nandnee.com/
232 B IP
ASN #132322 Good Domain Registry Private Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 850108e6c7a96a3f976ca8e5245f45c2
39b0b578b44591c7cfb3dbdfa98d1ad72d1bdc2c
051dac713eb3a9ca7d13939f51e07ce3f17fa419eb692c193c5a6c3883cfaa26
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
location: https://www.nandnee.com/
content-length: 232
content-type: text/html; charset=iso-8859-1
date: Sun, 28 May 2023 02:22:56 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/
6.7 kB IP
ASN #132322 Good Domain Registry Private Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (435), with CRLF, LF line terminators
Hash d406bd7f284bb602bbe59071c63d0efd
2a4b4cd40ba737d37f547a6662b406c700529751
0ab603efc63401af5a01f5c28a6b059c477357fbf3c75951295144b86e1fd29c
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.6.40
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 6699
content-type: text/html; charset=UTF-8
date: Sun, 28 May 2023 02:22:57 GMT
server: Apache/2
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/howler/2.0.3/howler.min.js
7.2 kB URL cdnjs.cloudflare.com/ajax/libs/howler/2.0.3/howler.min.js
IP
File type ASCII text, with very long lines (22010)
Hash 2275faec2b723841ef88be49cf83cdea
21286bca8efef40cab7f83e64eda12e35222d8fc
b1487ab759464e6a6bec40d74975b9e0d72b92175dfb4008fc52638045f5bb8d
GET /ajax/libs/howler/2.0.3/howler.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 28 May 2023 02:23:19 GMT
content-type: application/javascript; charset=utf-8
content-length: 7233
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e9d-707e"
last-modified: Mon, 04 May 2020 16:11:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 204792
expires: Fri, 17 May 2024 02:23:19 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BfdMzSXNjGZt023U4%2Bii9fJiTlCnsXiHmKeC5j4TLzGwf4U6ORjEQfRipO3Wj3E7%2FdK6G75X18v1Vkl7gZYMuNWNYOgKfEK4bwALYqTl771%2FgHTVYxs2QJgcO%2BgHqjoFr%2Fk4Ra7z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7ce308f229f11bfe-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 5eb2d0db01496946784367a1c6a22c28
2d0a58aa819ca13f208af62e0c21996bd123de9f
8c16e79ed32ccf5baf793a07ad6128fa85ea0f0877da7da7145ae6a33e811a1a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 5eb2d0db01496946784367a1c6a22c28
2d0a58aa819ca13f208af62e0c21996bd123de9f
8c16e79ed32ccf5baf793a07ad6128fa85ea0f0877da7da7145ae6a33e811a1a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 5eb2d0db01496946784367a1c6a22c28
2d0a58aa819ca13f208af62e0c21996bd123de9f
8c16e79ed32ccf5baf793a07ad6128fa85ea0f0877da7da7145ae6a33e811a1a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 5eb2d0db01496946784367a1c6a22c28
2d0a58aa819ca13f208af62e0c21996bd123de9f
8c16e79ed32ccf5baf793a07ad6128fa85ea0f0877da7da7145ae6a33e811a1a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 5eb2d0db01496946784367a1c6a22c28
2d0a58aa819ca13f208af62e0c21996bd123de9f
8c16e79ed32ccf5baf793a07ad6128fa85ea0f0877da7da7145ae6a33e811a1a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nandnee.com/master.css
200 OK 162 B URL GET HTTP/2 www.nandnee.com/master.css
IP
ASN #132322 Good Domain Registry Private Limited
Certificate IssuerLet's Encrypt
Subjectmail.nandnee.com
Fingerprint71:0F:75:F8:24:C9:4B:CA:D6:76:E8:FC:C3:45:95:D8:CD:EC:51:51
ValidityWed, 17 May 2023 00:39:20 GMT - Tue, 15 Aug 2023 00:39:19 GMT
File type ASCII text, with CRLF line terminators
Hash 632d01dea7121b4f7d12d6edf8be747f
c918f4bb518a9069c1d04ed8cb0e5a562feee595
e233064570b70ba0da9869236b8096eadbecb401f189660fb854ebabcbbb6838
GET /master.css HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 14 Nov 2022 12:57:11 GMT
etag: "17f-5ed6dc717d7c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 162
content-type: text/css
date: Sun, 28 May 2023 02:22:57 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/js/vendor/modernizr-2.8.3.min.js
200 OK 6.3 kB URL GET HTTP/2 www.nandnee.com/js/vendor/modernizr-2.8.3.min.js
IP
ASN #132322 Good Domain Registry Private Limited
Certificate IssuerLet's Encrypt
Subjectmail.nandnee.com
Fingerprint71:0F:75:F8:24:C9:4B:CA:D6:76:E8:FC:C3:45:95:D8:CD:EC:51:51
ValidityWed, 17 May 2023 00:39:20 GMT - Tue, 15 Aug 2023 00:39:19 GMT
File type HTML document, ASCII text, with very long lines (14856), with CRLF line terminators
Hash edc6fe2e73a88de4444bb6d3c16998d5
f4d0e123bd8607058f7e744c80fc728f0f7dd1fc
6a40e518311b650b771be1d6fdd1aeceee2b92e1fc40d70913bedf30c65b87b1
Analyzer Verdict Alert fortinet Phishing
GET /js/vendor/modernizr-2.8.3.min.js HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:13:42 GMT
etag: "3c9e-5874247939980-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 6312
content-type: application/javascript
date: Sun, 28 May 2023 02:22:57 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/media/setting/11672logo.png
200 OK 17 kB URL GET HTTP/2 www.nandnee.com/media/setting/11672logo.png
IP
ASN #132322 Good Domain Registry Private Limited
Certificate IssuerLet's Encrypt
Subjectmail.nandnee.com
Fingerprint71:0F:75:F8:24:C9:4B:CA:D6:76:E8:FC:C3:45:95:D8:CD:EC:51:51
ValidityWed, 17 May 2023 00:39:20 GMT - Tue, 15 Aug 2023 00:39:19 GMT
File type PNG image data, 372 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 90e4ec22f33575ecc568092e4fe9588f
b2830f941ab80107c31c9c6f727e3f9b5c1dc69a
201c3acfa42b1cbde04c817f2c8b61a4180275d6c79efbadb69f6b039dc21dc0
GET /media/setting/11672logo.png HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 14 Nov 2022 11:29:56 GMT
etag: "40ee-5ed6c8f101500"
accept-ranges: bytes
content-length: 16622
content-type: image/png
date: Sun, 28 May 2023 02:22:57 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/media/banner/thumb/26785c62b7a239e601.jpg
490 kB URL www.nandnee.com/media/banner/thumb/26785c62b7a239e601.jpg
IP
ASN #132322 Good Domain Registry Private Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 1919x655, components 3\012- data
Size 490 kB (490481 bytes)
Hash a939281bdb1c55021198618ba5a6536b
7751900610991b82219dced46eceee6a8c049489
643dd9890884432253ccf1cdfe392e6f012f9e4d87994a646e08b082f5fd639c
GET /media/banner/thumb/26785c62b7a239e601.jpg HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 14 Nov 2022 08:19:54 GMT
etag: "77bf1-5ed69e7735e80"
accept-ranges: bytes
content-length: 490481
content-type: image/jpeg
date: Sun, 28 May 2023 02:22:57 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/js/waypoints-jquery.js
2.6 kB URL www.nandnee.com/js/waypoints-jquery.js
IP
ASN #132322 Good Domain Registry Private Limited
File type ASCII text, with very long lines (7808), with CRLF line terminators
Hash 4fe14337a62d710389f42e8a5d1043f7
5f3e0f34b6d7460c5f160db4fe568cde29f3ffa5
069b3ff0c0e6c33e08368f94906ae49ec76ab1ed570819c768148ced15b138bf
Analyzer Verdict Alert fortinet Phishing
GET /js/waypoints-jquery.js HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:13:36 GMT
etag: "1f73-5874247380c00-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2626
content-type: application/javascript
date: Sun, 28 May 2023 02:22:58 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/js/wow.min.js
2.8 kB URL www.nandnee.com/js/wow.min.js
IP
ASN #132322 Good Domain Registry Private Limited
File type ASCII text, with very long lines (8396), with CRLF line terminators
Hash cee8fb2ffdf2f183951f3d0ef4063118
4dde5b0bf4942720ed6030cbbb775856b73466e3
e24c7119a49df5d48c34b8f684c0e24318999bedd46ee116522009e5f2b87162
Analyzer Verdict Alert fortinet Phishing
GET /js/wow.min.js HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:13:36 GMT
etag: "20eb-5874247380c00-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2755
content-type: application/javascript
date: Sun, 28 May 2023 02:22:58 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/img/banner/4.jpg
20 kB URL www.nandnee.com/img/banner/4.jpg
IP
ASN #132322 Good Domain Registry Private Limited
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2019:01:23 15:09:02], progressive, precision 8, 370x147, components 3\012- data
Hash 7bd3d3c2d0e34b13a8931d93f7de7a89
3920f3f59b15a089d03f7628f085f06f50c3de3c
573ccf3264cc89a66fc55ab9aad049f74ddabdd8d74cfdc2667e865af0b53538
GET /img/banner/4.jpg HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:12:40 GMT
etag: "4fbc-5874243e18e00"
accept-ranges: bytes
content-length: 20412
content-type: image/jpeg
date: Sun, 28 May 2023 02:22:58 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/js/jquery.counterup.min.js
578 B URL www.nandnee.com/js/jquery.counterup.min.js
IP
ASN #132322 Good Domain Registry Private Limited
File type ASCII text, with very long lines (917), with CRLF line terminators
Hash 4f0e0b047f2ed8512d5119b31432bdcf
15c6242be4251b23c8aec6dd4620b95c37c53d22
3145a2ee536ea38dbcb2563fe7dad866ca2bceff859249e069cf33224f43b7cd
Analyzer Verdict Alert fortinet Phishing
GET /js/jquery.counterup.min.js HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:13:38 GMT
etag: "432-5874247569080-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 578
content-type: application/javascript
date: Sun, 28 May 2023 02:22:58 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/js/owl.carousel.min.js
6.5 kB URL www.nandnee.com/js/owl.carousel.min.js
IP
ASN #132322 Good Domain Registry Private Limited
File type ASCII text, with very long lines (635), with CRLF line terminators
Hash 8c52f27fcac36c7667f8fb846e1e94d5
e5862559db659ffd530c91452d668c5e7b3f0f2d
6c1e31700f68d1666de6b0992e89d413434707718bf729a472404029845bdbad
Analyzer Verdict Alert fortinet Phishing
GET /js/owl.carousel.min.js HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:13:38 GMT
etag: "5d80-5874247569080-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 6492
content-type: application/javascript
date: Sun, 28 May 2023 02:22:58 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/img/banner/3.jpg
27 kB URL www.nandnee.com/img/banner/3.jpg
IP
ASN #132322 Good Domain Registry Private Limited
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2019:01:21 17:06:35], progressive, precision 8, 370x148, components 3\012- data
Hash 8dfe07aba2e6dda41946794a057d0af9
02553132031eeaefdb9186c5e49a95ae8ed51c75
344e2b9156be05fbcb22e77dd0352f03edf037ba634b8cb8bdbe2a63fcefa184
GET /img/banner/3.jpg HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:12:40 GMT
etag: "6b0b-5874243e18e00"
accept-ranges: bytes
content-length: 27403
content-type: image/jpeg
date: Sun, 28 May 2023 02:22:58 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/img/banner/1.jpg
49 kB URL www.nandnee.com/img/banner/1.jpg
IP
ASN #132322 Good Domain Registry Private Limited
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2019:01:23 14:59:02], progressive, precision 8, 770x419, components 3\012- data
Hash c9e38ca837b9e71c0da4064b7207a006
019c72582ed979fefc3ad1cf1195ddf784abd22b
62a44a576327ac8f65aafbcac57c4480b5f8f18776a987784d791be7915bfa2d
GET /img/banner/1.jpg HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:12:42 GMT
etag: "be7b-5874244001280"
accept-ranges: bytes
content-length: 48763
content-type: image/jpeg
date: Sun, 28 May 2023 02:22:58 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/img/banner/2.jpg
200 OK 42 kB URL GET HTTP/2 www.nandnee.com/img/banner/2.jpg
IP
ASN #132322 Good Domain Registry Private Limited
Certificate IssuerLet's Encrypt
Subjectmail.nandnee.com
Fingerprint71:0F:75:F8:24:C9:4B:CA:D6:76:E8:FC:C3:45:95:D8:CD:EC:51:51
ValidityWed, 17 May 2023 00:39:20 GMT - Tue, 15 Aug 2023 00:39:19 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2019:01:23 15:02:08], progressive, precision 8, 371x419, components 3\012- data
Hash 39d108562044a78a194b37ad4893a370
c6e097a5822f9b8f2796255bb1405617e7850d4b
18e8bbba71c0d64a4128179f90c2d610d29f9b3ae9a91b0023e0ce5469acc92e
GET /img/banner/2.jpg HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:12:42 GMT
etag: "a266-5874244001280"
accept-ranges: bytes
content-length: 41574
content-type: image/jpeg
date: Sun, 28 May 2023 02:22:58 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/js/jquery.meanmenu.js
3.5 kB URL www.nandnee.com/js/jquery.meanmenu.js
IP
ASN #132322 Good Domain Registry Private Limited
File type ASCII text, with CRLF line terminators
Hash 4bc786ced4e1d6b4051a8576d1dd4c40
7e4637d5a3d079c0a09aa29b5829b1d3b1f74edf
8a6d3aada372b35be4d4c603c33495bfc86ee674fcf83fbeb9f4c5a51c1345f2
Analyzer Verdict Alert fortinet Phishing
GET /js/jquery.meanmenu.js HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:13:38 GMT
etag: "2de8-5874247569080-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3481
content-type: application/javascript
