504 B IP
ASN #20940 Akamai International B.V.
Hash ee5b6dc3e7ab972df60b36582e3eaaf4
2a5185acc539fcddac9c33895ec74faf552b62dd
be84262bbb3f3aabae368745bc3e85b816e372b16bc37327a1887d3a19992df6
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BE84262BBB3F3AABAE368745BC3E85B816E372B16BC37327A1887D3A19992DF6"
Last-Modified: Wed, 10 Jul 2024 13:53:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9095
Expires: Fri, 12 Jul 2024 05:58:04 GMT
Date: Fri, 12 Jul 2024 03:26:29 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash c2f3e4e1f94efa7a80f9deeb3d459176
7a8f013a3d13ffe4241b8e2a8b9ca63daeeace53
5f9feb641b1e74a7c14eee1104953d1e9faa0341d1f27fdbd50fa8207e6c0ac8
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5F9FEB641B1E74A7C14EEE1104953D1E9FAA0341D1F27FDBD50FA8207E6C0AC8"
Last-Modified: Tue, 09 Jul 2024 15:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4713
Expires: Fri, 12 Jul 2024 04:45:02 GMT
Date: Fri, 12 Jul 2024 03:26:29 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash e7492695b5254a3a63fcffb4f1ee8cec
0361713c6d8129210245347284c7c6babfd28fb7
5d1bc1c01894fd88a0d4680490977488d6458bb58a98ace24ef8aa103538bc1f
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5D1BC1C01894FD88A0D4680490977488D6458BB58A98ACE24EF8AA103538BC1F"
Last-Modified: Tue, 09 Jul 2024 23:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15978
Expires: Fri, 12 Jul 2024 07:52:48 GMT
Date: Fri, 12 Jul 2024 03:26:30 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash fc076d7a99abd74b9da6b35304bb93e9
9d541501d5141dcf7b4d839d6fcffabec81e1a14
c86804eff01a7bb9ff866508bfdb1b071cfa4a26617d11094b9f5226e1a4b970
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C86804EFF01A7BB9FF866508BFDB1B071CFA4A26617D11094B9F5226E1A4B970"
Last-Modified: Tue, 09 Jul 2024 16:18:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15793
Expires: Fri, 12 Jul 2024 07:49:43 GMT
Date: Fri, 12 Jul 2024 03:26:30 GMT
Connection: keep-alive
GET wecima.show/wp-content/themes/Mycima2021/components/packs/%23footer/js/jquery-3.4.1.min.js?ver=6.4.3
200 OK 31 kB URL GET HTTP/3 wecima.show/wp-content/themes/Mycima2021/components/packs/%23footer/js/jquery-3.4.1.min.js?ver=6.4.3
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerGoogle Trust Services
Subjectwecima.show
Fingerprint8B:CF:D8:AD:8D:E0:EA:16:FA:F9:1D:85:8F:4C:27:51:56:F3:33:F7
ValidityWed, 05 Jun 2024 01:39:10 GMT - Tue, 03 Sep 2024 01:39:09 GMT
File type gzip compressed data, from Unix
Hash af02f6eeaa3a32dca77d848452f1baed
d1dc6038ed9815bc552155d3000f9e6e087d57a8
951afb76d30283188afb0fd5527c6c086672af314fa8737fe3b6e0185e376fda
GET /wp-content/themes/Mycima2021/components/packs/%23footer/js/jquery-3.4.1.min.js?ver=6.4.3 HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 12 Jul 2024 03:26:30 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sun, 22 Aug 2021 16:57:00 GMT
etag: W/"612281dc-157fb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 6927
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zaaeEJPDG1QgwmydDjhqUMXLg7kCiL%2BsBgN%2Bu43rSx54LgKaZ4ZLhh1sBSSXACkSlCIAQkJ6lJYIWDVm9r%2ByJok%2F%2BsjFZyyWJIsrQUXt9T%2FgadXnoh1qh7Ou5YlPbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a1deea109ccb503-OSL
alt-svc: h3=":443"; ma=86400
471 B IP
Hash 651860ba9a7cd34b15355c24dff61b43
f2f76a3273d568a715ca164a7805baa2e75ce2ce
0151f5df1172d4ea008e0cc0fba269d4b489862d5df2ec0ea8ac170caf623f90
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 12 Jul 2024 03:26:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET www.googletagmanager.com/gtag/js?id=G-6JHTFKY3P3
200 OK 101 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-6JHTFKY3P3
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
FingerprintBA:5D:A9:7F:41:46:B0:37:01:9E:05:B0:92:BA:41:C9:31:5B:4B:4A
ValidityThu, 13 Jun 2024 15:27:14 GMT - Thu, 05 Sep 2024 15:27:13 GMT
File type JavaScript source, ASCII text, with very long lines (3969)
Size 101 kB (100740 bytes)
Hash 27a5362c1b5e0b44089b465a074e96d9
a9d47d6e0677c63b8819cb7746487bb13750986f
735e2fe390f6b27b3f29ddf0b3f86ce7add317d49879c54c8c196daa0a89ed0f
GET /gtag/js?id=G-6JHTFKY3P3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 12 Jul 2024 03:26:30 GMT
expires: Fri, 12 Jul 2024 03:26:30 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100740
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
471 B IP
Hash 651860ba9a7cd34b15355c24dff61b43
f2f76a3273d568a715ca164a7805baa2e75ce2ce
0151f5df1172d4ea008e0cc0fba269d4b489862d5df2ec0ea8ac170caf623f90
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 12 Jul 2024 03:26:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrFpiQ.woff2
200 OK 9.9 kB URL GET HTTP/2 fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrFpiQ.woff2
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintC4:9C:27:09:1C:F7:14:C9:86:F0:B5:42:0B:8A:D2:AE:5E:AE:98:04
ValidityThu, 13 Jun 2024 16:31:03 GMT - Thu, 05 Sep 2024 16:31:02 GMT
File type Web Open Font Format (Version 2), TrueType, length 9864, version 1.0
Hash 9751651b345afc0e49ca1a302c19a294
05393c6e747f5e8a3c7fbee5fe15cad4c80837e1
d5aa3e4c58493f8d3693be4962e94e08d14e178ef4f0be2a27369a8813498e54
GET /s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrFpiQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9864
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Jul 2024 19:50:56 GMT
expires: Thu, 10 Jul 2025 19:50:56 GMT
cache-control: public, max-age=31536000
age: 113734
last-modified: Tue, 16 Jul 2019 03:31:06 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrRpiYlJ.woff2
200 OK 8.5 kB URL GET HTTP/2 fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrRpiYlJ.woff2
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintC4:9C:27:09:1C:F7:14:C9:86:F0:B5:42:0B:8A:D2:AE:5E:AE:98:04
ValidityThu, 13 Jun 2024 16:31:03 GMT - Thu, 05 Sep 2024 16:31:02 GMT
File type Web Open Font Format (Version 2), TrueType, length 8488, version 1.0
Hash b405dddf4639fdf946fed00d4b91139c
5df4eb97753c51715b996fcec1dec7e55877404b
b0d3610919043227b56c8d5130e2ead271a067bb1b930678d5af24bbbae7c16f
GET /s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrRpiYlJ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8488
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Jul 2024 15:10:52 GMT
expires: Thu, 10 Jul 2025 15:10:52 GMT
cache-control: public, max-age=31536000
age: 130538
last-modified: Tue, 16 Jul 2019 03:31:11 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/bevan/v12/4iCj6KZ0a9NXjG8dWCs.woff2
200 OK 20 kB URL GET HTTP/2 fonts.gstatic.com/s/bevan/v12/4iCj6KZ0a9NXjG8dWCs.woff2
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintC4:9C:27:09:1C:F7:14:C9:86:F0:B5:42:0B:8A:D2:AE:5E:AE:98:04
ValidityThu, 13 Jun 2024 16:31:03 GMT - Thu, 05 Sep 2024 16:31:02 GMT
File type Web Open Font Format (Version 2), TrueType, length 19984, version 1.0
Hash 0db10b5d1f471ef6c3a30158ff403106
ea993e87704687d1399a3b1fd79aa84c47659c82
e0e544b2864b4c3d7425f4eff9f9365b629abcbaf37f03d0bf5ba381f227d48a
GET /s/bevan/v12/4iCj6KZ0a9NXjG8dWCs.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19984
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 05 Jul 2024 08:13:07 GMT
expires: Sat, 05 Jul 2025 08:13:07 GMT
cache-control: public, max-age=31536000
age: 587603
