| r11.o.lencr.org/ |  23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hasha5c8e602d1c34dad6d2bf031b1922353 5326666dceb77fd224fb1b5d8ab3eeeee07cea4d 8d2071964c9d8a7e8e5e0c36bc5d82199123ce55059a79ffede86b59a9cb8db5
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8D2071964C9D8A7E8E5E0C36BC5D82199123CE55059A79FFEDE86B59A9CB8DB5"
Last-Modified: Mon, 26 Aug 2024 02:33:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14065
Expires: Mon, 26 Aug 2024 18:57:01 GMT
Date: Mon, 26 Aug 2024 15:02:36 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.33.119.57 | | 504 B |
IP23.33.119.57:0 ASN#20940 Akamai International B.V.
Hash3c415be21fd13680f4c76a79399af82e cc6afc7d2b2fd8451b793b01435087409e677f4c 5385c52f0502864e92da08547aefa7ce05ec21ff081c7413ce54723f3ab73303
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5385C52F0502864E92DA08547AEFA7CE05EC21FF081C7413CE54723F3AB73303"
Last-Modified: Mon, 26 Aug 2024 02:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2217
Expires: Mon, 26 Aug 2024 15:39:33 GMT
Date: Mon, 26 Aug 2024 15:02:36 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.33.119.57 | | 504 B |
IP23.33.119.57:0 ASN#20940 Akamai International B.V.
Hashb0c68ac7e44a67b94268231c5f22ae25 a0c078abb7617e9b0ac402a24969ea22e024cf18 671ca341e73bd97fda1d098560ab338b45fbff67a5d85b47685273850d55e587
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "671CA341E73BD97FDA1D098560AB338B45FBFF67A5D85B47685273850D55E587"
Last-Modified: Mon, 26 Aug 2024 02:33:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12271
Expires: Mon, 26 Aug 2024 18:27:07 GMT
Date: Mon, 26 Aug 2024 15:02:36 GMT
Connection: keep-alive
|
|
| GET ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js |  142.250.74.170 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP142.250.74.170:443
Requested byhttps://bcit.pro/2/2033336686/Tiktok.com.html CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bcit.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Aug 2024 12:27:04 GMT
expires: Sat, 23 Aug 2025 12:27:04 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 268533
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET wybiral.github.io/code-art/projects/tiny-mirror/index.js | 185.199.111.153 | 200 OK | 742 B |
URL GET HTTP/2wybiral.github.io/code-art/projects/tiny-mirror/index.js IP185.199.111.153:443
Requested byhttps://bcit.pro/2/2033336686/Tiktok.com.html CertificateIssuerDigiCert Inc Subject*.github.io Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28 ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT
Hash65d5f2a4fd176eacfcbb17cca28a654a 489c65ce544c992668cfbece78168097bb47c5d9 00b54caaaf994fd569c596cff89e2e4e16efbba4f9d00148214f314d2aff73b9
GET /code-art/projects/tiny-mirror/index.js HTTP/1.1
Host: wybiral.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bcit.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: GitHub.com
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Fri, 26 Apr 2019 04:57:12 GMT
access-control-allow-origin: *
etag: W/"5cc28fa8-740"
expires: Mon, 26 Aug 2024 05:00:23 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 0A62:351654:6D58C89:6FA5995:66CC098F
accept-ranges: bytes
age: 519
date: Mon, 26 Aug 2024 15:02:37 GMT
via: 1.1 varnish
x-served-by: cache-hel1410028-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1724684557.190609,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 1b3b8f8abe058dd7e248792c38861258792a23ca
content-length: 742
X-Firefox-Spdy: h2
|
|
| GET ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.js | 142.250.74.170 | 200 OK | 79 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.js IP142.250.74.170:443
Requested byhttps://bcit.pro/2/2033336686/Tiktok.com.html CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
File typeJavaScript source, ASCII text Hash2073df88a429ccbe5dca5e2c40e742b4 2c79a63d20c490446752bced27e6223b41870617 756d7dfac4a35bb57543f677283d6c682e8d704e5350884b27325badd2b3c4a7
GET /ajax/libs/jquery/1.8.3/jquery.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bcit.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 79384