date: Sun, 28 May 2023 02:22:58 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/lib/home.js
311 B URL www.nandnee.com/lib/home.js
IP
ASN #132322 Good Domain Registry Private Limited
File type ASCII text, with CRLF line terminators
Hash d3da1ffc50e65558de3dd7bba4be3717
9c585600c548957cca45db37628d020a8a37e1bc
0de7787b6ede5e93209aefc6ff659412af7efad7544931483fcb77d36a683a92
Analyzer Verdict Alert fortinet Phishing
GET /lib/home.js HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:13:44 GMT
etag: "22a-5874247b21e00-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 311
content-type: application/javascript
date: Sun, 28 May 2023 02:22:58 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/lib/js/jquery.nivo.slider.js
4.9 kB URL www.nandnee.com/lib/js/jquery.nivo.slider.js
IP
ASN #132322 Good Domain Registry Private Limited
File type ASCII text, with very long lines (386), with CRLF line terminators
Hash d3356754fe8c2e45837b1efbfe7d3264
5482c18434d0437310164508c425855df24a5182
2499cc57fb7485383efeea091c6fcb8f48e1efec5462a2558c7cd377c9c55b79
Analyzer Verdict Alert fortinet Phishing
GET /lib/js/jquery.nivo.slider.js HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:13:46 GMT
etag: "744e-5874247d0a280-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4886
content-type: application/javascript
date: Sun, 28 May 2023 02:22:58 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/js/plugins.js
200 OK 1.3 kB URL GET HTTP/2 www.nandnee.com/js/plugins.js
IP
ASN #132322 Good Domain Registry Private Limited
Certificate IssuerLet's Encrypt
Subjectmail.nandnee.com
Fingerprint71:0F:75:F8:24:C9:4B:CA:D6:76:E8:FC:C3:45:95:D8:CD:EC:51:51
ValidityWed, 17 May 2023 00:39:20 GMT - Tue, 15 Aug 2023 00:39:19 GMT
File type Unicode text, UTF-8 text, with very long lines (1872), with CRLF line terminators
Hash 5320d1b19c189eff4c704e236c17a26c
51119529cc162e2125fbe8c303bd3a34f6795674
f095e82f96b13cc387683313a2780376ef7e3540d8394826c319ce8caa4db12c
Analyzer Verdict Alert fortinet Phishing
GET /js/plugins.js HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:13:36 GMT
etag: "b19-5874247380c00-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1268
content-type: application/javascript
date: Sun, 28 May 2023 02:22:58 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/js/main.js
1.5 kB URL www.nandnee.com/js/main.js
IP
ASN #132322 Good Domain Registry Private Limited
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 9afcdf7e6de12e95580a4d43098ca340
07d12b7fac17f7663cc4188d251e97d2e9da9f2c
40e7dcaee76905616509e7c61553ac26e3aa0192f1a653ad8510c6cc6c4a8788
Analyzer Verdict Alert fortinet Phishing
GET /js/main.js HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:13:38 GMT
etag: "1c1b-5874247569080-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1475
content-type: application/javascript
date: Sun, 28 May 2023 02:22:58 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/js/img-zoom/jquery.simpleLens.min.js
1.3 kB URL www.nandnee.com/js/img-zoom/jquery.simpleLens.min.js
IP
ASN #132322 Good Domain Registry Private Limited
File type ASCII text, with very long lines (528), with CRLF line terminators
Hash e24c8a8a90cf55148781cc80222cb52e
a2b34853dfa21aadefb9a9e04fba9248373a3285
9e26cb796951b46296b47da5293079eabd6c8aaac128af237b4ba2e81b3043c5
Analyzer Verdict Alert fortinet Phishing
GET /js/img-zoom/jquery.simpleLens.min.js HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:13:42 GMT
etag: "1052-5874247939980-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1335
content-type: application/javascript
date: Sun, 28 May 2023 02:22:58 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/js/jquery-ui.min.js
7.3 kB URL www.nandnee.com/js/jquery-ui.min.js
IP
ASN #132322 Good Domain Registry Private Limited
File type ASCII text, with very long lines (23835), with CRLF line terminators
Hash aeef3574791b4d09b5c0861020632366
90f0e8672853220999e38eb8857e04d5a26d9797
5d86e4b5642cad8aae2ee12ff0ccf6995180eacd06c9c9c44d8f4299439e209c
Analyzer Verdict Alert fortinet Phishing
GET /js/jquery-ui.min.js HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:13:38 GMT
etag: "5dd6-5874247569080-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 7261
content-type: application/javascript
date: Sun, 28 May 2023 02:22:58 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/img/logo-footer.png
16 kB URL www.nandnee.com/img/logo-footer.png
IP
ASN #132322 Good Domain Registry Private Limited
File type PNG image data, 372 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 410fec214ec968be50389bf379466a97
f6c2e61c5e9ba578521b8037d86324422fe80915
0334f3f5a4aef9ad748db119e6ece41c7a00876a6820f91562bf4e1e4372c346
GET /img/logo-footer.png HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:12:34 GMT
etag: "3e3d-5874243860080"
accept-ranges: bytes
content-length: 15933
content-type: image/png
date: Sun, 28 May 2023 02:22:58 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/js/bootstrap.min.js
9.9 kB URL www.nandnee.com/js/bootstrap.min.js
IP
ASN #132322 Good Domain Registry Private Limited
File type ASCII text, with very long lines (32056), with CRLF line terminators
Hash 036c8006cced32fa0cece52dbef46bac
81bf9f2cd7442cbea8d9176b74f597c878fd43ea
967a5bc7c5a28f814a26bf402f4abb73212e16e99d9a3a456030851e436c45ee
Analyzer Verdict Alert fortinet Phishing
GET /js/bootstrap.min.js HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:13:40 GMT
etag: "90fe-5874247751500-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 9855
content-type: application/javascript
date: Sun, 28 May 2023 02:22:58 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/js/vendor/jquery-1.12.0.min.js
200 OK 34 kB URL GET HTTP/2 www.nandnee.com/js/vendor/jquery-1.12.0.min.js
IP
ASN #132322 Good Domain Registry Private Limited
Certificate IssuerLet's Encrypt
Subjectmail.nandnee.com
Fingerprint71:0F:75:F8:24:C9:4B:CA:D6:76:E8:FC:C3:45:95:D8:CD:EC:51:51
ValidityWed, 17 May 2023 00:39:20 GMT - Tue, 15 Aug 2023 00:39:19 GMT
File type ASCII text, with very long lines (32060), with CRLF line terminators
Hash b2f71c943f2f14613bc100fc3ec59db2
36a749e81e9015ae8d0aa8c8c98f92141a241eed
de33fe1ba0d81147fc56ff19149e85914d13c4c4d7a5969aeda463d9f4787848
Analyzer Verdict Alert fortinet Phishing
GET /js/vendor/jquery-1.12.0.min.js HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:13:44 GMT
etag: "17c57-5874247b21e00-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 33856
content-type: application/javascript
date: Sun, 28 May 2023 02:22:58 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/img/banner/5.jpg
200 OK 38 kB URL GET HTTP/2 www.nandnee.com/img/banner/5.jpg
IP
ASN #132322 Good Domain Registry Private Limited
Certificate IssuerLet's Encrypt
Subjectmail.nandnee.com
Fingerprint71:0F:75:F8:24:C9:4B:CA:D6:76:E8:FC:C3:45:95:D8:CD:EC:51:51
ValidityWed, 17 May 2023 00:39:20 GMT - Tue, 15 Aug 2023 00:39:19 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2019:01:21 17:18:54], progressive, precision 8, 371x148, components 3\012- data
Hash 916f0596934290949433a82a6c5e4768
9601d8eb0f8f0a22d21df893ff359a9c0281d135
c45acc29ca8473612aea85d100b3925636efd970983c62c75920c1a4c857f74f
GET /img/banner/5.jpg HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:12:40 GMT
etag: "9323-5874243e18e00"
accept-ranges: bytes
content-length: 37667
content-type: image/jpeg
date: Sun, 28 May 2023 02:22:58 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/media/banner/thumb/15385c62b7af867fd3.jpg
562 kB URL www.nandnee.com/media/banner/thumb/15385c62b7af867fd3.jpg
IP
ASN #132322 Good Domain Registry Private Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 1919x655, components 3\012- data
Size 562 kB (562432 bytes)
Hash af1135abe7905fbcf417aee8e07331ae
c8c712a0700d66a5b25b989f07b00e898df66ca7
dc0912598da5e204008b8601a5ef9f1ee920dc2faf0514e9f9e2c3a8e070d5c2
GET /media/banner/thumb/15385c62b7af867fd3.jpg HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 14 Nov 2022 08:20:10 GMT
etag: "89500-5ed69e8678280"
accept-ranges: bytes
content-length: 562432
content-type: image/jpeg
date: Sun, 28 May 2023 02:22:58 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/media/banner/thumb/63385c62b7a95d7702.jpg
621 kB URL www.nandnee.com/media/banner/thumb/63385c62b7a95d7702.jpg
IP
ASN #132322 Good Domain Registry Private Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 1920x655, components 3\012- data
Size 621 kB (620613 bytes)
Hash eebede7250e4c5f31bf3986bf9c7cb80
1a242287a03b39533d8ea3702e4ace44ebfd4ec7
5b5674d7393f1fd4cc56dd2a5e2f0f9fb10c4bb988a9d2547c4a6a8c6001a280
GET /media/banner/thumb/63385c62b7a95d7702.jpg HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 14 Nov 2022 08:20:04 GMT
etag: "97845-5ed69e80bf500"
accept-ranges: bytes
content-length: 620613
content-type: image/jpeg
date: Sun, 28 May 2023 02:22:58 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/css/jquery-ui.min.css
3.4 kB URL www.nandnee.com/css/jquery-ui.min.css
IP
ASN #132322 Good Domain Registry Private Limited
File type ASCII text, with very long lines (15275), with CRLF line terminators
Hash 2187b07666c4e0ee211200d885341e78
9a722a7dcc8d64261be702cae6525ad431284743
e455e4d1a7754a50bcf2ddf75d1ea747776f1f256f587f52f9aceb1f5bc14d7d
GET /css/jquery-ui.min.css HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/master.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:12:14 GMT
etag: "41b9-587424254d380-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3353
content-type: text/css
date: Sun, 28 May 2023 02:22:59 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/css/owl.carousel.css
200 OK 1.6 kB URL GET HTTP/2 www.nandnee.com/css/owl.carousel.css
IP
ASN #132322 Good Domain Registry Private Limited
Certificate IssuerLet's Encrypt
Subjectmail.nandnee.com
Fingerprint71:0F:75:F8:24:C9:4B:CA:D6:76:E8:FC:C3:45:95:D8:CD:EC:51:51
ValidityWed, 17 May 2023 00:39:20 GMT - Tue, 15 Aug 2023 00:39:19 GMT
File type ASCII text, with CRLF line terminators
Hash e4bd14a336ef37250051691acb72df9d
a0c85ccf296d51c867722643e2c5c15c6c666f0d
7f79f1633c9c57d5794f8e9d7bd6377a35be01a43c36c0e74023df088b35fa50
GET /css/owl.carousel.css HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/master.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:12:14 GMT
etag: "1f17-587424254d380-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1644
content-type: text/css
date: Sun, 28 May 2023 02:22:59 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/css/animate.css
200 OK 4.3 kB URL GET HTTP/2 www.nandnee.com/css/animate.css
IP
ASN #132322 Good Domain Registry Private Limited
Certificate IssuerLet's Encrypt
Subjectmail.nandnee.com
Fingerprint71:0F:75:F8:24:C9:4B:CA:D6:76:E8:FC:C3:45:95:D8:CD:EC:51:51
ValidityWed, 17 May 2023 00:39:20 GMT - Tue, 15 Aug 2023 00:39:19 GMT
File type ASCII text, with CRLF line terminators
Hash 4b3c9a441c4cb4e544eec9342826eedc
574473bbff323cb9aa6c570e9d510456867376df
1e3b0b1b0ec443392b143405d5873b89bc7833a8e4b28a612f487362d0ab25a6
GET /css/animate.css HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/master.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:12:18 GMT
etag: "12170-587424291dc80-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4348
content-type: text/css
date: Sun, 28 May 2023 02:22:59 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/css/img-zoom/jquery.simpleLens.css
417 B URL www.nandnee.com/css/img-zoom/jquery.simpleLens.css
IP
ASN #132322 Good Domain Registry Private Limited
File type ASCII text, with CRLF line terminators
Hash 4bfdfa9c716d9a0667d5d4890de21587
67573c1fe1f7f644f3205a4401fe33ea55f07283
bd7c14f4204da3a1496f62c9a8555c35c0f2089c3eb6616f5097f5325d961607
GET /css/img-zoom/jquery.simpleLens.css HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/master.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:12:26 GMT
etag: "3b2-58742430bee80-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 417
content-type: text/css
date: Sun, 28 May 2023 02:22:59 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/css/meanmenu.min.css
915 B URL www.nandnee.com/css/meanmenu.min.css
IP
ASN #132322 Good Domain Registry Private Limited
File type ASCII text, with CRLF line terminators
Hash 30b7a0bef6f285250711651df5d4a53e
3ec5475690a8dd941ab400f77bab589eaa06d71c
a0f08e4a6d5ff847222f9e9a6ba375088fadf36d000018c3af5c895cf26db30c
GET /css/meanmenu.min.css HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/master.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 12 Nov 2022 13:55:20 GMT
etag: "b06-5ed465b5f0200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 915
