GET blockadsnot.com/ocxldyygdhavuhirbfz?yOGljhvF=BQOCAAAAAAAACZUAAmy0rq1MsIHB_3hztQT0PFP-HrctDAO80wWP9aNaSoLCCzxIJ4rpk8P6_Vc9Bx0MEKjTrSCbYVQgUICzGtOrbncxg4mGPSki3tBr-gmbh-0LkWDQTomFChVYGrvk0LLDf8EbWS5rhbS2m6cqMUwq8sG4V9XHY6BpqYtdkGQZ4lNPkNkXBMxAiOQMXm_vRYXdvj3THuujYcaqAc1VVN6Mp0RXhe8n-OmIYPcd1cKUMnQ4bIlkNn4BY5ow4PAXN2I5hSh3mYIE7EA4Thhl5Ogt70NTuupqfY0Z9ZA1fehAxA0RXS1zFSZZpkFDYQbHriVqQWCmGqsZqe5ER168BilLgo-c_eSqW5vNuixbjDV_EmgOp-15JgmHwfbmRKbH5Lv25Flxu_sCZ9F2_i5MTU6BjvLqyqmqgOn0h7Gf7SAQO_dxvLa9Fqp-nNHhooyhhdERW18av6EIWyToIcQsYq2MPxLQS4ift_kAnjl9Se4OETJdqdvk_6DpSQQNRLSdIkh6XPeae8wGgA6IocUnV4G1loy8LbkMNE9VUqIGvS9TlFbuXU0blb034EIdWxlbm2MG2zsrRrhYKRztG-oko5kH5v8CrG1Op1OD-RGL1eINBz1r6e2Gco_LQjflHuZdt9Eyd5xPkY3VwDlscQ-4Pd9hh9ufLMLsOls5-NWnp8AseZ7YkIhmzlbADIYmjPBsci2DZ9TG6o_dQnZS48ML8nd4OYL03IS3qmYMV9ds2j0iuE6tlC2L4Qx_-ZqLLgiE9OJzi4vdPg77KKOD-Y2vYewkcFxYyZQNPQ6kNjTZZxZkANReda_i5gOv9EjFfyRG4KlphEiOc6_3nIBxFrCNRv53CFSF38OYD2aHtdyaNjjUc6wLd8CXnGTlUhoz2FKXMFl1j4VMntz-BT-difd9zhHoQKQ98XH7BWikJe-SQe6Mi0YhpCx7Ym_EbMwlhXXWe4Rol3uWFM0BqGAhj9BHn8KtqL9bAA2FD1VUDGqPiAxrHQnuKhHNHJhGFr_lqu8uCiENKh8lFC-g6m5K1mozpGQNipXRuXwfnitmVX7kwyTJNK44ysc_ysk0dGF_B3r4Hkpc5dMa2Fp6sqW5XwU_MW-ZnaoM4xnXlx0nYFZPdlyTOwyaVLMMXqII-3KgFJa2UNSEQmKyg_ygzbc17ACMBYrwTLnoxdqiu2DY70lCJQYg0Zyi&IbQDRzpA=4&OAPGIsVi=4091021&VZNCTJvk=&PxgKqGoe=0,0&GmCJFWjy=&zFHgRwlK=&s=1280,1024,1,1280,1024,0
208.95.112.254200 OK 44 B URL GET blockadsnot.com/ocxldyygdhavuhirbfz?yOGljhvF=BQOCAAAAAAAACZUAAmy0rq1MsIHB_3hztQT0PFP-HrctDAO80wWP9aNaSoLCCzxIJ4rpk8P6_Vc9Bx0MEKjTrSCbYVQgUICzGtOrbncxg4mGPSki3tBr-gmbh-0LkWDQTomFChVYGrvk0LLDf8EbWS5rhbS2m6cqMUwq8sG4V9XHY6BpqYtdkGQZ4lNPkNkXBMxAiOQMXm_vRYXdvj3THuujYcaqAc1VVN6Mp0RXhe8n-OmIYPcd1cKUMnQ4bIlkNn4BY5ow4PAXN2I5hSh3mYIE7EA4Thhl5Ogt70NTuupqfY0Z9ZA1fehAxA0RXS1zFSZZpkFDYQbHriVqQWCmGqsZqe5ER168BilLgo-c_eSqW5vNuixbjDV_EmgOp-15JgmHwfbmRKbH5Lv25Flxu_sCZ9F2_i5MTU6BjvLqyqmqgOn0h7Gf7SAQO_dxvLa9Fqp-nNHhooyhhdERW18av6EIWyToIcQsYq2MPxLQS4ift_kAnjl9Se4OETJdqdvk_6DpSQQNRLSdIkh6XPeae8wGgA6IocUnV4G1loy8LbkMNE9VUqIGvS9TlFbuXU0blb034EIdWxlbm2MG2zsrRrhYKRztG-oko5kH5v8CrG1Op1OD-RGL1eINBz1r6e2Gco_LQjflHuZdt9Eyd5xPkY3VwDlscQ-4Pd9hh9ufLMLsOls5-NWnp8AseZ7YkIhmzlbADIYmjPBsci2DZ9TG6o_dQnZS48ML8nd4OYL03IS3qmYMV9ds2j0iuE6tlC2L4Qx_-ZqLLgiE9OJzi4vdPg77KKOD-Y2vYewkcFxYyZQNPQ6kNjTZZxZkANReda_i5gOv9EjFfyRG4KlphEiOc6_3nIBxFrCNRv53CFSF38OYD2aHtdyaNjjUc6wLd8CXnGTlUhoz2FKXMFl1j4VMntz-BT-difd9zhHoQKQ98XH7BWikJe-SQe6Mi0YhpCx7Ym_EbMwlhXXWe4Rol3uWFM0BqGAhj9BHn8KtqL9bAA2FD1VUDGqPiAxrHQnuKhHNHJhGFr_lqu8uCiENKh8lFC-g6m5K1mozpGQNipXRuXwfnitmVX7kwyTJNK44ysc_ysk0dGF_B3r4Hkpc5dMa2Fp6sqW5XwU_MW-ZnaoM4xnXlx0nYFZPdlyTOwyaVLMMXqII-3KgFJa2UNSEQmKyg_ygzbc17ACMBYrwTLnoxdqiu2DY70lCJQYg0Zyi&IbQDRzpA=4&OAPGIsVi=4091021&VZNCTJvk=&PxgKqGoe=0,0&GmCJFWjy=&zFHgRwlK=&s=1280,1024,1,1280,1024,0
IP 208.95.112.254:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerSectigo Limited
Subjectblockadsnot.com
Fingerprint1E:C1:DD:D3:65:DB:48:42:4B:E9:38:9C:2B:C9:89:AD:03:15:09:01
ValidityFri, 04 Apr 2025 00:00:00 GMT - Tue, 05 May 2026 23:59:59 GMT
File type ASCII text, with no line terminators
Hash d5f0a25e4d3522d56d48ce7bc3e518fb
86794caff58f7fee6e684c2ba7195f970a8d6f4c
9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /ocxldyygdhavuhirbfz?yOGljhvF=BQOCAAAAAAAACZUAAmy0rq1MsIHB_3hztQT0PFP-HrctDAO80wWP9aNaSoLCCzxIJ4rpk8P6_Vc9Bx0MEKjTrSCbYVQgUICzGtOrbncxg4mGPSki3tBr-gmbh-0LkWDQTomFChVYGrvk0LLDf8EbWS5rhbS2m6cqMUwq8sG4V9XHY6BpqYtdkGQZ4lNPkNkXBMxAiOQMXm_vRYXdvj3THuujYcaqAc1VVN6Mp0RXhe8n-OmIYPcd1cKUMnQ4bIlkNn4BY5ow4PAXN2I5hSh3mYIE7EA4Thhl5Ogt70NTuupqfY0Z9ZA1fehAxA0RXS1zFSZZpkFDYQbHriVqQWCmGqsZqe5ER168BilLgo-c_eSqW5vNuixbjDV_EmgOp-15JgmHwfbmRKbH5Lv25Flxu_sCZ9F2_i5MTU6BjvLqyqmqgOn0h7Gf7SAQO_dxvLa9Fqp-nNHhooyhhdERW18av6EIWyToIcQsYq2MPxLQS4ift_kAnjl9Se4OETJdqdvk_6DpSQQNRLSdIkh6XPeae8wGgA6IocUnV4G1loy8LbkMNE9VUqIGvS9TlFbuXU0blb034EIdWxlbm2MG2zsrRrhYKRztG-oko5kH5v8CrG1Op1OD-RGL1eINBz1r6e2Gco_LQjflHuZdt9Eyd5xPkY3VwDlscQ-4Pd9hh9ufLMLsOls5-NWnp8AseZ7YkIhmzlbADIYmjPBsci2DZ9TG6o_dQnZS48ML8nd4OYL03IS3qmYMV9ds2j0iuE6tlC2L4Qx_-ZqLLgiE9OJzi4vdPg77KKOD-Y2vYewkcFxYyZQNPQ6kNjTZZxZkANReda_i5gOv9EjFfyRG4KlphEiOc6_3nIBxFrCNRv53CFSF38OYD2aHtdyaNjjUc6wLd8CXnGTlUhoz2FKXMFl1j4VMntz-BT-difd9zhHoQKQ98XH7BWikJe-SQe6Mi0YhpCx7Ym_EbMwlhXXWe4Rol3uWFM0BqGAhj9BHn8KtqL9bAA2FD1VUDGqPiAxrHQnuKhHNHJhGFr_lqu8uCiENKh8lFC-g6m5K1mozpGQNipXRuXwfnitmVX7kwyTJNK44ysc_ysk0dGF_B3r4Hkpc5dMa2Fp6sqW5XwU_MW-ZnaoM4xnXlx0nYFZPdlyTOwyaVLMMXqII-3KgFJa2UNSEQmKyg_ygzbc17ACMBYrwTLnoxdqiu2DY70lCJQYg0Zyi&IbQDRzpA=4&OAPGIsVi=4091021&VZNCTJvk=&PxgKqGoe=0,0&GmCJFWjy=&zFHgRwlK=&s=1280,1024,1,1280,1024,0 HTTP/1.1
Host: blockadsnot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
popads-node: wb3
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Sat, 07 Jun 2025 10:17:46 GMT
X-Firefox-Spdy: h2
GET www.blockadsnot.com/baja.min.css
95.173.205.15200 OK 37 kB URL GET www.blockadsnot.com/baja.min.css
IP 95.173.205.15:443
ASN #60068 Datacamp Limited
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerLet's Encrypt
Subject1158060716.rsc.cdn77.org
FingerprintD6:68:88:78:D5:18:B9:BC:6F:69:01:F9:29:EE:74:87:59:09:27:C6
ValidityWed, 16 Apr 2025 02:52:47 GMT - Tue, 15 Jul 2025 02:52:46 GMT
File type JavaScript source, ASCII text, with very long lines (1568)
Hash 02231581cba385cb8f28e1544ce7d5ba
ff992f418815cf992a5c153b07be766277daa91b
9d1df1ddd4f61ec7878fa5c36cc8ae818d947fac7942f86c2d37c16c05f24eaf
GET /baja.min.css HTTP/1.1
Host: www.blockadsnot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 07 Jun 2025 10:17:43 GMT
content-type: application/x-javascript
popads-node: wb9
expires: Fri, 13 Jun 2025 00:00:22 GMT
access-control-allow-origin: https://vide0.net
link: <https://blockadsnot.com/>;rel=preconnect
cache-control: public, max-age=604800
x-77-nzt: EwwBX63NDQH30eEBAAwBuUwKEwH3SQAAAAwBnJIhHwG3FwAAAA
x-77-nzt-ray: 2a494a1505007ae6ec11446831480300
x-77-cache: HIT
x-77-age: 123345
vary: Accept-Encoding, Origin
content-encoding: gzip
server: CDN77-Turbo
x-77-pop: osloNO
