r11.o.lencr.org/
504 B IP
ASN #20940 Akamai International B.V.
Hash 686480d25645ac2aca7a99974693a82f
55ca9d53bd758d2afc75e8a9b59c656ff26a3f70
8902058e383c2f43751417e1af1d582f7a16ce0b6fc180ab20cbc76c4b00f914
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8902058E383C2F43751417E1AF1D582F7A16CE0B6FC180AB20CBC76C4B00F914"
Last-Modified: Wed, 14 Aug 2024 12:55:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4096
Expires: Thu, 15 Aug 2024 11:07:44 GMT
Date: Thu, 15 Aug 2024 09:59:28 GMT
Connection: keep-alive
r10.o.lencr.org/
504 B IP
ASN #20940 Akamai International B.V.
Hash 90149b127cd563315012f026a9e0544f
1e148905fa524fb8fec15249f30f33085978dc2e
7098a3b23aece2b00e86fd3a23c5e532001a5002b061170d3ed53ddd36bf8f5b
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "7098A3B23AECE2B00E86FD3A23C5E532001A5002B061170D3ED53DDD36BF8F5B"
Last-Modified: Tue, 13 Aug 2024 18:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9903
Expires: Thu, 15 Aug 2024 12:44:31 GMT
Date: Thu, 15 Aug 2024 09:59:28 GMT
Connection: keep-alive
r10.o.lencr.org/
504 B IP
ASN #20940 Akamai International B.V.
Hash 4d209e16679910b467c26590a0073236
ddd59fa6902b498e9c0cfb22e342757f954789d0
9ef3dab56215a67804db0e12d33772a1902f5914b788530717712902a294bcb5
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "9EF3DAB56215A67804DB0E12D33772A1902F5914B788530717712902A294BCB5"
Last-Modified: Wed, 14 Aug 2024 21:59:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17396
Expires: Thu, 15 Aug 2024 14:49:25 GMT
Date: Thu, 15 Aug 2024 09:59:29 GMT
Connection: keep-alive
r10.o.lencr.org/
504 B IP
ASN #20940 Akamai International B.V.
Hash 1401eaecc1dc9b318d389cf687018dd9
49eef7150c440fee15deabf064e11a9fefad1845
5b79b468e1cac072d2582b2937241a1f1bee8fdbbc4741818061b6763652523e
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5B79B468E1CAC072D2582B2937241A1F1BEE8FDBBC4741818061B6763652523E"
Last-Modified: Tue, 13 Aug 2024 18:57:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3030
Expires: Thu, 15 Aug 2024 10:49:59 GMT
Date: Thu, 15 Aug 2024 09:59:29 GMT
Connection: keep-alive
3.142.138.123/kioscos/kioscobanner3.0/index.php
7.7 kB URL User Request GET 3.142.138.123/kioscos/kioscobanner3.0/index.php
IP
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (584), with CRLF line terminators
Hash 3b539b2cc221eee98785b18810c90175
97fd9f4cd47833e4012170234cf5d0e93ec5c456
7d3005c4473c6e85e3bd9047578efebac3608037fa37e1c9be5bcc49e7d6a3a9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/index.php HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
Set-Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6; path=/
X-Powered-By: PHP/5.6.8, ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 7692
cdnjs.cloudflare.com/ajax/libs/jquery-easing/1.3/jquery.easing.min.js
200 OK 1.9 kB URL GET HTTP/1.1 cdnjs.cloudflare.com/ajax/libs/jquery-easing/1.3/jquery.easing.min.js
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type Unicode text, UTF-8 text, with very long lines (3601)
Hash 3eac3c72434a0945b92dd4a01f7b6b4e
7767b356530e39cd76ec259320b0b2774b4097a8
ac3f3a757bfbfc9d92bc8f5e6e6362e5d4ae41dbf3cebacdda9b8f71afc82e5b
GET /ajax/libs/jquery-easing/1.3/jquery.easing.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 1891
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=30672000
Content-Encoding: gzip
ETag: "5eb03ec1-15b3"
Last-Modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 3059759
Expires: Tue, 05 Aug 2025 09:59:29 GMT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rkuKP5lQPA7Z5iOaYf5JFvObhdHzCZwbDmYy5pPDFe0JmjkwY8z3FBYK7DveWs6YW3u560BOrgArfrcCwVxWkip0Mw3JetEhPH5CEq1Pv%2FhW5fm1YM5WoEVSnJ77hO%2FLzN7dCqPH"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8b38550c4c4b5688-OSL
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Chela+One
200 OK 356 B URL GET HTTP/1.1 fonts.googleapis.com/css?family=Chela+One
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Hash 27c47d73d5019578653a531aa11c1d68
d101048f6b42e279db0cab25e2e314dd6d185323
1ff33dad48f884137f7f2980829a2e216256005513c5ad99adfb2cdeb20d1f47
GET /css?family=Chela+One HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Thu, 15 Aug 2024 09:59:29 GMT
Date: Thu, 15 Aug 2024 09:59:29 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js
200 OK 33 kB URL GET HTTP/1.1 ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type JavaScript source, ASCII text, with very long lines (32089)
Hash 397754ba49e9e0cf4e7c190da78dda05
ae49e56999d82802727455f0ba83b63acd90a22b
c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4
GET /ajax/libs/jquery/1.9.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 33018
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 10 Aug 2024 03:03:30 GMT
Expires: Sun, 10 Aug 2025 03:03:30 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 456959
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
3.142.138.123/kioscos/kioscobanner3.0/css/estilos_formularios.css
200 OK 2.3 kB URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/css/estilos_formularios.css
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type ASCII text, with CRLF line terminators
Hash dd7a765f419088062bf4da3f0faf74fc
e964e5cf17a89b11eb3efad652c1191e63b66694
f9e2f76dbd6401f814a3cf2a45a4f8043147079690bf9e4b212a6cf7755c7ec6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/css/estilos_formularios.css HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Tue, 02 Jul 2024 22:22:39 GMT
Accept-Ranges: bytes
ETag: "80e1959ceccda1:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 2292
o.pki.goog/wr2
472 B IP
Hash 3ab07625f6a24402156fc3854d417fde
1633cfa8506f3f73fe4a019a2cf4254eea0ff474
6692997e0fbfc87979b265a778ceb69c3911b1189d9bbf78c25fda53efacc54b
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 09:59:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
o.pki.goog/wr2
472 B IP
Hash 3ab07625f6a24402156fc3854d417fde
1633cfa8506f3f73fe4a019a2cf4254eea0ff474
6692997e0fbfc87979b265a778ceb69c3911b1189d9bbf78c25fda53efacc54b
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 09:59:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
o.pki.goog/wr2
472 B IP
Hash 3ab07625f6a24402156fc3854d417fde
1633cfa8506f3f73fe4a019a2cf4254eea0ff474
6692997e0fbfc87979b265a778ceb69c3911b1189d9bbf78c25fda53efacc54b
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 09:59:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
o.pki.goog/wr2
471 B IP
Hash c93b6e647ec27572e196dfafab5787d7
d6c14e39be247665a013366816a6a59091b186fe
6fa072bf37438e636d32b6c3a4f21ccd39557b7a935ab1039d98278c4eba40a1
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 09:59:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
200 OK 30 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
File type JavaScript source, ASCII text, with very long lines (32058)
Hash c9f5aeeca3ad37bf2aa006139b935f0a
1055018c28ab41087ef9ccefe411606893dabea2
87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de
GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30306
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Aug 2024 10:39:40 GMT
expires: Tue, 12 Aug 2025 10:39:40 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 256790
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.12.2/jquery.min.js
200 OK 34 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.12.2/jquery.min.js
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
File type JavaScript source, ASCII text, with very long lines (32029)
Hash bdc2b7efb1faf219d65edfe253a103e9
4921529fc15b8133f2fe65b3bebf53d1e9ef8579
95914789b5f3307a3718679e867d61b9d4c03f749cd2e2970570331d7d6c8ed9
GET /ajax/libs/jquery/1.12.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 34009
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Aug 2024 21:43:21 GMT
expires: Thu, 14 Aug 2025 21:43:21 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 44169
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
3.142.138.123/kioscos/kioscobanner3.0/js/modales.js
200 OK 1.4 kB URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/js/modales.js
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators
Hash fefa53698ed5315add05ca0a2141ccfc
fc9cb96608f6e72721ef9d8c8898401902c94656
9dcdb0ce96ee60bacc7a85295b92326a26ef908c1c0e5b452afd37220fe501a1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/js/modales.js HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Tue, 02 Jul 2024 22:23:48 GMT
Accept-Ranges: bytes
ETag: "0722a82ceccda1:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 1396
3.142.138.123/kioscos/kioscobanner3.0/js/validacion.js
200 OK 1.3 kB URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/js/validacion.js
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators
Hash 89239fc4ad5a53f50f2632127ef92d08
1ba85f2ca06ec870ffe5e468920e85eef89c9720
1779d20b6195a083e889f8da6c952c302525868078df91afd195bd33039b25ff
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/js/validacion.js HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Tue, 02 Jul 2024 22:23:48 GMT
Accept-Ranges: bytes
ETag: "71408c82ceccda1:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 1255
3.142.138.123/kioscos/kioscobanner3.0/js/scroll.js
200 OK 234 B URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/js/scroll.js
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type JavaScript source, ASCII text, with CRLF line terminators
Hash e61d7934e3f2f379550f1891844d1458
98114b3aea5748e12d1c922ddaeeab94d50af3d2
8f34bea834a20a3b858698826c2934a9836edd357c3efc967b3c58dce6e74bf0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/js/scroll.js HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Tue, 02 Jul 2024 22:23:48 GMT
Accept-Ranges: bytes
ETag: "5f8d6882ceccda1:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 234
3.142.138.123/kioscos/kioscobanner3.0/js/Banner.js
200 OK 617 B URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/js/Banner.js
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type JavaScript source, ASCII text, with CRLF line terminators
Hash 6565a68fa531346a0b5600388e926c27
8eb59f338bed5f74b421ff3ccc3fe2ab97e4ae76
e875f995449c00654e414514f83657f209520f2ee286b6276ee2058a2cafb6f8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/js/Banner.js HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Tue, 02 Jul 2024 22:23:47 GMT
Accept-Ranges: bytes
ETag: "7bd0d881ceccda1:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 617
3.142.138.123/kioscos/kioscobanner3.0/js/script.js
200 OK 426 B URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/js/script.js
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type JavaScript source, ASCII text, with CRLF line terminators
Hash fccdb0bbd175fb13c94f463e74118434
4b8252550ec52f3fa466839fd2562ca238c57f0b
43e2e72dad609d9f7fcf2315df0189b03a6535e28d1604583d01fb7b83c420ab
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/js/script.js HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Tue, 02 Jul 2024 22:23:48 GMT
Accept-Ranges: bytes
ETag: "b1604f82ceccda1:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 426
3.142.138.123/kioscos/kioscobanner3.0/css/estilos.css
200 OK 3.8 kB URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/css/estilos.css
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type ASCII text, with CRLF line terminators
Hash df4c9597280d16b33a87d46943760280
6239b478046ece68a6aac415683c42e9ca51d1a5
5e4a24e8dca88cd516f91b0e50b8a8e3e09ebd5dfad797a0861c8f4ec4b796d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/css/estilos.css HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Tue, 02 Jul 2024 22:22:39 GMT
Accept-Ranges: bytes
ETag: "80e1959ceccda1:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 3767
3.142.138.123/kioscos/kioscobanner3.0/imagenes/laptop.png
200 OK 646 B URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/imagenes/laptop.png
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Hash 879232cdc865f71c368d2a754dc97c8a
d54d3226814912d8642b1319e8e654793319ba25
1762911b8b39067c6a31d181e100f7439ce1e9d1a5bfa89a09e5d168d63cb592
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/imagenes/laptop.png HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Tue, 02 Jul 2024 22:23:33 GMT
Accept-Ranges: bytes
ETag: "5f48179ceccda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 646
3.142.138.123/kioscos/kioscobanner3.0/imagenes/emoresa.png
200 OK 785 B URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/imagenes/emoresa.png
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced
Hash 04d739814f840d8b838051e7ca82078b
29d29afa5b17d847e8da193ae3142e9221f5c267
567284fcaf74dd8416801a5d95305b669f910f2ca977b4f5a6681d6d8f995487
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/imagenes/emoresa.png HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Tue, 02 Jul 2024 22:23:27 GMT
Accept-Ranges: bytes
ETag: "125cea75ceccda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 785
3.142.138.123/kioscos/kioscobanner3.0/imagenes/tarjeta.png
200 OK 1.7 kB URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/imagenes/tarjeta.png
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced
Hash 98f064e83460b9c3dfbc12e067c3b0b5
a5768a0a2f21b5e490ee3c8adb4e6645f33347fc
350e932a10d56e0772302101f679327ee36c44ff1b8b3507ab0e5f1c5e7044eb
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/imagenes/tarjeta.png HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Tue, 02 Jul 2024 22:23:41 GMT
Accept-Ranges: bytes
ETag: "aa697ececcda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 1665
3.142.138.123/kioscos/kioscobanner3.0/imagenes/correopersona.png
200 OK 1.6 kB URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/imagenes/correopersona.png
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced
Hash fb1ad7a071038d71a741aebf4dc35fa0
c3c519c2148451b841f0a212608ffbe9c3aa07dc
04021b8a9d31e5303bd1124424f81dacdefc1b7bd81e513b4d76abb68078ba16
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/imagenes/correopersona.png HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Tue, 02 Jul 2024 22:23:26 GMT
Accept-Ranges: bytes
ETag: "a3c01275ceccda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 1624
3.142.138.123/kioscos/kioscobanner3.0/imagenes/nombre_usuario.png
200 OK 1.3 kB URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/imagenes/nombre_usuario.png
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced
Hash 04bc06d99fb8b7db096c6d6f4b690953
765753b922d02cbeade4a7fb78fd39c91baaf879
c88e06019e4489e8847e9e5be701680f341311257aa82e9d363563d07907226f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/imagenes/nombre_usuario.png HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Tue, 02 Jul 2024 22:23:36 GMT
Accept-Ranges: bytes
ETag: "50254d7bceccda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 1274
