{"report_id":"2c4a339c-8226-49c6-b0c5-918ce1546af0","version":6,"status":"done","tags":[],"date":"2026-05-12T14:55:25Z","url":{"schema":"https","addr":"obnleu24.click/","fqdn":"obnleu24.click","domain":"obnleu24.click","tld":"click"},"ip":{"addr":"104.21.49.79","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"obnleu24.click/","fqdn":"obnleu24.click","domain":"obnleu24.click","tld":"click"},"title":"OBNALEU24","dom":{"size":6181,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"2ed0bc9ba1dbac24fd4ed4094c09ab7e","sha1":"30c865e9c5340936df51bf701e069724ff51fe3a","sha256":"2abaf8f92b39bf380cb4ceb534e595b2c896247a60259e2d26ef015deabcd089","sha512":"2e1977fba16dd537d8797fdf6db45094e3f2e72ea11cdeded7fdd37aab5815c381832bce76d7fdb7652aac5300303db1062f300debcec81946af1be5c989064d","ssdeep":"96:MxRlHUI+k/Ktr1oSy2ZR58KP/kgupn2Tdl5:MxUIVSlyoZ78KP8Vx2xz","tlshash":"efd13167c2c914ac1403c1e58ff21e4a37e6a123e6054d1d379f5352efc59b8c567aac","dom_hash":"domhasha8320d4b59ca756321fc5fea3a964a8b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"obnleu24.click/","fqdn":"obnleu24.click","domain":"obnleu24.click","tld":"click"},"ip":{"addr":"104.21.49.79","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-16T14:55:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"obnleu24.click","ip":{"addr":"172.67.160.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-29","domain_rank":0,"first_seen":"2026-05-12T14:55:26.355028Z","last_seen":"2026-05-12T14:55:26.355028Z","alert_count":0,"request_count":10,"received_data":3102855,"sent_data":4792,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-05-06T19:32:40.180172Z","alert_count":0,"request_count":1,"received_data":116674,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"obnleu24.click/","fqdn":"obnleu24.click","domain":"obnleu24.click","tld":"click"},"ip":{"addr":"172.67.160.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb3fb9f6c213ef85ff8969addc7a56ac","sha1":"98899a04ca98e8b5a27ddea5df57eceb7214a770","sha256":"abb2e69dfb7a8888e1a804f5d29cfa9721e8ffd392f925106d57485ebd02e4ea","sha512":"62f59015dd95cd06ec896c9839b69e2777095c3b85ecc691d7bd45bbe79dd24fe5bad8b3bcb6580ca44c620dab1451fb81235cb7db4c81b5ea67e7088e0002a7","ssdeep":"","tlshash":"60b011a288aa8a008230328e0b83a2c02002e00338088380330ca2a82fc0233b2020a8","size":93,"data":"","first_seen":"2026-05-12T14:55:30.769468Z","last_seen":"2026-05-12T14:58:49.194623Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116341,"data":"","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-05-20T14:03:01.353453Z","times_seen":1037,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"obnleu24.click/2.mp4","fqdn":"obnleu24.click","domain":"obnleu24.click","tld":"click"},"ip":{"addr":"172.67.160.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://obnleu24.click/","date":"2026-05-12T14:55:02.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"obnleu24.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 05:08:14 GMT","end":"Tue, 28 Jul 2026 05:08:13 GMT"},"fingerprint":{"sha1":"58:43:2C:89:7E:05:FB:41:B5:9F:BC:DA:4B:EB:E6:4E:3B:A8:C6:A7","sha256":"52:99:5B:08:71:41:F3:D7:E0:58:30:AB:45:1A:72:45:8F:D5:B3:15:AB:5C:0E:4E:F8:96:F6:57:F4:33:AC:4F"}}},"request":{"raw":"GET /2.mp4 HTTP/1.1\r\nHost: obnleu24.