZb%2F0%2BkdBcL60rOKsX%2Bq3Gp82audLtvdmu1H23yi9K3nXzFf8wPcDPygtKStD05%2BfgFDJvXZQbvvlWqUc1Gvo2%2F%2F3LvPgqAfROyRnoMR4dtc7C8VHiKOvF6XrpiY5906UaZoai57Y%2FiDuxiaPER2XofUQxttHbBi3v%2FQQJt6ayoXpPSMyNSbejw%2FB4u0jkWC9zalOpiFjMHEKeW8EqUdQdARubkCJfQJwgcsriKNbl43N6ep%2FKJ2gYzL75G%2BofExmfz%2BLOLp%2FQat%2B6ZrRWapM7NAPC6j%2BCKozQpLtIF2bgcp3wNPPocTPZP7JMuJoc8VpAyUOXuUhC2TQkHOC%2BtW5Ggsrc62gwuZEpdluVkWrVRVyapBSI6hwBC0HoO4EMuchUx6y0EOWeIjEQYkHQdD0Bad%2Bq815VTQlawg%2FoM0woIHfaCHjkz8MkCYDcD0At%2BtI7Dq66sv9%2BhnY7BHc9QJOeHApQU8UyCVB7ghySpArgjwlyHvFltCu4opbQruMBUe5cpSrxdCknQ26ZdKOjAmoHcCKYiM5JC9OPPQ%2BHn%2BLrjwoccEor9TqzSqvVigTrbbwJQ%2Bk3xY%2BbTYknCqg3Ayo87CmxqT5x29I1Ji8FN0BoztwegdcvQaavQKaF6DXC6zFd2lM08x2y9SmEKZAks4iXfU29CF5eTrElcUXIPnewi%2F%2FnH3u8ffPg9sCiS3wmdol6Oibw6smJ5tXTe7Ig5UkVZFao5MBX0tpKk%2FeeU%2Bu5saKi4tucPstPgEm5b33pUuXaSxU3HHk7gUlhLRLxnJJvrvoPpTsSuauX8hsnCXLV95euhglVjqnTDwCVWNCHpwEV2Ny%2Bv7p6e6ea12DsiPYrECU7ZGjgDI74Mk6XLK38NMnu08ff%2FMDnCGw%2BpjDEg95VgxthR1fakWg5XFPWQEn9xYesUvjv24%2FBZPPDBlaOnlNVbHhbqJjZ0DTG4ijAj1boKcLUD2Ay04M08TuLfxanQaYnhkybWc2mbb6q6nNk%2BMUnDooVX3RZDKUTSZr9VoouWD1OvN5yNlk0TlSNw7Ptf78FwAA%2F%2F8BAAD%2F%2F8DPtQ%2BVBAAA HTTP/1.1
Host: skipdissatisfactionengland.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Cookie: u_pl=22729397; uid_id2=cfb1e16e-da03-4bf2-812b-d27973d883de:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleccdbac24573c32abd89d0ec1e09d0a76e=[5194761,5194763]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 23:29:51 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 127a66a57b23913f7cdf8e9995365ad6
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.creative-bars1.com/sb/ssp/in-page_push/os/android/2/css/animate.css | 172.67.141.24 | 200 OK | 15 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/ssp/in-page_push/os/android/2/css/animate.css IP172.67.141.24:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
Hash3d4123dbfb33d27a5cfdfcfa91df6783 e7d0eeeec54b848f0bc3da8685fa3bc88429d660 cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887
GET /sb/ssp/in-page_push/os/android/2/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vidspeeds.com
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:29:50 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:19:44 GMT
etag: W/"65aa8500-13361"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 205267
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=491bUloDPEHCllT2HZ5a867dorY%2B%2BHLvIC66ZX7NNCZI7SQdPzKhy8cbADgwNG58ivqoeez2s3wPzfSSCNUksSiay9rbnyFkOxPfCH5b3XUGP4QS9lSuljjv98IhbhRW4Mc2mKXu3%2FCy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b756f8f0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| a.dramafuntv.com/templates/3osss/css/jasny-bootstrap.min.css | 172.67.188.83 | 301 Moved Permanently | 14 kB |
URL GET HTTP/2a.dramafuntv.com/templates/3osss/css/jasny-bootstrap.min.css IP172.67.188.83:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerGoogle Trust Services LLC Subjectdramafuntv.com Fingerprint1C:9B:EA:2E:14:38:06:7D:C3:95:38:BE:C8:C7:09:47:4D:14:D7:D6 ValidityTue, 09 Apr 2024 17:14:32 GMT - Mon, 08 Jul 2024 17:14:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /templates/3osss/css/jasny-bootstrap.min.css HTTP/1.1
Host: a.dramafuntv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 26 Apr 2024 23:29:47 GMT
content-type: text/html
location: https://i.dramafuntv.com/templates/3osss/css/jasny-bootstrap.min.css
cache-control: max-age=31536000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wTblWGJ%2FoJCIDQBKJFWHNwOpf4DsRU5oO2ArVAG8Qgom2czurmQb5PZY68SQy3432f9rSLZiAi4otsAHKaHJdZSmZatbeY%2F7Vke4XE1bqZ99M8DwHtpuBUrmZWAw1eZpCkj0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b5dcf0b0b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| live.demand.supply/ds.2.html | 104.17.38.115 | 200 OK | 413 B |
URL GET HTTP/3live.demand.supply/ds.2.html IP104.17.38.115:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (430), with no line terminators Hash68dce237203af5e16657b39e1f2e7b46 8084ece9e2500c1a0731aaf8f33290744b174b9c 8534d0076676e85517a298ded722e84bb64abf655fbc565588f76a7e26ad4680
GET /ds.2.html HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f.aydogs.com
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=2592000,immutable,stale-if-error=604800
cache-status: "Netlify Edge"; hit
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-nf-request-id: 01HRPPMR78KDFEE9D8AT6TTABD
cf-cache-status: HIT
age: 1410218
set-cookie: __cf_bm=fBirO.AXxzr1w12mC7J3KhX_XdocTMRjrSDljtoxhm8-1714174188-1.0.1.1-pFmmG0iFCYwwHSHWzu.qS0daX421GrTN.njFdfuCfXOlitvq8AmHjm4uo7A9onQ95.JkHNeJAilGbOLhTYVT0Q; path=/; expires=Fri, 26-Apr-24 23:59:48 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b62bbe25691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| live.demand.supply/e/e.js?r=aydogs.com_fluid_all_down.ad&pn=2&sn=3&pc=0.29404645040631294&ds=false&e=wdp&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= | 104.17.38.115 | 200 OK | 0 B |