X-Firefox-Spdy: h2
OPTIONS segarkojiri.top/cuid/?f=https%3A%2F%2Fvide0.net
212.117.186.244200 OK 0 B URL OPTIONS segarkojiri.top/cuid/?f=https%3A%2F%2Fvide0.net
IP 212.117.186.244:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerZeroSSL
Subjectsegarkojiri.top
FingerprintB1:D1:99:D4:6E:8F:E8:95:E2:D6:F3:32:5C:83:EB:8C:7C:23:2A:D7
ValidityTue, 22 Apr 2025 00:00:00 GMT - Mon, 21 Jul 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /cuid/?f=https%3A%2F%2Fvide0.net HTTP/1.1
Host: segarkojiri.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://vide0.net/
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 07 Jun 2025 10:17:43 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://vide0.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET 4.adsco.re/
162.252.214.5200 OK 45 B IP 162.252.214.5:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 07 Jun 2025 10:17:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://vide0.net
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
GET tomlldahehun.org/multi?cs=Q0lPSUx0cXd8f3J7f3h8c355enk&abt=0&red=1&sm=76&k=&v=1.0.60.4&sts=0&prn=0&emb=0&tid=901258&rxy=1280_1024&u=919804296355357&agec=1749291463&fs=1&ref=https%3A%2F%2Fvide0.net%2Fe%2Fpvwtlm4xdy9b&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_HJnG=1749291465274&crc=1
54.240.174.125200 OK 3.8 kB URL GET tomlldahehun.org/multi?cs=Q0lPSUx0cXd8f3J7f3h8c355enk&abt=0&red=1&sm=76&k=&v=1.0.60.4&sts=0&prn=0&emb=0&tid=901258&rxy=1280_1024&u=919804296355357&agec=1749291463&fs=1&ref=https%3A%2F%2Fvide0.net%2Fe%2Fpvwtlm4xdy9b&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_HJnG=1749291465274&crc=1
IP 54.240.174.125:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerAmazon
Subjecttomlldahehun.org
Fingerprint6B:F0:7B:63:2B:19:E1:74:83:15:1A:BF:1B:B4:E6:71:68:14:57:3D
ValiditySun, 06 Apr 2025 00:00:00 GMT - Tue, 05 May 2026 23:59:59 GMT
File type ASCII text, with very long lines (3831), with no line terminators
Hash efe2fd49d76dc1dd5127cf8263e9c6f7
ac36315cdb6a3fab9e557788d3d314977690a09f
d71ef0b8b50d7749e01addf219312fc7852781629b41d5f292627315e6c72d54
GET /multi?cs=Q0lPSUx0cXd8f3J7f3h8c355enk&abt=0&red=1&sm=76&k=&v=1.0.60.4&sts=0&prn=0&emb=0&tid=901258&rxy=1280_1024&u=919804296355357&agec=1749291463&fs=1&ref=https%3A%2F%2Fvide0.net%2Fe%2Fpvwtlm4xdy9b&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_HJnG=1749291465274&crc=1 HTTP/1.1
Host: tomlldahehun.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain
content-length: 1901
date: Sat, 07 Jun 2025 10:17:45 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=QC+F8fDlJsaL/Np00aTpmTgxVXM/A3bw4+x4s3QQZ8tlrTlcZALYcOCPtMS/AVgnBxBg6inhP/mCis3Gu5nikSzud6jq9GWi9hy9EjpNDNvq8uPjLnnBV7mrgBbI; Expires=Sat, 14 Jun 2025 10:17:45 GMT; Path=/
AWSALBCORS=QC+F8fDlJsaL/Np00aTpmTgxVXM/A3bw4+x4s3QQZ8tlrTlcZALYcOCPtMS/AVgnBxBg6inhP/mCis3Gu5nikSzud6jq9GWi9hy9EjpNDNvq8uPjLnnBV7mrgBbI; Expires=Sat, 14 Jun 2025 10:17:45 GMT; Path=/; SameSite=None
csu=a7191e07-2d9a-4113-8de3-c49f2ad504aa
csu=919804296355357
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://vide0.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -5N_phm-be2SegK3Y21zaPuFmx70xA0Py09NyTIhMleZDlR0KCXU9Q==
X-Firefox-Spdy: h2
GET vide0.net/favicon.ico
172.67.69.18200 OK 15 kB IP 172.67.69.18:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerGoogle Trust Services
Subjectvide0.net
Fingerprint20:78:20:2F:2F:3F:97:4F:9D:EC:84:EF:FA:97:5A:F3:EC:A4:9D:70
ValidityThu, 05 Jun 2025 13:46:39 GMT - Wed, 03 Sep 2025 14:44:19 GMT
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Hash 30d3656f43c817e38c3e7d70b2bfbdad
1aa43b43755e7cba5e145d0978517f7bedad7da6
a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: vide0.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/e/pvwtlm4xdy9b
Cookie: lang=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 07 Jun 2025 10:17:43 GMT
content-type: image/x-icon
content-length: 15406
cf-ray: 94bf66beefaa56a9-OSL
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-3c2e"
expires: Sat, 05 Jul 2025 20:17:03 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 136840
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FBLWfpZaE0HtSHmotVY112M%2BrndcU%2BshEIG54uKukzbjPt%2B2quJlueinoJ%2BRNcW80M1AFQVs0sTVl6bn8ezZ6WW2rT2g8lf6cuxAkhGIJlXqXw0m49CS3aEN6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
server-timing: cfL4;desc="?proto=TCP&rtt=4105&min_rtt=437&rtt_var=7294&sent=12&recv=15&lost=0&retrans=0&sent_bytes=5190&recv_bytes=1406&delivery_rate=8274285&cwnd=257&unsent_bytes=0&cid=b8f3c067dd6c93bc&ts=1589&x=0"
X-Firefox-Spdy: h2
GET vide0.net/e/pvwtlm4xdy9b
172.67.69.18200 OK 2.5 kB IP 172.67.69.18:443
Certificate IssuerGoogle Trust Services
Subjectvide0.net
Fingerprint20:78:20:2F:2F:3F:97:4F:9D:EC:84:EF:FA:97:5A:F3:EC:A4:9D:70
ValidityThu, 05 Jun 2025 13:46:39 GMT - Wed, 03 Sep 2025 14:44:19 GMT
File type HTML document, ASCII text, with very long lines (2502), with no line terminators
Hash 092e5e3797d6057d089f24dca9a8673c
8a1c8583149377cd4215f7d53e7ef03c48231575
4059a70a12549639ba2e3a822a599af43bd7193b3021df81c6818b56db2a485b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /e/pvwtlm4xdy9b HTTP/1.1
Host: vide0.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 07 Jun 2025 10:17:42 GMT
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
expires: Fri, 06 Jun 2025 10:17:42 GMT
set-cookie: lang=1; domain=.vide0.net; path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FLEHoIDZA8f%2FLW%2Bq0vLEIwiyikpxs75BJPZHCHBl9bIIYUFvmrdFHYKFBQBpDxuhKfbOtIKpGaKu2r5a7SYzSdC28byVEnv3DcbTLchLi70Ps6rNzivAw3FZ6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 94bf66b53ce956a9-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=5906&min_rtt=471&rtt_var=10870&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3266&recv_bytes=1254&delivery_rate=7350253&cwnd=254&unsent_bytes=0&cid=b8f3c067dd6c93bc&ts=110&x=0"
X-Firefox-Spdy: h2
GET i.doodcdn.io/theme_2/css/bootstrap.min.css
