| www.googletagmanager.com/gtag/js?id=UA-77858712-2 |  142.250.74.168 | 200 OK | 73 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=UA-77858712-2 IP142.250.74.168:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hashd5dd7d504bdbdb67cb29bfdcde7c53cf 0a35c3879ab787678ccedf30613516e296358c17 fa842ef09952a5ded756df67d5e787fa2b21505314fb9e697acb842555c7fcfb
GET /gtag/js?id=UA-77858712-2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 09:50:19 GMT
expires: Thu, 25 Apr 2024 09:50:19 GMT
cache-control: private, max-age=900
last-modified: Thu, 25 Apr 2024 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 73308
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-SQFXB0YJTT&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 89 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-SQFXB0YJTT&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Hashb46a3e150b8532e736134a7fc8bca192 1c3f832233b68b268115fac55f2fb010722da8e3 eb77912dc0b1d8a35cf87c52d49b557cdd77faf44125c8086f4f0f3a55a01cbc
GET /gtag/js?id=G-SQFXB0YJTT&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 09:50:19 GMT
expires: Thu, 25 Apr 2024 09:50:19 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 88709
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/ptsans/v9/ATKpv8nLYAKUYexo8iqqrg.woff2 | 216.58.207.227 | 200 OK | 45 kB |
URL GET HTTP/2fonts.gstatic.com/s/ptsans/v9/ATKpv8nLYAKUYexo8iqqrg.woff2 IP216.58.207.227:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 45052, version 1.0 Hash198d320b73bc44e4f0dd33d6b09c9511 32770201897de26b9c207215e4ec18c8eab82189 143c5c0124d14b936536af0c656e10aebbc2bb832563f00137f7e9c717195df1
GET /s/ptsans/v9/ATKpv8nLYAKUYexo8iqqrg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nexu.playurbano.com
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 45052
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 02:14:34 GMT
expires: Wed, 23 Apr 2025 02:14:34 GMT
cache-control: public, max-age=31536000
age: 200145
last-modified: Wed, 11 Oct 2017 18:24:43 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| live.demand.supply/e/e.js?e=ll&d=421&cs=c&dsReferer=bmV4dS5wbGF5dXJiYW5vLmNvbS8= |  104.17.38.115 | 200 OK | 0 B |
URL HEAD HTTP/3live.demand.supply/e/e.js?e=ll&d=421&cs=c&dsReferer=bmV4dS5wbGF5dXJiYW5vLmNvbS8= IP104.17.38.115:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /e/e.js?e=ll&d=421&cs=c&dsReferer=bmV4dS5wbGF5dXJiYW5vLmNvbS8= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nexu.playurbano.com
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 09:50:19 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1
cache-control: s-maxage=2592000,stale-if-error=604800
cf-bgj: minify
cf-polished: origSize=2
access-control-allow-origin: *
cache-status: "Netlify Edge"; hit
etag: "fbee6989874cef86694d7a2d31af072a-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01HV98B5PP8EF5VX00MR1KCKGN
cf-cache-status: HIT
accept-ranges: bytes
set-cookie: __cf_bm=UAbD540b6KR8XyaKZMXTw0mOyIcazruvIR0bOgOsci8-1714038619-1.0.1.1-5hSafi45vCkexlekUeeuGzjBmXJEorOFSYatDZEIdTNQbYV7w3wYsyDBcNecKMfwmEuF8MR7FTGMaB8zrmugHg; path=/; expires=Thu, 25-Apr-24 10:20:19 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d6d9c1878b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| finallytrained.com/06/33/56/0633569b5e7b7ced877cf02d43663712.js | 172.240.127.234 | 200 OK | 16 kB |
URL GET HTTP/1.1finallytrained.com/06/33/56/0633569b5e7b7ced877cf02d43663712.js IP172.240.127.234:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectfinallytrained.com Fingerprint51:0C:3D:8A:D3:C9:0A:92:4D:23:A2:75:D2:95:75:02:2E:DE:39:CE ValiditySun, 03 Mar 2024 06:48:00 GMT - Sat, 01 Jun 2024 06:47:59 GMT
File typeJavaScript source, ASCII text, with very long lines (44112), with no line terminators Hashadd04ea29d658a08c2b21651e7c6d9a5 aa92bd950ff5b5ebc71ed086249df98e8a6d2270 d9ef5fd6667bed9d9da4a19dd777716bf870dda75ba52e56c5c0d31d88c25156
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /06/33/56/0633569b5e7b7ced877cf02d43663712.js HTTP/1.1
Host: finallytrained.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 25 Apr 2024 09:50:19 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8299829d96a4f2a1197b622166dd56f1
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| live.demand.supply/e/e.js?r=playurbano.com_auto_interstitial_desktop&sn=1&ific=true&e=iar2&dsReferer=bmV4dS5wbGF5dXJiYW5vLmNvbS8= | 104.17.38.115 | 200 OK | 0 B |
URL HEAD HTTP/3live.demand.supply/e/e.js?r=playurbano.com_auto_interstitial_desktop&sn=1&ific=true&e=iar2&dsReferer=bmV4dS5wbGF5dXJiYW5vLmNvbS8= IP104.17.38.115:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /e/e.js?r=playurbano.com_auto_interstitial_desktop&sn=1&ific=true&e=iar2&dsReferer=bmV4dS5wbGF5dXJiYW5vLmNvbS8= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nexu.playurbano.com
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 09:50:19 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1
cache-control: s-maxage=2592000,stale-if-error=604800
cf-bgj: minify
cf-polished: origSize=2
access-control-allow-origin: *
cache-status: "Netlify Edge"; hit
etag: "fbee6989874cef86694d7a2d31af072a-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01HV98B5PP8EF5VX00MR1KCKGN
cf-cache-status: HIT
age: 0
accept-ranges: bytes
set-cookie: __cf_bm=LmPVtFdLHLhGfjpTAPBhMP0fZUwx3vjnOu_6VB0L6j0-1714038619-1.0.1.1-XzSEfKz0p2NQM8twxpczRGqR.8eKEElOzmlsDoCouEke1fEZFNbfA2FcKfI7tPxcTrYQZHoWroCY9VTwLTiOMg; path=/; expires=Thu, 25-Apr-24 10:20:19 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d6d9e2a3bb509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.playurbano.com/wp-content/plugins/a3-lazy-load/assets/css/loading.gif |  188.114.96.1 | 200 OK | 1.7 kB |
URL GET HTTP/3www.playurbano.com/wp-content/plugins/a3-lazy-load/assets/css/loading.gif IP188.114.96.1:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectplayurbano.com FingerprintCD:AE:9E:CA:48:75:44:24:71:E4:A3:FA:7D:D2:A5:3E:5F:2D:9B:56 ValidityWed, 24 Apr 2024 18:53:10 GMT - Tue, 23 Jul 2024 18:53:09 GMT
File typeGIF image data, version 89a, 32 x 32 Hash265808cc54404f22de9785c713e0cb7e bf3d1b71957caee1c6273061ad00c99c5d785a0f b6e4dff920e21e3f436a014140d01d43c97177e007556ede69f772f08cb7a7ec
GET /wp-content/plugins/a3-lazy-load/assets/css/loading.gif HTTP/1.1
Host: www.playurbano.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playurbano.com/wp-content/plugins/a3-lazy-load/assets/css/jquery.lazyloadxt.spinner.css?ver=6.5.2
Cookie: _ga_SQFXB0YJTT=GS1.1.1714038619.1.0.1714038619.0.0.0; _ga=GA1.1.1647606046.1714038619
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 09:50:20 GMT
content-type: image/gif
content-length: 1690
cache-control: public, max-age=31536000
expires: Sun, 19 May 2024 00:13:15 GMT
last-modified: Wed, 07 Feb 2024 05:05:35 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 553024
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MypLGlzcNk9Ww9qXZO%2FBBS1FOy2xWLaiPDlW4guHuYcfadIAvESVYbC8C%2FTimTWZx66%2F5UqigNhBaX5VolAyBaOxUpot8w1qbv3yyryKxxc2Caqmv1gfNvQLRmO3y1UYrw%2BVAvs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d6d9efb0fb509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/ptsans/v9/0XxGQsSc1g4rdRdjJKZrNPk_vArhqVIZ0nv9q090hN8.woff2 | 216.58.207.227 | 200 OK | 47 kB |
URL GET HTTP/3fonts.gstatic.com/s/ptsans/v9/0XxGQsSc1g4rdRdjJKZrNPk_vArhqVIZ0nv9q090hN8.woff2 IP216.58.207.227:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 46620, version 1.0 Hashf6d5807c5cbc7ff22671d30fbf09ae1a f6573b244a01641be40c01ea0fe7a404b766ff86 080d87ea98497809417441c5267bcc92f38883b7023d125e7766b1f4ca8658df
GET /s/ptsans/v9/0XxGQsSc1g4rdRdjJKZrNPk_vArhqVIZ0nv9q090hN8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nexu.playurbano.com
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 18:12:46 GMT
expires: Fri, 18 Apr 2025 18:12:46 GMT
cache-control: public, max-age=31536000
age: 574654
last-modified: Wed, 11 Oct 2017 18:24:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.playurbano.com/wp-content/plugins/a3-lazy-load/assets/images/lazy_placeholder.gif | 188.114.96.1 | 200 OK | 42 B |
URL GET HTTP/3www.playurbano.com/wp-content/plugins/a3-lazy-load/assets/images/lazy_placeholder.gif IP188.114.96.1:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectplayurbano.com FingerprintCD:AE:9E:CA:48:75:44:24:71:E4:A3:FA:7D:D2:A5:3E:5F:2D:9B:56 ValidityWed, 24 Apr 2024 18:53:10 GMT - Tue, 23 Jul 2024 18:53:09 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /wp-content/plugins/a3-lazy-load/assets/images/lazy_placeholder.gif HTTP/1.1
Host: www.playurbano.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Cookie: _ga_SQFXB0YJTT=GS1.1.1714038619.1.0.1714038619.0.0.0; _ga=GA1.1.1647606046.1714038619
