| videy.io/public/js/bootstrap.min.js |  104.21.79.10 | 200 OK | 16 kB |
URL GET HTTP/3videy.io/public/js/bootstrap.min.js IP104.21.79.10:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectvidey.io Fingerprint7C:57:01:B3:8A:67:B6:E9:BC:16:20:08:F4:A3:5C:C4:BB:8A:8B:E5 ValidityTue, 02 Apr 2024 22:30:18 GMT - Mon, 01 Jul 2024 22:30:17 GMT
File typeJavaScript source, ASCII text, with very long lines (59893), with no line terminators Hash3897abd1b88b21ebc5abdd3300911354 c9b570a84040a18ea9012e3528edb89baaac89e1 79e148dca7b03a230bee72f649d9a33ce026680bf87973bd441442fcb70948ad
GET /public/js/bootstrap.min.js HTTP/1.1
Host: videy.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://videy.io/v/jxkjuyvv771
DNT: 1
Connection: keep-alive
Cookie: ci_session=58b8a67fc3afdf3edc8217ddf4abf71d5a2e5bab; siu-lang-idiom=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 23:49:56 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-origin: *
x-original-content-length: 60137
etag: W/"PSA-aj-OJer0biLIe"
expires: Sun, 16 Apr 2034 02:32:30 GMT
cache-control: max-age=314264675
cf-cache-status: HIT
age: 363722
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IbgZOhLxpu5UlNSq19MOvmvBwdXi5nN7snJpCDpxk2P9HFX%2FaWEyq7%2F6hIDS%2Fi0gTHyWnxRfIt5GIJKTScpny%2FVgf0%2F77sdvBdiVcoWPXAIWOtk9cptYnUxYdQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63e49b4d569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| videy.io/public/js/popper.min.js | 104.21.79.10 | 200 OK | 7.4 kB |
URL GET HTTP/3videy.io/public/js/popper.min.js IP104.21.79.10:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectvidey.io Fingerprint7C:57:01:B3:8A:67:B6:E9:BC:16:20:08:F4:A3:5C:C4:BB:8A:8B:E5 ValidityTue, 02 Apr 2024 22:30:18 GMT - Mon, 01 Jul 2024 22:30:17 GMT
File typeJavaScript source, ASCII text, with very long lines (19011), with no line terminators Hash6e40823a6abec15e1d6d5a961e908d65 a0b32ddc4e122f4524f97f67755fe7a705f25c2d 3e508f5fe39ea4ff046960ece18e813c164cad30739c732719e08eee24ee4a39
GET /public/js/popper.min.js HTTP/1.1
Host: videy.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://videy.io/v/jxkjuyvv771
DNT: 1
Connection: keep-alive
Cookie: ci_session=58b8a67fc3afdf3edc8217ddf4abf71d5a2e5bab; siu-lang-idiom=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 23:49:56 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-origin: *
x-original-content-length: 19157
etag: W/"PSA-aj-bkCCOmq-wV"
expires: Sun, 16 Apr 2034 03:01:10 GMT
cache-control: max-age=314266395
cf-cache-status: HIT
age: 363722
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ig%2BCU84v%2B26O8XgjxHAAPV70EoEdhT9IUAJvxqmP3PZYLjSScFWH2MdpTZFORJylTtnSmWQPyyZOKdoiDCrtoC5w1YAfUfSofmS8nYzsHoUSh9EOxWnCq0KKaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63e49b4c569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=G-CWZNWGQMDS |  142.250.74.40 | 200 OK | 102 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-CWZNWGQMDS IP142.250.74.40:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Size102 kB (101526 bytes) Hash12fa2eed3dc51c8d89508650a0b329e1 5e42ddd3f58e27a5ce14562154f68c1dd95f6e57 71a8e66372447c75ab2e23de4437a94f951d6486dd3c67cd6d93f8e6a7d41bff
GET /gtag/js?id=G-CWZNWGQMDS HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 23:49:56 GMT
expires: Sat, 04 May 2024 23:49:56 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 101526
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://videy.io
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 May 2024 09:28:37 GMT
expires: Sun, 04 May 2025 09:28:37 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 51680
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| hoarsedetachlocomotive.com/47/08/47/470847c9e5839f52ad650b9b77bef6af.js | 192.243.59.13 | 200 OK | 31 kB |
URL GET HTTP/1.1hoarsedetachlocomotive.com/47/08/47/470847c9e5839f52ad650b9b77bef6af.js IP192.243.59.13:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerLet's Encrypt Subjecthoarsedetachlocomotive.com FingerprintCB:9D:A0:C2:E6:3E:EF:20:2A:0A:17:B1:25:17:38:4C:39:2C:21:1B ValiditySun, 10 Mar 2024 09:50:48 GMT - Sat, 08 Jun 2024 09:50:47 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hasha89ab2fd6e9bf02df72c5b1b3578f743 54911d8f88580175ff5eadc78d3efea598adc1e0 001249e768636b29b8ed1f8c3ecc23b9dc99e5086bc9c613e50f70591020250e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /47/08/47/470847c9e5839f52ad650b9b77bef6af.js HTTP/1.1
Host: hoarsedetachlocomotive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 04 May 2024 23:49:57 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0cd7c7220a65f3a884bcdc6fe0309dcb
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| videy.io/public/js/magnific.popup.min.js | 104.21.79.10 | 200 OK | 23 kB |
URL GET HTTP/3videy.io/public/js/magnific.popup.min.js IP104.21.79.10:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectvidey.io Fingerprint7C:57:01:B3:8A:67:B6:E9:BC:16:20:08:F4:A3:5C:C4:BB:8A:8B:E5 ValidityTue, 02 Apr 2024 22:30:18 GMT - Mon, 01 Jul 2024 22:30:17 GMT
File typeJavaScript source, ASCII text, with very long lines (20087), with no line terminators Hashac80f1384f7e7c0f1f0c93f4722e973a 38fb358e49ef9eb83df2695ac4c31809910e7bfe 9770048ee1a053b01b685ca75a3d1061d98c3dcea0c8561f737171ff209d37e9
GET /public/js/magnific.popup.min.js HTTP/1.1
Host: videy.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://videy.io/v/jxkjuyvv771
DNT: 1
Connection: keep-alive
Cookie: ci_session=58b8a67fc3afdf3edc8217ddf4abf71d5a2e5bab; siu-lang-idiom=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 23:49:56 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-origin: *
x-original-content-length: 20219
etag: W/"PSA-aj-rIDxOE9-fA"
expires: Sun, 16 Apr 2034 03:01:10 GMT
cache-control: max-age=314258564
cf-cache-status: HIT
age: 355891
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k90Ub1QHkBjijII%2F7PUVDmKpi6uVZz4XKT%2FKnw1DwwMvsCq0kZvWvSo9AnRK3KeS4LjXdPBdTIB%2BiHxhHMnvuxNJXQin%2FoldPYUR8YDmvBfcjEj78gFXVLRAuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63e49b54569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| videy.io/public/js/includes/view_video.js | 104.21.79.10 | 200 OK | 9.6 kB |
URL GET HTTP/3videy.io/public/js/includes/view_video.js IP104.21.79.10:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectvidey.io Fingerprint7C:57:01:B3:8A:67:B6:E9:BC:16:20:08:F4:A3:5C:C4:BB:8A:8B:E5 ValidityTue, 02 Apr 2024 22:30:18 GMT - Mon, 01 Jul 2024 22:30:17 GMT
File typeJavaScript source, ASCII text, with very long lines (1885), with no line terminators Hash48d23e34834dc5024ce3511278a4426c 734665aac36af786d2dde46a4f92f0c6792a1fbc c319c66dc9823ebd535fdfd4554ef36dca0004550f9734e9eaacec0ec1727b8c
GET /public/js/includes/view_video.js HTTP/1.1
Host: videy.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://videy.io/v/jxkjuyvv771
DNT: 1
Connection: keep-alive
Cookie: ci_session=58b8a67fc3afdf3edc8217ddf4abf71d5a2e5bab; siu-lang-idiom=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 23:49:56 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-origin: *
x-original-content-length: 2795
etag: W/"PSA-aj-SNI-NINNxQ"
expires: Sun, 16 Apr 2034 02:44:53 GMT
cache-control: max-age=314265418
cf-cache-status: HIT
age: 363722
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UYUBxb2i0rXiG6j%2BZgWu6V5zSOaxabqZbycVgag0zYo73V%2Fxc7Vs5mCAO4sN69QY3lGLgO8Sr9D1t1EgZ5h9JNL59aEQ3QvslQOMmrvWqHPwAB1hmdN2LtL3QA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63e4ab6c569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adoto.net/dashboard/display/items.php?6792&2875&468&60&4&0&0 | 104.21.49.113 | 200 OK | 13 kB |
URL GET HTTP/2adoto.net/dashboard/display/items.php?6792&2875&468&60&4&0&0 IP104.21.49.113:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectadoto.net FingerprintA7:E3:05:E7:7E:96:8F:41:46:BC:9D:E9:09:C1:2A:C6:27:B7:26:66 ValidityTue, 02 Apr 2024 00:48:15 GMT - Mon, 01 Jul 2024 00:48:14 GMT
File typeJavaScript source, ASCII text, with very long lines (376) Hash629110c0118ad9a5a0a660d8de1dc5b1 5739d4114ff1c3e4ad80908576e3b3077b615880 04d838365718fdc249c02a8d7033c770e81960dd0b3e35c548ba244b7b998015
GET /dashboard/display/items.php?6792&2875&468&60&4&0&0 HTTP/1.1
Host: adoto.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 23:49:57 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding,User-Agent