last-modified: Tue, 01 Sep 2020 03:51:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
471 B IP
Hash 651860ba9a7cd34b15355c24dff61b43
f2f76a3273d568a715ca164a7805baa2e75ce2ce
0151f5df1172d4ea008e0cc0fba269d4b489862d5df2ec0ea8ac170caf623f90
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 12 Jul 2024 03:26:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
471 B IP
Hash 651860ba9a7cd34b15355c24dff61b43
f2f76a3273d568a715ca164a7805baa2e75ce2ce
0151f5df1172d4ea008e0cc0fba269d4b489862d5df2ec0ea8ac170caf623f90
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 12 Jul 2024 03:26:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
472 B IP
Hash 5932a1ff456b1d430a45a1c81862986e
59fdc3fe6e7a7f4c2cc4a19ce2f266c33cae1660
b4c67402ad460f291c279c86e4fe55d5917a6ff8ee840a307b3435db065d0d57
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 12 Jul 2024 03:26:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET wecima.show/wp-content/themes/Mycima2021/components/packs/%23footer/js/owl.carousel.min.js?ver=6.4.3
200 OK 34 kB URL GET HTTP/3 wecima.show/wp-content/themes/Mycima2021/components/packs/%23footer/js/owl.carousel.min.js?ver=6.4.3
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerGoogle Trust Services
Subjectwecima.show
Fingerprint8B:CF:D8:AD:8D:E0:EA:16:FA:F9:1D:85:8F:4C:27:51:56:F3:33:F7
ValidityWed, 05 Jun 2024 01:39:10 GMT - Tue, 03 Sep 2024 01:39:09 GMT
File type gzip compressed data, from Unix
Hash 38283a3c89c93b26986420e1b03829e4
b9fab21c0676d623a747c1fcc5084541c0849a43
16118dba51be2ad6984de616a4843554d43e704a6311147ac41c16e92d97f996
GET /wp-content/themes/Mycima2021/components/packs/%23footer/js/owl.carousel.min.js?ver=6.4.3 HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 12 Jul 2024 03:26:30 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sun, 22 Aug 2021 16:57:00 GMT
etag: W/"612281dc-17394"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 6927
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YRC8XZQvi2hlUriNSS0r6lBytdB7f%2B1NHxVQtkF0oBW1fjIL3XiVJrk%2BByqXgnQkQ%2FnCO9PCfX%2F4wCOoVqruxDLqO5F%2FwdrAdK6dg%2BhNNmMwQ4ZzMIlJczltnel2og%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a1deea109cfb503-OSL
alt-svc: h3=":443"; ma=86400
GET wecima.show/wp-content/themes/Mycima2021/components/packs/%23footer/js/setup.js?842090071&ver=6.4.3
200 OK 38 kB URL GET HTTP/3 wecima.show/wp-content/themes/Mycima2021/components/packs/%23footer/js/setup.js?842090071&ver=6.4.3
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerGoogle Trust Services
Subjectwecima.show
Fingerprint8B:CF:D8:AD:8D:E0:EA:16:FA:F9:1D:85:8F:4C:27:51:56:F3:33:F7
ValidityWed, 05 Jun 2024 01:39:10 GMT - Tue, 03 Sep 2024 01:39:09 GMT
File type gzip compressed data, from Unix
Hash 89b4efba59cdaeb0ffe1cb8e6f42c842
15cca7fcf56a5d4b89f37637ea14b49ab7f2db41
08c6666b4258e2d79726c144394939ecd2cf801a2d443dbfaee8830f24350a44
GET /wp-content/themes/Mycima2021/components/packs/%23footer/js/setup.js?842090071&ver=6.4.3 HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 12 Jul 2024 03:26:30 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 13 Feb 2023 19:31:57 GMT
etag: W/"63ea902d-254b0"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h%2BfSdG4jLuhcELvpMZp%2FsSXJGEgQh0GB44PBz6BHkJ%2FmrbBSDXhtwwGotiq5afQKrBcDdRabB7PHxJa62SX2r%2B7BW03FtAAFuDjKF6YdG9GcwgYgxkll7Dv3su5TCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a1deea109d0b503-OSL
alt-svc: h3=":443"; ma=86400
471 B IP
Hash 651860ba9a7cd34b15355c24dff61b43
f2f76a3273d568a715ca164a7805baa2e75ce2ce
0151f5df1172d4ea008e0cc0fba269d4b489862d5df2ec0ea8ac170caf623f90
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 12 Jul 2024 03:26:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET pw.mignonsniper.com/rnv8cfh9HDNRrSFTr/LrNQV
200 OK 20 B URL GET HTTP/1.1 pw.mignonsniper.com/rnv8cfh9HDNRrSFTr/LrNQV
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerLet's Encrypt
Subjectpw.mignonsniper.com
Fingerprint02:15:8C:C6:73:1B:EE:03:7B:45:35:58:19:CD:C1:D7:1C:3B:03:79
ValidityFri, 31 May 2024 07:16:06 GMT - Thu, 29 Aug 2024 07:16:05 GMT
File type gzip compressed data, from Unix
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /rnv8cfh9HDNRrSFTr/LrNQV HTTP/1.1
Host: pw.mignonsniper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 12 Jul 2024 03:26:30 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://wecima.show
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Sat, 13-Jul-2024 03:26:30 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Sat, 13-Jul-2024 03:26:30 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET wecima.show/wp-content/themes/Mycima2021/components/packs/%23header/netflix.png
200 OK 3.5 kB URL GET HTTP/3 wecima.show/wp-content/themes/Mycima2021/components/packs/%23header/netflix.png
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerGoogle Trust Services
Subjectwecima.show
Fingerprint8B:CF:D8:AD:8D:E0:EA:16:FA:F9:1D:85:8F:4C:27:51:56:F3:33:F7
ValidityWed, 05 Jun 2024 01:39:10 GMT - Tue, 03 Sep 2024 01:39:09 GMT
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Hash 54110064037a44285faf10b2cbe55e87
b2677d46ed052bfda6eecbb61ee5539349f5603d
c5b633a4f58b811923c6d41cbe24939af6aebb02e6796169c1797f0eeb31bdd4
GET /wp-content/themes/Mycima2021/components/packs/%23header/netflix.png HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Cookie: _ga_6JHTFKY3P3=GS1.1.1720754791.1.0.1720754791.0.0.0; _ga=GA1.1.1976059615.1720754791
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 12 Jul 2024 03:26:31 GMT
content-type: image/png
content-length: 3533
last-modified: Sun, 22 Aug 2021 16:56:59 GMT
etag: "612281db-dcd"
vary: Accept, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6177
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mHTPpbYQRca9a0vTl1raY8ZNMriJr94%2FVWOZh4D9QqotIJUTM7tz60YHoYaC0UOHOWCU3M%2Fs0q4ogiBjzDL1F%2FVkRauxcyD85bmYMjiQuqHgZ%2FsDukOQNc4u4XH0HQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a1deea4db02b503-OSL
alt-svc: h3=":443"; ma=86400
GET wecima.show/wp-content/uploads/2024/07/Kinds-of-Kindness-2024-347x520.jpg
200 OK 44 kB URL GET HTTP/3 wecima.show/wp-content/uploads/2024/07/Kinds-of-Kindness-2024-347x520.jpg
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerGoogle Trust Services
Subjectwecima.show
Fingerprint8B:CF:D8:AD:8D:E0:EA:16:FA:F9:1D:85:8F:4C:27:51:56:F3:33:F7
ValidityWed, 05 Jun 2024 01:39:10 GMT - Tue, 03 Sep 2024 01:39:09 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 347x520, components 3
Hash 934f68bd3afc71cf0aa5728abb4f3e50
d37cc1f8e5e59c8630dd5073b02f5cd0ed3b513d
40c007fafafb8cdbcf28ff897a93b6518e8a50395b678d392871d4013799d6dc
GET /wp-content/uploads/2024/07/Kinds-of-Kindness-2024-347x520.jpg HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Cookie: _ga_6JHTFKY3P3=GS1.1.1720754791.1.0.1720754791.0.0.0; _ga=GA1.1.1976059615.1720754791
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 12 Jul 2024 03:26:31 GMT
content-type: image/jpeg
content-length: 44546
last-modified: Thu, 04 Jul 2024 11:17:45 GMT
etag: "668684d9-ae02"
vary: Accept, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2tTprCPqlz4M2ihxcgOOi0fRgeR4ewgR9Wl1GQqXbm2%2BU%2FAgbUr6dJFDgAQ2PQUzx%2F3yvDHE%2FT9rkMkb0Q0IamfsAEwSgEFxLXQixTV%2FK0oX9O9P1c7bASPs1bDutQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a1deea4baf7b503-OSL