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://obnleu24.click/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 14:55:02 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 6917651\r\nlast-modified: Fri, 24 Apr 2026 17:49:12 GMT\r\netag: \"69ebad18-698e13\"\r\ncontent-range: bytes 0-6917650/6917651\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BVFpPRG9dy%2BAS4DoqIDQ5dZ3BSNSJY%2BUxJqvORHdmhawO5CppJEkbFlNMf7Ha3ViYnYcjEMO%2FMNIAaz9ISkvSsBDce5UBOj7gUURFd41O5z8KDzfnsIbgXZnSa3mBhWdtw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9faa431ab8bf5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":382494,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"70d201a321bfede6cf5b5eee1edc735a","sha1":"4058859222e076cfcfdf459360f97d086a6a826f","sha256":"eaf05e394aa89f3c64da5ac9318901ed1a7416268f0d6944f6565ba14efe06e8","sha512":"4b1714d73614b0f664209c7eba3035700dc0993647e93ce0bbfc69ce2571ffde19da3dec44e782fbd466aca2dbefee629331ae3fea38e24e2f95046b42794d3f","ssdeep":"6144:h4C4TdexdOoo7IXIfBxB/9Y5drQkfHzWsQt3EkxLIolWh3C2LetW:Ode/O30IfjBFY5drQuHzWsQt0CIolf2v","tlshash":"c58423b5502d4866e9dea17a2be3e318732b5b7007110b4fa2067c53e7b5d03e836b9d","first_seen":"2026-05-12T14:55:30.732752Z","last_seen":"2026-05-12T14:55:30.732752Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obnleu24.click/3.mp4","fqdn":"obnleu24.click","domain":"obnleu24.click","tld":"click"},"ip":{"addr":"172.67.160.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://obnleu24.click/","date":"2026-05-12T14:55:02.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"obnleu24.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 05:08:14 GMT","end":"Tue, 28 Jul 2026 05:08:13 GMT"},"fingerprint":{"sha1":"58:43:2C:89:7E:05:FB:41:B5:9F:BC:DA:4B:EB:E6:4E:3B:A8:C6:A7","sha256":"52:99:5B:08:71:41:F3:D7:E0:58:30:AB:45:1A:72:45:8F:D5:B3:15:AB:5C:0E:4E:F8:96:F6:57:F4:33:AC:4F"}}},"request":{"raw":"GET /3.mp4 HTTP/1.1\r\nHost: obnleu24.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://obnleu24.click/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 14:55:02 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 5787363\r\nlast-modified: Fri, 24 Apr 2026 17:49:12 GMT\r\netag: \"69ebad18-584ee3\"\r\ncontent-range: bytes 0-5787362/5787363\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pu4U%2Fa1vGO9VmsDKV3V4tKuXdCP8IUbZq6FbmqyPHnoG9M0Fq9RCI8IOGATBHwBc3pqGaMtGr0r3rRJrTS1gbQvNmDmo5vU3ZgUdWPGZb9Xp7o8BZ7FClIC5S8CXwmdcag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9faa431ab8c05699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":364429,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"9eae9dab04df03f39c4569325373e53d","sha1":"6952f13e5c3e6ffde90dec276318f99b12994c9d","sha256":"70f17153c8c10ddd1756546ff73c7067825673f342d2b07b64b952a95024d065","sha512":"a347e58ae7e344e044b750ba67e2c610d0ae7737cbce995bd7f055c4c4cac9a2a8bb6d34211a9a7be372dcdbfd030e2a3211ad2422810c3c492fb92c9b94c144","ssdeep":"6144:35821+mivK+1xqrU1K9PFCY1CPDsd+lrhsDwVePFytwmZvHRgcmC/uLLVkcTP3Y/:i2i8rC0FCDPYMBhD0AwYvycN2L5XTP3A","tlshash":"227423b97826f7f1d13e453e088d05c207b2a569665dabffea4c7a148f8240f1b8354b","first_seen":"2026-05-12T14:55:30.747282Z","last_seen":"2026-05-12T14:55:30.747282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obnleu24.click/4.mp4","fqdn":"obnleu24.click","domain":"obnleu24.click","tld":"click"},"ip":{"addr":"172.67.160.