| player003.vip/embed2.php?id=btespn |  104.21.34.239 | | 20 kB |
URL player003.vip/embed2.php?id=btespn IP104.21.34.239:0
File typeJavaScript source, ASCII text, with very long lines (59440) Hash6c84434769af6ebc7e08d15588d15b4a 2a91101a76bfffe7b691a6c99de8785e26cb1562 178d4e7f7e3917d4024d29294ef7bd38f585d53886fe9a29d7b6c0fb0f61f3fe
GET /embed2.php?id=btespn HTTP/1.1
Host: player003.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 12:54:17 GMT
content-type: text/html; charset=UTF-8
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c4OCc6uzV%2BTp1WZriZqAHLx9gu9ba8zp5nfeT9DuUfPXeGM2rv2wysBnBxqMCQOkozwkH%2FFyzuNq6MP4lkefaEwsMnKsCxPFmrLVSKlkHCyePUwHcI5mcpx%2FWdh6%2BWMv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a13b6bc681bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js | 104.17.24.14 | | 27 kB |
URL cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js IP104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player003.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 12:54:18 GMT
content-type: application/javascript; charset=utf-8
content-length: 27433
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-1538f"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 837733
expires: Wed, 30 Apr 2025 12:54:18 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VMuBiPodasTlaia0yvkv0oJtyp73sb2FcjlX2o7mTdt03O%2BXvJY%2FPtjOO%2FdKJJfreYk58XM2BGzSdidrzRW3PQ3Lm%2BdRVlBs1mOxzWbFplEAbFrpq4h6A0p2OmQ%2Fsenr060DOLOG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 881a13bafda9b4f9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.6.0.min.js |  151.101.194.137 | | 31 kB |
URL code.jquery.com/jquery-3.6.0.min.js IP151.101.194.137:0
File typeJavaScript source, ASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player003.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 10 May 2024 12:54:18 GMT
age: 1201838
x-served-by: cache-lga21931-LGA, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 3, 166640
x-timer: S1715345658.087862,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/clappr.level-selector/latest/level-selector.min.js | 151.101.129.229 | | 3.2 kB |
URL cdn.jsdelivr.net/clappr.level-selector/latest/level-selector.min.js IP151.101.129.229:0
File typeJavaScript source, ASCII text, with very long lines (6153) Hash166bbe11bb8dd332f6fbcf8fe9ec30cf f42c73e6e89201ccf5ad513915bb4182ec3a410c 23a715a6d8a35921f8c02eab19a93b6c9c42271ecfccbde0005476959e2edff9
GET /clappr.level-selector/latest/level-selector.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player003.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
etag: W/"2524-9Cxz5uiSAcz1rVE5FbtBguw6QQw"
content-encoding: br
accept-ranges: bytes
date: Fri, 10 May 2024 12:54:18 GMT
age: 1485421
x-served-by: cache-fra-eddf8230115-FRA, cache-hel1410025-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3219
X-Firefox-Spdy: h2
|
|
| zeekaihu.net/tag.min.js |  139.45.197.245 | | 28 kB |
IP139.45.197.245:0
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashe3024b1a3cbcc47f3eef4bab101c0b7f 73f6d27a2ff5cbf11ab455917016b5f70ba63444 41e1c3be0f91a1766e024356a7c4feee73a360f9f5691b79d6ceab270fd51edc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /tag.min.js HTTP/1.1
Host: zeekaihu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player003.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 12:54:18 GMT
content-type: text/javascript; charset=utf-8
content-length: 28450
content-encoding: br
x-trace-id: 41d7d62de106bbd74433277f99ec7152
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Thu, 09 May 2024 21:44:41 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/clappr-pip@latest/dist/clappr-pip.min.js | 151.101.129.229 | | 4.9 kB |