3.142.138.123/kioscos/kioscobanner3.0/imagenes/earth.png
200 OK 2.6 kB URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/imagenes/earth.png
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Hash 3e999a710b8331d442ebcb5296154796
6b437b38ba980321b67e0b2ba6e58a41a0d63a65
7166110a84aff2462aaf392ee06f48b7098c63f1c892de8c775b4fee40427bc5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/imagenes/earth.png HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Tue, 02 Jul 2024 22:23:27 GMT
Accept-Ranges: bytes
ETag: "e19fc375ceccda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 2599
3.142.138.123/kioscos/kioscobanner3.0/imagenes/computer.png
200 OK 1.2 kB URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/imagenes/computer.png
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Hash 1171ba0b6d9307aedf62f455eb4210c7
95bb9c8473683d839c77ecac6cd8baecd4d39c8c
24ef3005ae13066bfac0f6be8c476c3c6ca914134bc721b0e62a1fa9dbd55008
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/imagenes/computer.png HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Tue, 02 Jul 2024 22:23:25 GMT
Accept-Ranges: bytes
ETag: "f9768874ceccda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 1166
3.142.138.123/kioscos/kioscobanner3.0/imagenes/phone.png
200 OK 1.1 kB URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/imagenes/phone.png
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Hash cad9df50f62d0e5aaf12a401a8374f2c
18af8bafae5ee9bed18363412fbe709561925697
04cf7c1b91f716de93bedd8add9c7a3081d869cdddb1865677bc0d75118ff240
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/imagenes/phone.png HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Tue, 02 Jul 2024 22:23:37 GMT
Accept-Ranges: bytes
ETag: "e0202f7cceccda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 1103
3.142.138.123/kioscos/kioscobanner3.0/imagenes/correcto.png
200 OK 12 kB URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/imagenes/correcto.png
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type PNG image data, 674 x 543, 8-bit/color RGBA, non-interlaced
Hash 5f2bf7b3832f61b1d3c90423f484706d
d443e1dd78ad2069876663a83b3eb241dbd043e0
5ee1a67d35ef86c439718f5eecc5cda54e8ad3ce39d6a3b037aefc8bc7640d3f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/imagenes/correcto.png HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Tue, 02 Jul 2024 22:23:25 GMT
Accept-Ranges: bytes
ETag: "d091f574ceccda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 12345
3.142.138.123/kioscos/kioscobanner3.0/imagenes/arriba.png
200 OK 1.1 kB URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/imagenes/arriba.png
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Hash ec27ab0ebb244f6af86ec87e72b78a9c
7f76e83d6e345494d111186c70140b172f7fd61d
747094d3f7c4c7f65187735e60f33be92f84053e57f9361e23102a12d9d39cde
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/imagenes/arriba.png HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Tue, 02 Jul 2024 22:23:21 GMT
Accept-Ranges: bytes
ETag: "ed77f72ceccda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 1091
3.142.138.123/kioscos/kioscobanner3.0/imagenes/smartphone.png
200 OK 1.1 kB URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/imagenes/smartphone.png
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Hash f0993cacbc0e28d0e24faf8cba03e92f
5442510f0bd04ccb047f8ed031fede99c976cbe6
ab8a4597e174e56d80839e166c5e1438016c3d0160849dd4b3800087f6ee9667
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/imagenes/smartphone.png HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Tue, 02 Jul 2024 22:23:41 GMT
Accept-Ranges: bytes
ETag: "b1be27ececcda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 1143
fonts.googleapis.com/css?family=Catamaran|Handlee|Quicksand|Work+Sans
200 OK 1.1 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Catamaran|Handlee|Quicksand|Work+Sans
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
File type gzip compressed data, max compression
Hash 30196ddaee175a6cfd38dcb457210355
f23a7bf8825ecdf8ecb6a30a6cbac670df6644c5
7098031f760ebc8ec9416eb1b563ca19ba4a944c28d7e5316257e8c0b54b36c4
GET /css?family=Catamaran|Handlee|Quicksand|Work+Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 15 Aug 2024 09:59:30 GMT
date: Thu, 15 Aug 2024 09:59:30 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
o.pki.goog/wr2
472 B IP
Hash 3ab07625f6a24402156fc3854d417fde
1633cfa8506f3f73fe4a019a2cf4254eea0ff474
6692997e0fbfc87979b265a778ceb69c3911b1189d9bbf78c25fda53efacc54b
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 09:59:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
o.pki.goog/wr2
471 B IP
Hash dcca914ab332e61ff2b0192fadaecf7c
74c1cdc8406478903dec5392b51775e9a225fb33
91865f082144ab7246cfa0e613be439a5a246489372439510353cba69af4d68c
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 09:59:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3.142.138.123/kioscos/kioscobanner3.0/imagenes/logo.png
200 OK 15 kB URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/imagenes/logo.png
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type PNG image data, 884 x 272, 8-bit/color RGBA, non-interlaced
Hash cb24e728c10c079608869de8c2043206
d299bb922041d7111aff82990c22b663a43de682
9f0a8f9248315a1cf10fc00da1723766d563f75c8b4e976be4ebad39a95d9aa0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/imagenes/logo.png HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Tue, 02 Jul 2024 22:23:34 GMT
Accept-Ranges: bytes
ETag: "531fe479ceccda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 15278
3.142.138.123/kioscos/kioscobanner3.0/imagenes/menubar.png
200 OK 539 B URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/imagenes/menubar.png
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Hash 1821cab16d7457dad94386b894fd9218
64c392327b909777404c94bf0aa56c4a1186e8c0
a38722ae3b314b31fd97f366a2edf8fe62967051eaa1f13622863f45243967cd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/imagenes/menubar.png HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Tue, 02 Jul 2024 22:23:35 GMT
Accept-Ranges: bytes
ETag: "ec58bc7aceccda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 539
3.142.138.123/kioscos/kioscobanner3.0/imagenes/delete.png
200 OK 3.3 kB URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/imagenes/delete.png
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type PNG image data, 256 x 256, 8-bit gray+alpha, non-interlaced
Hash 13fd291b1e3f18c2dd405b89cc27ae30
ef1136a32e6b373112824a888420eb9134e9a47a
45a394706b17c65bfcc09b9481b589df7e04f58ba2f0b19fea162299c3fd3300
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/imagenes/delete.png HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Tue, 02 Jul 2024 22:23:26 GMT
Accept-Ranges: bytes
ETag: "14976075ceccda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 3326
3.142.138.123/kioscos/kioscobanner3.0/imagenes/Error.png
200 OK 16 kB URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/imagenes/Error.png
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Hash cca5cc75851ef5408bc1e8b4f83b90cd
aae4cb2390ac559686d7c8489b8e3c64aee2b371
442520d7143498215553ea38fa244ab2d02d52dee172f00a9781e49594f760c4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/imagenes/Error.png HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Tue, 02 Jul 2024 22:23:28 GMT
Accept-Ranges: bytes
ETag: "3ad8976ceccda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 15479
ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js
200 OK 33 kB URL GET HTTP/1.1 ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type JavaScript source, ASCII text, with very long lines (32089)
Hash 397754ba49e9e0cf4e7c190da78dda05
ae49e56999d82802727455f0ba83b63acd90a22b
c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4
GET /ajax/libs/jquery/1.9.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 33018
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 10 Aug 2024 03:03:30 GMT
Expires: Sun, 10 Aug 2025 03:03:30 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 456960
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
cdnjs.cloudflare.com/ajax/libs/jquery-easing/1.3/jquery.easing.min.js
200 OK 1.9 kB URL GET HTTP/1.1 cdnjs.cloudflare.com/ajax/libs/jquery-easing/1.3/jquery.easing.min.js
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type Unicode text, UTF-8 text, with very long lines (3601)
Hash 3eac3c72434a0945b92dd4a01f7b6b4e
7767b356530e39cd76ec259320b0b2774b4097a8
ac3f3a757bfbfc9d92bc8f5e6e6362e5d4ae41dbf3cebacdda9b8f71afc82e5b
GET /ajax/libs/jquery-easing/1.3/jquery.easing.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 15 Aug 2024 09:59:30 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 1891
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=30672000
Content-Encoding: gzip
ETag: "5eb03ec1-15b3"
Last-Modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 3059760
Expires: Tue, 05 Aug 2025 09:59:30 GMT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y1nXiS46jhXWBgRa4Gb0iRltsV9OySvZxtYqJjWDkIbQc61R3hqw%2BBbe77GkNcwTI5teZADWKVrJXS%2B0M1bmcCA6TSWGfR9raDLhRgvyyOCWvcX7Xnc7YmjS1yDHTdMJ%2B4RwN0pS"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8b3855104f915688-OSL
alt-svc: h3=":443"; ma=86400
3.142.138.123/kioscos/kioscobanner3.0/imagenes/logo2.png
200 OK 99 kB URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/imagenes/logo2.png
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type PNG image data, 2526 x 594, 8-bit/color RGBA, non-interlaced
Hash 0d3cf8d6ee7257b6f1feeccc3857c99b
a5b5aa1808dda14251cf6d3cef40bab582957df9
9454fbda8dde35a48cfbef700bf303357f0023fe20901a49f7bc563d6710a9ef
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/imagenes/logo2.png HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Tue, 02 Jul 2024 22:23:34 GMT
Accept-Ranges: bytes
ETag: "41c4217aceccda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:29 GMT
Content-Length: 99114
3.142.138.123/kioscos/kioscobanner3.0/js/scroll.js
200 OK 234 B URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/js/scroll.js
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type JavaScript source, ASCII text, with CRLF line terminators
Hash e61d7934e3f2f379550f1891844d1458
98114b3aea5748e12d1c922ddaeeab94d50af3d2
8f34bea834a20a3b858698826c2934a9836edd357c3efc967b3c58dce6e74bf0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/js/scroll.js HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Tue, 02 Jul 2024 22:23:48 GMT
Accept-Ranges: bytes
ETag: "5f8d6882ceccda1:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:30 GMT
Content-Length: 234
o.pki.goog/wr2
472 B IP
Hash 20f29d79156ce6e076ffc03423170212
42848421099a36aa9d89589eedaa66d475bbc3f3
f0aac7512893e26edfb16b570f2ea6223a1bf2e0d61acb473acb9bfe1dc1da6e
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 09:59:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
o.pki.goog/wr2
472 B IP
Hash 20f29d79156ce6e076ffc03423170212
42848421099a36aa9d89589eedaa66d475bbc3f3
f0aac7512893e26edfb16b570f2ea6223a1bf2e0d61acb473acb9bfe1dc1da6e
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 09:59:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
o.pki.goog/wr2
471 B IP
Hash dcca914ab332e61ff2b0192fadaecf7c
74c1cdc8406478903dec5392b51775e9a225fb33
91865f082144ab7246cfa0e613be439a5a246489372439510353cba69af4d68c
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 09:59:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/pontanosans/v17/qFdW35GdgYR8EzR6oBLDHa3wyRf8W8eBM6XLOXLMrcGGpg.woff2
200 OK 11 kB URL GET HTTP/2 fonts.gstatic.com/s/pontanosans/v17/qFdW35GdgYR8EzR6oBLDHa3wyRf8W8eBM6XLOXLMrcGGpg.woff2
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
File type Web Open Font Format (Version 2), TrueType, length 11276, version 1.0
Hash af8a8cb094df8e2f5cac833ed3ec567d
8d7aee8998e9783ac79b1ddac76e3c2b8b34e6f3
8b45f07d1d6df249be6ffe3b88f0777536b3ae60170e3ac958658b09e1d898f8
GET /s/pontanosans/v17/qFdW35GdgYR8EzR6oBLDHa3wyRf8W8eBM6XLOXLMrcGGpg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3.142.138.123
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11276
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Aug 2024 05:08:14 GMT
expires: Fri, 15 Aug 2025 05:08:14 GMT
cache-control: public, max-age=31536000
age: 17476
last-modified: Wed, 27 Sep 2023 15:41:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/raleway/v34/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrE.woff2
200 OK 22 kB URL GET HTTP/2 fonts.gstatic.com/s/raleway/v34/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrE.woff2
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
File type Web Open Font Format (Version 2), TrueType, length 22432, version 1.0
Hash cfd6d958f6802c9f4f64c05575b70801
7f0644e43c42902b466b66723aad8a95ba094b0c
3e44fb721d3be9376c6e5e946109067a04da84ae10b3f27a03ada7a3731e515c
GET /s/raleway/v34/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3.142.138.123
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Aug 2024 03:01:35 GMT
expires: Sun, 10 Aug 2025 03:01:35 GMT
cache-control: public, max-age=31536000
age: 457075
last-modified: Wed, 01 May 2024 20:31:54 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r11.o.lencr.org/
504 B IP
ASN #20940 Akamai International B.V.
Hash 77619f0113a62e8c4c44f195901b385c
1e1a5e3768ca683e66667aa14efa7042df57ee2f
520dbca26889dcd055ad1e36265c6d088b8b7c9d6907cc59eecc7ff47e4c9942
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "520DBCA26889DCD055AD1E36265C6D088B8B7C9D6907CC59EECC7FF47E4C9942"
Last-Modified: Mon, 12 Aug 2024 21:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6500
Expires: Thu, 15 Aug 2024 11:47:50 GMT
Date: Thu, 15 Aug 2024 09:59:30 GMT
Connection: keep-alive
r11.o.lencr.org/
504 B IP
ASN #20940 Akamai International B.V.
Hash 77619f0113a62e8c4c44f195901b385c
1e1a5e3768ca683e66667aa14efa7042df57ee2f
520dbca26889dcd055ad1e36265c6d088b8b7c9d6907cc59eecc7ff47e4c9942
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "520DBCA26889DCD055AD1E36265C6D088B8B7C9D6907CC59EECC7FF47E4C9942"
Last-Modified: Mon, 12 Aug 2024 21:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6500
Expires: Thu, 15 Aug 2024 11:47:50 GMT
Date: Thu, 15 Aug 2024 09:59:30 GMT
Connection: keep-alive
r11.o.lencr.org/
504 B IP
ASN #20940 Akamai International B.V.
Hash 77619f0113a62e8c4c44f195901b385c
1e1a5e3768ca683e66667aa14efa7042df57ee2f
520dbca26889dcd055ad1e36265c6d088b8b7c9d6907cc59eecc7ff47e4c9942
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "520DBCA26889DCD055AD1E36265C6D088B8B7C9D6907CC59EECC7FF47E4C9942"
Last-Modified: Mon, 12 Aug 2024 21:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6500
Expires: Thu, 15 Aug 2024 11:47:50 GMT
Date: Thu, 15 Aug 2024 09:59:30 GMT
Connection: keep-alive
r11.o.lencr.org/
504 B IP
ASN #20940 Akamai International B.V.