URL HEAD HTTP/3live.demand.supply/e/e.js?r=aydogs.com_fluid_all_down.ad&pn=2&sn=3&pc=0.29404645040631294&ds=false&e=wdp&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= IP104.17.38.115:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /e/e.js?r=aydogs.com_fluid_all_down.ad&pn=2&sn=3&pc=0.29404645040631294&ds=false&e=wdp&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f.aydogs.com
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: s-maxage=2592000,stale-if-error=604800
cache-status: "Netlify Edge"; hit
cf-bgj: minify
cf-polished: origSize=2
etag: "fbee6989874cef86694d7a2d31af072a-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01HRWM7TR9SZ429P53WRA8SHQ0
cf-cache-status: HIT
age: 1410218
accept-ranges: bytes
set-cookie: __cf_bm=QIZ_kantyblAjpQGmXBBRFf0wraVSkNpkQ9QKgFD.Ew-1714174188-1.0.1.1-ehRKzfYNhqjl.CeDxDdgcxLpQ0CsMHiE4cDwn.2mprYYYir0ZxHOkYU23nETkDGuTQxye01zfMTAtDMHyE2bFA; path=/; expires=Fri, 26-Apr-24 23:59:48 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b67f8beb527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15740, version 1.0 Hashb9c29351c46f3e8c8631c4002457f48a e57e59c5780995ff2937ab2b511a769212974a87 f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.vidspeeds.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:32:46 GMT
expires: Fri, 25 Apr 2025 02:32:46 GMT
cache-control: public, max-age=31536000
age: 161825
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.vidspeeds.com/player8/jwplayer.js | 188.114.96.1 | 200 OK | 109 kB |
URL GET HTTP/3www.vidspeeds.com/player8/jwplayer.js IP188.114.96.1:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGoogle Trust Services LLC Subjectvidspeeds.com FingerprintA7:BD:28:0E:94:10:78:DC:FA:C3:D0:58:DF:85:4E:B1:13:BA:FD:8D ValiditySat, 09 Mar 2024 21:18:35 GMT - Fri, 07 Jun 2024 21:18:34 GMT
File typeJavaScript source, ASCII text, with very long lines (65142) Size109 kB (108648 bytes) Hash0ad5591b17de40e5f42710abb4a2bb44 1e386d1dc359f67c8d09dd5a1891910d5f4ac8b8 2af14e12abe35d667b3ea67877eb5f264cb617bb2526930ce0ae40c313782545
GET /player8/jwplayer.js HTTP/1.1
Host: www.vidspeeds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/embed-n8dd3oswwv0x.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: application/javascript
last-modified: Mon, 24 Jan 2022 12:56:06 GMT
etag: W/"1a868-5d6537dee71eb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2583
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ikne%2BF1yBB3NIYhondJroVAGcHYuWipbim6q7L1JqepGxCEJ3s3%2Biy6JVRAgps4me3vmrZojz3u70lsFcIdV%2BEcnPbbDlslex8JEsc2IRpEQvsmLvWfRVOw6qsC2sUZCEPtzbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b63fd2fb4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| live.demand.supply/cp/aydogs.com_728x90_sticky_display_top_top-ads?mlcu=84cb251a-4e5c-4c01-b27b-556590636949&mlos=li&mlbr=fi&mlla=en&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= | 104.17.38.115 | 200 OK | 29 B |
URL GET HTTP/3live.demand.supply/cp/aydogs.com_728x90_sticky_display_top_top-ads?mlcu=84cb251a-4e5c-4c01-b27b-556590636949&mlos=li&mlbr=fi&mlla=en&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= IP104.17.38.115:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash855949788622d7b29e21d93b8c4481e2 ec84e98f2bbb78e223208761bc2299925e73e0e7 b8e29f864f703d4d7611523d1188d9183f6f07d00904ae9ffca870105dfda027
GET /cp/aydogs.com_728x90_sticky_display_top_top-ads?mlcu=84cb251a-4e5c-4c01-b27b-556590636949&mlos=li&mlbr=fi&mlla=en&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f.aydogs.com
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: text/plain;charset=UTF-8
content-length: 29
access-control-allow-origin: *
cache-control: private,max-age=3600
set-cookie: __cf_bm=kiwWAB2qPGc5BDiM58A0EKHUqP9NX1pdnrEJNV6Q_Rk-1714174188-1.0.1.1-pDG4vvMgaxMBRp5w7j4xXG07xdVCvbPviBshQIguGZ.Wy1bY2XJPR4PgF2E3oP2SGhALyh6Fe8D8hXA8C_d9xA; path=/; expires=Fri, 26-Apr-24 23:59:48 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b634d65b527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| skipdissatisfactionengland.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fanimate.css&l=78689&fd=35 | 192.243.59.12 | 200 OK | 0 B |
URL GET HTTP/1.1skipdissatisfactionengland.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fanimate.css&l=78689&fd=35 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerLet's Encrypt Subjectskipdissatisfactionengland.com Fingerprint0C:F8:6F:97:80:DE:2F:0C:B8:7E:F8:BB:79:80:6A:D9:1E:1F:70:83 ValidityTue, 23 Apr 2024 10:43:21 GMT - Mon, 22 Jul 2024 10:43:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fanimate.css&l=78689&fd=35 HTTP/1.1