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Sat, 04 May 2024 23:49:57 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-server-powered-by: Engintron
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B2TozSFTC2JvFnjnfs70448m8Am1OQn5ly0jGNyN5TTvzu6fLkT4rwd4cbZr6%2FeM6varia8bpAvPBIEI%2BNmlOq%2Fak6mAqusXl%2B3IxVe6OznF7x%2F1QDzRY3LalEw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63e4fba05687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-70132428-1&l=dataLayer&cx=c | 142.250.74.40 | 200 OK | 75 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=UA-70132428-1&l=dataLayer&cx=c IP142.250.74.40:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hash8003d10953601b9cc37370ac3f7f4b98 a9c033693290bc6c099aef0811dfd1531eb40c98 2aeab8de64d53d1ecc893ab4870ea9b496a865dd77508b57c7c0fb3004f00ae1
GET /gtag/js?id=UA-70132428-1&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 23:49:57 GMT
expires: Sat, 04 May 2024 23:49:57 GMT
cache-control: private, max-age=900
last-modified: Sat, 04 May 2024 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74862
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| proftrafficcounter.com/stats |  52.29.105.35 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP52.29.105.35:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash6d20b25e6061fde79732b8eda21a3f93 c9257d0617ab4e40268e51cce4b81a5be419e19c 6a9a43dc7ca41d86c0505469909ceab9afa9d3e4b56126b679f33659dce0c53d
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videy.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 23:49:57 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://videy.io
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=5e0851c0-05eb-4f8f-8383-366e3a425c2b:2:1; expires=Tue, 02 May 2034 23:49:57 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-37X41MY0HW&l=dataLayer&cx=c | 142.250.74.40 | 200 OK | 90 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-37X41MY0HW&l=dataLayer&cx=c IP142.250.74.40:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Hashdaace6736c180662d62d212878db5324 12d96af3c3a7e052ff9a9888d4a4e031e0f0b986 110cfb3d611ff9efb91f9f1aabf5bfde75cfc4c75e32bf889c7d4159de890bcb
GET /gtag/js?id=G-37X41MY0HW&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 23:49:57 GMT
expires: Sat, 04 May 2024 23:49:57 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89845
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| dishcling.com/pixel/purst?dl=0&th=0&sc=0&rs=1700&rd=1700&fd=880&bv=24.5.6485&tmpl=70 | 192.243.61.225 | 200 OK | 0 B |
URL GET HTTP/1.1dishcling.com/pixel/purst?dl=0&th=0&sc=0&rs=1700&rd=1700&fd=880&bv=24.5.6485&tmpl=70 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerLet's Encrypt Subjectdishcling.com Fingerprint68:A0:80:F2:51:01:49:2B:42:13:AD:71:F9:EF:65:9D:99:07:13:67 ValidityMon, 29 Apr 2024 08:08:41 GMT - Sun, 28 Jul 2024 08:08:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/purst?dl=0&th=0&sc=0&rs=1700&rd=1700&fd=880&bv=24.5.6485&tmpl=70 HTTP/1.1
Host: dishcling.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 04 May 2024 23:49:57 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| videy.io/v/jxkjuyvv771.mp4 | 104.21.79.10 | 206 Partial Content | 67 kB |
URL GET HTTP/3videy.io/v/jxkjuyvv771.mp4 IP104.21.79.10:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectvidey.io Fingerprint7C:57:01:B3:8A:67:B6:E9:BC:16:20:08:F4:A3:5C:C4:BB:8A:8B:E5 ValidityTue, 02 Apr 2024 22:30:18 GMT - Mon, 01 Jul 2024 22:30:17 GMT
Hash0b58cd367bdd270acc8e4e677d88e6dc f926d592451a0f2d656d81d9f6356956fcdb8c5f 1b7af5af0008b24b017601bb096ac742ad80c9946c81b64b2ac424aafb0ab779
GET /v/jxkjuyvv771.mp4 HTTP/1.1
Host: videy.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Referer: https://videy.io/v/jxkjuyvv771
Range: bytes=7110656-
DNT: 1
Connection: keep-alive
Cookie: ci_session=58b8a67fc3afdf3edc8217ddf4abf71d5a2e5bab; siu-lang-idiom=english; _ga_CWZNWGQMDS=GS1.1.1714866597.1.0.1714866597.0.0.0; _ga=GA1.1.1362308479.1714866597; dom3ic8zudi28v8lr6fgphwffqoz0j6c=5e0851c0-05eb-4f8f-8383-366e3a425c2b%3A2%3A1; _ga_37X41MY0HW=GS1.1.1714866597.1.0.1714866597.0.0.0; pp_main_470847c9e5839f52ad650b9b77bef6af=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Sat, 04 May 2024 23:49:58 GMT
content-type: video/mp4
content-length: 67325
last-modified: Wed, 01 May 2024 23:03:21 GMT
vary: Accept-Encoding
etag: "6632ca39-6d86fd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
access-control-allow-origin: *
cache-control: max-age=315360000, s-maxage=10
cf-cache-status: HIT
age: 1
content-range: bytes 7110656-7177980/7177981
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wCWfvLJdWxgzIQ%2BYbsaQ10OzW1wuVozXjwTLs0VPFGiwaXduNlE9kZutncTMmOvQkFi6xrmBsoh4tP3M4oZzvN8hB1a8rDLXP1DoJPSgxFf443JvPsEdplXURQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63ed892e569a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dishcling.com/5e/06/e3/5e06e36b7a65cdb98c53b8adc900ef75.js | 192.243.61.225 | 200 OK | 16 kB |
URL GET HTTP/1.1dishcling.com/5e/06/e3/5e06e36b7a65cdb98c53b8adc900ef75.js IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerLet's Encrypt Subjectdishcling.com Fingerprint68:A0:80:F2:51:01:49:2B:42:13:AD:71:F9:EF:65:9D:99:07:13:67 ValidityMon, 29 Apr 2024 08:08:41 GMT - Sun, 28 Jul 2024 08:08:40 GMT
File typeJavaScript source, ASCII text, with very long lines (44038), with no line terminators Hash876de1fe4812cff5fd0be73c87b48bf4 b7a655ab54b76306d9d5c8f059f86ada46e670ea 21b1d918c70ae0be273b497f64cbaf26e985194d2284cb184ecb371fca67a03d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /5e/06/e3/5e06e36b7a65cdb98c53b8adc900ef75.js HTTP/1.1
Host: dishcling.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 04 May 2024 23:49:57 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_CF-3448=0; expires=Wed, 08 May 2024 02:49:57 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9ea466a758c92676c1b526bb8b07bb0f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| repairvisionsturgeon.com/7e2d4fe168a1e398773143463900f16f/invoke.js | 172.240.253.132 | 200 OK | 12 kB |
URL GET HTTP/1.1repairvisionsturgeon.com/7e2d4fe168a1e398773143463900f16f/invoke.js IP172.240.253.132:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerLet's Encrypt Subjectrepairvisionsturgeon.com FingerprintFA:5A:51:C6:86:15:F2:89:80:13:A6:7A:E3:AB:C3:CB:3B:E1:AE:E4 ValidityTue, 26 Mar 2024 07:44:08 GMT - Mon, 24 Jun 2024 07:44:07 GMT
File typeJavaScript source, ASCII text, with very long lines (31269), with no line terminators Hash95bbee391cb6f40715ec594fba297b98 8d3d643fc1e073b1830fe1c393acc4f59f4362da f948a861719714d3e00d2922fe552b365d2eb61b39626c5520ced1d7eba0efa3
GET /7e2d4fe168a1e398773143463900f16f/invoke.js HTTP/1.1
Host: repairvisionsturgeon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 04 May 2024 23:49:58 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 17c1b9d487d20a102f6d0d0aec81c7a5
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| adoto.net/dashboard/upload/credit/1-icon-1616283432.jpg | 104.21.49.113 | 200 OK | 510 B |
URL GET HTTP/3adoto.net/dashboard/upload/credit/1-icon-1616283432.jpg IP104.21.49.113:443
Requested byhttps://adoto.net/dashboard/display/index.php?page=query/items/&aduid=6792&pid=2875&width=468&height=60&displaytype=4&native=0&device_type=large_dev_adblock&block_id=0&responsive=0&adcode_count=1&adSectionWidth=1258&page_data=3554ad0744142723c8be8ebbc7da27b3&time=1714866597&deliver=videy.io&search_keywords=video%2Cupload%2Canonymous%2Cfree%2Cvideoupload&page_referrer=aHR0cHM6Ly92aWRleS5pby92L2p4a2p1eXZ2Nzcx&page_title=Videy%20io&meta_description=Fast%20%26%20Free%20Video%20Hosting%20Service CertificateIssuerGoogle Trust Services LLC Subjectadoto.net FingerprintA7:E3:05:E7:7E:96:8F:41:46:BC:9D:E9:09:C1:2A:C6:27:B7:26:66 ValidityTue, 02 Apr 2024 00:48:15 GMT - Mon, 01 Jul 2024 00:48:14 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 18x18, components 3 Hashf51699ea05de1cc529f97305ec5dc109 10073fb887db09a9aed274bd0c4ca2c9aacb6dfd 1bafece3ffa322300ff62bc835e4283963fcacdc0702b4ef98589d8351d1a568
GET /dashboard/upload/credit/1-icon-1616283432.jpg HTTP/1.1