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 09:50:20 GMT
content-type: image/gif
content-length: 42
cache-control: public, max-age=31536000
expires: Sun, 19 May 2024 19:45:21 GMT
last-modified: Wed, 07 Feb 2024 05:05:35 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 482698
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9ihkAY%2Fd3Jx36zO5tHqJ4SM6CeE3EKU%2F4VeXJf%2B04TrS0YexWgAcKELf%2BrkYMr8Xjue8I3xSaljRI7h%2BWA56wILUOvVrg2YZhjxOFmoubcVp38EAGsAO7EOKYQ2R8KKHZmreeOM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d6d9f6b6db509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.playurbano.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 | 188.114.96.1 | 200 OK | 82 kB |
URL GET HTTP/2www.playurbano.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 IP188.114.96.1:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectplayurbano.com FingerprintCD:AE:9E:CA:48:75:44:24:71:E4:A3:FA:7D:D2:A5:3E:5F:2D:9B:56 ValidityWed, 24 Apr 2024 18:53:10 GMT - Tue, 23 Jul 2024 18:53:09 GMT
File typeASCII text, with very long lines (59701) Hash51a8390b47aa0582cf2d9c96c5addee2 b16a640874025d085c38119a1a02a3460f83f2de 98cecf88a23542fa047ce46eedb650b5c5128761ed4386c0977b847094ddfa20
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 HTTP/1.1
Host: www.playurbano.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 09:50:19 GMT
content-type: text/css
cache-control: public, max-age=31536000
expires: Sat, 25 May 2024 09:50:18 GMT
last-modified: Tue, 09 Apr 2024 01:18:36 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZA0HTwu7Vxjj9H2vhiJEuhWjwcMid2IYW9hX17f6ZUwkZUOUGDntv7cgF4Wi7u4wzPdfpfL1SsiYsL%2FeZc6NWtZ1wlfJaTFM6KfPSsfsbRumcwg6Pg3S8%2BwVWCvjBGAVoveIiUc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879d6d9a08c4b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| proftrafficcounter.com/stats |  18.185.247.192 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.185.247.192:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashec954bce474fb8821832eff07792745b 5e81bda106b02d41b9049f142819eb8903e8123b 05a05bd0bef69889d0aa0574f94d135f95ba150a072619a95516c588f9420005
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nexu.playurbano.com
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 09:50:20 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://nexu.playurbano.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=44b0f327-4375-48d8-920f-ff9255a19530:3:1; expires=Sun, 23 Apr 2034 09:50:20 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| live.demand.supply/p4/v17-24-0/bmV4dS5wbGF5dXJiYW5vLmNvbS8= | 104.17.38.115 | 200 OK | 496 B |
URL GET HTTP/3live.demand.supply/p4/v17-24-0/bmV4dS5wbGF5dXJiYW5vLmNvbS8= IP104.17.38.115:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (983), with no line terminators Hash0759443107bfb01aeb4d412bc65a27fd 383b1f54af3776d60cb9858d34cb463509ca1fb7 24c4235b23fa7767be752258379a93faedc36eb8a41fadc129627ba1d846a261
GET /p4/v17-24-0/bmV4dS5wbGF5dXJiYW5vLmNvbS8= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Cookie: __cf_bm=CQZpD4CauhptdW1ndQZQxs_5._50nmq5GuRSFUcO9S4-1714038619-1.0.1.1-X4sim.KQBJQPSOeUiHvIxPrQlul41R.oTy8Of2gvq3tGAUyJ4gPcxbaX0hfGvNR2XHj6Ue6vx7fvEY39Gicb6Q
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 09:50:19 GMT
content-type: text/javascript
access-control-allow-origin: *
cache-control: max-age=3600, s-maxage=7200, stale-while-revalidate=3600, stale-if-error=84600
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d6d9c1d3fb51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| live.demand.supply/x/e.js?ce=fs&dsReferer=bmV4dS5wbGF5dXJiYW5vLmNvbS8= | 104.17.38.115 | 200 OK | 0 B |
URL HEAD HTTP/3live.demand.supply/x/e.js?ce=fs&dsReferer=bmV4dS5wbGF5dXJiYW5vLmNvbS8= IP104.17.38.115:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /x/e.js?ce=fs&dsReferer=bmV4dS5wbGF5dXJiYW5vLmNvbS8= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nexu.playurbano.com
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 09:50:20 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1
cache-control: s-maxage=2592000,stale-if-error=604800
cf-bgj: minify
cf-polished: origSize=2
access-control-allow-origin: *
cache-status: "Netlify Edge"; hit
etag: "bc98cbb290dc425f60a716554dcbca97-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01HVSM0VHPBA856WT1QD7Q2WMQ
cf-cache-status: HIT
accept-ranges: bytes
set-cookie: __cf_bm=s3dolNjM8JbXw0JNLhfH9drQgGBkXsRWHPyvjLFEFpE-1714038620-1.0.1.1-_6.pDkgyB9mpx2USlN8DcUIAWFarRHUaVnIlGJ_fNyMe0tvfhw5MUlz9hhSe2fSwlV9r.1WvQy9FzT4vurzVqA; path=/; expires=Thu, 25-Apr-24 10:20:20 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d6d9f6b74b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| notix.io/settings?appId=1004d5bcd6273f6638c17ffe69ed8c9&ver=0.16.4 |  139.45.197.227 | 200 OK | 318 B |
URL GET HTTP/2notix.io/settings?appId=1004d5bcd6273f6638c17ffe69ed8c9&ver=0.16.4 IP139.45.197.227:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectnotix.io Fingerprint3C:56:70:26:73:9D:43:E7:28:EF:40:FE:65:98:CD:7B:0A:56:D9:1B ValiditySat, 17 Feb 2024 20:57:19 GMT - Fri, 17 May 2024 20:57:18 GMT
Hash2aa6e23f41c8163ad6687f06a3362efd d94bb528db571a75d9f9131a0a45249de485de8f 6e305047f5ac1bf8acd8614bd52fce1ab9ac03c5af3eeef71f18cacd724b3fb9
GET /settings?appId=1004d5bcd6273f6638c17ffe69ed8c9&ver=0.16.4 HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nexu.playurbano.com/
Origin: https://nexu.playurbano.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 09:50:20 GMT
content-type: application/json; charset=utf-8
content-length: 318
access-control-allow-origin: https://nexu.playurbano.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.playurbano.com/wp-content/uploads/2024/04/Mc-Ceja-Alquimia-2024-150x150.jpg | 188.114.96.1 | 200 OK | 7.8 kB |
URL GET HTTP/3www.playurbano.com/wp-content/uploads/2024/04/Mc-Ceja-Alquimia-2024-150x150.jpg IP188.114.96.1:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectplayurbano.com FingerprintCD:AE:9E:CA:48:75:44:24:71:E4:A3:FA:7D:D2:A5:3E:5F:2D:9B:56 ValidityWed, 24 Apr 2024 18:53:10 GMT - Tue, 23 Jul 2024 18:53:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 150x150, components 3 Hash5f99234eedd482f9a7566d560afb31d8 a3bc6c3165bc12acfe8fd6fe19c1aa4b4cffc357 2222c7cbde6c06d8cbd1f46270640094c8424b19b2ac1370e4500b1856c305e6
GET /wp-content/uploads/2024/04/Mc-Ceja-Alquimia-2024-150x150.jpg HTTP/1.1
Host: www.playurbano.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Cookie: _ga_SQFXB0YJTT=GS1.1.1714038619.1.0.1714038619.0.0.0; _ga=GA1.1.1647606046.1714038619
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 09:50:20 GMT
content-type: image/jpeg
content-length: 7761
cache-control: public, max-age=31536000
expires: Sat, 25 May 2024 09:50:19 GMT
last-modified: Thu, 25 Apr 2024 09:16:29 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AP2kYKwedaRD%2FoVE2aMgjWW46USyb5VtCI0gSFi%2FzONW94WYBPXsb6qYJ8bSdpTAxSnZ64B8ltECXwtpHrPXcu%2B4HajlM51iOi8yfgyKqt%2BXtmSyDqN%2B9eBpM%2BVnZHCUDj1jZ54%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d6da07cdeb509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| downstairsnegotiatebarren.com/sfp.js | 188.114.97.1 | 200 OK | 67 kB |
URL GET HTTP/3downstairsnegotiatebarren.com/sfp.js IP188.114.97.1:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint2C:6A:E1:8E:26:5B:1D:8B:86:CB:C1:72:4E:52:4B:8B:67:3A:D2:44 ValidityMon, 04 Mar 2024 21:53:07 GMT - Sun, 02 Jun 2024 21:53:06 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators Hashf4a2f8f9f99541c6f105bbd0a025bd40 1f8e3eff12168fdd9e719adfc098d24a45b6916a b717cb04231a10d425fd55b73c85a5407119c6826a8bac94142fddfff6958716
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 09:50:20 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 54fd61fce4176820a4315771cf10f1eb
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 25 Apr 2024 09:50:19 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SeNV%2BaRJwU4qmJiv6rrner1remQeW4hKoAh%2BmWTfMAEfu%2FvwcQ8LIYGOPWBPRiQIGjin9NWw0Xi4haBxNXRuX50VbEUzwcuQOPEs83WY37mE1CJZQfTLWDxenUVQRDmqQdoFAwKWaIgkO2f9GEalnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d6d9f19c656b4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/ptsans/v9/ATKpv8nLYAKUYexo8iqqrg.woff2 | 216.58.207.227 | 200 OK | 45 kB |
URL GET HTTP/2fonts.gstatic.com/s/ptsans/v9/ATKpv8nLYAKUYexo8iqqrg.woff2 IP216.58.207.227:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 45052, version 1.0 Hash198d320b73bc44e4f0dd33d6b09c9511 32770201897de26b9c207215e4ec18c8eab82189 143c5c0124d14b936536af0c656e10aebbc2bb832563f00137f7e9c717195df1
GET /s/ptsans/v9/ATKpv8nLYAKUYexo8iqqrg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nexu.playurbano.com