104.26.15.102200 OK 160 kB URL GET i.doodcdn.io/theme_2/css/bootstrap.min.css
IP 104.26.15.102:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.io
FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
File type ASCII text, with very long lines (65324)
Size 160 kB (159515 bytes)
Hash 7cc40c199d128af6b01e74a28c5900b0
d305110fb79113a961394b433d851a3410342b8c
2ff5b959fa9f6b4b1d04d20a37d706e90039176ab1e2a202994d9580baeebfd6
GET /theme_2/css/bootstrap.min.css HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 07 Jun 2025 10:17:42 GMT
content-type: text/css
content-encoding: br
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: public, max-age=2592000
expires: Sun, 07 Jun 2026 03:24:49 GMT
vary: Accept-Encoding,User-Agent
access-control-allow-origin: *
cf-cache-status: HIT
age: 24543
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UK4Zm2WodVcBs5o8vOBqD6GEELbaDM0Mv91OrJcg2BpOq%2FJR9hwCAmT9Cf9gSUo6hIPjFT8L2MHS%2BTh8y9%2BXAK92wU2gP6KjAfDI8AfhPrKcycfGWGQQVb3aDDwtJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 94bf66b78dd60b59-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=508&min_rtt=468&rtt_var=107&sent=7&recv=12&lost=0&retrans=0&sent_bytes=3193&recv_bytes=1271&delivery_rate=6766355&cwnd=254&unsent_bytes=0&cid=e671ae62f8dd880a&ts=42&x=0"
X-Firefox-Spdy: h2
GET faqirsgoliard.top/gHzOaAdOhbZ/71405
212.117.186.4200 OK 6 B URL GET faqirsgoliard.top/gHzOaAdOhbZ/71405
IP 212.117.186.4:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerZeroSSL
Subjectfaqirsgoliard.top
Fingerprint82:B5:A5:37:35:1C:D4:39:A8:06:CE:C7:4D:5A:DA:7D:F0:48:BD:DD
ValiditySun, 04 May 2025 00:00:00 GMT - Sat, 02 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 4fc71bf68a1d477bd1523733e34d1e90
15119105cffbe108b6cf290146ab02c9aa8517ba
74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /gHzOaAdOhbZ/71405 HTTP/1.1
Host: faqirsgoliard.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 07 Jun 2025 10:17:42 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://vide0.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Sun, 08-Jun-2025 10:17:42 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Sun, 08-Jun-2025 10:17:42 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
142.250.147.84302 Found 0 B URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP 142.250.147.84:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
FingerprintB1:06:D8:49:F1:03:BE:43:D7:79:D9:25:25:FE:92:54:6C:93:0B:54
ValidityMon, 12 May 2025 08:44:47 GMT - Mon, 04 Aug 2025 08:44:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:zKnl5McwrmOjlozDPyX0Y7sskU40Eg:bUVgRgAvdZk0-ZKz; Expires=Mon, 07-Jun-2027 10:17:43 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 07 Jun 2025 10:17:43 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiOJLEj5hdSlkA96JIQvSR0cpNUZk3zDRSkiA2quKKzyT9BY6lBHzfzGLSCrLhKCMJN2fQkinQ
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-oM-WkfGc_14SAdW_cAwJQQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST adsco.re/p
162.252.214.5200 OK 1.2 kB IP 162.252.214.5:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type ASCII text, with very long lines (1212), with no line terminators
Hash ec67e18dd0d768641022bd00295c73dc
52f5ec3e55000c75150293d56902e98d9c73a40e
13ea847e3a3b562f43af5f85958ccb0c7f7f76219f1e19d04dacea1ea26d2ca4
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 1498
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 07 Jun 2025 10:17:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK nyc123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Access-Control-Allow-Origin: https://vide0.net
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
POST kqdxc9zoti8y.l4.adsco.re/
185.200.118.62200 OK 0 B URL POST kqdxc9zoti8y.l4.adsco.re/
IP 185.200.118.62:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerLet's Encrypt
Subject*.l4.adsco.re
Fingerprint76:AD:98:EA:A8:8F:6F:6D:58:92:36:07:6D:91:B6:67:41:97:C1:4E
ValiditySat, 19 Apr 2025 09:14:33 GMT - Fri, 18 Jul 2025 09:14:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: kqdxc9zoti8y.l4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 07 Jun 2025 10:17:45 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 02 Jun 2023 14:03:32 GMT
etag: "6479f6b4-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
104.17.25.14200 OK 88 kB URL GET cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
IP 104.17.25.14:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77
ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash 220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 07 Jun 2025 10:17:42 GMT
content-type: application/javascript; charset=utf-8
content-length: 27748
cf-ray: 94bf66b77d3556c0-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-15851"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 283751
expires: Thu, 28 May 2026 10:17:42 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7rgYk58qgnwqJ5R2XAQuHn0uXUpAPljHcXj0uoGb%2B2jcsDI1QHxXMba3bNI3Ch676J3WfD8Eg3AcnJNVTyoWmBHrl%2FHjuKbihQBPJmyBgHyHf4LLUKBz9FPmakPgJ%2BYOfgknTD%2FK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET rnmentoftheusys.com/MzhWYzgcBzUQBWJvHBF3a2pjNglAcwIremVgFwt/UH4yB3x2fXAXUVcFb1QMAQxlRUhaXGtSABVLIgJMRktrUh5aVjAMBRVOa1IWAxZkTQ0VTWtSHkdINwQFAh4mF0xfBWdUDAoKb1IMBQpuUQs
172.67.180.163204 No Content 0 B URL GET rnmentoftheusys.com/MzhWYzgcBzUQBWJvHBF3a2pjNglAcwIremVgFwt/UH4yB3x2fXAXUVcFb1QMAQxlRUhaXGtSABVLIgJMRktrUh5aVjAMBRVOa1IWAxZkTQ0VTWtSHkdINwQFAh4mF0xfBWdUDAoKb1IMBQpuUQs
IP 172.67.180.163:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerGoogle Trust Services
Subjectrnmentoftheusys.com
Fingerprint01:15:CE:CA:7A:1C:D3:F9:F4:59:CE:75:3A:C0:10:A8:E6:0D:35:F7
ValidityTue, 22 Apr 2025 11:53:35 GMT - Mon, 21 Jul 2025 12:51:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /MzhWYzgcBzUQBWJvHBF3a2pjNglAcwIremVgFwt/UH4yB3x2fXAXUVcFb1QMAQxlRUhaXGtSABVLIgJMRktrUh5aVjAMBRVOa1IWAxZkTQ0VTWtSHkdINwQFAh4mF0xfBWdUDAoKb1IMBQpuUQs HTTP/1.1