content-type: text/css
date: Sun, 28 May 2023 02:22:59 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/lib/css/nivo-slider.css
1.5 kB URL www.nandnee.com/lib/css/nivo-slider.css
IP
ASN #132322 Good Domain Registry Private Limited
File type ASCII text, with CRLF line terminators
Hash cbd8fb17d18b6f022f8b388d002e213f
4135b1079785601e5e3ec333d8b9ac68b1b135f6
04228cce8b386305bf8ec69e253e348d0437dab82df87e843db37c523b8967d6
GET /lib/css/nivo-slider.css HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/master.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:13:46 GMT
etag: "1978-5874247d0a280-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1490
content-type: text/css
date: Sun, 28 May 2023 02:22:59 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/css/font-awesome.min.css
6.3 kB URL www.nandnee.com/css/font-awesome.min.css
IP
ASN #132322 Good Domain Registry Private Limited
File type ASCII text, with very long lines (27327), with CRLF line terminators
Hash 9cec9b4554ec234d2a1910d0a400d1ed
9bdae5618ff668b6934dbb78b291cffa7153b0a9
048f0f31456f315100f4fc579584456c3884bdefd9039ba09ba2190c69fe6999
GET /css/font-awesome.min.css HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/master.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:12:16 GMT
etag: "6b66-5874242735800-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 6256
content-type: text/css
date: Sun, 28 May 2023 02:22:59 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.nandnee.com/css/responsive.css
4.5 kB URL www.nandnee.com/css/responsive.css
IP
ASN #132322 Good Domain Registry Private Limited
File type assembler source, ASCII text, with CRLF line terminators
Hash 9f7cdf16bcd66ce96268971892c67aa4
5b69ff194cde92252a0dc3b959a60abdf4005fae
f79126f22dbcea9f46b33da27a24bd64e11f1e6ea9a0732bdc34e681709beef7
GET /css/responsive.css HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/master.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:12:14 GMT
etag: "7388-587424254d380-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4505
content-type: text/css
date: Sun, 28 May 2023 02:22:59 GMT
server: Apache/2
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Iceland
19 kB URL fonts.googleapis.com/css?family=Iceland
IP
File type assembler source, ASCII text, with CRLF, LF line terminators
Hash 407d60b14ef0a319fb3419eb005cd447
a3c655507d8027061ddd149b250cbac4c9a9b25d
5f5fe9b4e15ae6d27ba9f4810b42cd7e43718b616f0ca88e13318cb37963b9ec
GET /css?family=Iceland HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 28 May 2023 02:23:19 GMT
date: Sun, 28 May 2023 02:23:19 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.nandnee.com/style.css
20 kB URL www.nandnee.com/style.css
IP
ASN #132322 Good Domain Registry Private Limited
File type Unicode text, UTF-8 text, with very long lines (397), with CRLF line terminators
Hash 928dde2750f1c6ce9343dcde65efaead
e6e244bcd01383700efd2fec0adc6179c23eb44c
ade14a599952007598cd87cbf0232fd8280e1f93106ff8ba95e45b4c61bf2728
GET /style.css HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/master.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 14 Nov 2022 12:57:11 GMT
etag: "1edb2-5ed6dc717d7c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 19563
content-type: text/css
date: Sun, 28 May 2023 02:22:59 GMT
server: Apache/2
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash bb63f1caaf551e76a88f326c8db516ce
513533cccfb522767abf37082518f766adc3c070
cfe2e32528181d9ff75d3946d789811d6d2c71e153c39aa72c0a586b922ebeb7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash bb63f1caaf551e76a88f326c8db516ce
513533cccfb522767abf37082518f766adc3c070
cfe2e32528181d9ff75d3946d789811d6d2c71e153c39aa72c0a586b922ebeb7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Montserrat:400,700
1.0 kB URL fonts.googleapis.com/css?family=Montserrat:400,700
IP
File type gzip compressed data, max compression\012- data
Hash bb4d6833463633889118b9896b786660
c8b32d98c0abdc2bb091a5cf897789a15015f5fd
87ececc78e68b77ac2b800b823de1665e0a6ab077993f208173b7c1822deffa5
GET /css?family=Montserrat:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 28 May 2023 02:23:19 GMT
date: Sun, 28 May 2023 02:23:19 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 48412, version 1.0\012- data
Hash 31a8297826cdcea344698ff952694a7f
4fa1ee4c471d1c05e9141855eec5ee09b898d594
7c7818c25a18e8a38553fcbcbc2ad0b5e964103a7d2e494f82815e3f70bf3fc5
GET /s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nandnee.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48412
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 May 2023 11:49:35 GMT
expires: Fri, 24 May 2024 11:49:35 GMT
cache-control: public, max-age=31536000
age: 225227
last-modified: Tue, 02 May 2023 15:08:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 48412, version 1.0\012- data
Hash 31a8297826cdcea344698ff952694a7f
4fa1ee4c471d1c05e9141855eec5ee09b898d594
7c7818c25a18e8a38553fcbcbc2ad0b5e964103a7d2e494f82815e3f70bf3fc5
GET /s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nandnee.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48412
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 May 2023 11:49:35 GMT
expires: Fri, 24 May 2024 11:49:35 GMT
cache-control: public, max-age=31536000
age: 225227
last-modified: Tue, 02 May 2023 15:08:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/iceland/v16/rax9HiuFsdMNOnWPaKtMAQ.woff2
12 kB URL fonts.gstatic.com/s/iceland/v16/rax9HiuFsdMNOnWPaKtMAQ.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 11576, version 1.0\012- data
Hash 4e4178e1ffcea4b423b363716159dccd
5c05cb0217f42bf468053157c2c33a0fb0076076
d07a894337a83ac4df03d593c8fe94197a4e73f8b27c10229fd00d816d58e1c6
GET /s/iceland/v16/rax9HiuFsdMNOnWPaKtMAQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nandnee.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11576
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 00:34:13 GMT
expires: Thu, 23 May 2024 00:34:13 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 26 Apr 2022 15:47:43 GMT
content-type: font/woff2
age: 352149
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash bb63f1caaf551e76a88f326c8db516ce
513533cccfb522767abf37082518f766adc3c070
cfe2e32528181d9ff75d3946d789811d6d2c71e153c39aa72c0a586b922ebeb7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 01306b55f5d6e6a8e1ff9411386a89a0
1c06c985114ad08023398fe3597371715cf6aa27
7d4df964819e827fdbd588784bff90bdb09b6938ca788e013144d1600e8ecc16
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nandnee.com/fonts/fontawesome-webfont3295.woff2?v=4.5.0
67 kB URL www.nandnee.com/fonts/fontawesome-webfont3295.woff2?v=4.5.0
IP
ASN #132322 Good Domain Registry Private Limited
File type Web Open Font Format (Version 2), TrueType, length 66624, version 4.262\012- data
Hash db812d8a70a4e88e888744c1c9a27e89
638c652d623280a58144f93e7b552c66d1667a11
ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995
Analyzer Verdict Alert fortinet Phishing
GET /fonts/fontawesome-webfont3295.woff2?v=4.5.0 HTTP/1.1
Host: www.nandnee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/css/font-awesome.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2019 08:12:30 GMT
etag: "10440-587424348f780"
accept-ranges: bytes
content-length: 66624
vary: Accept-Encoding,User-Agent
date: Sun, 28 May 2023 02:23:01 GMT
server: Apache/2
X-Firefox-Spdy: h2
www.youtube.com/s/player/bbe1b497/www-player.css
49 kB URL www.youtube.com/s/player/bbe1b497/www-player.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash b8afa5d85a1bf60a05181715a1b9d405
5b3124b4a0cb3d14d9c7a69d2cecdfa24b475304
2da3463d43c823fbf9a6df6c58b0bca86f25083def66cd532f31b114b997df04
GET /s/player/bbe1b497/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 48702
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 15:05:50 GMT
expires: Thu, 23 May 2024 15:05:50 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 01:49:18 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 299853
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/bbe1b497/fetch-polyfill.vflset/fetch-polyfill.js
200 OK 2.6 kB URL GET HTTP/3 www.youtube.com/s/player/bbe1b497/fetch-polyfill.vflset/fetch-polyfill.js
IP
Requested by https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF
ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (552)
Hash 949e94fed78d252b728cdc2aa6ddc56a
d2bfdd653bb3da592097fb4ddb6eabbdc3060562
ac8177161c3038b07597ec544de3c00f46e1a0aa6b4b4c045ff0495553cc5069
GET /s/player/bbe1b497/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2625
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 15:07:04 GMT
expires: Thu, 23 May 2024 15:07:04 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 01:49:18 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 299779
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
15 kB URL fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 May 2023 17:31:32 GMT
expires: Wed, 22 May 2024 17:31:32 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 377511
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/bbe1b497/www-embed-player.vflset/www-embed-player.js
94 kB URL www.youtube.com/s/player/bbe1b497/www-embed-player.vflset/www-embed-player.js
IP
File type ASCII text, with very long lines (660)
Hash 84523cc509e7b9a1d46990d65185b9de
db4518d0142e239249d85d37875c4516501f710f
66c28207b52ebc8b2daba1a02dfdb35cba26b0538410e5b696805263d016c52b
GET /s/player/bbe1b497/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 94068
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 15:07:04 GMT
expires: Thu, 23 May 2024 15:07:04 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 01:49:18 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 299779
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
16 kB URL fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 May 2023 21:40:21 GMT
expires: Wed, 22 May 2024 21:40:21 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 362582
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/base.js
758 kB URL www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/base.js
IP
File type ASCII text, with very long lines (555)
Size 758 kB (757956 bytes)
Hash ef12fba4202719e6bf955d5497a856e3
7c8cf3c348e2ba17bec5cd24d6f57631d348add4
0ad4c72a41a087c98857745f49535143b8106429453b919703962c4367a9b68f
GET /s/player/bbe1b497/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 757956
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 15:10:27 GMT
expires: Thu, 23 May 2024 15:10:27 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 01:49:18 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 299576
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
watchdogsfont.com/font/PixelOperatorMono.ttf
20 kB URL watchdogsfont.com/font/PixelOperatorMono.ttf
IP
File type TrueType Font data, 12 tables, 1st "FFTM", 24 names, Macintosh\012- data
Hash 689d07b9988e93f5344ffd6748697270
6e6422afcde26475661186ea71fcc2f88fbe40df
eddffc69d17bd4dce455d7215925f18d53a5640d50fd34220eed9725be520e9b
GET /font/PixelOperatorMono.ttf HTTP/1.1
Host: watchdogsfont.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nandnee.com
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 28 May 2023 02:23:23 GMT
content-type: application/x-font-truetype
content-length: 20520
server: Apache
last-modified: Tue, 04 Oct 2016 18:38:30 GMT
accept-ranges: bytes
permissions-policy: interest-cohort=()
access-control-allow-origin: *
X-Firefox-Spdy: h2
watchdogsfont.com/font/HACKED_Title.ttf
27 kB URL watchdogsfont.com/font/HACKED_Title.ttf
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 40 names, Macintosh, Typeface \251 (your company). 2014. All Rights ReservedRegularHACKED:Version 1.00Version 1.00 Ma\012- data
Hash 2f48abc8c45de9add264c5be432e878e
9e3d7fa7f872de387830bb504c849a521e501dd6
dd46b841694e345d5c0c904f33b52e55585e35658b1111cafcd34d5f18b19678
GET /font/HACKED_Title.ttf HTTP/1.1
Host: watchdogsfont.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nandnee.com
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 28 May 2023 02:23:23 GMT
content-type: application/x-font-truetype
content-length: 26664
server: Apache
last-modified: Tue, 04 Oct 2016 18:38:30 GMT
accept-ranges: bytes
permissions-policy: interest-cohort=()
access-control-allow-origin: *
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,300,600,700,800
20 kB URL fonts.googleapis.com/css?family=Open+Sans:400,300,600,700,800
IP
File type gzip compressed data, max compression\012- data
Hash 11a7821374d42c38cbfb568a0bef7a3a
