GET vide0.net/pass_md5/212491454-91-90-1749852616-1eded248781b0ed89b457d2e19076528/ifwmw1x463uqkvncp56n3ehj
200 OK 106 B URL GET vide0.net/pass_md5/212491454-91-90-1749852616-1eded248781b0ed89b457d2e19076528/ifwmw1x463uqkvncp56n3ehj
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectvide0.net
Fingerprint20:78:20:2F:2F:3F:97:4F:9D:EC:84:EF:FA:97:5A:F3:EC:A4:9D:70
ValidityThu, 05 Jun 2025 13:46:39 GMT - Wed, 03 Sep 2025 14:44:19 GMT
File type ASCII text, with no line terminators
Hash 9e05f0cf56408983822e902db1c38dfc
06e95a504ff2f3e1f55a3594b6ee49b789a3e405
ca16c90810e467d8d9848c90df24d7ae4d4f571876e1e227fa2617229a48c049
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pass_md5/212491454-91-90-1749852616-1eded248781b0ed89b457d2e19076528/ifwmw1x463uqkvncp56n3ehj HTTP/1.1
Host: vide0.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/e/94m5s75np98p
Cookie: lang=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 22:10:17 GMT
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HLfiiBpiqmL05BrmNagYfPrW4U4bl7u0nEoPpbEy3%2BsZWHaMYG6wZKz8KPWmEvdWg51WOOzdJ0DDBlyhmqXOU1VKYwfkSCU8dKIOgTSOvK%2FZoSdA4TI3%2BaQj%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 94f4eacb7fda56a3-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=7301&min_rtt=440&rtt_var=10963&sent=20&recv=17&lost=0&retrans=0&sent_bytes=14492&recv_bytes=1471&delivery_rate=8089385&cwnd=256&unsent_bytes=0&cid=33d84350bbd44240&ts=1220&x=0"
X-Firefox-Spdy: h2
GET img.doodcdn.io/splash/22wx6nh0vxh4iyi0.jpg
200 OK 81 kB URL GET img.doodcdn.io/splash/22wx6nh0vxh4iyi0.jpg
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.io
FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1264x715, components 3
Hash 0a24722a40df3f1f33170cd341b422c3
91cbc9e52a244435bad00cecb8df767f7d7c5e25
f240763ca48d9e28dcc8385991b1466e6d0a02b24452c367deaae217f7237479
GET /splash/22wx6nh0vxh4iyi0.jpg HTTP/1.1
Host: img.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 13 Jun 2025 22:10:17 GMT
content-type: image/jpeg
content-encoding: br
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=81069
etag: W/"6838f38f-13cad"
expires: Fri, 27 Jun 2025 21:26:33 GMT
last-modified: Thu, 29 May 2025 23:53:51 GMT
cf-cache-status: HIT
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X5anelEM%2F0T7XWCTYV%2FlFh9UfkcK0U45VnKlrg2CCSRiolxv%2FuWIvqZUT9%2F4JTtV7RHO0M07nsIXLeEMxcKz%2BP7Buza62UAvjLz6yCphz%2Bzlj%2F5eyHth9MTVOftST7y7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 94f4eacbedc456c4-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8581&min_rtt=8362&rtt_var=3573&sent=13&recv=8&lost=0&retrans=0&sent_bytes=4190&recv_bytes=1190&delivery_rate=63231&cwnd=12000&unsent_bytes=0&cid=a3fddda6d5c2999b&ts=218&x=1", cfExtPri, cfHdrFlush;dur=0
GET i.doodcdn.io/theme_2/img/loader.svg
200 OK 694 B URL GET i.doodcdn.io/theme_2/img/loader.svg
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.io
FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
File type exported SGML document, ASCII text
Hash be00fc4a29d03016e78b28c9943e3f51
10f2025f5aa96706cc81e050eadfcaa9bcc55af5
eec2c40d8b1bb98306990239204d8b90ca030f0def0e00dfe3117ae42991e126
GET /theme_2/img/loader.svg HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.io/css/embed.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 13 Jun 2025 22:10:17 GMT
content-type: image/svg+xml
content-encoding: br
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Sun, 13 Jul 2025 02:47:22 GMT
access-control-allow-origin: *
cf-cache-status: HIT
age: 67343
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5aWKKm8krrZeI%2Frro2msYzOr%2FOQep4Ds%2B6Gf2Ag7d8Dxgh%2BA0%2F7Hk3xrDDfXGCbzqfMU9w1%2BtrlwUeyDvDyaXDRNa2Xw58TrMsMdjt5EBkHv3KgfR5pNfx3qB2QKtg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 94f4eacc1de17130-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3386&min_rtt=1859&rtt_var=1788&sent=21&recv=7&lost=0&retrans=0&sent_bytes=16080&recv_bytes=1450&delivery_rate=345307&cwnd=12000&unsent_bytes=0&cid=87808c8b6fdc1bb6&ts=681&x=1", cfExtPri, cfHdrFlush;dur=6
GET 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
0 B URL GET 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
IP
Requested by https://vide0.net/e/94m5s75np98p
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /NWVPZURUBywIe1RYLUMxRwlyQHZzQH0jIAQDf1AyR1Y8DzdAHHhLJ1kKOgEiRwohEWpbADtAdnMdFVUsBysjMAF/HSc0JV0oJyAjQRYZVihwJH1UBnokHTEJBApqVwZ9VAYSEgc8FjA9cycGAhJvKjcBdXlXNwsJZ1E5PS5nMCocPAE8DFAxdA44HRNbDR4yLmQvA1U3ZCgODjZmEisfBlwSGiZ2cycfJB5vNSMKMHAjPBIHTyAaMgBCJi0CCm0EDgoqcSN3UAdMCRsnBns2FQ4dYT9+ASN0M3dSBUwGDTccdzMqJyx2BgkzcGcSFVISB1QJAQx3MyokaXMDAFQCDTA4MBxkCz8iEFgrGwcRY1UsIxIBJwonM2MkIy0GYiMFAAINMRVUJ0MgfjBhBycMInVwBggBHFAwFiIecwF6MDNnCQ42AXAwNSgNeCMCIAEEP3g0LF0JHjF1eSc4Qy5GCiEVeWw/fTMSbA0uVndvK3os HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
200 OK 1.3 kB URL GET cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77
ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
File type JavaScript source, ASCII text, with very long lines (1266)
Hash 4412bf8023109ee9eb1f1f226d391329
c273960aa874a87dd022b5e597887142f1b8e34f
d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6
GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 22:10:16 GMT
content-type: application/javascript; charset=utf-8
content-length: 591
cf-ray: 94f4eac72d507127-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-514"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 18570
expires: Wed, 03 Jun 2026 22:10:16 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dGTCIPAUTXY16D%2BcjFzinoYmcja0VtLTOrcdb7qfG8wBfERUW%2Buc%2B54tFByr0x%2FcsxJd50fDxdArbnjw1VnYEM72Sm3yvl6lBIzFXIKtfUFjA95mkyNFcHXMZNNj8l4%2FihKg77Kl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET baccytorve.com/r684b6a0187d13/70849