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Aug 2024 13:10:29 GMT
expires: Thu, 21 Aug 2025 13:10:29 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 438728
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET wybiral.github.io/code-art/projects/tiny-mirror/index.css | 185.199.111.153 | 200 OK | 117 B |
URL GET HTTP/2wybiral.github.io/code-art/projects/tiny-mirror/index.css IP185.199.111.153:443
Requested byhttps://bcit.pro/2/2033336686/Tiktok.com.html CertificateIssuerDigiCert Inc Subject*.github.io Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28 ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT
Hashf8504fc6aebe3ee42f274561cda53625 5c6b0e8bf58df2ef5a3e59455f37129a48f63da2 91afe76abf97bfe55019b5e00109e6befd0161757182432fa44ab3386747c5e1
GET /code-art/projects/tiny-mirror/index.css HTTP/1.1
Host: wybiral.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bcit.pro/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Fri, 26 Apr 2019 04:57:12 GMT
access-control-allow-origin: *
etag: "5cc28fa8-75"
expires: Mon, 26 Aug 2024 05:00:23 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 1593:0DF6:50E1E88:52A9990:66CC098F
accept-ranges: bytes
age: 519
date: Mon, 26 Aug 2024 15:02:37 GMT
via: 1.1 varnish
x-served-by: cache-hel1410028-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1724684557.215385,VS0,VE2
vary: Accept-Encoding
x-fastly-request-id: b858c5c50214de7752fbf0181a443d98233f8512
content-length: 117
X-Firefox-Spdy: h2
|
|
| GET i.ibb.co/9cK1Z9K/Tiktok.jpg |  162.19.58.157 | 200 OK | 10 kB |
URL GET HTTP/2i.ibb.co/9cK1Z9K/Tiktok.jpg IP162.19.58.157:443
Requested byhttps://bcit.pro/2/2033336686/Tiktok.com.html CertificateIssuerLet's Encrypt Subjectibb.co Fingerprint26:FE:71:E0:50:E8:60:94:E3:4F:62:05:27:41:82:DD:84:EE:89:AC ValidityThu, 22 Aug 2024 08:17:43 GMT - Wed, 20 Nov 2024 08:17:42 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 605x1280, components 3 Hashbd51c38e0ff4b11a596db8ae0b795f32 707c0d6bb6456b514860546dbcbeb907ac907194 727d17546f231c7c86eedc3f4b7cec2f2999ffe7029d21ac75d1b898cb2382f6
GET /9cK1Z9K/Tiktok.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bcit.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 26 Aug 2024 15:02:37 GMT
content-type: image/jpeg
content-length: 10003
last-modified: Wed, 10 Jan 2024 15:00:57 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET www.youtube.com/embed/live_yt_tv?autoplay=1 | 142.250.74.14 | 200 OK | 65 kB |
URL GET HTTP/2www.youtube.com/embed/live_yt_tv?autoplay=1 IP142.250.74.14:443
Requested byhttps://bcit.pro/2/2033336686/Tiktok.com.html CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69 ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File typeHTML document, ASCII text, with very long lines (47403) Hashc97896017e926f8278b7091a7e9a38b2 e4b51575a6bf3082ad7b1dbfd864971e9bc2f206 8942fb9394af726d5aed089f3e0be10abf2cc1dc160ffcb8ee3904ce23407c27
GET /embed/live_yt_tv?autoplay=1 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bcit.pro/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 26 Aug 2024 15:02:37 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
cross-origin-resource-policy: cross-origin
origin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=t3f1bBk9XdQ; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=ZzZqDG--CiU; Domain=.youtube.com; Expires=Sat, 22-Feb-2025 15:02:37 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgZQ%3D%3D; Domain=.youtube.com; Expires=Sat, 22-Feb-2025 15:02:37 GMT; Path=/; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET www.youtube.com/s/player/a87a9450/www-embed-player.vflset/www-embed-player.js | 142.250.74.14 | 200 OK | 100 kB |
URL GET HTTP/3www.youtube.com/s/player/a87a9450/www-embed-player.vflset/www-embed-player.js IP142.250.74.14:443