Host: rnmentoftheusys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 07 Jun 2025 10:17:43 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=KbY9QeylvmhF3U%2Fij05dSLnGEg4gS0u5Q3QMZB5SWFI1AjIyoq1fEp%2FyD2cLb2TccK8TGG5tOKR46%2FTt5ZCy1B0fHgQnW4T9V%2F4KAiaudT3J"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 94bf66bb1e890b69-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
OPTIONS hoptreeperrie.shop/gd/70849?md=eyJhIjoxNTQ1LCJzIjoiMTI4MHgxMDI0IiwiYiI6IjEyODB4MTAyNCIsInIiOiIiLCJxIjoiaHR0cHM6Ly92aWRlMC5uZXQvZS9wdnd0bG00eGR5OWIiLCJoIjo4NTE5LCJsIjoiZW4tVVMiLCJ0IjowLCJ6IjozNDM0LCJrIjowLCJ1IjoiIiwiZiI6ZmFsc2UsIndoIjoibm90IGluIGlmcmFtZSIsImloIjoiMTI4MHgxMDI0IiwiZSI6ImtkajZpbXJlbzI3dG5idyIsIm8iOnRydWUsIm0iOjE3NDkyOTE0NjMwMDgsInciOiIlN0IlMjJ0aXRsZSUyMiUzQSUyMlZpZGVvJTIwbm90JTIwZm91bmQlMjAlN0MlMjBEb29kU3RyZWFtJTIyJTJDJTIya2V5d29yZHMlMjIlM0ElNUIlNUQlMkMlMjJ0b3B3b3JkcyUyMiUzQSU1QiUyMnRlc3QlM0EzJTIyJTJDJTIybm90JTNBMiUyMiUyQyUyMmZvdW5kJTNBMiUyMiU1RCU3RCIsInRzIjowLCJwciI6MSwiaGMiOjQ4LCJibCI6LTEsImJjIjozLCJ2diI6Ik1lc2EiLCJ2ciI6Imxsdm1waXBlIiwiYWMiOjAsImN0IjoidW5rbm93biIsImNldCI6InVua25vd24iLCJjZGxtIjotMSwiY2RsIjotMSwiY3J0dCI6LTEsInRtcyI6MTIwLCJjZSI6dHJ1ZSwiY2QiOjI0LCJvciI6ImxhbmRzY2FwZS1wcmltYXJ5IiwiZnMiOm51bGwsImZzbyI6bnVsbH0&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A
172.255.99.92200 OK 0 B URL OPTIONS hoptreeperrie.shop/gd/70849?md=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&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A
IP 172.255.99.92:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerLet's Encrypt
Subjecthoptreeperrie.shop
FingerprintC6:93:EA:0D:2E:33:EB:CD:93:C7:EA:53:6D:B5:0C:7B:CC:38:E5:85
ValidityTue, 22 Apr 2025 20:48:41 GMT - Mon, 21 Jul 2025 20:48:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /gd/70849?md=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&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A HTTP/1.1
Host: hoptreeperrie.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://vide0.net/
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 07 Jun 2025 10:17:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://vide0.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET ukankingwithea.com/asd100.bin
104.21.80.1404 Not Found 159 B URL GET ukankingwithea.com/asd100.bin
IP 104.21.80.1:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70
ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash fb9666f93e418b95fea8fdbc20e80af9
d4eefca1b299cc266a80e83c9e39c4261cb87583
c6252ea6e785c1dc0d44dab86653a7209eb507e45b70d138ce515576743b64f7
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vide0.net/
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sat, 07 Jun 2025 10:17:43 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
age: 40
cache-control: max-age=14400
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=dvrfV6Lg5%2BCqe657NhBw0ENk8gTJwROMiLEAk6Dn9c%2FFs8%2FnOsV7vUGop8dvBWxlqgr%2FPNPKSqfyzxO6LS%2BAkBRwBb3Q0cMNJ%2B7KOuyX5Gs%3D"}]}
content-encoding: br
cf-ray: 94bf66bf5c9b0b59-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOyibGdu0vvH8WrY3FX43cgul_5X_3XUTkKT3kRDtc7KRE8Ho3d46VPHefAml_07iwO2Ht8AQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-233865122%3A1749291464482234
142.250.147.84403 Forbidden 0 B URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOyibGdu0vvH8WrY3FX43cgul_5X_3XUTkKT3kRDtc7KRE8Ho3d46VPHefAml_07iwO2Ht8AQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-233865122%3A1749291464482234
IP 142.250.147.84:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint7B:D2:02:FC:58:D9:E6:6C:DB:4E:0A:85:10:91:65:A5:9A:9C:5D:12
ValidityMon, 12 May 2025 08:42:58 GMT - Mon, 04 Aug 2025 08:42:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOyibGdu0vvH8WrY3FX43cgul_5X_3XUTkKT3kRDtc7KRE8Ho3d46VPHefAml_07iwO2Ht8AQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-233865122%3A1749291464482234 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vide0.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 07 Jun 2025 10:17:44 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-security-policy: script-src 'nonce-BTXoTyXfOE8jlJVhGumxig' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.l6QsJgyEyPU.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET ukankingwithea.com/
104.21.80.1200 OK 26 B IP 104.21.80.1:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70
ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File type ASCII text, with no line terminators
Hash 15f908252576e92b364dcd3ec73a9a90
545b5ed228a9d7aee6da14c8900297767993ec56
67be79fcd5e01e98f974dc60c91bf05b9d8d5f9b39ac3728be373cc4137aa29f
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vide0.net/
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 07 Jun 2025 10:17:43 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://vide0.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=cmJRieNWeuGDYkG%2FjUZ4YXlCImTRS37BvYn4GmGOwRjdCSlPcWtG41rs9NfzrBxFRK7fz0TvkZd60p5jYcMU0yPYEkMYD46srKelLXWsYHE%3D"}]}
content-encoding: br
set-cookie: csu=919804296355357@1@1749291463; SameSite=None; Secure; Max-Age=31104000
cf-ray: 94bf66bf5ca30b59-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET c.adsco.re/#0.36152315490134423
104.17.166.186200 OK 79 kB URL GET c.adsco.re/#0.36152315490134423
IP 104.17.166.186:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (689)
Hash f0e71ebb1e2c90b307c171052ca517d0
1a1950b1868c0bfb8629f6f81b81439160727a79
adbce95b9ac0da66ea3a1d707494d9c74876e1c9186c446b4b5a22d15adc1ee5
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 07 Jun 2025 10:17:45 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Tue, 08 Jul 2025 10:17:45 GMT
etag: W/"8Oceux4skLMHwXEFLKUX0A=="
content-encoding: gzip
cf-cache-status: HIT
age: 197526
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
cf-ray: 94bf66c8fd487127-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST kqdxc9zoti8y.s4.adsco.re/