alt-svc: h3=":443"; ma=86400
GET bytogeticr.com/split_track?action=check_overlay&dlShown=false&zone=4796941
200 OK 0 B URL GET HTTP/2 bytogeticr.com/split_track?action=check_overlay&dlShown=false&zone=4796941
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerGoogle Trust Services LLC
Subjectbytogeticr.com
Fingerprint53:F5:F6:E9:B8:6E:8C:52:C6:4C:68:F6:27:10:6E:5B:F0:B0:AA:48
ValidityTue, 04 Jun 2024 23:08:25 GMT - Mon, 02 Sep 2024 23:08:24 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /split_track?action=check_overlay&dlShown=false&zone=4796941 HTTP/1.1
Host: bytogeticr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wecima.show/
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 12 Jul 2024 03:26:31 GMT
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EBlI01CXlfPHI4Z5xxtGOnZlPjN1tFvF8LpP11EVTrz8iq99VZ3c%2FHTR1dxNEX9JquK3lTG%2F%2FYJi220Ob%2F0xNP%2BbBggRhbXNbmO%2FhWNR6kECrYgvlBIoH8XbELdwHqTarQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a1deea5d878b529-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=UA-128370636-1&l=dataLayer&cx=c
200 OK 73 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=UA-128370636-1&l=dataLayer&cx=c
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
FingerprintBA:5D:A9:7F:41:46:B0:37:01:9E:05:B0:92:BA:41:C9:31:5B:4B:4A
ValidityThu, 13 Jun 2024 15:27:14 GMT - Thu, 05 Sep 2024 15:27:13 GMT
File type JavaScript source, ASCII text, with very long lines (1822)
Hash d85e12b5749bc041888d9b3f886b7e01
6210b925809f57ba0c2cabea27a9bfaa51e12695
0ff1295c44a173e1517cd6164c9ce0cc0a6d3537cd2de7217d0bdf0303dafbfb
GET /gtag/js?id=UA-128370636-1&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 12 Jul 2024 03:26:31 GMT
expires: Fri, 12 Jul 2024 03:26:31 GMT
cache-control: private, max-age=900
last-modified: Fri, 12 Jul 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72775
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
504 B IP
ASN #20940 Akamai International B.V.
Hash 7f00579b9f894c7733c52a75d40d471d
e85440a0b2b8a9f230e1ebc014f6e510cd03b9a9
4937c3d929b9cc8e0c2c570b95698d4b8ff262feed5e0f6212cfcdab0b37b90b
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "4937C3D929B9CC8E0C2C570B95698D4B8FF262FEED5E0F6212CFCDAB0B37B90B"
Last-Modified: Fri, 12 Jul 2024 00:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15890
Expires: Fri, 12 Jul 2024 07:51:21 GMT
Date: Fri, 12 Jul 2024 03:26:31 GMT
Connection: keep-alive
GET rangauck.com/5/4796941/?oo=1&js_build=iclick-v1.842.6-auto
200 OK 178 B URL GET HTTP/2 rangauck.com/5/4796941/?oo=1&js_build=iclick-v1.842.6-auto
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerLet's Encrypt
Subjectrangauck.com
FingerprintF1:BB:9F:BC:19:FA:97:5B:73:90:06:6A:C2:95:D4:AC:1D:9E:C5:C8
ValidityThu, 11 Jul 2024 23:46:43 GMT - Wed, 09 Oct 2024 23:46:42 GMT
Hash 83d948a9e7a70f35e2a0159fdea16109
c3e20d6bcc98b3c5c06044ed6176db24d9283f6d
68270b6401933234df19f93b8f1f729b33b0c78b611f87f82b61ed5e28a9a8f6
GET /5/4796941/?oo=1&js_build=iclick-v1.842.6-auto HTTP/1.1
Host: rangauck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 12 Jul 2024 03:26:31 GMT
content-type: application/json
content-length: 178
x-trace-id: 91343dd046d5d9e30b15c0bdc2cb6837
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://wecima.show
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=008097c2ce094bffe09caef9bda10bde; expires=Sat, 12 Jul 2025 03:26:31 GMT; path=/; secure; SameSite=None
oaidts=1720754791; expires=Sat, 12 Jul 2025 03:26:31 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
GET wecima.show/wp-content/uploads/2023/02/wecima-favicon-1.png
200 OK 5.5 kB URL GET HTTP/3 wecima.show/wp-content/uploads/2023/02/wecima-favicon-1.png
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerGoogle Trust Services
Subjectwecima.show
Fingerprint8B:CF:D8:AD:8D:E0:EA:16:FA:F9:1D:85:8F:4C:27:51:56:F3:33:F7
ValidityWed, 05 Jun 2024 01:39:10 GMT - Tue, 03 Sep 2024 01:39:09 GMT
File type PNG image data, 271 x 211, 8-bit/color RGBA, non-interlaced
Hash de6cab0eb34528ddc75c0bba91468367
805566b4421a52ccbc7ddea87282ce4df241f64e
ab33b59200764ca718a5f977d0eccf57c27d02560c59ba3a9b12af1819b1f7fa
GET /wp-content/uploads/2023/02/wecima-favicon-1.png HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wecima.show/
DNT: 1
Connection: keep-alive
Cookie: _ga_6JHTFKY3P3=GS1.1.1720754791.1.0.1720754791.0.0.0; _ga=GA1.1.1976059615.1720754791
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 12 Jul 2024 03:26:31 GMT
content-type: image/png
content-length: 5499
last-modified: Mon, 13 Feb 2023 20:21:20 GMT
etag: "63ea9bc0-157b"
vary: Accept, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 2504
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=le6DPqvun7cqjmHrk1ILiTYQNxjIuTPTXIMxhV2x1uX7Bd0UmgauIHWp9ieGlDaXCNn4R3YgVtC6OrpOes8JDcdQ6ifQ0JezBaLUVOxAbI1d8m3xC7Ohv1EfmOBy9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a1deea70bc6b503-OSL
alt-svc: h3=":443"; ma=86400
GET wecima.show/AjaxCenter/RightBar/
200 OK 116 kB URL GET HTTP/3 wecima.show/AjaxCenter/RightBar/
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerGoogle Trust Services
Subjectwecima.show
Fingerprint8B:CF:D8:AD:8D:E0:EA:16:FA:F9:1D:85:8F:4C:27:51:56:F3:33:F7
ValidityWed, 05 Jun 2024 01:39:10 GMT - Tue, 03 Sep 2024 01:39:09 GMT
Size 116 kB (115595 bytes)
Hash b1ed64658a757ce4cb80850ecb1b8fc1
ea0681e64e24d7587f8230b4b9aa1d32fe77ebec
f619a584f20d055820a29a4e6a729b97967b6671ee3702ba06c5468ab9fe4302
GET /AjaxCenter/RightBar/ HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Cookie: _ga_6JHTFKY3P3=GS1.1.1720754791.1.0.1720754791.0.0.0; _ga=GA1.1.1976059615.1720754791
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 12 Jul 2024 03:26:31 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BaiFvVREFBTxu7czhyDrLVsBxKc8qQEDTS3h3YMzePigF9h3kSjKCsF8ZC9Ea7JghbwJsdEw7NRFfTMgQg6mR%2Fql3WobkAPKBk%2BGIXbX2C%2F8Su2PlYKfXcbIYbLqkg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a1deea49ad9b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET site-assets.fontawesome.com/releases/v6.0.0/css/all.css
200 OK 380 kB URL GET HTTP/2 site-assets.fontawesome.com/releases/v6.0.0/css/all.css
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D
ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT
File type gzip compressed data, from Unix
Size 380 kB (380226 bytes)
Hash 9bb3c0f7367df4ce1db5b1480b811791
8a57d684543a355f9f0497241b69ad105aeedfb4
bfb81f4b2425f1e5dbc2a28afa1530e747fe1fc0a17d63edc2c4b27cb43a8180
GET /releases/v6.0.0/css/all.css HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 12 Jul 2024 03:26:31 GMT
content-type: text/css
x-amz-id-2: kMts6lFk375420qO3pr8/pgncg9KdJXO2mycrjfjiw9JKdxKdw7G+FRNrNX/EjNilTSOj1jW0LG9ktV5W0uoEQ==
x-amz-request-id: WXY6M1MVYE64C3HD
last-modified: Mon, 07 Feb 2022 20:23:49 GMT
etag: W/"c8ccf9786058107114b343d52efb40bc"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 2476533
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a1deea55d6b7130-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
GET site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-light-300.woff2
200 OK 392 kB URL GET HTTP/2 site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-light-300.woff2