Requested byhttps://www.youtube.com/embed/live_yt_tv?autoplay=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69 ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File typeJavaScript source, ASCII text, with very long lines (809) Hash4841d7c0dc8687067a5c67940f823387 e050231d82ac5d32046fe9c07c1524fcb85b81d3 5a087880cd4c7ed70516c480f29206db256642795dfe0880fe346d394f4d088b
GET /s/player/a87a9450/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/live_yt_tv?autoplay=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 99990
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Aug 2024 07:36:49 GMT
expires: Thu, 21 Aug 2025 07:36:49 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 21 Aug 2024 04:14:39 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 458748
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| GET fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.youtube.com/embed/live_yt_tv?autoplay=1 CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14 ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Aug 2024 00:57:49 GMT
expires: Fri, 22 Aug 2025 00:57:49 GMT
cache-control: public, max-age=31536000
age: 396288
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET bcit.pro/2/2033336686/location.js |  188.114.97.1 | 404 Not Found | 19 kB |
URL GET HTTP/3bcit.pro/2/2033336686/location.js IP188.114.97.1:443
Requested byhttps://bcit.pro/2/2033336686/Tiktok.com.html CertificateIssuerGoogle Trust Services Subjectbcit.pro Fingerprint15:8F:41:9A:59:53:22:0A:70:57:49:2F:EB:29:F5:BE:BC:9F:8A:D1 ValiditySun, 11 Aug 2024 14:29:40 GMT - Sat, 09 Nov 2024 14:29:39 GMT
File typeXML 1.0 document, ASCII text Hash692ff074758c44349f1fb3f184998818 b9133bc7445ec5764e73c944105d0fd272f3f325 94cb6ad521565dfb373e0d3b6cf45540af1fe42e66c0eee474dff5e278b4c45f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /2/2033336686/location.js HTTP/1.1
Host: bcit.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bcit.pro/2/2033336686/Tiktok.com.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Mon, 26 Aug 2024 15:02:37 GMT
content-type: text/html; charset=utf-8
content-language: en
vary: accept-language,accept-charset, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G6qW0M7TBsNH2gJXWyzTt37leNis4xqI0LZL3UAKaQFdI5ctCLDbZ1sh%2BkkA5CBYUnWr911JtHIRlOVUFdVYP29IQEsxt2bB9J4lGsynBKJTpaCcEF7nVl4IgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b94b4321c9756c9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| GET fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://www.youtube.com/embed/live_yt_tv?autoplay=1 CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14 ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Aug 2024 15:57:31 GMT
expires: Wed, 20 Aug 2025 15:57:31 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 515106
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET www.youtube.com/s/player/a87a9450/player_ias.vflset/en_US/base.js | 142.250.74.14 | 200 OK | 772 kB |
URL GET HTTP/3www.youtube.com/s/player/a87a9450/player_ias.vflset/en_US/base.js IP142.250.74.14:443
Requested byhttps://www.youtube.com/embed/live_yt_tv?autoplay=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69 ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File typeJavaScript source, ASCII text, with very long lines (534) Size772 kB (771958 bytes) Hashd7ab337b769d56f2c9bd297d5ec43470 e2d570c11052e235217e8b3cdec95a9c1ffd7431 ffe4a2763153d6edc9ddee2d6dcc83adc31f859b20ab7ebd5efb1d422593dbd5
GET /s/player/a87a9450/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/live_yt_tv?autoplay=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 771958
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Aug 2024 07:44:20 GMT
expires: Thu, 21 Aug 2025 07:44:20 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 21 Aug 2024 04:14:39 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 458297
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| GET p16-va-tiktok.ibyteimg.com/obj/musically-maliva-obj/69e3cfb050ff8b83963281e27a23cb17.png | 95.101.11.114 | 200 OK | 41 kB |
URL GET HTTP/1.1p16-va-tiktok.ibyteimg.com/obj/musically-maliva-obj/69e3cfb050ff8b83963281e27a23cb17.png IP95.101.11.114:443 ASN#20940 Akamai International B.V.