Hash 77619f0113a62e8c4c44f195901b385c
1e1a5e3768ca683e66667aa14efa7042df57ee2f
520dbca26889dcd055ad1e36265c6d088b8b7c9d6907cc59eecc7ff47e4c9942
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "520DBCA26889DCD055AD1E36265C6D088B8B7C9D6907CC59EECC7FF47E4C9942"
Last-Modified: Mon, 12 Aug 2024 21:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6500
Expires: Thu, 15 Aug 2024 11:47:50 GMT
Date: Thu, 15 Aug 2024 09:59:30 GMT
Connection: keep-alive
3.142.138.123/kioscos/kioscobanner3.0/imagenes/Banner1.jpg
200 OK 113 kB URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/imagenes/Banner1.jpg
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 960x720, components 3
Size 113 kB (113195 bytes)
Hash 2ac74b9994b6b75519675b15852cd368
0920d09b003904f90c70bd691cb9f1c594c35dc0
01816a3cdade7c2ebecace0e1c67245aeceb2e3d421520fff497ce76c674e3f8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/imagenes/Banner1.jpg HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/css/estilos.css
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Tue, 02 Jul 2024 22:23:22 GMT
Accept-Ranges: bytes
ETag: "3837dd72ceccda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:30 GMT
Content-Length: 113195
www.google.com/recaptcha/api.js?hl=es
200 OK 1.0 kB URL GET HTTP/2 www.google.com/recaptcha/api.js?hl=es
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Certificate IssuerGoogle Trust Services
Subjectwww.google.com
Fingerprint78:90:10:00:62:E9:32:D2:E2:99:72:73:B5:44:27:CB:98:2E:AD:29
ValidityTue, 30 Jul 2024 12:50:13 GMT - Tue, 22 Oct 2024 12:50:12 GMT
Hash 8362facb0f1a652437c4f8f8cde6c6b9
2ee9ec42440cc3c93e8bf1360b9e4a11ffe2f2ee
0cbfb929f32ca3d4a4b8155bd3cfd81948c80cb4ab7c24a1b56c9883c1b69625
GET /recaptcha/api.js?hl=es HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Thu, 15 Aug 2024 09:59:30 GMT
date: Thu, 15 Aug 2024 09:59:30 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/hfUfsXWZFeg83qqxrK27GB8P/recaptcha__es.js
200 OK 216 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/hfUfsXWZFeg83qqxrK27GB8P/recaptcha__es.js
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (639)
Size 216 kB (215812 bytes)
Hash 5f41d26aa9a82c0f70da84ea703bc2cc
0923a2bba6334285f0be6858681bb686f5124210
f3525191eac6fba32b46ad6fbdf4a6c9aebd64406ce39ebbfc47b53369e69ad6
GET /recaptcha/releases/hfUfsXWZFeg83qqxrK27GB8P/recaptcha__es.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://3.142.138.123
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 215812
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Aug 2024 16:18:09 GMT
expires: Tue, 12 Aug 2025 16:18:09 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 29 Jul 2024 04:00:39 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 236482
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
200 OK 88 kB URL GET HTTP/2 www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type HTML document, ASCII text, with very long lines (58090)
Hash c8e946054acc6028dbe0a35f249afc5e
44227ada566f17ac7071101e3ebe36ad11de2d96
f40adb93c5950110e22725f9b0ac4436bfde804b2ea07e96b813094b76110a39
GET /embed/c8UgcYzGw8E?autoplay=1&mute=1 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 15 Aug 2024 09:59:30 GMT
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
content-security-policy-report-only: base-uri 'self';default-src 'self' https: blob:;font-src https: data:;img-src https: data: android-webview-video-poster:;media-src blob: https:;object-src 'none';report-uri /cspreport/common;script-src 'nonce-RuG-55ICwf1xXU4N5Q948g' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';style-src https: 'unsafe-inline'
origin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script'
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=X9CFdTUH2JY; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=bpxC2hZ6X0k; Domain=.youtube.com; Expires=Tue, 11-Feb-2025 09:59:30 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgHg%3D%3D; Domain=.youtube.com; Expires=Tue, 11-Feb-2025 09:59:30 GMT; Path=/; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
3.142.138.123/favicon.ico
404 Not Found 1.2 kB URL GET HTTP/1.1 3.142.138.123/favicon.ico
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type HTML document, ASCII text, with CRLF line terminators
Hash 5343c1a8b203c162a3bf3870d9f50fd4
04b5b886c20d88b57eea6d8ff882624a4ac1e51d
dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Content-Type: text/html
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:30 GMT
Content-Length: 1245
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Aug 2024 00:57:49 GMT
expires: Fri, 15 Aug 2025 00:57:49 GMT
cache-control: public, max-age=31536000
age: 32502
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Aug 2024 21:23:03 GMT
expires: Sat, 09 Aug 2025 21:23:03 GMT
cache-control: public, max-age=31536000
age: 477388
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/410a4f15/www-embed-player.vflset/www-embed-player.js
200 OK 100 kB URL GET HTTP/3 www.youtube.com/s/player/410a4f15/www-embed-player.vflset/www-embed-player.js
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type JavaScript source, ASCII text, with very long lines (809)
Hash 6d173ec72f257225963719077887f3e1
26f871ea7a7f0c9bf8c20e7d7b6f95edf315beef
eac1a5776526ed650d1834e73e52890b40ce5123780bf2a44cfbd0de5735be45
GET /s/player/410a4f15/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 99693
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Aug 2024 07:20:24 GMT
expires: Wed, 13 Aug 2025 07:20:24 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 13 Aug 2024 04:17:57 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 182347
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/410a4f15/player_ias.vflset/en_US/base.js
200 OK 770 kB URL GET HTTP/3 www.youtube.com/s/player/410a4f15/player_ias.vflset/en_US/base.js
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type JavaScript source, ASCII text, with very long lines (534)
Size 770 kB (770365 bytes)
Hash a730faaed986c6214c384d96e6b12b89
b22cf16c395284da9d55a4819833e6c03fb31720
ce1fa41a949ab70c3d6cf79cdeca6ce66e757b03c2a7bb37ffe8332fb7a6a554
GET /s/player/410a4f15/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 770365
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Aug 2024 07:29:21 GMT
expires: Wed, 13 Aug 2025 07:29:21 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 13 Aug 2024 04:17:57 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 181810
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 15 Aug 2024 09:59:32 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/js/th/-0TfInu9ra9zkah2wyCD78KX7EDwI16Gf6-9m2UuzfU.js
200 OK 21 kB URL GET HTTP/3 www.google.com/js/th/-0TfInu9ra9zkah2wyCD78KX7EDwI16Gf6-9m2UuzfU.js
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type JavaScript source, ASCII text, with very long lines (53615)
Hash 569ce42b984674dbb65bda2ee07d6122
1a38eb73f0d4c12ed763542bbf30aa05e83d25af
fb44df227bbdadaf7391a876c32083efc297ec40f0235e867fafbd9b652ecdf5
GET /js/th/-0TfInu9ra9zkah2wyCD78KX7EDwI16Gf6-9m2UuzfU.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 20978
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Aug 2024 02:58:39 GMT
expires: Sun, 10 Aug 2025 02:58:39 GMT
cache-control: public, max-age=31536000
age: 457253
last-modified: Mon, 29 Jul 2024 15:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 43 kB URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
Hash 871c07e3e3c1ff9dd666d02fbfc99c56
474b2e5d6e7847a3c7b4990921f608b213782904
f6ef4561e6ae3a08d4d251dea5f73efb43e5da736643ad81d94f5e75254cdacb
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 15 Aug 2024 09:59:32 GMT
server: ESF
cache-control: private
content-length: 43204
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/youtubei/v1/player?prettyPrint=false
200 OK 31 kB URL POST HTTP/3 www.youtube.com/youtubei/v1/player?prettyPrint=false
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash 39993e39baf72becf00abf13c4106541
385f709ef5628d72246e20c29c17bf2f276cd60a
493508b57f6517279a7e419a9fed3269e2398accef3ab26295668b4f4910e5cc
POST /youtubei/v1/player?prettyPrint=false HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Goog-Visitor-Id: CgticHhDMmhaNlgwayiCo_e1BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgHg%3D%3D
X-Youtube-Bootstrap-Logged-In: false
X-Youtube-Client-Name: 56
X-Youtube-Client-Version: 1.20240812.01.00
Content-Length: 2924
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Thu, 15 Aug 2024 09:59:32 GMT
server: scaffolding on HTTPServer2
content-length: 30619
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
o.pki.goog/wr2
471 B IP
Hash 669543805b473ad49af2ab3a009f7c67
a260c6a808234019b9b6be38391f63e6b4fc6424
4c952d73702457386107510ddaa0da8f8e41b383dd2b74adb36f7ee13e349f7e
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 09:59:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Open+Sans|Raleway
200 OK 4.0 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Open+Sans|Raleway
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
File type gzip compressed data, max compression
Hash 96725b58e31393a724f97d614bc92295
3b6229d56275e9d6a675c25456b4194070e04a5f
0bf09d826b9a2b27faa17fdaba2339478031c56bef329ce91486629f8bc9196b
GET /css?family=Open+Sans|Raleway HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 15 Aug 2024 09:59:30 GMT
date: Thu, 15 Aug 2024 09:59:30 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
o.pki.goog/wr2
471 B IP
Hash 669543805b473ad49af2ab3a009f7c67
a260c6a808234019b9b6be38391f63e6b4fc6424
4c952d73702457386107510ddaa0da8f8e41b383dd2b74adb36f7ee13e349f7e
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 09:59:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Thu, 15 Aug 2024 09:59:32 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/api/stats/qoe?fmt=243&cpn=R8ShaBYV4Z8XRRom&el=embedded&ns=yt&fexp=v1%2C24004644%2C434717%2C60171%2C67155%2C26443548%2C7111%2C24166%2C12177%2C9954%2C1192%2C33462%2C2%2C17768%2C19202%2C9950%2C2196%2C9996%2C1103%2C6953%2C11044%2C501%2C1970%2C7546%2C14041%2C3760%2C12945%2C10607%2C321%2C148%2C2%2C2126%2C14%2C1322%2C4205%2C1823%2C3186%2C2912%2C7568%2C328%2C14%2C142%2C4092%2C1768%2C604%2C4073%2C2150%2C439%2C5905&cl=662321128&seq=1&docid=c8UgcYzGw8E&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&event=streamingstats&plid=AAYfteY74-3HMYPq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fc8UgcYzGw8E%3Fautoplay%3D1%26mute%3D1&qclc=ChBSOFNoYUJZVjRaOFhSUm9tEAE&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240812.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&vps=0.000:N,0.029:B,0.333:B,0.333:B&cat=streaming&cmt=0.029:0.000,0.333:0.000&vfs=0.333:243:243::r&view=0.333:70:15&bwe=0.333:130000&vis=0.333:0&bh=0.333:0.000
204 No Content 0 B URL POST HTTP/3 www.youtube.com/api/stats/qoe?fmt=243&cpn=R8ShaBYV4Z8XRRom&el=embedded&ns=yt&fexp=v1%2C24004644%2C434717%2C60171%2C67155%2C26443548%2C7111%2C24166%2C12177%2C9954%2C1192%2C33462%2C2%2C17768%2C19202%2C9950%2C2196%2C9996%2C1103%2C6953%2C11044%2C501%2C1970%2C7546%2C14041%2C3760%2C12945%2C10607%2C321%2C148%2C2%2C2126%2C14%2C1322%2C4205%2C1823%2C3186%2C2912%2C7568%2C328%2C14%2C142%2C4092%2C1768%2C604%2C4073%2C2150%2C439%2C5905&cl=662321128&seq=1&docid=c8UgcYzGw8E&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&event=streamingstats&plid=AAYfteY74-3HMYPq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fc8UgcYzGw8E%3Fautoplay%3D1%26mute%3D1&qclc=ChBSOFNoYUJZVjRaOFhSUm9tEAE&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240812.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&vps=0.000:N,0.029:B,0.333:B,0.333:B&cat=streaming&cmt=0.029:0.000,0.333:0.000&vfs=0.333:243:243::r&view=0.333:70:15&bwe=0.333:130000&vis=0.333:0&bh=0.333:0.000
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/stats/qoe?fmt=243&cpn=R8ShaBYV4Z8XRRom&el=embedded&ns=yt&fexp=v1%2C24004644%2C434717%2C60171%2C67155%2C26443548%2C7111%2C24166%2C12177%2C9954%2C1192%2C33462%2C2%2C17768%2C19202%2C9950%2C2196%2C9996%2C1103%2C6953%2C11044%2C501%2C1970%2C7546%2C14041%2C3760%2C12945%2C10607%2C321%2C148%2C2%2C2126%2C14%2C1322%2C4205%2C1823%2C3186%2C2912%2C7568%2C328%2C14%2C142%2C4092%2C1768%2C604%2C4073%2C2150%2C439%2C5905&cl=662321128&seq=1&docid=c8UgcYzGw8E&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&event=streamingstats&plid=AAYfteY74-3HMYPq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fc8UgcYzGw8E%3Fautoplay%3D1%26mute%3D1&qclc=ChBSOFNoYUJZVjRaOFhSUm9tEAE&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240812.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&vps=0.000:N,0.029:B,0.333:B,0.333:B&cat=streaming&cmt=0.029:0.000,0.333:0.000&vfs=0.333:243:243::r&view=0.333:70:15&bwe=0.333:130000&vis=0.333:0&bh=0.333:0.000 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Visitor-Id: CgticHhDMmhaNlgwayiCo_e1BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgHg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240812.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1723715972184&flash=0&frm=2&u_tz&u_his=4&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C70%2C15&vis=1&wgl=true&ca_type=image
Content-Type: application/x-www-form-urlencoded
Content-Length: 226
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
date: Thu, 15 Aug 2024 09:59:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
x-content-type-options: nosniff
server: Video Stats Server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Thu, 15 Aug 2024 09:59:32 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 15 Aug 2024 09:59:32 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/410a4f15/player_ias.vflset/en_US/endscreen.js
200 OK 8.4 kB URL GET HTTP/3 www.youtube.com/s/player/410a4f15/player_ias.vflset/en_US/endscreen.js
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type JavaScript source, ASCII text, with very long lines (607)
Hash adcd1899c6265974b4f4bb9280bc6c28
57c99da2b1e58098a1787d16e005b82fcedee862
5cf091e1f50e71a99c46d8f02f562d9e68216150a1a817e13d43bb5c92a881cf
GET /s/player/410a4f15/player_ias.vflset/en_US/endscreen.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 8352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Aug 2024 07:39:12 GMT
expires: Wed, 13 Aug 2025 07:39:12 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 13 Aug 2024 04:17:57 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 181220
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/410a4f15/player_ias.vflset/en_US/captions.js
200 OK 25 kB URL GET HTTP/3 www.youtube.com/s/player/410a4f15/player_ias.vflset/en_US/captions.js