bec42b6dd9ae28cab5cabb3fb21816481944110e
a2c838efe6140d35f625fb290304604bad5488618796d5901578284bc7f3be3a
GET /css?family=Open+Sans:400,300,600,700,800 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 28 May 2023 02:23:19 GMT
date: Sun, 28 May 2023 02:23:19 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
64.media.tumblr.com/a3eb344e28c011a4d582e21c2699292e/2b627fa388fb4f16-51/s540x810/334739291fa1b8b641dbbc7dee3be4ba8667ea1f.gifv
2.1 MB URL 64.media.tumblr.com/a3eb344e28c011a4d582e21c2699292e/2b627fa388fb4f16-51/s540x810/334739291fa1b8b641dbbc7dee3be4ba8667ea1f.gifv
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 2.1 MB (2097724 bytes)
Hash 6e605f5e6e3cdddf3e1e67bee9a9bec0
2775661ed39e45920a90b1f0da37cf7df4d43b67
d4431ebea4b2b9d896538e10c1075a3af9f4e177528f2cb56b1c8f8cfff7ca08
GET /a3eb344e28c011a4d582e21c2699292e/2b627fa388fb4f16-51/s540x810/334739291fa1b8b641dbbc7dee3be4ba8667ea1f.gifv HTTP/1.1
Host: 64.media.tumblr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 28 May 2023 02:23:23 GMT
content-type: image/webp
content-length: 2097724
cache-control: max-age=315360000
content-disposition: inline; filename="tumblr_a3eb344e28c011a4d582e21c2699292e_33473929_540.webp"
etag: "5d26bf7cb81d30604269b223c9d06cbc-1523937600-01da98b"
last-modified: Sun, 24 Apr 2022 21:08:32 GMT
timing-allow-origin: *
vary: Accept
x-nc: HIT arn 4
accept-ranges: bytes
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
strict-transport-security: max-age=31536000; preload
server-timing: dc;desc=arn, cache;desc=HIT;dur=2.0
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sun, 28 May 2023 02:23:23 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 32 kB URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 5014310d409d764850aca4582fdbfa48
767cbe5441e19e643a88bd3e29e027dc3079dd98
d4ee35b3777892d3cc83f1f9cd2df2abeaeeab1c775a9073911f06911df32eab
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sun, 28 May 2023 02:23:23 GMT
server: ESF
cache-control: private
content-length: 31969
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash bb494db5b5848c5e9833175a6e79f275
41f078137666d7c7312fcbbe7df7a26fb2237c33
86d97acae9b59a15104dfcab27a4d525f351caea4995ef305566b1ae558743e6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/embed.js
8.3 kB URL www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/embed.js
IP
File type ASCII text, with very long lines (3391)
Hash 37bbc7c6c5db9247aee64637c530554f
eddd9d2f6f1b869565c8f7a48d13a9af50745a11
ee317b545c5822bf3e3ac29b92bbc9a0dcd3d7c2ba0395aa8f4d9eae0b2df7c6
GET /s/player/bbe1b497/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 8266
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 15:10:31 GMT
expires: Thu, 23 May 2024 15:10:31 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 01:49:18 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 299572
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/js/th/M2d1Z2wfQxbrgbfhnRYAKyzYx2IZVTqQoYmEaYL0pMI.js
15 kB URL www.google.com/js/th/M2d1Z2wfQxbrgbfhnRYAKyzYx2IZVTqQoYmEaYL0pMI.js
IP
File type ASCII text, with very long lines (37407)
Hash b06781f2328a7df8d1160b00baac64a8
3094bb824793e8c5790214e78b233243b209135c
336775676c1f4316eb81b7e19d16002b2cd8c76219553a90a189846982f4a4c2
GET /js/th/M2d1Z2wfQxbrgbfhnRYAKyzYx2IZVTqQoYmEaYL0pMI.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14718
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 27 May 2023 16:54:31 GMT
expires: Sun, 26 May 2024 16:54:31 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 08 May 2023 09:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 34132
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash bce6f7183d3d9461ce90bcc847ad8ccc
0104c19e28533dde8611b4cd331a4cc264dadedc
b65629bca292e14574aac811a4dc049bfd7a3deb56f40e30f77c3236996a0867
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=false
27 kB URL www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=false
IP
File type Unicode text, UTF-8 text, with very long lines (65393), with no line terminators
Hash 33144e99a4b0f782891b3e3cac1e2278
da55fb7a9ebbc08722b05a403255a72b3461ffaf
b88d955a046daf08a0d5f5785a02d25e2bfc5ae2e9035681f394055e5e17d8dc
POST /youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=false HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Goog-Visitor-Id: CgtJUzdZMGtJbHUxSSia9sqjBg%3D%3D
X-Youtube-Bootstrap-Logged-In: false
X-Youtube-Client-Name: 56
X-Youtube-Client-Version: 1.20230523.01.00
Content-Length: 2473
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Sun, 28 May 2023 02:23:23 GMT
server: scaffolding on HTTPServer2
content-length: 27051
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+570; expires=Tue, 27-May-2025 02:23:23 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sun, 28 May 2023 02:23:23 GMT
cache-control: private
yt3.ggpht.com/ytc/AGIKgqOsyjLyph7SWEj_1M2HD-CbXuxZcYP-L3dEigwdOA=s68-c-k-c0x00ffffff-no-rj
2.5 kB URL yt3.ggpht.com/ytc/AGIKgqOsyjLyph7SWEj_1M2HD-CbXuxZcYP-L3dEigwdOA=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash 279fda609d0b2e80d69f8a651719e90e
6d024932d7b2cbc58441c1c35e1ca90f7a40a42e
d3c7f525844e45e4dffee0a177ee4216b34acc364e1435a5d45549a4d457ea56
GET /ytc/AGIKgqOsyjLyph7SWEj_1M2HD-CbXuxZcYP-L3dEigwdOA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 2461
x-xss-protection: 0
date: Sun, 28 May 2023 02:23:24 GMT
expires: Mon, 29 May 2023 02:23:24 GMT
cache-control: public, max-age=86400, no-transform
etag: "v237"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash bce6f7183d3d9461ce90bcc847ad8ccc
0104c19e28533dde8611b4cd331a4cc264dadedc
b65629bca292e14574aac811a4dc049bfd7a3deb56f40e30f77c3236996a0867
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/annotations_module.js
19 kB URL www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/annotations_module.js
IP
File type ASCII text, with very long lines (1115)
Hash 57d35f7719c3d9008f4937f3db00c0f1
17ad6e8e5dcf796f2a3a3259ecbe9c6b6b7031e5
b70e70c6d7e762e0da386b06cbda9bcd2d0212fd51d231dfa04af3f4a25ced7b
GET /s/player/bbe1b497/player_ias.vflset/en_US/annotations_module.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 18750
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 15:16:28 GMT
expires: Thu, 23 May 2024 15:16:28 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 01:49:18 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 299216
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/endscreen.js
200 OK 8.3 kB URL GET HTTP/3 www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/endscreen.js
IP
Requested by https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF
ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT
File type ASCII text, with very long lines (601)
Hash e9757a257c5ce96a86300911ef6996f4
3a3f8e9edaee93441383a77764b164dda5b03e05
683c2594d21fb7d812cb69ae1fccf344c108d505a43f88ca79d9c6d07e9350c5
GET /s/player/bbe1b497/player_ias.vflset/en_US/endscreen.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 8317
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 15:12:26 GMT
expires: Thu, 23 May 2024 15:12:26 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 01:49:18 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 299458
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/remote.js
200 OK 33 kB URL GET HTTP/3 www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/remote.js
IP
Requested by https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF
ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT
File type ASCII text, with very long lines (538)
Hash 7838e965c560882a5e57df7b31977db8
b01998f38298cca57b49943572a66678c5021c8c
12e41f82a5a1b8b2ef61b7001a78df3dd1d387c0da7e884144530f479f6ea86e
GET /s/player/bbe1b497/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33435
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 15:10:31 GMT
expires: Thu, 23 May 2024 15:10:31 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 01:49:18 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 299573
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/api/stats/qoe?fmt=396&afmt=251&cpn=nadbMX6ghx7pir5m&el=embedded&ns=yt&fexp=23858057%2C23983296%2C24004644%2C24007246%2C24080738%2C24135310%2C24255165%2C24361484%2C24362358%2C24364789%2C24367546%2C24368430%2C24370902%2C24415864%2C24416290%2C24439361%2C24499115%2C24532855%2C24556991%2C24558641%2C24558903%2C24559644%2C24698914%2C39323074%2C51000014&cl=534545706&seq=1&docid=ao4RCon11eY&ei=G7tyZJPoNtiQyAXFsITQDQ&event=streamingstats&plid=AAX8t6ePKK2MocBm&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fao4RCon11eY%3Frel%3D0%26autoplay%3D1&qclc=ChBuYWRiTVg2Z2h4N3BpcjVtEAE&cbr=Firefox&cbrver=111.0&c=WEB_EMBEDDED_PLAYER&cver=1.20230523.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&vps=0.000:N,0.017:B,0.289:B,0.289:B&cmt=0.017:0.000,0.289:0.000&afs=0.288:251::i&vfs=0.289:396:396::r&view=0.289:5:5&bwe=0.289:130000&vis=0.289:0&bh=0.289:0.000
204 No Content 0 B URL POST HTTP/3 www.youtube.com/api/stats/qoe?fmt=396&afmt=251&cpn=nadbMX6ghx7pir5m&el=embedded&ns=yt&fexp=23858057%2C23983296%2C24004644%2C24007246%2C24080738%2C24135310%2C24255165%2C24361484%2C24362358%2C24364789%2C24367546%2C24368430%2C24370902%2C24415864%2C24416290%2C24439361%2C24499115%2C24532855%2C24556991%2C24558641%2C24558903%2C24559644%2C24698914%2C39323074%2C51000014&cl=534545706&seq=1&docid=ao4RCon11eY&ei=G7tyZJPoNtiQyAXFsITQDQ&event=streamingstats&plid=AAX8t6ePKK2MocBm&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fao4RCon11eY%3Frel%3D0%26autoplay%3D1&qclc=ChBuYWRiTVg2Z2h4N3BpcjVtEAE&cbr=Firefox&cbrver=111.0&c=WEB_EMBEDDED_PLAYER&cver=1.20230523.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&vps=0.000:N,0.017:B,0.289:B,0.289:B&cmt=0.017:0.000,0.289:0.000&afs=0.288:251::i&vfs=0.289:396:396::r&view=0.289:5:5&bwe=0.289:130000&vis=0.289:0&bh=0.289:0.000
IP
Requested by https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF
ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/stats/qoe?fmt=396&afmt=251&cpn=nadbMX6ghx7pir5m&el=embedded&ns=yt&fexp=23858057%2C23983296%2C24004644%2C24007246%2C24080738%2C24135310%2C24255165%2C24361484%2C24362358%2C24364789%2C24367546%2C24368430%2C24370902%2C24415864%2C24416290%2C24439361%2C24499115%2C24532855%2C24556991%2C24558641%2C24558903%2C24559644%2C24698914%2C39323074%2C51000014&cl=534545706&seq=1&docid=ao4RCon11eY&ei=G7tyZJPoNtiQyAXFsITQDQ&event=streamingstats&plid=AAX8t6ePKK2MocBm&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fao4RCon11eY%3Frel%3D0%26autoplay%3D1&qclc=ChBuYWRiTVg2Z2h4N3BpcjVtEAE&cbr=Firefox&cbrver=111.0&c=WEB_EMBEDDED_PLAYER&cver=1.20230523.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&vps=0.000:N,0.017:B,0.289:B,0.289:B&cmt=0.017:0.000,0.289:0.000&afs=0.288:251::i&vfs=0.289:396:396::r&view=0.289:5:5&bwe=0.289:130000&vis=0.289:0&bh=0.289:0.000 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Visitor-Id: CgtJUzdZMGtJbHUxSSia9sqjBg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20230523.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1685240603310&flash=0&frm=2&u_tz&u_his=3&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C5%2C5&vis=1&wgl=true&ca_type=image
Content-Type: application/x-www-form-urlencoded
Content-Length: 226
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
date: Sun, 28 May 2023 02:23:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
x-content-type-options: nosniff
server: Video Stats Server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sun, 28 May 2023 02:23:24 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF
ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1685240603840
Content-Type: application/json
X-Goog-Visitor-Id: CgtJUzdZMGtJbHUxSSia9sqjBg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20230523.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1685240603310&flash=0&frm=2&u_tz&u_his=3&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C5%2C5&vis=1&wgl=true&ca_type=image
Content-Length: 18722
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Sun, 28 May 2023 02:23:24 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+414; expires=Tue, 27-May-2025 02:23:24 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sun, 28 May 2023 02:23:24 GMT
cache-control: private
ocsp.pki.goog/gts1c3
471 B IP
Hash 44d85558fff564a90f400fd2db3eceda
244baaa6b7b4dc911e1cf4f14d62c68a4e9f245a
cd94f61997a376893543dba351bb7bd9b7f0592aa7f474cd94c1e86dddf33ec3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 44d85558fff564a90f400fd2db3eceda
244baaa6b7b4dc911e1cf4f14d62c68a4e9f245a