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 45052
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 02:14:34 GMT
expires: Wed, 23 Apr 2025 02:14:34 GMT
cache-control: public, max-age=31536000
age: 200146
last-modified: Wed, 11 Oct 2017 18:24:43 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/ptsans/v9/0XxGQsSc1g4rdRdjJKZrNPk_vArhqVIZ0nv9q090hN8.woff2 | 216.58.207.227 | 200 OK | 47 kB |
URL GET HTTP/3fonts.gstatic.com/s/ptsans/v9/0XxGQsSc1g4rdRdjJKZrNPk_vArhqVIZ0nv9q090hN8.woff2 IP216.58.207.227:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 46620, version 1.0 Hashf6d5807c5cbc7ff22671d30fbf09ae1a f6573b244a01641be40c01ea0fe7a404b766ff86 080d87ea98497809417441c5267bcc92f38883b7023d125e7766b1f4ca8658df
GET /s/ptsans/v9/0XxGQsSc1g4rdRdjJKZrNPk_vArhqVIZ0nv9q090hN8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nexu.playurbano.com
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 18:12:46 GMT
expires: Fri, 18 Apr 2025 18:12:46 GMT
cache-control: public, max-age=31536000
age: 574654
last-modified: Wed, 11 Oct 2017 18:24:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| constructbrought.com/b8/d7/49/b8d74904f6b94ccf8e1a8085aa5d1820.js | 172.240.127.234 | 200 OK | 31 kB |
URL GET HTTP/1.1constructbrought.com/b8/d7/49/b8d74904f6b94ccf8e1a8085aa5d1820.js IP172.240.127.234:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectconstructbrought.com Fingerprint53:AF:08:11:E0:E0:18:FA:8A:82:83:16:B7:C2:3D:C1:13:AC:4B:5C ValidityWed, 24 Apr 2024 15:05:23 GMT - Tue, 23 Jul 2024 15:05:22 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashf8f2508d22e4f6b1dc5a182eceac6310 a0b9a24ff723b6635a04db72d74f9f0b02a00f3d 69d9116ec432cc4f539b8192decb509feb64e134edb6b60beaa306c8c102c564
GET /b8/d7/49/b8d74904f6b94ccf8e1a8085aa5d1820.js HTTP/1.1
Host: constructbrought.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 25 Apr 2024 09:50:20 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_CF-2931_new=0; expires=Sun, 28 Apr 2024 09:50:20 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 66d6d2136d9c7f93d8c10f6e08844b53
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| notix.io/ent/current/enot.min.js | 139.45.197.227 | 200 OK | 44 kB |
URL GET HTTP/2notix.io/ent/current/enot.min.js IP139.45.197.227:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectnotix.io Fingerprint3C:56:70:26:73:9D:43:E7:28:EF:40:FE:65:98:CD:7B:0A:56:D9:1B ValiditySat, 17 Feb 2024 20:57:19 GMT - Fri, 17 May 2024 20:57:18 GMT
File typegzip compressed data, max speed, from Unix Hashe7c31748babadc734cde79a5fe3c6a55 2c12acc333fec67c244afad74af2fa95e88cd2a3 94b48bafa429f96d3869fd110d9f6ce7f0a0e822e5a83b20156ab17931fb0b28
GET /ent/current/enot.min.js HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 09:50:20 GMT
content-type: application/javascript
last-modified: Wed, 13 Mar 2024 11:17:39 GMT
etag: W/"65f18b53-2380d"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.playurbano.com/wp-content/themes/mp3/images/favicon.ico | 188.114.96.1 | | 1.5 kB |
URL GET www.playurbano.com/wp-content/themes/mp3/images/favicon.ico IP188.114.96.1:0
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectplayurbano.com FingerprintCD:AE:9E:CA:48:75:44:24:71:E4:A3:FA:7D:D2:A5:3E:5F:2D:9B:56 ValidityWed, 24 Apr 2024 18:53:10 GMT - Tue, 23 Jul 2024 18:53:09 GMT
File typePNG image data, 16 x 16, 8-bit/color RGB, non-interlaced Hash9c7b52c73ddffd1f765bff73815cf2ed 57109f8d8e9bccb503ee817803368ecf09b0ffb1 c024656a2d084f884bbde70bff73b282a370f2e49407d3020411b24f8db919e6
GET /wp-content/themes/mp3/images/favicon.ico HTTP/1.1
Host: www.playurbano.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Cookie: _ga_SQFXB0YJTT=GS1.1.1714038619.1.0.1714038619.0.0.0; _ga=GA1.1.1647606046.1714038619
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 09:50:20 GMT
content-type: image/x-icon
cache-control: public, max-age=31536000
expires: Thu, 02 May 2024 17:32:05 GMT
last-modified: Tue, 17 May 2016 04:14:02 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1959494
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7AifXIIwfG3ctXDQOw42DhW2vybcAdQErMLIdCG8R99%2FawQfuwNHkNF7IB7e06yMfXSnpfqVcsbkiJKBE73Sy2ZE%2BmkFdRs5qw5L%2BPKAouAf1MAtCqGPUxYqKmTFhkipfX59I2Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879d6da23e85b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| constructbrought.com/sbar.json?key=0633569b5e7b7ced877cf02d43663712&uuid=44b0f327-4375-48d8-920f-ff9255a19530%3A3%3A1 | 172.240.127.234 | 200 OK | 8.3 kB |
URL GET HTTP/1.1constructbrought.com/sbar.json?key=0633569b5e7b7ced877cf02d43663712&uuid=44b0f327-4375-48d8-920f-ff9255a19530%3A3%3A1 IP172.240.127.234:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectconstructbrought.com Fingerprint53:AF:08:11:E0:E0:18:FA:8A:82:83:16:B7:C2:3D:C1:13:AC:4B:5C ValidityWed, 24 Apr 2024 15:05:23 GMT - Tue, 23 Jul 2024 15:05:22 GMT
Hashe1e620c872f059ebc8d539d719d2cead 40bffcf2e246597ead4cbe6dba27be52cd4a4b11 75ac68cffb282dc2cbd30fed5128ff2f467b3d8152c7981729db10cdd3ed4484
GET /sbar.json?key=0633569b5e7b7ced877cf02d43663712&uuid=44b0f327-4375-48d8-920f-ff9255a19530%3A3%3A1 HTTP/1.1
Host: constructbrought.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nexu.playurbano.com
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 25 Apr 2024 09:50:20 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://nexu.playurbano.com
Access-Control-Allow-Origin: https://nexu.playurbano.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=19408177; expires=Fri, 26 Apr 2024 09:50:20 GMT; secure; SameSite=None
uid_id2=44b0f327-4375-48d8-920f-ff9255a19530:3:1; expires=Thu, 02 May 2024 09:50:20 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 26 Apr 2024 09:50:20 GMT; secure; SameSite=None
uncs=1; expires=Fri, 26 Apr 2024 09:50:20 GMT; secure; SameSite=None
pdhtkv29=true; expires=Fri, 26 Apr 2024 09:50:20 GMT; secure; SameSite=None
uncs29=1; expires=Fri, 26 Apr 2024 09:50:20 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 30a82a686d5474cafca32ccf05899555
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| downstairsnegotiatebarren.com/sfp.js | 188.114.97.1 | 200 OK | 28 kB |
URL GET HTTP/3downstairsnegotiatebarren.com/sfp.js IP188.114.97.1:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint2C:6A:E1:8E:26:5B:1D:8B:86:CB:C1:72:4E:52:4B:8B:67:3A:D2:44 ValidityMon, 04 Mar 2024 21:53:07 GMT - Sun, 02 Jun 2024 21:53:06 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators Hashf4a2f8f9f99541c6f105bbd0a025bd40 1f8e3eff12168fdd9e719adfc098d24a45b6916a b717cb04231a10d425fd55b73c85a5407119c6826a8bac94142fddfff6958716
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 09:50:20 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 95dd4ab4651e9e8a405a71b70effe424
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 25 Apr 2024 09:50:20 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LpEOCUJk5Uo5tJSVML%2F3dg7cOYvdjfZy%2Bt1ORgvidXHw2PYlko9RwM2yT0lHhhoyiEInUHnorLnbBVf%2BMJ68Jf89IuYJA756vCaDMPejm2ixkl6eWvZkyaODrOH2mhONDd7o8URfGD3ge59SWG9tDg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d6da24852b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| youngestmildness.com/pixel/purst?dl=0&th=0&sc=0&rs=2794&rd=2794&fd=542&bv=24.4.4887&tmpl=136 | 172.240.127.234 | 200 OK | 0 B |
URL GET HTTP/1.1youngestmildness.com/pixel/purst?dl=0&th=0&sc=0&rs=2794&rd=2794&fd=542&bv=24.4.4887&tmpl=136 IP172.240.127.234:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectyoungestmildness.com Fingerprint1E:8F:59:B7:29:6A:D7:3F:99:85:F2:A7:49:89:88:22:3E:23:16:C1 ValidityWed, 24 Apr 2024 15:17:25 GMT - Tue, 23 Jul 2024 15:17:24 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/purst?dl=0&th=0&sc=0&rs=2794&rd=2794&fd=542&bv=24.4.4887&tmpl=136 HTTP/1.1
Host: youngestmildness.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 25 Apr 2024 09:50:21 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| www.playurbano.com/wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.extra.min.js?ver=2.7.2 | 188.114.96.1 | 200 OK | 7.5 kB |
URL GET HTTP/2www.playurbano.com/wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.extra.min.js?ver=2.7.2 IP188.114.96.1:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectplayurbano.com FingerprintCD:AE:9E:CA:48:75:44:24:71:E4:A3:FA:7D:D2:A5:3E:5F:2D:9B:56 ValidityWed, 24 Apr 2024 18:53:10 GMT - Tue, 23 Jul 2024 18:53:09 GMT
File typeJavaScript source, ASCII text, with very long lines (2976) Hash53e0fbdc5d79d07d6d955e523f8d2996 e830d0de78b481e31995d69bfda2e71f4cc1be56 2b3c6f1d3cea37b4d8cc609a141b421a88bcaf2f3646965f9f95f4d4a683c949
GET /wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.extra.min.js?ver=2.7.2 HTTP/1.1