200 OK 82 kB URL GET baccytorve.com/r684b6a0187d13/70849
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerLet's Encrypt
Subjectbaccytorve.com
FingerprintAC:D6:C0:1C:2D:6F:EE:38:96:E5:51:E8:9D:F3:24:1D:AD:A4:F5:83
ValidityThu, 12 Jun 2025 18:08:02 GMT - Wed, 10 Sep 2025 18:08:01 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 766afc7668afb846635d1872bbe2b5b3
1f3f3877ba248e19dc513bdaace635abd36f9c49
5f26b96b03d0b7d31701a52701aedbc9efd1320aa6abb89580900eaff50f669c
GET /r684b6a0187d13/70849 HTTP/1.1
Host: baccytorve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jun 2025 22:10:16 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://vide0.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Sat, 14-Jun-2025 22:10:16 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Sat, 14-Jun-2025 22:10:16 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET i.doodcdn.io/css/embed.css
200 OK 80 kB URL GET i.doodcdn.io/css/embed.css
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.io
FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
File type Unicode text, UTF-8 text, with very long lines (40048)
Hash c4907b4a84bd80e4ccec940bf9d7f1ec
d36c11083cb2f86b99e2380d8c22cf13e74dbb29
f9535c07a6c50f5094b5a0caf5475823b3b32e9998a72cf6ad6d811dc7985d3d
GET /css/embed.css HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 22:10:16 GMT
content-type: text/css
cf-ray: 94f4eac77e4b56ab-OSL
last-modified: Wed, 05 Mar 2025 20:32:16 GMT
vary: Accept-Encoding
etag: W/"67c8b4d0-13811"
expires: Sun, 13 Jul 2025 03:24:55 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
content-encoding: gzip
cf-cache-status: HIT
age: 67345
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QN4V4p9GVqLg983QMRg077fV6NZ5R1djsVoQFnGWci37MSlbPyd%2FHknymP0UJLikAscnfXFtJT%2B8KquQwn8bpFhn%2BLZSiugbu0MyWqaPYetwewunHw6ePRWHF%2BB0rw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2414&min_rtt=2068&rtt_var=828&sent=8&recv=13&lost=0&retrans=0&sent_bytes=3266&recv_bytes=1389&delivery_rate=1967391&cwnd=254&unsent_bytes=0&cid=62100aa5d09f1d50&ts=121&x=0"
X-Firefox-Spdy: h2
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
302 Found 0 B URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint1E:69:E1:CB:BD:57:90:C7:05:07:13:A1:B7:8A:2B:61:F4:83:52:F3
ValidityMon, 19 May 2025 08:43:40 GMT - Mon, 11 Aug 2025 08:43:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:7GaVcN8HsXM_kfkEESAOMIHbKzqx1A:MkblVFlu1iCp-sqT; Expires=Sun, 13-Jun-2027 22:10:18 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 13 Jun 2025 22:10:18 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiObNMCwAVSA_FJPPyEQD3Zf0MtlwUOIWJpFReeDU-tRDmzYmPsas_Htog2ERqIsdNYyC01Ogw
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-FwKibjsrP_wB5JKuMFRbww' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET ukankingwithea.com/
200 OK 27 B IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70
ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File type ASCII text, with no line terminators
Hash 714d7cf500b21ee0edce6b98b94070a8
f5c814351ad7a402a5baa71397a7065925211429
56f21450fa38105dafa9eb013fea5a44e5db6a9bc29726706ce427a9fcf3456b
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vide0.net/
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 22:10:18 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://vide0.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=iG%2FpXoTCHYtFOcCl5lQ8QsMJX%2Bplt3x3HK3ODL68sb4H7n8e%2FQTZWaG4Mwfjclc6ek1EXis5iX4xCdacUdRyM%2B1EN5VZbgwh2VLA67DUhks%3D"}]}
content-encoding: br
set-cookie: csu=1611486950107032@1@1749852618; SameSite=None; Secure; Max-Age=31104000
cf-ray: 94f4eacfccd10b65-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js
200 OK 589 kB URL GET cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77
ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (48459)
Size 589 kB (589278 bytes)
Hash d7fdaaab43bc993b85290c713fd2d289
46bf3d27b2cf38b0e999d3b0a7613011181c87f9
c9535ea3a4e0af22e960ac1e32d363a71029f31aa96b29fc894e111fee49329e
GET /ajax/libs/video.js/7.21.5/video.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 22:10:16 GMT
content-type: application/javascript; charset=utf-8
content-length: 137405
cf-ray: 94f4eac78db97127-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64bb5c88-218bd"
last-modified: Sat, 22 Jul 2023 04:35:20 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2720
expires: Wed, 03 Jun 2026 22:10:16 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SutnUP%2F1uZZ7z35eMPqN1APdt3twWIAmoYhKvIlUAbsZeAwvb%2F6oT2kWfygekbwTnQIfbxv8vq%2B2iZSVev8nDTbgoxxLi9ppbb9rYRtUcA7VvjsZ1vQQHDoL461ZD10O64RFG7IO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET d1f05vr3sjsuy7.cloudfront.net/?srvfd=908056
200 OK 321 kB URL GET d1f05vr3sjsuy7.cloudfront.net/?srvfd=908056
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)
Size 321 kB (320863 bytes)
Hash d14671bff2d010aa43331aa334440ff8
2ee142a0aa111fb865e0cd9f3a21dfcc840ffe43
58f33ff63233d12e0cae8d810474525b30e12e57efafb45ba1a82af1e0c2b4a0
GET /?srvfd=908056 HTTP/1.1
Host: d1f05vr3sjsuy7.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 106905
date: Fri, 13 Jun 2025 21:37:50 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Fvzx2MBFBSoi99CYAp49LvEcaF5SnG2W6JNvkhHd34f8YhxiTU9GJQ==
age: 1946
X-Firefox-Spdy: h2
GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiO8KsCfD8fluc5h2y3B-jDgMBmok9i4c-eRZ4T9By0TU-jdhAkFEp0ZQ2dP5pfnsOkiPWTrYg
302 Found 0 B URL GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiO8KsCfD8fluc5h2y3B-jDgMBmok9i4c-eRZ4T9By0TU-jdhAkFEp0ZQ2dP5pfnsOkiPWTrYg