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://obnleu24.click/","date":"2026-05-12T14:55:02.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"obnleu24.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 05:08:14 GMT","end":"Tue, 28 Jul 2026 05:08:13 GMT"},"fingerprint":{"sha1":"58:43:2C:89:7E:05:FB:41:B5:9F:BC:DA:4B:EB:E6:4E:3B:A8:C6:A7","sha256":"52:99:5B:08:71:41:F3:D7:E0:58:30:AB:45:1A:72:45:8F:D5:B3:15:AB:5C:0E:4E:F8:96:F6:57:F4:33:AC:4F"}}},"request":{"raw":"GET /4.mp4 HTTP/1.1\r\nHost: obnleu24.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://obnleu24.click/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 14:55:02 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 4715401\r\nlast-modified: Fri, 24 Apr 2026 17:49:13 GMT\r\netag: \"69ebad19-47f389\"\r\ncontent-range: bytes 0-4715400/4715401\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4G7kUApb95QdI%2FtfAVXqycbk4eT5evFdsltBwiFogKjsWgkYjZHAiweE6GIT8KIiPkWm8PR3lEoZNaDRsTXAyH90FRrma%2BmjuylhaJL%2Blm90Grv2Dqadatv5XXvf3MmOyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9faa431ac8c15699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":508555,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"fa2810e96317f66e61a407f46bd7a0db","sha1":"713f18f589c7f0d358d6954d808bcc832e120b66","sha256":"7a1f0a27704ed157895940243edc8a8aecc562ddfa369ccf689253d222916d2f","sha512":"6cca54254ea26411cc313a938fee4cfa099610226ba0f54543e1b59e277550ff8fae1d42061e3699a414c3b3f1b496ba5eebe06c4a69136d8e5f716bdb2346c8","ssdeep":"12288:axmlShcb/nCXjXh0P7V9ZOXK4oq2agtu0z/lNNq7kN4WDvm:axmlShc72WpKX7oJw0z/47SBDvm","tlshash":"79b42357e8201b85c66e47b1928992ce377617ebeea8778180ce1ee4f24f84385d7cd4","first_seen":"2026-05-12T14:55:30.750529Z","last_seen":"2026-05-12T14:55:30.750529Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obnleu24.click/5.mp4","fqdn":"obnleu24.click","domain":"obnleu24.click","tld":"click"},"ip":{"addr":"172.67.160.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://obnleu24.click/","date":"2026-05-12T14:55:02.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"obnleu24.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 05:08:14 GMT","end":"Tue, 28 Jul 2026 05:08:13 GMT"},"fingerprint":{"sha1":"58:43:2C:89:7E:05:FB:41:B5:9F:BC:DA:4B:EB:E6:4E:3B:A8:C6:A7","sha256":"52:99:5B:08:71:41:F3:D7:E0:58:30:AB:45:1A:72:45:8F:D5:B3:15:AB:5C:0E:4E:F8:96:F6:57:F4:33:AC:4F"}}},"request":{"raw":"GET /5.mp4 HTTP/1.1\r\nHost: obnleu24.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://obnleu24.click/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 14:55:02 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 6562388\r\nlast-modified: Fri, 24 Apr 2026 17:49:13 GMT\r\netag: \"69ebad19-642254\"\r\ncontent-range: bytes 