185.200.116.60200 OK 0 B URL POST kqdxc9zoti8y.s4.adsco.re/
IP 185.200.116.60:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerLet's Encrypt
Subject*.s4.adsco.re
Fingerprint1B:E8:4E:02:C6:2C:FB:13:48:08:17:BF:61:FB:19:19:3D:11:3E:57
ValidityMon, 19 May 2025 09:14:19 GMT - Sun, 17 Aug 2025 09:14:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: kqdxc9zoti8y.s4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 07 Jun 2025 10:17:45 GMT
content-type: text/html
content-length: 0
last-modified: Tue, 03 Oct 2023 13:29:59 GMT
etag: "651c1757-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiO-07jUTQnn8tRpOch5WOzeC5Tum2WPRnZm5anqqNMPHPv8rre9fk59luNV56KwxL2KebrKQQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1875710785%3A1749291464437556
142.250.147.84403 Forbidden 0 B URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiO-07jUTQnn8tRpOch5WOzeC5Tum2WPRnZm5anqqNMPHPv8rre9fk59luNV56KwxL2KebrKQQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1875710785%3A1749291464437556
IP 142.250.147.84:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint7B:D2:02:FC:58:D9:E6:6C:DB:4E:0A:85:10:91:65:A5:9A:9C:5D:12
ValidityMon, 12 May 2025 08:42:58 GMT - Mon, 04 Aug 2025 08:42:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiO-07jUTQnn8tRpOch5WOzeC5Tum2WPRnZm5anqqNMPHPv8rre9fk59luNV56KwxL2KebrKQQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1875710785%3A1749291464437556 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vide0.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 07 Jun 2025 10:17:44 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-IdxQcLZQVZ-eLsBqc4ldng' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.l6QsJgyEyPU.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST kqdxc9zoti8y.n4.adsco.re/
38.132.109.126200 OK 0 B URL POST kqdxc9zoti8y.n4.adsco.re/
IP 38.132.109.126:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerLet's Encrypt
Subject*.n4.adsco.re
FingerprintA4:A0:A6:46:DF:45:B1:CC:DD:05:80:89:4C:8B:F3:44:48:A8:D5:89
ValidityMon, 19 May 2025 09:14:22 GMT - Sun, 17 Aug 2025 09:14:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: kqdxc9zoti8y.n4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 07 Jun 2025 10:17:45 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 16 Jun 2023 08:37:42 GMT
etag: "648c1f56-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
GET eukworektobedir.com/TVdjbUksNQAAdixqAUs8PzteSHsLclErLXwxU1g/P2QQBzo4LlRDKiE4FgkvPzgNGWcjMhdIewsQNgElNQUkBjEDP1sEHyQOFCsRIQY6AA8PNDVUeQYGLgUNf28VKgoMGjoDKiseMVx5ACAqHws0HQggARs1ORd8DhkgHScCLzICCjonRl8PDwNXIyt/OzsmCCpvMwYxJBMnGn8ZHzU9BDdnNwgffGcvPAw/Fg5VOQgTFDwZJxokIBgiJgUaGCEBJ1V7Di5TKxknPzYJIHQ5B10PJQBRJzEPPlMlBycOJCN5NTACP3E6AyQvORwfMSUQIy8gLyI1MAI8ZBQjIV8bOQErDjspZRcvGQtuDgsMBBA3Kgs9FhknBBQFCywtfGZbDB8lPzRfAGhlISsKLhQzNTEJFg8ZICwSJV0eCh0MOwEXDS0pCAkeMlVwBAExXwV/GRI/Hj0NBy4xADMySyM+OA0ddAxmUVguficgWCsoOwE1
54.240.174.80200 OK 3.1 kB URL GET eukworektobedir.com/TVdjbUksNQAAdixqAUs8PzteSHsLclErLXwxU1g/P2QQBzo4LlRDKiE4FgkvPzgNGWcjMhdIewsQNgElNQUkBjEDP1sEHyQOFCsRIQY6AA8PNDVUeQYGLgUNf28VKgoMGjoDKiseMVx5ACAqHws0HQggARs1ORd8DhkgHScCLzICCjonRl8PDwNXIyt/OzsmCCpvMwYxJBMnGn8ZHzU9BDdnNwgffGcvPAw/Fg5VOQgTFDwZJxokIBgiJgUaGCEBJ1V7Di5TKxknPzYJIHQ5B10PJQBRJzEPPlMlBycOJCN5NTACP3E6AyQvORwfMSUQIy8gLyI1MAI8ZBQjIV8bOQErDjspZRcvGQtuDgsMBBA3Kgs9FhknBBQFCywtfGZbDB8lPzRfAGhlISsKLhQzNTEJFg8ZICwSJV0eCh0MOwEXDS0pCAkeMlVwBAExXwV/GRI/Hj0NBy4xADMySyM+OA0ddAxmUVguficgWCsoOwE1
IP 54.240.174.80:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerAmazon
Subjecteukworektobedir.com
Fingerprint60:71:B3:B3:23:2B:3B:39:0B:A8:64:7B:16:BF:AF:F2:28:DE:8C:8F
ValidityWed, 14 May 2025 00:00:00 GMT - Fri, 12 Jun 2026 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (3067), with no line terminators
Hash 954f21fdc6983fbcfaf934c5640b26a3
ebf1c86b8dbc4be68183998976bc701794d9c3a1
2f29c822a4f44afc65e2eabcae18bae140ddf3faa0eac306880f68f3b8952e36
GET /TVdjbUksNQAAdixqAUs8PzteSHsLclErLXwxU1g/P2QQBzo4LlRDKiE4FgkvPzgNGWcjMhdIewsQNgElNQUkBjEDP1sEHyQOFCsRIQY6AA8PNDVUeQYGLgUNf28VKgoMGjoDKiseMVx5ACAqHws0HQggARs1ORd8DhkgHScCLzICCjonRl8PDwNXIyt/OzsmCCpvMwYxJBMnGn8ZHzU9BDdnNwgffGcvPAw/Fg5VOQgTFDwZJxokIBgiJgUaGCEBJ1V7Di5TKxknPzYJIHQ5B10PJQBRJzEPPlMlBycOJCN5NTACP3E6AyQvORwfMSUQIy8gLyI1MAI8ZBQjIV8bOQErDjspZRcvGQtuDgsMBBA3Kgs9FhknBBQFCywtfGZbDB8lPzRfAGhlISsKLhQzNTEJFg8ZICwSJV0eCh0MOwEXDS0pCAkeMlVwBAExXwV/GRI/Hj0NBy4xADMySyM+OA0ddAxmUVguficgWCsoOwE1 HTTP/1.1
Host: eukworektobedir.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1214
date: Sat, 07 Jun 2025 10:17:42 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=tahuRzbw5+WtWg/+YzEW9Pnxy1m6vh4q7H2vpc0VJhmHOKfBDLjkPHjKNxVvmNsDsoXo8dqdF5+T8Xr1ZXOpK/w2Jynw2JA/iGhWOZsVoB+1V/CWD/9vvysm4P7o; Expires=Sat, 14 Jun 2025 10:17:42 GMT; Path=/
AWSALBCORS=tahuRzbw5+WtWg/+YzEW9Pnxy1m6vh4q7H2vpc0VJhmHOKfBDLjkPHjKNxVvmNsDsoXo8dqdF5+T8Xr1ZXOpK/w2Jynw2JA/iGhWOZsVoB+1V/CWD/9vvysm4P7o; Expires=Sat, 14 Jun 2025 10:17:42 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PoECgiglCCm5epBVBvYGqd4uM-Vdx9d1WCNvPje5wugm3wDhmm5xCA==
X-Firefox-Spdy: h2
GET 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
0.0.0.0 0 B URL GET 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
IP 0.0.0.0:0
Requested by https://vide0.net/e/pvwtlm4xdy9b
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET 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 HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET rnmentoftheusys.com/MXpkc3AeRQcATWcuMh49XzgNNyYFMjVBIXksAz0xaysuIjFkL0IHGVVHXUNBA09cVQBYHllBSRcJEBIERAlZQlZYFAIcTRcMWUJeAVRSQ14FXBFOQRcOFBIXDEtCAwRFFllCRwVDVkpBBUxWS0AJ
172.67.180.163204 No Content 0 B URL GET rnmentoftheusys.com/MXpkc3AeRQcATWcuMh49XzgNNyYFMjVBIXksAz0xaysuIjFkL0IHGVVHXUNBA09cVQBYHllBSRcJEBIERAlZQlZYFAIcTRcMWUJeAVRSQ14FXBFOQRcOFBIXDEtCAwRFFllCRwVDVkpBBUxWS0AJ
IP 172.67.180.163:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerGoogle Trust Services
Subjectrnmentoftheusys.com