Host: www.playurbano.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 09:50:19 GMT
content-type: application/javascript
cache-control: public, max-age=31536000
expires: Thu, 02 May 2024 17:32:03 GMT
last-modified: Wed, 07 Feb 2024 05:05:35 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1959495
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6PifxKgja7n5YissUCApb7o%2BxfU6AiHuBXmIVuNO0c0i12hktODlpPEZ6Gj%2Bqqg%2BnJurU4mzHG66z%2BdS0PfGHBarZmXHG%2FaZIdPBuIBUTLeRZCFRJBfmyM5bjYc%2FGYLROPLj3%2B0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879d6d9a18ddb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| constructbrought.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html&l=2977&fd=116 | 172.240.127.234 | 200 OK | 0 B |
URL GET HTTP/1.1constructbrought.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html&l=2977&fd=116 IP172.240.127.234:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectconstructbrought.com Fingerprint53:AF:08:11:E0:E0:18:FA:8A:82:83:16:B7:C2:3D:C1:13:AC:4B:5C ValidityWed, 24 Apr 2024 15:05:23 GMT - Tue, 23 Jul 2024 15:05:22 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html&l=2977&fd=116 HTTP/1.1
Host: constructbrought.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Cookie: u_pl=19408177; uid_id2=44b0f327-4375-48d8-920f-ff9255a19530:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 25 Apr 2024 09:50:21 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| pagead2.googlesyndication.com/pagead/js/adsbygoogle.js | 142.250.74.130 | 200 OK | 0 B |
URL HEAD HTTP/2pagead2.googlesyndication.com/pagead/js/adsbygoogle.js IP142.250.74.130:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerGoogle Trust Services LLC Subject*.g.doubleclick.net Fingerprint1B:FA:17:60:E2:34:D4:FA:D1:13:08:09:6E:8F:ED:E7:A8:8C:6E:7A ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nexu.playurbano.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
link: <https://googleads.g.doubleclick.net>; rel="preconnect"; crossorigin
vary: Accept-Encoding
date: Thu, 25 Apr 2024 09:50:21 GMT
expires: Thu, 25 Apr 2024 09:50:21 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 6366573185877624609
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 51379
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.playurbano.com/wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.srcset.min.js?ver=2.7.2 | 188.114.96.1 | 200 OK | 15 kB |
URL GET HTTP/2www.playurbano.com/wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.srcset.min.js?ver=2.7.2 IP188.114.96.1:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectplayurbano.com FingerprintCD:AE:9E:CA:48:75:44:24:71:E4:A3:FA:7D:D2:A5:3E:5F:2D:9B:56 ValidityWed, 24 Apr 2024 18:53:10 GMT - Tue, 23 Jul 2024 18:53:09 GMT
File typeASCII text, with very long lines (1533) Hash3e6902b70ee52754121f017fd48175db 0a5d8a5716c7b249eb5e0b02d04aa74c5b9948cb 21dc21cf1cc77b458d114634e3775e70f229dc0c215b0c8958920e2079cb5a16
GET /wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.srcset.min.js?ver=2.7.2 HTTP/1.1
Host: www.playurbano.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 09:50:19 GMT
content-type: application/javascript
cache-control: public, max-age=31536000
expires: Sun, 05 May 2024 16:03:46 GMT
last-modified: Wed, 07 Feb 2024 05:05:35 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1705592
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yte18izvZHB5etl%2Fk5%2F8uR05bYyiexChZFJFOnYdDoGNFKHLMcpFwDNrPq31NetmxfvbgPTj2mnLSvz66WU%2BJqASPZs%2FC8EViWyR2dbdgaZc6mNUQnVVr1zbl0%2Fp%2BVrzya4q7vg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879d6d9a08d8b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| constructbrought.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css&l=79313&fd=394 | 172.240.127.234 | 200 OK | 0 B |
URL GET HTTP/1.1constructbrought.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css&l=79313&fd=394 IP172.240.127.234:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectconstructbrought.com Fingerprint53:AF:08:11:E0:E0:18:FA:8A:82:83:16:B7:C2:3D:C1:13:AC:4B:5C ValidityWed, 24 Apr 2024 15:05:23 GMT - Tue, 23 Jul 2024 15:05:22 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css&l=79313&fd=394 HTTP/1.1
Host: constructbrought.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Cookie: u_pl=19408177; uid_id2=44b0f327-4375-48d8-920f-ff9255a19530:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 25 Apr 2024 09:50:21 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| constructbrought.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css&l=4617&fd=409 | 172.240.127.234 | 200 OK | 0 B |
URL GET HTTP/1.1constructbrought.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css&l=4617&fd=409 IP172.240.127.234:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectconstructbrought.com Fingerprint53:AF:08:11:E0:E0:18:FA:8A:82:83:16:B7:C2:3D:C1:13:AC:4B:5C ValidityWed, 24 Apr 2024 15:05:23 GMT - Tue, 23 Jul 2024 15:05:22 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css&l=4617&fd=409 HTTP/1.1
Host: constructbrought.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Cookie: u_pl=19408177; uid_id2=44b0f327-4375-48d8-920f-ff9255a19530:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 25 Apr 2024 09:50:21 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| constructbrought.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js&l=382&fd=293 | 172.240.127.234 | 200 OK | 0 B |
URL GET HTTP/1.1constructbrought.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js&l=382&fd=293 IP172.240.127.234:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectconstructbrought.com Fingerprint53:AF:08:11:E0:E0:18:FA:8A:82:83:16:B7:C2:3D:C1:13:AC:4B:5C ValidityWed, 24 Apr 2024 15:05:23 GMT - Tue, 23 Jul 2024 15:05:22 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js&l=382&fd=293 HTTP/1.1
Host: constructbrought.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Cookie: u_pl=19408177; uid_id2=44b0f327-4375-48d8-920f-ff9255a19530:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 25 Apr 2024 09:50:21 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| unseenreport.com/pxf.gif?uuid=44b0f327-4375-48d8-920f-ff9255a19530&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=0633569b5e7b7ced877cf02d43663712&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=9 | 192.243.61.227 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=44b0f327-4375-48d8-920f-ff9255a19530&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=0633569b5e7b7ced877cf02d43663712&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=9 IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=44b0f327-4375-48d8-920f-ff9255a19530&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=0633569b5e7b7ced877cf02d43663712&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=9 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 25 Apr 2024 09:50:22 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5b15b87476abc69786e42da727a0a661
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| unseenreport.com/pxf.gif?uuid=44b0f327-4375-48d8-920f-ff9255a19530&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=b8d74904f6b94ccf8e1a8085aa5d1820&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=9 | 192.243.61.227 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=44b0f327-4375-48d8-920f-ff9255a19530&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=b8d74904f6b94ccf8e1a8085aa5d1820&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=9 IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=44b0f327-4375-48d8-920f-ff9255a19530&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=b8d74904f6b94ccf8e1a8085aa5d1820&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=9 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 25 Apr 2024 09:50:22 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e9e3a935eef531a4fbc5e629d66fb0e7
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nexu.playurbano.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 16:27:38 GMT
expires: Wed, 23 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
age: 148964
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nexu.playurbano.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 01:54:31 GMT
expires: Wed, 23 Apr 2025 01:54:31 GMT
cache-control: public, max-age=31536000
age: 201351
