| wwkedpbh4lwdmq16okwhiteiim9nwpds2.com/2a/a2/da/2aa2da37697cfe7e7b163f3d1cc438b9.js?4ddsdsdfwrfsdfsdfsdfsdfsdfsdf |  192.243.59.20 | 200 OK | 31 kB |
URL GET HTTP/1.1wwkedpbh4lwdmq16okwhiteiim9nwpds2.com/2a/a2/da/2aa2da37697cfe7e7b163f3d1cc438b9.js?4ddsdsdfwrfsdfsdfsdfsdfsdfsdf IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://illvid.com/embed-htykkmon3ryz.html CertificateIssuerLet's Encrypt Subject*.wwkedpbh4lwdmq16okwhiteiim9nwpds2.com FingerprintA5:51:83:C2:EA:50:CE:B6:98:88:10:6B:51:4B:82:1E:0E:09:71:A2 ValiditySun, 24 Mar 2024 07:53:32 GMT - Sat, 22 Jun 2024 07:53:31 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashbc60835c43a089eda3b60cd0f1508283 7ed3cda9a4b9585d8c1473783fa3646c06f818ca 83787a516d0907fe1077caf6965785e60ee735d35a0a4cc050780cced2a4e9d9
GET /2a/a2/da/2aa2da37697cfe7e7b163f3d1cc438b9.js?4ddsdsdfwrfsdfsdfsdfsdfsdfsdf HTTP/1.1
Host: wwkedpbh4lwdmq16okwhiteiim9nwpds2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://illvid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 04 May 2024 21:32:57 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 78705645313833ff025f5248e321f732
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| ocsp.r2m03.amazontrust.com/ | 143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hash691c3f87e4fe41a736328d3c71e2dbdc fd76f455b38ba18f00a6fb81e3585201eb3c43f6 8ac709de568d48e4c9e64b75afa6cd3fed58e2cf0c21e823af01ab342e6794b9
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 04 May 2024 21:32:57 GMT
Last-Modified: Sat, 04 May 2024 19:42:58 GMT
Server: ECAcc (ska/F757)
X-Cache: Miss from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Z-2WURLNrUSdQAKUrWWVixzk3x19r9jjtGOtIULws0aAWVnDJCIgvQ==
Age: 6599
|
|
| proftrafficcounter.com/stats |  18.185.9.67 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.185.9.67:443
Requested byhttps://illvid.com/embed-htykkmon3ryz.html CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashc9abeace9e38be95d0f17875b4d93250 9ada240b71315f76d6a67bbd4c90109c2c6fc7aa 9215976a2cafd59e417d9a6edc5be2504f5c06acdc61c459e69837cc5a7141d6
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://illvid.com
DNT: 1
Connection: keep-alive
Referer: https://illvid.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 21:32:57 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://illvid.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=2836e27e-6c6b-49f7-8240-c4a5c28327f3:2:1; expires=Tue, 02 May 2034 21:32:57 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| conformityproportion.com/pixel/purst?dl=0&th=0&sc=0&rs=1402&rd=1402&fd=912&bv=24.5.6485&tmpl=70 | 192.243.61.227 | 200 OK | 0 B |
URL GET HTTP/1.1conformityproportion.com/pixel/purst?dl=0&th=0&sc=0&rs=1402&rd=1402&fd=912&bv=24.5.6485&tmpl=70 IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://illvid.com/embed-htykkmon3ryz.html CertificateIssuerLet's Encrypt Subjectconformityproportion.com Fingerprint1C:44:13:DE:25:A3:30:4A:A4:3C:F8:1A:A2:0F:50:AC:C0:9B:79:94 ValidityMon, 29 Apr 2024 12:57:39 GMT - Sun, 28 Jul 2024 12:57:38 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/purst?dl=0&th=0&sc=0&rs=1402&rd=1402&fd=912&bv=24.5.6485&tmpl=70 HTTP/1.1
Host: conformityproportion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://illvid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 04 May 2024 21:32:57 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| capaciousdrewreligion.com/advertisers.js | 192.243.59.20 | 200 OK | 0 B |
URL GET HTTP/1.1capaciousdrewreligion.com/advertisers.js IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://illvid.com/embed-htykkmon3ryz.html CertificateIssuerLet's Encrypt Subjectcapaciousdrewreligion.com Fingerprint53:B6:ED:C6:B5:B6:60:3E:6D:02:5A:92:2E:C3:12:74:64:A1:23:DC ValidityWed, 06 Mar 2024 11:57:32 GMT - Tue, 04 Jun 2024 11:57:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: capaciousdrewreligion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://illvid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 04 May 2024 21:32:58 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5b302ba01c9ba6bbc206cdbc4400b0eb