Requested byhttps://bcit.pro/2/2033336686/Tiktok.com.html CertificateIssuerDigiCert Inc Subject*.ibyteimg.com Fingerprint4E:C5:CB:6F:5F:D5:61:10:67:AA:5C:52:8A:42:95:5B:1F:21:0E:54 ValidityFri, 15 Mar 2024 00:00:00 GMT - Tue, 15 Apr 2025 23:59:59 GMT
File typePNG image data, 560 x 634, 8-bit/color RGBA, non-interlaced Hasha3ab30f69e60811c7e7d6ca8d79c3c24 fb259aaa2e8cf47b802e65abe267896b0b38a0da acce0f831dc5774c974ee8307c75c0dde2021e65c48e0689be2977332376fbd1
GET /obj/musically-maliva-obj/69e3cfb050ff8b83963281e27a23cb17.png HTTP/1.1
Host: p16-va-tiktok.ibyteimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bcit.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 41297
Imagex-Fmt: png2png
Last-Modified: Mon, 26 Feb 2024 03:44:39 GMT
Nw-Session-Id: 20240226034437046554B5EF46C1F60BA8nlnbj21df
Nw-Session-Trace: 2024-02-26T03:44:39.127860494Z 143
X-Bdcdn-Cache-Status: TCP_HIT
X-Length: 41297
X-Powered-By: ImageX
X-Response-Date: Mon, 26 Feb 2024 03:44:39 GMT
X-Tt-Logid: 20240226034437046554B5EF46C1F60BA8
x-request-ip: fdbd:dc61:5:310::201
x-response-cinfo: fdbd:dc61:5:310::201
x-response-cache: edge_hit
x-tt-trace-host: 01ff89b69401081ecfdef920e70e2952c6179d09b0cf005af04d89ab27b0c08e0352e381fcfe4dfa15f82852104b8951344bbd7b3b61676933856dc24f814ecdedaf8a5940cf7f617b430150d97281cc9eb984aa095b1e23b1397f45bee25af539b233aecc07fbc1f701ff0dde91322a6c
x-tt-trace-id: 00-e41da3ed1065bbcfe74181c6051f04d1-e41da3ed1065bbcf-01
Server: TLB
Cache-Control: max-age=31536000
Date: Mon, 26 Aug 2024 15:02:37 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 971562
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
Server-Timing: cdn-cache; desc=HIT, edge; dur=5, origin; dur=0, inner; dur=1
X-Parent-Response-Time: 14,23.54.168.108, 5,95.101.11.110
X-M-Cache: Miss
|
|
| GET www.youtube.com/s/player/a87a9450/wasm/lib.wasm | 142.250.74.14 | 200 OK | 10 kB |
URL GET HTTP/3www.youtube.com/s/player/a87a9450/wasm/lib.wasm IP142.250.74.14:443
Requested byhttps://www.youtube.com/embed/live_yt_tv?autoplay=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69 ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File typeWebAssembly (wasm) binary module version 0x1 (MVP) Hashd094fd2a7de82461c45c15b14a10df88 544daf14f538ce8dc59da766a21a9d9c2f90de96 923011092fa231bb13783685337d289b38e9dfc869dc281900c1bf95b25de333
GET /s/player/a87a9450/wasm/lib.wasm HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.youtube.com/embed/live_yt_tv?autoplay=1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 10187
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Aug 2024 07:44:02 GMT
expires: Thu, 21 Aug 2025 07:44:02 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 21 Aug 2024 04:14:39 GMT
content-type: application/wasm
vary: Accept-Encoding
age: 458316
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| GET www.youtube.com/s/player/a87a9450/player_ias.vflset/en_US/remote.js | 142.250.74.14 | 200 OK | 34 kB |
URL GET HTTP/3www.youtube.com/s/player/a87a9450/player_ias.vflset/en_US/remote.js IP142.250.74.14:443
Requested byhttps://www.youtube.com/embed/live_yt_tv?autoplay=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69 ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File typeJavaScript source, ASCII text, with very long lines (543) Hashc0ecd406f233d3d15cc70444aaf331cf 2bf373bffbc540c9a771f21c0bf0d56b01195324 6e6ab30aa79c992d62d2f77f5034eff02666298fb6eaf5a083e2a3bd1135ad46
GET /s/player/a87a9450/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/live_yt_tv?autoplay=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33657
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Aug 2024 07:44:21 GMT
expires: Thu, 21 Aug 2025 07:44:21 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 21 Aug 2024 04:14:39 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 458297
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| GET www.youtube.com/s/player/a87a9450/player_ias.vflset/en_US/embed.js | 142.250.74.14 | 200 OK | 21 kB |
URL GET HTTP/3www.youtube.com/s/player/a87a9450/player_ias.vflset/en_US/embed.js IP142.250.74.14:443
Requested byhttps://www.youtube.com/embed/live_yt_tv?autoplay=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69 ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File typeJavaScript source, ASCII text, with very long lines (3391) Hashdcda3db9fe4534651fca1debf672bf26 cc55669fca772346c54eed31fd61c08c4c6d7c4d 521516edbb1c5a9222b3702cbe053a4602623780a49f4d8d3c5f2fe9c66ec273