Host: adoto.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adoto.net/dashboard/display/index.php?page=query/items/&aduid=6792&pid=2875&width=468&height=60&displaytype=4&native=0&device_type=large_dev_adblock&block_id=0&responsive=0&adcode_count=1&adSectionWidth=1258&page_data=3554ad0744142723c8be8ebbc7da27b3&time=1714866597&deliver=videy.io&search_keywords=video%2Cupload%2Canonymous%2Cfree%2Cvideoupload&page_referrer=aHR0cHM6Ly92aWRleS5pby92L2p4a2p1eXZ2Nzcx&page_title=Videy%20io&meta_description=Fast%20%26%20Free%20Video%20Hosting%20Service
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 23:49:58 GMT
content-type: image/jpeg
content-length: 510
last-modified: Mon, 20 Sep 2021 21:50:03 GMT
expires: Sat, 29 Jun 2024 16:18:22 GMT
cache-control: max-age=5184000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: STALE
x-server-powered-by: Engintron
cf-cache-status: HIT
age: 372696
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YX5l3WXfrF6Aa%2FSno6%2FwcScLQQbi5%2FxkAKx7epKotPHzt66mJZyzrGSLYACKb%2BPiUprhLleYp%2BJJ6gR34Bc%2FxS1mvMxs%2BTZtzh5UMB11DO4SgghXvH3DfMwNWsg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ec63f04d9c5685-OSL
alt-svc: h3=":443"; ma=86400
|
|
| adoto.net/dashboard/display/js/jquery.min.js | 104.21.49.113 | 200 OK | 75 kB |
URL GET HTTP/3adoto.net/dashboard/display/js/jquery.min.js IP104.21.49.113:443
Requested byhttps://adoto.net/dashboard/display/index.php?page=query/items/&aduid=6792&pid=2875&width=468&height=60&displaytype=4&native=0&device_type=large_dev_adblock&block_id=0&responsive=0&adcode_count=1&adSectionWidth=1258&page_data=3554ad0744142723c8be8ebbc7da27b3&time=1714866597&deliver=videy.io&search_keywords=video%2Cupload%2Canonymous%2Cfree%2Cvideoupload&page_referrer=aHR0cHM6Ly92aWRleS5pby92L2p4a2p1eXZ2Nzcx&page_title=Videy%20io&meta_description=Fast%20%26%20Free%20Video%20Hosting%20Service CertificateIssuerGoogle Trust Services LLC Subjectadoto.net FingerprintA7:E3:05:E7:7E:96:8F:41:46:BC:9D:E9:09:C1:2A:C6:27:B7:26:66 ValidityTue, 02 Apr 2024 00:48:15 GMT - Mon, 01 Jul 2024 00:48:14 GMT
File typeJavaScript source, Unicode text, UTF-8 text Hash55af02675a5f989e0aecfe5a6fbcb2e6 53911b859cd580faa116fc0b7ff081dbe04ee4b2 a3caed62a1e0d87142db5c8c39d43a61cf0679700fdf6dffc6598f35242da762
GET /dashboard/display/js/jquery.min.js HTTP/1.1
Host: adoto.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adoto.net/dashboard/display/index.php?page=query/items/&aduid=6792&pid=2875&width=468&height=60&displaytype=4&native=0&device_type=large_dev_adblock&block_id=0&responsive=0&adcode_count=1&adSectionWidth=1258&page_data=3554ad0744142723c8be8ebbc7da27b3&time=1714866597&deliver=videy.io&search_keywords=video%2Cupload%2Canonymous%2Cfree%2Cvideoupload&page_referrer=aHR0cHM6Ly92aWRleS5pby92L2p4a2p1eXZ2Nzcx&page_title=Videy%20io&meta_description=Fast%20%26%20Free%20Video%20Hosting%20Service
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 23:49:58 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sun, 11 Apr 2021 22:28:47 GMT
expires: Thu, 30 May 2024 20:12:37 GMT
cache-control: max-age=2592000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: STALE
x-server-powered-by: Engintron
cf-cache-status: HIT
age: 358641
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MHzYEe0H8Fc0Ae0jHC4XZ5CJzAyyEiAcjx%2B%2Fgx3BG47Qp%2FqUxG3tTkEBI394ZMStl8ksix9yp1dTsDxjnLGxG5OI17mKjwSwagbQXyqP6Myrc3DbcdV6bZuHUus%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63f03d9b5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| downstairsnegotiatebarren.com/sfp.js | 104.21.35.227 | 200 OK | 28 kB |
URL GET HTTP/3downstairsnegotiatebarren.com/sfp.js IP104.21.35.227:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint5D:DB:CB:C6:CE:2A:8B:34:7D:BC:43:74:33:1D:5F:77:48:F7:BC:1B ValidityThu, 02 May 2024 21:26:34 GMT - Wed, 31 Jul 2024 21:26:33 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators Hashf4a2f8f9f99541c6f105bbd0a025bd40 1f8e3eff12168fdd9e719adfc098d24a45b6916a b717cb04231a10d425fd55b73c85a5407119c6826a8bac94142fddfff6958716
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 23:49:58 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 94483aedb19ec2e70d6f97076d6e0bb8
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sat, 04 May 2024 23:49:57 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XbuRplRV82OR5d6wwle%2B2m%2FB9GZ207WcpecDrzMfwBhtJp5Rjj%2BcDha5WNIbDaa%2FWZvMQZnc2tqkdyj02nNApFnrcLJe0NByL5zxnnhp6%2F3cRRhiyOCR0rN9rSslTvjGyt9gHUbWrOgJ5npqgzEuIA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ec63eddeae7130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| my.rtmark.net/gid.js?userId=008052d708994fd7fd1f8cc94720c1c7 |  139.45.195.8 | 200 OK | 65 B |
URL GET HTTP/2my.rtmark.net/gid.js?userId=008052d708994fd7fd1f8cc94720c1c7 IP139.45.195.8:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerLet's Encrypt Subjectrtmark.net FingerprintDB:C0:8B:64:1C:E3:2A:9C:B9:04:0D:F3:6F:5A:E0:35:F4:C7:75:CC ValiditySat, 02 Mar 2024 21:53:43 GMT - Fri, 31 May 2024 21:53:42 GMT
Hash026a5f747a20b1b795935813e1857431 948f28199b985634e5ed660ea27b91556ac79f2d c2f514575ec6c6526fdeb4eedb05bb9b72af9af23d4268941f8c7dea77a3cc20
GET /gid.js?userId=008052d708994fd7fd1f8cc94720c1c7 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videy.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 23:49:58 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://videy.io
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=008052d708994fd7fd1f8cc94720c1c7; expires=Sun, 04 May 2025 23:49:58 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| fiendpreyencircle.com/watch.750969371110.js?dev=e&key=7e2d4fe168a1e398773143463900f16f&kw=%5B%22videy%22%2C%22io%22%5D&pst=1714866658&refer=https%3A%2F%2Fvidey.io%2Fv%2Fjxkjuyvv771&res=14.2071&rmtc=t&shu=0b5f8eb9848bc4633d5d8cb42f4b9a4713ff3740bcb716ba8949cebe7b015c6f09b03d5ca45935e6af6c78b1d55e26359ea6d0cac7ceee1280296fcac6f9c39f342c959b74fe7aa821bc49de221793c127d33ddbf5e311ffc9f8e2c5f5&tz=0&uuid=5e0851c0-05eb-4f8f-8383-366e3a425c2b%3A2%3A1 | 192.243.61.227 | 200 OK | 2.0 kB |
URL GET HTTP/1.1fiendpreyencircle.com/watch.750969371110.js?dev=e&key=7e2d4fe168a1e398773143463900f16f&kw=%5B%22videy%22%2C%22io%22%5D&pst=1714866658&refer=https%3A%2F%2Fvidey.io%2Fv%2Fjxkjuyvv771&res=14.2071&rmtc=t&shu=0b5f8eb9848bc4633d5d8cb42f4b9a4713ff3740bcb716ba8949cebe7b015c6f09b03d5ca45935e6af6c78b1d55e26359ea6d0cac7ceee1280296fcac6f9c39f342c959b74fe7aa821bc49de221793c127d33ddbf5e311ffc9f8e2c5f5&tz=0&uuid=5e0851c0-05eb-4f8f-8383-366e3a425c2b%3A2%3A1 IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerLet's Encrypt Subjectfiendpreyencircle.com FingerprintA8:00:E4:8E:F1:51:D1:BE:9E:13:33:2F:1E:B8:1A:72:B4:7B:80:CB ValidityMon, 29 Apr 2024 08:17:52 GMT - Sun, 28 Jul 2024 08:17:51 GMT
File typeJavaScript source, ASCII text, with very long lines (2419) Hash7b64fad8f443277fa63af84e57dc3bb9 b2ea425f7df519f84e8bd9cd7e2e29afa5abc2a7 6c2564bf3359fb18b0d85823973d38905033690e86a218200f4be6b1e95dbd25
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.750969371110.js?dev=e&key=7e2d4fe168a1e398773143463900f16f&kw=%5B%22videy%22%2C%22io%22%5D&pst=1714866658&refer=https%3A%2F%2Fvidey.io%2Fv%2Fjxkjuyvv771&res=14.2071&rmtc=t&shu=0b5f8eb9848bc4633d5d8cb42f4b9a4713ff3740bcb716ba8949cebe7b015c6f09b03d5ca45935e6af6c78b1d55e26359ea6d0cac7ceee1280296fcac6f9c39f342c959b74fe7aa821bc49de221793c127d33ddbf5e311ffc9f8e2c5f5&tz=0&uuid=5e0851c0-05eb-4f8f-8383-366e3a425c2b%3A2%3A1 HTTP/1.1
Host: fiendpreyencircle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videy.io
DNT: 1
Connection: keep-alive
Cookie: u_pl=16978123; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjk3ODEyMywiayI6IjdlMmQ0ZmUxNjhhMWUzOTg3NzMxNDM0NjM5MDBmMTZmIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxMzg3MzIyLCJwaWQiOjU3MTcxLCJhbiI6dHJ1ZSwibGFuIjp0cnVlLCJjaWQiOjM0LCJhaWQiOjIzLCJwdCI6NCwicGsiOiJ3MWo4NWt5cDMiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly92aWRleS5pby92L2p4a2p1eXZ2NzcxIiwiYXIiOltdfX0.gz5dQmMZ0Jxm9coJYtiUSgWJpkiO0llMJ8Z0q297-RI
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 04 May 2024 23:49:58 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://videy.io
Access-Control-Allow-Origin: https://videy.io
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=5e0851c0-05eb-4f8f-8383-366e3a425c2b:2:1; expires=Sat, 11 May 2024 23:49:58 GMT; secure; SameSite=None
pdhtkv=true; expires=Sun, 05 May 2024 23:49:58 GMT; secure; SameSite=None