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D
ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 392136, version 768.256
Size 392 kB (392136 bytes)
Hash 2cb9262f4870f225de120af23500828a
0330732496c970248a96c6df732b4b6e8407246f
d9c0c73c3e6a75d59ff20ce5e1d4bdec5ee8c6f2724ff0deb6cddb8f7f207dbe
GET /releases/v6.0.0/webfonts/fa-light-300.woff2 HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://site-assets.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 12 Jul 2024 03:26:31 GMT
content-type: font/woff2
content-length: 392136
x-amz-id-2: IQmaexACsIbUtHsKMFWY2TFhmpnRBQZZTOdOalRfshTUzepYfQFlYLtHcWqLOIMGwcXIq8XIDupHWHcy8wvNqg==
x-amz-request-id: 171BJ5DFJF707JXS
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Mon, 07 Feb 2022 20:26:45 GMT
etag: "2cb9262f4870f225de120af23500828a"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 2476514
accept-ranges: bytes
server: cloudflare
cf-ray: 8a1deea7c9141c02-OSL
X-Firefox-Spdy: h2
GET site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-regular-400.woff2
200 OK 358 kB URL GET HTTP/2 site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-regular-400.woff2
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D
ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 357732, version 768.256
Size 358 kB (357732 bytes)
Hash aca950cc283a103f77e0001fb67043b7
bf0d2965fbc75a8a23ca081c7094a95535d46ca6
d2d786476ddb1827a07bc0ac83e78cee6d262a16092b6064c166091132f09b65
GET /releases/v6.0.0/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://site-assets.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 12 Jul 2024 03:26:31 GMT
content-type: font/woff2
content-length: 357732
x-amz-id-2: Br9dLqYU+N0M21J3AdD3adYutgDrGYL4/h2kL9hHFdENBbKCgS68fYnRzA9lfTKQEVSWKKTqUwm0p6STsQ5Q+A==
x-amz-request-id: 171DZT9BFWTJYKHF
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Mon, 07 Feb 2022 20:26:45 GMT
etag: "aca950cc283a103f77e0001fb67043b7"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 2476514
accept-ranges: bytes
server: cloudflare
cf-ray: 8a1deea7c9151c02-OSL
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/video.js/7.0.0/video.min.js
200 OK 90 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/video.js/7.0.0/video.min.js
IP
Requested by https://wecima.show/run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384/?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626
Certificate IssuerLet's Encrypt
Subjectcdnjs.cloudflare.com
Fingerprint3B:5B:7C:DD:19:E8:16:5A:09:22:D6:1E:03:84:8D:B9:A1:32:BF:8E
ValiditySun, 02 Jun 2024 00:47:32 GMT - Sat, 31 Aug 2024 00:47:31 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65141)
Hash 32803413b97579648bb6d086fde72f08
8a7d229a24879f094e80b78e417c90d07cdc4f13
8636f49e04c3b2b95dbdc4bc2dfff6d5babbfd642eab954087deaa7c2c2fae11
GET /ajax/libs/video.js/7.0.0/video.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 12 Jul 2024 03:26:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 89934
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb0401f-6092d"
last-modified: Mon, 04 May 2020 16:17:35 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 582890
expires: Wed, 02 Jul 2025 03:26:31 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=38qkMciyiYRiPhoM7TNATcR7RBbkclhlAJfJHqH6kTQWDnbGaTzouinsojzYY06Jp5LGj%2FGMqtRB9E%2BoMxZe%2FRgsVC5QcYt3LiO2fPgTDbiIQEUEiYtItp5gIyWKKy1hjCq74qET"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8a1deea98c6e569f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash 6571911fa39391af6f46267310c602a5
d58f06385c7f6c3fadbc0f81bdd12a6105bee9d3
80bcb629b57ff4c1dc45f8b4eebda1dc2f64ba360a2ac711fc4a196997fd03eb
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "80BCB629B57FF4C1DC45F8B4EEBDA1DC2F64BA360A2AC711FC4A196997FD03EB"
Last-Modified: Thu, 11 Jul 2024 23:20:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11406
Expires: Fri, 12 Jul 2024 06:36:37 GMT
Date: Fri, 12 Jul 2024 03:26:31 GMT
Connection: keep-alive
GET my.rtmark.net/gid.js
200 OK 65 B IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerLet's Encrypt
Subjectrtmark.net
Fingerprint4B:EF:80:EB:90:B5:8C:01:82:25:B6:92:59:BE:A9:6A:C7:83:75:8E
ValidityFri, 05 Jul 2024 22:30:11 GMT - Thu, 03 Oct 2024 22:30:10 GMT
Hash 98cae5a35088f6f1ee69edd888d72d46
2540127c9475aec06bdb92aa4891c63a76df479f
a2d40af2ff9dbd4f6c0b70edb3cd794e7180327197c46707486ad170bc9de53f
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 12 Jul 2024 03:26:32 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://wecima.show
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0800979d0fb54d80e6e82789f92b8117; expires=Sat, 12 Jul 2025 03:26:32 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET wecima.show/wp-content/uploads/2024/07/Kinds-of-Kindness-2024.jpg
200 OK 74 kB URL GET HTTP/3 wecima.show/wp-content/uploads/2024/07/Kinds-of-Kindness-2024.jpg
IP
Requested by https://wecima.show/run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384/?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626
Certificate IssuerGoogle Trust Services
Subjectwecima.show
Fingerprint8B:CF:D8:AD:8D:E0:EA:16:FA:F9:1D:85:8F:4C:27:51:56:F3:33:F7
ValidityWed, 05 Jun 2024 01:39:10 GMT - Tue, 03 Sep 2024 01:39:09 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x900, components 3
Hash 924174c41b0b0b65484abf495c46b454
d99540f59249ade00e1277077d84ec3f30703d29
f9a656a76112154022c7e2f24cece024c8c87a76603d20dab3f3217c9a9c665b
GET /wp-content/uploads/2024/07/Kinds-of-Kindness-2024.jpg HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384/?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626
Cookie: _ga_6JHTFKY3P3=GS1.1.1720754791.1.0.1720754791.0.0.0; _ga=GA1.1.1976059615.1720754791
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 12 Jul 2024 03:26:32 GMT
content-type: image/jpeg
content-length: 73875
last-modified: Thu, 04 Jul 2024 11:17:45 GMT
etag: "668684d9-12093"
vary: Accept, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gqZp6j2wg5eUSNuKBRYEiZcF4%2Bdc0T%2FpGA%2FZUsifyjv1iCKjuNUJIaYzUD%2FsSlEZo0oZUkdJBPWrPIrNIjVAKL%2F05eMS1WNjk88nYbbxlam8OuCQ1NajZzvjHysR6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a1deea95cacb503-OSL
alt-svc: h3=":443"; ma=86400
GET code.jquery.com/jquery-3.5.1.min.js
200 OK 31 kB URL GET HTTP/2 code.jquery.com/jquery-3.5.1.min.js
IP
Requested by https://wecima.show/run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384/?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5
ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /jquery-3.5.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d84"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 12 Jul 2024 03:26:32 GMT
age: 5435581
x-served-by: cache-lga21981-LGA, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 64, 370636
x-timer: S1720754792.020384,VS0,VE0
vary: Accept-Encoding
content-length: 30879
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash 50e4489707989517510128817aedd2ea
36a54d7b34a9ac621715b569e5a870f62671c574
3e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40"
Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20046
Expires: Fri, 12 Jul 2024 09:00:38 GMT
Date: Fri, 12 Jul 2024 03:26:32 GMT
Connection: keep-alive
GET unpkg.com/@videojs/themes@1/dist/forest/index.css