Host: skipdissatisfactionengland.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Cookie: u_pl=22729397; uid_id2=cfb1e16e-da03-4bf2-812b-d27973d883de:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleccdbac24573c32abd89d0ec1e09d0a76e=[5194761,5194763]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 23:29:51 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| a.dramafuntv.com/templates/3osss/css/bootstrap.min.rtl.css | 172.67.188.83 | 301 Moved Permanently | 26 kB |
URL GET HTTP/2a.dramafuntv.com/templates/3osss/css/bootstrap.min.rtl.css IP172.67.188.83:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerGoogle Trust Services LLC Subjectdramafuntv.com Fingerprint1C:9B:EA:2E:14:38:06:7D:C3:95:38:BE:C8:C7:09:47:4D:14:D7:D6 ValidityTue, 09 Apr 2024 17:14:32 GMT - Mon, 08 Jul 2024 17:14:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /templates/3osss/css/bootstrap.min.rtl.css HTTP/1.1
Host: a.dramafuntv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 26 Apr 2024 23:29:47 GMT
content-type: text/html
location: https://i.dramafuntv.com/templates/3osss/css/bootstrap.min.rtl.css
cache-control: max-age=31536000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ijfz5ocw7BIhGXiSXXp4rhZ7pSk8AFcysWelGmnwRF1hjnX17gvLqHN5x7waMq7c1qn4hEW1Afdl0EXg%2FMB84tDSxDI%2B54HMsVbpkbTPiAjL7ovFa3amRrjGFVrt0ajSyHjA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b5dcf070b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| i.dramafuntv.com/templates/3osss/css/bootstrap.min.css | 172.67.188.83 | 200 OK | 121 kB |
URL GET HTTP/3i.dramafuntv.com/templates/3osss/css/bootstrap.min.css IP172.67.188.83:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerGoogle Trust Services LLC Subjectdramafuntv.com Fingerprint1C:9B:EA:2E:14:38:06:7D:C3:95:38:BE:C8:C7:09:47:4D:14:D7:D6 ValidityTue, 09 Apr 2024 17:14:32 GMT - Mon, 08 Jul 2024 17:14:31 GMT
File typeASCII text, with very long lines (65367), with CRLF line terminators Size121 kB (120620 bytes) Hash004413292f4cbd7de7743ff62c9e37d1 b91e33f6f1195e8e97249ddcbc9beaaf88c1e5ef d3de17f0f1d5202011720feb9d84e012bb1213684f357012933997b4e854c76a
GET /templates/3osss/css/bootstrap.min.css HTTP/1.1
Host: i.dramafuntv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f.aydogs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:47 GMT
content-type: text/css
last-modified: Fri, 18 Dec 2020 13:13:43 GMT
etag: W/"5fdcab07-1d72c"
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fdrVOjb%2BLNs59VEohHAoZ%2BXJxKCX5x272KaW3D54Ytm5qTqJFlJZSWCr0rJAii9al3fGkCJF%2FwF%2Fu2cEyNSjv2ht54C0JvK943e2uETASB1aeuIPSQKZzXtfQxOv8cjUf9hv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b5f3bfbb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| live.demand.supply/cp/aydogs.com_large_video?mlcu=84cb251a-4e5c-4c01-b27b-556590636949&mlos=li&mlbr=fi&mlla=en&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= | 104.17.38.115 | 200 OK | 29 B |
URL GET HTTP/3live.demand.supply/cp/aydogs.com_large_video?mlcu=84cb251a-4e5c-4c01-b27b-556590636949&mlos=li&mlbr=fi&mlla=en&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= IP104.17.38.115:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash924f09abfef68c502878e1d53e339519 dd5ac7aac1ad0ae77d1b21b04a2de14bc6d3b87b 35653637e1a21a420808473eac13d4b0e59c6db8bff931ce10ca9ce8a266b53a
GET /cp/aydogs.com_large_video?mlcu=84cb251a-4e5c-4c01-b27b-556590636949&mlos=li&mlbr=fi&mlla=en&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f.aydogs.com
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: text/plain;charset=UTF-8
content-length: 29
access-control-allow-origin: *
cache-control: private,max-age=3600
set-cookie: __cf_bm=AgZL7MDoEnIE1.8aNCiigjcvhuwuCqulpw1TrOBVaVI-1714174188-1.0.1.1-EKiXw9Kjb_JAuXy3xh_F14mESSSogXi.hCuHV23Phun9K7TlqXHDeuYoz_Nl4e_pnd1FESB.wG71BnU6ywXjSA; path=/; expires=Fri, 26-Apr-24 23:59:48 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b633d64b527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.vidspeeds.com/js/jquery.cookie.js | 188.114.96.1 | 200 OK | 4.3 kB |
URL GET HTTP/3www.vidspeeds.com/js/jquery.cookie.js IP188.114.96.1:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGoogle Trust Services LLC Subjectvidspeeds.com FingerprintA7:BD:28:0E:94:10:78:DC:FA:C3:D0:58:DF:85:4E:B1:13:BA:FD:8D ValiditySat, 09 Mar 2024 21:18:35 GMT - Fri, 07 Jun 2024 21:18:34 GMT
File typeJavaScript source, ASCII text, with very long lines (4427), with no line terminators Hashc8a0b7f16c38377537c6ab251cb5bc72 528e37de81abf523b92ce0b457cb593983ed347a e31179e4a4fffc7faee4f95d4f67ce056d12a57c451dee1dae3e9062b126a00e