GET /s/player/a87a9450/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/live_yt_tv?autoplay=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 20550
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Aug 2024 07:44:20 GMT
expires: Thu, 21 Aug 2025 07:44:20 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 21 Aug 2024 04:14:39 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 458298
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| POST jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create | 216.58.211.10 | 200 OK | 0 B |
URL POST HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create IP216.58.211.10:443
Requested byhttps://www.youtube.com/embed/live_yt_tv?autoplay=1 CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Mon, 26 Aug 2024 15:02:38 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash0192c7488a56c1b9f50decbbc7c6e924 7ed837f77d0fee2e3c5833f86d73eb2dfa3f6bec 571f2ef4cb90c7834acecbf6981410ddbd15611a6750b8a77717821dc1d1a167
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "571F2EF4CB90C7834ACECBF6981410DDBD15611A6750B8A77717821DC1D1A167"
Last-Modified: Mon, 26 Aug 2024 02:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2495
Expires: Mon, 26 Aug 2024 15:44:13 GMT
Date: Mon, 26 Aug 2024 15:02:38 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash0192c7488a56c1b9f50decbbc7c6e924 7ed837f77d0fee2e3c5833f86d73eb2dfa3f6bec 571f2ef4cb90c7834acecbf6981410ddbd15611a6750b8a77717821dc1d1a167
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "571F2EF4CB90C7834ACECBF6981410DDBD15611A6750B8A77717821DC1D1A167"
Last-Modified: Mon, 26 Aug 2024 02:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2495
Expires: Mon, 26 Aug 2024 15:44:13 GMT
Date: Mon, 26 Aug 2024 15:02:38 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash0192c7488a56c1b9f50decbbc7c6e924 7ed837f77d0fee2e3c5833f86d73eb2dfa3f6bec 571f2ef4cb90c7834acecbf6981410ddbd15611a6750b8a77717821dc1d1a167
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "571F2EF4CB90C7834ACECBF6981410DDBD15611A6750B8A77717821DC1D1A167"
Last-Modified: Mon, 26 Aug 2024 02:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2466
Expires: Mon, 26 Aug 2024 15:43:44 GMT
Date: Mon, 26 Aug 2024 15:02:38 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash0192c7488a56c1b9f50decbbc7c6e924 7ed837f77d0fee2e3c5833f86d73eb2dfa3f6bec 571f2ef4cb90c7834acecbf6981410ddbd15611a6750b8a77717821dc1d1a167
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "571F2EF4CB90C7834ACECBF6981410DDBD15611A6750B8A77717821DC1D1A167"
Last-Modified: Mon, 26 Aug 2024 02:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2495
Expires: Mon, 26 Aug 2024 15:44:13 GMT
Date: Mon, 26 Aug 2024 15:02:38 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash0192c7488a56c1b9f50decbbc7c6e924 7ed837f77d0fee2e3c5833f86d73eb2dfa3f6bec 571f2ef4cb90c7834acecbf6981410ddbd15611a6750b8a77717821dc1d1a167
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "571F2EF4CB90C7834ACECBF6981410DDBD15611A6750B8A77717821DC1D1A167"
Last-Modified: Mon, 26 Aug 2024 02:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2495
Expires: Mon, 26 Aug 2024 15:44:13 GMT
Date: Mon, 26 Aug 2024 15:02:38 GMT
Connection: keep-alive
|
|
| POST jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create | 216.58.211.10 | 200 OK | 43 kB |
URL POST HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create IP216.58.211.10:443
Requested byhttps://www.youtube.com/embed/live_yt_tv?autoplay=1 CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
Hash8c7bfd3387ce87bd50cf68ce7e5c7420 815bcc0f3b1d5fa642ded248c300c148ec9924eb 7e711efd6cfc308e666184fd2bb690e5c2c00f700b4a6fd917e6934407c821f1
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Mon, 26 Aug 2024 15:02:38 GMT
server: ESF
cache-control: private
content-length: 42851
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0 | 142.250.74.14 | 200 OK | 0 B |
URL OPTIONS HTTP/3play.google.com/log?format=json&hasfast=true&authuser=0 IP142.250.74.14:443
Requested byhttps://www.youtube.com/embed/live_yt_tv?autoplay=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69 ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Mon, 26 Aug 2024 15:02:38 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0 | 142.250.74.14 | 200 OK | 0 B |
URL OPTIONS HTTP/3play.google.com/log?format=json&hasfast=true&authuser=0 IP142.250.74.14:443