uncs=1; expires=Sun, 05 May 2024 23:49:58 GMT; secure; SameSite=None
pdhtkv23=true; expires=Sun, 05 May 2024 23:49:58 GMT; secure; SameSite=None
uncs23=1; expires=Sun, 05 May 2024 23:49:58 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f041ebbe697d3cfaf542296b89882331
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| capaciousdrewreligion.com/advertisers.js | 172.240.108.84 | 200 OK | 0 B |
URL GET HTTP/1.1capaciousdrewreligion.com/advertisers.js IP172.240.108.84:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerLet's Encrypt Subjectcapaciousdrewreligion.com Fingerprint53:B6:ED:C6:B5:B6:60:3E:6D:02:5A:92:2E:C3:12:74:64:A1:23:DC ValidityWed, 06 Mar 2024 11:57:32 GMT - Tue, 04 Jun 2024 11:57:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: capaciousdrewreligion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 04 May 2024 23:49:58 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 02d5026d74e8118d1c21fdf34af229aa
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.cloudimagesb.com/cti/27/cf/a9/27cfa94bc21f8231e12ae94f4cebe367/1627917273.png | 45.133.44.9 | 200 OK | 56 kB |
URL GET HTTP/2cdn.cloudimagesb.com/cti/27/cf/a9/27cfa94bc21f8231e12ae94f4cebe367/1627917273.png IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://videy.io/v/jxkjuyvv771
File typePNG image data, 728 x 90, 8-bit/color RGB, non-interlaced Hash231d615f0b920b0f0c8758342141193b ca68f0f6e4c9124bbe61c49d789d0447076b0332 3e24999c26c1c68485e879756ea30639ccee4d7f30f1e2c0e5190818cbab8996
GET /cti/27/cf/a9/27cfa94bc21f8231e12ae94f4cebe367/1627917273.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 23:49:59 GMT
content-type: image/png
content-length: 56505
server: nginx/1.21.6
last-modified: Mon, 02 Aug 2021 15:14:41 GMT
etag: "61080be1-dcb9"
expires: Mon, 06 May 2024 23:49:59 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.99 | 200 OK | 206 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videy.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:59:48 GMT
expires: Fri, 02 May 2025 01:59:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 251411
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| claimtokens.net/terra.js | 104.21.4.78 | 200 OK | 363 B |
IP104.21.4.78:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerLet's Encrypt Subjectclaimtokens.net FingerprintE4:E1:0E:D5:BF:37:55:1E:DA:66:64:49:0D:C1:C1:9A:CE:05:16:68 ValidityThu, 18 Apr 2024 10:28:12 GMT - Wed, 17 Jul 2024 10:28:11 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash0ee9c11d5afd1710aa961ec887272d82 c9eefcab5f3610d6fac39e71cce666672019ea7f 88400b2f3300305790bb29e52725c459d09dafcd569d88a37f8a6c61281668d4
GET /terra.js HTTP/1.1
Host: claimtokens.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 23:49:57 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 22:07:18 GMT
etag: W/"35b-617437a0d9eab-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 2207
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W6OwZxP%2Bgr2nqdtTQm4uTYTYRkDlUu3hUhZ%2FoEljswsSni7ZO%2BJfRrydSWw%2BgXgJDwczK657yL4mHNWFWLvjNbwc6u8Hz4OdrUwjm47IRBR5hy1tsRko8%2FbT%2BLjQmaEbrMQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63eafdb956a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| unseenreport.com/pxf.gif?uuid=5e0851c0-05eb-4f8f-8383-366e3a425c2b&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=5e06e36b7a65cdb98c53b8adc900ef75&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=23 | 192.243.61.225 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=5e0851c0-05eb-4f8f-8383-366e3a425c2b&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=5e06e36b7a65cdb98c53b8adc900ef75&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=23 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=5e0851c0-05eb-4f8f-8383-366e3a425c2b&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=5e06e36b7a65cdb98c53b8adc900ef75&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=23 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 04 May 2024 23:50:00 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 415e8b2adc3da461409c84d4461d443e
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| loazuptaice.net/5/5116780/?oo=1&js_build=iclick-v1.788.6-auto | 139.45.197.242 | 200 OK | 9.9 kB |
URL GET HTTP/2loazuptaice.net/5/5116780/?oo=1&js_build=iclick-v1.788.6-auto IP139.45.197.242:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerLet's Encrypt Subjectloazuptaice.net Fingerprint72:CE:22:83:E9:95:26:B8:3D:66:AD:8B:25:75:5C:CA:CC:7F:36:6B ValidityFri, 03 May 2024 00:34:21 GMT - Thu, 01 Aug 2024 00:34:20 GMT
File typegzip compressed data, max speed, from Unix Hash2c291ad01329672c9c25cabd728b0893 02a411ae9e93f12174af03c275af8c249c460858 0312b6607946e0683e9197e069a35b6abd9d115afd507ff2a9fb9da4c3ee1a56
GET /5/5116780/?oo=1&js_build=iclick-v1.788.6-auto HTTP/1.1
Host: loazuptaice.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videy.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 23:49:58 GMT
content-type: application/json
x-trace-id: 7cf0f709df4aaba18620088bc147b426
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://videy.io
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=008052d708994fd7fd1f8cc94720c1c7; expires=Sun, 04 May 2025 23:49:58 GMT; path=/; secure; SameSite=None
oaidts=1714866598; expires=Sun, 04 May 2025 23:49:58 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| videy.io/application/views/themes/neo_black9/assets/player/plyr.js | 104.21.79.10 | 200 OK | 146 kB |
URL GET HTTP/3videy.io/application/views/themes/neo_black9/assets/player/plyr.js IP104.21.79.10:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectvidey.io Fingerprint7C:57:01:B3:8A:67:B6:E9:BC:16:20:08:F4:A3:5C:C4:BB:8A:8B:E5 ValidityTue, 02 Apr 2024 22:30:18 GMT - Mon, 01 Jul 2024 22:30:17 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size146 kB (145868 bytes) Hasha01314f213e9f3ec6cf19540eec827f0 dbe0a27ea2c95c3ea27606b116d32f0ec3ede4a6 45f4aa8a9e618860471d878e14492f31f58b3f662a27c719004507d76e69739e
GET /application/views/themes/neo_black9/assets/player/plyr.js HTTP/1.1
Host: videy.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://videy.io/v/jxkjuyvv771
DNT: 1
Connection: keep-alive
Cookie: ci_session=58b8a67fc3afdf3edc8217ddf4abf71d5a2e5bab; siu-lang-idiom=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 23:49:57 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-origin: *
x-original-content-length: 284896
etag: W/"PSA-aj-oBMU8hPp8-"
expires: Sun, 16 Apr 2034 03:03:19 GMT
cache-control: max-age=313902801
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9TNyF9F9vyGdbdNXDXRsJ8qsOd27zWbPr1dBOsu5qAABgvxMm2yUCWhTQSR93Aqy1y5fC%2FJ64A6l8MWztIYgCVTPHC3PW1yeI4ycRojONUBTB8HURmKHHTXrcg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63e48b3f569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| videy.io/public/css/dropzone.min.css | 104.21.79.10 | 200 OK | 9.8 kB |
URL GET HTTP/3videy.io/public/css/dropzone.min.css IP104.21.79.10:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectvidey.io Fingerprint7C:57:01:B3:8A:67:B6:E9:BC:16:20:08:F4:A3:5C:C4:BB:8A:8B:E5 ValidityTue, 02 Apr 2024 22:30:18 GMT - Mon, 01 Jul 2024 22:30:17 GMT
File typeASCII text, with very long lines (9752), with no line terminators Hashf15703678b9a2d72f5ae69f0f06355e4 143746e68e78ed41f839551cb31e21ea936533b4 b5c7eb832e24e312920f55213a7b5a1b6d7537d6282a7ac4876d97368c88d887
GET /public/css/dropzone.min.css HTTP/1.1
Host: videy.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://videy.io/v/jxkjuyvv771
DNT: 1
Connection: keep-alive
Cookie: ci_session=58b8a67fc3afdf3edc8217ddf4abf71d5a2e5bab; siu-lang-idiom=english
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 23:49:56 GMT
content-type: text/css
vary: Accept-Encoding
access-control-allow-origin: *
x-original-content-length: 9847
etag: W/"PSA-aj-8VcDZ4uaLX"
expires: Sun, 16 Apr 2034 03:01:10 GMT
cache-control: max-age=314269857
cf-cache-status: HIT
age: 367184