GET /js/jquery.cookie.js HTTP/1.1
Host: www.vidspeeds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/embed-n8dd3oswwv0x.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: application/javascript
last-modified: Mon, 24 Jan 2022 12:56:06 GMT
etag: W/"10eb-5d6537de27b67"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2583
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WBdgH8PjHEl%2FAi0pZrUDDmUInR1XW2aRbsXcyBBYr00%2BO2%2F4d4hoSVsvOMlFoclNJr3B5Ia%2BryjBFfeTdlPkJYaxprqy3YEJrlRYYi1doF6ttIVvSvgHqMkwYxb%2F6wG2WwALiQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b63ed2cb4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| f.aydogs.com/melody.php?post=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 | 104.21.90.108 | 200 OK | 22 kB |
URL User Request GET HTTP/2f.aydogs.com/melody.php?post=eyJpbmZvIjp7ImhvbWUiOiJodHRwczpcL1wvaS5kcmFtYWZ1bnR2LmNvbSIsImJhY2siOiJodHRwczpcL1wvaS5kcmFtYWZ1bnR2LmNvbVwvd2F0Y2gucGhwP3ZpZD0xNWQ0ODJjZjYifSwic2VydmVycyI6eyJWaWRzcGVlZHMiOiJodHRwczpcL1wvd3d3LnZpZHNwZWVkcy5jb21cL2VtYmVkLW44ZGQzb3N3d3YweC5odG1sIiwiVXFsb2FkIjoiaHR0cHM6XC9cL3d3dy51cWxvYWQuaW9cL2VtYmVkLXVpNjNjeGkxaG5hbi5odG1sIiwiT2siOiJodHRwczpcL1wvd3d3Lm9rLnJ1XC92aWRlb2VtYmVkXC82NjM4MTMxODA4ODUzIiwiWW91ZGJveCI6Imh0dHBzOlwvXC95b3VkYm94LnNpdGVcL2VtYmVkLWtyd3E2dzZrYXV5dS5odG1sIiwiU2VnYXZpZCI6Imh0dHBzOlwvXC9zZWdhdmlkLmNvbVwvZW1iZWQta2swcGg3eGphNzFzLmh0bWwiLCJGaWxlbGlvbnMiOiJodHRwczpcL1wvZmlsZWxpb25zLmxpdmVcL3ZcL2RqNmJzN3g4bmpvcCIsIk1peGRyb3AiOiJodHRwczpcL1wvbWl4ZHJvcC5jb1wvZVwvbWQ3MzhtcjBmeDFtbjF4IiwiRmlsZW1vb24iOiJodHRwczpcL1wvZmlsZW1vb24uc3hcL2VcL2p5ZTNndW0xaTk2bCIsIlZvZSI6Imh0dHBzOlwvXC92b2Uuc3hcL2VcL3JscWpheWJrZWJwcCIsIkRvb2QiOiJodHRwczpcL1wvZG9vZC53c1wvZVwvN24xdnZlNWoydGJ3In19 IP104.21.90.108:443
CertificateIssuerGoogle Trust Services LLC Subjectaydogs.com Fingerprint61:78:5C:78:A5:5E:5B:9F:1E:B7:D1:89:98:4B:6E:90:9C:E4:E6:9C ValiditySun, 14 Apr 2024 13:12:12 GMT - Sat, 13 Jul 2024 13:12:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /melody.php?post=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 HTTP/1.1
Host: f.aydogs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:29:46 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=csuaJF14%2Bzj0i2DKCIjL%2B2hQdvyQ8D24qEmKssbGQdGBa5OvYXHZL3q7xSm%2F1q6xd4YYAroSyUSpAXiyld2fhdqXJOFEcDzcZaEitai9NZGUWLsAtTXmRYu5kVqYLaA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87aa5b5aef461bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:400,300,500,700|Noticia+Text:400,400italic,700 | 142.250.74.106 | 200 OK | 12 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:400,300,500,700|Noticia+Text:400,400italic,700 IP142.250.74.106:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50 ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT
Hasha79059b85bf84f1c9338751a24625072 7e96dc257938c878cd311e4d964273e4fc00d1b1 ff76183710dc8cc1d0bc665bdcdeda8ed8a5d578cb46fbe3cc5436745a1174f2
GET /css?family=Roboto:400,300,500,700|Noticia+Text:400,400italic,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 23:29:47 GMT
date: Fri, 26 Apr 2024 23:29:47 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| vsped-cached-qans-4-cfg.dailymotians.cam/hls/liwaixmwkm2nsti77hksuu2dwt2uuuozm7dx7idbuawzqkir7b63x2zo6jgq/seg-1-v1-a1.ts | 185.181.60.33 | 200 OK | 707 kB |
URL GET HTTP/1.1vsped-cached-qans-4-cfg.dailymotians.cam/hls/liwaixmwkm2nsti77hksuu2dwt2uuuozm7dx7idbuawzqkir7b63x2zo6jgq/seg-1-v1-a1.ts IP185.181.60.33:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGlobalSign nv-sa Subject*.dailymotians.cam Fingerprint7A:4D:6C:B2:E5:A5:8D:C0:12:2C:03:AB:45:FD:07:E8:B9:BD:E6:2E ValidityWed, 12 Jul 2023 19:59:59 GMT - Mon, 12 Aug 2024 19:59:58 GMT
File typeMPEG transport stream data Size707 kB (707256 bytes) Hasha3279fc75a42194102907299faa5b1e6 e0d0bea44a660257d7471cb56f2eb34f2a3b7c6c dd64c4c5b63e8b9c845e13c7e9b7a05e4adf3cab6c11a6a1458359100b06b99d
GET /hls/liwaixmwkm2nsti77hksuu2dwt2uuuozm7dx7idbuawzqkir7b63x2zo6jgq/seg-1-v1-a1.ts HTTP/1.1
Host: vsped-cached-qans-4-cfg.dailymotians.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vidspeeds.com
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 23:29:48 GMT
Content-Type: video/MP2T
Content-Length: 707256
Connection: keep-alive
Expires: Sat, 27 Apr 2024 11:29:48 GMT
Cache-Control: max-age=43200
ETag: "-1-acab8"
Last-Modified: Sun, 11 Sep 2000 09:00:00 GMT
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| live.demand.supply/up.js | 104.17.38.115 | 200 OK | 5.6 kB |
IP104.17.38.115:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (5728), with no line terminators Hash45905c23c9662cad8c03e81076c62311 5a1701e67df05a7f4afd28f42b9a8e438a8200a5 d582e059b1368f581df689abddf5d7f6900128b464ecf1a028a0b3532cd28c1d