0-6562387/6562388\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=la05gvUkHfb8Npd%2Bt7vxLmymiuIuDMp1XZjIXPGwqYlo6OTvlDDzoaQDWcdsFmvYcf4%2BBBH7%2FFegt9kFD8t7qKQVT6RPC4ie9j0ii82EB0Lvizu%2FgsRj2DHj8Kp0JRgBTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9faa431ac8c25699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":607106,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"a57a2af739938d5fd7390f3b3df63798","sha1":"92dd0f64757f740e362d43300999f4eb562cd129","sha256":"f8468b525d47befc9c25705508f33dbba3eeee5050fcf2aea2b071d362cc6878","sha512":"408cfd0051a987d053007e00996f60039933bce8f04a67cfb7fe741c0715bd0482090dbbf729ce8c270344e0fe2b42b9ae901bf8e17bdd6a3cff33ed133d4179","ssdeep":"12288:AzpLexNfF7vN1n8AJJh6FIF/RgxR2edWVaZiwQstJtzqKFtDDM:fDF/tJhZ5aR2h/sNzqKTDDM","tlshash":"3ad423201c7a867fcbb5d73f59cb0b290f908192f469d6a3a0d43f91b8493cdd89c665","first_seen":"2026-05-12T14:55:30.753635Z","last_seen":"2026-05-12T14:55:30.753635Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obnleu24.click/7.mp4","fqdn":"obnleu24.click","domain":"obnleu24.click","tld":"click"},"ip":{"addr":"172.67.160.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://obnleu24.click/","date":"2026-05-12T14:55:02.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"obnleu24.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 05:08:14 GMT","end":"Tue, 28 Jul 2026 05:08:13 GMT"},"fingerprint":{"sha1":"58:43:2C:89:7E:05:FB:41:B5:9F:BC:DA:4B:EB:E6:4E:3B:A8:C6:A7","sha256":"52:99:5B:08:71:41:F3:D7:E0:58:30:AB:45:1A:72:45:8F:D5:B3:15:AB:5C:0E:4E:F8:96:F6:57:F4:33:AC:4F"}}},"request":{"raw":"GET /7.mp4 HTTP/1.1\r\nHost: obnleu24.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://obnleu24.click/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 14:55:02 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 6550659\r\nlast-modified: Fri, 24 Apr 2026 18:09:48 GMT\r\netag: \"69ebb1ec-63f483\"\r\ncontent-range: bytes 0-6550658/6550659\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nkDFeA6APgPah4ESY5Zt9%2BHqIQflekBvf2jUiGrrr9EVk1oWAYZbO0wf2bylzj%2FJ%2BrDcYM7WykuQoXFFQ0zqHxcBX2IU9%2BowKvNg7wUOyHEr0l%2BOlts0P6RAytYWtfhMBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9faa431ac8c35699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":284417,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"cc2fc40a5325cfc3922f86b6089a404c","sha1":"c79a4af7691d73a322850f0c43883ea1a8dab4a3","sha256":"45c5e3bbf852d51f81d5f1c8155cc2695e38eca8ac21851688ae446453ae2b2d","sha512":"e421688988a4905806ef0cae160b1f161462187bf30b83d476a23b93ee0d5980261ee1f54a678a7537946d9ae8648aa9e18cf8acc0e427a5900fc88c33d0487b","ssdeep":"6144:z458a0LFCTc9f/n77Gp0+oBf9m/vaqGolnPogCE4t:z40FCoff76K+oBVm/vT7oZE4t","tlshash":"3a5423dd7d7b865dd8a45738cf5c87b4ef1e77a43c02db0ac610e28ad8648b860149af","first_seen":"2026-05-12T14:55:30.756157Z","last_seen":"2026-05-12T14:55:30.756157Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obnleu24.click/favicon.ico","fqdn":"obnleu24.click","domain":"obnleu24.click","tld":"click"},"ip":{"addr":"172.67.160.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://obnleu24.click/","date":"2026-05-12T14:55:03.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"obnleu24.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 05:08:14 GMT","end":"Tue, 28 Jul 2026 05:08:13 GMT"},"fingerprint":{"sha1":"58:43:2C:89:7E:05:FB:41:B5:9F:BC:DA:4B:EB:E6:4E:3B:A8:C6:A7","sha256":"52:99:5B:08:71:41:F3:D7:E0:58:30:AB:45:1A:72:45:8F:D5:B3:15:AB:5C:0E:4E:F8:96:F6:57:F4:33:AC:4F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: obnleu24.