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y%2BInf002Z5XUJG8e%2BO1SvfquJD8fUFjUCijRJO6%2BctKM04Sul%2F6A5kXa0Pmsq2aHOd8k71SI1w8vcFTWE07e%2By9tgVdmU5p493l%2FdhEVJwbdzA8pd81AXqXEvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63e48afc569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| foostoug.com/?rb=G7dbmn7lsb3f7ABmfjI1dctMX4l87WyEIzq5qUUi_83vThZbfFi2dVcR7KSAku3Sn47C9LV757DNeuGXQNGRukep3YEBG4t_RkSk0E7jFMbbiKag3HDHlNj7l3ZNU06xKJypcOFFj80-5XH4PLk7mhwwvCGJr5CVc67eMKHbT7iM5Ly6N7LVzlF_E9DruwcYnhI-K9suMFC8EWuq7D7xjc_KirIoCLI1kuVvsezf0Qg%3D&request_ab2=0&zoneid=5116780&js_build=iclick-v1.788.6-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=1&pl=https%3A%2F%2Fvidey.io%2Fv%2Fjxkjuyvv771&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.788.6-auto&navlng=en-US&pnt=0&pnrc=0&bs=a90afec7-0b7f-483c-ba3d-653acee0dde7&wasm=1&userId=008052d708994fd7fd1f8cc94720c1c7&m=link | 139.45.197.242 | 200 OK | 2.3 kB |
URL GET HTTP/2foostoug.com/?rb=G7dbmn7lsb3f7ABmfjI1dctMX4l87WyEIzq5qUUi_83vThZbfFi2dVcR7KSAku3Sn47C9LV757DNeuGXQNGRukep3YEBG4t_RkSk0E7jFMbbiKag3HDHlNj7l3ZNU06xKJypcOFFj80-5XH4PLk7mhwwvCGJr5CVc67eMKHbT7iM5Ly6N7LVzlF_E9DruwcYnhI-K9suMFC8EWuq7D7xjc_KirIoCLI1kuVvsezf0Qg%3D&request_ab2=0&zoneid=5116780&js_build=iclick-v1.788.6-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=1&pl=https%3A%2F%2Fvidey.io%2Fv%2Fjxkjuyvv771&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.788.6-auto&navlng=en-US&pnt=0&pnrc=0&bs=a90afec7-0b7f-483c-ba3d-653acee0dde7&wasm=1&userId=008052d708994fd7fd1f8cc94720c1c7&m=link IP139.45.197.242:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerLet's Encrypt Subjectfoostoug.com Fingerprint22:0F:4E:7D:D7:FC:FA:1F:B4:CB:52:4E:8F:1D:BA:E1:BF:97:C3:4B ValiditySat, 04 May 2024 12:34:12 GMT - Fri, 02 Aug 2024 12:34:11 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (2320), with no line terminators Hashc6ead74b9d9d19a254f917ad787080b4 394fd4562421baf91acf8e3b9b9608a2982db38e 4d8a1c8862434058371835c5131fbe5b94aec21a1e930b7304e7b4320ed67fe2
GET /?rb=G7dbmn7lsb3f7ABmfjI1dctMX4l87WyEIzq5qUUi_83vThZbfFi2dVcR7KSAku3Sn47C9LV757DNeuGXQNGRukep3YEBG4t_RkSk0E7jFMbbiKag3HDHlNj7l3ZNU06xKJypcOFFj80-5XH4PLk7mhwwvCGJr5CVc67eMKHbT7iM5Ly6N7LVzlF_E9DruwcYnhI-K9suMFC8EWuq7D7xjc_KirIoCLI1kuVvsezf0Qg%3D&request_ab2=0&zoneid=5116780&js_build=iclick-v1.788.6-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=1&pl=https%3A%2F%2Fvidey.io%2Fv%2Fjxkjuyvv771&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.788.6-auto&navlng=en-US&pnt=0&pnrc=0&bs=a90afec7-0b7f-483c-ba3d-653acee0dde7&wasm=1&userId=008052d708994fd7fd1f8cc94720c1c7&m=link HTTP/1.1
Host: foostoug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videy.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 23:49:59 GMT
content-type: application/json
x-trace-id: d0b0785e387f09122b58d91aa270aa81
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://videy.io
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=008052d708994fd7fd1f8cc94720c1c7; expires=Sun, 04 May 2025 23:49:59 GMT; path=/; secure; SameSite=None
oaidts=1714866599; expires=Sun, 04 May 2025 23:49:59 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Sat, 11 May 2024 23:49:59 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| videy.io/application/views/themes/neo_black9/assets/css/style.css | 104.21.79.10 | 200 OK | 46 kB |
URL GET HTTP/3videy.io/application/views/themes/neo_black9/assets/css/style.css IP104.21.79.10:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectvidey.io Fingerprint7C:57:01:B3:8A:67:B6:E9:BC:16:20:08:F4:A3:5C:C4:BB:8A:8B:E5 ValidityTue, 02 Apr 2024 22:30:18 GMT - Mon, 01 Jul 2024 22:30:17 GMT
File typeASCII text, with very long lines (38523) Hash26b78443ca524c4e18c285e72af10d20 6c1053e8c4558d6db961db04e85f70c3d6a1398e 435a2367bbe37f965b4e6b61a813e351876b931a9c293ae0dccbb477314293bf
GET /application/views/themes/neo_black9/assets/css/style.css HTTP/1.1
Host: videy.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://videy.io/v/jxkjuyvv771
DNT: 1
Connection: keep-alive
Cookie: ci_session=58b8a67fc3afdf3edc8217ddf4abf71d5a2e5bab; siu-lang-idiom=english
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 23:49:56 GMT
content-type: text/css
vary: Accept-Encoding
access-control-allow-origin: *
x-original-content-length: 56986
etag: W/"PSA-aj-JreEQ8pSTE"
expires: Sun, 16 Apr 2034 03:01:10 GMT
cache-control: max-age=314269857
cf-cache-status: HIT
age: 367184
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5IyG5sCJywBLLnKosk9OBFQUwRcpZ4wmovw5oQCxMn2OHkxpSyOt3MbjOtUHNrLBK1sfFzT8vC42OIZOqU5wI1bAkbR0M4VowBkCMUy%2FOUt9WeAelOlHR5w3Og%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63e48b09569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15920, version 1.0 Hash3a44e06eb954b96aa043227f3534189d 23cef6993ddb2b2979e8e7647fc3763694e2ba7d b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://videy.io
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:03:54 GMT
expires: Fri, 02 May 2025 02:03:54 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 251163
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fiendpreyencircle.com/watch.750969371110.js?key=7e2d4fe168a1e398773143463900f16f&kw=%5B%22videy%22%2C%22io%22%5D&refer=https%3A%2F%2Fvidey.io%2Fv%2Fjxkjuyvv771&tz=0&dev=e&res=14.2071&uuid=5e0851c0-05eb-4f8f-8383-366e3a425c2b%3A2%3A1 | 192.243.61.227 | 307 Temporary Redirect | 3.3 kB |
URL GET HTTP/1.1fiendpreyencircle.com/watch.750969371110.js?key=7e2d4fe168a1e398773143463900f16f&kw=%5B%22videy%22%2C%22io%22%5D&refer=https%3A%2F%2Fvidey.io%2Fv%2Fjxkjuyvv771&tz=0&dev=e&res=14.2071&uuid=5e0851c0-05eb-4f8f-8383-366e3a425c2b%3A2%3A1 IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerLet's Encrypt Subjectfiendpreyencircle.com FingerprintA8:00:E4:8E:F1:51:D1:BE:9E:13:33:2F:1E:B8:1A:72:B4:7B:80:CB ValidityMon, 29 Apr 2024 08:17:52 GMT - Sun, 28 Jul 2024 08:17:51 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.750969371110.js?key=7e2d4fe168a1e398773143463900f16f&kw=%5B%22videy%22%2C%22io%22%5D&refer=https%3A%2F%2Fvidey.io%2Fv%2Fjxkjuyvv771&tz=0&dev=e&res=14.2071&uuid=5e0851c0-05eb-4f8f-8383-366e3a425c2b%3A2%3A1 HTTP/1.1
Host: fiendpreyencircle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videy.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Sat, 04 May 2024 23:49:58 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://videy.io
Access-Control-Allow-Origin: https://videy.io
Access-Control-Allow-Credentials: true
Location: https://fiendpreyencircle.com/watch.750969371110.js?dev=e&key=7e2d4fe168a1e398773143463900f16f&kw=%5B%22videy%22%2C%22io%22%5D&pst=1714866658&refer=https%3A%2F%2Fvidey.io%2Fv%2Fjxkjuyvv771&res=14.2071&rmtc=t&shu=0b5f8eb9848bc4633d5d8cb42f4b9a4713ff3740bcb716ba8949cebe7b015c6f09b03d5ca45935e6af6c78b1d55e26359ea6d0cac7ceee1280296fcac6f9c39f342c959b74fe7aa821bc49de221793c127d33ddbf5e311ffc9f8e2c5f5&tz=0&uuid=5e0851c0-05eb-4f8f-8383-366e3a425c2b%3A2%3A1
Set-Cookie: u_pl=16978123; expires=Sun, 05 May 2024 23:49:58 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.gz5dQmMZ0Jxm9coJYtiUSgWJpkiO0llMJ8Z0q297-RI; expires=Sat, 04 May 2024 23:50:58 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8eb3cabfb502411423702290e0bf2079
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| zovidree.com/tag.min.js | 172.67.166.14 | 200 OK | 90 kB |
IP172.67.166.14:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerLet's Encrypt Subjectzovidree.com FingerprintE7:A2:02:40:34:64:74:90:8F:C4:F5:DA:6D:7F:08:2D:33:29:9A:FD ValidityMon, 22 Apr 2024 15:25:10 GMT - Sun, 21 Jul 2024 15:25:09 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash6161cd5b16afc637789c8a29da15ed13 04f9e513c05079726b06b2154995c4c5c7c09b08 562a877675f8c3df7e1be8c3b2999127466ca8784a0a556810ec018ab6c86e34
GET /tag.min.js HTTP/1.1
Host: zovidree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 23:49:58 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: cf621da8d36d50898f050a2ce5f58e6d
cache-control: max-age=86400
last-modified: Fri, 03 May 2024 05:48:56 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
expires: Sun, 05 May 2024 16:52:26 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 25052
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xHg2COfBiu3oiKjjsZUftF5zpRV7UY5UeAWfX7ChmRo8iCMxIcVUwu%2FP37p6by5QV4NGa6kOOnFi8q1BHDhYTxMCeuNE58z%2FbUt9KH5DEm2orRyzy7QsZTRtcGGRVok%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ec63f0aa3a7128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| videy.io/application/uploads/img/favicon.png | 104.21.79.10 | 200 OK | 2.0 kB |
URL GET HTTP/3videy.io/application/uploads/img/favicon.png IP104.21.79.10:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectvidey.io Fingerprint7C:57:01:B3:8A:67:B6:E9:BC:16:20:08:F4:A3:5C:C4:BB:8A:8B:E5 ValidityTue, 02 Apr 2024 22:30:18 GMT - Mon, 01 Jul 2024 22:30:17 GMT