Fingerprint01:15:CE:CA:7A:1C:D3:F9:F4:59:CE:75:3A:C0:10:A8:E6:0D:35:F7
ValidityTue, 22 Apr 2025 11:53:35 GMT - Mon, 21 Jul 2025 12:51:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /MXpkc3AeRQcATWcuMh49XzgNNyYFMjVBIXksAz0xaysuIjFkL0IHGVVHXUNBA09cVQBYHllBSRcJEBIERAlZQlZYFAIcTRcMWUJeAVRSQ14FXBFOQRcOFBIXDEtCAwRFFllCRwVDVkpBBUxWS0AJ HTTP/1.1
Host: rnmentoftheusys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 07 Jun 2025 10:17:43 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=vFEGCfeyKzSfBvVl8vIGEraE1dD0TujgG7EO9Jy9RrYetSgTzPJOnAEMZDyMpllkQdmYKWV%2BK8cjhQaS8Jw8vwhP%2Bu51vkRHi3SvSGUjTeRa"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 94bf66bb0e870b69-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
POST hoptreeperrie.shop/gd/70849?md=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&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A
172.255.99.92200 OK 669 B URL POST hoptreeperrie.shop/gd/70849?md=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&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A
IP 172.255.99.92:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerLet's Encrypt
Subjecthoptreeperrie.shop
FingerprintC6:93:EA:0D:2E:33:EB:CD:93:C7:EA:53:6D:B5:0C:7B:CC:38:E5:85
ValidityTue, 22 Apr 2025 20:48:41 GMT - Mon, 21 Jul 2025 20:48:40 GMT
Hash 614cd56e9af546a53642570c392feb57
b33323fdcad6d48d36efef66d7f687924f333c90
32a14f1f065cd3e972d90b145846deff7c4631fcbd7430cdfe34b4df2364d40d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /gd/70849?md=eyJhIjoxNTQ1LCJzIjoiMTI4MHgxMDI0IiwiYiI6IjEyODB4MTAyNCIsInIiOiIiLCJxIjoiaHR0cHM6Ly92aWRlMC5uZXQvZS9wdnd0bG00eGR5OWIiLCJoIjo4NTE5LCJsIjoiZW4tVVMiLCJ0IjowLCJ6IjozNDM0LCJrIjowLCJ1IjoiIiwiZiI6ZmFsc2UsIndoIjoibm90IGluIGlmcmFtZSIsImloIjoiMTI4MHgxMDI0IiwiZSI6ImtkajZpbXJlbzI3dG5idyIsIm8iOnRydWUsIm0iOjE3NDkyOTE0NjMwMDgsInciOiIlN0IlMjJ0aXRsZSUyMiUzQSUyMlZpZGVvJTIwbm90JTIwZm91bmQlMjAlN0MlMjBEb29kU3RyZWFtJTIyJTJDJTIya2V5d29yZHMlMjIlM0ElNUIlNUQlMkMlMjJ0b3B3b3JkcyUyMiUzQSU1QiUyMnRlc3QlM0EzJTIyJTJDJTIybm90JTNBMiUyMiUyQyUyMmZvdW5kJTNBMiUyMiU1RCU3RCIsInRzIjowLCJwciI6MSwiaGMiOjQ4LCJibCI6LTEsImJjIjozLCJ2diI6Ik1lc2EiLCJ2ciI6Imxsdm1waXBlIiwiYWMiOjAsImN0IjoidW5rbm93biIsImNldCI6InVua25vd24iLCJjZGxtIjotMSwiY2RsIjotMSwiY3J0dCI6LTEsInRtcyI6MTIwLCJjZSI6dHJ1ZSwiY2QiOjI0LCJvciI6ImxhbmRzY2FwZS1wcmltYXJ5IiwiZnMiOm51bGwsImZzbyI6bnVsbH0&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A HTTP/1.1
Host: hoptreeperrie.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vide0.net/
Content-Type: application/json
Content-Length: 82
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 07 Jun 2025 10:17:43 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://vide0.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Sun, 08-Jun-2025 10:17:43 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Sun, 08-Jun-2025 10:17:43 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiML-Y1SF9-hWk-JmXZiUtE43hZ2E3BUzF64NVgZTI8rkPcsElV3mDcF4fvq7yG58w6nJgOrFw
142.250.147.84302 Found 0 B URL GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiML-Y1SF9-hWk-JmXZiUtE43hZ2E3BUzF64NVgZTI8rkPcsElV3mDcF4fvq7yG58w6nJgOrFw
IP 142.250.147.84:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint7B:D2:02:FC:58:D9:E6:6C:DB:4E:0A:85:10:91:65:A5:9A:9C:5D:12
ValidityMon, 12 May 2025 08:42:58 GMT - Mon, 04 Aug 2025 08:42:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiML-Y1SF9-hWk-JmXZiUtE43hZ2E3BUzF64NVgZTI8rkPcsElV3mDcF4fvq7yG58w6nJgOrFw HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vide0.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:iUSS7sBi_GAodyw1zj0gUvTHINYclw:6m1-Z8FkrzYo2Dec;Path=/;Expires=Mon, 07-Jun-2027 10:17:44 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 07 Jun 2025 10:17:44 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOyibGdu0vvH8WrY3FX43cgul_5X_3XUTkKT3kRDtc7KRE8Ho3d46VPHefAml_07iwO2Ht8AQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-233865122%3A1749291464482234
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-mDoSMZMHXN6D5_eg6RBgvA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 414
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
142.250.147.84302 Found 0 B URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP 142.250.147.84:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
FingerprintB1:06:D8:49:F1:03:BE:43:D7:79:D9:25:25:FE:92:54:6C:93:0B:54
ValidityMon, 12 May 2025 08:44:47 GMT - Mon, 04 Aug 2025 08:44:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:LLM6D31eMgHk8D0MYh_7HW01YmNp1Q:tcpYGygbvSBaBLdS; Expires=Mon, 07-Jun-2027 10:17:43 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 07 Jun 2025 10:17:43 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiML-Y1SF9-hWk-JmXZiUtE43hZ2E3BUzF64NVgZTI8rkPcsElV3mDcF4fvq7yG58w6nJgOrFw
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-jyKjtbsU_gK8rh8Lq9pbYA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET ukankingwithea.com/
104.21.80.1200 OK 26 B IP 104.21.80.1:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70
ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File type ASCII text, with no line terminators
Hash 5f7d020b41d7c93966fd7294be7c6444
0c175c269c4f9e21999d76f691a0e20a6db29dfe
c53031ec4b2254df07afe081b2899e9c42a884f3ccf284a16a21a9d098969876
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vide0.net/
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 07 Jun 2025 10:17:43 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://vide0.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1EusDUogWUxk8b3MPNvdrL3krs6%2Fin3B5TpDDjyCUw6P8liU7f9vfOQgKGeg%2B9iabA1t7ALJYtnUp0BnCwCO599omtQ8uvxUVVAxzaDWzaM%3D"}]}
content-encoding: br
set-cookie: csu=475003633008641@1@1749291463; SameSite=None; Secure; Max-Age=31104000
cf-ray: 94bf66bf5c950b59-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET i.doodcdn.io/theme_2/css/style.css
104.26.15.102200 OK 249 kB URL GET i.doodcdn.io/theme_2/css/style.css