302 Found 574 B URL GET HTTP/2 unpkg.com/@videojs/themes@1/dist/forest/index.css
IP
Requested by https://wecima.show/run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384/?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint1E:BD:61:21:20:80:6D:7A:38:A4:15:7A:FB:C2:B0:50:AF:1F:F6:31
ValidityThu, 30 May 2024 03:44:12 GMT - Wed, 28 Aug 2024 03:44:11 GMT
File type ASCII text, with no line terminators
Hash a0c45873abcf490e08dea28ec700a32b
59dbfe79533bbce749155f6ca998b4cc25ac4388
2cba5442f8102c3d1868e6ec2f6ea895e651e9ec7a498985d74ae7308ca5a578
GET /@videojs/themes@1/dist/forest/index.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 12 Jul 2024 03:26:32 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /@videojs/themes@1.0.1/dist/forest/index.css
vary: Accept, Accept-Encoding
content-encoding: br
via: 1.1 fly.io
fly-request-id: 01J2JFMSJ46MM1SYKXBCTE6J0R-arn
cf-cache-status: EXPIRED
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8a1deea9eb5056c4-OSL
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash 50e4489707989517510128817aedd2ea
36a54d7b34a9ac621715b569e5a870f62671c574
3e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40"
Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20046
Expires: Fri, 12 Jul 2024 09:00:38 GMT
Date: Fri, 12 Jul 2024 03:26:32 GMT
Connection: keep-alive
GET unpkg.com/@videojs/themes@1.0.1/dist/forest/index.css
200 OK 10 kB URL GET HTTP/2 unpkg.com/@videojs/themes@1.0.1/dist/forest/index.css
IP
Requested by https://wecima.show/run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384/?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint1E:BD:61:21:20:80:6D:7A:38:A4:15:7A:FB:C2:B0:50:AF:1F:F6:31
ValidityThu, 30 May 2024 03:44:12 GMT - Wed, 28 Aug 2024 03:44:11 GMT
File type ASCII text, with very long lines (4705), with no line terminators
Hash 98f1320ad97b9d00d843e72159ad5a41
4d112d6a9f1ccd8b9d8cc6e8656cc79286453a0b
85ea9da0a74f01fd6b4d7949be984a901049af62bf5d84208310f506dd3fab79
GET /@videojs/themes@1.0.1/dist/forest/index.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wecima.show/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 12 Jul 2024 03:26:32 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Wed, 28 Oct 2020 04:24:35 GMT
etag: "1261-TREtap8czYudjMboZWzHkoZFOgs"
via: 1.1 fly.io
fly-request-id: 01J08NKYFKN2GX3V5CTBE1BXQY-arn
cf-cache-status: HIT
age: 2476764
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8a1deeaaeb9e56c4-OSL
X-Firefox-Spdy: h2
GET wecima.show/wp-content/themes/Mycima2021/Style/fonts.css
404 Not Found 57 kB URL GET HTTP/3 wecima.show/wp-content/themes/Mycima2021/Style/fonts.css
IP
Requested by https://wecima.show/run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384/?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626
Certificate IssuerGoogle Trust Services
Subjectwecima.show
Fingerprint8B:CF:D8:AD:8D:E0:EA:16:FA:F9:1D:85:8F:4C:27:51:56:F3:33:F7
ValidityWed, 05 Jun 2024 01:39:10 GMT - Tue, 03 Sep 2024 01:39:09 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (52699)
Hash 173afab875de5fdb0bdf8da068dd254e
9c9eed70f8ead549ea2dce1ce38798af17d0e40c
9a4f6e4492d9ffb1a03a1488500732d928f99408e9d55dd89bda31995632f338
GET /wp-content/themes/Mycima2021/Style/fonts.css HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384/?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626
Cookie: _ga_6JHTFKY3P3=GS1.1.1720754791.1.0.1720754791.0.0.0; _ga=GA1.1.1976059615.1720754791
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Fri, 12 Jul 2024 03:26:32 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2UgUiDJpUTTc5l6nyN1vbPAWU%2FVzyXAiECC60ooCaPj7rjt0kL01t2cnTmAy4WEXHfiGyXYT4ddWm2SrG9zF1tWZj%2Fc4xtMloHBAuJFLL2z6gId1HH9qyQqXngCbsg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a1deea95ca9b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET unpkg.com/videojs-flash@2.2.1/dist/videojs-flash.js
200 OK 20 kB URL GET HTTP/2 unpkg.com/videojs-flash@2.2.1/dist/videojs-flash.js
IP
Requested by https://wecima.show/run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384/?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint1E:BD:61:21:20:80:6D:7A:38:A4:15:7A:FB:C2:B0:50:AF:1F:F6:31
ValidityThu, 30 May 2024 03:44:12 GMT - Wed, 28 Aug 2024 03:44:11 GMT
File type JavaScript source, ASCII text
Hash b671db9a73a06770313c1a05bcdc0b58
12280acce4192448e93e3b2ef9e1adf6c6eba94a
9162832cc3ed9507d8f869dd0d4fd0dacde05a078172d82a98b05e0aef1f1a34
GET /videojs-flash@2.2.1/dist/videojs-flash.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wecima.show/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 12 Jul 2024 03:26:32 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "99ef-EigKzOQZJEjpPjsu+eGt9sbrqUo"
via: 1.1 fly.io
fly-request-id: 01J214ZZTDBDCZWPCMD9VGFC36-arn
cf-cache-status: HIT
age: 581592
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8a1deeaaeb9d56c4-OSL
X-Firefox-Spdy: h2
GET unpkg.com/videojs-contrib-hls@5.15.0/dist/videojs-contrib-hls.js
200 OK 218 kB URL GET HTTP/2 unpkg.com/videojs-contrib-hls@5.15.0/dist/videojs-contrib-hls.js
IP
Requested by https://wecima.show/run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384/?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint1E:BD:61:21:20:80:6D:7A:38:A4:15:7A:FB:C2:B0:50:AF:1F:F6:31
ValidityThu, 30 May 2024 03:44:12 GMT - Wed, 28 Aug 2024 03:44:11 GMT
File type JavaScript source, ASCII text, with very long lines (857)
Size 218 kB (218389 bytes)
Hash f4cfc74056724c22c4841e1d085e51e2
c9d7412fe37b091832074ee9c5656849e87ef41c
aa938226e6eddc96da5a52d7a9aba85c6b4eed0e56ad1ca66fd8f5ee8bb0acd1
GET /videojs-contrib-hls@5.15.0/dist/videojs-contrib-hls.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wecima.show/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 12 Jul 2024 03:26:32 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "af180-yddBL+N7CRgyB07pxWVoSeh+9Bw"
via: 1.1 fly.io
fly-request-id: 01J214N0KNJG95T26R59H1770S-arn
cf-cache-status: HIT
age: 581951
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8a1deeaaeb9b56c4-OSL
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash 21dadc518ce5e19088944f636a42771f
bb7336fbe07ad61a2649e25fb8b18e6f38e73ffb
b501ead7884c51645f78951c99b53dd10b3fdcd60102f72641b10ac34766b6ca
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B501EAD7884C51645F78951C99B53DD10B3FDCD60102F72641B10AC34766B6CA"
Last-Modified: Fri, 12 Jul 2024 01:41:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18303
Expires: Fri, 12 Jul 2024 08:31:35 GMT
Date: Fri, 12 Jul 2024 03:26:32 GMT
Connection: keep-alive
GET tgb4.top15top.shop/n7f7jq6tmfns/Kinds.of.Kindness.2024.720p.CAMRip.SUB.Wecima.tube.mp4.html?Key=d5fWdatJjN4FgnIsx0U_NQ&Expires=1720765032
302 Found 0 B URL GET HTTP/2 tgb4.top15top.shop/n7f7jq6tmfns/Kinds.of.Kindness.2024.720p.CAMRip.SUB.Wecima.tube.mp4.html?Key=d5fWdatJjN4FgnIsx0U_NQ&Expires=1720765032
IP
Requested by https://wecima.show/run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384/?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626
Certificate IssuerGoogle Trust Services
Subjecttop15top.shop
Fingerprint29:5F:09:F6:41:9B:F4:C0:3F:3F:57:87:52:5E:D9:15:60:B3:97:D4