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type JavaScript source, ASCII text, with very long lines (589)
Hash 21d17794a96767348e0f2e45555d77b7
20fef8c97095b715166eea45c9fc829ad2caba5f
9375ba83bb62570f86eaed68365ad09127e59358c1a90fefd36a363d5f6b6cf5
GET /s/player/410a4f15/player_ias.vflset/en_US/captions.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 24978
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Aug 2024 07:39:12 GMT
expires: Wed, 13 Aug 2025 07:39:12 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 13 Aug 2024 04:17:57 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 181220
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 1099
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Thu, 15 Aug 2024 09:59:32 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 417
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Thu, 15 Aug 2024 09:59:32 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
Hash f718a1419efcd1b1c6caaad3a28439c6
d12ffaaa4f56c5c1e48c285fc5bc9822ade2d477
b1010445f164d78273b3327a5f73dbd583412931ea9853bea8ba94a57ea6618d
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 903
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 15 Aug 2024 09:59:32 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
o.pki.goog/wr2
472 B IP
Hash 6379c04fd5da0356c22a48bc9e063cd2
79fd1359f787a3b71bc61c34f834b9de195ede06
b8e58f4d1e3bf4a6c4d381595741f38fea5b73aa6aa7f4a03006192f2b9a53cd
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 09:59:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
o.pki.goog/wr2
472 B IP
Hash 6379c04fd5da0356c22a48bc9e063cd2
79fd1359f787a3b71bc61c34f834b9de195ede06
b8e58f4d1e3bf4a6c4d381595741f38fea5b73aa6aa7f4a03006192f2b9a53cd
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 09:59:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=243&aitags=133%2C134%2C135%2C160%2C242%2C243%2C244%2C278&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=yw&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=23&initcwndbps=2191250&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&mime=video%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=75307291&dur=3954.466&lmt=1695398588380105&mt=1723715603&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=531F224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKR0rnD2BL-3w9e6ez35BAYx_WmamgRnOFR7iq9K6hsPAiApqm466QMyIFryOwBjigjW2jkhAK4GmsC-32s9Lu5rsg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AGtxev0wRQIgGkCb8Vcwh9khBpr4Q5RCxZgKyWcEV4kVGPfeYdfU5HoCIQCWGbrAmKu0el8PhtDuFbWjUVAqb6loPkt9Yp4IgyNGOg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&range=0-94503&rn=1&rbuf=0&pot=IljyrvKolBMjKrHJhseR5prqv8Oaz7zCldmT15vtnfGXn7DEu8exybjhpta7zbfGlf20xr_itOyn-bTZhfe1_J3MuuzCy7rZxv677LP8t8e3ybrJ1522i8Hq&ump=1&srfvp=1
200 OK 1.4 kB URL POST HTTP/1.1 rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=243&aitags=133%2C134%2C135%2C160%2C242%2C243%2C244%2C278&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=yw&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=23&initcwndbps=2191250&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&mime=video%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=75307291&dur=3954.466&lmt=1695398588380105&mt=1723715603&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=531F224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKR0rnD2BL-3w9e6ez35BAYx_WmamgRnOFR7iq9K6hsPAiApqm466QMyIFryOwBjigjW2jkhAK4GmsC-32s9Lu5rsg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AGtxev0wRQIgGkCb8Vcwh9khBpr4Q5RCxZgKyWcEV4kVGPfeYdfU5HoCIQCWGbrAmKu0el8PhtDuFbWjUVAqb6loPkt9Yp4IgyNGOg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&range=0-94503&rn=1&rbuf=0&pot=IljyrvKolBMjKrHJhseR5prqv8Oaz7zCldmT15vtnfGXn7DEu8exybjhpta7zbfGlf20xr_itOyn-bTZhfe1_J3MuuzCy7rZxv677LP8t8e3ybrJ1522i8Hq&ump=1&srfvp=1
IP
ASN #50304 Blix Solutions AS
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.googlevideo.com
Fingerprint77:61:E7:0C:BA:C3:82:EE:C2:02:67:B6:9F:13:3E:1B:40:7E:DE:81
ValidityTue, 16 Jul 2024 14:35:03 GMT - Tue, 24 Sep 2024 14:35:02 GMT
Hash 11e98188292d16d3527a5ec0370a9783
f9ebf4f07bdcfa0ec24d8b89d1a96cc40422967d
6f9f18eebafc89675c9c9ef2fd2915691236dd675cf4fedeab645b35e8daac81
POST /videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=243&aitags=133%2C134%2C135%2C160%2C242%2C243%2C244%2C278&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=yw&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=23&initcwndbps=2191250&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&mime=video%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=75307291&dur=3954.466&lmt=1695398588380105&mt=1723715603&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=531F224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKR0rnD2BL-3w9e6ez35BAYx_WmamgRnOFR7iq9K6hsPAiApqm466QMyIFryOwBjigjW2jkhAK4GmsC-32s9Lu5rsg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AGtxev0wRQIgGkCb8Vcwh9khBpr4Q5RCxZgKyWcEV4kVGPfeYdfU5HoCIQCWGbrAmKu0el8PhtDuFbWjUVAqb6loPkt9Yp4IgyNGOg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&range=0-94503&rn=1&rbuf=0&pot=IljyrvKolBMjKrHJhseR5prqv8Oaz7zCldmT15vtnfGXn7DEu8exybjhpta7zbfGlf20xr_itOyn-bTZhfe1_J3MuuzCy7rZxv677LP8t8e3ybrJ1522i8Hq&ump=1&srfvp=1 HTTP/1.1
Host: rr1---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.youtube.com/
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Thu, 15 Aug 2024 09:59:32 GMT
Expires: Thu, 15 Aug 2024 09:59:32 GMT
Cache-Control: private, max-age=21300
Content-Type: application/vnd.yt-ump
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=yw&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=23&initcwndbps=2191250&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=59928742&dur=3954.521&lmt=1695399391242210&mt=1723715603&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgBOJWLJL7RjKm6Ps9f8his1QAoqmzptUyIDqybbc8C2gCIQDeetEqtn9dpdSkEEvWPLWHdblQxm9hHgIYxl444MAsvg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AGtxev0wRQIgGkCb8Vcwh9khBpr4Q5RCxZgKyWcEV4kVGPfeYdfU5HoCIQCWGbrAmKu0el8PhtDuFbWjUVAqb6loPkt9Yp4IgyNGOg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&range=0-72806&rn=2&rbuf=0&pot=IlgYGhgcfqfJnlt9bHN7UnBeVXdwe1Z2f215Y3FZd0V9K1pwUXNbfVJVTGJReV1yf0leclVWXlhNTV5tb0NfSHd4UFgof1BtLEpRWFlIXXNdfVB9PSlcPyte&ump=1&srfvp=1
200 OK 1.4 kB URL POST HTTP/1.1 rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=yw&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=23&initcwndbps=2191250&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=59928742&dur=3954.521&lmt=1695399391242210&mt=1723715603&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgBOJWLJL7RjKm6Ps9f8his1QAoqmzptUyIDqybbc8C2gCIQDeetEqtn9dpdSkEEvWPLWHdblQxm9hHgIYxl444MAsvg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AGtxev0wRQIgGkCb8Vcwh9khBpr4Q5RCxZgKyWcEV4kVGPfeYdfU5HoCIQCWGbrAmKu0el8PhtDuFbWjUVAqb6loPkt9Yp4IgyNGOg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&range=0-72806&rn=2&rbuf=0&pot=IlgYGhgcfqfJnlt9bHN7UnBeVXdwe1Z2f215Y3FZd0V9K1pwUXNbfVJVTGJReV1yf0leclVWXlhNTV5tb0NfSHd4UFgof1BtLEpRWFlIXXNdfVB9PSlcPyte&ump=1&srfvp=1
IP
ASN #50304 Blix Solutions AS
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.googlevideo.com
Fingerprint77:61:E7:0C:BA:C3:82:EE:C2:02:67:B6:9F:13:3E:1B:40:7E:DE:81
ValidityTue, 16 Jul 2024 14:35:03 GMT - Tue, 24 Sep 2024 14:35:02 GMT
Hash 0339eecd90f739602903aa6d5b2af1ba
fd55b284b426408765037bb03646af4c32984f26
4e7b9393cef1e7c8e07780b8ec30bd63fd335a4ea7a58789a00b1372da490695
POST /videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=yw&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=23&initcwndbps=2191250&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=59928742&dur=3954.521&lmt=1695399391242210&mt=1723715603&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgBOJWLJL7RjKm6Ps9f8his1QAoqmzptUyIDqybbc8C2gCIQDeetEqtn9dpdSkEEvWPLWHdblQxm9hHgIYxl444MAsvg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AGtxev0wRQIgGkCb8Vcwh9khBpr4Q5RCxZgKyWcEV4kVGPfeYdfU5HoCIQCWGbrAmKu0el8PhtDuFbWjUVAqb6loPkt9Yp4IgyNGOg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&range=0-72806&rn=2&rbuf=0&pot=IlgYGhgcfqfJnlt9bHN7UnBeVXdwe1Z2f215Y3FZd0V9K1pwUXNbfVJVTGJReV1yf0leclVWXlhNTV5tb0NfSHd4UFgof1BtLEpRWFlIXXNdfVB9PSlcPyte&ump=1&srfvp=1 HTTP/1.1
Host: rr1---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.youtube.com/
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Thu, 15 Aug 2024 09:59:32 GMT
Expires: Thu, 15 Aug 2024 09:59:32 GMT
Cache-Control: private, max-age=21300
Content-Type: application/vnd.yt-ump
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
o.pki.goog/wr2
472 B IP
Hash 6379c04fd5da0356c22a48bc9e063cd2
79fd1359f787a3b71bc61c34f834b9de195ede06
b8e58f4d1e3bf4a6c4d381595741f38fea5b73aa6aa7f4a03006192f2b9a53cd
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 09:59:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/generate_204?5AFXIQ
204 No Content 0 B URL GET HTTP/3 www.youtube.com/generate_204?5AFXIQ
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?5AFXIQ HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Thu, 15 Aug 2024 09:59:33 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/next?prettyPrint=false
200 OK 6.6 kB URL POST HTTP/3 www.youtube.com/youtubei/v1/next?prettyPrint=false
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash 33db693ae3aca1cac1851709c13a5294
fac4bb1a4aaa4d879ff09cd8caf2d4002ccf99ee
b9fa5beb36d7638b34ccc7c39f79ea8ee0436d07971b80f8a571b0bf87c06062
POST /youtubei/v1/next?prettyPrint=false HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Goog-Visitor-Id: CgticHhDMmhaNlgwayiCo_e1BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgHg%3D%3D
X-Youtube-Bootstrap-Logged-In: false
X-Youtube-Client-Name: 56
X-Youtube-Client-Version: 1.20240812.01.00
Content-Length: 2585
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Thu, 15 Aug 2024 09:59:33 GMT
server: scaffolding on HTTPServer2
content-length: 6623
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Thu, 15 Aug 2024 09:59:33 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 411
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Thu, 15 Aug 2024 09:59:33 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1723715973099
Content-Type: application/json
X-Goog-Visitor-Id: CgticHhDMmhaNlgwayiCo_e1BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgHg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240812.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1723715972184&flash=0&frm=2&u_tz&u_his=3&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C70%2C15&vis=1&wgl=true&ca_type=image
Content-Length: 16814
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Thu, 15 Aug 2024 09:59:33 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
o.pki.goog/wr2
471 B IP
Hash 8be7ec46b9672f80c548418a6dd4b8b0
8128bee83a5bf3b091d07795d1fc27091fbbe697
f57c750b44e9a70650a3bf1b8f7b1b3e50a18e7c2123b6c48978d363fc6ad05b
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 09:59:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
o.pki.goog/wr2
471 B IP
Hash 8be7ec46b9672f80c548418a6dd4b8b0
8128bee83a5bf3b091d07795d1fc27091fbbe697
f57c750b44e9a70650a3bf1b8f7b1b3e50a18e7c2123b6c48978d363fc6ad05b
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 09:59:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rr2---sn-5goeenez.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=59928742&dur=3954.521&lmt=1695399391242210&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgBOJWLJL7RjKm6Ps9f8his1QAoqmzptUyIDqybbc8C2gCIQDeetEqtn9dpdSkEEvWPLWHdblQxm9hHgIYxl444MAsvg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&rrc=80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&cms_redirect=yes&cmsv=e&mh=yw&mm=29&mn=sn-5goeenez&ms=rdu&mt=1723714789&mv=u&mvi=2&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRAIgfm7iZaIrUwuUJTxla_7MY9OTnGyArMOwAYwZ2cQCBlMCIHBfB2y4QPSSHV7m7ysgfVQ-HNRtsWMITueFNCQOOjlr&range=0-72806&rn=3&rbuf=0&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1
200 OK 1.5 kB URL POST HTTP/1.1 rr2---sn-5goeenez.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=59928742&dur=3954.521&lmt=1695399391242210&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgBOJWLJL7RjKm6Ps9f8his1QAoqmzptUyIDqybbc8C2gCIQDeetEqtn9dpdSkEEvWPLWHdblQxm9hHgIYxl444MAsvg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&rrc=80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&cms_redirect=yes&cmsv=e&mh=yw&mm=29&mn=sn-5goeenez&ms=rdu&mt=1723714789&mv=u&mvi=2&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRAIgfm7iZaIrUwuUJTxla_7MY9OTnGyArMOwAYwZ2cQCBlMCIHBfB2y4QPSSHV7m7ysgfVQ-HNRtsWMITueFNCQOOjlr&range=0-72806&rn=3&rbuf=0&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.c.docs.google.com
Fingerprint6C:53:8D:31:BE:19:4F:5B:40:5F:DD:1A:A7:8A:B4:32:3A:6F:0F:DF
ValidityTue, 16 Jul 2024 14:34:06 GMT - Tue, 24 Sep 2024 14:34:05 GMT
Hash 767577056bf8bed4f9103e006dcd03cb
6823c6d8226e26a7c9d052d8db1711d0f7989350
a5e5c0ca05110931a15927837fab1607d2904d1736d691e1a0b402830c23c18d
POST /videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=59928742&dur=3954.521&lmt=1695399391242210&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgBOJWLJL7RjKm6Ps9f8his1QAoqmzptUyIDqybbc8C2gCIQDeetEqtn9dpdSkEEvWPLWHdblQxm9hHgIYxl444MAsvg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&rrc=80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&cms_redirect=yes&cmsv=e&mh=yw&mm=29&mn=sn-5goeenez&ms=rdu&mt=1723714789&mv=u&mvi=2&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRAIgfm7iZaIrUwuUJTxla_7MY9OTnGyArMOwAYwZ2cQCBlMCIHBfB2y4QPSSHV7m7ysgfVQ-HNRtsWMITueFNCQOOjlr&range=0-72806&rn=3&rbuf=0&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1 HTTP/1.1
Host: rr2---sn-5goeenez.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.youtube.com/
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Thu, 15 Aug 2024 09:59:33 GMT
Expires: Thu, 15 Aug 2024 09:59:33 GMT
Cache-Control: private, max-age=21299
Content-Type: application/vnd.yt-ump
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
rr2---sn-5goeenez.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=243&aitags=133%2C134%2C135%2C160%2C242%2C243%2C244%2C278&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&mime=video%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=75307291&dur=3954.466&lmt=1695398588380105&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=531F224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKR0rnD2BL-3w9e6ez35BAYx_WmamgRnOFR7iq9K6hsPAiApqm466QMyIFryOwBjigjW2jkhAK4GmsC-32s9Lu5rsg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&rrc=80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&cms_redirect=yes&cmsv=e&mh=yw&mm=29&mn=sn-5goeenez&ms=rdu&mt=1723714789&mv=u&mvi=2&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRgIhAPSm3SGy440Iwhm1243AAHGpkqQimDA6qbByTR_SXgBVAiEAhEW2ORZzJ01QKwPi70FNi9SGDy93A43Ih3Gt6Qv1_NM%3D&range=0-94503&rn=4&rbuf=0&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1