File typePNG image data, 145 x 145, 8-bit colormap, non-interlaced Hashf821f4806c5cb75b04c675d3eb591e4f bb0adeae18a03a65e9fd0ff3c8713eecac5897b2 a2ca8b65e661c3f6d55f270c7f3bcaa06446b4e5a38b0e8f7135983ce30b53d2
GET /application/uploads/img/favicon.png HTTP/1.1
Host: videy.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://videy.io/v/jxkjuyvv771
DNT: 1
Connection: keep-alive
Cookie: ci_session=58b8a67fc3afdf3edc8217ddf4abf71d5a2e5bab; siu-lang-idiom=english; _ga_CWZNWGQMDS=GS1.1.1714866597.1.0.1714866597.0.0.0; _ga=GA1.1.1362308479.1714866597; dom3ic8zudi28v8lr6fgphwffqoz0j6c=5e0851c0-05eb-4f8f-8383-366e3a425c2b%3A2%3A1; _ga_37X41MY0HW=GS1.1.1714866597.1.0.1714866597.0.0.0; pp_main_470847c9e5839f52ad650b9b77bef6af=1; prefetchAd_5116780=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 23:49:59 GMT
content-type: image/png
vary: Accept-Encoding
access-control-allow-origin: *
x-original-content-length: 17997
etag: W/"PSA-aj--CH0gGxct1"
expires: Sun, 16 Apr 2034 03:03:30 GMT
cache-control: max-age=314257657
cf-cache-status: HIT
age: 354847
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JwSE3idI%2FdH%2FVzquEhwlJ1XoboSHffmk3lrWJN8OAE2UplnpOBVXIx65mGJ5ErXf8k1iuQjrRRHBhGOTB%2BJluaTRiwxqMHSF8ed%2BXiG6KfCVNxwlQCCQGqijTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63f4be54569a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| videy.io/public/css/bootstrap.min.css | 104.21.79.10 | 200 OK | 160 kB |
URL GET HTTP/3videy.io/public/css/bootstrap.min.css IP104.21.79.10:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectvidey.io Fingerprint7C:57:01:B3:8A:67:B6:E9:BC:16:20:08:F4:A3:5C:C4:BB:8A:8B:E5 ValidityTue, 02 Apr 2024 22:30:18 GMT - Mon, 01 Jul 2024 22:30:17 GMT
File typeASCII text, with very long lines (65319), with CRLF line terminators Size160 kB (160362 bytes) Hash24cc8c955358f312b3deb9f5c55d5744 4a41cf1be6840d26f6e8686fca052aa6225ec951 d8cf0e79a5090f2bd9fb04cc7036c415f43b6a9cbab6f522972ec05409f2652e
GET /public/css/bootstrap.min.css HTTP/1.1
Host: videy.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://videy.io/v/jxkjuyvv771
DNT: 1
Connection: keep-alive
Cookie: ci_session=58b8a67fc3afdf3edc8217ddf4abf71d5a2e5bab; siu-lang-idiom=english
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 23:49:56 GMT
content-type: text/css
vary: Accept-Encoding
etag: W/"5f6b7a2c-2726a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
access-control-allow-origin: *
cache-control: max-age=315360000
cf-cache-status: HIT
age: 367184
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PscEJx4dQv53iAY8dMO%2FktJWzEy6yziq8%2Fp%2FhZO4PXAR%2BEKDmyCgpa2WwaTy368xewPKoU60R2OyiFu2YOdj4LKnYgGMjFV3uxb66AAOwA4930iyOqEsn8t3cg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63e48af8569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| videy.io/application/views/themes/neo_black9/assets/player/demo.css | 104.21.79.10 | 200 OK | 33 kB |
URL GET HTTP/3videy.io/application/views/themes/neo_black9/assets/player/demo.css IP104.21.79.10:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectvidey.io Fingerprint7C:57:01:B3:8A:67:B6:E9:BC:16:20:08:F4:A3:5C:C4:BB:8A:8B:E5 ValidityTue, 02 Apr 2024 22:30:18 GMT - Mon, 01 Jul 2024 22:30:17 GMT
File typeASCII text, with very long lines (16510) Hashf266571246e331e7fe98efebceab95b8 0349b7903cdf5312defd219a2c552321f17da540 c51e845c0fa782935affc538ffba5b455f59eff502d06f29146ff6b1402ef3e0
GET /application/views/themes/neo_black9/assets/player/demo.css HTTP/1.1
Host: videy.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://videy.io/v/jxkjuyvv771
DNT: 1
Connection: keep-alive
Cookie: ci_session=58b8a67fc3afdf3edc8217ddf4abf71d5a2e5bab; siu-lang-idiom=english
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 23:49:56 GMT
content-type: text/css
vary: Accept-Encoding
access-control-allow-origin: *
x-original-content-length: 40418
etag: W/"PSA-aj-8mZXEkbjMe"
expires: Sun, 16 Apr 2034 03:01:10 GMT
cache-control: max-age=314266395
cf-cache-status: HIT
age: 363722
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tksxsM6snkkmzrmKCY59HpOfX2bX1liNPuXAPiUdFozX4xTQh7sa%2BshfalPmmtIsoyU2abAimMKpT7H%2BGewkMCcigIKkJ24OkEUopfRyholoJfkdqqnwozt77Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63e48b3c569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| videy.io/public/css/fonts.min.css | 104.21.79.10 | 200 OK | 68 kB |
URL GET HTTP/3videy.io/public/css/fonts.min.css IP104.21.79.10:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectvidey.io Fingerprint7C:57:01:B3:8A:67:B6:E9:BC:16:20:08:F4:A3:5C:C4:BB:8A:8B:E5 ValidityTue, 02 Apr 2024 22:30:18 GMT - Mon, 01 Jul 2024 22:30:17 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash62ca548956efe50db223a3a1067973b8 9e736ef1b4fd83b770e1e911a25d00921d899560 6b4770724a325fb5d0fb8a7701317cd86c68bdd0470b46bdf48afa82d29c1c24
GET /public/css/fonts.min.css HTTP/1.1
Host: videy.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://videy.io/v/jxkjuyvv771
DNT: 1
Connection: keep-alive
Cookie: ci_session=58b8a67fc3afdf3edc8217ddf4abf71d5a2e5bab; siu-lang-idiom=english
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 23:49:56 GMT
content-type: text/css
vary: Accept-Encoding
access-control-allow-origin: *
x-original-content-length: 67695
etag: W/"PSA-aj-YspUiVbv5Q"
expires: Sun, 16 Apr 2034 03:03:25 GMT
cache-control: max-age=314258699
cf-cache-status: HIT
age: 355890
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xYveoDZVT3dR%2BMm9n3vtFivCvyfsPhyUreZLyOjn7YW1jZ0iv5u2LJ2fY5u4Tk%2B4VfT3Mf1ID3S7Ti9m6cF1x%2F9nixWQjQlOWNOg3ZB2HscTXRjEKDOZ4%2FQmMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63e48aef569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| videy.io/public/js/jquery.min.js | 104.21.79.10 | 200 OK | 89 kB |
URL GET HTTP/3videy.io/public/js/jquery.min.js IP104.21.79.10:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectvidey.io Fingerprint7C:57:01:B3:8A:67:B6:E9:BC:16:20:08:F4:A3:5C:C4:BB:8A:8B:E5 ValidityTue, 02 Apr 2024 22:30:18 GMT - Mon, 01 Jul 2024 22:30:17 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash03c6e2aad4c9aed58b607a23756afebe da2ff7723e963d7586f53e05c2a34bef663f99b1 62bb02fa91c1537efbce823d5d1981982d3925bcdaac667dc6ca64f8469e2284
GET /public/js/jquery.min.js HTTP/1.1
Host: videy.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://videy.io/v/jxkjuyvv771
DNT: 1
Connection: keep-alive
Cookie: ci_session=58b8a67fc3afdf3edc8217ddf4abf71d5a2e5bab; siu-lang-idiom=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 23:49:56 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-origin: *
x-original-content-length: 89476
etag: W/"PSA-aj-A8biqtTJrt"
expires: Sun, 16 Apr 2034 03:03:25 GMT
cache-control: max-age=314258699
cf-cache-status: HIT
age: 355890
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lCVUdaa6EOLekqqdHrFUudCBdIgpsFG%2F5fGqZUyLuWQ5SUEbsZ%2FS344meJ9r6QfB%2B5gIKz%2BCx6GDjHWmRnAL9VvRZUe6bSB1vXR7gOIy6ymlmHzW5oJgB6v%2Bvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63e49b46569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=G-CWZNWGQMDS&l=dataLayer&cx=c | 142.250.74.40 | 200 OK | 306 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-CWZNWGQMDS&l=dataLayer&cx=c IP142.250.74.40:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Size306 kB (305716 bytes) Hash42c9be386ade96c34b2f40690a1e6486 e9f1b31651c63ad8ad0bc39f2d82a61bf252d860 102ba5e1ffde9c6f40320ee980a02a6206247a0a9eb67df34c24ff219f9c8a41
GET /gtag/js?id=G-CWZNWGQMDS&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 23:49:57 GMT
expires: Sat, 04 May 2024 23:49:57 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 101577
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| | 104.21.79.10 | 200 OK | 4.6 kB |
URL User Request GET HTTP/2IP104.21.79.10:443
CertificateIssuerGoogle Trust Services LLC Subjectvidey.io Fingerprint7C:57:01:B3:8A:67:B6:E9:BC:16:20:08:F4:A3:5C:C4:BB:8A:8B:E5 ValidityTue, 02 Apr 2024 22:30:18 GMT - Mon, 01 Jul 2024 22:30:17 GMT
File typeHTML document, ASCII text, with very long lines (5107), with no line terminators Hash4fe7c0720d6355bd2da3a8ee837373dc 62eb50afb1b917f4291e4484672b6e8cf1975166 cc01b601c1a94b488c6d136b5352a3f22bce5279162464a997feaf47ac7f88ac