GET /up.js HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:29:47 GMT
content-type: application/javascript; charset=UTF-8
cf-ray: 87aa5b5ddfa7b518-OSL
cf-cache-status: HIT
age: 1109
cache-control: max-age=1200,must-revalidate,stale-while-revalidate=3600
etag: W/"dbfb28e408f563c47c5a6f819ef24bd8-ssl-df"
link: <https://live.demand.supply/impl.v17.32.0.js>; rel=preload; as=script,<https://live.demand.supply/p4/v17-24-0/Zi5heWRvZ3MuY29tLw==>; rel=preload; as=script
strict-transport-security: max-age=31536000
vary: Accept-Encoding
cache-status: "Netlify Edge"; fwd=stale
cf-bgj: minify
cf-polished: origSize=5343
timing-allow-origin: *
x-nf-request-id: 01HWAW49T6DJXCHS3FM4JZGX5P
set-cookie: __cf_bm=jJtRQbp94pN.Hk6b5KuDy_Bf.PADcApUIvTyWhQSopo-1714174187-1.0.1.1-R5uM.XvKTTghUqKZjGAnel7GRC8msRKWhNAxAoxkb7UCg3OGqcB_YscKVAzIZokW.W60JMh.VMwi99lHBVwNGA; path=/; expires=Fri, 26-Apr-24 23:59:47 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| oponame.com/wp-content/uploads/2022/10/Keefe-clears-the-air-with-Leafs-elite-players-TSNca.jpeg | 0.0.0.0 | | 0 B |
URL GET oponame.com/wp-content/uploads/2022/10/Keefe-clears-the-air-with-Leafs-elite-players-TSNca.jpeg IP0.0.0.0:0
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerDigiCert Inc Subjectoponame.com Fingerprint36:18:8F:02:9C:DE:1F:DB:EC:6A:8D:75:03:2B:51:68:27:19:27:24 ValidityMon, 22 Apr 2024 00:00:00 GMT - Mon, 21 Apr 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/2022/10/Keefe-clears-the-air-with-Leafs-elite-players-TSNca.jpeg HTTP/1.1
Host: oponame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Fri, 26 Apr 2024 23:29:47 GMT
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Fri, 26 Apr 2024 23:29:47 GMT
pragma: no-cache
server: NginX
vary: Accept-Encoding
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_EfKxHAZ7SD3t4ulA6twehs9Iwkb+9s2kGnNQ/sJ5KLmQNWc/cqc/Q2+JaXrhl03kN423JoGFbv9hdyxPCjlqzA==
x-cache-miss-from: parking-7cbf88ff6b-7flh7
x-powered-by: PHP/8.1.17
X-Firefox-Spdy: h2
|
|
| i.dramafuntv.com/templates/3osss/css/echo.css | 172.67.188.83 | 200 OK | 238 kB |
URL GET HTTP/3i.dramafuntv.com/templates/3osss/css/echo.css IP172.67.188.83:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerGoogle Trust Services LLC Subjectdramafuntv.com Fingerprint1C:9B:EA:2E:14:38:06:7D:C3:95:38:BE:C8:C7:09:47:4D:14:D7:D6 ValidityTue, 09 Apr 2024 17:14:32 GMT - Mon, 08 Jul 2024 17:14:31 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size238 kB (238073 bytes) Hashcdd840df2caeae1e9cf096f4d14e30fc 846ce19d20d80ce33b8900b7dbe3246494eb9c4a ead03449aa57062ceaa95889adb76099cd69147913a9d3db129233e0874262c2
GET /templates/3osss/css/echo.css HTTP/1.1
Host: i.dramafuntv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f.aydogs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:47 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=238158
etag: W/"61774f43-3a24e"
last-modified: Tue, 26 Oct 2021 00:43:47 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q9gAruaIn32kZFvytze3NAWCoAStdX6AWWJhhb%2BVh19US%2BHEecKvtjd5zRreHy9wGGIzfciGHW96UDyuZBrusUdgzM0j30fR6otfRv1zspOkLEqp1lQH072HyVFOGzPRCnW5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b5f3bfab521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| live.demand.supply/e/e.js?e=ll&d=411&cs=c&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= | 104.17.38.115 | 200 OK | 0 B |
URL HEAD HTTP/3live.demand.supply/e/e.js?e=ll&d=411&cs=c&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= IP104.17.38.115:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /e/e.js?e=ll&d=411&cs=c&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f.aydogs.com
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: s-maxage=2592000,stale-if-error=604800
cache-status: "Netlify Edge"; hit
cf-bgj: minify
cf-polished: origSize=2
etag: "fbee6989874cef86694d7a2d31af072a-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01HRWM7TR9SZ429P53WRA8SHQ0
cf-cache-status: HIT
age: 1410218
accept-ranges: bytes
set-cookie: __cf_bm=oGPzZAtCOKvPl2hRnr3QrSq_sk9PXLQYQQevxcoNlNU-1714174188-1.0.1.1-MySZ3v.Pu1pQ_u.w1jzBAB5ivSF69yFWHf2PjAKyxzJOwMkJ_ElEbLpONCOivYoHzv5MxUdoguo97.LYuKkyGQ; path=/; expires=Fri, 26-Apr-24 23:59:48 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b62fd38b527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| vsped-cached-qans-4-cfg.dailymotians.cam/hls/liwaixmwkm2nsti77hksuu2dwt2uuuozm7dx7idbu,awzqkir7b63x2zo6jgq,jhjqkir7b66w2igzqmq,.urlset/master.m3u8 | 185.181.60.33 | 200 OK | 945 B |