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://obnleu24.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 14:55:03 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 12 May 2026 10:08:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2%2Bf%2FE%2Bt7IpfCt3TZIsbk9FIbWcKMkW8e2IpspVeyxx7bYYw9atPYqBeKHxuAaXH06jTZO27HnS8JRjhfk4PPbmfm8vx4GelPzXo4t4pAUQ48pwbHmeFhFFC8%2F1g%2F%2Bu%2BHA%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9faa431c98d95699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6217,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, CR line terminators","md5":"f7336b776ff56d99316cdb7a49e9dfdb","sha1":"559df9fa1a8e3d1fc0e0aef9b5a1f28a0db36d3d","sha256":"b5f74c873c1a4b70930fce2f652082efc3c0100c046a1f09897a8aa06396b15a","sha512":"5927e37c4010a5996e25a2cc1487a6bdde426662b0f1b7634a873bb77170fa180644ccb6d7dc633e4a629ad8bca6f2ee077f9d245ad21f4bd1e3017040d780b2","ssdeep":"48:NGlptHaAyIV81ONNSZfXpFfcCeDUbHTMxjKPcO26860DR2T2ehX2w9Lo+nCKZ:iDHiIbIZCCOUbHTujKPv2K0DR2TL5/","tlshash":"d5d1526782a7109c8332c1c68f209b0af7ff2103e606581d3bae72919fb59a9c55369c","first_seen":"2026-05-12T14:55:30.759519Z","last_seen":"2026-05-12T14:58:49.182461Z","times_seen":2,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obnleu24.click/","fqdn":"obnleu24.click","domain":"obnleu24.click","tld":"click"},"ip":{"addr":"172.67.160.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-12T14:55:02.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"obnleu24.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 05:08:14 GMT","end":"Tue, 28 Jul 2026 05:08:13 GMT"},"fingerprint":{"sha1":"58:43:2C:89:7E:05:FB:41:B5:9F:BC:DA:4B:EB:E6:4E:3B:A8:C6:A7","sha256":"52:99:5B:08:71:41:F3:D7:E0:58:30:AB:45:1A:72:45:8F:D5:B3:15:AB:5C:0E:4E:F8:96:F6:57:F4:33:AC:4F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: obnleu24.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 14:55:02 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 12 May 2026 10:08:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FxgB363B0LI60eOiRQlPRsFoThJJfJmybgUXF3dv30DkNWmVZtcXLGtApEB%2FItHDMPIIN%2BnqgcXz1MsXLISgqU8rbyQrc8bddv2ajsmTe9rrJSIFLMhyT7RT83m4A5AbnA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9faa4316bbcf783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6217,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, CR line terminators","md5":"f7336b776ff56d99316cdb7a49e9dfdb","sha1":"559df9fa1a8e3d1fc0e0aef9b5a1f28a0db36d3d","sha256":"b5f74c873c1a4b70930fce2f652082efc3c0100c046a1f09897a8aa06396b15a","sha512":"5927e37c4010a5996e25a2cc1487a6bdde426662b0f1b7634a873bb77170fa180644ccb6d7dc633e4a629ad8bca6f2ee077f9d245ad21f4bd1e3017040d780b2","ssdeep":"48:NGlptHaAyIV81ONNSZfXpFfcCeDUbHTMxjKPcO26860DR2T2ehX2w9Lo+nCKZ:iDHiIbIZCCOUbHTujKPv2K0DR2TL5/","tlshash":"d5d1526782a7109c8332c1c68f209b0af7ff2103e606581d3bae72919fb59a9c55369c","first_seen":"2026-05-12T14:55:30.759519Z","last_seen":"2026-05-12T14:58:49.182461Z","times_seen":2,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":76,"dns":64,"connect":1,"send":0,"wait":96,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://obnleu24.click/","date":"2026-05-12T14:55:02.