GET /v/jxkjuyvv771 HTTP/1.1
Host: videy.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 23:49:56 GMT
content-type: text/html; charset=UTF-8
set-cookie: ci_session=58b8a67fc3afdf3edc8217ddf4abf71d5a2e5bab; expires=Sun, 05-May-2024 01:49:56 GMT; Max-Age=7200; path=/; HttpOnly
siu-lang-idiom=english; expires=Fri, 03-Sep-2088 23:39:52 GMT; Max-Age=2030226596; path=/
siu-lang-idiom=english; expires=Fri, 03-Sep-2088 23:39:52 GMT; Max-Age=2030226596; path=/
pragma: no-cache
x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff, nosniff
x-xss-protection: 1; mode=block, 1; mode=block
x-permitted-cross-domain-policies: master-only, master-only
referrer-policy: same-origin, same-origin
x-page-speed: 1
cache-control: max-age=0, no-cache, no-store, must-revalidate
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ug7Xmu9EeByjaRzVodMbJ9uJmSn90bJlSQ%2FG16uuZL2FdW0M0TZfpVa4h7%2BbSAIjiP4XVS4DOZQDC32f6XvLjdvxhsMNtSc1TI5vN3HboAM7ylfkbK6rUUJ3HQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63df4b10b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| videy.io/public/css/magnific.popup.css | 104.21.79.10 | 200 OK | 5.2 kB |
URL GET HTTP/3videy.io/public/css/magnific.popup.css IP104.21.79.10:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectvidey.io Fingerprint7C:57:01:B3:8A:67:B6:E9:BC:16:20:08:F4:A3:5C:C4:BB:8A:8B:E5 ValidityTue, 02 Apr 2024 22:30:18 GMT - Mon, 01 Jul 2024 22:30:17 GMT
File typeASCII text, with very long lines (5249), with no line terminators Hash5cb428f82f960c2f7689a9027789187a e5ea70c84fb71deac626f440411eca51fd16d0a0 bba371243c8500beaae1144d19e2df27c0a251a0f90e883d7caa7cce70017bc5
GET /public/css/magnific.popup.css HTTP/1.1
Host: videy.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://videy.io/v/jxkjuyvv771
DNT: 1
Connection: keep-alive
Cookie: ci_session=58b8a67fc3afdf3edc8217ddf4abf71d5a2e5bab; siu-lang-idiom=english
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 23:49:56 GMT
content-type: text/css
vary: Accept-Encoding
access-control-allow-origin: *
x-original-content-length: 7302
etag: W/"PSA-aj-XLQo-C-WDC"
expires: Sun, 16 Apr 2034 02:39:03 GMT
cache-control: max-age=314268530
cf-cache-status: HIT
age: 367184
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OymYCUjo0q9vZhHIpUul%2BmW6Rl9rWX%2F1KSoAqQ0H%2BZ0O3NvCeLIzSFdgtHj%2FsFh9pZdqYkAOtRgTAVktQPxShTxQEuQcBoJ3xkjIjlmqd6XPf5%2BFu%2FWzmmj0Kw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63e48b20569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.google.com/recaptcha/api.js | 142.250.74.132 | 200 OK | 850 B |
URL GET HTTP/2www.google.com/recaptcha/api.js IP142.250.74.132:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99 ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
File typeJavaScript source, ASCII text, with very long lines (850), with no line terminators Hashee87fd4035a91d937ff13613982b4170 e897502e3a58c6be2b64da98474f0d405787f5f7 7649b605b4f35666df5cbcbb03597306d9215f53f61c2a097f085fa39af9859f
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Sat, 04 May 2024 23:49:56 GMT
date: Sat, 04 May 2024 23:49:56 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| videy.io/application/views/themes/neo_black9/assets/images/mainBg.svg | 104.21.79.10 | 200 OK | 20 kB |
URL GET HTTP/3videy.io/application/views/themes/neo_black9/assets/images/mainBg.svg IP104.21.79.10:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectvidey.io Fingerprint7C:57:01:B3:8A:67:B6:E9:BC:16:20:08:F4:A3:5C:C4:BB:8A:8B:E5 ValidityTue, 02 Apr 2024 22:30:18 GMT - Mon, 01 Jul 2024 22:30:17 GMT
File typeSVG Scalable Vector Graphics image Hashd6717ed9971910130fee162a008a92a7 270d906b94399023e4293514126e8553beb08848 29e113b75185ab157148b1404225712b68a9fe308fc9698e4a586254f48f08fa
GET /application/views/themes/neo_black9/assets/images/mainBg.svg HTTP/1.1
Host: videy.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videy.io/application/views/themes/neo_black9/assets/css/style.css
Cookie: ci_session=58b8a67fc3afdf3edc8217ddf4abf71d5a2e5bab; siu-lang-idiom=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 23:49:56 GMT
content-type: image/svg+xml
last-modified: Mon, 15 Apr 2024 16:31:11 GMT
vary: Accept-Encoding
etag: W/"661d564f-4e02"
expires: Thu, 31 Dec 2037 23:55:55 GMT
access-control-allow-origin: *
cache-control: max-age=315360000, s-maxage=10
cf-cache-status: HIT
age: 353005
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jp%2B8X4GOnm9kQOc1xLTRH9A0LKLgoaLYLin9CnU4fvqy2tKWv8K8z9OhZ%2BP34zb1%2Fe9BOR%2BvFzj9cVkxpZLVv8W1HHVSFVFGjql0fcecmXxoT0KtGbHiIt7%2BBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63e6dd0b569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.plyr.io/static/blank.mp4 | 104.27.194.88 | 206 Partial Content | 1.8 kB |
URL GET HTTP/2cdn.plyr.io/static/blank.mp4 IP104.27.194.88:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerCloudflare, Inc. Subjectcdn.plyr.io Fingerprint82:12:FB:B3:64:22:F5:22:7D:BA:01:9C:97:81:CF:4F:55:01:08:95 ValidityMon, 11 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeISO Media, MP4 v2 [ISO 14496-14] Hash08fc2557b6c938f1a251e59b016e90e2 8d385ebd53fd721167b5ead62fec0ed81a0d9d5a 5747997d80825cbafcdbe5ab97d7b5502c06b1aae85fed9610845348b3da4d98
GET /static/blank.mp4 HTTP/1.1
Host: cdn.plyr.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Sat, 04 May 2024 23:49:57 GMT
content-type: video/mp4
content-length: 1777
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
etag: "08fc2557b6c938f1a251e59b016e90e2"
last-modified: Thu, 20 Apr 2023 10:33:44 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 358672
content-range: bytes 0-1776/1777
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yL9M0ZpB%2BFtJdmAlK5Rav1%2Bog%2BDIrpRvUWFQUBKASlPAkBg8vBWvdk9FF%2BuwanHW5PipTB3Qlsj0yfj8NLOQrUS2u08G2fHyA%2FaT0Js8lCt0Diy%2FLUj2kWB9CoEz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63eabd8e712e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| videy.io/public/js/dropzone.min.js | 104.21.79.10 | 200 OK | 48 kB |
URL GET HTTP/3videy.io/public/js/dropzone.min.js IP104.21.79.10:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectvidey.io Fingerprint7C:57:01:B3:8A:67:B6:E9:BC:16:20:08:F4:A3:5C:C4:BB:8A:8B:E5 ValidityTue, 02 Apr 2024 22:30:18 GMT - Mon, 01 Jul 2024 22:30:17 GMT
File typeJavaScript source, ASCII text, with very long lines (48149), with no line terminators Hashc56e787e0f4f6d6e9ca86e894704225d f078c18dc9e998fb3dd4972399a445398af20d68 386ff5d37c1787a5c8355d3a2533eca7336028d6bf8e73f52e33cfe58dd74036
GET /public/js/dropzone.min.js HTTP/1.1
Host: videy.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://videy.io/v/jxkjuyvv771
DNT: 1
Connection: keep-alive
Cookie: ci_session=58b8a67fc3afdf3edc8217ddf4abf71d5a2e5bab; siu-lang-idiom=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 23:49:56 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"5f6b7a86-bc15"
expires: Thu, 31 Dec 2037 23:55:55 GMT
access-control-allow-origin: *
cache-control: max-age=315360000
cf-cache-status: HIT
age: 367184
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DUncGtCGLQ75Db4%2FdCXnm6VmHfxuG6IcEUyk9rUH%2FpSGhMx0YONsCyfKpClmf8goCAvqbpzEtSWFMxpYY2%2FrH8wG3adMzQV19rdTPorQ53eJ%2FOiAabfftG5bDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63e49b4f569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700;900&display=swap | 142.250.74.74 | 200 OK | 14 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700;900&display=swap IP142.250.74.74:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash9c12b57a25710853b762d48b28545b5c 57a79d40792f42232b317bd9529c98efa29fc315 35ae53cd6f0cde71e622f6e54dc576bb82ffab56c9e41b1298f932eebf963eb9
GET /css2?family=Roboto:wght@100;300;400;500;700;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 May 2024 23:49:56 GMT
date: Sat, 04 May 2024 23:49:56 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| videy.io/application/views/themes/neo_red/assets/player/plyr.svg | 104.21.79.10 | 200 OK | 5.4 kB |
URL GET HTTP/3videy.io/application/views/themes/neo_red/assets/player/plyr.svg IP104.21.79.10:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectvidey.io Fingerprint7C:57:01:B3:8A:67:B6:E9:BC:16:20:08:F4:A3:5C:C4:BB:8A:8B:E5 ValidityTue, 02 Apr 2024 22:30:18 GMT - Mon, 01 Jul 2024 22:30:17 GMT