cd94f61997a376893543dba351bb7bd9b7f0592aa7f474cd94c1e86dddf33ec3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&mh=Bh&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynl6&ms=au%2Crdu&mv=u&mvi=2&pl=21&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=6281873&dur=132.432&lmt=1623251817331131&mt=1685239958&fvip=4&keepalive=yes&fexp=24007246%2C24363393%2C51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5436432&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRQIhAOUDsZms2vUa3_EAczBNm5S4i8zkTEkLViLszcDSzbVYAiAd2BP1aMFTZ3Wg3p7l42MSYQhB4aEQI-PJNwwHstIwTA%3D%3D&alr=yes&sig=AOq0QJ8wRAIgSTooFg8X4cRLs3inIovud8_IAQKWTZC6znMMXylNZwICIGUitHqXxgf_Z3ZcF1XunfL2z4w2-8JsthDvq_OnM3wz&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&range=0-113828&rn=1&rbuf=0&pot=IihRYFFmNRLqexIHJSoEGjU6HCclKjMoBBgCMzgBaBMgChMHdFMVRWIk
200 OK 1.3 kB URL POST HTTP/1.1 rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&mh=Bh&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynl6&ms=au%2Crdu&mv=u&mvi=2&pl=21&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=6281873&dur=132.432&lmt=1623251817331131&mt=1685239958&fvip=4&keepalive=yes&fexp=24007246%2C24363393%2C51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5436432&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRQIhAOUDsZms2vUa3_EAczBNm5S4i8zkTEkLViLszcDSzbVYAiAd2BP1aMFTZ3Wg3p7l42MSYQhB4aEQI-PJNwwHstIwTA%3D%3D&alr=yes&sig=AOq0QJ8wRAIgSTooFg8X4cRLs3inIovud8_IAQKWTZC6znMMXylNZwICIGUitHqXxgf_Z3ZcF1XunfL2z4w2-8JsthDvq_OnM3wz&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&range=0-113828&rn=1&rbuf=0&pot=IihRYFFmNRLqexIHJSoEGjU6HCclKjMoBBgCMzgBaBMgChMHdFMVRWIk
IP
ASN #50304 Blix Solutions AS
Requested by https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googlevideo.com
FingerprintB4:77:9D:FE:B1:91:02:95:7B:28:7C:59:FF:D1:00:C6:C9:E1:4D:0A
ValidityTue, 16 May 2023 11:05:58 GMT - Tue, 25 Jul 2023 11:05:57 GMT
File type ASCII text, with very long lines (1252), with no line terminators
Hash 8c910d5843d8d2692f7b6669dd95821a
8376462fcde4e2ac2b8b9baabbda72f50a9b0a4b
5fe8a1fea4916a79086949aeb9ec34d7592dd48f8890db674208dc256f200007
POST /videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&mh=Bh&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynl6&ms=au%2Crdu&mv=u&mvi=2&pl=21&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=6281873&dur=132.432&lmt=1623251817331131&mt=1685239958&fvip=4&keepalive=yes&fexp=24007246%2C24363393%2C51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5436432&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRQIhAOUDsZms2vUa3_EAczBNm5S4i8zkTEkLViLszcDSzbVYAiAd2BP1aMFTZ3Wg3p7l42MSYQhB4aEQI-PJNwwHstIwTA%3D%3D&alr=yes&sig=AOq0QJ8wRAIgSTooFg8X4cRLs3inIovud8_IAQKWTZC6znMMXylNZwICIGUitHqXxgf_Z3ZcF1XunfL2z4w2-8JsthDvq_OnM3wz&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&range=0-113828&rn=1&rbuf=0&pot=IihRYFFmNRLqexIHJSoEGjU6HCclKjMoBBgCMzgBaBMgChMHdFMVRWIk HTTP/1.1
Host: rr2---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Sun, 28 May 2023 02:23:24 GMT
Expires: Sun, 28 May 2023 02:23:24 GMT
Cache-Control: private, max-age=21299
Accept-Ranges: bytes
Content-Length: 1252
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 42dc498d24631191180ef4c626b3ef0d
245ea8b98ee2c513c5b861c4aac2a7ef8b181b57
a5c26ee5deb3538371a145131687352b7b07fa7dadec3b3893a62f454b36109c
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1339
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sun, 28 May 2023 02:23:24 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
471 B IP
Hash 44d85558fff564a90f400fd2db3eceda
244baaa6b7b4dc911e1cf4f14d62c68a4e9f245a
cd94f61997a376893543dba351bb7bd9b7f0592aa7f474cd94c1e86dddf33ec3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/generate_204?cEQeFw
0 B URL www.youtube.com/generate_204?cEQeFw
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?cEQeFw HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Sun, 28 May 2023 02:23:24 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=251&source=youtube&requiressl=yes&mh=Bh&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynl6&ms=au%2Crdu&mv=u&mvi=2&pl=21&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=2310936&dur=132.481&lmt=1631982566110408&mt=1685239958&fvip=4&keepalive=yes&fexp=24007246%2C24363393%2C51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5532434&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRgIhALJHyigjcMPB2G1FLvlURRtgRjF_nF5TGS6juhkZ158cAiEAr_ELkGV9Mvdy8lrYe196LOqkOVYTAU8hLoDQXrP0DFc%3D&alr=yes&sig=AOq0QJ8wRAIgIySo6CcsA24nxQaldP4JwV9l45Z7-eOfvVsxvDAOTi0CIAfGwTnZWH2MJ7GuhNzlPiuoBFFjvqm0FQUYjF8nHPM7&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&range=0-66036&rn=2&rbuf=0&pot=IiiNg42F6fE2mM7k-cnY-enZwMT5ye_L2Pve0OTitPD86c_kqLDJpr7H
66 kB URL rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=251&source=youtube&requiressl=yes&mh=Bh&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynl6&ms=au%2Crdu&mv=u&mvi=2&pl=21&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=2310936&dur=132.481&lmt=1631982566110408&mt=1685239958&fvip=4&keepalive=yes&fexp=24007246%2C24363393%2C51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5532434&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRgIhALJHyigjcMPB2G1FLvlURRtgRjF_nF5TGS6juhkZ158cAiEAr_ELkGV9Mvdy8lrYe196LOqkOVYTAU8hLoDQXrP0DFc%3D&alr=yes&sig=AOq0QJ8wRAIgIySo6CcsA24nxQaldP4JwV9l45Z7-eOfvVsxvDAOTi0CIAfGwTnZWH2MJ7GuhNzlPiuoBFFjvqm0FQUYjF8nHPM7&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&range=0-66036&rn=2&rbuf=0&pot=IiiNg42F6fE2mM7k-cnY-enZwMT5ye_L2Pve0OTitPD86c_kqLDJpr7H
IP
ASN #50304 Blix Solutions AS
Certificate IssuerGoogle Trust Services LLC
Subject*.googlevideo.com
FingerprintB4:77:9D:FE:B1:91:02:95:7B:28:7C:59:FF:D1:00:C6:C9:E1:4D:0A
ValidityTue, 16 May 2023 11:05:58 GMT - Tue, 25 Jul 2023 11:05:57 GMT
File type WebM\012- EBML file, creator webmB\20\012- data
Hash e8679e503839b08d9b5e7fbda9abde0f
0d9742a6950d3a6e09b4757a76a4d438ad650998
93506e0b51496a13d29d85ab7365cb3c4998631e657400cc3cb1638307619754
POST /videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=251&source=youtube&requiressl=yes&mh=Bh&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynl6&ms=au%2Crdu&mv=u&mvi=2&pl=21&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=2310936&dur=132.481&lmt=1631982566110408&mt=1685239958&fvip=4&keepalive=yes&fexp=24007246%2C24363393%2C51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5532434&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRgIhALJHyigjcMPB2G1FLvlURRtgRjF_nF5TGS6juhkZ158cAiEAr_ELkGV9Mvdy8lrYe196LOqkOVYTAU8hLoDQXrP0DFc%3D&alr=yes&sig=AOq0QJ8wRAIgIySo6CcsA24nxQaldP4JwV9l45Z7-eOfvVsxvDAOTi0CIAfGwTnZWH2MJ7GuhNzlPiuoBFFjvqm0FQUYjF8nHPM7&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&range=0-66036&rn=2&rbuf=0&pot=IiiNg42F6fE2mM7k-cnY-enZwMT5ye_L2Pve0OTitPD86c_kqLDJpr7H HTTP/1.1
Host: rr2---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Sat, 18 Sep 2021 16:29:26 GMT
Content-Type: audio/webm
Date: Sun, 28 May 2023 02:23:24 GMT
Expires: Sun, 28 May 2023 02:23:24 GMT
Cache-Control: private, max-age=21299
Accept-Ranges: bytes
Content-Length: 66037
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
ocsp.pki.goog/gts1c3
472 B IP
Hash fe0c17fd99beddfdeb53ee3661b6aeab
6d5e0568ef4d726f2a03759bf3a20803f7278e01
e6801a185129439e27ed3c2a75e600b46f55292d30ae5e6c15563bab948c2522
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/youtubei/v1/next?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=false
200 OK 5.6 kB URL POST HTTP/3 www.youtube.com/youtubei/v1/next?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=false
IP
Requested by https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF
ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT
File type Unicode text, UTF-8 text, with very long lines (32123), with no line terminators
Hash f5c2e5a1fe40f601d12285efe9fa92ca
de954822c60e7ace19fcfab08a81077a0cbffb96
0cc56d0d291a8b2905fdf4da1208bce018db658e3ed887380c3aee7897fd8796
POST /youtubei/v1/next?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=false HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Goog-Visitor-Id: CgtJUzdZMGtJbHUxSSia9sqjBg%3D%3D
X-Youtube-Bootstrap-Logged-In: false
X-Youtube-Client-Name: 56
X-Youtube-Client-Version: 1.20230523.01.00
Content-Length: 2230
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Sun, 28 May 2023 02:23:24 GMT
server: scaffolding on HTTPServer2
content-length: 5551
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+733; expires=Tue, 27-May-2025 02:23:24 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sun, 28 May 2023 02:23:24 GMT
cache-control: private
rr4---sn-5go7ynl6.googlevideo.com/videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=6281873&dur=132.432&lmt=1623251817331131&keepalive=yes&fexp=24007246,24350017,24363393,51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5436432&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgSTooFg8X4cRLs3inIovud8_IAQKWTZC6znMMXylNZwICIGUitHqXxgf_Z3ZcF1XunfL2z4w2-8JsthDvq_OnM3wz&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7l&cms_redirect=yes&cmsv=e&mh=Bh&mm=29&mn=sn-5go7ynl6&ms=rdu&mt=1685239716&mv=u&mvi=4&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgUkks5jnxmte4vgMiZfWGI-bxmdiNhxyyPWZdHMZRmTsCIB0AxW6VXtvH0Vc7QazFLhq76gACo27PCdSHIYa3an4Z&range=0-113828&rn=3&rbuf=0&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK
114 kB URL rr4---sn-5go7ynl6.googlevideo.com/videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=6281873&dur=132.432&lmt=1623251817331131&keepalive=yes&fexp=24007246,24350017,24363393,51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5436432&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgSTooFg8X4cRLs3inIovud8_IAQKWTZC6znMMXylNZwICIGUitHqXxgf_Z3ZcF1XunfL2z4w2-8JsthDvq_OnM3wz&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7l&cms_redirect=yes&cmsv=e&mh=Bh&mm=29&mn=sn-5go7ynl6&ms=rdu&mt=1685239716&mv=u&mvi=4&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgUkks5jnxmte4vgMiZfWGI-bxmdiNhxyyPWZdHMZRmTsCIB0AxW6VXtvH0Vc7QazFLhq76gACo27PCdSHIYa3an4Z&range=0-113828&rn=3&rbuf=0&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK
IP
File type ISO Media, MPEG v4 system, Dynamic Adaptive Streaming over HTTP\012- data
Size 114 kB (113829 bytes)
Hash d30064c1100be95b379e83849930bb13
dbf24bea29f34dda6034032a211daa3cb0a5915a
4a56aa52497dc7c27fe1641fa0e0e9af96775a80dd4a6b47c48df6292d4d8521
POST /videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=6281873&dur=132.432&lmt=1623251817331131&keepalive=yes&fexp=24007246,24350017,24363393,51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5436432&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgSTooFg8X4cRLs3inIovud8_IAQKWTZC6znMMXylNZwICIGUitHqXxgf_Z3ZcF1XunfL2z4w2-8JsthDvq_OnM3wz&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7l&cms_redirect=yes&cmsv=e&mh=Bh&mm=29&mn=sn-5go7ynl6&ms=rdu&mt=1685239716&mv=u&mvi=4&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgUkks5jnxmte4vgMiZfWGI-bxmdiNhxyyPWZdHMZRmTsCIB0AxW6VXtvH0Vc7QazFLhq76gACo27PCdSHIYa3an4Z&range=0-113828&rn=3&rbuf=0&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK HTTP/1.1
Host: rr4---sn-5go7ynl6.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Wed, 09 Jun 2021 15:16:57 GMT
Content-Type: video/mp4
Date: Sun, 28 May 2023 02:23:24 GMT
Expires: Sun, 28 May 2023 02:23:24 GMT
Cache-Control: private, max-age=21299
Accept-Ranges: bytes
Content-Length: 113829
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
ocsp.pki.goog/gts1c3
472 B IP
Hash 512c46a3af791c4fc0112127c17714c3
9b074b5c2a49596c0f8f05909f6ec4b90a0eb4ae
b4fbf8658d936daf0efdec31386a04b96df247e62f4a2c4643f507e820e9658e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 512c46a3af791c4fc0112127c17714c3
9b074b5c2a49596c0f8f05909f6ec4b90a0eb4ae
b4fbf8658d936daf0efdec31386a04b96df247e62f4a2c4643f507e820e9658e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 512c46a3af791c4fc0112127c17714c3
9b074b5c2a49596c0f8f05909f6ec4b90a0eb4ae
b4fbf8658d936daf0efdec31386a04b96df247e62f4a2c4643f507e820e9658e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 512c46a3af791c4fc0112127c17714c3
9b074b5c2a49596c0f8f05909f6ec4b90a0eb4ae
b4fbf8658d936daf0efdec31386a04b96df247e62f4a2c4643f507e820e9658e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash fe0c17fd99beddfdeb53ee3661b6aeab
6d5e0568ef4d726f2a03759bf3a20803f7278e01
e6801a185129439e27ed3c2a75e600b46f55292d30ae5e6c15563bab948c2522
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi/ao4RCon11eY/default.jpg?sqp=-oaymwEkCHgQWvKriqkDGvABAfgB_gmAAtAFigIMCAAQARhlIFsoUjAP&rs=AOn4CLB_uU6emALMKTDMVTu2-UY_FiNWuw