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint09:73:D4:56:AF:03:7E:40:3B:60:95:56:66:8D:E9:27:E0:DA:EC:DA
ValidityMon, 19 May 2025 08:41:43 GMT - Mon, 11 Aug 2025 08:41:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiO8KsCfD8fluc5h2y3B-jDgMBmok9i4c-eRZ4T9By0TU-jdhAkFEp0ZQ2dP5pfnsOkiPWTrYg HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vide0.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:zo6BijSasIG0XLI6w9d1jKpB7uG02A:6ffFjfFucQt_-AMT;Path=/;Expires=Sun, 13-Jun-2027 22:10:18 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 13 Jun 2025 22:10:18 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiMNj4mIHl0-V7UF3BiDfA5fIl3u8NpPeT3p0Dlaa5-11DRmnKlfSF9tePZxbwLSGn_5IUAgKQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1539963534%3A1749852618695330
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-CAj8upjO_gU7NKXOsLaLKA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 417
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET uio1105mk.cloudatacdn.com/favicon.ico?i
200 OK 15 kB URL GET uio1105mk.cloudatacdn.com/favicon.ico?i
IP
Requested by moz-nullprincipal:{6a25cd7c-890e-4ae0-93b3-3505d5e12f05}?https://vide0.net
Certificate IssuerSectigo Limited
Subject*.cloudatacdn.com
FingerprintD9:CB:D6:1F:B4:DA:36:1F:52:6C:5B:2E:68:48:4B:77:51:76:16:5B
ValidityWed, 31 Jul 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Hash 30d3656f43c817e38c3e7d70b2bfbdad
1aa43b43755e7cba5e145d0978517f7bedad7da6
a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555
GET /favicon.ico?i HTTP/1.1
Host: uio1105mk.cloudatacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jun 2025 22:10:18 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 15406
Connection: keep-alive
Last-Modified: Sat, 29 Feb 2020 09:26:04 GMT
ETag: "3c2e-59fb38b06e300"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
GET ukankingwithea.com/
200 OK 26 B IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70
ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File type ASCII text, with no line terminators
Hash 29994fd3f13c292d6e19e789bffaf3bf
9a1ea207fde50e6d74112d9eea36fac770389c1f
2c126f9783adc4c97f8a8fa4b8ce560a5652a33c5016587164dad71c07e7f7db
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vide0.net/
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 22:10:18 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://vide0.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=BF1fppKYXTnIN5byzVqtTYOa3y6%2BafpHY%2F9zT1GwTDV1hBNulKxAg7p%2BWVaD9igo2zQz9XoKRh3zFMbaYPMgobd5TcbkXacvY8aBKWo49bc%3D"}]}
content-encoding: br
set-cookie: csu=454333604159745@1@1749852618; SameSite=None; Secure; Max-Age=31104000
cf-ray: 94f4eacfaca90b65-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiObNMCwAVSA_FJPPyEQD3Zf0MtlwUOIWJpFReeDU-tRDmzYmPsas_Htog2ERqIsdNYyC01Ogw
302 Found 0 B URL GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiObNMCwAVSA_FJPPyEQD3Zf0MtlwUOIWJpFReeDU-tRDmzYmPsas_Htog2ERqIsdNYyC01Ogw
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint1E:69:E1:CB:BD:57:90:C7:05:07:13:A1:B7:8A:2B:61:F4:83:52:F3
ValidityMon, 19 May 2025 08:43:40 GMT - Mon, 11 Aug 2025 08:43:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiObNMCwAVSA_FJPPyEQD3Zf0MtlwUOIWJpFReeDU-tRDmzYmPsas_Htog2ERqIsdNYyC01Ogw HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vide0.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:sNiKqo5PxuZ3Tj1N9IpOXG_Fm0bB0A:L97VReSsQn3UMugN;Path=/;Expires=Sun, 13-Jun-2027 22:10:18 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 13 Jun 2025 22:10:18 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOtgzoZ47OhAHmhzvWETTqGmhBkIpQMrYh7vXEqQkNcoxkpMVfAVxJCfzk2kRcCNISyZojp8w&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1009557636%3A1749852618418712
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: script-src 'nonce-jmLbdXGrDI58kcXR4mxBgw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 416
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET tomlldahehun.org/multi?cs=c2lRcUREXWZDdkJQYEB9S1hnRnw&abt=0&red=1&sm=76&k=&v=1.0.60.4&sts=0&prn=0&emb=0&tid=901258&rxy=1280_1024&u=1611486950107032&agec=1749852618&fs=1&ref=https%3A%2F%2Fvide0.net%2Fe%2F94m5s75np98p&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_bYZG=1749852618622&crc=1
200 OK 3.8 kB URL GET tomlldahehun.org/multi?cs=c2lRcUREXWZDdkJQYEB9S1hnRnw&abt=0&red=1&sm=76&k=&v=1.0.60.4&sts=0&prn=0&emb=0&tid=901258&rxy=1280_1024&u=1611486950107032&agec=1749852618&fs=1&ref=https%3A%2F%2Fvide0.net%2Fe%2F94m5s75np98p&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_bYZG=1749852618622&crc=1
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerAmazon
Subjecttomlldahehun.org
Fingerprint6B:F0:7B:63:2B:19:E1:74:83:15:1A:BF:1B:B4:E6:71:68:14:57:3D
ValiditySun, 06 Apr 2025 00:00:00 GMT - Tue, 05 May 2026 23:59:59 GMT
File type ASCII text, with very long lines (3831), with no line terminators
Hash 8108894b7fd9c46587167cc0e451ae25
95007fb49c899db321f5f1495204c60aff334577
f548ab0988cd39c53986e301757bf5e155e23872f4d453a7b4f7b70eda31fa5c
GET /multi?cs=c2lRcUREXWZDdkJQYEB9S1hnRnw&abt=0&red=1&sm=76&k=&v=1.0.60.4&sts=0&prn=0&emb=0&tid=901258&rxy=1280_1024&u=1611486950107032&agec=1749852618&fs=1&ref=https%3A%2F%2Fvide0.net%2Fe%2F94m5s75np98p&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_bYZG=1749852618622&crc=1 HTTP/1.1
Host: tomlldahehun.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain
content-length: 1928
date: Fri, 13 Jun 2025 22:10:18 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=Mp+OrkOoo7imdKjnGWMOXwmTKNjM4sk331DCwW1C6pMBhtpmd7wqGxhS4hdHOKgl/iOi7Zb4S+KHIwhwPNzs2vCGGiWcWm1lAWjOmvL8Z3SZbuDUieIkXpI//hbH; Expires=Fri, 20 Jun 2025 22:10:18 GMT; Path=/