ValidityTue, 11 Jun 2024 20:13:25 GMT - Mon, 09 Sep 2024 20:13:24 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /n7f7jq6tmfns/Kinds.of.Kindness.2024.720p.CAMRip.SUB.Wecima.tube.mp4.html?Key=d5fWdatJjN4FgnIsx0U_NQ&Expires=1720765032 HTTP/1.1
Host: tgb4.top15top.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 12 Jul 2024 03:26:32 GMT
content-length: 0
location: https://varcdnx10-18.erea12.shop:82/d/nvrtvoaxbgeyf3tkeipi7kyyffoybumbo7b3u2hx5hnpsdl2pkvdwbgd6vrqrz6tph75z4eb/Kinds.of.Kindness.2024.720p.CAMRip.SUB.Wecima.tube.mp4
set-cookie: lang=english; domain=.tgb4.top15top.shop; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tXN1u8WDcNyuXTJJK0h3lDzcZt5NAet%2Fx9RDPlXgjQVsGXCoUDr8tvDC98UXLtwmX%2FsXTMJmXd%2BM5mWJ6NL2pAbmxjQjQxGm9Mk5DwiaQKdBQfb%2BfmXpAyIUqUjuDL2aPCVE%2BCs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a1deeaf3f48568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET wecima.show/run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626
301 Moved Permanently 18 kB URL GET HTTP/3 wecima.show/run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerGoogle Trust Services
Subjectwecima.show
Fingerprint8B:CF:D8:AD:8D:E0:EA:16:FA:F9:1D:85:8F:4C:27:51:56:F3:33:F7
ValidityWed, 05 Jun 2024 01:39:10 GMT - Tue, 03 Sep 2024 01:39:09 GMT
Hash 2a2ac783c2bf6831fd84b0a7f03342f4
9765b1ed5458d64d519971be7f96ca753f14c55f
39172f0f2ee37c20f013412e4db6baf258798013bcf394267a4f863a5849a3a2
GET /run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626 HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Cookie: _ga_6JHTFKY3P3=GS1.1.1720754791.1.0.1720754791.0.0.0; _ga=GA1.1.1976059615.1720754791
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 301 Moved Permanently
date: Fri, 12 Jul 2024 03:26:31 GMT
content-type: text/html; charset=UTF-8
location: https://wecima.show/run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384/?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626
x-redirect-by: WordPress
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rBeDTVSyAGgmUZ54T75jx1ezfmthaIvkP6nG4qdPB5wjlMr8ISzmLOI9YhJP%2B072H1xorYrdef%2FUc%2B3eTg1xP3dmbnKrMn5qlxo3aWw2pzyp1hvdJVxVfA27iZjHiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a1deea56b43b503-OSL
alt-svc: h3=":443"; ma=86400
GET inklinkor.com/tag.min.js
200 OK 35 kB IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerGoogle Trust Services
Subjectinklinkor.com
Fingerprint7F:21:50:36:30:E5:54:C3:4F:43:58:95:A3:71:77:41:A8:A7:F0:93
ValiditySat, 15 Jun 2024 18:50:43 GMT - Fri, 13 Sep 2024 18:50:42 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 63cd425abc3398f2072a1b6625053e2a
ec5f0dfc21c6126ede5c7e18a3e0374eebdd532f
28673b24e2227242ef3c6100103d6bfa1254575bac8849d7fbd604cec928f7ef
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /tag.min.js HTTP/1.1
Host: inklinkor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 12 Jul 2024 03:26:31 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: 47857dc54bd47ca8663f355ba98bb125
cache-control: max-age=86400
last-modified: Fri, 12 Jul 2024 02:05:46 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
expires: Sat, 13 Jul 2024 02:43:33 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 2578
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YBG0dVwCV%2BxiZGHqdlu5bxln%2FE4DKlQeWGgF1jVOHsEAjPpEud0ok2%2BH%2F42QMNd3tJvrq6w0e6xAfdt0iXOtT6ofSvF9HWIy6WuSvv6%2F5RCF9lDNoY0vvpSjLgkOL7Eu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a1deea3bb14b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET varcdnx10-18.erea12.shop:82/d/nvrtvoaxbgeyf3tkeipi7kyyffoybumbo7b3u2hx5hnpsdl2pkvdwbgd6vrqrz6tph75z4eb/Kinds.of.Kindness.2024.720p.CAMRip.SUB.Wecima.tube.mp4
206 Partial Content 10 MB URL GET HTTP/1.1 varcdnx10-18.erea12.shop:82/d/nvrtvoaxbgeyf3tkeipi7kyyffoybumbo7b3u2hx5hnpsdl2pkvdwbgd6vrqrz6tph75z4eb/Kinds.of.Kindness.2024.720p.CAMRip.SUB.Wecima.tube.mp4
IP
Requested by https://wecima.show/run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384/?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626
Certificate IssuerLet's Encrypt
Subject*.erea12.shop
FingerprintD4:98:29:5A:4E:CC:78:A9:BD:98:EE:47:94:A1:61:B8:86:4A:47:D8
ValiditySun, 26 May 2024 10:31:54 GMT - Sat, 24 Aug 2024 10:31:53 GMT
Size 10 MB (10059380 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /d/nvrtvoaxbgeyf3tkeipi7kyyffoybumbo7b3u2hx5hnpsdl2pkvdwbgd6vrqrz6tph75z4eb/Kinds.of.Kindness.2024.720p.CAMRip.SUB.Wecima.tube.mp4 HTTP/1.1
Host: varcdnx10-18.erea12.shop:82
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-
Referer: https://wecima.show/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
Server: nginx
Date: Fri, 12 Jul 2024 03:23:48 GMT
Content-Type: application/octet-stream
Content-Length: 1296924352
Last-Modified: Thu, 04 Jul 2024 10:55:10 GMT
Connection: close
Content-Disposition: attachment
ETag: "66867f8e-4d4d7ec0"
Content-Range: bytes 0-1296924351/1296924352
GET fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l5anHrFpiQ.woff2
200 OK 11 kB URL GET HTTP/2 fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l5anHrFpiQ.woff2
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintC4:9C:27:09:1C:F7:14:C9:86:F0:B5:42:0B:8A:D2:AE:5E:AE:98:04
ValidityThu, 13 Jun 2024 16:31:03 GMT - Thu, 05 Sep 2024 16:31:02 GMT
File type Web Open Font Format (Version 2), TrueType, length 10580, version 1.0
Hash 245d8f75ea8c5799e5de85a8a7bd4172
7f546a6c551e87bb224124789c11fdb2f6429479
2f96f4fd6fe569f64e044e0409274b2f2d79976497a9b275deb497dbbfc542b0
GET /s/tajawal/v3/Iurf6YBj_oCad4k1l5anHrFpiQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 10580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 05 Jul 2024 09:02:33 GMT
expires: Sat, 05 Jul 2025 09:02:33 GMT
cache-control: public, max-age=31536000
age: 584637
last-modified: Tue, 16 Jul 2019 03:31:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET rangauck.com/5/4796941/?abt_opts=1&oo=1&js_build=iclick-v1.842.6-auto&userId=0800979d0fb54d80e6e82789f92b8117
200 OK 4.3 kB URL GET HTTP/2 rangauck.com/5/4796941/?abt_opts=1&oo=1&js_build=iclick-v1.842.6-auto&userId=0800979d0fb54d80e6e82789f92b8117
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerLet's Encrypt
Subjectrangauck.com
FingerprintF1:BB:9F:BC:19:FA:97:5B:73:90:06:6A:C2:95:D4:AC:1D:9E:C5:C8
ValidityThu, 11 Jul 2024 23:46:43 GMT - Wed, 09 Oct 2024 23:46:42 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4266), with no line terminators
Hash f6385f1b49ff2334788544efc14bbb01
6c6206654ec96d38eba072b7cab50eb92e5ed69f
86fd126f7264fbad101455e23365061d818c1a0812c9f7ed3e3b366521e7b73e
GET /5/4796941/?abt_opts=1&oo=1&js_build=iclick-v1.842.6-auto&userId=0800979d0fb54d80e6e82789f92b8117 HTTP/1.1
Host: rangauck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Cookie: OAID=008097c2ce094bffe09caef9bda10bde; oaidts=1720754791
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 12 Jul 2024 03:26:32 GMT
content-type: application/json
x-trace-id: 2eeb06f74380d03ef58c2ca5b8e9f14b
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://wecima.show
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=0800979d0fb54d80e6e82789f92b8117; expires=Sat, 12 Jul 2025 03:26:32 GMT; path=/; secure; SameSite=None
oaidts=1720754792; expires=Sat, 12 Jul 2025 03:26:32 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Fri, 19 Jul 2024 03:26:32 GMT; path=/; secure; SameSite=None