URL GET HTTP/1.1vsped-cached-qans-4-cfg.dailymotians.cam/hls/liwaixmwkm2nsti77hksuu2dwt2uuuozm7dx7idbu,awzqkir7b63x2zo6jgq,jhjqkir7b66w2igzqmq,.urlset/master.m3u8 IP185.181.60.33:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGlobalSign nv-sa Subject*.dailymotians.cam Fingerprint7A:4D:6C:B2:E5:A5:8D:C0:12:2C:03:AB:45:FD:07:E8:B9:BD:E6:2E ValidityWed, 12 Jul 2023 19:59:59 GMT - Mon, 12 Aug 2024 19:59:58 GMT
File typeM3U playlist, ASCII text, with very long lines (965), with no line terminators Hash6402f7e6da7de75cb7065b55c79c50ae e1adf56c58bbe4f6e0c0a0714e0389f9ddc59f9a 083bcd976d254c955f1cd93be9cdebdab4c90b7f9e5efe8beeb189ac6acac59f
GET /hls/liwaixmwkm2nsti77hksuu2dwt2uuuozm7dx7idbu,awzqkir7b63x2zo6jgq,jhjqkir7b66w2igzqmq,.urlset/master.m3u8 HTTP/1.1
Host: vsped-cached-qans-4-cfg.dailymotians.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vidspeeds.com
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 23:29:48 GMT
Content-Type: application/vnd.apple.mpegurl
Content-Length: 945
Connection: keep-alive
Expires: Sat, 27 Apr 2024 11:29:48 GMT
Cache-Control: max-age=43200
ETag: "-1-3b1"
Last-Modified: Sun, 11 Sep 2000 09:00:00 GMT
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| a.dramafuntv.com/templates/3osss/css/bootstrap.min.css | 172.67.188.83 | 301 Moved Permanently | 121 kB |
URL GET HTTP/2a.dramafuntv.com/templates/3osss/css/bootstrap.min.css IP172.67.188.83:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerGoogle Trust Services LLC Subjectdramafuntv.com Fingerprint1C:9B:EA:2E:14:38:06:7D:C3:95:38:BE:C8:C7:09:47:4D:14:D7:D6 ValidityTue, 09 Apr 2024 17:14:32 GMT - Mon, 08 Jul 2024 17:14:31 GMT
Size121 kB (120620 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /templates/3osss/css/bootstrap.min.css HTTP/1.1
Host: a.dramafuntv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 26 Apr 2024 23:29:47 GMT
content-type: text/html
location: https://i.dramafuntv.com/templates/3osss/css/bootstrap.min.css
cache-control: max-age=31536000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RPZPMfEZFExxOdlW37nBBZ6ZmOziua3WmMEU8idR9z3XWlcXxfV2u0pEGlNYYMhakXD1RoMOuYXLhJsgpy4xd82sOmCaVyNW4mHw2hDWkOb0roImD6WVpFekDabqjQW0uDek"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b5dbf040b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| live.demand.supply/x/e.js?ce=fs&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= | 104.17.38.115 | 200 OK | 0 B |
URL HEAD HTTP/3live.demand.supply/x/e.js?ce=fs&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= IP104.17.38.115:443
Requested byhttps://f.aydogs.com/melody.php?post=eyJpbmZvIjp7ImhvbWUiOiJodHRwczpcL1wvaS5kcmFtYWZ1bnR2LmNvbSIsImJhY2siOiJodHRwczpcL1wvaS5kcmFtYWZ1bnR2LmNvbVwvd2F0Y2gucGhwP3ZpZD0xNWQ0ODJjZjYifSwic2VydmVycyI6eyJWaWRzcGVlZHMiOiJodHRwczpcL1wvd3d3LnZpZHNwZWVkcy5jb21cL2VtYmVkLW44ZGQzb3N3d3YweC5odG1sIiwiVXFsb2FkIjoiaHR0cHM6XC9cL3d3dy51cWxvYWQuaW9cL2VtYmVkLXVpNjNjeGkxaG5hbi5odG1sIiwiT2siOiJodHRwczpcL1wvd3d3Lm9rLnJ1XC92aWRlb2VtYmVkXC82NjM4MTMxODA4ODUzIiwiWW91ZGJveCI6Imh0dHBzOlwvXC95b3VkYm94LnNpdGVcL2VtYmVkLWtyd3E2dzZrYXV5dS5odG1sIiwiU2VnYXZpZCI6Imh0dHBzOlwvXC9zZWdhdmlkLmNvbVwvZW1iZWQta2swcGg3eGphNzFzLmh0bWwiLCJGaWxlbGlvbnMiOiJodHRwczpcL1wvZmlsZWxpb25zLmxpdmVcL3ZcL2RqNmJzN3g4bmpvcCIsIk1peGRyb3AiOiJodHRwczpcL1wvbWl4ZHJvcC5jb1wvZVwvbWQ3MzhtcjBmeDFtbjF4IiwiRmlsZW1vb24iOiJodHRwczpcL1wvZmlsZW1vb24uc3hcL2VcL2p5ZTNndW0xaTk2bCIsIlZvZSI6Imh0dHBzOlwvXC92b2Uuc3hcL2VcL3JscWpheWJrZWJwcCIsIkRvb2QiOiJodHRwczpcL1wvZG9vZC53c1wvZVwvN24xdnZlNWoydGJ3In19 CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /x/e.js?ce=fs&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f.aydogs.com
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: s-maxage=2592000,stale-if-error=604800
cache-status: "Netlify Edge"; hit
cf-bgj: minify
cf-polished: origSize=2
etag: "f64ad3fd16c8a1f2616df5990f49ab19-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01HRPPY88XVP79HH6JYB06ZKQD
cf-cache-status: HIT
age: 1410218
accept-ranges: bytes
set-cookie: __cf_bm=TTFv0OkzVM3YpzjH_J2yFpnnurdyWECHKz6H5hvBx7U-1714174188-1.0.1.1-_ZMLzYVoGD7Udzjfixfo.x8vam_s0woDjGuQdvAgyYeNZVl64YKkEZXn.vP2ZZYosrK5VWxm5fLbJZx_tK8xTA; path=/; expires=Fri, 26-Apr-24 23:59:48 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b634d6bb527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| api.demand.supply/v17-24-0/a/aydogs.com_728x90_sticky_display_top_top-ads?&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= | 104.17.38.115 | 200 OK | 392 B |
URL GET HTTP/3api.demand.supply/v17-24-0/a/aydogs.com_728x90_sticky_display_top_top-ads?&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= IP104.17.38.115:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (464), with no line terminators Hash0405cc5373e4a95285d34204053bc7bf d580cf29ab6bf1ce4dc6a82c4aa7b763b68e559b adcdeab7a3984f1c7689f47b32907b282ad0d67672fc80f0ffc63930c43e6448