200 OK 1.5 kB URL POST HTTP/1.1 rr2---sn-5goeenez.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=243&aitags=133%2C134%2C135%2C160%2C242%2C243%2C244%2C278&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&mime=video%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=75307291&dur=3954.466&lmt=1695398588380105&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=531F224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKR0rnD2BL-3w9e6ez35BAYx_WmamgRnOFR7iq9K6hsPAiApqm466QMyIFryOwBjigjW2jkhAK4GmsC-32s9Lu5rsg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&rrc=80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&cms_redirect=yes&cmsv=e&mh=yw&mm=29&mn=sn-5goeenez&ms=rdu&mt=1723714789&mv=u&mvi=2&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRgIhAPSm3SGy440Iwhm1243AAHGpkqQimDA6qbByTR_SXgBVAiEAhEW2ORZzJ01QKwPi70FNi9SGDy93A43Ih3Gt6Qv1_NM%3D&range=0-94503&rn=4&rbuf=0&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.c.docs.google.com
Fingerprint6C:53:8D:31:BE:19:4F:5B:40:5F:DD:1A:A7:8A:B4:32:3A:6F:0F:DF
ValidityTue, 16 Jul 2024 14:34:06 GMT - Tue, 24 Sep 2024 14:34:05 GMT
Hash 7cb45bcf50faf41f1bf88b84ba404418
2e31d7d5e3865fa7e0d79e206ca2992a5e27ea81
2076a64ec52b2fae9a4053cc797178d0f672e1f40f176d4b98e54091438fda0b
POST /videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=243&aitags=133%2C134%2C135%2C160%2C242%2C243%2C244%2C278&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&mime=video%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=75307291&dur=3954.466&lmt=1695398588380105&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=531F224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKR0rnD2BL-3w9e6ez35BAYx_WmamgRnOFR7iq9K6hsPAiApqm466QMyIFryOwBjigjW2jkhAK4GmsC-32s9Lu5rsg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&rrc=80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&cms_redirect=yes&cmsv=e&mh=yw&mm=29&mn=sn-5goeenez&ms=rdu&mt=1723714789&mv=u&mvi=2&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRgIhAPSm3SGy440Iwhm1243AAHGpkqQimDA6qbByTR_SXgBVAiEAhEW2ORZzJ01QKwPi70FNi9SGDy93A43Ih3Gt6Qv1_NM%3D&range=0-94503&rn=4&rbuf=0&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1 HTTP/1.1
Host: rr2---sn-5goeenez.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.youtube.com/
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Thu, 15 Aug 2024 09:59:33 GMT
Expires: Thu, 15 Aug 2024 09:59:33 GMT
Cache-Control: private, max-age=21299
Content-Type: application/vnd.yt-ump
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
yt3.ggpht.com/zvLJFiX6xhfelgNEerD5OXYWyo7d1FoybmrPyKM1AsR_-QnmBv_k_Zo8fUix99NIQdAzIAjUaC4=s88-c-k-c0x00ffffff-no-rj
200 OK 3.1 kB URL GET HTTP/3 yt3.ggpht.com/zvLJFiX6xhfelgNEerD5OXYWyo7d1FoybmrPyKM1AsR_-QnmBv_k_Zo8fUix99NIQdAzIAjUaC4=s88-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintA6:0A:39:C6:7C:75:70:95:1C:CC:6E:1F:5D:AF:3C:FD:47:BB:4D:A0
ValidityTue, 30 Jul 2024 12:49:08 GMT - Tue, 22 Oct 2024 12:49:07 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 88x88, components 3
Hash b0e78422fb943cbfe4049a204ed4835a
03f89e1b82af63bbbd72bc3bb4928209b5e8c463
9ed9025aa46f4ffaea2275b0261af0e218f8b627d7afcda3737d268783a6d525
GET /zvLJFiX6xhfelgNEerD5OXYWyo7d1FoybmrPyKM1AsR_-QnmBv_k_Zo8fUix99NIQdAzIAjUaC4=s88-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="channels4_profile.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3130
x-xss-protection: 0
date: Thu, 15 Aug 2024 09:59:33 GMT
expires: Fri, 16 Aug 2024 09:59:33 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
o.pki.goog/wr2
471 B IP
Hash 8be7ec46b9672f80c548418a6dd4b8b0
8128bee83a5bf3b091d07795d1fc27091fbbe697
f57c750b44e9a70650a3bf1b8f7b1b3e50a18e7c2123b6c48978d363fc6ad05b
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 09:59:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rr5---sn-oj5hn5-55.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=59928742&dur=3954.521&lmt=1695399391242210&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgBOJWLJL7RjKm6Ps9f8his1QAoqmzptUyIDqybbc8C2gCIQDeetEqtn9dpdSkEEvWPLWHdblQxm9hHgIYxl444MAsvg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIhAOjfb7eTtwWL0Qb-RrR5YQeYHNTwxPqghlUDWlNvPfrRAiBwAvPlgLhb6dN68wtYseX_-IPiexETeKnuyFQkL6Mjnw%3D%3D&range=0-72806&rn=5&rbuf=0&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1
200 OK 73 kB URL POST HTTP/1.1 rr5---sn-oj5hn5-55.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=59928742&dur=3954.521&lmt=1695399391242210&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgBOJWLJL7RjKm6Ps9f8his1QAoqmzptUyIDqybbc8C2gCIQDeetEqtn9dpdSkEEvWPLWHdblQxm9hHgIYxl444MAsvg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIhAOjfb7eTtwWL0Qb-RrR5YQeYHNTwxPqghlUDWlNvPfrRAiBwAvPlgLhb6dN68wtYseX_-IPiexETeKnuyFQkL6Mjnw%3D%3D&range=0-72806&rn=5&rbuf=0&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.c.docs.google.com
Fingerprint6C:53:8D:31:BE:19:4F:5B:40:5F:DD:1A:A7:8A:B4:32:3A:6F:0F:DF
ValidityTue, 16 Jul 2024 14:34:06 GMT - Tue, 24 Sep 2024 14:34:05 GMT
Hash 10ce29c16db845c9c20fd05ef3ed0a74
10987e826fbd2f016a91532f02d96b3d4b1eee4b
0cdc4c978f2ef78a3a49dabbb4c1908e6d6e750d9e6f626ca00b64a940606a7f
POST /videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=59928742&dur=3954.521&lmt=1695399391242210&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgBOJWLJL7RjKm6Ps9f8his1QAoqmzptUyIDqybbc8C2gCIQDeetEqtn9dpdSkEEvWPLWHdblQxm9hHgIYxl444MAsvg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIhAOjfb7eTtwWL0Qb-RrR5YQeYHNTwxPqghlUDWlNvPfrRAiBwAvPlgLhb6dN68wtYseX_-IPiexETeKnuyFQkL6Mjnw%3D%3D&range=0-72806&rn=5&rbuf=0&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1 HTTP/1.1
Host: rr5---sn-oj5hn5-55.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.youtube.com/
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Fri, 22 Sep 2023 16:16:31 GMT
Content-Type: application/vnd.yt-ump
Date: Thu, 15 Aug 2024 09:59:33 GMT
Expires: Thu, 15 Aug 2024 09:59:33 GMT
Cache-Control: private, max-age=21299
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
rr5---sn-oj5hn5-55.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=243&aitags=133%2C134%2C135%2C160%2C242%2C243%2C244%2C278&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&mime=video%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=75307291&dur=3954.466&lmt=1695398588380105&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=531F224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKR0rnD2BL-3w9e6ez35BAYx_WmamgRnOFR7iq9K6hsPAiApqm466QMyIFryOwBjigjW2jkhAK4GmsC-32s9Lu5rsg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIgOjPnkr_wzKSbtLqMKB6BqUoGQxLmoVXlSK0g6Y1yHwgCIQC32Tr3qbIBjWo5_GZwnUlR2h5lWYUM67yWB1ulxO90Yw%3D%3D&range=0-94503&rn=6&rbuf=0&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1
200 OK 95 kB URL POST HTTP/1.1 rr5---sn-oj5hn5-55.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=243&aitags=133%2C134%2C135%2C160%2C242%2C243%2C244%2C278&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&mime=video%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=75307291&dur=3954.466&lmt=1695398588380105&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=531F224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKR0rnD2BL-3w9e6ez35BAYx_WmamgRnOFR7iq9K6hsPAiApqm466QMyIFryOwBjigjW2jkhAK4GmsC-32s9Lu5rsg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIgOjPnkr_wzKSbtLqMKB6BqUoGQxLmoVXlSK0g6Y1yHwgCIQC32Tr3qbIBjWo5_GZwnUlR2h5lWYUM67yWB1ulxO90Yw%3D%3D&range=0-94503&rn=6&rbuf=0&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.c.docs.google.com
Fingerprint6C:53:8D:31:BE:19:4F:5B:40:5F:DD:1A:A7:8A:B4:32:3A:6F:0F:DF
ValidityTue, 16 Jul 2024 14:34:06 GMT - Tue, 24 Sep 2024 14:34:05 GMT
Hash 7583957f574e8f7c98b98d11908fe591
10f739fa2853db72255eef92e838af53c03f5322
f2a2322a1b510dc8dd79b204ca9cb4f4f2e22692eebeefb8ac7a925546dfbdb7
POST /videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=243&aitags=133%2C134%2C135%2C160%2C242%2C243%2C244%2C278&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&mime=video%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=75307291&dur=3954.466&lmt=1695398588380105&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=531F224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKR0rnD2BL-3w9e6ez35BAYx_WmamgRnOFR7iq9K6hsPAiApqm466QMyIFryOwBjigjW2jkhAK4GmsC-32s9Lu5rsg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIgOjPnkr_wzKSbtLqMKB6BqUoGQxLmoVXlSK0g6Y1yHwgCIQC32Tr3qbIBjWo5_GZwnUlR2h5lWYUM67yWB1ulxO90Yw%3D%3D&range=0-94503&rn=6&rbuf=0&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1 HTTP/1.1
Host: rr5---sn-oj5hn5-55.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.youtube.com/
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Fri, 22 Sep 2023 16:03:08 GMT
Content-Type: application/vnd.yt-ump
Date: Thu, 15 Aug 2024 09:59:33 GMT
Expires: Thu, 15 Aug 2024 09:59:33 GMT
Cache-Control: private, max-age=21299
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
www.youtube.com/ptracking?html5=1&video_id=c8UgcYzGw8E&cpn=R8ShaBYV4Z8XRRom&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ptk=youtube_none&pltype=contentugc
204 No Content 0 B URL GET HTTP/3 www.youtube.com/ptracking?html5=1&video_id=c8UgcYzGw8E&cpn=R8ShaBYV4Z8XRRom&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ptk=youtube_none&pltype=contentugc
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ptracking?html5=1&video_id=c8UgcYzGw8E&cpn=R8ShaBYV4Z8XRRom&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ptk=youtube_none&pltype=contentugc HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Visitor-Id: CgticHhDMmhaNlgwayiCo_e1BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgHg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240812.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1723715972184&flash=0&frm=2&u_tz&u_his=3&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C70%2C15&vis=1&wgl=true&ca_type=image
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
date: Thu, 15 Aug 2024 09:59:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: Video Stats Server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/api/stats/playback?ns=yt&el=embedded&cpn=R8ShaBYV4Z8XRRom&ver=2&cmt=0.04&fmt=243&fs=0&rt=1.255&euri=http%3A%2F%2F3.142.138.123%2F&lact=1337&cl=662321128&mos=1&volume=100&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240812.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&autoplay=1&epm=1&hl=en_US&cr=NO&len=3954.521&fexp=v1%2C24004644%2C434717%2C60171%2C67155%2C26443548%2C7111%2C24166%2C12177%2C9954%2C1192%2C33462%2C2%2C17768%2C19202%2C9950%2C2196%2C9996%2C1103%2C6953%2C11044%2C501%2C1970%2C7546%2C14041%2C3760%2C12945%2C10607%2C321%2C148%2C2%2C2126%2C14%2C1322%2C4205%2C1823%2C3186%2C2912%2C7568%2C328%2C14%2C142%2C4092%2C1768%2C604%2C4073%2C2150%2C439%2C5905&rtn=9&afmt=251&size=70%3A15&muted=1&docid=c8UgcYzGw8E&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&plid=AAYfteY74-3HMYPq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fc8UgcYzGw8E%3Fautoplay%3D1%26mute%3D1&of=4XKpUj-jEd5dOTKZWLr0FQ&vm=CAEQABgEOjJBSHFpSlRKRUgzcVVlNUdOVVFEMk5iRkRpRWp4Z1FxNkcyTk45NFJhR19rWWhGalJZZ2JiQU9BckJGdDFLTlozZ3l3RzNwc1NTaktoeW5UaEJlSk9xUE5MUnBoeEhTYkZLZzdJM2NrQmlQcktKMzhQXy1xWHV3OW9KVXRfV2hpeFY4cFB4aVRMcXpSOFFTNVpzQ2xDaFE
204 No Content 0 B URL GET HTTP/3 www.youtube.com/api/stats/playback?ns=yt&el=embedded&cpn=R8ShaBYV4Z8XRRom&ver=2&cmt=0.04&fmt=243&fs=0&rt=1.255&euri=http%3A%2F%2F3.142.138.123%2F&lact=1337&cl=662321128&mos=1&volume=100&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240812.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&autoplay=1&epm=1&hl=en_US&cr=NO&len=3954.521&fexp=v1%2C24004644%2C434717%2C60171%2C67155%2C26443548%2C7111%2C24166%2C12177%2C9954%2C1192%2C33462%2C2%2C17768%2C19202%2C9950%2C2196%2C9996%2C1103%2C6953%2C11044%2C501%2C1970%2C7546%2C14041%2C3760%2C12945%2C10607%2C321%2C148%2C2%2C2126%2C14%2C1322%2C4205%2C1823%2C3186%2C2912%2C7568%2C328%2C14%2C142%2C4092%2C1768%2C604%2C4073%2C2150%2C439%2C5905&rtn=9&afmt=251&size=70%3A15&muted=1&docid=c8UgcYzGw8E&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&plid=AAYfteY74-3HMYPq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fc8UgcYzGw8E%3Fautoplay%3D1%26mute%3D1&of=4XKpUj-jEd5dOTKZWLr0FQ&vm=CAEQABgEOjJBSHFpSlRKRUgzcVVlNUdOVVFEMk5iRkRpRWp4Z1FxNkcyTk45NFJhR19rWWhGalJZZ2JiQU9BckJGdDFLTlozZ3l3RzNwc1NTaktoeW5UaEJlSk9xUE5MUnBoeEhTYkZLZzdJM2NrQmlQcktKMzhQXy1xWHV3OW9KVXRfV2hpeFY4cFB4aVRMcXpSOFFTNVpzQ2xDaFE
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/stats/playback?ns=yt&el=embedded&cpn=R8ShaBYV4Z8XRRom&ver=2&cmt=0.04&fmt=243&fs=0&rt=1.255&euri=http%3A%2F%2F3.142.138.123%2F&lact=1337&cl=662321128&mos=1&volume=100&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240812.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&autoplay=1&epm=1&hl=en_US&cr=NO&len=3954.521&fexp=v1%2C24004644%2C434717%2C60171%2C67155%2C26443548%2C7111%2C24166%2C12177%2C9954%2C1192%2C33462%2C2%2C17768%2C19202%2C9950%2C2196%2C9996%2C1103%2C6953%2C11044%2C501%2C1970%2C7546%2C14041%2C3760%2C12945%2C10607%2C321%2C148%2C2%2C2126%2C14%2C1322%2C4205%2C1823%2C3186%2C2912%2C7568%2C328%2C14%2C142%2C4092%2C1768%2C604%2C4073%2C2150%2C439%2C5905&rtn=9&afmt=251&size=70%3A15&muted=1&docid=c8UgcYzGw8E&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&plid=AAYfteY74-3HMYPq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fc8UgcYzGw8E%3Fautoplay%3D1%26mute%3D1&of=4XKpUj-jEd5dOTKZWLr0FQ&vm=CAEQABgEOjJBSHFpSlRKRUgzcVVlNUdOVVFEMk5iRkRpRWp4Z1FxNkcyTk45NFJhR19rWWhGalJZZ2JiQU9BckJGdDFLTlozZ3l3RzNwc1NTaktoeW5UaEJlSk9xUE5MUnBoeEhTYkZLZzdJM2NrQmlQcktKMzhQXy1xWHV3OW9KVXRfV2hpeFY4cFB4aVRMcXpSOFFTNVpzQ2xDaFE HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Visitor-Id: CgticHhDMmhaNlgwayiCo_e1BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgHg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240812.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1723715972184&flash=0&frm=2&u_tz&u_his=3&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C70%2C15&vis=1&wgl=true&ca_type=image
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
date: Thu, 15 Aug 2024 09:59:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: Video Stats Server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