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
GET unpkg.com/videojs-contrib-hls/dist/videojs-contrib-hls.js
302 Found 717 kB URL GET HTTP/2 unpkg.com/videojs-contrib-hls/dist/videojs-contrib-hls.js
IP
Requested by https://wecima.show/run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384/?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint1E:BD:61:21:20:80:6D:7A:38:A4:15:7A:FB:C2:B0:50:AF:1F:F6:31
ValidityThu, 30 May 2024 03:44:12 GMT - Wed, 28 Aug 2024 03:44:11 GMT
Size 717 kB (717184 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /videojs-contrib-hls/dist/videojs-contrib-hls.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 12 Jul 2024 03:26:31 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /videojs-contrib-hls@5.15.0/dist/videojs-contrib-hls.js
vary: Accept, Accept-Encoding
content-encoding: br
via: 1.1 fly.io
fly-request-id: 01J2JF30B5Z7FQJ4DS5E8K7X97-arn
cf-cache-status: HIT
age: 582
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8a1deea9db4d56c4-OSL
X-Firefox-Spdy: h2
GET wecima.show/wp-content/themes/Mycima2021/js/vidjs-2.js
200 OK 27 kB URL GET HTTP/3 wecima.show/wp-content/themes/Mycima2021/js/vidjs-2.js
IP
Requested by https://wecima.show/run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384/?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626
Certificate IssuerGoogle Trust Services
Subjectwecima.show
Fingerprint8B:CF:D8:AD:8D:E0:EA:16:FA:F9:1D:85:8F:4C:27:51:56:F3:33:F7
ValidityWed, 05 Jun 2024 01:39:10 GMT - Tue, 03 Sep 2024 01:39:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/Mycima2021/js/vidjs-2.js HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384/?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626
Cookie: _ga_6JHTFKY3P3=GS1.1.1720754791.1.0.1720754791.0.0.0; _ga=GA1.1.1976059615.1720754791
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 12 Jul 2024 03:26:31 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 06 Jun 2023 18:43:27 GMT
etag: W/"647f7e4f-6a93"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 5310
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fcxG3hT1sxPOUfBOyeoOKfMRH7rXHe7FSYs9K5%2F%2FB2m2%2BxYqm1Wcw%2BNWEVb7Uowgznh25atpalYE70M%2F5SJKDew5wSVLULeCTOojXEjdOfwkpYSl0KA3%2BiueVx6vdA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a1deea95caab503-OSL
alt-svc: h3=":443"; ma=86400
GET wecima.show/run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384/?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626
200 OK 1.1 MB URL GET HTTP/3 wecima.show/run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384/?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerGoogle Trust Services
Subjectwecima.show
Fingerprint8B:CF:D8:AD:8D:E0:EA:16:FA:F9:1D:85:8F:4C:27:51:56:F3:33:F7
ValidityWed, 05 Jun 2024 01:39:10 GMT - Tue, 03 Sep 2024 01:39:09 GMT
Size 1.1 MB (1075565 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384/?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626 HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
DNT: 1
Connection: keep-alive
Cookie: _ga_6JHTFKY3P3=GS1.1.1720754791.1.0.1720754791.0.0.0; _ga=GA1.1.1976059615.1720754791
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 12 Jul 2024 03:26:31 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CeiFctzJ8cdBsalfp0ZkBh3w0eXVgFYzYR69AcJEwmxXD%2BT8SFSHbR%2BvhxtE7JAkjEOmceZBnH06Fvecf7qT%2FSjIDy%2Bh2Ywxcf04SDVkEillde3XQGlptPIC2WY9nQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a1deea69ba4b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-solid-900.woff2
200 OK 304 kB URL GET HTTP/2 site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-solid-900.woff2
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D
ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 303544, version 768.256
Size 304 kB (303544 bytes)
Hash 78863e0f6e65fbe6175866e6d5b6f18a
8cda0fc2a701bd6dcfaa94261178fa78df1d15de
82877c6d33c5d786db4815f756437c3e853e08bf8c6c267fd246760d2a96d029
GET /releases/v6.0.0/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://site-assets.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 12 Jul 2024 03:26:31 GMT
content-type: font/woff2
content-length: 303544
x-amz-id-2: 70AFYw5W6X/6B+UZSIr10/JYfahYDHUxNUMInPomCbew3adJ1a4DSF9S954plWfYCrlapxXd1wg=
x-amz-request-id: 1718WVNTCARH9CZE
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Mon, 07 Feb 2022 20:26:45 GMT
etag: "78863e0f6e65fbe6175866e6d5b6f18a"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 2476514
accept-ranges: bytes
server: cloudflare
cf-ray: 8a1deea7c9131c02-OSL
X-Firefox-Spdy: h2
GET site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-brands-400.woff2
200 OK 105 kB URL GET HTTP/2 site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-brands-400.woff2
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D
ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 104740, version 768.256
Size 105 kB (104740 bytes)
Hash 27ed7b486bfe3163c0d312b6d2aa9069
97cb3773774b591841557c859b0f1b4b1b1cde09
fb347c28258cfeeb9b0904c469d8049fcb2ad4d1bb5e4c9601e0edda3b76bb69
GET /releases/v6.0.0/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://site-assets.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 12 Jul 2024 03:26:31 GMT
content-type: font/woff2
content-length: 104740
x-amz-id-2: WQhc7iefw+7n8tjesrCKJfuUjmpT+sVgEb9vFiXVC9f1FMzUoOpOC2hg2CdsuCqkGHgGnjPBYlGYPKMYhm7r8g==
x-amz-request-id: 1713ET5XKY9DAR56
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Mon, 07 Feb 2022 20:26:45 GMT
etag: "27ed7b486bfe3163c0d312b6d2aa9069"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 2476447
accept-ranges: bytes
server: cloudflare
cf-ray: 8a1deea7b9101c02-OSL
X-Firefox-Spdy: h2
GET wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
200 OK 341 kB URL User Request GET HTTP/2 wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
IP
Certificate IssuerGoogle Trust Services
Subjectwecima.show
Fingerprint8B:CF:D8:AD:8D:E0:EA:16:FA:F9:1D:85:8F:4C:27:51:56:F3:33:F7
ValidityWed, 05 Jun 2024 01:39:10 GMT - Tue, 03 Sep 2024 01:39:09 GMT
Size 341 kB (340656 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/ HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 12 Jul 2024 03:26:30 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FrFZzyQOfpInlgVlabQYLY9nimtviuWM52samExYIZuJJdRvtyyR5b%2FI7Sj2Aq2d45lnZexgPsptcCYNMcVFe3FFYQofZnlhF5ew5h5g7BHUB9ThDcN0iaR03%2BoZzQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a1dee9e9e0156aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET unpkg.com/videojs-flash/dist/videojs-flash.js
302 Found 39 kB URL GET HTTP/2 unpkg.com/videojs-flash/dist/videojs-flash.js
IP
Requested by https://wecima.show/run/4fcabd96872f4a587491ca3cfa79b6f6b854d21a6667cd5046136db9a2f862a02b8d2dd539ce5ac6c1e39b545f7108ee3c954bcdb5deeb5eb3e9d399d96574beb33c80fb0e8a7086d3d8db34c318573d1b55296250637ea4ea2ebb46c58f43c1e42384/?Key=BW1mnkZPxhwOV288Ne852g&Expires=1720758626
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint1E:BD:61:21:20:80:6D:7A:38:A4:15:7A:FB:C2:B0:50:AF:1F:F6:31
ValidityThu, 30 May 2024 03:44:12 GMT - Wed, 28 Aug 2024 03:44:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /videojs-flash/dist/videojs-flash.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 12 Jul 2024 03:26:31 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /videojs-flash@2.2.1/dist/videojs-flash.js