IP 104.26.15.102:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.io
FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
Size 249 kB (249272 bytes)
Hash 59b293159a38ec92d8bd5fa4d09f8d59
7167b460de2cb4d2534163de707b0aa0e84b73cf
3f81f845eb11d647c4bd80b76d7af054203e52eab24bc359ddd5cb4f33efddd4
GET /theme_2/css/style.css HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 07 Jun 2025 10:17:42 GMT
content-type: text/css
content-encoding: br
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: public, max-age=2592000
expires: Sun, 07 Jun 2026 03:24:49 GMT
vary: Accept-Encoding,User-Agent
access-control-allow-origin: *
cf-cache-status: HIT
age: 24428
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ke5s6mRW4sgVwPU8po9Q6JlVWUazx13%2BQd0f%2B96jVcfUv%2B5vQzgjvxc8UjP1Oo01I%2FebP4qwJt4QTlq8a7Dvyjap1nmu2H5CZhY51ZmT%2BUUYME8VF%2FnfmITEpEzK3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 94bf66b79de00b59-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1032&min_rtt=461&rtt_var=952&sent=32&recv=16&lost=0&retrans=0&sent_bytes=32659&recv_bytes=1271&delivery_rate=11277258&cwnd=256&unsent_bytes=0&cid=e671ae62f8dd880a&ts=50&x=0"
X-Firefox-Spdy: h2
GET faqirsgoliard.top/r67c0fc81985e5/70849
212.117.186.4200 OK 82 kB URL GET faqirsgoliard.top/r67c0fc81985e5/70849
IP 212.117.186.4:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerZeroSSL
Subjectfaqirsgoliard.top
Fingerprint82:B5:A5:37:35:1C:D4:39:A8:06:CE:C7:4D:5A:DA:7D:F0:48:BD:DD
ValiditySun, 04 May 2025 00:00:00 GMT - Sat, 02 Aug 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 9e82971012debe4960183661ea7233f3
6931033f9dc90707a88edc258173efb1591ef52b
d3a6abe790137ab619722f9c8443ae2a92df8ad858f0cf77013b96bc4f658921
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /r67c0fc81985e5/70849 HTTP/1.1
Host: faqirsgoliard.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 07 Jun 2025 10:17:42 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://vide0.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Sun, 08-Jun-2025 10:17:42 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Sun, 08-Jun-2025 10:17:42 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET rnmentoftheusys.com/dndYbnFZSDsdTCREMAQSICEgPR0SNgIAPzshaCAfEiI0PSAbPn4aGBJKYV5JRkJuSAEfE2VfVwUDORoEBUppSBgYETdTVwBKaUBCQllrWF9DUS1TQFADKA8WS0Z+HgUCG2VfRkJOaldAQkFqWUhG
172.67.180.163204 No Content 0 B URL GET rnmentoftheusys.com/dndYbnFZSDsdTCREMAQSICEgPR0SNgIAPzshaCAfEiI0PSAbPn4aGBJKYV5JRkJuSAEfE2VfVwUDORoEBUppSBgYETdTVwBKaUBCQllrWF9DUS1TQFADKA8WS0Z+HgUCG2VfRkJOaldAQkFqWUhG
IP 172.67.180.163:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerGoogle Trust Services
Subjectrnmentoftheusys.com
Fingerprint01:15:CE:CA:7A:1C:D3:F9:F4:59:CE:75:3A:C0:10:A8:E6:0D:35:F7
ValidityTue, 22 Apr 2025 11:53:35 GMT - Mon, 21 Jul 2025 12:51:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dndYbnFZSDsdTCREMAQSICEgPR0SNgIAPzshaCAfEiI0PSAbPn4aGBJKYV5JRkJuSAEfE2VfVwUDORoEBUppSBgYETdTVwBKaUBCQllrWF9DUS1TQFADKA8WS0Z+HgUCG2VfRkJOaldAQkFqWUhG HTTP/1.1
Host: rnmentoftheusys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 07 Jun 2025 10:17:42 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=fOnC3x%2FEAVQ9L%2FSwpuyJqGYgTqWDhha3Td2QvrDhh5cAMzJ2ugz9OUZ%2FnOuyfQYUq0Fe1E7wktcNFlAFFo4EV2TaBDjR1Hd30ejBBGy5wHFi"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 94bf66baae5d0b69-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
POST segarkojiri.top/cuid/?f=https%3A%2F%2Fvide0.net
212.117.186.244200 OK 32 B URL POST segarkojiri.top/cuid/?f=https%3A%2F%2Fvide0.net
IP 212.117.186.244:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerZeroSSL
Subjectsegarkojiri.top
FingerprintB1:D1:99:D4:6E:8F:E8:95:E2:D6:F3:32:5C:83:EB:8C:7C:23:2A:D7
ValidityTue, 22 Apr 2025 00:00:00 GMT - Mon, 21 Jul 2025 23:59:59 GMT
Hash 2ed9365685f196a5be9c0e2cc80bff8d
12bba24a5f82a7e3258f8b4d3ce9af5889ce96fd
aa6794e55d40efb3a34cad4ec7e5f24b98fced43f51e29c0c5ad46388ba34906
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /cuid/?f=https%3A%2F%2Fvide0.net HTTP/1.1
Host: segarkojiri.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vide0.net/
Content-Type: application/json
Content-Length: 10
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 07 Jun 2025 10:17:43 GMT
Content-Type: application/json
Content-Length: 32
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://vide0.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: a97fa794a0f9=67b5a4b0ce2449be05064b; expires=Mon, 21 Oct 2052 12:07:44 GMT; domain=segarkojiri.top; path=/; secure; SameSite=None
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET d1f05vr3sjsuy7.cloudfront.net/?srvfd=908056
54.230.245.92200 OK 321 kB URL GET d1f05vr3sjsuy7.cloudfront.net/?srvfd=908056
IP 54.230.245.92:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)
Size 321 kB (320831 bytes)
Hash 20da624bcabbaae34a86cd7a9526bf59
64fbe414964e75704fa4753e7f9e61cab5f3debe
e36d270b7da533b203eada8ce7ff35f2b91d3a63ace166643d19be1d3fac56c7
GET /?srvfd=908056 HTTP/1.1
Host: d1f05vr3sjsuy7.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 106915
date: Sat, 07 Jun 2025 10:17:42 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DmZMSiKTa0hjXZiW5BQANtB90ZWZY_x4AQJXn1wIxoU9PVDjX09m3Q==
X-Firefox-Spdy: h2
GET i.doodcdn.io/theme_2/fonts/avertastd-black-webfont.woff2
104.26.15.102200 OK 23 kB URL GET i.doodcdn.io/theme_2/fonts/avertastd-black-webfont.woff2
IP 104.26.15.102:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.io
FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
File type Web Open Font Format (Version 2), TrueType, length 22820, version 1.0
Hash 1e976387cb594982692bdbdffde86f91
9546836a7d80c17d85cdd37a9553852f00af031b
4dc982a61a00481f4c9545f9f2da64098428b4aec96838de3c194fa82373ce1d
GET /theme_2/fonts/avertastd-black-webfont.woff2 HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 07 Jun 2025 10:17:42 GMT
content-type: font/woff2
content-length: 22820
cf-ray: 94bf66b94d46712d-OSL