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| illvid.com/50/images/favicon.ico |  188.114.96.1 | 200 OK | 320 B |
URL GET HTTP/3illvid.com/50/images/favicon.ico IP188.114.96.1:443
Requested byhttps://illvid.com/embed-htykkmon3ryz.html CertificateIssuerGoogle Trust Services LLC Subjectillvid.com Fingerprint16:F7:7A:0C:CE:92:F5:97:E4:CD:27:8A:A4:99:66:00:50:43:72:AA ValidityWed, 13 Mar 2024 12:45:15 GMT - Tue, 11 Jun 2024 12:45:14 GMT
File typegzip compressed data, from Unix Hash803a257c022ca3d7d26c9fca0285cca6 f248ff4bfb0f70a3a48214df08ce4f24c4ac4596 44431fffefb632f1277b74e62c29eebfcdc4b5a7860e144f22e9a031ee2a50b6
GET /50/images/favicon.ico HTTP/1.1
Host: illvid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://illvid.com/embed-htykkmon3ryz.html
Cookie: lang=1; dom3ic8zudi28v8lr6fgphwffqoz0j6c=2836e27e-6c6b-49f7-8240-c4a5c28327f3%3A2%3A1; pp_main_2aa2da37697cfe7e7b163f3d1cc438b9=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 21:32:57 GMT
content-type: image/x-icon
last-modified: Fri, 28 Jul 2023 14:28:40 GMT
etag: W/"64c3d098-128"
expires: Sat, 11 May 2024 21:32:57 GMT
cache-control: max-age=604800
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pgv%2BCph91H3KH7snhUEnfnucWFBN6ZZtQqXb8plvZaTnyo69ZicBPO8DlMHOrjsT3aoY5Q3xfYNbS8CPpKJ8dWVGb057BabgBLfyFjhiAbJQhvbjz0JEGsNjNyNI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eb9b3d7e03b4f4-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| illvid.com/assets/player.svg | 188.114.96.1 | 200 OK | 5.5 kB |
URL GET HTTP/3illvid.com/assets/player.svg IP188.114.96.1:443
Requested byhttps://illvid.com/embed-htykkmon3ryz.html CertificateIssuerGoogle Trust Services LLC Subjectillvid.com Fingerprint16:F7:7A:0C:CE:92:F5:97:E4:CD:27:8A:A4:99:66:00:50:43:72:AA ValidityWed, 13 Mar 2024 12:45:15 GMT - Tue, 11 Jun 2024 12:45:14 GMT
File typeSVG Scalable Vector Graphics image Hash84ae75c5bb8eb53fa80dbf474f2b3c9e e72ffb84dd4ff1ea1e29ac961af43dc1878ed382 f8f633975f552666d54d543bea7874e3934536447064d67ba8f7bf714c74152d
GET /assets/player.svg HTTP/1.1
Host: illvid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://illvid.com/embed-htykkmon3ryz.html
Cookie: lang=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:32:56 GMT
content-type: image/svg+xml
last-modified: Fri, 28 Jul 2023 16:59:44 GMT
etag: W/"64c3f400-15ac"
expires: Tue, 07 May 2024 17:42:10 GMT
cache-control: max-age=604800
access-control-allow-origin: *
cf-cache-status: HIT
age: 359446
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zwz0Mo5YQkGSHLctdpGobcK5c5xGhJz4z3QBE8k0YQMEqa4vtiRbyLcGIZ9IzEIYSIrafsAu%2F2ZUHyjly7Ak9CxqfL9OxopybBcVdCorFJQA8QNiqt%2Fi4uewlK0%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eb9b34ab26b4f4-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| downstairsnegotiatebarren.com/sfp.js | 188.114.97.1 | 200 OK | 86 kB |
URL GET HTTP/2downstairsnegotiatebarren.com/sfp.js IP188.114.97.1:443
Requested byhttps://illvid.com/embed-htykkmon3ryz.html CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint5D:DB:CB:C6:CE:2A:8B:34:7D:BC:43:74:33:1D:5F:77:48:F7:BC:1B ValidityThu, 02 May 2024 21:26:34 GMT - Wed, 31 Jul 2024 21:26:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://illvid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 21:32:57 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 13240ad5b0ccfed8bdefab0d299128d2
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sat, 04 May 2024 21:32:57 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=45Dx3zdqFFe6lN%2F5pixtUK75l7l8yAfV6Uu24loeYqrnGW5EGNqssxMK7iL3pG1H5EtvAlrGLwUv9fiKi4dBNokz3Hkd%2BJOFmWpptFtB3bufvqpy84WrWAhDjHYQEOpkfxvZxQ7KnNlOf%2BshrB0I9g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eb9b3a4c20b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| unseenreport.com/pxf.gif?uuid=2836e27e-6c6b-49f7-8240-c4a5c28327f3&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=2aa2da37697cfe7e7b163f3d1cc438b9&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=21 | 192.243.61.225 | 200 OK | 0 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=2836e27e-6c6b-49f7-8240-c4a5c28327f3&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=2aa2da37697cfe7e7b163f3d1cc438b9&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=21 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://illvid.com/embed-htykkmon3ryz.html CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=2836e27e-6c6b-49f7-8240-c4a5c28327f3&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=2aa2da37697cfe7e7b163f3d1cc438b9&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=21 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://illvid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 04 May 2024 21:32:58 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 178ff84077149ce42113e5fdbeb59711