rr5---sn-oj5hn5-55.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=59928742&dur=3954.521&lmt=1695399391242210&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgBOJWLJL7RjKm6Ps9f8his1QAoqmzptUyIDqybbc8C2gCIQDeetEqtn9dpdSkEEvWPLWHdblQxm9hHgIYxl444MAsvg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIhAOjfb7eTtwWL0Qb-RrR5YQeYHNTwxPqghlUDWlNvPfrRAiBwAvPlgLhb6dN68wtYseX_-IPiexETeKnuyFQkL6Mjnw%3D%3D&range=72807-154188&rn=7&rbuf=4232&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1
200 OK 420 kB URL POST HTTP/3 rr5---sn-oj5hn5-55.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=59928742&dur=3954.521&lmt=1695399391242210&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgBOJWLJL7RjKm6Ps9f8his1QAoqmzptUyIDqybbc8C2gCIQDeetEqtn9dpdSkEEvWPLWHdblQxm9hHgIYxl444MAsvg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIhAOjfb7eTtwWL0Qb-RrR5YQeYHNTwxPqghlUDWlNvPfrRAiBwAvPlgLhb6dN68wtYseX_-IPiexETeKnuyFQkL6Mjnw%3D%3D&range=72807-154188&rn=7&rbuf=4232&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.c.docs.google.com
Fingerprint6C:53:8D:31:BE:19:4F:5B:40:5F:DD:1A:A7:8A:B4:32:3A:6F:0F:DF
ValidityTue, 16 Jul 2024 14:34:06 GMT - Tue, 24 Sep 2024 14:34:05 GMT
Size 420 kB (420243 bytes)
Hash a3bbeb3261e98ae487368983a67189ac
0a4fbb2d0326106c4c9eb43dfea7c37d7073e47d
53e56becf205a6dac576126faf2ccf76f651aee8560214e7b76d0c30d4656215
POST /videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=59928742&dur=3954.521&lmt=1695399391242210&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgBOJWLJL7RjKm6Ps9f8his1QAoqmzptUyIDqybbc8C2gCIQDeetEqtn9dpdSkEEvWPLWHdblQxm9hHgIYxl444MAsvg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIhAOjfb7eTtwWL0Qb-RrR5YQeYHNTwxPqghlUDWlNvPfrRAiBwAvPlgLhb6dN68wtYseX_-IPiexETeKnuyFQkL6Mjnw%3D%3D&range=72807-154188&rn=7&rbuf=4232&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1 HTTP/1.1
Host: rr5---sn-oj5hn5-55.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.youtube.com/
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
last-modified: Fri, 22 Sep 2023 16:16:31 GMT
content-type: application/vnd.yt-ump
date: Thu, 15 Aug 2024 09:59:33 GMT
expires: Thu, 15 Aug 2024 09:59:33 GMT
cache-control: private, max-age=21299
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
client-protocol: quic
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
timing-allow-origin: https://www.youtube.com
access-control-expose-headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
vary: Origin
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
server: gvs 1.0
3.142.138.123/kioscos/kioscobanner3.0/ping.php
200 OK 139 B URL POST HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/ping.php
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type ASCII text, with no line terminators
Hash da20695291e12a1c7f4fd4a162a9f150
d5f3e82c79a53aad13dc66a80b89e9b9cbc07d37
6a40393b3c41f020cd173a3bdf14677fe57a60e34421e932844803dd01a86ebf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /kioscos/kioscobanner3.0/ping.php HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
Content-Length: 12
Origin: http://3.142.138.123
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: PHP/5.6.8, ASP.NET
Date: Thu, 15 Aug 2024 09:59:35 GMT
Content-Length: 139
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Thu, 15 Aug 2024 09:59:36 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/api/stats/atr?ns=yt&el=embedded&cpn=R8ShaBYV4Z8XRRom&ver=2&cmt=3.017&fmt=243&fs=0&rt=4.305&euri=http%3A%2F%2F3.142.138.123%2F&lact=4386&cl=662321128&mos=1&volume=100&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240812.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&autoplay=1&epm=1&hl=en_US&cr=NO&len=3954.521&fexp=v1%2C24004644%2C434717%2C60171%2C67155%2C26443548%2C7111%2C24166%2C12177%2C9954%2C1192%2C33462%2C2%2C17768%2C19202%2C9950%2C2196%2C9996%2C1103%2C6953%2C11044%2C501%2C1970%2C7546%2C14041%2C3760%2C12945%2C10607%2C321%2C148%2C2%2C2126%2C14%2C1322%2C4205%2C1823%2C3186%2C2912%2C7568%2C328%2C14%2C142%2C4092%2C1768%2C604%2C4073%2C2150%2C439%2C5905&afmt=251&muted=1&docid=c8UgcYzGw8E&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&plid=AAYfteY74-3HMYPq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fc8UgcYzGw8E%3Fautoplay%3D1%26mute%3D1&of=4XKpUj-jEd5dOTKZWLr0FQ&vm=CAEQABgEOjJBSHFpSlRKRUgzcVVlNUdOVVFEMk5iRkRpRWp4Z1FxNkcyTk45NFJhR19rWWhGalJZZ2JiQU9BckJGdDFLTlozZ3l3RzNwc1NTaktoeW5UaEJlSk9xUE5MUnBoeEhTYkZLZzdJM2NrQmlQcktKMzhQXy1xWHV3OW9KVXRfV2hpeFY4cFB4aVRMcXpSOFFTNVpzQ2xDaFE
204 No Content 0 B URL POST HTTP/3 www.youtube.com/api/stats/atr?ns=yt&el=embedded&cpn=R8ShaBYV4Z8XRRom&ver=2&cmt=3.017&fmt=243&fs=0&rt=4.305&euri=http%3A%2F%2F3.142.138.123%2F&lact=4386&cl=662321128&mos=1&volume=100&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240812.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&autoplay=1&epm=1&hl=en_US&cr=NO&len=3954.521&fexp=v1%2C24004644%2C434717%2C60171%2C67155%2C26443548%2C7111%2C24166%2C12177%2C9954%2C1192%2C33462%2C2%2C17768%2C19202%2C9950%2C2196%2C9996%2C1103%2C6953%2C11044%2C501%2C1970%2C7546%2C14041%2C3760%2C12945%2C10607%2C321%2C148%2C2%2C2126%2C14%2C1322%2C4205%2C1823%2C3186%2C2912%2C7568%2C328%2C14%2C142%2C4092%2C1768%2C604%2C4073%2C2150%2C439%2C5905&afmt=251&muted=1&docid=c8UgcYzGw8E&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&plid=AAYfteY74-3HMYPq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fc8UgcYzGw8E%3Fautoplay%3D1%26mute%3D1&of=4XKpUj-jEd5dOTKZWLr0FQ&vm=CAEQABgEOjJBSHFpSlRKRUgzcVVlNUdOVVFEMk5iRkRpRWp4Z1FxNkcyTk45NFJhR19rWWhGalJZZ2JiQU9BckJGdDFLTlozZ3l3RzNwc1NTaktoeW5UaEJlSk9xUE5MUnBoeEhTYkZLZzdJM2NrQmlQcktKMzhQXy1xWHV3OW9KVXRfV2hpeFY4cFB4aVRMcXpSOFFTNVpzQ2xDaFE
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/stats/atr?ns=yt&el=embedded&cpn=R8ShaBYV4Z8XRRom&ver=2&cmt=3.017&fmt=243&fs=0&rt=4.305&euri=http%3A%2F%2F3.142.138.123%2F&lact=4386&cl=662321128&mos=1&volume=100&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240812.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&autoplay=1&epm=1&hl=en_US&cr=NO&len=3954.521&fexp=v1%2C24004644%2C434717%2C60171%2C67155%2C26443548%2C7111%2C24166%2C12177%2C9954%2C1192%2C33462%2C2%2C17768%2C19202%2C9950%2C2196%2C9996%2C1103%2C6953%2C11044%2C501%2C1970%2C7546%2C14041%2C3760%2C12945%2C10607%2C321%2C148%2C2%2C2126%2C14%2C1322%2C4205%2C1823%2C3186%2C2912%2C7568%2C328%2C14%2C142%2C4092%2C1768%2C604%2C4073%2C2150%2C439%2C5905&afmt=251&muted=1&docid=c8UgcYzGw8E&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&plid=AAYfteY74-3HMYPq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fc8UgcYzGw8E%3Fautoplay%3D1%26mute%3D1&of=4XKpUj-jEd5dOTKZWLr0FQ&vm=CAEQABgEOjJBSHFpSlRKRUgzcVVlNUdOVVFEMk5iRkRpRWp4Z1FxNkcyTk45NFJhR19rWWhGalJZZ2JiQU9BckJGdDFLTlozZ3l3RzNwc1NTaktoeW5UaEJlSk9xUE5MUnBoeEhTYkZLZzdJM2NrQmlQcktKMzhQXy1xWHV3OW9KVXRfV2hpeFY4cFB4aVRMcXpSOFFTNVpzQ2xDaFE HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Visitor-Id: CgticHhDMmhaNlgwayiCo_e1BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgHg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240812.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1723715972184&flash=0&frm=2&u_tz&u_his=3&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C70%2C15&vis=1&wgl=true&ca_type=image
Content-Type: application/x-www-form-urlencoded
Content-Length: 1962
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
date: Thu, 15 Aug 2024 09:59:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
x-content-type-options: nosniff
server: Video Stats Server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 589
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Thu, 15 Aug 2024 09:59:36 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
3.142.138.123/kioscos/kioscobanner3.0/imagenes/Banner2.jpg
200 OK 43 kB URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/imagenes/Banner2.jpg
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 960x720, components 3
Hash 06fb27b1e42f547ff1741a7aa8d32b9d
c160173bf9086f966cff8f9b9f17f7b959cfa25d
28518056ab9b797ca69cc1b65fb5ce715c830a2f3b3e9d34fd5b496b4644d381
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/imagenes/Banner2.jpg HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/css/estilos.css
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Tue, 02 Jul 2024 22:23:22 GMT
Accept-Ranges: bytes
ETag: "6298f072ceccda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:39 GMT
Content-Length: 43346
3.142.138.123/kioscos/kioscobanner3.0/ping.php
200 OK 139 B URL POST HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/ping.php
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type ASCII text, with no line terminators
Hash da20695291e12a1c7f4fd4a162a9f150
d5f3e82c79a53aad13dc66a80b89e9b9cbc07d37
6a40393b3c41f020cd173a3bdf14677fe57a60e34421e932844803dd01a86ebf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /kioscos/kioscobanner3.0/ping.php HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
Content-Length: 12
Origin: http://3.142.138.123
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: PHP/5.6.8, ASP.NET
Date: Thu, 15 Aug 2024 09:59:40 GMT
Content-Length: 139
www.youtube.com/api/stats/watchtime?ns=yt&el=embedded&cpn=R8ShaBYV4Z8XRRom&ver=2&cmt=7.755&fmt=243&fs=0&rt=9.001&euri=http%3A%2F%2F3.142.138.123%2F&lact=9083&cl=662321128&state=playing&volume=100&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240812.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&autoplay=1&hl=en_US&cr=NO&len=3954.521&rtn=19&afmt=251&idpj=-3&ldpj=-12&rti=9&size=70%3A15&st=0&et=7.755&muted=1&docid=c8UgcYzGw8E&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&plid=AAYfteY74-3HMYPq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fc8UgcYzGw8E%3Fautoplay%3D1%26mute%3D1&of=4XKpUj-jEd5dOTKZWLr0FQ&vm=CAEQABgEOjJBSHFpSlRKRUgzcVVlNUdOVVFEMk5iRkRpRWp4Z1FxNkcyTk45NFJhR19rWWhGalJZZ2JiQU9BckJGdDFLTlozZ3l3RzNwc1NTaktoeW5UaEJlSk9xUE5MUnBoeEhTYkZLZzdJM2NrQmlQcktKMzhQXy1xWHV3OW9KVXRfV2hpeFY4cFB4aVRMcXpSOFFTNVpzQ2xDaFE
204 No Content 0 B URL GET HTTP/3 www.youtube.com/api/stats/watchtime?ns=yt&el=embedded&cpn=R8ShaBYV4Z8XRRom&ver=2&cmt=7.755&fmt=243&fs=0&rt=9.001&euri=http%3A%2F%2F3.142.138.123%2F&lact=9083&cl=662321128&state=playing&volume=100&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240812.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&autoplay=1&hl=en_US&cr=NO&len=3954.521&rtn=19&afmt=251&idpj=-3&ldpj=-12&rti=9&size=70%3A15&st=0&et=7.755&muted=1&docid=c8UgcYzGw8E&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&plid=AAYfteY74-3HMYPq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fc8UgcYzGw8E%3Fautoplay%3D1%26mute%3D1&of=4XKpUj-jEd5dOTKZWLr0FQ&vm=CAEQABgEOjJBSHFpSlRKRUgzcVVlNUdOVVFEMk5iRkRpRWp4Z1FxNkcyTk45NFJhR19rWWhGalJZZ2JiQU9BckJGdDFLTlozZ3l3RzNwc1NTaktoeW5UaEJlSk9xUE5MUnBoeEhTYkZLZzdJM2NrQmlQcktKMzhQXy1xWHV3OW9KVXRfV2hpeFY4cFB4aVRMcXpSOFFTNVpzQ2xDaFE
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/stats/watchtime?ns=yt&el=embedded&cpn=R8ShaBYV4Z8XRRom&ver=2&cmt=7.755&fmt=243&fs=0&rt=9.001&euri=http%3A%2F%2F3.142.138.123%2F&lact=9083&cl=662321128&state=playing&volume=100&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240812.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&autoplay=1&hl=en_US&cr=NO&len=3954.521&rtn=19&afmt=251&idpj=-3&ldpj=-12&rti=9&size=70%3A15&st=0&et=7.755&muted=1&docid=c8UgcYzGw8E&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&plid=AAYfteY74-3HMYPq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fc8UgcYzGw8E%3Fautoplay%3D1%26mute%3D1&of=4XKpUj-jEd5dOTKZWLr0FQ&vm=CAEQABgEOjJBSHFpSlRKRUgzcVVlNUdOVVFEMk5iRkRpRWp4Z1FxNkcyTk45NFJhR19rWWhGalJZZ2JiQU9BckJGdDFLTlozZ3l3RzNwc1NTaktoeW5UaEJlSk9xUE5MUnBoeEhTYkZLZzdJM2NrQmlQcktKMzhQXy1xWHV3OW9KVXRfV2hpeFY4cFB4aVRMcXpSOFFTNVpzQ2xDaFE HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Visitor-Id: CgticHhDMmhaNlgwayiCo_e1BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgHg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240812.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1723715972184&flash=0&frm=2&u_tz&u_his=3&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C70%2C15&vis=1&wgl=true&ca_type=image
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
date: Thu, 15 Aug 2024 09:59:41 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: Video Stats Server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/api/stats/qoe?fmt=243&afmt=251&cpn=R8ShaBYV4Z8XRRom&el=embedded&ns=yt&fexp=v1%2C24004644%2C434717%2C60171%2C67155%2C26443548%2C7111%2C24166%2C12177%2C9954%2C1192%2C33462%2C2%2C17768%2C19202%2C9950%2C2196%2C9996%2C1103%2C6953%2C11044%2C501%2C1970%2C7546%2C14041%2C3760%2C12945%2C10607%2C321%2C148%2C2%2C2126%2C14%2C1322%2C4205%2C1823%2C3186%2C2912%2C7568%2C328%2C14%2C142%2C4092%2C1768%2C604%2C4073%2C2150%2C439%2C5905&cl=662321128&seq=2&docid=c8UgcYzGw8E&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&event=streamingstats&plid=AAYfteY74-3HMYPq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fc8UgcYzGw8E%3Fautoplay%3D1%26mute%3D1&qclc=ChBSOFNoYUJZVjRaOFhSUm9tEAI&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240812.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&afs=0.339:251;CggKA2RyYxIBMQ::i&ctmp=itr:t.655;&user_intent=0&bh=1.250:2.466,10.001:17.945&cmt=1.250:0.040,2.001:0.763,10.001:8.761&vps=1.250:PL,10.001:PL&bwm=10.001:875465:1.938&bwe=10.001:2717420&df=10.001:0
204 No Content 0 B URL POST HTTP/3 www.youtube.com/api/stats/qoe?fmt=243&afmt=251&cpn=R8ShaBYV4Z8XRRom&el=embedded&ns=yt&fexp=v1%2C24004644%2C434717%2C60171%2C67155%2C26443548%2C7111%2C24166%2C12177%2C9954%2C1192%2C33462%2C2%2C17768%2C19202%2C9950%2C2196%2C9996%2C1103%2C6953%2C11044%2C501%2C1970%2C7546%2C14041%2C3760%2C12945%2C10607%2C321%2C148%2C2%2C2126%2C14%2C1322%2C4205%2C1823%2C3186%2C2912%2C7568%2C328%2C14%2C142%2C4092%2C1768%2C604%2C4073%2C2150%2C439%2C5905&cl=662321128&seq=2&docid=c8UgcYzGw8E&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&event=streamingstats&plid=AAYfteY74-3HMYPq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fc8UgcYzGw8E%3Fautoplay%3D1%26mute%3D1&qclc=ChBSOFNoYUJZVjRaOFhSUm9tEAI&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240812.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&afs=0.339:251;CggKA2RyYxIBMQ::i&ctmp=itr:t.655;&user_intent=0&bh=1.250:2.466,10.001:17.945&cmt=1.250:0.040,2.001:0.763,10.001:8.761&vps=1.250:PL,10.001:PL&bwm=10.001:875465:1.938&bwe=10.001:2717420&df=10.001:0