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Mon, 07 Jul 2025 03:24:49 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 24570
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B2XB%2BihC8NGuf2aQ%2BMdIR9gbP9loV5Hc%2BXGvYMuE7M69rCovylP%2BlEkPOCaKtd6wzYgvbiNpxzQzWRZo6fXPMUBAGME4Cxt1rXxnYoxNBjKp2MJ4%2Ff6lNZCiWAPXlA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2850&min_rtt=2714&rtt_var=1290&sent=12&recv=8&lost=0&retrans=0&sent_bytes=4165&recv_bytes=1580&delivery_rate=168069&cwnd=12000&unsent_bytes=0&cid=dba56ff5bcb92665&ts=29&x=1", cfExtPri, cfHdrFlush;dur=0
GET undefined/V3NDYzE2ESAODjZOIUVEJR9+RgMRVnElVWYVc1ZHJUAwCUIiCnRNUjscNgdXJRwtFx85FjdGAxEYFlN0ZykEKkYbHywgaQQQLDZ3OxEZK2QQJgUlABomGiFzEEdwO2AWOxpRCDYyETkAHEMgL3UUPXsyZ2dCDTFVADo0AFMbOyAifB8mcjdWFRUaUVUOMRIUATExCiF1EzF7IWQeNw0afB0mBjJcHjIoKXUEGCw0cDA3Jw1/LiYWG1sNMhk2Yj4iLDRWFj0JJ3gFJS8qCBkhBTRkOjk7JF0FOxoifAUlLypaHDUzMGc5KToHWhEiGhlaFCYGB1YWC24lZgIaBlB0ARApOl8eMhAPe2EpAjlkFScaCmkgBws6YDQ0FSV/PRASNWQCQBkZcxY6DypiBSAAG0FlEHApZwIkJxVzEjobAV8WVSkQXjkDfhYIABUVAXYyOy4gVQU
0.0.0.0 0 B URL GET undefined/V3NDYzE2ESAODjZOIUVEJR9+RgMRVnElVWYVc1ZHJUAwCUIiCnRNUjscNgdXJRwtFx85FjdGAxEYFlN0ZykEKkYbHywgaQQQLDZ3OxEZK2QQJgUlABomGiFzEEdwO2AWOxpRCDYyETkAHEMgL3UUPXsyZ2dCDTFVADo0AFMbOyAifB8mcjdWFRUaUVUOMRIUATExCiF1EzF7IWQeNw0afB0mBjJcHjIoKXUEGCw0cDA3Jw1/LiYWG1sNMhk2Yj4iLDRWFj0JJ3gFJS8qCBkhBTRkOjk7JF0FOxoifAUlLypaHDUzMGc5KToHWhEiGhlaFCYGB1YWC24lZgIaBlB0ARApOl8eMhAPe2EpAjlkFScaCmkgBws6YDQ0FSV/PRASNWQCQBkZcxY6DypiBSAAG0FlEHApZwIkJxVzEjobAV8WVSkQXjkDfhYIABUVAXYyOy4gVQU
IP 0.0.0.0:0
Requested by https://vide0.net/e/pvwtlm4xdy9b
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /V3NDYzE2ESAODjZOIUVEJR9+RgMRVnElVWYVc1ZHJUAwCUIiCnRNUjscNgdXJRwtFx85FjdGAxEYFlN0ZykEKkYbHywgaQQQLDZ3OxEZK2QQJgUlABomGiFzEEdwO2AWOxpRCDYyETkAHEMgL3UUPXsyZ2dCDTFVADo0AFMbOyAifB8mcjdWFRUaUVUOMRIUATExCiF1EzF7IWQeNw0afB0mBjJcHjIoKXUEGCw0cDA3Jw1/LiYWG1sNMhk2Yj4iLDRWFj0JJ3gFJS8qCBkhBTRkOjk7JF0FOxoifAUlLypaHDUzMGc5KToHWhEiGhlaFCYGB1YWC24lZgIaBlB0ARApOl8eMhAPe2EpAjlkFScaCmkgBws6YDQ0FSV/PRASNWQCQBkZcxY6DypiBSAAG0FlEHApZwIkJxVzEjobAV8WVSkQXjkDfhYIABUVAXYyOy4gVQU HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiOJLEj5hdSlkA96JIQvSR0cpNUZk3zDRSkiA2quKKzyT9BY6lBHzfzGLSCrLhKCMJN2fQkinQ
142.250.147.84302 Found 0 B URL GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiOJLEj5hdSlkA96JIQvSR0cpNUZk3zDRSkiA2quKKzyT9BY6lBHzfzGLSCrLhKCMJN2fQkinQ
IP 142.250.147.84:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint7B:D2:02:FC:58:D9:E6:6C:DB:4E:0A:85:10:91:65:A5:9A:9C:5D:12
ValidityMon, 12 May 2025 08:42:58 GMT - Mon, 04 Aug 2025 08:42:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiOJLEj5hdSlkA96JIQvSR0cpNUZk3zDRSkiA2quKKzyT9BY6lBHzfzGLSCrLhKCMJN2fQkinQ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vide0.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:IflrvnY87ubxQC2AVKilt7tawPIxIQ:sOFYO-EWcHi1qo05;Path=/;Expires=Mon, 07-Jun-2027 10:17:44 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 07 Jun 2025 10:17:44 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiO-07jUTQnn8tRpOch5WOzeC5Tum2WPRnZm5anqqNMPHPv8rre9fk59luNV56KwxL2KebrKQQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1875710785%3A1749291464437556
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-_jt4Omp3qSQu7u94C-G0Vg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 419
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET i.doodcdn.io/img/no_video_3.svg
104.26.15.102200 OK 2.8 kB URL GET i.doodcdn.io/img/no_video_3.svg
IP 104.26.15.102:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.io
FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
File type SVG Scalable Vector Graphics image
Hash 077bfdaa49ae4877a42611b739ec4752
a2f9e1222b7af9abc05122411ab8902efcc08ead
70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c
GET /img/no_video_3.svg HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 07 Jun 2025 10:17:42 GMT
content-type: image/svg+xml
content-length: 2812
cf-ray: 94bf66b78dd80b59-OSL
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-afc"
expires: Mon, 07 Jul 2025 03:24:49 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 24573
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d%2B6jTNC1ekda%2Fx10czmbQ40mtlY6b0bPyp0LQ2OFm3ZhEUPfF1UMhgZEdkyjTHIhb6CSqN0kdZpTm0aUrhsuF81XNBYfq%2Bj9BVck2gaRLhwzNoZ8NJWCYAmZ7SohDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=760&min_rtt=461&rtt_var=584&sent=27&recv=13&lost=0&retrans=0&sent_bytes=29190&recv_bytes=1271&delivery_rate=6766355&cwnd=256&unsent_bytes=0&cid=e671ae62f8dd880a&ts=49&x=0"
X-Firefox-Spdy: h2
GET i.doodcdn.io/theme_2/fonts/avertastd-regular-webfont.woff2
104.26.15.102200 OK 24 kB URL GET i.doodcdn.io/theme_2/fonts/avertastd-regular-webfont.woff2
IP 104.26.15.102:443
Requested by https://vide0.net/e/pvwtlm4xdy9b
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.io
FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
File type Web Open Font Format (Version 2), TrueType, length 23812, version 1.524
Hash eb586e5a1b86dbf1c866e3ed80f9d18e
280ee78d19c017ab9335f769595e5157d3c4a343
714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf
GET /theme_2/fonts/avertastd-regular-webfont.woff2 HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 07 Jun 2025 10:17:42 GMT
content-type: font/woff2
content-length: 23812
cf-ray: 94bf66b94d48712d-OSL
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Mon, 07 Jul 2025 03:24:49 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 24536
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GGnZYxShbP4wdwsM8jNniShOeTXQkNs%2BJERXQ9tgfZ1Pe7tl7PwIVeiSmhLuodSTyLcHKZcycudsz%2FJMSCoo%2BqQMQSMrA1%2Bk4vQHBuu9SqX5663UL0Rf2CNXRJzvjw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2850&min_rtt=2714&rtt_var=1290&sent=22&recv=8&lost=0&retrans=0&sent_bytes=16165&recv_bytes=1580&delivery_rate=168069&cwnd=12000&unsent_bytes=0&cid=dba56ff5bcb92665&ts=29&x=1", cfExtPri, cfHdrFlush;dur=3