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://obnleu24.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 12 May 2026 14:55:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 05 Apr 2026 10:29:48 GMT\r\netag: W/\"69d2399c-1c675\"\r\nexpires: Sat, 16 May 2026 14:55:02 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116341,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-05-20T14:03:01.353453Z","times_seen":1037,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":148,"dns":15,"connect":21,"send":0,"wait":42,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obnleu24.click/1.mp4","fqdn":"obnleu24.click","domain":"obnleu24.click","tld":"click"},"ip":{"addr":"172.67.160.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://obnleu24.click/","date":"2026-05-12T14:55:02.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"obnleu24.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 05:08:14 GMT","end":"Tue, 28 Jul 2026 05:08:13 GMT"},"fingerprint":{"sha1":"58:43:2C:89:7E:05:FB:41:B5:9F:BC:DA:4B:EB:E6:4E:3B:A8:C6:A7","sha256":"52:99:5B:08:71:41:F3:D7:E0:58:30:AB:45:1A:72:45:8F:D5:B3:15:AB:5C:0E:4E:F8:96:F6:57:F4:33:AC:4F"}}},"request":{"raw":"GET /1.mp4 HTTP/1.1\r\nHost: obnleu24.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://obnleu24.click/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 14:55:02 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 5087871\r\nlast-modified: Fri, 24 Apr 2026 17:49:11 GMT\r\netag: \"69ebad17-4da27f\"\r\ncontent-range: bytes 0-5087870/5087871\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jE21t2D14c8UIsEv6Nb4KcH3aL%2BfTe8t53H8y%2FTZYWg1xEecP2IZ32uTxmaXJzzUu1nRQf6D6Ss6ZX7z6nnin32I9E0%2B%2FYKhvnXOtdizswifmd4M2Zrud17UZArJXd62Ow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9faa431ab8be5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":362861,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"88784fec33765e949f480d0942319ab2","sha1":"ce5350be0ff4491640316d6d08553f6751c201b9","sha256":"4d81ae2afe95769643737eddf10f8cb6233c751162a33d6545a6d6cf457d9415","sha512":"6d06ff899521706a26e0a1c181f523a5a8baf1ec6025fa403af5668e6b3de7fa75101902be62b504314c03a87734d0faa06b6bd16b0c97d61d2017dd2676ced6","ssdeep":"6144:KaAt4LkHmFS/rt5WwoTHvLYeYDMrBL1llCnXR0bI26m8oyA4N56VZQh2G/YgL:gjmFS/PWwoPgDMrBL1lCXOF8oybNE7Qb","tlshash":"6e7423eb563ecce3cd73203ec4617b4a175c7b2a182167bfa1e51d59126af4a1c28738","first_seen":"2026-05-12T14:55:30.762757Z","last_seen":"2026-05-12T14:55:30.762757Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obnleu24.click/6.mp4","fqdn":"obnleu24.click","domain":"obnleu24.click","tld":"click"},"ip":{"addr":"172.67.160.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://obnleu24.click/","date":"2026-05-12T14:55:02.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"obnleu24.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 05:08:14 GMT","end":"Tue, 28 Jul 2026 05:08:13 GMT"},"fingerprint":{"sha1":"58:43:2C:89:7E:05:FB:41:B5:9F:BC:DA:4B:EB:E6:4E:3B:A8:C6:A7","sha256":"52:99:5B:08:71:41:F3:D7:E0:58:30:AB:45:1A:72:45:8F:D5:B3:15:AB:5C:0E:4E:F8:96:F6:57:F4:33:AC:4F"}}},"request":{"raw":"GET /6.mp4 HTTP/1.1\r\nHost: obnleu24.