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| illvid.com/embed-htykkmon3ryz.html | 188.114.96.1 | 200 OK | 277 kB |
URL User Request GET HTTP/2illvid.com/embed-htykkmon3ryz.html IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectillvid.com Fingerprint16:F7:7A:0C:CE:92:F5:97:E4:CD:27:8A:A4:99:66:00:50:43:72:AA ValidityWed, 13 Mar 2024 12:45:15 GMT - Tue, 11 Jun 2024 12:45:14 GMT
Size277 kB (277231 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed-htykkmon3ryz.html HTTP/1.1
Host: illvid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 21:32:56 GMT
content-type: text/html; charset=UTF-8
expires: Fri, 03 May 2024 21:32:56 GMT
set-cookie: lang=1; domain=.illvid.com; path=/; HttpOnly
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PLZwbAFQeTh0iDm1%2FR0mPP4qHYOxFALWDtO0DUhVyW4FRtEhpgeQaC%2Fbj0Kpk4%2BhBhllIVDIXWiCytll1ZcF6BryQbATzVWgpYp1VDvVnzq2gpi3w417oPhqcdra"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eb9b31ce96568f-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| illvid.com/jquery.min.js | 188.114.96.1 | 200 OK | 88 kB |
IP188.114.96.1:443
Requested byhttps://illvid.com/embed-htykkmon3ryz.html CertificateIssuerGoogle Trust Services LLC Subjectillvid.com Fingerprint16:F7:7A:0C:CE:92:F5:97:E4:CD:27:8A:A4:99:66:00:50:43:72:AA ValidityWed, 13 Mar 2024 12:45:15 GMT - Tue, 11 Jun 2024 12:45:14 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hash220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
GET /jquery.min.js HTTP/1.1
Host: illvid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://illvid.com/embed-htykkmon3ryz.html
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:32:56 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 28 Jul 2023 17:15:46 GMT
etag: W/"64c3f7c2-15851"
expires: Tue, 07 May 2024 18:44:47 GMT
cache-control: max-age=604800
access-control-allow-origin: *
cf-cache-status: HIT
age: 355689
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OqjTF%2BvxTJGldqp9l0xCw8usfGxyguuNhBsTX8q17ALvB%2BVaLYrFcZkx8EuyTqUqGOqXS4nfqi%2FmZNlIDSMW253QYFTqdB7rrk0AwJohmDSKZ5Z%2F5wWaLT252Q75"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eb9b342ab8b4f4-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| illvid.com/50/css/player3.css?0.01s | 188.114.96.1 | 200 OK | 32 kB |
URL GET HTTP/3illvid.com/50/css/player3.css?0.01s IP188.114.96.1:443
Requested byhttps://illvid.com/embed-htykkmon3ryz.html CertificateIssuerGoogle Trust Services LLC Subjectillvid.com Fingerprint16:F7:7A:0C:CE:92:F5:97:E4:CD:27:8A:A4:99:66:00:50:43:72:AA ValidityWed, 13 Mar 2024 12:45:15 GMT - Tue, 11 Jun 2024 12:45:14 GMT
File typeASCII text, with very long lines (31800), with no line terminators Hash15b8506e085f26871af3e38e0f0980d0 fe08fec33628ae6b90c1a4f66b2b4101211f7c80 e708665d9e767079211ec92d8802e2c95cdcc140e66d6c88b96bb7fbaf70f5c6
GET /50/css/player3.css?0.01s HTTP/1.1
Host: illvid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://illvid.com/embed-htykkmon3ryz.html
Cookie: lang=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:32:56 GMT
content-type: text/css
last-modified: Sun, 06 Aug 2023 13:04:59 GMT
etag: W/"64cf9a7b-7c38"
expires: Tue, 07 May 2024 17:42:10 GMT
cache-control: max-age=604800
access-control-allow-origin: *
cf-cache-status: HIT
age: 359446
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jyLr3O1xomS9ToahjbL7I6yS0v98%2BkD%2BgLg8gmlcJyhoLuBAohJEgdrnYfsLBsTrLwyTaIa3dQJ9ko0Hmg3xU5AUQyhcHUJ18bLpjbr2pQ5gCIccQbi4T8GlwpW3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eb9b343abdb4f4-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|