Requested byhttps://www.youtube.com/embed/live_yt_tv?autoplay=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69 ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Mon, 26 Aug 2024 15:02:38 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| POST jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 216.58.211.10 | 200 OK | 0 B |
URL POST HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP216.58.211.10:443
Requested byhttps://www.youtube.com/embed/live_yt_tv?autoplay=1 CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Mon, 26 Aug 2024 15:02:38 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0 | 142.250.74.14 | 200 OK | 131 B |
URL OPTIONS HTTP/3play.google.com/log?format=json&hasfast=true&authuser=0 IP142.250.74.14:443
Requested byhttps://www.youtube.com/embed/live_yt_tv?autoplay=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69 ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hashca0b7e866005f6774d284b9f438ebfd2 53644f5ee3640189bdb223473ba6a2d46606c556 502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 1099
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Mon, 26 Aug 2024 15:02:38 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0 | 142.250.74.14 | 200 OK | 131 B |
URL OPTIONS HTTP/3play.google.com/log?format=json&hasfast=true&authuser=0 IP142.250.74.14:443
Requested byhttps://www.youtube.com/embed/live_yt_tv?autoplay=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69 ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hashca0b7e866005f6774d284b9f438ebfd2 53644f5ee3640189bdb223473ba6a2d46606c556 502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 417
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Mon, 26 Aug 2024 15:02:38 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| POST jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 216.58.211.10 | 200 OK | 114 B |
URL POST HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP216.58.211.10:443
Requested byhttps://www.youtube.com/embed/live_yt_tv?autoplay=1 CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
Hash043796fb313b8ead7815a6f7b6a84312 e6eb4410b9be812a0858ad7374c6e1ccce4d303e 386c4cefabe5dc98d79236929a09262e8744d870a8fe347e9e88b351960be57a
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 863
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Mon, 26 Aug 2024 15:02:38 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| POST www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 | 142.250.74.14 | 200 OK | 31 B |
URL POST HTTP/3www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 IP142.250.74.14:443
Requested byhttps://www.youtube.com/embed/live_yt_tv?autoplay=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69 ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash5e1fa6fd9abd549a576f3f24b1d3c8d4 d5335d7f7d33be6a0b663f03b2df4df2521c4a87 d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1724684560862
Content-Type: application/json
X-Goog-Visitor-Id: CgtaelpxREctLUNpVSiNsrK2BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgZQ%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240820.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1724684557831&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C0%2C0&vis=1&wgl=true&ca_type=image
Content-Length: 12015
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/live_yt_tv?autoplay=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Mon, 26 Aug 2024 15:02:40 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| POST www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 | 142.250.74.14 | 200 OK | 31 B |
URL POST HTTP/3www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 IP142.250.74.14:443
Requested byhttps://www.youtube.com/embed/live_yt_tv?autoplay=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69 ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash5e1fa6fd9abd549a576f3f24b1d3c8d4 d5335d7f7d33be6a0b663f03b2df4df2521c4a87 d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1724684582768
Content-Type: application/json
X-Goog-Visitor-Id: CgtaelpxREctLUNpVSiNsrK2BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgZQ%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240820.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1724684557831&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C0%2C0&vis=1&wgl=true&ca_type=image
Content-Length: 949