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| constructbrought.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSu3uxNENTcojAHJVHc2e7pmekZcwjGuLK4ZkMS0YMg9asn5VZ3NVXd07NzWgxIjoN%2FQe83u1k0QZKrYJDZgIcFYcfTHtyL%2F4FCzjLj4Og71Huvvq%2Fgq%2B%2B9b%2FaLc9JAQc9ufGKGSmu63qr7tSufB8HV2pZKi0Ft0Gl%2F2W5erdn%2Be9123X%2B79pHkO2a94Qe%2BH%2FhBbUNZGZvB%2BgyEyh53g3rXrzcb9aDVxMD%2Bv3eFB0c9iP45eRVKTFefexeh%2BARp8uSGdDu5yd79MCk0zY1FXxx9mu6kpkyRLMvYeojTowUbxp1uPINJD%2BdyYfr%2FEpmaEu%2BXZ2Dp0UIkWP9grpNpyBRMvISyP4HUEyg6ATf3ocQpAbjAzW2kycObxpZ09x%2BUztApWX3xF1Q5Jau%2FX0Sa%2FHBdq0HtjtFFrkzqMIgrqMEEqjdBVhwjH65Alcfg%2BddQ4ley%2FmILaXKw7bSBEmdvNpvMj8NGtNYMo9ZasyM6a92GH6%2FFcbfRatGg2wr9uUFKTaDiCbQcgboLKJyHQnkoYg9F5iERZzUeBEHkC079TpfzUESStYUf0CgOaOC3Oyj47A8j5NkIXI%2FA7R4yu4cdNYItfoa7V8EJDy4n6IsKpSQoHUFJCUpFUOYEZb86FNo1XPVQaFewYJEbixxWY5P39umhyXsyJaB2BCuq%2FeycvDIz0LvyVoAdeVbz22HYandZS0Ys4lJ0oojHfkM0w3Y7jIIGnKqg3Aqo8zBUU3L59VVk6vS1FIwew%2BljcOWBFm%2BAlhXovQrD9BEdZlIrV%2BcmgTAVsnwV%2Ba63r8%2FJpfn8NrefQPKTa3%2BE8wC3FTJb4Sv1nKCnH4xvm5Ic3DalI0%2B3s1wlakhns72T01xe%2BP5juVsaKzZvuNF37%2FMZMCsf35Uu36KpUGnPkUfXlRDSbhjLJflp030m2a3C3bte2LTItm59sLGZZFY6p0w6AZ2t6Z8WXE3Jy5fuztf2yo%2FbUHYCW1RIihOyCCgzAc%2F24LKlfmcIrF5yWOahLKqxbbDlpVYEWi57yiq4%2F%2FRsWY8tnb2mqtp3D9CzK6D5faRJhb6t0NcVqB7BFRfGeWZPrv22kMH0yphpu3LAtNXfzm2eHU%2Fh1Fkt9EXEZCwjJputZiy5YK0W83nMWSg6HY7cTeN3Ln%2FxNwAAAP%2F%2FAQAA%2F%2F8g%2Fgk%2FkAQAAA%3D%3D | 172.240.127.234 | 200 OK | 7 B |
URL GET HTTP/1.1constructbrought.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSu3uxNENTcojAHJVHc2e7pmekZcwjGuLK4ZkMS0YMg9asn5VZ3NVXd07NzWgxIjoN%2FQe83u1k0QZKrYJDZgIcFYcfTHtyL%2F4FCzjLj4Og71Huvvq%2Fgq%2B%2B9b%2FaLc9JAQc9ufGKGSmu63qr7tSufB8HV2pZKi0Ft0Gl%2F2W5erdn%2Be9123X%2B79pHkO2a94Qe%2BH%2FhBbUNZGZvB%2BgyEyh53g3rXrzcb9aDVxMD%2Bv3eFB0c9iP45eRVKTFefexeh%2BARp8uSGdDu5yd79MCk0zY1FXxx9mu6kpkyRLMvYeojTowUbxp1uPINJD%2BdyYfr%2FEpmaEu%2BXZ2Dp0UIkWP9grpNpyBRMvISyP4HUEyg6ATf3ocQpAbjAzW2kycObxpZ09x%2BUztApWX3xF1Q5Jau%2FX0Sa%2FHBdq0HtjtFFrkzqMIgrqMEEqjdBVhwjH65Alcfg%2BddQ4ley%2FmILaXKw7bSBEmdvNpvMj8NGtNYMo9ZasyM6a92GH6%2FFcbfRatGg2wr9uUFKTaDiCbQcgboLKJyHQnkoYg9F5iERZzUeBEHkC079TpfzUESStYUf0CgOaOC3Oyj47A8j5NkIXI%2FA7R4yu4cdNYItfoa7V8EJDy4n6IsKpSQoHUFJCUpFUOYEZb86FNo1XPVQaFewYJEbixxWY5P39umhyXsyJaB2BCuq%2FeycvDIz0LvyVoAdeVbz22HYandZS0Ys4lJ0oojHfkM0w3Y7jIIGnKqg3Aqo8zBUU3L59VVk6vS1FIwew%2BljcOWBFm%2BAlhXovQrD9BEdZlIrV%2BcmgTAVsnwV%2Ba63r8%2FJpfn8NrefQPKTa3%2BE8wC3FTJb4Sv1nKCnH4xvm5Ic3DalI0%2B3s1wlakhns72T01xe%2BP5juVsaKzZvuNF37%2FMZMCsf35Uu36KpUGnPkUfXlRDSbhjLJflp030m2a3C3bte2LTItm59sLGZZFY6p0w6AZ2t6Z8WXE3Jy5fuztf2yo%2FbUHYCW1RIihOyCCgzAc%2F24LKlfmcIrF5yWOahLKqxbbDlpVYEWi57yiq4%2F%2FRsWY8tnb2mqtp3D9CzK6D5faRJhb6t0NcVqB7BFRfGeWZPrv22kMH0yphpu3LAtNXfzm2eHU%2Fh1Fkt9EXEZCwjJputZiy5YK0W83nMWSg6HY7cTeN3Ln%2FxNwAAAP%2F%2FAQAA%2F%2F8g%2Fgk%2FkAQAAA%3D%3D IP172.240.127.234:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectconstructbrought.com Fingerprint53:AF:08:11:E0:E0:18:FA:8A:82:83:16:B7:C2:3D:C1:13:AC:4B:5C ValidityWed, 24 Apr 2024 15:05:23 GMT - Tue, 23 Jul 2024 15:05:22 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSu3uxNENTcojAHJVHc2e7pmekZcwjGuLK4ZkMS0YMg9asn5VZ3NVXd07NzWgxIjoN%2FQe83u1k0QZKrYJDZgIcFYcfTHtyL%2F4FCzjLj4Og71Huvvq%2Fgq%2B%2B9b%2FaLc9JAQc9ufGKGSmu63qr7tSufB8HV2pZKi0Ft0Gl%2F2W5erdn%2Be9123X%2B79pHkO2a94Qe%2BH%2FhBbUNZGZvB%2BgyEyh53g3rXrzcb9aDVxMD%2Bv3eFB0c9iP45eRVKTFefexeh%2BARp8uSGdDu5yd79MCk0zY1FXxx9mu6kpkyRLMvYeojTowUbxp1uPINJD%2BdyYfr%2FEpmaEu%2BXZ2Dp0UIkWP9grpNpyBRMvISyP4HUEyg6ATf3ocQpAbjAzW2kycObxpZ09x%2BUztApWX3xF1Q5Jau%2FX0Sa%2FHBdq0HtjtFFrkzqMIgrqMEEqjdBVhwjH65Alcfg%2BddQ4ley%2FmILaXKw7bSBEmdvNpvMj8NGtNYMo9ZasyM6a92GH6%2FFcbfRatGg2wr9uUFKTaDiCbQcgboLKJyHQnkoYg9F5iERZzUeBEHkC079TpfzUESStYUf0CgOaOC3Oyj47A8j5NkIXI%2FA7R4yu4cdNYItfoa7V8EJDy4n6IsKpSQoHUFJCUpFUOYEZb86FNo1XPVQaFewYJEbixxWY5P39umhyXsyJaB2BCuq%2FeycvDIz0LvyVoAdeVbz22HYandZS0Ys4lJ0oojHfkM0w3Y7jIIGnKqg3Aqo8zBUU3L59VVk6vS1FIwew%2BljcOWBFm%2BAlhXovQrD9BEdZlIrV%2BcmgTAVsnwV%2Ba63r8%2FJpfn8NrefQPKTa3%2BE8wC3FTJb4Sv1nKCnH4xvm5Ic3DalI0%2B3s1wlakhns72T01xe%2BP5juVsaKzZvuNF37%2FMZMCsf35Uu36KpUGnPkUfXlRDSbhjLJflp030m2a3C3bte2LTItm59sLGZZFY6p0w6AZ2t6Z8WXE3Jy5fuztf2yo%2FbUHYCW1RIihOyCCgzAc%2F24LKlfmcIrF5yWOahLKqxbbDlpVYEWi57yiq4%2F%2FRsWY8tnb2mqtp3D9CzK6D5faRJhb6t0NcVqB7BFRfGeWZPrv22kMH0yphpu3LAtNXfzm2eHU%2Fh1Fkt9EXEZCwjJputZiy5YK0W83nMWSg6HY7cTeN3Ln%2FxNwAAAP%2F%2FAQAA%2F%2F8g%2Fgk%2FkAQAAA%3D%3D HTTP/1.1
Host: constructbrought.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Cookie: u_pl=19408177; uid_id2=44b0f327-4375-48d8-920f-ff9255a19530:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 25 Apr 2024 09:50:22 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ff928183d3ee51e84275e46372965feb
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| constructbrought.com/pixel/sbs?c=1 | 192.243.59.13 | 200 OK | 0 B |
URL GET HTTP/1.1constructbrought.com/pixel/sbs?c=1 IP192.243.59.13:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectconstructbrought.com Fingerprint53:AF:08:11:E0:E0:18:FA:8A:82:83:16:B7:C2:3D:C1:13:AC:4B:5C ValidityWed, 24 Apr 2024 15:05:23 GMT - Tue, 23 Jul 2024 15:05:22 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbs?c=1 HTTP/1.1
Host: constructbrought.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Cookie: u_pl=19408177; uid_id2=44b0f327-4375-48d8-920f-ff9255a19530:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 25 Apr 2024 09:50:22 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| constructbrought.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuzuYmCOreVmEOykYxk%2F4x0z3jHhZjjATjZtld0YMg1V3VkzLVXU1V9%2FRkTsEF2ePgX9D5Jtmgu8juVXCRzoKHgJDxlIO5%2BB8o7FlmHBx9h3rv1fcVfPW9981hcUlcFPRi4xM1FFLStXbTbqx87jg3GtsiLQaNQcf%2F0m%2FdaOj%2Be12%2Fab%2Fd%2BIhHe2rNtR3bdmynsSk0j9VgbQpCZI%2B7TrNrN1tu02m3MND%2F701hwVALrH9JXoVgk%2BXn1lWIqEaaPNngZi9X2bsfJoWkudLos5NP071UlSmSRRlrC3F6MmdDmfPNZ1Dp8UwuVP9fYigmxPrlGcL0ZC4SYf9opjOU4ClC9hLKfg0uawhaI1L3Idg5ASKGWztIk4e3lC7p%2Fj8onaITsvziL4hyQpZ%2Fv4o0%2BWFdikHjrpJFLlRqMIgriEEN0auRFafIh0sQ5Smi%2FGsI9itZe7GNNDnaMVJBsIs3W63Qjj03WG15QXu11WGd1a5rx6tx3HXbbep02549M0iIGiKuIfkI1FxBYSwUwkIRWygyCwm7aESO4wQ2i6jd6UaRxwIe%2Bsx2aBA71LH9Dopo%2BocR8myESI4Q6QNk%2BgB7YgRd%2FAyzW8EwCyYn6LMKJScoDUFJCUpBUOYEZb86ZtK4pnrIpClCZ57defaqscp7h%2FRY5T2eElA9gmbVYXZJXpkaaK285WCPXzRs3%2FPafjds8yAMIs46QRDFtstanu97gePCiArCLIEaC0MxIddfX0Ymzl9LEdJTGHmKSFigxRugZQW6W2GYPqLDjEthmpFKwFSFLF9Gvm8dyktybTa%2FrZ0n4NHZzT%2B8WSDSFTJd4SvxnKAnH4zvqJIc3VGlIU93slwkYkins72b05xf%2Bf5jvl8qzbY2zOi796MpMC0f3%2BMm36YpE2nPkEfrgjGuN5WOOPlpy3zGw9uF2V0vdFpk27c%2F2NxKMs2NESqtQadr%2BqdGJCbk5Wv3Zmu78uMOhK6hiwpJcUbmAaFqRNkBTLbQbxSBlgtOmFkoi2qs3XBxKQWB5IuehhXMf%2FpwUY81nb6mojo0D9DTS6D5faRJhb6u0JcVqBzBFFfGeabPbv42lxHKpXEo9dJRKLX8dmbz9HgKIy4agefZ1O%2B2nSCgPAhbbif2HUap2%2FJd36cecjOJ37n%2Bxd8AAAD%2F%2FwEAAP%2F%2FoCrc15AEAAA%3D | 172.240.127.234 | 200 OK | 0 B |
URL GET HTTP/1.1constructbrought.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuzuYmCOreVmEOykYxk%2F4x0z3jHhZjjATjZtld0YMg1V3VkzLVXU1V9%2FRkTsEF2ePgX9D5Jtmgu8juVXCRzoKHgJDxlIO5%2BB8o7FlmHBx9h3rv1fcVfPW9981hcUlcFPRi4xM1FFLStXbTbqx87jg3GtsiLQaNQcf%2F0m%2FdaOj%2Be12%2Fab%2Fd%2BIhHe2rNtR3bdmynsSk0j9VgbQpCZI%2B7TrNrN1tu02m3MND%2F701hwVALrH9JXoVgk%2BXn1lWIqEaaPNngZi9X2bsfJoWkudLos5NP071UlSmSRRlrC3F6MmdDmfPNZ1Dp8UwuVP9fYigmxPrlGcL0ZC4SYf9opjOU4ClC9hLKfg0uawhaI1L3Idg5ASKGWztIk4e3lC7p%2Fj8onaITsvziL4hyQpZ%2Fv4o0%2BWFdikHjrpJFLlRqMIgriEEN0auRFafIh0sQ5Smi%2FGsI9itZe7GNNDnaMVJBsIs3W63Qjj03WG15QXu11WGd1a5rx6tx3HXbbep02549M0iIGiKuIfkI1FxBYSwUwkIRWygyCwm7aESO4wQ2i6jd6UaRxwIe%2Bsx2aBA71LH9Dopo%2BocR8myESI4Q6QNk%2BgB7YgRd%2FAyzW8EwCyYn6LMKJScoDUFJCUpBUOYEZb86ZtK4pnrIpClCZ57defaqscp7h%2FRY5T2eElA9gmbVYXZJXpkaaK285WCPXzRs3%2FPafjds8yAMIs46QRDFtstanu97gePCiArCLIEaC0MxIddfX0Ymzl9LEdJTGHmKSFigxRugZQW6W2GYPqLDjEthmpFKwFSFLF9Gvm8dyktybTa%2FrZ0n4NHZzT%2B8WSDSFTJd4SvxnKAnH4zvqJIc3VGlIU93slwkYkins72b05xf%2Bf5jvl8qzbY2zOi796MpMC0f3%2BMm36YpE2nPkEfrgjGuN5WOOPlpy3zGw9uF2V0vdFpk27c%2F2NxKMs2NESqtQadr%2BqdGJCbk5Wv3Zmu78uMOhK6hiwpJcUbmAaFqRNkBTLbQbxSBlgtOmFkoi2qs3XBxKQWB5IuehhXMf%2FpwUY81nb6mojo0D9DTS6D5faRJhb6u0JcVqBzBFFfGeabPbv42lxHKpXEo9dJRKLX8dmbz9HgKIy4agefZ1O%2B2nSCgPAhbbif2HUap2%2FJd36cecjOJ37n%2Bxd8AAAD%2F%2FwEAAP%2F%2FoCrc15AEAAA%3D IP172.240.127.234:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectconstructbrought.com Fingerprint53:AF:08:11:E0:E0:18:FA:8A:82:83:16:B7:C2:3D:C1:13:AC:4B:5C ValidityWed, 24 Apr 2024 15:05:23 GMT - Tue, 23 Jul 2024 15:05:22 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuzuYmCOreVmEOykYxk%2F4x0z3jHhZjjATjZtld0YMg1V3VkzLVXU1V9%2FRkTsEF2ePgX9D5Jtmgu8juVXCRzoKHgJDxlIO5%2BB8o7FlmHBx9h3rv1fcVfPW9981hcUlcFPRi4xM1FFLStXbTbqx87jg3GtsiLQaNQcf%2F0m%2FdaOj%2Be12%2Fab%2Fd%2BIhHe2rNtR3bdmynsSk0j9VgbQpCZI%2B7TrNrN1tu02m3MND%2F701hwVALrH9JXoVgk%2BXn1lWIqEaaPNngZi9X2bsfJoWkudLos5NP071UlSmSRRlrC3F6MmdDmfPNZ1Dp8UwuVP9fYigmxPrlGcL0ZC4SYf9opjOU4ClC9hLKfg0uawhaI1L3Idg5ASKGWztIk4e3lC7p%2Fj8onaITsvziL4hyQpZ%2Fv4o0%2BWFdikHjrpJFLlRqMIgriEEN0auRFafIh0sQ5Smi%2FGsI9itZe7GNNDnaMVJBsIs3W63Qjj03WG15QXu11WGd1a5rx6tx3HXbbep02549M0iIGiKuIfkI1FxBYSwUwkIRWygyCwm7aESO4wQ2i6jd6UaRxwIe%2Bsx2aBA71LH9Dopo%2BocR8myESI4Q6QNk%2BgB7YgRd%2FAyzW8EwCyYn6LMKJScoDUFJCUpBUOYEZb86ZtK4pnrIpClCZ57defaqscp7h%2FRY5T2eElA9gmbVYXZJXpkaaK285WCPXzRs3%2FPafjds8yAMIs46QRDFtstanu97gePCiArCLIEaC0MxIddfX0Ymzl9LEdJTGHmKSFigxRugZQW6W2GYPqLDjEthmpFKwFSFLF9Gvm8dyktybTa%2FrZ0n4NHZzT%2B8WSDSFTJd4SvxnKAnH4zvqJIc3VGlIU93slwkYkins72b05xf%2Bf5jvl8qzbY2zOi796MpMC0f3%2BMm36YpE2nPkEfrgjGuN5WOOPlpy3zGw9uF2V0vdFpk27c%2F2NxKMs2NESqtQadr%2BqdGJCbk5Wv3Zmu78uMOhK6hiwpJcUbmAaFqRNkBTLbQbxSBlgtOmFkoi2qs3XBxKQWB5IuehhXMf%2FpwUY81nb6mojo0D9DTS6D5faRJhb6u0JcVqBzBFFfGeabPbv42lxHKpXEo9dJRKLX8dmbz9HgKIy4agefZ1O%2B2nSCgPAhbbif2HUap2%2FJd36cecjOJ37n%2Bxd8AAAD%2F%2FwEAAP%2F%2FoCrc15AEAAA%3D HTTP/1.1