AWSALBCORS=Mp+OrkOoo7imdKjnGWMOXwmTKNjM4sk331DCwW1C6pMBhtpmd7wqGxhS4hdHOKgl/iOi7Zb4S+KHIwhwPNzs2vCGGiWcWm1lAWjOmvL8Z3SZbuDUieIkXpI//hbH; Expires=Fri, 20 Jun 2025 22:10:18 GMT; Path=/; SameSite=None
csu=33ef8a4d-6a4a-41e8-9b08-4610559eb3fb
csu=1611486950107032
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://vide0.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -iXEZFWD9kJJb9UmkSn186-M-nnCNHrPpAWRnNZ-0iU7H9va6td21A==
X-Firefox-Spdy: h2
GET static.doodcdn.io/js/embed3.js
200 OK 113 kB URL GET static.doodcdn.io/js/embed3.js
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.io
FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (27236)
Size 113 kB (112942 bytes)
Hash 2cdc3aa1ffb8ca7b629675d83b2862dc
be0a9072b9559c544d1c852c4559f5a64833c888
f23168d2b1910ff6e49bab3debce5786f7859e9e65ceda07a5554b66fd60f876
GET /js/embed3.js HTTP/1.1
Host: static.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 22:10:16 GMT
content-type: application/javascript
content-length: 112942
cf-ray: 94f4eac7ae8456ab-OSL
last-modified: Wed, 05 Mar 2025 20:27:01 GMT
etag: "67c8b395-1b92e"
expires: Sun, 13 Jul 2025 03:24:55 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 67342
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qyzVHUvc%2BNeiS0o3e64DSQIZ7o0c5%2BoYIhuYw%2Fir%2B5uk1tZoxiXuhnX%2FdptHKehZO3tU%2B4jzW%2FuKNC%2FqiS%2FBLhn5LeVMkGZE5vG5XIeOf7U0tTmXwzkd0lhsyYoi%2FTGGi6wn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=3131&min_rtt=2068&rtt_var=1455&sent=30&recv=17&lost=0&retrans=0&sent_bytes=26911&recv_bytes=1479&delivery_rate=3152810&cwnd=254&unsent_bytes=0&cid=62100aa5d09f1d50&ts=153&x=0"
X-Firefox-Spdy: h2
GET i.doodcdn.io/fonts/avertastd-regular-webfont.woff2
200 OK 24 kB URL GET i.doodcdn.io/fonts/avertastd-regular-webfont.woff2
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.io
FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
File type Web Open Font Format (Version 2), TrueType, length 23812, version 1.524
Hash eb586e5a1b86dbf1c866e3ed80f9d18e
280ee78d19c017ab9335f769595e5157d3c4a343
714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf
GET /fonts/avertastd-regular-webfont.woff2 HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 13 Jun 2025 22:10:17 GMT
content-type: font/woff2
content-length: 23812
cf-ray: 94f4eacc1de77130-OSL
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cache-control: max-age=2592000
expires: Sun, 13 Jul 2025 02:48:27 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 62146
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l3p%2FYQp9mmh%2FrwR1FqMN1bPwwDhdzPReqaAunXhUEmbolzanZr8otbAXLJ6ggFG6puHJsgmMVRUj1WLkYiMKqn%2BQoQ0fys%2BPTSt7TKByYNE0by3v9AKDUwBdATpi3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3386&min_rtt=1859&rtt_var=1788&sent=11&recv=7&lost=0&retrans=0&sent_bytes=4080&recv_bytes=1450&delivery_rate=345307&cwnd=12000&unsent_bytes=0&cid=87808c8b6fdc1bb6&ts=681&x=1", cfExtPri, cfHdrFlush;dur=0
GET anceenablesasm.com/eDd1ZFkZVRYJZhkKF0IsCltIQWs+EkciPUlRRVEvCgQGDioNTkJKOhRYAAA/ClgbEHcWUgFBaz5FJh4fIWEjAzYgXSweAwIOLDQeEF8QEzUXbjJRLSlkGhMJFm09KQ09DhAcYUp6NhwtL04GUhcSRDgpNABfPVc+NHYcDzw7f0EMEBEPOAURNQc+CGFdBTMFEUxCLR4tF1YiVQgocxEIPwBUBi4NG1AxIGkCeSZRPTFjFlYQFGVQVhsxcxlWATxUAykKHFM6PBsJcyQ2ayJvRFEYIHYcKQouYTsdEApVEio2N04NERhKXx4FHi11EzMAGVUSKjYxXTAIG0oaDRM4D1wgBTQtUBM1D0FtHRQsOQUSChUVAzYjDipFExxgF1E9VWw5Y00TFgF1EAIOG1IQNR8IbSIMbzlgGRM4FkMtKQobDjkybR9UMgsXOXABDD0WRC0oDhBHUw4qF1kFWTNBDiEtCi9GIF0
200 OK 3.1 kB URL GET anceenablesasm.com/eDd1ZFkZVRYJZhkKF0IsCltIQWs+EkciPUlRRVEvCgQGDioNTkJKOhRYAAA/ClgbEHcWUgFBaz5FJh4fIWEjAzYgXSweAwIOLDQeEF8QEzUXbjJRLSlkGhMJFm09KQ09DhAcYUp6NhwtL04GUhcSRDgpNABfPVc+NHYcDzw7f0EMEBEPOAURNQc+CGFdBTMFEUxCLR4tF1YiVQgocxEIPwBUBi4NG1AxIGkCeSZRPTFjFlYQFGVQVhsxcxlWATxUAykKHFM6PBsJcyQ2ayJvRFEYIHYcKQouYTsdEApVEio2N04NERhKXx4FHi11EzMAGVUSKjYxXTAIG0oaDRM4D1wgBTQtUBM1D0FtHRQsOQUSChUVAzYjDipFExxgF1E9VWw5Y00TFgF1EAIOG1IQNR8IbSIMbzlgGRM4FkMtKQobDjkybR9UMgsXOXABDD0WRC0oDhBHUw4qF1kFWTNBDiEtCi9GIF0
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerAmazon
Subjectanceenablesasm.com
FingerprintDD:6D:2A:66:42:35:E2:76:A8:7C:F3:B2:3B:66:D9:EC:12:1B:BB:A0
ValidityWed, 14 May 2025 00:00:00 GMT - Fri, 12 Jun 2026 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (3057), with no line terminators
Hash e15509920f2a4fd1433dc52304cd582b
99941b3257f2ccd9ed46f6872213d55ba8cdaab5
c155351cb40f8345febaf99bf809beab20a86769b3762bcad38635ae0ee4b01c
GET /eDd1ZFkZVRYJZhkKF0IsCltIQWs+EkciPUlRRVEvCgQGDioNTkJKOhRYAAA/ClgbEHcWUgFBaz5FJh4fIWEjAzYgXSweAwIOLDQeEF8QEzUXbjJRLSlkGhMJFm09KQ09DhAcYUp6NhwtL04GUhcSRDgpNABfPVc+NHYcDzw7f0EMEBEPOAURNQc+CGFdBTMFEUxCLR4tF1YiVQgocxEIPwBUBi4NG1AxIGkCeSZRPTFjFlYQFGVQVhsxcxlWATxUAykKHFM6PBsJcyQ2ayJvRFEYIHYcKQouYTsdEApVEio2N04NERhKXx4FHi11EzMAGVUSKjYxXTAIG0oaDRM4D1wgBTQtUBM1D0FtHRQsOQUSChUVAzYjDipFExxgF1E9VWw5Y00TFgF1EAIOG1IQNR8IbSIMbzlgGRM4FkMtKQobDjkybR9UMgsXOXABDD0WRC0oDhBHUw4qF1kFWTNBDiEtCi9GIF0 HTTP/1.1
Host: anceenablesasm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1206
date: Fri, 13 Jun 2025 22:10:17 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=z84/lzZDeNZxQxheB6eUFlUJhSDaaVstnV8TxgppWi+ZcJFYUy1QvL5Z9IGCG8utBMa9YH40Jhmy2OfuIG9qwDp4wjCfICEc3eKqvbzTlVFr+BdTLRGrKag8d+Cl; Expires=Fri, 20 Jun 2025 22:10:17 GMT; Path=/
AWSALBCORS=z84/lzZDeNZxQxheB6eUFlUJhSDaaVstnV8TxgppWi+ZcJFYUy1QvL5Z9IGCG8utBMa9YH40Jhmy2OfuIG9qwDp4wjCfICEc3eKqvbzTlVFr+BdTLRGrKag8d+Cl; Expires=Fri, 20 Jun 2025 22:10:17 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 c99d057689db169d0b27b6e562e255c2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: 6pEY4mGPGK2Vl2sQW4v-y4eV0sZ-e7RwMlRDD9ekTD_DxMJegrNhsQ==