200 OK 2.3 kB URL GET HTTP/2 i.ytimg.com/vi/ao4RCon11eY/default.jpg?sqp=-oaymwEkCHgQWvKriqkDGvABAfgB_gmAAtAFigIMCAAQARhlIFsoUjAP&rs=AOn4CLB_uU6emALMKTDMVTu2-UY_FiNWuw
IP
Requested by https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
Fingerprint67:27:90:A4:38:FE:23:E1:56:61:E7:AD:BD:53:5B:E6:62:11:AC:79
ValidityMon, 08 May 2023 08:20:02 GMT - Mon, 31 Jul 2023 08:20:01 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash 50445ddfb8bbefc35293dd1c1bb5727c
a8c1681ae6633e25dd24306474739f3a74efdb56
39735a574c0ad3a2b0871a2b8cb14bcbab5df28aba39aa746ec2bf0cd1aa3d40
GET /vi/ao4RCon11eY/default.jpg?sqp=-oaymwEkCHgQWvKriqkDGvABAfgB_gmAAtAFigIMCAAQARhlIFsoUjAP&rs=AOn4CLB_uU6emALMKTDMVTu2-UY_FiNWuw HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 2314
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 28 May 2023 01:04:10 GMT
expires: Sun, 28 May 2023 03:04:10 GMT
cache-control: public, max-age=7200
age: 4754
etag: "0"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.ytimg.com/an/JWUQibZ1DnBb4r4pCCmpGA/featured_channel.jpg?v=5ffa08b4
19 kB URL i.ytimg.com/an/JWUQibZ1DnBb4r4pCCmpGA/featured_channel.jpg?v=5ffa08b4
IP
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
Fingerprint67:27:90:A4:38:FE:23:E1:56:61:E7:AD:BD:53:5B:E6:62:11:AC:79
ValidityMon, 08 May 2023 08:20:02 GMT - Mon, 31 Jul 2023 08:20:01 GMT
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 92e272b710ff15595b8b80959107a7d1
bc47bd0aa31ae84ef0b08b350f00c35712d9c311
fe49c7421f8919879d86dcf56ef3a18c7ccb5194f107d72983da81760d5dbcde
GET /an/JWUQibZ1DnBb4r4pCCmpGA/featured_channel.jpg?v=5ffa08b4 HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 19358
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 28 May 2023 01:51:07 GMT
expires: Sun, 28 May 2023 03:51:07 GMT
cache-control: public, max-age=7200
age: 1937
etag: "1610221748"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.ytimg.com/vi/W9GXqCBAZb0/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGBMgTih_MA8=&rs=AOn4CLCmt0G-jkwHwHv23a5nGSo_Zz25lw
200 OK 66 kB URL GET HTTP/2 i.ytimg.com/vi/W9GXqCBAZb0/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGBMgTih_MA8=&rs=AOn4CLCmt0G-jkwHwHv23a5nGSo_Zz25lw
IP
Requested by https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
Fingerprint67:27:90:A4:38:FE:23:E1:56:61:E7:AD:BD:53:5B:E6:62:11:AC:79
ValidityMon, 08 May 2023 08:20:02 GMT - Mon, 31 Jul 2023 08:20:01 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Hash 03e838377201250672ba22ad3b45dadc
cbe027c6294b757a977f9757134c6021e4b05338
ad72c7e26d47a6667ba40cda9cefc7dc85907635895b2394305f4408a830bcf7
GET /vi/W9GXqCBAZb0/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGBMgTih_MA8=&rs=AOn4CLCmt0G-jkwHwHv23a5nGSo_Zz25lw HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 65507
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 28 May 2023 02:23:24 GMT
expires: Sun, 28 May 2023 04:23:24 GMT
cache-control: public, max-age=7200
etag: "1619711668"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.ytimg.com/vi/LiovUkBWOos/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGF4gXiheMA8=&rs=AOn4CLCATeqAfNnzitc3FNz9upBau-2bFg
200 OK 114 kB URL GET HTTP/2 i.ytimg.com/vi/LiovUkBWOos/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGF4gXiheMA8=&rs=AOn4CLCATeqAfNnzitc3FNz9upBau-2bFg
IP
Requested by https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
Fingerprint67:27:90:A4:38:FE:23:E1:56:61:E7:AD:BD:53:5B:E6:62:11:AC:79
ValidityMon, 08 May 2023 08:20:02 GMT - Mon, 31 Jul 2023 08:20:01 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Size 114 kB (114510 bytes)
Hash d35e7576448972928d56ede950233300
b7ced44775dac33dfb680fc4f0d2ac5d67bf3e38
279a80bac9cca6bb7fefdaafc21466c79e1e3a9b70d4f26aadc1958357b98563
GET /vi/LiovUkBWOos/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGF4gXiheMA8=&rs=AOn4CLCATeqAfNnzitc3FNz9upBau-2bFg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 114510
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 28 May 2023 02:23:24 GMT
expires: Sun, 28 May 2023 04:23:24 GMT
cache-control: public, max-age=7200
etag: "0"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 512c46a3af791c4fc0112127c17714c3
9b074b5c2a49596c0f8f05909f6ec4b90a0eb4ae
b4fbf8658d936daf0efdec31386a04b96df247e62f4a2c4643f507e820e9658e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 02:23:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/ytc/AGIKgqOsyjLyph7SWEj_1M2HD-CbXuxZcYP-L3dEigwdOA=s88-c-k-c0x00ffffff-no-rj-mo
200 OK 3.1 kB URL GET HTTP/3 yt3.ggpht.com/ytc/AGIKgqOsyjLyph7SWEj_1M2HD-CbXuxZcYP-L3dEigwdOA=s88-c-k-c0x00ffffff-no-rj-mo
IP
Requested by https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintE9:43:A2:2D:EB:A2:E1:09:B0:36:19:CF:E3:9C:F0:37:52:4F:DB:7A
ValidityMon, 08 May 2023 08:24:36 GMT - Mon, 31 Jul 2023 08:24:35 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 88x88, components 3\012- data
Hash 7de3c15e0d0c3b821bd8e788fc2a7a19
b51b11f67be6305f33f44f325e447db1b1efd380
d4de0be8b66724c7ef487482737b1f9d75fd4b5feeee61505a38f54ae9bb7ef6
GET /ytc/AGIKgqOsyjLyph7SWEj_1M2HD-CbXuxZcYP-L3dEigwdOA=s88-c-k-c0x00ffffff-no-rj-mo HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3137
x-xss-protection: 0
date: Sun, 28 May 2023 00:22:16 GMT
expires: Mon, 29 May 2023 00:22:16 GMT
cache-control: public, max-age=86400, no-transform
age: 7268
etag: "v237"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
yt3.ggpht.com/ytc/AGIKgqOsyjLyph7SWEj_1M2HD-CbXuxZcYP-L3dEigwdOA=s400-c-k-c0x00ffffff-no-rj
22 kB URL yt3.ggpht.com/ytc/AGIKgqOsyjLyph7SWEj_1M2HD-CbXuxZcYP-L3dEigwdOA=s400-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 400x400, components 3\012- data
Hash 1af07f3ac040e991d915eab7999fc336
65c7f24d82e72a44b2cae02ed8b1cdceaa7beb11
7623c4806ebf50c939221ceb2c7dd31a86d8fdcfdf257f7463b56f42f674baaf
GET /ytc/AGIKgqOsyjLyph7SWEj_1M2HD-CbXuxZcYP-L3dEigwdOA=s400-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 22480
x-xss-protection: 0
date: Sun, 28 May 2023 02:23:24 GMT
expires: Mon, 29 May 2023 02:23:24 GMT
cache-control: public, max-age=86400, no-transform
etag: "v237"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
rr4---sn-5go7ynl6.googlevideo.com/videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=6281873&dur=132.432&lmt=1623251817331131&keepalive=yes&fexp=24007246,24350017,24363393,51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5436432&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgSTooFg8X4cRLs3inIovud8_IAQKWTZC6znMMXylNZwICIGUitHqXxgf_Z3ZcF1XunfL2z4w2-8JsthDvq_OnM3wz&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7l&cms_redirect=yes&cmsv=e&mh=Bh&mm=29&mn=sn-5go7ynl6&ms=rdu&mt=1685239716&mv=u&mvi=4&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgUkks5jnxmte4vgMiZfWGI-bxmdiNhxyyPWZdHMZRmTsCIB0AxW6VXtvH0Vc7QazFLhq76gACo27PCdSHIYa3an4Z&range=113829-219111&rn=4&rbuf=2140&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK
105 kB URL rr4---sn-5go7ynl6.googlevideo.com/videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=6281873&dur=132.432&lmt=1623251817331131&keepalive=yes&fexp=24007246,24350017,24363393,51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5436432&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgSTooFg8X4cRLs3inIovud8_IAQKWTZC6znMMXylNZwICIGUitHqXxgf_Z3ZcF1XunfL2z4w2-8JsthDvq_OnM3wz&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7l&cms_redirect=yes&cmsv=e&mh=Bh&mm=29&mn=sn-5go7ynl6&ms=rdu&mt=1685239716&mv=u&mvi=4&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgUkks5jnxmte4vgMiZfWGI-bxmdiNhxyyPWZdHMZRmTsCIB0AxW6VXtvH0Vc7QazFLhq76gACo27PCdSHIYa3an4Z&range=113829-219111&rn=4&rbuf=2140&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK
IP
Size 105 kB (105283 bytes)
Hash 4cdf90c394af716291c02f40f070840b
05f54cf903178950f410f3ffd72d38780a2cbd14
0422a0e79657666bc3ecaeaad4e803e2213f81ddca785732a4ab2c73af707c42
POST /videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=6281873&dur=132.432&lmt=1623251817331131&keepalive=yes&fexp=24007246,24350017,24363393,51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5436432&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgSTooFg8X4cRLs3inIovud8_IAQKWTZC6znMMXylNZwICIGUitHqXxgf_Z3ZcF1XunfL2z4w2-8JsthDvq_OnM3wz&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7l&cms_redirect=yes&cmsv=e&mh=Bh&mm=29&mn=sn-5go7ynl6&ms=rdu&mt=1685239716&mv=u&mvi=4&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgUkks5jnxmte4vgMiZfWGI-bxmdiNhxyyPWZdHMZRmTsCIB0AxW6VXtvH0Vc7QazFLhq76gACo27PCdSHIYa3an4Z&range=113829-219111&rn=4&rbuf=2140&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK HTTP/1.1
Host: rr4---sn-5go7ynl6.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
last-modified: Wed, 09 Jun 2021 15:16:57 GMT
content-type: video/mp4
date: Sun, 28 May 2023 02:23:24 GMT
expires: Sun, 28 May 2023 02:23:24 GMT
cache-control: private, max-age=21299
accept-ranges: bytes
content-length: 105283
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
client-protocol: quic
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
timing-allow-origin: https://www.youtube.com
access-control-expose-headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
vary: Origin
cross-origin-resource-policy: cross-origin
x-restrict-formats-hint: None
x-content-type-options: nosniff
server: gvs 1.0
rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=251&source=youtube&requiressl=yes&mh=Bh&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynl6&ms=au%2Crdu&mv=u&mvi=2&pl=21&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=2310936&dur=132.481&lmt=1631982566110408&mt=1685239958&fvip=4&keepalive=yes&fexp=24007246%2C24363393%2C51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5532434&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRgIhALJHyigjcMPB2G1FLvlURRtgRjF_nF5TGS6juhkZ158cAiEAr_ELkGV9Mvdy8lrYe196LOqkOVYTAU8hLoDQXrP0DFc%3D&alr=yes&sig=AOq0QJ8wRAIgIySo6CcsA24nxQaldP4JwV9l45Z7-eOfvVsxvDAOTi0CIAfGwTnZWH2MJ7GuhNzlPiuoBFFjvqm0FQUYjF8nHPM7&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&range=66037-133722&rn=5&rbuf=3739&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK
200 OK 68 kB URL POST HTTP/3 rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=251&source=youtube&requiressl=yes&mh=Bh&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynl6&ms=au%2Crdu&mv=u&mvi=2&pl=21&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=2310936&dur=132.481&lmt=1631982566110408&mt=1685239958&fvip=4&keepalive=yes&fexp=24007246%2C24363393%2C51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5532434&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRgIhALJHyigjcMPB2G1FLvlURRtgRjF_nF5TGS6juhkZ158cAiEAr_ELkGV9Mvdy8lrYe196LOqkOVYTAU8hLoDQXrP0DFc%3D&alr=yes&sig=AOq0QJ8wRAIgIySo6CcsA24nxQaldP4JwV9l45Z7-eOfvVsxvDAOTi0CIAfGwTnZWH2MJ7GuhNzlPiuoBFFjvqm0FQUYjF8nHPM7&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&range=66037-133722&rn=5&rbuf=3739&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK
IP
ASN #50304 Blix Solutions AS
Requested by https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googlevideo.com
FingerprintB4:77:9D:FE:B1:91:02:95:7B:28:7C:59:FF:D1:00:C6:C9:E1:4D:0A
ValidityTue, 16 May 2023 11:05:58 GMT - Tue, 25 Jul 2023 11:05:57 GMT
Hash d18b63f72ffc6a651383cae4bd3bf7d9
b75c00682dd9c1672dd03d0249343c600d240d19
4e7ac46dc7260c0e40152004d5f27091eb1c9fa9cfe025d5a6c95eb212a172f9
POST /videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=251&source=youtube&requiressl=yes&mh=Bh&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynl6&ms=au%2Crdu&mv=u&mvi=2&pl=21&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=2310936&dur=132.481&lmt=1631982566110408&mt=1685239958&fvip=4&keepalive=yes&fexp=24007246%2C24363393%2C51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5532434&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRgIhALJHyigjcMPB2G1FLvlURRtgRjF_nF5TGS6juhkZ158cAiEAr_ELkGV9Mvdy8lrYe196LOqkOVYTAU8hLoDQXrP0DFc%3D&alr=yes&sig=AOq0QJ8wRAIgIySo6CcsA24nxQaldP4JwV9l45Z7-eOfvVsxvDAOTi0CIAfGwTnZWH2MJ7GuhNzlPiuoBFFjvqm0FQUYjF8nHPM7&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&range=66037-133722&rn=5&rbuf=3739&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK HTTP/1.1
Host: rr2---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
last-modified: Sat, 18 Sep 2021 16:29:26 GMT
content-type: audio/webm
date: Sun, 28 May 2023 02:23:24 GMT
expires: Sun, 28 May 2023 02:23:24 GMT
cache-control: private, max-age=21299
accept-ranges: bytes
content-length: 67686