Host: constructbrought.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Cookie: u_pl=19408177; uid_id2=44b0f327-4375-48d8-920f-ff9255a19530:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 25 Apr 2024 09:50:21 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 20bd00ea72ab8ac59b5525e4c0d73610
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/1/css/style.css | 188.114.96.1 | 200 OK | 4.6 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/chat/mob/ssp/1/css/style.css IP188.114.96.1:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeASCII text, with very long lines (4886), with no line terminators Hash1230b98f01a549572edcd2bf3bdcb4ad ac87a2a752ffb8b5167566183fddd531d7971be9 9a2954fc66ebbb9adf18c2ea4403d2a0a5dedf2928f9905e1fc656f5dc1b208d
GET /sb/chat/mob/ssp/1/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nexu.playurbano.com
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 09:50:21 GMT
content-type: text/css
last-modified: Mon, 21 Feb 2022 08:25:04 GMT
etag: W/"62134c60-1209"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A%2Fxud1QflnIqoHCeS3IWaxgXKLt3%2B938IX5PyeQvM0FiYnJ2YgEegxhAx%2Bj7cmDPA226XZ6H2ZvVwvjYC%2BsIGOYxJRab4VonMUmYKa3XlEkUU463tA5rwnYFbyIRQrNjEqhwR3aHJzBk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d6da6bb96568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| quantcast.mgr.consensu.org/cmp.js | 0.0.0.0 | | 0 B |
URL GET quantcast.mgr.consensu.org/cmp.js IP0.0.0.0:0
Requested byhttps://nexu.playurbano.com/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cmp.js HTTP/1.1
Host: quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.playurbano.com/wp-admin/admin-ajax.php | 188.114.96.1 | 200 OK | 0 B |
URL POST HTTP/3www.playurbano.com/wp-admin/admin-ajax.php IP188.114.96.1:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectplayurbano.com FingerprintCD:AE:9E:CA:48:75:44:24:71:E4:A3:FA:7D:D2:A5:3E:5F:2D:9B:56 ValidityWed, 24 Apr 2024 18:53:10 GMT - Tue, 23 Jul 2024 18:53:09 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: www.playurbano.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 34
Origin: https://nexu.playurbano.com
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 09:50:20 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
x-robots-tag: noindex
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-litespeed-cache-control: no-cache
cache-control: no-cache, no-store, must-revalidate, max-age=0
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PG9heIU4dZcQGDrpR6LT4ywpFcKQp3OimEKaCJPDRdkVs%2BPbk5Ca%2Fbo76GCKw3CEaCZYltwVVkphhxylnggQLQ2wU6OFjl1bmctZn8g7YXY7fP1xC85WFQ%2FkEc0OcC1qYcU9wB0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879d6d9f7b81b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap | 142.250.74.74 | 200 OK | 7.0 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap IP142.250.74.74:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeASCII text, with very long lines (7193), with no line terminators Hash16b49a99486594c0b42d9bd7821deb2c 2fb46e5e86d6b37d4497cc04bfd89b3cb33a276a 3f3540952441e06ef81189cf63d46bac242804e386779dbb0cdd78ed10025c21
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 25 Apr 2024 09:50:21 GMT
date: Thu, 25 Apr 2024 09:50:21 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| copyrightcontent.org/unblocker/ub/ub.js?ai=660f44adb53d4403148c09e5&pp=aHR0cHM6Ly9uZXh1LnBsYXl1cmJhbm8uY29tLw==&unblockerPaymentToken= | 104.18.26.177 | 403 Forbidden | 0 B |
URL GET HTTP/2copyrightcontent.org/unblocker/ub/ub.js?ai=660f44adb53d4403148c09e5&pp=aHR0cHM6Ly9uZXh1LnBsYXl1cmJhbm8uY29tLw==&unblockerPaymentToken= IP104.18.26.177:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectcopyrightcontent.org Fingerprint29:E2:32:98:4C:68:6C:DA:2C:8D:FD:B1:F4:F1:00:17:15:1B:76:50 ValiditySun, 07 Apr 2024 03:24:31 GMT - Sat, 06 Jul 2024 03:24:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /unblocker/ub/ub.js?ai=660f44adb53d4403148c09e5&pp=aHR0cHM6Ly9uZXh1LnBsYXl1cmJhbm8uY29tLw==&unblockerPaymentToken= HTTP/1.1
Host: copyrightcontent.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Thu, 25 Apr 2024 09:50:20 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: max-age=15
expires: Thu, 25 Apr 2024 09:50:35 GMT
set-cookie: __cf_bm=ozZtu4dm2PYL6OiGyTDS6CdW9zRCZ4MhVPPlNEHSAwQ-1714038620-1.0.1.1-28EOFHJKySEhO.mVKf31BJvb4oMb1rZhd.YABxc0zz8BRc8KxH07WIMzoaWcNXiIUwUHjV_MN0.Judfx7HCX3Q; path=/; expires=Thu, 25-Apr-24 10:20:20 GMT; domain=.copyrightcontent.org; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d6d9fb8ba1c12-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/1/img/close.png | 188.114.96.1 | 200 OK | 6.0 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/chat/mob/ssp/1/img/close.png IP188.114.96.1:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typePNG image data, 522 x 391, 8-bit/color RGBA, non-interlaced Hashc489ce2c491a22ee37a55e26a92dfd73 2fa588ab09e94dd902e5bd24b48f98ad1949c9d6 1eed147c7d5de6291c25fbc5274830c12d5549262fb144271576d4e15966e5bd
GET /sb/chat/mob/ssp/1/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 09:50:21 GMT
content-type: image/png
content-length: 5982
last-modified: Mon, 21 Feb 2022 08:25:06 GMT
etag: "62134c62-175e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 6118625
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=33H53NZXv1VckeC4UNtBUt06vfU3FWKI0JqPBCHKS8W%2Ft0xKx8kZOk1V6pxBnG4w808d16gs%2BBON8OeAIxFevJIXUEsPr0lX4z7Z1YxuewtCO5EUJbD6rHEajyoa0TRMejzYyHjrFudL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d6da6ebb5568e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.barscreative1.com/sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html | 45.133.44.3 | 200 OK | 3.0 kB |
URL GET HTTP/2cdn.barscreative1.com/sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html IP45.133.44.3:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectcdn.barscreative1.com FingerprintF6:54:F4:B9:EB:AD:1E:FA:8F:76:B9:75:20:9B:41:57:32:37:94:E3 ValiditySun, 10 Mar 2024 03:01:32 GMT - Sat, 08 Jun 2024 03:01:31 GMT
File typeHTML document, ASCII text, with very long lines (3229), with no line terminators Hash0b579b1f5697d55d3bc0856975d08243 e68a8e8bc08f86086744aba736df40ca7bea6d01 8ac4909eb5c0efc3278c66a43990535925fb271226f96261415df027fe40cb0c
GET /sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nexu.playurbano.com
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 09:50:21 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Tue, 29 Mar 2022 08:27:42 GMT
etag: W/"6242c2fe-ba1"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Thu, 25 Apr 2024 10:50:21 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| live.demand.supply/up.js | 104.17.38.115 | 200 OK | 5.5 kB |
IP104.17.38.115:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (5703), with no line terminators Hashc83324bd8ce21c1b233effb043ee6150 4fd86e9928190f0f02928ee9b1466e85b0f597c4 ba27407a2850965394c66767dd36e2740c9cd76e8403e2057277575c8d37944b
GET /up.js HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 09:50:19 GMT
content-type: application/javascript; charset=UTF-8
cf-ray: 879d6d9a1b35b51d-OSL
cf-cache-status: HIT
age: 334
cache-control: max-age=1200,must-revalidate,stale-while-revalidate=3600
etag: W/"07eb91b0af55246475ad8048f6afc011-ssl-df"
link: <https://live.demand.supply/impl.v17.31.0.js>; rel=preload; as=script,<https://live.demand.supply/p4/v17-24-0/bmV4dS5wbGF5dXJiYW5vLmNvbS8=>; rel=preload; as=script
strict-transport-security: max-age=31536000
vary: Accept-Encoding
cache-status: "Netlify Edge"; fwd=stale
cf-bgj: minify
cf-polished: origSize=5343
timing-allow-origin: *
x-nf-request-id: 01HVM20DBXTMMP42H77AP1WWQ5
set-cookie: __cf_bm=CQZpD4CauhptdW1ndQZQxs_5._50nmq5GuRSFUcO9S4-1714038619-1.0.1.1-X4sim.KQBJQPSOeUiHvIxPrQlul41R.oTy8Of2gvq3tGAUyJ4gPcxbaX0hfGvNR2XHj6Ue6vx7fvEY39Gicb6Q; path=/; expires=Thu, 25-Apr-24 10:20:19 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| live.demand.supply/ds.2.html | 104.17.38.115 | 200 OK | 413 B |