X-Firefox-Spdy: h2
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 0 B URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint1E:69:E1:CB:BD:57:90:C7:05:07:13:A1:B7:8A:2B:61:F4:83:52:F3
ValidityMon, 19 May 2025 08:43:40 GMT - Mon, 11 Aug 2025 08:43:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:rD9wm932SEz4ISYZqxTdmSgapQQ2CA:z8058Uj2b_mO6LY4; Expires=Sun, 13-Jun-2027 22:10:18 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 13 Jun 2025 22:10:18 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiO8KsCfD8fluc5h2y3B-jDgMBmok9i4c-eRZ4T9By0TU-jdhAkFEp0ZQ2dP5pfnsOkiPWTrYg
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: unsafe-none
content-security-policy: script-src 'nonce-pIfcc0ydwCi007Woh53KBA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET i.doodcdn.io/img/no_video_3.svg
200 OK 2.8 kB URL GET i.doodcdn.io/img/no_video_3.svg
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.io
FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
File type SVG Scalable Vector Graphics image
Hash 077bfdaa49ae4877a42611b739ec4752
a2f9e1222b7af9abc05122411ab8902efcc08ead
70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c
GET /img/no_video_3.svg HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 22:10:16 GMT
content-type: image/svg+xml
content-length: 2812
cf-ray: 94f4eac77e4f56ab-OSL
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-afc"
expires: Sat, 12 Jul 2025 05:13:46 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 67162
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AcMOWumx9duDENg7rrK9D50kh6IVZJilWWoyvxS7AWXGFjJBBI2uv1Vx%2FRxgkD0fJ4amq3P9jTGcChPiQzvImPJ6nJxC%2FHdCEcIQ3Bm8GI3pkMKK3aNUaFBjORS%2BhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2414&min_rtt=2068&rtt_var=828&sent=26&recv=13&lost=0&retrans=0&sent_bytes=23508&recv_bytes=1389&delivery_rate=1967391&cwnd=254&unsent_bytes=0&cid=62100aa5d09f1d50&ts=128&x=0"
X-Firefox-Spdy: h2
GET undefined/WHNsc2Q5EQ8eWzlODlURKh9RVlYeVl41AGkVXEYSKkAfGRctCltdBzQcGRcCKhwCB0o2FhhWVh4gDzRRHSUWFDAZIAMLJi8iJDojNzE+QhRqKhsHMxAZNQo8M0M1PzAWFz02JSk+BwszGjcPRzI/MTg2E20RLiIlKD06MjIAHiUZNTAhOBcsHiYpIiUyEgRHMhkwCAInDio8OiANNT42AyA9CyYAGSdYVlYaJS4ENAEkOlZWGiE5MVQ7FBwyNjI+SUEmDhs9MSkhIggiCGwCJQtVGysCJQoeGC4/ACAmCCIIbAk8Hz4fJAE1Dz0fOhAAG0sjISEsQCohVRsrBl49MDs5PhI8JD0+PDRGGBADKDIvICFoJhRKKDwbKTg1HkpcKRM0MjRBIjQwLiosFhkmFiwgKQQpPG0xNCsmbTAqKgY9JDVVDiscAgNZDyoPBgo1EQQWVA
0 B URL GET undefined/WHNsc2Q5EQ8eWzlODlURKh9RVlYeVl41AGkVXEYSKkAfGRctCltdBzQcGRcCKhwCB0o2FhhWVh4gDzRRHSUWFDAZIAMLJi8iJDojNzE+QhRqKhsHMxAZNQo8M0M1PzAWFz02JSk+BwszGjcPRzI/MTg2E20RLiIlKD06MjIAHiUZNTAhOBcsHiYpIiUyEgRHMhkwCAInDio8OiANNT42AyA9CyYAGSdYVlYaJS4ENAEkOlZWGiE5MVQ7FBwyNjI+SUEmDhs9MSkhIggiCGwCJQtVGysCJQoeGC4/ACAmCCIIbAk8Hz4fJAE1Dz0fOhAAG0sjISEsQCohVRsrBl49MDs5PhI8JD0+PDRGGBADKDIvICFoJhRKKDwbKTg1HkpcKRM0MjRBIjQwLiosFhkmFiwgKQQpPG0xNCsmbTAqKgY9JDVVDiscAgNZDyoPBgo1EQQWVA
IP
Requested by https://vide0.net/e/94m5s75np98p
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /WHNsc2Q5EQ8eWzlODlURKh9RVlYeVl41AGkVXEYSKkAfGRctCltdBzQcGRcCKhwCB0o2FhhWVh4gDzRRHSUWFDAZIAMLJi8iJDojNzE+QhRqKhsHMxAZNQo8M0M1PzAWFz02JSk+BwszGjcPRzI/MTg2E20RLiIlKD06MjIAHiUZNTAhOBcsHiYpIiUyEgRHMhkwCAInDio8OiANNT42AyA9CyYAGSdYVlYaJS4ENAEkOlZWGiE5MVQ7FBwyNjI+SUEmDhs9MSkhIggiCGwCJQtVGysCJQoeGC4/ACAmCCIIbAk8Hz4fJAE1Dz0fOhAAG0sjISEsQCohVRsrBl49MDs5PhI8JD0+PDRGGBADKDIvICFoJhRKKDwbKTg1HkpcKRM0MjRBIjQwLiosFhkmFiwgKQQpPG0xNCsmbTAqKgY9JDVVDiscAgNZDyoPBgo1EQQWVA HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
OPTIONS segarkojiri.top/cuid/?f=https%3A%2F%2Fvide0.net
200 OK 0 B URL OPTIONS segarkojiri.top/cuid/?f=https%3A%2F%2Fvide0.net
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerZeroSSL
Subjectsegarkojiri.top
FingerprintB1:D1:99:D4:6E:8F:E8:95:E2:D6:F3:32:5C:83:EB:8C:7C:23:2A:D7
ValidityTue, 22 Apr 2025 00:00:00 GMT - Mon, 21 Jul 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /cuid/?f=https%3A%2F%2Fvide0.net HTTP/1.1
Host: segarkojiri.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://vide0.net/
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jun 2025 22:10:17 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://vide0.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET vide0.net/favicon.ico
200 OK 15 kB IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectvide0.net
Fingerprint20:78:20:2F:2F:3F:97:4F:9D:EC:84:EF:FA:97:5A:F3:EC:A4:9D:70
ValidityThu, 05 Jun 2025 13:46:39 GMT - Wed, 03 Sep 2025 14:44:19 GMT
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Hash 30d3656f43c817e38c3e7d70b2bfbdad
1aa43b43755e7cba5e145d0978517f7bedad7da6
a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: vide0.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/e/94m5s75np98p
Cookie: lang=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 22:10:18 GMT
content-type: image/x-icon
content-length: 15406
cf-ray: 94f4eacf4ca256a3-OSL
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-3c2e"
expires: Sat, 05 Jul 2025 20:17:03 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 697995
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sryOh4ZDRJ%2FvF3ZyYLczRUMCSjsif9lwEMgdA9toTr%2BEaLx0SQrd3k9l2Bvd4%2FNJg3ZQbKj2NNrUNe4DqCvDgLUfs9bJ32DvNTyN4EoL2LWeHlh7MVtw9BvEGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
server-timing: cfL4;desc="?proto=TCP&rtt=5050&min_rtt=440&rtt_var=8010&sent=24&recv=21&lost=0&retrans=0&sent_bytes=15089&recv_bytes=1588&delivery_rate=8089385&cwnd=256&unsent_bytes=0&cid=33d84350bbd44240&ts=1769&x=0"