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/live_yt_tv?autoplay=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Mon, 26 Aug 2024 15:03:02 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| GET www.youtube.com/s/player/a87a9450/www-player.css | 142.250.74.14 | 200 OK | 386 kB |
URL GET HTTP/3www.youtube.com/s/player/a87a9450/www-player.css IP142.250.74.14:443
Requested byhttps://www.youtube.com/embed/live_yt_tv?autoplay=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69 ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Size386 kB (385540 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/player/a87a9450/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/live_yt_tv?autoplay=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 48528
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 26 Aug 2024 13:25:32 GMT
expires: Tue, 26 Aug 2025 13:25:32 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 21 Aug 2024 04:14:39 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 5825
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| GET bcit.pro/2/2033336686/loc.js | 188.114.97.1 | 404 Not Found | 1.3 kB |
URL GET HTTP/3bcit.pro/2/2033336686/loc.js IP188.114.97.1:443
Requested byhttps://bcit.pro/2/2033336686/Tiktok.com.html CertificateIssuerGoogle Trust Services Subjectbcit.pro Fingerprint15:8F:41:9A:59:53:22:0A:70:57:49:2F:EB:29:F5:BE:BC:9F:8A:D1 ValiditySun, 11 Aug 2024 14:29:40 GMT - Sat, 09 Nov 2024 14:29:39 GMT
File typeXML document, ASCII text, with very long lines (1427), with no line terminators Hashebb4e8812b94c15cf4d08aac2122183c cc41d0982efb43fe8e1ceee6e720051d5eaf31ad c41b65e7a69e891d88abafb1a910ea5b795eb9c849eed6cd49dfffac41a17354
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /2/2033336686/loc.js HTTP/1.1
Host: bcit.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bcit.pro/2/2033336686/Tiktok.com.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Mon, 26 Aug 2024 15:02:37 GMT
content-type: text/html; charset=utf-8
content-language: en
vary: accept-language,accept-charset, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bp0w2qX92DrpRiIRkuUySVOildpPjBrJJ43jHXUpMC2TS6l1Abef4lUNkLLopkXafc6NG2nB7J8bsoga21ulk2qpa6b8RyBlpUBFMPo7j%2FICNVYprsYJXo1etQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b94b4358c2656c9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| GET fonts.googleapis.com/css?family=Roboto|Open+Sans&display=swap | 142.250.74.106 | 200 OK | 8.3 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto|Open+Sans&display=swap IP142.250.74.106:443
Requested byhttps://bcit.pro/2/2033336686/Tiktok.com.html CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
File typeASCII text, with very long lines (8475), with no line terminators Hash9129e3956656a35b75751fdf8f509327 e2c7086146e90f5cc5ef16513aa1de99db7797af 26f00ba9e91edb5c1ff12fbd7d860c3794f224e6690a00a508abc6c56b273e85
GET /css?family=Roboto|Open+Sans&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bcit.pro/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 26 Aug 2024 15:02:37 GMT
date: Mon, 26 Aug 2024 15:02:37 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET bcit.pro/2/2033336686/Tiktok.com.html | 188.114.97.1 | 200 OK | 7.0 kB |
URL User Request GET HTTP/2bcit.pro/2/2033336686/Tiktok.com.html IP188.114.97.1:443
CertificateIssuerGoogle Trust Services Subjectbcit.pro Fingerprint15:8F:41:9A:59:53:22:0A:70:57:49:2F:EB:29:F5:BE:BC:9F:8A:D1 ValiditySun, 11 Aug 2024 14:29:40 GMT - Sat, 09 Nov 2024 14:29:39 GMT
File typeHTML document, ASCII text, with very long lines (7618), with no line terminators Hashfd3aabd0ba8437d4f753791fce6894f9 02adefbf2fe0728f48c60e2ee17ddcb6c9297c83 07ee282154355dd61ce9cea019a7eb3f13b0579afc1f754a4c676cd2328bfdc8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /2/2033336686/Tiktok.com.html HTTP/1.1
Host: bcit.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 26 Aug 2024 15:02:36 GMT
content-type: text/html
last-modified: Mon, 26 Aug 2024 14:29:06 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BHlS5ISQCUeI6rCf%2BBmig08R3gGnLtmjo2%2BYDa4XqM%2FEDvJ0E5sVyCIFhhOC7rASQ4%2ByZTOgCMBqQgV2bKoZQ4i%2FnoMJjirD2ud6eEY7wZxgXNhgnjCNb4IFBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b94b42ea8905684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET bcit.pro/2/2033336686/loc.js | 188.114.97.1 | 404 Not Found | 1.3 kB |
URL GET HTTP/3bcit.pro/2/2033336686/loc.js IP188.114.97.1:443
Requested byhttps://bcit.pro/2/2033336686/Tiktok.com.html CertificateIssuerGoogle Trust Services Subjectbcit.pro Fingerprint15:8F:41:9A:59:53:22:0A:70:57:49:2F:EB:29:F5:BE:BC:9F:8A:D1 ValiditySun, 11 Aug 2024 14:29:40 GMT - Sat, 09 Nov 2024 14:29:39 GMT