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/stats/qoe?fmt=243&afmt=251&cpn=R8ShaBYV4Z8XRRom&el=embedded&ns=yt&fexp=v1%2C24004644%2C434717%2C60171%2C67155%2C26443548%2C7111%2C24166%2C12177%2C9954%2C1192%2C33462%2C2%2C17768%2C19202%2C9950%2C2196%2C9996%2C1103%2C6953%2C11044%2C501%2C1970%2C7546%2C14041%2C3760%2C12945%2C10607%2C321%2C148%2C2%2C2126%2C14%2C1322%2C4205%2C1823%2C3186%2C2912%2C7568%2C328%2C14%2C142%2C4092%2C1768%2C604%2C4073%2C2150%2C439%2C5905&cl=662321128&seq=2&docid=c8UgcYzGw8E&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&event=streamingstats&plid=AAYfteY74-3HMYPq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fc8UgcYzGw8E%3Fautoplay%3D1%26mute%3D1&qclc=ChBSOFNoYUJZVjRaOFhSUm9tEAI&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240812.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&afs=0.339:251;CggKA2RyYxIBMQ::i&ctmp=itr:t.655;&user_intent=0&bh=1.250:2.466,10.001:17.945&cmt=1.250:0.040,2.001:0.763,10.001:8.761&vps=1.250:PL,10.001:PL&bwm=10.001:875465:1.938&bwe=10.001:2717420&df=10.001:0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Visitor-Id: CgticHhDMmhaNlgwayiCo_e1BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgHg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240812.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1723715972184&flash=0&frm=2&u_tz&u_his=3&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C70%2C15&vis=1&wgl=true&ca_type=image
Content-Type: application/x-www-form-urlencoded
Content-Length: 226
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
date: Thu, 15 Aug 2024 09:59:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
x-content-type-options: nosniff
server: Video Stats Server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
rr5---sn-oj5hn5-55.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=243&aitags=133%2C134%2C135%2C160%2C242%2C243%2C244%2C278&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&mime=video%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=75307291&dur=3954.466&lmt=1695398588380105&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=531F224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKR0rnD2BL-3w9e6ez35BAYx_WmamgRnOFR7iq9K6hsPAiApqm466QMyIFryOwBjigjW2jkhAK4GmsC-32s9Lu5rsg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIgOjPnkr_wzKSbtLqMKB6BqUoGQxLmoVXlSK0g6Y1yHwgCIQC32Tr3qbIBjWo5_GZwnUlR2h5lWYUM67yWB1ulxO90Yw%3D%3D&range=272412-990841&rn=11&rbuf=17946&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1
200 OK 726 kB URL POST HTTP/3 rr5---sn-oj5hn5-55.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=243&aitags=133%2C134%2C135%2C160%2C242%2C243%2C244%2C278&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&mime=video%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=75307291&dur=3954.466&lmt=1695398588380105&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=531F224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKR0rnD2BL-3w9e6ez35BAYx_WmamgRnOFR7iq9K6hsPAiApqm466QMyIFryOwBjigjW2jkhAK4GmsC-32s9Lu5rsg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIgOjPnkr_wzKSbtLqMKB6BqUoGQxLmoVXlSK0g6Y1yHwgCIQC32Tr3qbIBjWo5_GZwnUlR2h5lWYUM67yWB1ulxO90Yw%3D%3D&range=272412-990841&rn=11&rbuf=17946&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.c.docs.google.com
Fingerprint6C:53:8D:31:BE:19:4F:5B:40:5F:DD:1A:A7:8A:B4:32:3A:6F:0F:DF
ValidityTue, 16 Jul 2024 14:34:06 GMT - Tue, 24 Sep 2024 14:34:05 GMT
Size 726 kB (726417 bytes)
Hash af22c6fb53468b10e97eb64919182d2f
6938c4f69f0ee045e0fa38ce7cfed6bc39b6dcd4
62e4987bec3605620a9d2eae6cc020557e0b432667a39fab26e4030b424ab685
POST /videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=243&aitags=133%2C134%2C135%2C160%2C242%2C243%2C244%2C278&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&mime=video%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=75307291&dur=3954.466&lmt=1695398588380105&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=531F224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKR0rnD2BL-3w9e6ez35BAYx_WmamgRnOFR7iq9K6hsPAiApqm466QMyIFryOwBjigjW2jkhAK4GmsC-32s9Lu5rsg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIgOjPnkr_wzKSbtLqMKB6BqUoGQxLmoVXlSK0g6Y1yHwgCIQC32Tr3qbIBjWo5_GZwnUlR2h5lWYUM67yWB1ulxO90Yw%3D%3D&range=272412-990841&rn=11&rbuf=17946&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1 HTTP/1.1
Host: rr5---sn-oj5hn5-55.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.youtube.com/
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
last-modified: Fri, 22 Sep 2023 16:03:08 GMT
content-type: application/vnd.yt-ump
date: Thu, 15 Aug 2024 09:59:42 GMT
expires: Thu, 15 Aug 2024 09:59:42 GMT
cache-control: private, max-age=21290
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
client-protocol: quic
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
timing-allow-origin: https://www.youtube.com
access-control-expose-headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
vary: Origin
cross-origin-resource-policy: cross-origin
x-restrict-formats-hint: None
x-content-type-options: nosniff
server: gvs 1.0
3.142.138.123/kioscos/kioscobanner3.0/ping.php
200 OK 139 B URL POST HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/ping.php
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type ASCII text, with no line terminators
Hash da20695291e12a1c7f4fd4a162a9f150
d5f3e82c79a53aad13dc66a80b89e9b9cbc07d37
6a40393b3c41f020cd173a3bdf14677fe57a60e34421e932844803dd01a86ebf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /kioscos/kioscobanner3.0/ping.php HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
Content-Length: 12
Origin: http://3.142.138.123
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: PHP/5.6.8, ASP.NET
Date: Thu, 15 Aug 2024 09:59:45 GMT
Content-Length: 139
3.142.138.123/kioscos/kioscobanner3.0/imagenes/Banner3.jpg
200 OK 106 kB URL GET HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/imagenes/Banner3.jpg
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 960x720, components 3
Size 106 kB (105732 bytes)
Hash 358715fde9b9266e33fed227f9a2e591
a6926be614bbda1d2e49921f800fa55a7a39dcb5
9e5f54c3e215540baecf90d5b41e8257e02d4d383535f3696b11b7f94e5a598a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/imagenes/Banner3.jpg HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/css/estilos.css
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Tue, 02 Jul 2024 22:23:22 GMT
Accept-Ranges: bytes
ETag: "8ed71373ceccda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:48 GMT
Content-Length: 105732
3.142.138.123/kioscos/kioscobanner3.0/ping.php
200 OK 139 B URL POST HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/ping.php
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type ASCII text, with no line terminators
Hash da20695291e12a1c7f4fd4a162a9f150
d5f3e82c79a53aad13dc66a80b89e9b9cbc07d37
6a40393b3c41f020cd173a3bdf14677fe57a60e34421e932844803dd01a86ebf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /kioscos/kioscobanner3.0/ping.php HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
Content-Length: 12
Origin: http://3.142.138.123
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: PHP/5.6.8, ASP.NET
Date: Thu, 15 Aug 2024 09:59:50 GMT
Content-Length: 139
www.youtube.com/api/stats/watchtime?ns=yt&el=embedded&cpn=R8ShaBYV4Z8XRRom&ver=2&cmt=17.765&fmt=243&fs=0&rt=19.003&euri=http%3A%2F%2F3.142.138.123%2F&lact=19084&cl=662321128&state=playing&volume=100&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240812.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&autoplay=1&hl=en_US&cr=NO&len=3954.521&rtn=29&afmt=251&idpj=-3&ldpj=-12&rti=19&size=70%3A15&st=7.755&et=17.765&muted=1&docid=c8UgcYzGw8E&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&plid=AAYfteY74-3HMYPq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fc8UgcYzGw8E%3Fautoplay%3D1%26mute%3D1&of=4XKpUj-jEd5dOTKZWLr0FQ&vm=CAEQABgEOjJBSHFpSlRKRUgzcVVlNUdOVVFEMk5iRkRpRWp4Z1FxNkcyTk45NFJhR19rWWhGalJZZ2JiQU9BckJGdDFLTlozZ3l3RzNwc1NTaktoeW5UaEJlSk9xUE5MUnBoeEhTYkZLZzdJM2NrQmlQcktKMzhQXy1xWHV3OW9KVXRfV2hpeFY4cFB4aVRMcXpSOFFTNVpzQ2xDaFE
204 No Content 0 B URL GET HTTP/3 www.youtube.com/api/stats/watchtime?ns=yt&el=embedded&cpn=R8ShaBYV4Z8XRRom&ver=2&cmt=17.765&fmt=243&fs=0&rt=19.003&euri=http%3A%2F%2F3.142.138.123%2F&lact=19084&cl=662321128&state=playing&volume=100&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240812.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&autoplay=1&hl=en_US&cr=NO&len=3954.521&rtn=29&afmt=251&idpj=-3&ldpj=-12&rti=19&size=70%3A15&st=7.755&et=17.765&muted=1&docid=c8UgcYzGw8E&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&plid=AAYfteY74-3HMYPq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fc8UgcYzGw8E%3Fautoplay%3D1%26mute%3D1&of=4XKpUj-jEd5dOTKZWLr0FQ&vm=CAEQABgEOjJBSHFpSlRKRUgzcVVlNUdOVVFEMk5iRkRpRWp4Z1FxNkcyTk45NFJhR19rWWhGalJZZ2JiQU9BckJGdDFLTlozZ3l3RzNwc1NTaktoeW5UaEJlSk9xUE5MUnBoeEhTYkZLZzdJM2NrQmlQcktKMzhQXy1xWHV3OW9KVXRfV2hpeFY4cFB4aVRMcXpSOFFTNVpzQ2xDaFE
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/stats/watchtime?ns=yt&el=embedded&cpn=R8ShaBYV4Z8XRRom&ver=2&cmt=17.765&fmt=243&fs=0&rt=19.003&euri=http%3A%2F%2F3.142.138.123%2F&lact=19084&cl=662321128&state=playing&volume=100&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240812.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&autoplay=1&hl=en_US&cr=NO&len=3954.521&rtn=29&afmt=251&idpj=-3&ldpj=-12&rti=19&size=70%3A15&st=7.755&et=17.765&muted=1&docid=c8UgcYzGw8E&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&plid=AAYfteY74-3HMYPq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fc8UgcYzGw8E%3Fautoplay%3D1%26mute%3D1&of=4XKpUj-jEd5dOTKZWLr0FQ&vm=CAEQABgEOjJBSHFpSlRKRUgzcVVlNUdOVVFEMk5iRkRpRWp4Z1FxNkcyTk45NFJhR19rWWhGalJZZ2JiQU9BckJGdDFLTlozZ3l3RzNwc1NTaktoeW5UaEJlSk9xUE5MUnBoeEhTYkZLZzdJM2NrQmlQcktKMzhQXy1xWHV3OW9KVXRfV2hpeFY4cFB4aVRMcXpSOFFTNVpzQ2xDaFE HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Visitor-Id: CgticHhDMmhaNlgwayiCo_e1BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgHg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240812.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1723715972184&flash=0&frm=2&u_tz&u_his=3&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C70%2C15&vis=1&wgl=true&ca_type=image
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
date: Thu, 15 Aug 2024 09:59:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: Video Stats Server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
3.142.138.123/kioscos/kioscobanner3.0/ping.php
200 OK 139 B URL POST HTTP/1.1 3.142.138.123/kioscos/kioscobanner3.0/ping.php
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
File type ASCII text, with no line terminators
Hash da20695291e12a1c7f4fd4a162a9f150
d5f3e82c79a53aad13dc66a80b89e9b9cbc07d37
6a40393b3c41f020cd173a3bdf14677fe57a60e34421e932844803dd01a86ebf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /kioscos/kioscobanner3.0/ping.php HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
Content-Length: 12
Origin: http://3.142.138.123
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: PHP/5.6.8, ASP.NET
Date: Thu, 15 Aug 2024 09:59:55 GMT
Content-Length: 139
3.142.138.123/kioscos/kioscobanner3.0/imagenes/Banner4.jpg
38 kB URL 3.142.138.123/kioscos/kioscobanner3.0/imagenes/Banner4.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 662x307, components 3
Hash d95ff347d5b515e35829b9710a257253
9ce7220c4a11cda31cf91409496fe8da33d7ee00
6237502aa649b9529b1c8706c704fda8abb3b1debdc1875ebe5b2a8690681c71
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /kioscos/kioscobanner3.0/imagenes/Banner4.jpg HTTP/1.1
Host: 3.142.138.123
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/kioscos/kioscobanner3.0/css/estilos.css
Cookie: PHPSESSID=svie8um0ckblvgkctf2ifukkn6
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Tue, 02 Jul 2024 22:23:22 GMT
Accept-Ranges: bytes
ETag: "add11a73ceccda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Aug 2024 09:59:57 GMT
Content-Length: 37783
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1723715998662
Content-Type: application/json
X-Goog-Visitor-Id: CgticHhDMmhaNlgwayiCo_e1BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgHg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240812.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1723715971605&flash=0&frm=2&u_tz&u_his=3&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C70%2C15&vis=1&wgl=true&ca_type=image
Content-Length: 972
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Thu, 15 Aug 2024 09:59:58 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
rr5---sn-oj5hn5-55.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=243&aitags=133%2C134%2C135%2C160%2C242%2C243%2C244%2C278&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&mime=video%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=75307291&dur=3954.466&lmt=1695398588380105&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=531F224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKR0rnD2BL-3w9e6ez35BAYx_WmamgRnOFR7iq9K6hsPAiApqm466QMyIFryOwBjigjW2jkhAK4GmsC-32s9Lu5rsg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIgOjPnkr_wzKSbtLqMKB6BqUoGQxLmoVXlSK0g6Y1yHwgCIQC32Tr3qbIBjWo5_GZwnUlR2h5lWYUM67yWB1ulxO90Yw%3D%3D&range=94504-272411&rn=8&rbuf=4413&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1
200 OK 178 kB URL POST HTTP/3 rr5---sn-oj5hn5-55.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=243&aitags=133%2C134%2C135%2C160%2C242%2C243%2C244%2C278&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&mime=video%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=75307291&dur=3954.466&lmt=1695398588380105&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=531F224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKR0rnD2BL-3w9e6ez35BAYx_WmamgRnOFR7iq9K6hsPAiApqm466QMyIFryOwBjigjW2jkhAK4GmsC-32s9Lu5rsg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIgOjPnkr_wzKSbtLqMKB6BqUoGQxLmoVXlSK0g6Y1yHwgCIQC32Tr3qbIBjWo5_GZwnUlR2h5lWYUM67yWB1ulxO90Yw%3D%3D&range=94504-272411&rn=8&rbuf=4413&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.c.docs.google.com
Fingerprint6C:53:8D:31:BE:19:4F:5B:40:5F:DD:1A:A7:8A:B4:32:3A:6F:0F:DF
ValidityTue, 16 Jul 2024 14:34:06 GMT - Tue, 24 Sep 2024 14:34:05 GMT
Size 178 kB (177971 bytes)
Hash 8cbf90f792cc50466f0b71b711b29bad
589ccdabf5913eb8dd7a51e37bc1fffc96273b81
078f5a6797afe2a8edce12979a56d17dd2ca470fa6eb5a9a5fe1e6baed79d17f