File typeSVG Scalable Vector Graphics image Hash717fb03d67834c454fe46c9a9c7065de 4ef0eb7ff1e1eedf43d4ad840115f2b2fd68fa90 0f757ad6c06c91f393e603fd9489af0042cc95c7ca700c3d90cff304bf948302
GET /application/views/themes/neo_red/assets/player/plyr.svg HTTP/1.1
Host: videy.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://videy.io/v/jxkjuyvv771
DNT: 1
Connection: keep-alive
Cookie: ci_session=58b8a67fc3afdf3edc8217ddf4abf71d5a2e5bab; siu-lang-idiom=english; _ga_CWZNWGQMDS=GS1.1.1714866597.1.0.1714866597.0.0.0; _ga=GA1.1.1362308479.1714866597
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 23:49:57 GMT
content-type: image/svg+xml
last-modified: Wed, 23 Sep 2020 16:38:22 GMT
vary: Accept-Encoding
etag: W/"5f6b79fe-153f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
access-control-allow-origin: *
cache-control: max-age=315360000, s-maxage=10
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1wAnvWkiquGGEP8%2Bk7wwS7%2F0roeOio3UfufFd%2BzO%2BB5mLoDbanBGJr80phFsM9xBryzSoluXf6efBlkhzM7KgOFtdxsqfYVrhwrB3O73ciFw4B3q4RzIM2ex8g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63e99ed4569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adoto.net/dashboard/display/index.php?page=query/items/&aduid=6792&pid=2875&width=468&height=60&displaytype=4&native=0&device_type=large_dev_adblock&block_id=0&responsive=0&adcode_count=1&adSectionWidth=1258&page_data=3554ad0744142723c8be8ebbc7da27b3&time=1714866597&deliver=videy.io&search_keywords=video%2Cupload%2Canonymous%2Cfree%2Cvideoupload&page_referrer=aHR0cHM6Ly92aWRleS5pby92L2p4a2p1eXZ2Nzcx&page_title=Videy%20io&meta_description=Fast%20%26%20Free%20Video%20Hosting%20Service | 104.21.49.113 | 200 OK | 12 kB |
URL GET HTTP/3adoto.net/dashboard/display/index.php?page=query/items/&aduid=6792&pid=2875&width=468&height=60&displaytype=4&native=0&device_type=large_dev_adblock&block_id=0&responsive=0&adcode_count=1&adSectionWidth=1258&page_data=3554ad0744142723c8be8ebbc7da27b3&time=1714866597&deliver=videy.io&search_keywords=video%2Cupload%2Canonymous%2Cfree%2Cvideoupload&page_referrer=aHR0cHM6Ly92aWRleS5pby92L2p4a2p1eXZ2Nzcx&page_title=Videy%20io&meta_description=Fast%20%26%20Free%20Video%20Hosting%20Service IP104.21.49.113:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectadoto.net FingerprintA7:E3:05:E7:7E:96:8F:41:46:BC:9D:E9:09:C1:2A:C6:27:B7:26:66 ValidityTue, 02 Apr 2024 00:48:15 GMT - Mon, 01 Jul 2024 00:48:14 GMT
File typeHTML document, ASCII text, with very long lines (6566), with CRLF, LF line terminators Hash7d98821112cbb53f62c59ae227961c89 332f8c72e41d0c6b26a3093ea00109be16c3a87f 395f069b9ed11cfe03be2f923a7e9d7ca5ed956fc3d0bf07b811af01a0329caa
GET /dashboard/display/index.php?page=query/items/&aduid=6792&pid=2875&width=468&height=60&displaytype=4&native=0&device_type=large_dev_adblock&block_id=0&responsive=0&adcode_count=1&adSectionWidth=1258&page_data=3554ad0744142723c8be8ebbc7da27b3&time=1714866597&deliver=videy.io&search_keywords=video%2Cupload%2Canonymous%2Cfree%2Cvideoupload&page_referrer=aHR0cHM6Ly92aWRleS5pby92L2p4a2p1eXZ2Nzcx&page_title=Videy%20io&meta_description=Fast%20%26%20Free%20Video%20Hosting%20Service HTTP/1.1
Host: adoto.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 23:49:58 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-server-powered-by: Engintron
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FdNLLqd50x4A8mIWL%2BJd5y2hpwJPxtu2gpwcbMbcYKEHF8QvLYrZLdleJxDdXwlBEfJ%2FgETDfSRitT%2Bejgmzebnqby4RxAQ6lulh2%2BR%2Fm54hNjOmG5WBtyVxlwM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63eab9765685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| unseenreport.com/pxf.gif?uuid=5e0851c0-05eb-4f8f-8383-366e3a425c2b&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=470847c9e5839f52ad650b9b77bef6af&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=23 | 192.243.61.225 | 200 OK | 0 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=5e0851c0-05eb-4f8f-8383-366e3a425c2b&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=470847c9e5839f52ad650b9b77bef6af&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=23 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=5e0851c0-05eb-4f8f-8383-366e3a425c2b&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=470847c9e5839f52ad650b9b77bef6af&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=23 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 04 May 2024 23:50:00 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ca88de6b3f3b5b3dc5a1fe2e1deed2f9
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| adoto.net/dashboard/track/index.php?page=click/data/1|548|0|2875|6792|1|4402|1|0|548|9.0E-5|0.0006|0|0/fe573b4bc16baa9bd0bf38ffc8684471/1714866609/NO/ | 104.21.49.113 | 200 OK | 135 B |
URL GET HTTP/3adoto.net/dashboard/track/index.php?page=click/data/1|548|0|2875|6792|1|4402|1|0|548|9.0E-5|0.0006|0|0/fe573b4bc16baa9bd0bf38ffc8684471/1714866609/NO/ IP104.21.49.113:443
Requested byhttps://adoto.net/dashboard/display/index.php?page=query/items/&aduid=6792&pid=2875&width=468&height=60&displaytype=4&native=0&device_type=large_dev_adblock&block_id=0&responsive=0&adcode_count=1&adSectionWidth=1258&page_data=3554ad0744142723c8be8ebbc7da27b3&time=1714866597&deliver=videy.io&search_keywords=video%2Cupload%2Canonymous%2Cfree%2Cvideoupload&page_referrer=aHR0cHM6Ly92aWRleS5pby92L2p4a2p1eXZ2Nzcx&page_title=Videy%20io&meta_description=Fast%20%26%20Free%20Video%20Hosting%20Service CertificateIssuerGoogle Trust Services LLC Subjectadoto.net FingerprintA7:E3:05:E7:7E:96:8F:41:46:BC:9D:E9:09:C1:2A:C6:27:B7:26:66 ValidityTue, 02 Apr 2024 00:48:15 GMT - Mon, 01 Jul 2024 00:48:14 GMT
File typeASCII text, with no line terminators Hashd6fc98b62648acd1bdbe5e68dc3d51d6 6ea18fa6b1cd431d7189f0f3a29e8ca64f089112 e1997f61a935cc4bde965c3fe673c4736d9aeb04d61392796a5191793be96171
GET /dashboard/track/index.php?page=click/data/1|548|0|2875|6792|1|4402|1|0|548|9.0E-5|0.0006|0|0/fe573b4bc16baa9bd0bf38ffc8684471/1714866609/NO/ HTTP/1.1
Host: adoto.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adoto.net/dashboard/display/index.php?page=query/items/&aduid=6792&pid=2875&width=468&height=60&displaytype=4&native=0&device_type=large_dev_adblock&block_id=0&responsive=0&adcode_count=1&adSectionWidth=1258&page_data=3554ad0744142723c8be8ebbc7da27b3&time=1714866597&deliver=videy.io&search_keywords=video%2Cupload%2Canonymous%2Cfree%2Cvideoupload&page_referrer=aHR0cHM6Ly92aWRleS5pby92L2p4a2p1eXZ2Nzcx&page_title=Videy%20io&meta_description=Fast%20%26%20Free%20Video%20Hosting%20Service
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 23:49:59 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-server-powered-by: Engintron
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6%2FR%2FFmXo4%2B04ub3zxs00mtghpVh6xyGbo1jPY%2BJSYzQ34ysHujUbO051RXkgAiPrxPI9CQAdsF%2B%2Br43YehcN7sIEOuVqIKG4Hh%2BjBc2lPcK4K%2BlP1q%2FiJzyHrQI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63f71a105685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adoto.net/dashboard/display/serve.js | 104.21.49.113 | 200 OK | 100 kB |
URL GET HTTP/2adoto.net/dashboard/display/serve.js IP104.21.49.113:443
Requested byhttps://videy.io/v/jxkjuyvv771 CertificateIssuerGoogle Trust Services LLC Subjectadoto.net FingerprintA7:E3:05:E7:7E:96:8F:41:46:BC:9D:E9:09:C1:2A:C6:27:B7:26:66 ValidityTue, 02 Apr 2024 00:48:15 GMT - Mon, 01 Jul 2024 00:48:14 GMT
File typeJavaScript source, ASCII text, with very long lines (1792), with CRLF line terminators Size100 kB (100434 bytes) Hashc8951d122161c3053a48c325a063061c d3311ee83c50232fb5c09eff26e2a98983904b41 9ba7a15e92ef49d9de9b604e15e556296ca547a5e5c489ff93fe39fbe722c179
GET /dashboard/display/serve.js HTTP/1.1
Host: adoto.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 23:49:56 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 02 Jul 2022 16:40:17 GMT
expires: Thu, 30 May 2024 18:38:30 GMT
cache-control: max-age=2592000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: STALE
x-server-powered-by: Engintron
cf-cache-status: HIT
age: 364286
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SO0jwNTV89m9PzKq87bprzpQMdIEzDRzPLwndrqcAWKIt%2BaFTzav6EV1B8GZcn%2FakaZph52nAXKc%2BiqiueCinmrPsIMkfc1adJ6fArqiAA%2BYCzri0%2BgGWG%2B6Hv0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ec63e4eb9d5687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
0.0.0.0