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
client-protocol: quic
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
timing-allow-origin: https://www.youtube.com
access-control-expose-headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
vary: Origin
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
server: gvs 1.0
rr4---sn-5go7ynl6.googlevideo.com/videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=6281873&dur=132.432&lmt=1623251817331131&keepalive=yes&fexp=24007246,24350017,24363393,51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5436432&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgSTooFg8X4cRLs3inIovud8_IAQKWTZC6znMMXylNZwICIGUitHqXxgf_Z3ZcF1XunfL2z4w2-8JsthDvq_OnM3wz&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7l&cms_redirect=yes&cmsv=e&mh=Bh&mm=29&mn=sn-5go7ynl6&ms=rdu&mt=1685239716&mv=u&mvi=4&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgUkks5jnxmte4vgMiZfWGI-bxmdiNhxyyPWZdHMZRmTsCIB0AxW6VXtvH0Vc7QazFLhq76gACo27PCdSHIYa3an4Z&range=219112-452432&rn=6&rbuf=4137&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK
233 kB URL rr4---sn-5go7ynl6.googlevideo.com/videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=6281873&dur=132.432&lmt=1623251817331131&keepalive=yes&fexp=24007246,24350017,24363393,51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5436432&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgSTooFg8X4cRLs3inIovud8_IAQKWTZC6znMMXylNZwICIGUitHqXxgf_Z3ZcF1XunfL2z4w2-8JsthDvq_OnM3wz&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7l&cms_redirect=yes&cmsv=e&mh=Bh&mm=29&mn=sn-5go7ynl6&ms=rdu&mt=1685239716&mv=u&mvi=4&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgUkks5jnxmte4vgMiZfWGI-bxmdiNhxyyPWZdHMZRmTsCIB0AxW6VXtvH0Vc7QazFLhq76gACo27PCdSHIYa3an4Z&range=219112-452432&rn=6&rbuf=4137&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK
IP
Size 233 kB (233321 bytes)
Hash 1965c4cce61239f4a755c8e2955cabd2
b9fe98073fb650a6cb1f3d94d9b1613b892982d0
b94c2fb3bde059cde762520d6d68cbecb59eca90fae7179ef445584cf064dcfc
POST /videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=6281873&dur=132.432&lmt=1623251817331131&keepalive=yes&fexp=24007246,24350017,24363393,51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5436432&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgSTooFg8X4cRLs3inIovud8_IAQKWTZC6znMMXylNZwICIGUitHqXxgf_Z3ZcF1XunfL2z4w2-8JsthDvq_OnM3wz&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7l&cms_redirect=yes&cmsv=e&mh=Bh&mm=29&mn=sn-5go7ynl6&ms=rdu&mt=1685239716&mv=u&mvi=4&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgUkks5jnxmte4vgMiZfWGI-bxmdiNhxyyPWZdHMZRmTsCIB0AxW6VXtvH0Vc7QazFLhq76gACo27PCdSHIYa3an4Z&range=219112-452432&rn=6&rbuf=4137&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK HTTP/1.1
Host: rr4---sn-5go7ynl6.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
last-modified: Wed, 09 Jun 2021 15:16:57 GMT
content-type: video/mp4
date: Sun, 28 May 2023 02:23:24 GMT
expires: Sun, 28 May 2023 02:23:24 GMT
cache-control: private, max-age=21299
accept-ranges: bytes
content-length: 233321
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
client-protocol: quic
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
timing-allow-origin: https://www.youtube.com
access-control-expose-headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
vary: Origin
cross-origin-resource-policy: cross-origin
x-restrict-formats-hint: None
x-content-type-options: nosniff
server: gvs 1.0
rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=251&source=youtube&requiressl=yes&mh=Bh&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynl6&ms=au%2Crdu&mv=u&mvi=2&pl=21&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=2310936&dur=132.481&lmt=1631982566110408&mt=1685239958&fvip=4&keepalive=yes&fexp=24007246%2C24363393%2C51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5532434&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRgIhALJHyigjcMPB2G1FLvlURRtgRjF_nF5TGS6juhkZ158cAiEAr_ELkGV9Mvdy8lrYe196LOqkOVYTAU8hLoDQXrP0DFc%3D&alr=yes&sig=AOq0QJ8wRAIgIySo6CcsA24nxQaldP4JwV9l45Z7-eOfvVsxvDAOTi0CIAfGwTnZWH2MJ7GuhNzlPiuoBFFjvqm0FQUYjF8nHPM7&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&range=133723-271314&rn=7&rbuf=7600&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK
138 kB URL rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=251&source=youtube&requiressl=yes&mh=Bh&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynl6&ms=au%2Crdu&mv=u&mvi=2&pl=21&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=2310936&dur=132.481&lmt=1631982566110408&mt=1685239958&fvip=4&keepalive=yes&fexp=24007246%2C24363393%2C51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5532434&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRgIhALJHyigjcMPB2G1FLvlURRtgRjF_nF5TGS6juhkZ158cAiEAr_ELkGV9Mvdy8lrYe196LOqkOVYTAU8hLoDQXrP0DFc%3D&alr=yes&sig=AOq0QJ8wRAIgIySo6CcsA24nxQaldP4JwV9l45Z7-eOfvVsxvDAOTi0CIAfGwTnZWH2MJ7GuhNzlPiuoBFFjvqm0FQUYjF8nHPM7&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&range=133723-271314&rn=7&rbuf=7600&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK
IP
ASN #50304 Blix Solutions AS
Certificate IssuerGoogle Trust Services LLC
Subject*.googlevideo.com
FingerprintB4:77:9D:FE:B1:91:02:95:7B:28:7C:59:FF:D1:00:C6:C9:E1:4D:0A
ValidityTue, 16 May 2023 11:05:58 GMT - Tue, 25 Jul 2023 11:05:57 GMT
Size 138 kB (137592 bytes)
Hash 0017a474e0655938a9e0fce54fe661de
e9ba9b327fb0cc6b9861023482f35c445fa24a63
f03dfd701677928915e6b01383ac9b92d6498f719190b560e733a63c89c51d5b
POST /videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=251&source=youtube&requiressl=yes&mh=Bh&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynl6&ms=au%2Crdu&mv=u&mvi=2&pl=21&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=2310936&dur=132.481&lmt=1631982566110408&mt=1685239958&fvip=4&keepalive=yes&fexp=24007246%2C24363393%2C51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5532434&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRgIhALJHyigjcMPB2G1FLvlURRtgRjF_nF5TGS6juhkZ158cAiEAr_ELkGV9Mvdy8lrYe196LOqkOVYTAU8hLoDQXrP0DFc%3D&alr=yes&sig=AOq0QJ8wRAIgIySo6CcsA24nxQaldP4JwV9l45Z7-eOfvVsxvDAOTi0CIAfGwTnZWH2MJ7GuhNzlPiuoBFFjvqm0FQUYjF8nHPM7&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&range=133723-271314&rn=7&rbuf=7600&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK HTTP/1.1
Host: rr2---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
last-modified: Sat, 18 Sep 2021 16:29:26 GMT
content-type: audio/webm
date: Sun, 28 May 2023 02:23:24 GMT
expires: Sun, 28 May 2023 02:23:24 GMT
cache-control: private, max-age=21299
accept-ranges: bytes
content-length: 137592
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
client-protocol: quic
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
timing-allow-origin: https://www.youtube.com
access-control-expose-headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
vary: Origin
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
server: gvs 1.0
rr4---sn-5go7ynl6.googlevideo.com/videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=6281873&dur=132.432&lmt=1623251817331131&keepalive=yes&fexp=24007246,24350017,24363393,51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5436432&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgSTooFg8X4cRLs3inIovud8_IAQKWTZC6znMMXylNZwICIGUitHqXxgf_Z3ZcF1XunfL2z4w2-8JsthDvq_OnM3wz&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7l&cms_redirect=yes&cmsv=e&mh=Bh&mm=29&mn=sn-5go7ynl6&ms=rdu&mt=1685239716&mv=u&mvi=4&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgUkks5jnxmte4vgMiZfWGI-bxmdiNhxyyPWZdHMZRmTsCIB0AxW6VXtvH0Vc7QazFLhq76gACo27PCdSHIYa3an4Z&range=452433-949232&rn=8&rbuf=9536&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK
200 OK 497 kB URL POST HTTP/3 rr4---sn-5go7ynl6.googlevideo.com/videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=6281873&dur=132.432&lmt=1623251817331131&keepalive=yes&fexp=24007246,24350017,24363393,51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5436432&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgSTooFg8X4cRLs3inIovud8_IAQKWTZC6znMMXylNZwICIGUitHqXxgf_Z3ZcF1XunfL2z4w2-8JsthDvq_OnM3wz&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7l&cms_redirect=yes&cmsv=e&mh=Bh&mm=29&mn=sn-5go7ynl6&ms=rdu&mt=1685239716&mv=u&mvi=4&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgUkks5jnxmte4vgMiZfWGI-bxmdiNhxyyPWZdHMZRmTsCIB0AxW6VXtvH0Vc7QazFLhq76gACo27PCdSHIYa3an4Z&range=452433-949232&rn=8&rbuf=9536&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK
IP
Requested by https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Certificate IssuerGoogle Trust Services LLC
Subject*.c.docs.google.com
Fingerprint96:61:02:39:6A:D9:ED:31:FB:09:99:86:5C:D7:50:50:E9:0A:CE:1A
ValidityTue, 09 May 2023 11:07:13 GMT - Tue, 18 Jul 2023 11:07:12 GMT
Size 497 kB (496800 bytes)
Hash 7c29b0607c95cb8fcefb66c0a6540bb5
44e30095a113dd71f23ead6754cd4af252d5d855
ec89ffa9f34071048c479251135f141b948acc551448e5e05f2d335e03969b4c
POST /videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=6281873&dur=132.432&lmt=1623251817331131&keepalive=yes&fexp=24007246,24350017,24363393,51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5436432&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgSTooFg8X4cRLs3inIovud8_IAQKWTZC6znMMXylNZwICIGUitHqXxgf_Z3ZcF1XunfL2z4w2-8JsthDvq_OnM3wz&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7l&cms_redirect=yes&cmsv=e&mh=Bh&mm=29&mn=sn-5go7ynl6&ms=rdu&mt=1685239716&mv=u&mvi=4&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgUkks5jnxmte4vgMiZfWGI-bxmdiNhxyyPWZdHMZRmTsCIB0AxW6VXtvH0Vc7QazFLhq76gACo27PCdSHIYa3an4Z&range=452433-949232&rn=8&rbuf=9536&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK HTTP/1.1
Host: rr4---sn-5go7ynl6.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
last-modified: Wed, 09 Jun 2021 15:16:57 GMT
content-type: video/mp4
date: Sun, 28 May 2023 02:23:24 GMT
expires: Sun, 28 May 2023 02:23:24 GMT
cache-control: private, max-age=21299
accept-ranges: bytes
content-length: 496800
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
client-protocol: quic
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
timing-allow-origin: https://www.youtube.com
access-control-expose-headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
vary: Origin
cross-origin-resource-policy: cross-origin
x-restrict-formats-hint: None
x-content-type-options: nosniff
server: gvs 1.0
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF
ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1685240605755
Content-Type: application/json
X-Goog-Visitor-Id: CgtJUzdZMGtJbHUxSSia9sqjBg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20230523.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1685240602861&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C5%2C5&vis=1&wgl=true&ca_type=image
Content-Length: 5136
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Sun, 28 May 2023 02:23:26 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+538; expires=Tue, 27-May-2025 02:23:26 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sun, 28 May 2023 02:23:26 GMT
cache-control: private
www.youtube.com/api/stats/qoe?fmt=396&afmt=251&cpn=nadbMX6ghx7pir5m&el=embedded&ns=yt&fexp=23858057%2C23983296%2C24004644%2C24007246%2C24080738%2C24135310%2C24255165%2C24361484%2C24362358%2C24364789%2C24367546%2C24368430%2C24370902%2C24415864%2C24416290%2C24439361%2C24499115%2C24532855%2C24556991%2C24558641%2C24558903%2C24559644%2C24698914%2C39323074%2C51000014&cl=534545706&seq=2&docid=ao4RCon11eY&ei=G7tyZJPoNtiQyAXFsITQDQ&event=streamingstats&plid=AAX8t6ePKK2MocBm&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fao4RCon11eY%3Frel%3D0%26autoplay%3D1&qclc=ChBuYWRiTVg2Z2h4N3BpcjVtEAI&cbr=Firefox&cbrver=111.0&c=WEB_EMBEDDED_PLAYER&cver=1.20230523.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&cmt=0.340:0.000,10.001:0.000&vps=0.340:N&ctmp=dompaused:t.346;r.promise;m.NotAllowedError&bwm=10.001:1221800:0.868&bwe=10.001:5426070&bh=10.001:15.261
0 B URL www.youtube.com/api/stats/qoe?fmt=396&afmt=251&cpn=nadbMX6ghx7pir5m&el=embedded&ns=yt&fexp=23858057%2C23983296%2C24004644%2C24007246%2C24080738%2C24135310%2C24255165%2C24361484%2C24362358%2C24364789%2C24367546%2C24368430%2C24370902%2C24415864%2C24416290%2C24439361%2C24499115%2C24532855%2C24556991%2C24558641%2C24558903%2C24559644%2C24698914%2C39323074%2C51000014&cl=534545706&seq=2&docid=ao4RCon11eY&ei=G7tyZJPoNtiQyAXFsITQDQ&event=streamingstats&plid=AAX8t6ePKK2MocBm&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fao4RCon11eY%3Frel%3D0%26autoplay%3D1&qclc=ChBuYWRiTVg2Z2h4N3BpcjVtEAI&cbr=Firefox&cbrver=111.0&c=WEB_EMBEDDED_PLAYER&cver=1.20230523.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&cmt=0.340:0.000,10.001:0.000&vps=0.340:N&ctmp=dompaused:t.346;r.promise;m.NotAllowedError&bwm=10.001:1221800:0.868&bwe=10.001:5426070&bh=10.001:15.261