POST /videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=243&aitags=133%2C134%2C135%2C160%2C242%2C243%2C244%2C278&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&mime=video%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=75307291&dur=3954.466&lmt=1695398588380105&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=531F224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKR0rnD2BL-3w9e6ez35BAYx_WmamgRnOFR7iq9K6hsPAiApqm466QMyIFryOwBjigjW2jkhAK4GmsC-32s9Lu5rsg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIgOjPnkr_wzKSbtLqMKB6BqUoGQxLmoVXlSK0g6Y1yHwgCIQC32Tr3qbIBjWo5_GZwnUlR2h5lWYUM67yWB1ulxO90Yw%3D%3D&range=94504-272411&rn=8&rbuf=4413&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1 HTTP/1.1
Host: rr5---sn-oj5hn5-55.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.youtube.com/
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
last-modified: Fri, 22 Sep 2023 16:03:08 GMT
content-type: application/vnd.yt-ump
date: Thu, 15 Aug 2024 09:59:33 GMT
expires: Thu, 15 Aug 2024 09:59:33 GMT
cache-control: private, max-age=21299
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
client-protocol: quic
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
timing-allow-origin: https://www.youtube.com
access-control-expose-headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
vary: Origin
cross-origin-resource-policy: cross-origin
x-restrict-formats-hint: None
x-content-type-options: nosniff
server: gvs 1.0
yt3.ggpht.com/zvLJFiX6xhfelgNEerD5OXYWyo7d1FoybmrPyKM1AsR_-QnmBv_k_Zo8fUix99NIQdAzIAjUaC4=s68-c-k-c0x00ffffff-no-rj
200 OK 2.4 kB URL GET HTTP/2 yt3.ggpht.com/zvLJFiX6xhfelgNEerD5OXYWyo7d1FoybmrPyKM1AsR_-QnmBv_k_Zo8fUix99NIQdAzIAjUaC4=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintA6:0A:39:C6:7C:75:70:95:1C:CC:6E:1F:5D:AF:3C:FD:47:BB:4D:A0
ValidityTue, 30 Jul 2024 12:49:08 GMT - Tue, 22 Oct 2024 12:49:07 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 68x68, components 3
Hash e39c48211dac285cad4646d231f948af
87f8bd53e51132d5e2ff3d69d01851b417bc625d
1ba7a984ce73a4cc5c8db97c1c2c38c888dc5f32ac69c3838fc0b609d9c051f0
GET /zvLJFiX6xhfelgNEerD5OXYWyo7d1FoybmrPyKM1AsR_-QnmBv_k_Zo8fUix99NIQdAzIAjUaC4=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="channels4_profile.jpg"
x-content-type-options: nosniff
server: fife
content-length: 2426
x-xss-protection: 0
date: Thu, 15 Aug 2024 09:59:32 GMT
expires: Fri, 16 Aug 2024 09:59:32 GMT
cache-control: public, max-age=86400, no-transform
age: 0
etag: "v1"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Fira+Sans
200 OK 2.2 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Fira+Sans
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
File type ASCII text, with very long lines (2281), with no line terminators
Hash 0033b5e6cfe28ace3fe5183fff42928d
078c3f4ad2c8264d28d7fa31254c170deeb597bb
6e68e17f334900fd2ad8ae706b53f9a99a5b492d9b2c8b8603aeafcfc78df3ec
GET /css?family=Fira+Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 15 Aug 2024 09:59:30 GMT
date: Thu, 15 Aug 2024 09:59:30 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
rr5---sn-oj5hn5-55.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=59928742&dur=3954.521&lmt=1695399391242210&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgBOJWLJL7RjKm6Ps9f8his1QAoqmzptUyIDqybbc8C2gCIQDeetEqtn9dpdSkEEvWPLWHdblQxm9hHgIYxl444MAsvg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIhAOjfb7eTtwWL0Qb-RrR5YQeYHNTwxPqghlUDWlNvPfrRAiBwAvPlgLhb6dN68wtYseX_-IPiexETeKnuyFQkL6Mjnw%3D%3D&range=154189-314857&rn=9&rbuf=9486&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1
200 OK 161 kB URL POST HTTP/3 rr5---sn-oj5hn5-55.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=59928742&dur=3954.521&lmt=1695399391242210&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgBOJWLJL7RjKm6Ps9f8his1QAoqmzptUyIDqybbc8C2gCIQDeetEqtn9dpdSkEEvWPLWHdblQxm9hHgIYxl444MAsvg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIhAOjfb7eTtwWL0Qb-RrR5YQeYHNTwxPqghlUDWlNvPfrRAiBwAvPlgLhb6dN68wtYseX_-IPiexETeKnuyFQkL6Mjnw%3D%3D&range=154189-314857&rn=9&rbuf=9486&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.c.docs.google.com
Fingerprint6C:53:8D:31:BE:19:4F:5B:40:5F:DD:1A:A7:8A:B4:32:3A:6F:0F:DF
ValidityTue, 16 Jul 2024 14:34:06 GMT - Tue, 24 Sep 2024 14:34:05 GMT
Size 161 kB (160764 bytes)
Hash c8a026222c1abb4263d4e3c460f04dc8
4a2a17d751082486f320ad9312351a7cbb0d0555
f37a5ce7fb03b6d23b8ee8b2341d868d6a991a6c9ec2f51287f536192ef478ef
POST /videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=59928742&dur=3954.521&lmt=1695399391242210&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgBOJWLJL7RjKm6Ps9f8his1QAoqmzptUyIDqybbc8C2gCIQDeetEqtn9dpdSkEEvWPLWHdblQxm9hHgIYxl444MAsvg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIhAOjfb7eTtwWL0Qb-RrR5YQeYHNTwxPqghlUDWlNvPfrRAiBwAvPlgLhb6dN68wtYseX_-IPiexETeKnuyFQkL6Mjnw%3D%3D&range=154189-314857&rn=9&rbuf=9486&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1 HTTP/1.1
Host: rr5---sn-oj5hn5-55.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.youtube.com/
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
last-modified: Fri, 22 Sep 2023 16:16:31 GMT
content-type: application/vnd.yt-ump
date: Thu, 15 Aug 2024 09:59:33 GMT
expires: Thu, 15 Aug 2024 09:59:33 GMT
cache-control: private, max-age=21299
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
client-protocol: quic
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
timing-allow-origin: https://www.youtube.com
access-control-expose-headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
vary: Origin
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
server: gvs 1.0
rr5---sn-oj5hn5-55.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=59928742&dur=3954.521&lmt=1695399391242210&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgBOJWLJL7RjKm6Ps9f8his1QAoqmzptUyIDqybbc8C2gCIQDeetEqtn9dpdSkEEvWPLWHdblQxm9hHgIYxl444MAsvg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIhAOjfb7eTtwWL0Qb-RrR5YQeYHNTwxPqghlUDWlNvPfrRAiBwAvPlgLhb6dN68wtYseX_-IPiexETeKnuyFQkL6Mjnw%3D%3D&range=596695-1052211&rn=12&rbuf=24826&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1
200 OK 456 kB URL POST HTTP/3 rr5---sn-oj5hn5-55.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=59928742&dur=3954.521&lmt=1695399391242210&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgBOJWLJL7RjKm6Ps9f8his1QAoqmzptUyIDqybbc8C2gCIQDeetEqtn9dpdSkEEvWPLWHdblQxm9hHgIYxl444MAsvg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIhAOjfb7eTtwWL0Qb-RrR5YQeYHNTwxPqghlUDWlNvPfrRAiBwAvPlgLhb6dN68wtYseX_-IPiexETeKnuyFQkL6Mjnw%3D%3D&range=596695-1052211&rn=12&rbuf=24826&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.c.docs.google.com
Fingerprint6C:53:8D:31:BE:19:4F:5B:40:5F:DD:1A:A7:8A:B4:32:3A:6F:0F:DF
ValidityTue, 16 Jul 2024 14:34:06 GMT - Tue, 24 Sep 2024 14:34:05 GMT
Size 456 kB (455612 bytes)
Hash daeba65980a7333ddfea4c4e9936f74c
86bec32d88b41cabf7304db9849023bd92bb6ed5
be2c4f1cfad66a8813b433427487b7dfb21a2629b84dfc79190f26100e64c9bb
POST /videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=59928742&dur=3954.521&lmt=1695399391242210&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgBOJWLJL7RjKm6Ps9f8his1QAoqmzptUyIDqybbc8C2gCIQDeetEqtn9dpdSkEEvWPLWHdblQxm9hHgIYxl444MAsvg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIhAOjfb7eTtwWL0Qb-RrR5YQeYHNTwxPqghlUDWlNvPfrRAiBwAvPlgLhb6dN68wtYseX_-IPiexETeKnuyFQkL6Mjnw%3D%3D&range=596695-1052211&rn=12&rbuf=24826&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1 HTTP/1.1
Host: rr5---sn-oj5hn5-55.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.youtube.com/
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
last-modified: Fri, 22 Sep 2023 16:16:31 GMT
content-type: application/vnd.yt-ump
date: Thu, 15 Aug 2024 09:59:48 GMT
expires: Thu, 15 Aug 2024 09:59:48 GMT
cache-control: private, max-age=21284
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
client-protocol: quic
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
timing-allow-origin: https://www.youtube.com
access-control-expose-headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
vary: Origin
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
server: gvs 1.0
www.youtube.com/s/player/410a4f15/player_ias.vflset/en_US/remote.js
200 OK 121 kB URL GET HTTP/3 www.youtube.com/s/player/410a4f15/player_ias.vflset/en_US/remote.js
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type JavaScript source, ASCII text, with very long lines (543)
Size 121 kB (120847 bytes)
Hash b98a22487ac02c039c99602876d1972a
9e5b569d57053c14b506b987ac495e6b2acd8c5b
1b88aa48ac2d0a3cdca3725b9dec657bc4cf5a774c492412e4300dde1950db0b
GET /s/player/410a4f15/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33656
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Aug 2024 07:29:21 GMT
expires: Wed, 13 Aug 2025 07:29:21 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 13 Aug 2024 04:17:57 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 181811
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/410a4f15/player_ias.vflset/en_US/embed.js
200 OK 68 kB URL GET HTTP/3 www.youtube.com/s/player/410a4f15/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type JavaScript source, ASCII text, with very long lines (3391)
Hash 8e211f141e5328418be41a23102f62ab
883b670378bae8a5c1cc60fe5ec28078f2404724
bad0e523af56d8645e53575cdc1defd4f1a4b81e59249f416e0af5d621a50fcf
GET /s/player/410a4f15/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 20603
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Aug 2024 07:29:21 GMT
expires: Wed, 13 Aug 2025 07:29:21 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 13 Aug 2024 04:17:57 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 181811
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.googleapis.com/css?family=Pontano+Sans
200 OK 803 B URL GET HTTP/2 fonts.googleapis.com/css?family=Pontano+Sans
IP
Requested by http://3.142.138.123/kioscos/kioscobanner3.0/index.php
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
File type ASCII text, with very long lines (819), with no line terminators
Hash dc0bd176e38116a67b8023539cc03e85
eb6881050bee8343744155d362f40b5db6efb4e7
1c77f0043694e33c9d98e422fb2533c5d3483a3bf56e8b88341702102bbed656
GET /css?family=Pontano+Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://3.142.138.123/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 15 Aug 2024 09:59:30 GMT
date: Thu, 15 Aug 2024 09:59:30 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/410a4f15/www-player.css
200 OK 385 kB URL GET HTTP/3 www.youtube.com/s/player/410a4f15/www-player.css
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Size 385 kB (385083 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/player/410a4f15/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 48479
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Aug 2024 07:20:24 GMT
expires: Wed, 13 Aug 2025 07:20:24 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 13 Aug 2024 04:17:57 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 182347
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
rr5---sn-oj5hn5-55.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=59928742&dur=3954.521&lmt=1695399391242210&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgBOJWLJL7RjKm6Ps9f8his1QAoqmzptUyIDqybbc8C2gCIQDeetEqtn9dpdSkEEvWPLWHdblQxm9hHgIYxl444MAsvg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIhAOjfb7eTtwWL0Qb-RrR5YQeYHNTwxPqghlUDWlNvPfrRAiBwAvPlgLhb6dN68wtYseX_-IPiexETeKnuyFQkL6Mjnw%3D%3D&range=314858-596694&rn=10&rbuf=14655&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1
200 OK 282 kB URL POST HTTP/3 rr5---sn-oj5hn5-55.googlevideo.com/videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=59928742&dur=3954.521&lmt=1695399391242210&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgBOJWLJL7RjKm6Ps9f8his1QAoqmzptUyIDqybbc8C2gCIQDeetEqtn9dpdSkEEvWPLWHdblQxm9hHgIYxl444MAsvg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIhAOjfb7eTtwWL0Qb-RrR5YQeYHNTwxPqghlUDWlNvPfrRAiBwAvPlgLhb6dN68wtYseX_-IPiexETeKnuyFQkL6Mjnw%3D%3D&range=314858-596694&rn=10&rbuf=14655&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1
IP
Requested by https://www.youtube.com/embed/c8UgcYzGw8E?autoplay=1&mute=1
Certificate IssuerGoogle Trust Services
Subject*.c.docs.google.com
Fingerprint6C:53:8D:31:BE:19:4F:5B:40:5F:DD:1A:A7:8A:B4:32:3A:6F:0F:DF
ValidityTue, 16 Jul 2024 14:34:06 GMT - Tue, 24 Sep 2024 14:34:05 GMT
Size 282 kB (281932 bytes)
Hash 4e45769313a3558505ad3df57b2474a8
e1ddd5658d3427ed7bb9aac77b964c333a94f233
cb78e8765b045f2110687081cf175b73eb16e87e995883276a106e4ccc6d4743
POST /videoplayback?expire=1723737572&ei=hNG9ZpP5HN-Ov_IPh67T8Ac&ip=91.90.42.154&id=o-AKmmkViJL25X8GX0XgGZiI6MNbVWx--GDT42Ris5pA7o&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AQmm2ewBRC9Hssv48VkTO8xFav99xL1CouUuT8RQGe7B4BbTIgwlz4OCG8gQukJ6OP6JZuvUNEEY8IVw&spc=Mv1m9tXyhx1nIiOztnhCGSon1KCJqs2cVAky4y_bHPTJQt46-XAcD8WLuq8b&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=QexDkGp9FksmCDHwvOIrHDwQ&rqh=1&gir=yes&clen=59928742&dur=3954.521&lmt=1695399391242210&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=GRsfEXxj06b7cg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgBOJWLJL7RjKm6Ps9f8his1QAoqmzptUyIDqybbc8C2gCIQDeetEqtn9dpdSkEEvWPLWHdblQxm9hHgIYxl444MAsvg%3D%3D&alr=yes&cpn=R8ShaBYV4Z8XRRom&cver=1.20240812.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77l&rrc=80,80&fexp=24350516,24350517,24350551,24350557,24350561,24350565&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=yw&mm=34&mn=sn-oj5hn5-55&ms=ltu&mt=1723715280&mv=u&mvi=5&pl=23&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AGtxev0wRQIhAOjfb7eTtwWL0Qb-RrR5YQeYHNTwxPqghlUDWlNvPfrRAiBwAvPlgLhb6dN68wtYseX_-IPiexETeKnuyFQkL6Mjnw%3D%3D&range=314858-596694&rn=10&rbuf=14655&pot=MpgBhAOAVw3d_huEPymgOjDCq75Jdn8br0oqY3-EoldovrGKjtEk1hg2RGRLywaQqUdM14sq_mFgMrmDJH9uJsVape5e-b4XEe2nT-twmG5njb2-Dn3We1OpYxyFtgEKovXcrI6y3E5eGIWW0_mQdje4Cq0MguqMQsvT21rhKHbM9oiI3Pz23C-UxwOQ4GtysDX-XY_b71g8sKs=&ump=1&srfvp=1 HTTP/1.1
Host: rr5---sn-oj5hn5-55.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.youtube.com/
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
last-modified: Fri, 22 Sep 2023 16:16:31 GMT
content-type: application/vnd.yt-ump
date: Thu, 15 Aug 2024 09:59:39 GMT
expires: Thu, 15 Aug 2024 09:59:39 GMT
cache-control: private, max-age=21293
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
client-protocol: quic
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
timing-allow-origin: https://www.youtube.com
access-control-expose-headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
vary: Origin
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
server: gvs 1.0
3.142.138.123
104.17.25.14
23.33.119.57