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiMNj4mIHl0-V7UF3BiDfA5fIl3u8NpPeT3p0Dlaa5-11DRmnKlfSF9tePZxbwLSGn_5IUAgKQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1539963534%3A1749852618695330
403 Forbidden 0 B URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiMNj4mIHl0-V7UF3BiDfA5fIl3u8NpPeT3p0Dlaa5-11DRmnKlfSF9tePZxbwLSGn_5IUAgKQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1539963534%3A1749852618695330
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint09:73:D4:56:AF:03:7E:40:3B:60:95:56:66:8D:E9:27:E0:DA:EC:DA
ValidityMon, 19 May 2025 08:41:43 GMT - Mon, 11 Aug 2025 08:41:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiMNj4mIHl0-V7UF3BiDfA5fIl3u8NpPeT3p0Dlaa5-11DRmnKlfSF9tePZxbwLSGn_5IUAgKQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1539963534%3A1749852618695330 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vide0.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 13 Jun 2025 22:10:18 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-security-policy: script-src 'nonce-04hE_X3Q9KCr3ZbauZUkQA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.Kmu9ycRrjV8.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET vide0.net/e/94m5s75np98p
200 OK 31 kB IP
Certificate IssuerGoogle Trust Services
Subjectvide0.net
Fingerprint20:78:20:2F:2F:3F:97:4F:9D:EC:84:EF:FA:97:5A:F3:EC:A4:9D:70
ValidityThu, 05 Jun 2025 13:46:39 GMT - Wed, 03 Sep 2025 14:44:19 GMT
File type HTML document, ASCII text, with very long lines (30626), with no line terminators
Hash 3c53be32314a5565e691f8c75c1104aa
92d11af491150bf7b9ef4c539819660c251b659e
a1383f0da856b03c0872b4228b830918e6ddb719cc452daf4076cd8e3a653119
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /e/94m5s75np98p HTTP/1.1
Host: vide0.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 22:10:16 GMT
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
expires: Thu, 12 Jun 2025 22:10:16 GMT
set-cookie: lang=1; domain=.vide0.net; path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mGypK39%2Bid0ay1hX5TZtjYKLjZDjtyZhiAZxEkLeT4XLr%2BG53ICRXxG81o635BI%2Fk%2F01vAA8j01AHoJhNjo8wnZchgsP9hAB4Ob5VNa2NoFlsxKs45YgQYBngA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 94f4eac47ffe56a3-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1681&min_rtt=440&rtt_var=1902&sent=8&recv=10&lost=0&retrans=0&sent_bytes=3267&recv_bytes=1253&delivery_rate=8089385&cwnd=254&unsent_bytes=0&cid=33d84350bbd44240&ts=142&x=0"
X-Firefox-Spdy: h2
GET i.doodcdn.io/img/logo-s.png
200 OK 1.9 kB URL GET i.doodcdn.io/img/logo-s.png
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.io
FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
File type RIFF (little-endian) data, Web/P image
Hash f0c6bed8c2b7297aab801aa1c449dd14
f44f3ee770d099eedc8ecc32fe5d5a2be9d6bd16
0c591bf4d1b3bd51127f30c9c1f4a727bdf146a60d1a8106bfd575f2bf68c9f3
GET /img/logo-s.png HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 13 Jun 2025 22:10:17 GMT
content-type: image/webp
content-length: 1932
cf-ray: 94f4eacdafaf7130-OSL
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=6212
content-disposition: inline; filename="logo-s.webp"
etag: "61d3187c-1844"
expires: Sat, 12 Jul 2025 06:06:44 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: Accept
cf-cache-status: HIT
age: 67343
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kZgeJLqyDOt4TuahnmG2AFhw5IDNOh%2FAt9v5mLpRw9h2kX4bD7L1KTAtRo1bT6nadR%2BgZzn20XzEkH%2F7JGemwaYnn%2FFy7622WOAFfvenPR5MfcXqspiFBdTd7FV0Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3211&min_rtt=1859&rtt_var=1298&sent=35&recv=11&lost=0&retrans=0&sent_bytes=30409&recv_bytes=2083&delivery_rate=5107341&cwnd=24000&unsent_bytes=0&cid=87808c8b6fdc1bb6&ts=925&x=1", cfExtPri, cfHdrFlush;dur=0
GET i.doodcdn.io/get_slides/1189/22wx6nh0vxh4iyi0.jpg
200 OK 3.2 kB URL GET i.doodcdn.io/get_slides/1189/22wx6nh0vxh4iyi0.jpg
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.io
FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
Hash 1a1426c5856cc6b89a4230961bb61b9e
9d772ea6ed817780f6fc3f23408d05e81d6cd772
381cfda4231c62f899e2380b5b32724dcede5fbafb8eecec284e80db2e19bd2e
GET /get_slides/1189/22wx6nh0vxh4iyi0.jpg HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 13 Jun 2025 22:10:17 GMT
content-type: text/vtt
content-encoding: br
access-control-allow-origin: *
last-modified: Fri, 13 Jun 2025 21:26:34 GMT
cache-control: max-age=86400
cf-cache-status: HIT
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G%2F99TRWE5IReccbNcsDujbnTTjr1zdSG128of%2FtS6yMcBGjk0P%2BkXFywfpY3yzVWyoZgvNp%2FqsF2ahcW1TlhWmsBCtpjR66vaZ5A0xwkivYwfYOs%2FVZV%2BOaTd6Sd%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 94f4eacdafb27130-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3079&min_rtt=1859&rtt_var=1238&sent=38&recv=12&lost=0&retrans=0&sent_bytes=33251&recv_bytes=2127&delivery_rate=215779&cwnd=24000&unsent_bytes=0&cid=87808c8b6fdc1bb6&ts=979&x=1", cfExtPri, cfHdrFlush;dur=0
POST segarkojiri.top/cuid/?f=https%3A%2F%2Fvide0.net
200 OK 32 B URL POST segarkojiri.top/cuid/?f=https%3A%2F%2Fvide0.net
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerZeroSSL
Subjectsegarkojiri.top
FingerprintB1:D1:99:D4:6E:8F:E8:95:E2:D6:F3:32:5C:83:EB:8C:7C:23:2A:D7
ValidityTue, 22 Apr 2025 00:00:00 GMT - Mon, 21 Jul 2025 23:59:59 GMT
Hash a321cd0e243543d1ef47ee026a98fffa
ae58e69a40bdf354a427b4e27409046d28457e23
1a204dacce195ad4879ccd63a1882800920e39ba4327c0bd36014685c0e298aa
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /cuid/?f=https%3A%2F%2Fvide0.net HTTP/1.1
Host: segarkojiri.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vide0.net/
Content-Type: application/json
Content-Length: 10