vary: Accept, Accept-Encoding
content-encoding: br
via: 1.1 fly.io
fly-request-id: 01J2JFHXT7X4FG8ZJY6F8C93K9-arn
cf-cache-status: HIT
age: 93
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8a1deea9eb4f56c4-OSL
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l5anHrRpiYlJ.woff2
200 OK 8.9 kB URL GET HTTP/2 fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l5anHrRpiYlJ.woff2
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintC4:9C:27:09:1C:F7:14:C9:86:F0:B5:42:0B:8A:D2:AE:5E:AE:98:04
ValidityThu, 13 Jun 2024 16:31:03 GMT - Thu, 05 Sep 2024 16:31:02 GMT
File type Web Open Font Format (Version 2), TrueType, length 8948, version 1.0
Hash 3ca4aaa12ffa2e1f165db59f857ee5b0
1a72fa6677fa1b70f43d4a0abf3c309c211ee9fa
d404f987f0d261c3eff16cd778fb138d5c604af7f361e609ef0b91bac16d7e67
GET /s/tajawal/v3/Iurf6YBj_oCad4k1l5anHrRpiYlJ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8948
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Jul 2024 11:16:35 GMT
expires: Fri, 11 Jul 2025 11:16:35 GMT
cache-control: public, max-age=31536000
age: 58195
last-modified: Tue, 16 Jul 2019 03:31:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET gaujokop.com/?rb=MKBiL4Qn0kCdiIfAmROyDMr9ZeQChFGRBlNe_B7NSmthxPDiJq8tU__wpgO_PeuteZRQSVFG6B3nrVuv4a-f1bJyLsQ4EEbkGtTJF-jKxiengTs2f9_t1K37OXayaGFc0DWyKPFNR7qpgjoBoca7Bm-PKw0_wm4BO0LIb2vrippuD25fLV7YV3xWqMt0klRvxtW3L1CqkPdp92MlfS0qzFdXb6yRJwG_ut8lTnzt0yw65HuX8mgu6dhosCmPV-U9_xGoFsLS4Yg%3D&request_ab2=1312620&zoneid=4796941&js_build=iclick-v1.842.6-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=981&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=1&pl=https%3A%2F%2Fwecima.show%2Fwatch%2F%25D9%2585%25D8%25B4%25D8%25A7%25D9%2587%25D8%25AF%25D8%25A9-%25D9%2581%25D9%258A%25D9%2584%25D9%2585-kinds-of-kindness-2024-%25D9%2585%25D8%25AA%25D8%25B1%25D8%25AC%25D9%2585%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.842.6-auto&navlng=en-US&pnt=0&pnrc=0&wasm=1&bs=3f919279-a3d2-497e-bd54-e5aa425db05d&userId=0800979d0fb54d80e6e82789f92b8117&m=link
200 OK 3.0 kB URL GET HTTP/2 gaujokop.com/?rb=MKBiL4Qn0kCdiIfAmROyDMr9ZeQChFGRBlNe_B7NSmthxPDiJq8tU__wpgO_PeuteZRQSVFG6B3nrVuv4a-f1bJyLsQ4EEbkGtTJF-jKxiengTs2f9_t1K37OXayaGFc0DWyKPFNR7qpgjoBoca7Bm-PKw0_wm4BO0LIb2vrippuD25fLV7YV3xWqMt0klRvxtW3L1CqkPdp92MlfS0qzFdXb6yRJwG_ut8lTnzt0yw65HuX8mgu6dhosCmPV-U9_xGoFsLS4Yg%3D&request_ab2=1312620&zoneid=4796941&js_build=iclick-v1.842.6-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=981&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=1&pl=https%3A%2F%2Fwecima.show%2Fwatch%2F%25D9%2585%25D8%25B4%25D8%25A7%25D9%2587%25D8%25AF%25D8%25A9-%25D9%2581%25D9%258A%25D9%2584%25D9%2585-kinds-of-kindness-2024-%25D9%2585%25D8%25AA%25D8%25B1%25D8%25AC%25D9%2585%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.842.6-auto&navlng=en-US&pnt=0&pnrc=0&wasm=1&bs=3f919279-a3d2-497e-bd54-e5aa425db05d&userId=0800979d0fb54d80e6e82789f92b8117&m=link
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerLet's Encrypt
Subjectgaujokop.com
Fingerprint4F:61:8F:EF:54:76:C2:6E:A7:A8:C7:CB:BE:90:0B:2E:41:F9:10:C0
ValidityFri, 12 Jul 2024 00:34:13 GMT - Thu, 10 Oct 2024 00:34:12 GMT
File type troff or preprocessor input, ASCII text, with very long lines (3056), with no line terminators
Hash 2448a0eaf6f0e1ab1ae8e7ae791c50d3
9eb6bad48e560b9e5e1b923a45c7ab35e5fef1da
116d50f3b472fd8afc9a1741a7e500bab3ca740e4f520b506e93a19800bbf595
GET /?rb=MKBiL4Qn0kCdiIfAmROyDMr9ZeQChFGRBlNe_B7NSmthxPDiJq8tU__wpgO_PeuteZRQSVFG6B3nrVuv4a-f1bJyLsQ4EEbkGtTJF-jKxiengTs2f9_t1K37OXayaGFc0DWyKPFNR7qpgjoBoca7Bm-PKw0_wm4BO0LIb2vrippuD25fLV7YV3xWqMt0klRvxtW3L1CqkPdp92MlfS0qzFdXb6yRJwG_ut8lTnzt0yw65HuX8mgu6dhosCmPV-U9_xGoFsLS4Yg%3D&request_ab2=1312620&zoneid=4796941&js_build=iclick-v1.842.6-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=981&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=1&pl=https%3A%2F%2Fwecima.show%2Fwatch%2F%25D9%2585%25D8%25B4%25D8%25A7%25D9%2587%25D8%25AF%25D8%25A9-%25D9%2581%25D9%258A%25D9%2584%25D9%2585-kinds-of-kindness-2024-%25D9%2585%25D8%25AA%25D8%25B1%25D8%25AC%25D9%2585%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.842.6-auto&navlng=en-US&pnt=0&pnrc=0&wasm=1&bs=3f919279-a3d2-497e-bd54-e5aa425db05d&userId=0800979d0fb54d80e6e82789f92b8117&m=link HTTP/1.1
Host: gaujokop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wecima.show/
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 12 Jul 2024 03:26:33 GMT
content-type: application/json
x-trace-id: fd8737cc7ab06b74672356474e8451a3
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://wecima.show
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=0800979d0fb54d80e6e82789f92b8117; expires=Sat, 12 Jul 2025 03:26:32 GMT; path=/; secure; SameSite=None
oaidts=1720754792; expires=Sat, 12 Jul 2025 03:26:32 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Fri, 19 Jul 2024 03:26:32 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
GET wecima.tube/wp-content/uploads/2023/02/wecima-favicon-1.png
301 Moved Permanently 5.5 kB URL GET HTTP/2 wecima.tube/wp-content/uploads/2023/02/wecima-favicon-1.png
IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerGoogle Trust Services
Subjectwecima.tube
FingerprintBC:BA:61:CC:36:E9:30:41:85:02:CA:8A:5B:0E:DC:83:ED:F4:DD:FD
ValidityFri, 28 Jun 2024 02:18:53 GMT - Thu, 26 Sep 2024 02:18:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/2023/02/wecima-favicon-1.png HTTP/1.1
Host: wecima.tube
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 12 Jul 2024 03:26:31 GMT
content-type: text/html
location: https://wecima.show/wp-content/uploads/2023/02/wecima-favicon-1.png
cache-control: max-age=31536000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RRfzq5HBYxsHvoq0YGHI6Xho66qjUCuK0DVmxnNoMJCSZsPXyeY5G5vV4dGAHMhCXjMHsgsZg4YFc7MHaTFK%2BKxi6q0MabvARxMaz5QOf5A5T74H2yq2ps5FSxrk8A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a1deea46e72b51d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
POST wecima.show/insights.php
200 OK 35 B IP
Requested by https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Certificate IssuerGoogle Trust Services
Subjectwecima.show
Fingerprint8B:CF:D8:AD:8D:E0:EA:16:FA:F9:1D:85:8F:4C:27:51:56:F3:33:F7
ValidityWed, 05 Jun 2024 01:39:10 GMT - Tue, 03 Sep 2024 01:39:09 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 6b652cac01878c3fd56eb6144f8ec758
2fb0dbad10a7c55b807ebc198e20ed61e8e1569f
95eff1092198a47f11a7261d5419945c9b7745f457589fc3c9f1cbac4cd5fe95
POST /insights.php HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 12
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%81%D9%8A%D9%84%D9%85-kinds-of-kindness-2024-%D9%85%D8%AA%D8%B1%D8%AC%D9%85/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 12 Jul 2024 03:26:31 GMT
content-type: application/json
content-encoding: gzip
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P6wRMN%2Fno1vY12RuOOAvbvLwLEQkAGgtd%2FYowoXrvfHqJWnUcaRtIngOMfULOayz894i1OdNrRfO9PWyTO9ZdLAxQPrbwccM56x4r2Bty8y7DbypN0CMh3bxLgn9wA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a1deea36a73b503-OSL
alt-svc: h3=":443"; ma=86400
188.114.97.1
104.21.91.63
142.250.74.131
139.45.197.245
194.110.207.35
0.0.0.0