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/stats/qoe?fmt=396&afmt=251&cpn=nadbMX6ghx7pir5m&el=embedded&ns=yt&fexp=23858057%2C23983296%2C24004644%2C24007246%2C24080738%2C24135310%2C24255165%2C24361484%2C24362358%2C24364789%2C24367546%2C24368430%2C24370902%2C24415864%2C24416290%2C24439361%2C24499115%2C24532855%2C24556991%2C24558641%2C24558903%2C24559644%2C24698914%2C39323074%2C51000014&cl=534545706&seq=2&docid=ao4RCon11eY&ei=G7tyZJPoNtiQyAXFsITQDQ&event=streamingstats&plid=AAX8t6ePKK2MocBm&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2Fao4RCon11eY%3Frel%3D0%26autoplay%3D1&qclc=ChBuYWRiTVg2Z2h4N3BpcjVtEAI&cbr=Firefox&cbrver=111.0&c=WEB_EMBEDDED_PLAYER&cver=1.20230523.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&cmt=0.340:0.000,10.001:0.000&vps=0.340:N&ctmp=dompaused:t.346;r.promise;m.NotAllowedError&bwm=10.001:1221800:0.868&bwe=10.001:5426070&bh=10.001:15.261 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Visitor-Id: CgtJUzdZMGtJbHUxSSia9sqjBg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20230523.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1685240603310&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C5%2C5&vis=1&wgl=true&ca_type=image
Content-Type: application/x-www-form-urlencoded
Content-Length: 226
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
date: Sun, 28 May 2023 02:23:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
x-content-type-options: nosniff
server: Video Stats Server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=251&source=youtube&requiressl=yes&mh=Bh&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynl6&ms=au%2Crdu&mv=u&mvi=2&pl=21&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=2310936&dur=132.481&lmt=1631982566110408&mt=1685239958&fvip=4&keepalive=yes&fexp=24007246%2C24363393%2C51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5532434&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRgIhALJHyigjcMPB2G1FLvlURRtgRjF_nF5TGS6juhkZ158cAiEAr_ELkGV9Mvdy8lrYe196LOqkOVYTAU8hLoDQXrP0DFc%3D&alr=yes&sig=AOq0QJ8wRAIgIySo6CcsA24nxQaldP4JwV9l45Z7-eOfvVsxvDAOTi0CIAfGwTnZWH2MJ7GuhNzlPiuoBFFjvqm0FQUYjF8nHPM7&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&range=271315-533754&rn=9&rbuf=15276&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK
262 kB URL rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=251&source=youtube&requiressl=yes&mh=Bh&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynl6&ms=au%2Crdu&mv=u&mvi=2&pl=21&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=2310936&dur=132.481&lmt=1631982566110408&mt=1685239958&fvip=4&keepalive=yes&fexp=24007246%2C24363393%2C51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5532434&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRgIhALJHyigjcMPB2G1FLvlURRtgRjF_nF5TGS6juhkZ158cAiEAr_ELkGV9Mvdy8lrYe196LOqkOVYTAU8hLoDQXrP0DFc%3D&alr=yes&sig=AOq0QJ8wRAIgIySo6CcsA24nxQaldP4JwV9l45Z7-eOfvVsxvDAOTi0CIAfGwTnZWH2MJ7GuhNzlPiuoBFFjvqm0FQUYjF8nHPM7&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&range=271315-533754&rn=9&rbuf=15276&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK
IP
ASN #50304 Blix Solutions AS
Certificate IssuerGoogle Trust Services LLC
Subject*.googlevideo.com
FingerprintB4:77:9D:FE:B1:91:02:95:7B:28:7C:59:FF:D1:00:C6:C9:E1:4D:0A
ValidityTue, 16 May 2023 11:05:58 GMT - Tue, 25 Jul 2023 11:05:57 GMT
Size 262 kB (262440 bytes)
Hash 8f8b25f9d7742503520ad3278314180b
c9ec928372f54101e0cba61ad23c2b8f02cfd999
f62656baea884dde3c503f66886ff8e7db025e80f85fdbcd94ccb724b894bf66
POST /videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=251&source=youtube&requiressl=yes&mh=Bh&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynl6&ms=au%2Crdu&mv=u&mvi=2&pl=21&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=2310936&dur=132.481&lmt=1631982566110408&mt=1685239958&fvip=4&keepalive=yes&fexp=24007246%2C24363393%2C51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5532434&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRgIhALJHyigjcMPB2G1FLvlURRtgRjF_nF5TGS6juhkZ158cAiEAr_ELkGV9Mvdy8lrYe196LOqkOVYTAU8hLoDQXrP0DFc%3D&alr=yes&sig=AOq0QJ8wRAIgIySo6CcsA24nxQaldP4JwV9l45Z7-eOfvVsxvDAOTi0CIAfGwTnZWH2MJ7GuhNzlPiuoBFFjvqm0FQUYjF8nHPM7&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&range=271315-533754&rn=9&rbuf=15276&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK HTTP/1.1
Host: rr2---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
last-modified: Sat, 18 Sep 2021 16:29:26 GMT
content-type: audio/webm
date: Sun, 28 May 2023 02:23:34 GMT
expires: Sun, 28 May 2023 02:23:34 GMT
cache-control: private, max-age=21289
accept-ranges: bytes
content-length: 262440
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
client-protocol: quic
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
timing-allow-origin: https://www.youtube.com
access-control-expose-headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
vary: Origin
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
server: gvs 1.0
rr4---sn-5go7ynl6.googlevideo.com/videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=6281873&dur=132.432&lmt=1623251817331131&keepalive=yes&fexp=24007246,24350017,24363393,51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5436432&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgSTooFg8X4cRLs3inIovud8_IAQKWTZC6znMMXylNZwICIGUitHqXxgf_Z3ZcF1XunfL2z4w2-8JsthDvq_OnM3wz&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7l&cms_redirect=yes&cmsv=e&mh=Bh&mm=29&mn=sn-5go7ynl6&ms=rdu&mt=1685239716&mv=u&mvi=4&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgUkks5jnxmte4vgMiZfWGI-bxmdiNhxyyPWZdHMZRmTsCIB0AxW6VXtvH0Vc7QazFLhq76gACo27PCdSHIYa3an4Z&range=949233-2027144&rn=10&rbuf=19720&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK
1.1 MB URL rr4---sn-5go7ynl6.googlevideo.com/videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=6281873&dur=132.432&lmt=1623251817331131&keepalive=yes&fexp=24007246,24350017,24363393,51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5436432&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgSTooFg8X4cRLs3inIovud8_IAQKWTZC6znMMXylNZwICIGUitHqXxgf_Z3ZcF1XunfL2z4w2-8JsthDvq_OnM3wz&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7l&cms_redirect=yes&cmsv=e&mh=Bh&mm=29&mn=sn-5go7ynl6&ms=rdu&mt=1685239716&mv=u&mvi=4&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgUkks5jnxmte4vgMiZfWGI-bxmdiNhxyyPWZdHMZRmTsCIB0AxW6VXtvH0Vc7QazFLhq76gACo27PCdSHIYa3an4Z&range=949233-2027144&rn=10&rbuf=19720&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK
IP
Size 1.1 MB (1077912 bytes)
Hash 77ef5f5cb0753c62822a7fe8f63e2aff
a4acc9993935980bb9ab14c04e6ed3a47e690a0e
82bf9056aa8ff03a216e0d780867d2efa4ef6e228b788497f59c3f1852f721a0
POST /videoplayback?expire=1685262203&ei=G7tyZJPoNtiQyAXFsITQDQ&ip=91.90.42.154&id=o-AK1k_eIYfaFCudBdif3xVlt4IzmHWLBB8KUp51fSuK1B&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=qEK7B6l81J6Z2pBBTufvlfJ-RzDvpHvVVh_rxvwaFg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=QvDsMJNyLfDjU3OUsS_wO7kN&gir=yes&clen=6281873&dur=132.432&lmt=1623251817331131&keepalive=yes&fexp=24007246,24350017,24363393,51000014&beids=24350017&c=WEB_EMBEDDED_PLAYER&txp=5436432&n=LrUdTqnXt7nl6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgSTooFg8X4cRLs3inIovud8_IAQKWTZC6znMMXylNZwICIGUitHqXxgf_Z3ZcF1XunfL2z4w2-8JsthDvq_OnM3wz&cpn=nadbMX6ghx7pir5m&cver=1.20230523.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7l&cms_redirect=yes&cmsv=e&mh=Bh&mm=29&mn=sn-5go7ynl6&ms=rdu&mt=1685239716&mv=u&mvi=4&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgUkks5jnxmte4vgMiZfWGI-bxmdiNhxyyPWZdHMZRmTsCIB0AxW6VXtvH0Vc7QazFLhq76gACo27PCdSHIYa3an4Z&range=949233-2027144&rn=10&rbuf=19720&pot=MmQ9TbAKTNEKMD11FREMoKmmim1xXskzGNVbuLXtw6cc8ttIXvxQtN8kioL_xjhOODZ-jE5JpKRcui82IHxLC4u0nMNAeIk8IZfsPX66ZmBmlSgFY5AnbUjQGQxDGBm3d5Ih79XK HTTP/1.1
Host: rr4---sn-5go7ynl6.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
last-modified: Wed, 09 Jun 2021 15:16:57 GMT
content-type: video/mp4
date: Sun, 28 May 2023 02:23:34 GMT
expires: Sun, 28 May 2023 02:23:34 GMT
cache-control: private, max-age=21289
accept-ranges: bytes
content-length: 1077912
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
client-protocol: quic
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
timing-allow-origin: https://www.youtube.com
access-control-expose-headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
vary: Origin
cross-origin-resource-policy: cross-origin
x-restrict-formats-hint: None
x-content-type-options: nosniff
server: gvs 1.0
r15---sn-3c27sn7z.googlevideo.com/videogoodput?id=o-AAZbsvl8yaWY2_UZjIGQGCJ9z6xqtj_3g1tSuM3060V1&source=goodput&range=0-4999&expire=1685244203&ip=91.90.42.154&ms=pm&mm=35&pl=24&nh=IgpwcjAxLmticDAzKgw3Mi4xNC4yMjMuNjE&sparams=id,source,range,expire,ip,ms,mm,pl,nh&signature=174036E15140DF2453770A8E4469D7C0BCB28218.695A0F1AEB1D9FD1D9E808BF9BAA87EC3CAA83B6&key=cms1&cpn=nadbMX6ghx7pir5m
5.0 kB URL r15---sn-3c27sn7z.googlevideo.com/videogoodput?id=o-AAZbsvl8yaWY2_UZjIGQGCJ9z6xqtj_3g1tSuM3060V1&source=goodput&range=0-4999&expire=1685244203&ip=91.90.42.154&ms=pm&mm=35&pl=24&nh=IgpwcjAxLmticDAzKgw3Mi4xNC4yMjMuNjE&sparams=id,source,range,expire,ip,ms,mm,pl,nh&signature=174036E15140DF2453770A8E4469D7C0BCB28218.695A0F1AEB1D9FD1D9E808BF9BAA87EC3CAA83B6&key=cms1&cpn=nadbMX6ghx7pir5m
IP
Hash 0d64a21eaa8a84d2fede6971e8743ddf
dc766b119f55e53f931861b4da1f46bd0128b76f
2d38cec0b24adaa6e1715b7f05d7a445d5637a8ade85a5a3c066556a18950f39
GET /videogoodput?id=o-AAZbsvl8yaWY2_UZjIGQGCJ9z6xqtj_3g1tSuM3060V1&source=goodput&range=0-4999&expire=1685244203&ip=91.90.42.154&ms=pm&mm=35&pl=24&nh=IgpwcjAxLmticDAzKgw3Mi4xNC4yMjMuNjE&sparams=id,source,range,expire,ip,ms,mm,pl,nh&signature=174036E15140DF2453770A8E4469D7C0BCB28218.695A0F1AEB1D9FD1D9E808BF9BAA87EC3CAA83B6&key=cms1&cpn=nadbMX6ghx7pir5m HTTP/1.1
Host: r15---sn-3c27sn7z.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Sun, 28 May 2023 02:23:34 GMT
Date: Sun, 28 May 2023 02:23:34 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Content-Type: application/octet-stream
Accept-Ranges: bytes
Content-Length: 5000
Connection: close
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF
ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1685240615380
Content-Type: application/json
X-Goog-Visitor-Id: CgtJUzdZMGtJbHUxSSia9sqjBg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20230523.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1685240602861&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C5%2C5&vis=1&wgl=true&ca_type=image
Content-Length: 640
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Sun, 28 May 2023 02:23:35 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+047; expires=Tue, 27-May-2025 02:23:35 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sun, 28 May 2023 02:23:35 GMT
cache-control: private
fonts.googleapis.com/css?family=Homenaje
200 OK 393 B URL GET HTTP/2 fonts.googleapis.com/css?family=Homenaje
IP
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT
File type ASCII text, with very long lines (401), with no line terminators
Hash 78c7918c5fd8869154c9139b25358169
a1aade96fa072c3657e9bc47dc3a08420ac29064
8a2b707643f010a0268e0447b0d909ad773b6c7b8faca6e9956a4e4707fbebce
GET /css?family=Homenaje HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 28 May 2023 02:23:19 GMT
date: Sun, 28 May 2023 02:23:19 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
200 OK 74 kB URL GET HTTP/2 www.youtube.com/embed/ao4RCon11eY?rel=0&autoplay=1
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF
ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/ao4RCon11eY?rel=0&autoplay=1 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nandnee.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 28 May 2023 02:23:22 GMT
strict-transport-security: max-age=31536000
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=6Gs4rvEtkLs; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=IS7Y0kIlu1I; Domain=.youtube.com; Expires=Fri, 24-Nov-2023 02:23:22 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+968; expires=Tue, 27-May-2025 02:23:22 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
103.14.121.240
142.250.74.106
213.186.33.24
91.90.45.173
104.17.25.14