URL cdn.jsdelivr.net/npm/clappr-pip@latest/dist/clappr-pip.min.js IP151.101.129.229:0
File typeJavaScript source, ASCII text, with very long lines (17345), with no line terminators Hashd3370a6201cc4384aed4eb64e05da3fe 44aa3a3480bfe052adfd8b8001106f8c1525a57d 435e0757ae8e8e029e968f781a05e89471f0ceccf265f8a17d49941c03750d83
GET /npm/clappr-pip@latest/dist/clappr-pip.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player003.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 0.2.0
x-jsd-version-type: version
etag: W/"43c1-RKo6NIC/4FKt/YuAARBvjBUlpX0"
content-encoding: br
accept-ranges: bytes
date: Fri, 10 May 2024 12:54:18 GMT
age: 32676
x-served-by: cache-fra-eddf8230120-FRA, cache-hel1410025-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4866
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/@clappr/player@latest/dist/clappr.min.js | 151.101.129.229 | | 170 kB |
URL cdn.jsdelivr.net/npm/@clappr/player@latest/dist/clappr.min.js IP151.101.129.229:0
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size170 kB (169818 bytes) Hashdab2d64437710247c214acc3b9330c41 bd540e94b5d09675672c524fb018902bd6a1a388 d2fbcb1544ff003e2c11bf04bb7d97c44d32442fd55d7a9df324c2133ae1648b
GET /npm/@clappr/player@latest/dist/clappr.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player003.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 0.6.0
x-jsd-version-type: version
etag: W/"9871a-vVQOlLXQlnVnLFJPsBiQK9aho4g"
content-encoding: br
accept-ranges: bytes
date: Fri, 10 May 2024 12:54:18 GMT
age: 16902
x-served-by: cache-fra-eddf8230062-FRA, cache-hel1410025-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 169818
X-Firefox-Spdy: h2
|
|
| i.imgur.com/0P0Udsa.png | 199.232.196.193 | | 864 B |
IP199.232.196.193:0
File typePNG image data, 25 x 25, 8-bit gray+alpha, non-interlaced Hash8544d742fceef41b6f6aa525f4f20c2b 45ce1f06db61c90826704462ef56c7fbe0f397d7 a89acacebcd3d71464b8d621660f9125047823d227e70ff22651bf7a30f880f2
GET /0P0Udsa.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player003.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
last-modified: Sat, 14 Oct 2023 13:18:37 GMT
etag: "8544d742fceef41b6f6aa525f4f20c2b"
x-amz-server-side-encryption: AES256
x-amz-cf-pop: ORD56-P6
x-amz-cf-id: QQLntPgE_djMrZO3nUyJ_zXGCvE2YWBBzSh1YxRfaXhb6X9Xwtqo0A==
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Fri, 10 May 2024 12:54:18 GMT
age: 3008940
x-served-by: cache-iad-kcgs7200069-IAD, cache-hel1410034-HEL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 61, 16
x-timer: S1715345658.162219,VS0,VE0
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 864
X-Firefox-Spdy: h2
|
|
| my.rtmark.net/gid.js?userId=0080586d7ce3413ef044c29876d1ef60 | 139.45.195.8 | | 65 B |
URL my.rtmark.net/gid.js?userId=0080586d7ce3413ef044c29876d1ef60 IP139.45.195.8:0
Hash07c0780094bcf72436be431522317972 3811c6294650a3e039ec4a512722f38306f100a5 f65ebe60c772c42093b06b8e3f81eb39cf505591bf3bf6a0af82a15076c44857
GET /gid.js?userId=0080586d7ce3413ef044c29876d1ef60 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player003.vip
DNT: 1
Connection: keep-alive
Referer: https://player003.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 12:54:18 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://player003.vip