GET /v17-24-0/a/aydogs.com_728x90_sticky_display_top_top-ads?&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= HTTP/1.1
Host: api.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f.aydogs.com
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: max-age=3600, s-maxage=7200, stale-while-revalidate=3600, stale-if-error=84600
etag: W/"188-S1p7jHm3NOrMc2kve/tRAjcvnXw"
cf-cache-status: HIT
age: 2440
set-cookie: __cf_bm=gSmSda3x0IWZcdGjOJ8M99U31bhRY8B5cpAQ06XI2Os-1714174188-1.0.1.1-w1g9W3mvnfmyivnIaz3jH129PIKd7dn9BuTPJaXuW8p6meClJ9i10OBAmkwxTdb3WwHNEiqD9KusYBbUXXQG8w; path=/; expires=Fri, 26-Apr-24 23:59:48 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b659f2fb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| live.demand.supply/e/e.js?r=aydogs.com_large_video&pdc=0.3883098065853119&e=tcp&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= | 104.17.38.115 | 200 OK | 0 B |
URL HEAD HTTP/3live.demand.supply/e/e.js?r=aydogs.com_large_video&pdc=0.3883098065853119&e=tcp&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= IP104.17.38.115:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /e/e.js?r=aydogs.com_large_video&pdc=0.3883098065853119&e=tcp&dsReferer=Zi5heWRvZ3MuY29tL21lbG9keS5waHA= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f.aydogs.com
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: s-maxage=2592000,stale-if-error=604800
cache-status: "Netlify Edge"; hit
cf-bgj: minify
cf-polished: origSize=2
etag: "fbee6989874cef86694d7a2d31af072a-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01HRWM7TR9SZ429P53WRA8SHQ0
cf-cache-status: HIT
age: 1410218
accept-ranges: bytes
set-cookie: __cf_bm=sXzz8jqkyzOWl8HLtRLJXOSOXOay0OTJwkxJopLetfg-1714174188-1.0.1.1-pFZqXItZTnpiqwm51uaN243SeltcemGvetx0ehkyh0NdGBNP3Chxvrz.5uzvmUD1yEwuzhNaZomxhNzXcNt5Lw; path=/; expires=Fri, 26-Apr-24 23:59:48 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b674856b527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.creative-bars1.com/sb/ssp/in-page_push/os/android/2/js/script.js | 172.67.141.24 | 200 OK | 404 B |
URL GET HTTP/2cdn.creative-bars1.com/sb/ssp/in-page_push/os/android/2/js/script.js IP172.67.141.24:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeASCII text, with very long lines (416), with no line terminators Hash579f1c5636e651e926ad592c22f9e89c b2b42ab876031bc2005857b5c8d029816de201a7 38da60a90eb425f8f62b0dce72e43233622c75da4126d4b7e0784e0b5ba94765
GET /sb/ssp/in-page_push/os/android/2/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vidspeeds.com
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:29:50 GMT
content-type: application/javascript
last-modified: Fri, 19 Jan 2024 14:19:44 GMT
etag: W/"65aa8500-194"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 205267
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h6waVP3TF8DJw8ETTxbNWtSrkTYz7k2RuQWgh65jkREfsymcDPccgxjJ4pvwq8lcCIxbnuo0YYooPKFf7madJCtiaKTmBev59SRsb5%2FyrC23lhlY8m%2BEk50KMDOSxwZPMhCWm1AnOH4n"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b757f950b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| live.demand.supply/impl.v17.32.0.js | 104.17.38.115 | 200 OK | 91 kB |
URL GET HTTP/3live.demand.supply/impl.v17.32.0.js IP104.17.38.115:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (23282) Hash3501fe52a8aeb0dc9b89aa1c12ea6e5a b6221b443437b86f096112d2ec77fab1975fd811 b77415363ffad60ce3f975e393d3ef44a47d8bddbec2f0a2f9f0e9587dd5c501
GET /impl.v17.32.0.js HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Cookie: __cf_bm=jJtRQbp94pN.Hk6b5KuDy_Bf.PADcApUIvTyWhQSopo-1714174187-1.0.1.1-R5uM.XvKTTghUqKZjGAnel7GRC8msRKWhNAxAoxkb7UCg3OGqcB_YscKVAzIZokW.W60JMh.VMwi99lHBVwNGA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:29:47 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=2592000,immutable,stale-if-error=604800
cf-bgj: minify
cf-polished: origSize=91396
access-control-allow-origin: *
cache-status: "Netlify Edge"; fwd=miss
etag: W/"b0ea5d9194ab3fdb131dbfcf767a3676-ssl-df"
strict-transport-security: max-age=31536000
timing-allow-origin: *
vary: Accept-Encoding
x-nf-request-id: 01HWAW44Z8KJM1G27JKQDGSW4N
cf-cache-status: HIT
age: 117195
server: cloudflare
cf-ray: 87aa5b62abda5691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/ea/droidarabickufi/v6/DroidKufi-Regular.woff2 | 216.58.207.227 | 200 OK | 31 kB |
URL GET HTTP/2fonts.gstatic.com/ea/droidarabickufi/v6/DroidKufi-Regular.woff2 IP216.58.207.227:443
Requested byhttps://f.aydogs.com/melody.php?post=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 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 31248, version 1.0 Hash436938da6ed799ca17110e719e4d2e51 b7ef31b6085a9f0963dffe7939abca527724d389 a7b09bb9c8e8e2fb189204e08ed94bd8096c118780b5e926847cf2748ca7c5c2