File typeXML document, ASCII text, with very long lines (1427), with no line terminators Hash391f712a8fd3abee3e0f12967c585180 d0d318f9ff35c7b489e2e71b711c5498c9a5eaf6 cc6c19b1f933c1554b9f180612d9d464041af35bd3928d67665656757827ee8f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /2/2033336686/loc.js HTTP/1.1
Host: bcit.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bcit.pro/2/2033336686/Tiktok.com.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Mon, 26 Aug 2024 15:02:37 GMT
content-type: text/html; charset=utf-8
content-language: en
vary: accept-language,accept-charset, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vg%2B8Ko9MQQc8MR2cZhKEaVc0i0lGQsVJzH6TrZYJsRNZ9%2B8rOBifGspM81uw1Vo9gT3Iufjc3HvoPaNFQcA1L6f%2FzPHbeliJUfIsEPsh0YTjwep2%2BV5dyhQJvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b94b4321c9e56c9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| GET fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 18 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://bcit.pro/2/2033336686/Tiktok.com.html CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14 ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18536, version 1.0 Hash8eff0b8045fd1959e117f85654ae7770 227fee13ceb7c410b5c0bb8000258b6643cb6255 89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571
GET /s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bcit.pro
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18536
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Aug 2024 17:36:19 GMT
expires: Wed, 20 Aug 2025 17:36:19 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Aug 2024 20:41:24 GMT
content-type: font/woff2
age: 509178
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET bcit.pro/2/2033336686/client.min.js | 188.114.97.1 | 404 Not Found | 1.3 kB |
URL GET HTTP/3bcit.pro/2/2033336686/client.min.js IP188.114.97.1:443
Requested byhttps://bcit.pro/2/2033336686/Tiktok.com.html CertificateIssuerGoogle Trust Services Subjectbcit.pro Fingerprint15:8F:41:9A:59:53:22:0A:70:57:49:2F:EB:29:F5:BE:BC:9F:8A:D1 ValiditySun, 11 Aug 2024 14:29:40 GMT - Sat, 09 Nov 2024 14:29:39 GMT
File typeXML document, ASCII text, with very long lines (1427), with no line terminators Hashd30fe369738c5454566aa5e8c9eb9595 0bf69cbaf332731f0b58a3953050e5f61ba377c1 a23ac8b325f1e4a26899190247a406236cc9d872e3735d6348d5808174b1312e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /2/2033336686/client.min.js HTTP/1.1
Host: bcit.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bcit.pro/2/2033336686/Tiktok.com.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Mon, 26 Aug 2024 15:02:37 GMT
content-type: text/html; charset=utf-8
content-language: en
vary: accept-language,accept-charset, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P3YBcL59F4mnJgRx4%2FbOFSHz%2FqttlCyicbn1gaxEWMd%2BHnhRo%2B1Pm0xaRoSPuRsenOZc1dydtl4AaACF3QMSNX5NJLbOK1Pf3k1ES93P5ujrQOtDAMQHU%2FxB6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b94b4321c9c56c9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| GET bcit.pro/2/2033336686/client.min.js | 188.114.97.1 | 404 Not Found | 1.3 kB |
URL GET HTTP/3bcit.pro/2/2033336686/client.min.js IP188.114.97.1:443
Requested byhttps://bcit.pro/2/2033336686/Tiktok.com.html CertificateIssuerGoogle Trust Services Subjectbcit.pro Fingerprint15:8F:41:9A:59:53:22:0A:70:57:49:2F:EB:29:F5:BE:BC:9F:8A:D1 ValiditySun, 11 Aug 2024 14:29:40 GMT - Sat, 09 Nov 2024 14:29:39 GMT
File typeXML document, ASCII text, with very long lines (1427), with no line terminators Hash80f6314a507e7eff823134e9ea1822dd 5e62af009d0fe62eccf4aa02bf97085c3a62c312 481c963f02b0ceed70dd453890a6f043da624b741056de3330d8732c99c5b21c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /2/2033336686/client.min.js HTTP/1.1
Host: bcit.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bcit.pro/2/2033336686/Tiktok.com.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Mon, 26 Aug 2024 15:02:37 GMT
content-type: text/html; charset=utf-8
content-language: en
vary: accept-language,accept-charset, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aBWIa1d9p7RWa99PJrvWFLDUou6a99T00af42N9EORP1r1bmr7uQJR5dF3ndAocDSlGvefo%2BvsOSbs5QG%2BYjt963JsQ0RN9DOHbO3Js9BXv2u9xKmLEsQc8EBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b94b4356bec56c9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
0.0.0.0