URL GET HTTP/3live.demand.supply/ds.2.html IP104.17.38.115:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (430), with no line terminators Hash68dce237203af5e16657b39e1f2e7b46 8084ece9e2500c1a0731aaf8f33290744b174b9c 8534d0076676e85517a298ded722e84bb64abf655fbc565588f76a7e26ad4680
GET /ds.2.html HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nexu.playurbano.com
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 09:50:19 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=2592000,immutable,stale-if-error=604800
cache-status: "Netlify Edge"; hit
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-nf-request-id: 01HV9PY3ER0ZN2ZB6WEA673R0F
cf-cache-status: HIT
set-cookie: __cf_bm=O.GNCjknoOUt2uUTYCk0P2a7lKXiW6WNWeDAzrmGbys-1714038619-1.0.1.1-UMo8O8nsh9YRpt1WOKXHnoF.4TN6b59g09r7d4w_kp1bONKr93jVGeSiIyrK3RBkBopBTRhtRLeb9v56K3R_gA; path=/; expires=Thu, 25-Apr-24 10:20:19 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d6d9c1d40b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| live.demand.supply/cp/playurbano.com_auto_728x90_sticky_display_bottom?mlcu=dc509277-f6cf-4fa5-a09f-ad37bfd0366a&mlos=li&mlbr=fi&mlla=en&dsReferer=bmV4dS5wbGF5dXJiYW5vLmNvbS8= | 104.17.38.115 | 200 OK | 21 B |
URL GET HTTP/3live.demand.supply/cp/playurbano.com_auto_728x90_sticky_display_bottom?mlcu=dc509277-f6cf-4fa5-a09f-ad37bfd0366a&mlos=li&mlbr=fi&mlla=en&dsReferer=bmV4dS5wbGF5dXJiYW5vLmNvbS8= IP104.17.38.115:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashb5ba67e581bc39edc7bfd644febc4cd6 d58a43d8abdb05d9c3bfa924a254b917719076fc 851b81e18ee3f1f208f67d5625d3954d8ffd1718b861b7426a26284f4ace9bdb
GET /cp/playurbano.com_auto_728x90_sticky_display_bottom?mlcu=dc509277-f6cf-4fa5-a09f-ad37bfd0366a&mlos=li&mlbr=fi&mlla=en&dsReferer=bmV4dS5wbGF5dXJiYW5vLmNvbS8= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nexu.playurbano.com
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 09:50:20 GMT
content-type: text/plain;charset=UTF-8
content-length: 21
access-control-allow-origin: *
cache-control: private,max-age=3600
set-cookie: __cf_bm=IvZ3bTIqdYtUsnW.s9XzN.im9SqgOT74UWRr4VtHBNo-1714038620-1.0.1.1-05uMI5MBgrgt0sG4ymCfX33D2z4VII9ow8gL711V5sjSKSJbyyns.hWkj9oYkKMVa.6lqvmFX1d1JBHz2DpFmw; path=/; expires=Thu, 25-Apr-24 10:20:20 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d6d9e2a38b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| live.demand.supply/cp/playurbano.com_auto_728x90_sticky_display_bottom?mlcu=dc509277-f6cf-4fa5-a09f-ad37bfd0366a&mlos=li&mlbr=fi&mlla=en&dsReferer=bmV4dS5wbGF5dXJiYW5vLmNvbS8= | 104.17.38.115 | 200 OK | 21 B |
URL GET HTTP/3live.demand.supply/cp/playurbano.com_auto_728x90_sticky_display_bottom?mlcu=dc509277-f6cf-4fa5-a09f-ad37bfd0366a&mlos=li&mlbr=fi&mlla=en&dsReferer=bmV4dS5wbGF5dXJiYW5vLmNvbS8= IP104.17.38.115:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashb5ba67e581bc39edc7bfd644febc4cd6 d58a43d8abdb05d9c3bfa924a254b917719076fc 851b81e18ee3f1f208f67d5625d3954d8ffd1718b861b7426a26284f4ace9bdb
GET /cp/playurbano.com_auto_728x90_sticky_display_bottom?mlcu=dc509277-f6cf-4fa5-a09f-ad37bfd0366a&mlos=li&mlbr=fi&mlla=en&dsReferer=bmV4dS5wbGF5dXJiYW5vLmNvbS8= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nexu.playurbano.com
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 09:50:20 GMT
content-type: text/plain;charset=UTF-8
content-length: 21
access-control-allow-origin: *
cache-control: private,max-age=3600
set-cookie: __cf_bm=kGA3twt3JefenINBzRfIg9yVaDb1zx.frdRKMGiURw4-1714038620-1.0.1.1-55yBgKkKItdLiHHexbddIm8pxb.MnZC1rBY_DS16g1Vp_TlJfrgPg3P1g3bR4xgflkg6KCJhK6ySH_AAUzE7fQ; path=/; expires=Thu, 25-Apr-24 10:20:20 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d6da08ce7b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/1/css/animate.css | 188.114.96.1 | 200 OK | 79 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/chat/mob/ssp/1/css/animate.css IP188.114.96.1:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
Hashfc638645a938f69e69360c75335ffd1a 143132fb8361c3ad0acf88cb70bf0b07c0ecc2d4 7ef76aab275d0221c68602d18f81b4285b280756f0f71d535ed8b5b889bc2f90
GET /sb/chat/mob/ssp/1/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nexu.playurbano.com
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 09:50:21 GMT
content-type: text/css
last-modified: Mon, 21 Feb 2022 08:25:04 GMT
etag: W/"62134c60-135d1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7xc8odt6RJJBC1A8ZHeo275TPd%2FBUVPfo38LH%2BQvBaeC6LFUTpnIGgZ%2BM8v0PaGOi19Q%2Fzya2gNnM1uzUMhvB70Qkz1oN9vh1cTTm0c5cMO6QfJb5W3wSpxIuCJEV2OtMZzvfpV%2BY1mE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d6da6bb90568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.playurbano.com/wp-content/plugins/a3-lazy-load/assets/css/jquery.lazyloadxt.spinner.css?ver=6.5.2 | 188.114.96.1 | 200 OK | 276 B |
URL GET HTTP/2www.playurbano.com/wp-content/plugins/a3-lazy-load/assets/css/jquery.lazyloadxt.spinner.css?ver=6.5.2 IP188.114.96.1:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectplayurbano.com FingerprintCD:AE:9E:CA:48:75:44:24:71:E4:A3:FA:7D:D2:A5:3E:5F:2D:9B:56 ValidityWed, 24 Apr 2024 18:53:10 GMT - Tue, 23 Jul 2024 18:53:09 GMT
File typeASCII text, with no line terminators Hash4f3b7d52ca6ad3ce850aaef4cb7ce87c 4aae0892ba85f4a12a324bdae4cd3a79dceed680 e9e19b61ee5df173000dee8bb0e9d16821472745870f229d2b01770d0f2b6484
GET /wp-content/plugins/a3-lazy-load/assets/css/jquery.lazyloadxt.spinner.css?ver=6.5.2 HTTP/1.1
Host: www.playurbano.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 09:50:19 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=311
cache-control: public, max-age=31536000
expires: Sat, 18 May 2024 08:47:47 GMT
last-modified: Wed, 07 Feb 2024 05:05:35 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 608552
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qXW9HNPgknulCYfLHchla70z94oaZm5mf8Pui3xP1mgHqDZC22hysh58PrU9F3s2PYe6r%2BEHVx%2Bf3eIO2QOMVjYca74yPcgVODvuw6eONWkY7g3ZlUlBjF6R2IizDFNaW6lXl1I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879d6d9a08dcb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/jquery.min.js | 188.114.96.1 | 200 OK | 90 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/jquery.min.js IP188.114.96.1:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hash561acb3e541133bbdd2c0c19f8ee35a1 ffd1353cf3f77d25f801c84d8208613eb0d3d548 9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc
GET /sb/chat/mob/ssp/1/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 09:50:21 GMT
content-type: application/javascript
last-modified: Mon, 21 Feb 2022 08:25:09 GMT
etag: W/"62134c65-15d94"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 4849277
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2s1r9ASXDkLWOssmGQsnut6rH2nBfi6Gf1r0QeNC%2FJcDswx6JkQFuzNubs8EDZrj3doCQ80iqyw2ug4oN137nvUpbH3W2SqGod3SVUgzewOKlAxPHTSTMsiLaNsRMhPikcteehVijJdd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d6da6ebbc568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.playurbano.com/wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.extend.js?ver=2.7.2 | 188.114.96.1 | 200 OK | 953 B |
URL GET HTTP/2www.playurbano.com/wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.extend.js?ver=2.7.2 IP188.114.96.1:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectplayurbano.com FingerprintCD:AE:9E:CA:48:75:44:24:71:E4:A3:FA:7D:D2:A5:3E:5F:2D:9B:56 ValidityWed, 24 Apr 2024 18:53:10 GMT - Tue, 23 Jul 2024 18:53:09 GMT
File typeJavaScript source, ASCII text, with very long lines (954), with no line terminators Hash5f8acd177611bf552cd7c013e3c5438a 7a2e4d6938a916cb00b5fc65516eaabfcf14f5ad ad4ef456c763bd0bd66b54869f9c7c9a35e968f0149606c4575cd8f633d8efea
GET /wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.extend.js?ver=2.7.2 HTTP/1.1
Host: www.playurbano.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 09:50:19 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1045
cache-control: public, max-age=31536000
expires: Thu, 02 May 2024 17:32:03 GMT
last-modified: Wed, 07 Feb 2024 05:05:35 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1959495
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=52Eg5IzrNzrRgR5%2FpERdyiTZGvvkSXTaI6TZP6tNqAJvjjHfQlJgVa71czZanDpr2DRj6eBNcLgh6rZRhgwFP4glD2Gb2d2nKRg9Fm5HXaaNl2%2FKI0K4VOGe78CAHucb%2BVxdBRk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879d6d9a08c5b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 | 104.18.11.207 | 200 OK | 67 kB |
URL GET HTTP/2maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 IP104.18.11.207:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 66624, version 4.262 Hashdb812d8a70a4e88e888744c1c9a27e89 638c652d623280a58144f93e7b552c66d1667a11 ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995
GET /font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nexu.playurbano.com