GET /ea/droidarabickufi/v6/DroidKufi-Regular.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://f.aydogs.com
DNT: 1
Connection: keep-alive
Referer: https://f.aydogs.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31248
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:53:32 GMT
expires: Sat, 26 Apr 2025 05:53:32 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Aug 2014 16:50:04 GMT
content-type: font/woff2
vary: Accept-Encoding
age: 63375
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| vidspeeds.com:2096/js/googima.js | 188.114.96.1 | 200 OK | 36 B |
URL GET HTTP/2vidspeeds.com:2096/js/googima.js IP188.114.96.1:2096
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGoogle Trust Services LLC Subjectvidspeeds.com FingerprintA7:BD:28:0E:94:10:78:DC:FA:C3:D0:58:DF:85:4E:B1:13:BA:FD:8D ValiditySat, 09 Mar 2024 21:18:35 GMT - Fri, 07 Jun 2024 21:18:34 GMT
File typeASCII text, with no line terminators Hashd1e40d1e3f519d090bb9986a51a60831 441a375fa252fd581b01ed7bfb837a527b7e1927 41afc39a38ad2d21db7fa723343f25469659a80ee57cff434378b17e18827518
GET /js/googima.js HTTP/1.1
Host: vidspeeds.com:2096
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:29:48 GMT
content-type: application/javascript
last-modified: Mon, 24 Jan 2022 12:56:06 GMT
etag: W/"24-5d6537de27b67"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w%2Bh2RRmDeYpHrypl3Q5Al4P0OqzT2aDtO%2BNkV8oNTUuyZvKM20OwonqNIdvH1f6O%2B9wjr7%2FSQ0cS%2FaF2EJn6fcG5qHX%2Bc8ZAFh6pyuTE3cg1QkOJ0kzd2YTieOcRVSzT3Ez5POw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b644d24b52d-OSL
content-encoding: br
alt-svc: h3=":2096"; ma=86400
X-Firefox-Spdy: h2
|
|
| baileybenedictionphony.com/pixel/purst?dl=0&th=0&sc=0&rs=922&rd=922&fd=539&bv=24.4.6923&tmpl=70 | 192.243.61.227 | 200 OK | 0 B |
URL GET HTTP/1.1baileybenedictionphony.com/pixel/purst?dl=0&th=0&sc=0&rs=922&rd=922&fd=539&bv=24.4.6923&tmpl=70 IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerLet's Encrypt Subjectbaileybenedictionphony.com FingerprintE6:FB:DB:5C:C6:27:CC:19:84:03:ED:BB:0D:18:51:3D:71:14:F9:25 ValidityMon, 22 Apr 2024 12:37:31 GMT - Sun, 21 Jul 2024 12:37:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/purst?dl=0&th=0&sc=0&rs=922&rd=922&fd=539&bv=24.4.6923&tmpl=70 HTTP/1.1
Host: baileybenedictionphony.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 23:29:49 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| baileybenedictionphony.com/cd/ba/c2/cdbac24573c32abd89d0ec1e09d0a76e.js | 192.243.61.227 | 200 OK | 44 kB |
URL GET HTTP/1.1baileybenedictionphony.com/cd/ba/c2/cdbac24573c32abd89d0ec1e09d0a76e.js IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerLet's Encrypt Subjectbaileybenedictionphony.com FingerprintE6:FB:DB:5C:C6:27:CC:19:84:03:ED:BB:0D:18:51:3D:71:14:F9:25 ValidityMon, 22 Apr 2024 12:37:31 GMT - Sun, 21 Jul 2024 12:37:30 GMT
File typeJavaScript source, ASCII text, with very long lines (44091), with no line terminators Hashbec6ecfedd659cee14645414a6eee53b 1cc4d5c84cab73af2b5967bdda3d966ffb644540 dfabe17d8bcb3344017137b44d3934ae3ee63e8bc62bf37ab764fbf02620c63a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cd/ba/c2/cdbac24573c32abd89d0ec1e09d0a76e.js HTTP/1.1
Host: baileybenedictionphony.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 23:29:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3cda4e9b1cdaa233ad41d175c5d1f0ac
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| cdn.creative-bars1.com/sb/ssp/in-page_push/os/android/2/css/style.css | 172.67.141.24 | 200 OK | 4.7 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/ssp/in-page_push/os/android/2/css/style.css IP172.67.141.24:443
Requested byhttps://www.vidspeeds.com/embed-n8dd3oswwv0x.html CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeASCII text, with very long lines (4942), with no line terminators Hash3c322ca8e86e3b80df2633ae4023d605 2346278de279cfef28a590134db26472d40a77af 551bbe3e5451f642de63fdf3ed2303b5b929fca65d26733eca389bc214c911c6
GET /sb/ssp/in-page_push/os/android/2/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vidspeeds.com
DNT: 1
Connection: keep-alive
Referer: https://www.vidspeeds.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:29:50 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:19:44 GMT
etag: W/"65aa8500-124a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 61005
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mh7WJqoN%2B5h5IsGxmrpEArRczFDV7DDq7aNLXvMKzuYpycYbgQI6wZ5qGtp%2BWxIuLWu1hpUSOuOcfcy1xEVI9LxaExRoJHKR29rdYuFx%2FZcNFt4XDyNMOPColNW50gg9uQYYVK8s%2BTzX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5b757f920b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
0.0.0.0