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jun 2025 22:10:18 GMT
Content-Type: application/json
Content-Length: 32
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://vide0.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: a97fa794a0f9=67f93500e1244f9df5d740; expires=Sun, 27 Oct 2052 10:50:49 GMT; domain=segarkojiri.top; path=/; secure; SameSite=None
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET i.doodcdn.io/ads/ad.js
200 OK 20 B IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.io
FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
File type ASCII text, with no line terminators
Hash 69a305bcdc8e061bbd43294a477a3678
506582a1d912d546f5942d95ffae95ec7f4c37ce
8964d85afd6d5d84b97872464646809c952ab900cdf5c5d7c3b7b4bdb74202fa
GET /ads/ad.js HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 22:10:16 GMT
content-type: application/javascript
content-length: 20
cf-ray: 94f4eac78e5c56ab-OSL
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cache-control: public, max-age=2592000
expires: Sat, 13 Jun 2026 02:50:29 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 67345
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LQ9jhsfPG1kZrAMrqeLbr8cy1VWC3Ash1xMap8rAobA0gqhfsXcVuB66%2FpzW%2FfUikA2pOsx5lPkTGsIrdJYBgg0SeZmOevxEB0brXwDPc9E%2BZQUXgTIY%2B0MGPebJ3A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2414&min_rtt=2068&rtt_var=828&sent=24&recv=13&lost=0&retrans=0&sent_bytes=22891&recv_bytes=1389&delivery_rate=1967391&cwnd=254&unsent_bytes=0&cid=62100aa5d09f1d50&ts=121&x=0"
X-Firefox-Spdy: h2
GET entwithoughtsu.com/aEgyT0hHd1E8dQ0mcCApPRJxHh4QGVEkICAQXj97Ow14LRAGcBQ7IQx1C39wWH0EaTgBLA9+bhs8Uzs9G3UDaSEGLl1ybh51A2F7XGYBeWZdbkdyeU48Qi4vVXkUPzwcJA9+f1xxCnp6XnkFenxa
204 No Content 0 B URL GET entwithoughtsu.com/aEgyT0hHd1E8dQ0mcCApPRJxHh4QGVEkICAQXj97Ow14LRAGcBQ7IQx1C39wWH0EaTgBLA9+bhs8Uzs9G3UDaSEGLl1ybh51A2F7XGYBeWZdbkdyeU48Qi4vVXkUPzwcJA9+f1xxCnp6XnkFenxa
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectentwithoughtsu.com
Fingerprint9F:4E:E2:30:75:A9:98:9D:2D:DE:B6:6E:85:FF:D4:16:C1:52:D1:33
ValidityWed, 11 Jun 2025 06:22:56 GMT - Tue, 09 Sep 2025 07:20:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aEgyT0hHd1E8dQ0mcCApPRJxHh4QGVEkICAQXj97Ow14LRAGcBQ7IQx1C39wWH0EaTgBLA9+bhs8Uzs9G3UDaSEGLl1ybh51A2F7XGYBeWZdbkdyeU48Qi4vVXkUPzwcJA9+f1xxCnp6XnkFenxa HTTP/1.1
Host: entwithoughtsu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 13 Jun 2025 22:10:17 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2B7myNfWkKSY3S8kGQUGNg%2FbaU%2FzWMiUmKre7Aq%2BvLzUqIyEc9avG99t0EZ%2BgjsynE9DohA4sAfwmB0rdihLiIu4D5j4cn7v1j5Myn3V%2BLYc%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 94f4eacc38b61c02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET entwithoughtsu.com/RUdFb3lqeCYcRCQDIS0rExUjLkofdB8DEgokDT0NEAYfXBooMGMbECF6fF9Id3J9SQksI3hdQGM0MQ4NMDR4Xl8sKSMARGMxeF5XdWlzX1dxYTBSSGMzNQ4eeHZjHw0xK3heTnF+fVpLc3ZyWk52
204 No Content 0 B URL GET entwithoughtsu.com/RUdFb3lqeCYcRCQDIS0rExUjLkofdB8DEgokDT0NEAYfXBooMGMbECF6fF9Id3J9SQksI3hdQGM0MQ4NMDR4Xl8sKSMARGMxeF5XdWlzX1dxYTBSSGMzNQ4eeHZjHw0xK3heTnF+fVpLc3ZyWk52
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectentwithoughtsu.com
Fingerprint9F:4E:E2:30:75:A9:98:9D:2D:DE:B6:6E:85:FF:D4:16:C1:52:D1:33
ValidityWed, 11 Jun 2025 06:22:56 GMT - Tue, 09 Sep 2025 07:20:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /RUdFb3lqeCYcRCQDIS0rExUjLkofdB8DEgokDT0NEAYfXBooMGMbECF6fF9Id3J9SQksI3hdQGM0MQ4NMDR4Xl8sKSMARGMxeF5XdWlzX1dxYTBSSGMzNQ4eeHZjHw0xK3heTnF+fVpLc3ZyWk52 HTTP/1.1
Host: entwithoughtsu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 13 Jun 2025 22:10:17 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1fAbh9nda3vRbTmPpviL5i7%2BcjsrZaBeKWTp0pbwZOsNJHN42%2BvXP9JCsVv6%2FIRrG07Yb8X0eZBmQze%2Fbb2qHLEEW6CphmjG6fpJHaFOxKs%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 94f4eacc99001c02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
OPTIONS hoptreeperrie.shop/gd/70849?md=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&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A
200 OK 5 B URL OPTIONS hoptreeperrie.shop/gd/70849?md=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&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerLet's Encrypt
Subjecthoptreeperrie.shop
FingerprintC6:93:EA:0D:2E:33:EB:CD:93:C7:EA:53:6D:B5:0C:7B:CC:38:E5:85
ValidityTue, 22 Apr 2025 20:48:41 GMT - Mon, 21 Jul 2025 20:48:40 GMT
File type ASCII text, with no line terminators
Hash 0d7a61a5ae2424f444691dfa38e694ae
dfb2f770cb7740844d94d2a2517af244b34c56ae
e3c083d0e62029a9fc90700e7effced43eb213718ad4e7517e5b05a5a0ad9e49
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /gd/70849?md=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&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A HTTP/1.1
Host: hoptreeperrie.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://vide0.net/
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jun 2025 22:10:17 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://vide0.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET ukankingwithea.com/asd100.bin
404 Not Found 159 B URL GET ukankingwithea.com/asd100.bin
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70
ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash fb9666f93e418b95fea8fdbc20e80af9
d4eefca1b299cc266a80e83c9e39c4261cb87583
c6252ea6e785c1dc0d44dab86653a7209eb507e45b70d138ce515576743b64f7
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vide0.net/
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Fri, 13 Jun 2025 22:10:18 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
age: 81
cache-control: max-age=14400