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0080586d7ce3413ef044c29876d1ef60; expires=Sat, 10 May 2025 12:54:18 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| zeekaihu.net/?rb=QknTc9-TX38h9muYqGnnLOfGw4R4xDau45FxBfdr13BzlUe8nUZtCfuPA_ruQUygMlRY7hhLzzQP-aW6axmn8V_umuQliEF1k3Jd8y0GpWvl1qKSG0iSaYXeng8G9hl8DLabPixUm5FXmxpoUJfKSzSYsGObcjQmhi3U8vSwqMGRWrc-VBp7NO6Yw7cw7XNoAEZByIp-65ZQhNLHQ6cvI-kuhCOc31jCzQFfPs7fDuQmfrhvXiAh464vBr4GlyEoz5neBuKNyKU%3D&request_ab2=0&zoneid=6888739&js_build=iclick-v1.792.1-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=2&pl=https%3A%2F%2Fplayer003.vip%2Fembed2.php%3Fid%3Dbtespn&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.792.1-auto&navlng=en-US&pnt=0&pnrc=0&bs=fe401f4f-9698-4d32-b604-3b582d2216f0&wasm=1&userId=0080586d7ce3413ef044c29876d1ef60&m=link | 139.45.197.245 | | 7.7 kB |
URL zeekaihu.net/?rb=QknTc9-TX38h9muYqGnnLOfGw4R4xDau45FxBfdr13BzlUe8nUZtCfuPA_ruQUygMlRY7hhLzzQP-aW6axmn8V_umuQliEF1k3Jd8y0GpWvl1qKSG0iSaYXeng8G9hl8DLabPixUm5FXmxpoUJfKSzSYsGObcjQmhi3U8vSwqMGRWrc-VBp7NO6Yw7cw7XNoAEZByIp-65ZQhNLHQ6cvI-kuhCOc31jCzQFfPs7fDuQmfrhvXiAh464vBr4GlyEoz5neBuKNyKU%3D&request_ab2=0&zoneid=6888739&js_build=iclick-v1.792.1-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=2&pl=https%3A%2F%2Fplayer003.vip%2Fembed2.php%3Fid%3Dbtespn&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.792.1-auto&navlng=en-US&pnt=0&pnrc=0&bs=fe401f4f-9698-4d32-b604-3b582d2216f0&wasm=1&userId=0080586d7ce3413ef044c29876d1ef60&m=link IP139.45.197.245:0
File typegzip compressed data, max speed, from Unix Hash9f50d67073e41535a6e7c169cada7f9b bb396430d57d5dfee234bdb68b674165abb3b484 be23920e790b89304f56f02727938fdc5c126e68c89223454baaf5b769d21316
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?rb=QknTc9-TX38h9muYqGnnLOfGw4R4xDau45FxBfdr13BzlUe8nUZtCfuPA_ruQUygMlRY7hhLzzQP-aW6axmn8V_umuQliEF1k3Jd8y0GpWvl1qKSG0iSaYXeng8G9hl8DLabPixUm5FXmxpoUJfKSzSYsGObcjQmhi3U8vSwqMGRWrc-VBp7NO6Yw7cw7XNoAEZByIp-65ZQhNLHQ6cvI-kuhCOc31jCzQFfPs7fDuQmfrhvXiAh464vBr4GlyEoz5neBuKNyKU%3D&request_ab2=0&zoneid=6888739&js_build=iclick-v1.792.1-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=2&pl=https%3A%2F%2Fplayer003.vip%2Fembed2.php%3Fid%3Dbtespn&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.792.1-auto&navlng=en-US&pnt=0&pnrc=0&bs=fe401f4f-9698-4d32-b604-3b582d2216f0&wasm=1&userId=0080586d7ce3413ef044c29876d1ef60&m=link HTTP/1.1
Host: zeekaihu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://player003.vip/
Origin: https://player003.vip
DNT: 1
Connection: keep-alive
Cookie: OAID=0080586d7ce3413ef044c29876d1ef60; oaidts=1715345658
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 12:54:18 GMT
content-type: application/json
x-trace-id: b4a48e24b1b11ca2b3952eeabec565cd
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://player003.vip
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=0080586d7ce3413ef044c29876d1ef60; expires=Sat, 10 May 2025 12:54:18 GMT; path=/; secure; SameSite=None
oaidts=1715345658; expires=Sat, 10 May 2025 12:54:18 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Fri, 17 May 2024 12:54:18 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| player003.vip/favicon.ico | 104.21.34.239 | | 5.3 kB |
URL player003.vip/favicon.ico IP104.21.34.239:0
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
GET /favicon.ico HTTP/1.1
Host: player003.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player003.vip/embed2.php?id=btespn
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Fri, 10 May 2024 12:54:18 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=120
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pIUiPWgk3xhKW6dD%2B7NQN681C37v1ywQt2yf7hHT6V9ozEH9E%2FRCamZ7Cxvkgdy4xtnJlt6IbpF2CJ4qzgrOO5kEVCAjHclxcrrEcVzw3C7bLryOCDKJzxxwL%2BuJdaHU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881a13bc8ca10b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
0.0.0.0