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://obnleu24.click/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 14:55:02 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 7905488\r\nlast-modified: Fri, 24 Apr 2026 17:49:14 GMT\r\netag: \"69ebad1a-78a0d0\"\r\ncontent-range: bytes 0-7905487/7905488\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cEhdEcneEmSfLkY7Uu4VsHduI1yhZBGtSVx75oOD6wdbQMoBYfjwYoolKuFuqxLho2aY1Ex1U0KaqGebXbmsHPJS3dQWdVXepyS6nNILWyhTkm%2B9ljwBx93o%2FK9%2FMEmG3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9faa431ac8c45699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":405015,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"b5c2afb2867bdb90e8f192c0819fb02a","sha1":"079984b33db0d3be39fe2162ab9df1a519b746ce","sha256":"4d1595f2ba53960aed6426864fa4b734a827fe77bd5e262da26f8ff4e81ad4f3","sha512":"d426fc5aa90a43778174f012c94adaf0762f646973e05bd08cb08dbc02c9ce9905d35fdabd784e6c6facb60965329639177e5ce7a952101f21f018b48b2e913f","ssdeep":"12288:J9PhdNGz3Ty6NDIWlNrPAf/nKStzEWVJ4bFesm3:J9v+DXDI2IfvKqExO3","tlshash":"ce8423331672d15dff4dbbb7c2e72782c40894592b1968d095e7a59c2be21a00f4a3fe","first_seen":"2026-05-12T14:55:30.764869Z","last_seen":"2026-05-12T14:55:30.764869Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obnleu24.click/bg.jpg","fqdn":"obnleu24.click","domain":"obnleu24.click","tld":"click"},"ip":{"addr":"172.67.160.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://obnleu24.click/","date":"2026-05-12T14:55:02.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"obnleu24.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 05:08:14 GMT","end":"Tue, 28 Jul 2026 05:08:13 GMT"},"fingerprint":{"sha1":"58:43:2C:89:7E:05:FB:41:B5:9F:BC:DA:4B:EB:E6:4E:3B:A8:C6:A7","sha256":"52:99:5B:08:71:41:F3:D7:E0:58:30:AB:45:1A:72:45:8F:D5:B3:15:AB:5C:0E:4E:F8:96:F6:57:F4:33:AC:4F"}}},"request":{"raw":"GET /bg.jpg HTTP/1.1\r\nHost: obnleu24.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://obnleu24.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 14:55:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 168424\r\nlast-modified: Fri, 24 Apr 2026 18:22:18 GMT\r\netag: \"69ebb4da-291e8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w0JgeiMyINH8m%2B61iehqFj%2FIjlm0DPR5XynGM9jd7ig25JfyBeX21pqya68BFX9w5CV1Kxw7UqWoDgHJZq6d4hhUkZYKAUpmQNFELgesXdfroLCduptCSXyt1G7vEe8RWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9faa431a48b85699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168424,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x682, components 3","md5":"fde5335705fb4f9f4477cc2a42ea7b37","sha1":"00b50984ffc283bf19943c490d50cbad8770015a","sha256":"2608e18dafe340e0e1c143866bb0f0ab9f415d4c51e75c64f831afa1d271ed79","sha512":"ee27958897b052009942e692ef05bf2b5557b03dd1e247217581144b95b87c37346bade730f174d773c8ef1996cfdad78c576e0472f16ee1b8ea687ccd957347","ssdeep":"3072:BCyXR+0KjZoaS6XsHbSAkAF9ZtNtX/JOEHk2EdhUZvisOArHkQBP3TPiKCi:B7+TjTZXs7S0xxu2TiYrEQlTxp","tlshash":"8bf312b2793364186f5c3d7387d44abbef324d9c989aea7748fec0151a8e58b91d084c","first_seen":"2026-05-12T14:55:30.76712Z","last_seen":"2026-05-12T14:58:49.191632Z","times_seen":2,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}