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=a6gyYwYDSJtZ4%2FJ7FH5Wf6VO0hkQsQBumG2SkWXkvHC%2BiCsLlJ2XTqSy4NfDL0oRbz8%2FpUUlggYDlhiMp%2B6b0Hjmo5su5ErCc2t1Lk96YoM%3D"}]}
content-encoding: br
cf-ray: 94f4eacfbcb10b65-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOtgzoZ47OhAHmhzvWETTqGmhBkIpQMrYh7vXEqQkNcoxkpMVfAVxJCfzk2kRcCNISyZojp8w&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1009557636%3A1749852618418712
403 Forbidden 0 B URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOtgzoZ47OhAHmhzvWETTqGmhBkIpQMrYh7vXEqQkNcoxkpMVfAVxJCfzk2kRcCNISyZojp8w&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1009557636%3A1749852618418712
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint1E:69:E1:CB:BD:57:90:C7:05:07:13:A1:B7:8A:2B:61:F4:83:52:F3
ValidityMon, 19 May 2025 08:43:40 GMT - Mon, 11 Aug 2025 08:43:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOtgzoZ47OhAHmhzvWETTqGmhBkIpQMrYh7vXEqQkNcoxkpMVfAVxJCfzk2kRcCNISyZojp8w&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1009557636%3A1749852618418712 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vide0.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 13 Jun 2025 22:10:18 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-S7RumLSYBMb2cMZ5qc_EMQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.Kmu9ycRrjV8.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
200 OK 90 kB URL GET cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77
ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 22:10:16 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
cf-ray: 94f4eac73d607127-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3804
expires: Wed, 03 Jun 2026 22:10:16 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bR179cJoDEodIvByzC7b9t6UZv52LizbprGM858XavqEkk4bz9av7%2FrD%2FIEB1fwBtYUaTRwXu8sOePAoJEET77WMET9wYIxo98bmL76j%2BKbq8Tidm5euXymGz9lfaNT9nUF3ywwu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js
200 OK 4.6 kB URL GET cdnjs.cloudflare.com/ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77
ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
File type JavaScript source, ASCII text, with very long lines (4505)
Hash f2ecb2bd8a424c8e8cf507ce8bd933c2
3cbc08ca052ea25c3b0834b9291a3ca1e9122e26
4c0745052abbb26087a707bb0a043b43c393674055ba2d4452ac89e6923eb099
GET /ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 22:10:16 GMT
content-type: application/javascript; charset=utf-8
content-length: 1571
cf-ray: 94f4eac7ade47127-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "630ad3e5-623"
last-modified: Sun, 28 Aug 2022 02:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 434510
expires: Wed, 03 Jun 2026 22:10:16 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mZxUDN9qPl8wnwDfeZ897ZPlu1L02w3ObStZm%2B%2Fv3YkHoLQ6A1EC73qwaCsk8TZh4AmpEZS1zjlgUIdgfwxPYL2VTYNnBXaFv3SdZ%2BrCIZQ%2BE1ZEFx%2BVO0WnQ2bir3O1sH6CnbyQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET entwithoughtsu.com/aFZaTXVHaTk+SDI7MhcmWmcPFRgAbwwLPzk3EjUWPWdrJRAEJXw5HAxrY3pBWmJpawUBMmd8TU4lLiwBHSVnfFMBODwiSE4gZ3xbWHhoY0BOI2d8UxwmOypIWXAqOQEEa2t6QVFub39DWWFvdEQ
204 No Content 0 B URL GET entwithoughtsu.com/aFZaTXVHaTk+SDI7MhcmWmcPFRgAbwwLPzk3EjUWPWdrJRAEJXw5HAxrY3pBWmJpawUBMmd8TU4lLiwBHSVnfFMBODwiSE4gZ3xbWHhoY0BOI2d8UxwmOypIWXAqOQEEa2t6QVFub39DWWFvdEQ
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerGoogle Trust Services
Subjectentwithoughtsu.com
Fingerprint9F:4E:E2:30:75:A9:98:9D:2D:DE:B6:6E:85:FF:D4:16:C1:52:D1:33
ValidityWed, 11 Jun 2025 06:22:56 GMT - Tue, 09 Sep 2025 07:20:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aFZaTXVHaTk+SDI7MhcmWmcPFRgAbwwLPzk3EjUWPWdrJRAEJXw5HAxrY3pBWmJpawUBMmd8TU4lLiwBHSVnfFMBODwiSE4gZ3xbWHhoY0BOI2d8UxwmOypIWXAqOQEEa2t6QVFub39DWWFvdEQ HTTP/1.1
Host: entwithoughtsu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vide0.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 13 Jun 2025 22:10:17 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=QOkykA4i5UovdGUoltgCJ8a1RoKOS4joi7ZMpsvsb9bYFseg%2FjDl76oD7b3sxu2hXb8MpOAiBiXJy9cVGcHu%2FCOcFM%2F8Xz%2FbvmrHLK0xluY%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 94f4eacc99061c02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
POST hoptreeperrie.shop/gd/70849?md=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&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A
200 OK 669 B URL POST hoptreeperrie.shop/gd/70849?md=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&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A
IP
Requested by https://vide0.net/e/94m5s75np98p
Certificate IssuerLet's Encrypt
Subjecthoptreeperrie.shop
FingerprintC6:93:EA:0D:2E:33:EB:CD:93:C7:EA:53:6D:B5:0C:7B:CC:38:E5:85
ValidityTue, 22 Apr 2025 20:48:41 GMT - Mon, 21 Jul 2025 20:48:40 GMT
Hash 0165471fa6ef92c5350e23becd4f5524
a252311f6219e27a909fd9c1aa8427e6bb79be02
238d3a77540b14630469038323c79fa0e60257d666e28f8e642c423e66fb0719
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /gd/70849?md=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&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A HTTP/1.1
Host: hoptreeperrie.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vide0.net/
Content-Type: application/json
Content-Length: 82
Origin: https://vide0.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jun 2025 22:10:18 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://vide0.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Sat, 14-Jun-2025 22:10:18 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Sat, 14-Jun-2025 22:10:18 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
104.26.3.102
54.230.245.227
188.42.108.132
141.94.30.192