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 09:50:20 GMT
content-type: font/woff2
content-length: 66624
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "db812d8a70a4e88e888744c1c9a27e89"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 10/31/2023 18:48:08
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 418d0a2b10a29792162f0203dc421399
cdn-cache: HIT
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 879d6d9f69660b59-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.playurbano.com/wp-content/uploads/sass/a3_lazy_load.min.css?ver=1509416944 | 188.114.96.1 | 200 OK | 127 B |
URL GET HTTP/2www.playurbano.com/wp-content/uploads/sass/a3_lazy_load.min.css?ver=1509416944 IP188.114.96.1:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectplayurbano.com FingerprintCD:AE:9E:CA:48:75:44:24:71:E4:A3:FA:7D:D2:A5:3E:5F:2D:9B:56 ValidityWed, 24 Apr 2024 18:53:10 GMT - Tue, 23 Jul 2024 18:53:09 GMT
File typeASCII text, with no line terminators Hashc27b42550dfbec022904e63b23ede660 b007b7f59147d49fd46e2d3aa1b77a71129e1f34 a2f1b190e5d5a3063c35b75b1a00c039b13e171eb7b099299dcb67e9e4fe65cd
GET /wp-content/uploads/sass/a3_lazy_load.min.css?ver=1509416944 HTTP/1.1
Host: www.playurbano.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 09:50:19 GMT
content-type: text/css
cache-control: public, max-age=31536000
expires: Thu, 02 May 2024 17:32:03 GMT
last-modified: Tue, 31 Oct 2017 02:29:04 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1959495
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BPEZwnM6KtFk%2Beid5Jf9EMvBIMPXduhimOVHXlZmyv2zZYzafiHnrIn5nfPYflS0wtXQxuyEFofm6HIenGnNjQnMFHa4P1fEAowiVfs%2F3fAFm4oLAY%2BnvpLEoAwqVBdJVzWFZkc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d6d9a18edb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.playurbano.com/dectector.js | 188.114.96.1 | 200 OK | 5.3 kB |
URL GET HTTP/2www.playurbano.com/dectector.js IP188.114.96.1:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectplayurbano.com FingerprintCD:AE:9E:CA:48:75:44:24:71:E4:A3:FA:7D:D2:A5:3E:5F:2D:9B:56 ValidityWed, 24 Apr 2024 18:53:10 GMT - Tue, 23 Jul 2024 18:53:09 GMT
File typeJavaScript source, ASCII text, with very long lines (5593), with no line terminators Hashcd4a68ee8a244502148b969527d9fbcc 0933956febcb9288958a0da54d08ac26a9f8df1c d43c28aa8a2f591f7e8c23a85042a77c93e7b46a1d237bf969d675184248b81c
GET /dectector.js HTTP/1.1
Host: www.playurbano.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 09:50:19 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5831
cache-control: public, max-age=31536000
expires: Fri, 24 May 2024 09:07:39 GMT
last-modified: Thu, 08 Sep 2022 23:22:46 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 88959
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M2IwFCeDb%2BJIUwkdoEepp3GykXKnV2DBzcYwnbtp2%2FmnGULzOs%2BZ%2BLc5BE4IRmZZttH6ctMk6Ai5eq%2BO00C5po5SCZ2XiYmplRwGAlavNYwZy3hgOpm2AaXfGSRkNkJ92LDuf8U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879d6d9a08cbb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.cloudimagesb.com/si/52/3a/8c/523a8ce104cfc3373cd17ab1c0e5131b/1701651901.png | 45.133.44.10 | 200 OK | 14 kB |
URL GET HTTP/2cdn.cloudimagesb.com/si/52/3a/8c/523a8ce104cfc3373cd17ab1c0e5131b/1701651901.png IP45.133.44.10:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash962ac416cce3fad636d4904386c8d3d4 811166fceb971353dc6a9ea3a153367f20b47592 ec6c8e1c030499a846897265d0c1f66dedc6ece17c1ea6006b700faf37e73555
GET /si/52/3a/8c/523a8ce104cfc3373cd17ab1c0e5131b/1701651901.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 09:50:21 GMT
content-type: image/png
content-length: 14496
server: nginx/1.21.6
last-modified: Mon, 04 Dec 2023 01:05:10 GMT
etag: "656d25c6-38a0"
expires: Sat, 27 Apr 2024 09:50:21 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| live.demand.supply/impl.v17.31.0.js | 104.17.38.115 | 200 OK | 90 kB |
URL GET HTTP/3live.demand.supply/impl.v17.31.0.js IP104.17.38.115:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerCloudflare, Inc. Subjectdemand.supply Fingerprint9D:70:F3:B0:56:FD:8A:02:18:FB:C1:32:C8:85:90:FF:98:3A:52:8E ValiditySat, 20 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (23934) Hashc94ffdc1be05cae52d5a7612ed64327d 5e20ffb0324f09f9debef02f65daa24beac0ba71 326d5117ba3f478610efab050524377c76af6ffd3fd2e8d079f894fdc3c0f073
GET /impl.v17.31.0.js HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Cookie: __cf_bm=CQZpD4CauhptdW1ndQZQxs_5._50nmq5GuRSFUcO9S4-1714038619-1.0.1.1-X4sim.KQBJQPSOeUiHvIxPrQlul41R.oTy8Of2gvq3tGAUyJ4gPcxbaX0hfGvNR2XHj6Ue6vx7fvEY39Gicb6Q
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 09:50:19 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=2592000,immutable,stale-if-error=604800
cf-bgj: minify
cf-polished: origSize=90413
access-control-allow-origin: *
cache-status: "Netlify Edge"; fwd=miss
etag: W/"27b45d515425df96837a3ffc3e127ebc-ssl-df"
strict-transport-security: max-age=31536000
timing-allow-origin: *
vary: Accept-Encoding
x-nf-request-id: 01HVM205WKC5Z62XXQWTZT6NHF
cf-cache-status: HIT
age: 747217
server: cloudflare
cf-ray: 879d6d9c0d3db51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.playurbano.com/wp-content/uploads/2024/04/Dei-V-Martini-150x150.png | 188.114.96.1 | 200 OK | 39 kB |
URL GET HTTP/3www.playurbano.com/wp-content/uploads/2024/04/Dei-V-Martini-150x150.png IP188.114.96.1:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerLet's Encrypt Subjectplayurbano.com FingerprintCD:AE:9E:CA:48:75:44:24:71:E4:A3:FA:7D:D2:A5:3E:5F:2D:9B:56 ValidityWed, 24 Apr 2024 18:53:10 GMT - Tue, 23 Jul 2024 18:53:09 GMT
File typePNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced Hash27d3f5b9209ea9755b95f2a21d4d1c99 8ca1a0e3a99e679589549136ca08988828b934b2 094b01f010f636c888521d766fe6617c8bd3242194ff3ec4e30897105a315c2d
GET /wp-content/uploads/2024/04/Dei-V-Martini-150x150.png HTTP/1.1
Host: www.playurbano.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Cookie: _ga_SQFXB0YJTT=GS1.1.1714038619.1.0.1714038619.0.0.0; _ga=GA1.1.1647606046.1714038619
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 09:50:20 GMT
content-type: image/png
content-length: 39317
cache-control: public, max-age=31536000
expires: Sat, 25 May 2024 09:50:19 GMT
last-modified: Thu, 25 Apr 2024 09:49:54 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ehQlPgek5H6LaJAUjU7gwXc833oOYtomDIFPET%2FOE78GIxNv9TuGFl9x5EohShLi9XRQsFNnnZq%2FBbkEaaKiV0BWmQ0yMcxLcSU0xHdlKCCNKpj5g%2BOUitgVrkHYYxRy%2BKU3ILU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d6da07cdcb509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| | 104.21.16.77 | 200 OK | 242 kB |
URL User Request GET HTTP/2IP104.21.16.77:443
CertificateIssuerLet's Encrypt Subjectplayurbano.com FingerprintCD:AE:9E:CA:48:75:44:24:71:E4:A3:FA:7D:D2:A5:3E:5F:2D:9B:56 ValidityWed, 24 Apr 2024 18:53:10 GMT - Tue, 23 Jul 2024 18:53:09 GMT
Size242 kB (242250 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: nexu.playurbano.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 09:50:18 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
x-litespeed-cache-control: public,max-age=604800
x-litespeed-tag: f31_HTTP.200,f31_home,f31_URL.6666cd76f96956469e7be39d750cc7d9,f31_F,f31_
x-litespeed-cache: miss
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2qaHkrPdONGyzVjLuMvc%2F2hcbEgoAVtAs6Bc1Td%2FBaxEwGj1iGHArgRHPAdWke%2BZujVd0%2BsA2ZiaEHdCtWuKiFXcAfp2mQl9CUqif5B2KgUElm9f4jhRqeb42iGoB5s7rN9uvMeh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879d6d912fec5694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/script.js | 188.114.96.1 | 200 OK | 382 B |
URL GET HTTP/2cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/script.js IP188.114.96.1:443
Requested byhttps://nexu.playurbano.com/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeASCII text, with very long lines (411), with no line terminators Hash9ffae600059bf4e6adb35ebb274ae385 6130e466c04551baa2a5d650e6bd5a87daba73a7 a7d15e051fb3d3c31494683306bb7752478354894825b110d26d333cbeaaeb39
GET /sb/chat/mob/ssp/1/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nexu.playurbano.com
DNT: 1
Connection: keep-alive
Referer: https://nexu.playurbano.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 09:50:21 GMT
content-type: application/javascript
last-modified: Mon, 21 Feb 2022 08:25:08 GMT
etag: W/"62134c64-17e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wzYBz8oH%2FKmX%2FWPsvLns4J%2BM%2Fc%2FQGuKKiWVSGjj6jNbktpZN13r5uG0QIjlSRpTYzpCACwVYrdBUlaFGP6RvznYOZD1Th0IE6OrGvYlVNYwdTPbPCJbMGMkM2ZQnc5zRj8ZS2BshICIr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879d6da85d97568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
0.0.0.0