ww.hitstreams.live/channels/ksi-live-streams.php
301 Moved Permanently 0 B URL HTTP/1.1 ww.hitstreams.live/channels/ksi-live-streams.php
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS Severity Alert suricata medium ETPRO HUNTING Observed Unusual Host (ww.)
GET /channels/ksi-live-streams.php HTTP/1.1
Host: ww.hitstreams.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 14 Jan 2023 21:49:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 14 Jan 2023 22:49:35 GMT
Location: https://ww.hitstreams.live/channels/ksi-live-streams.php
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x38FV4EoT%2FcahgJME3rX8Ue1VUuH4v%2BSLnuq%2FDYL8dnKkdUyegZQWtLCVCnRW0ii4KOLFUgPWGu0Iy0eL0H0OPukvry51pcpfFgdyzuoBnUAj%2BEDqospF6POU%2FYGPGfDMBehe9Y%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7899951a29470afa-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8b4f1afb0e830b797238d34ab9254aa
e011acef3d05c959a65205d53b651ecd18a889fe
f7ceff5b4fda083c7449b7298c232224cf48a632dcb87233b646790de207d49c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7CEFF5B4FDA083C7449B7298C232224CF48A632DCB87233B646790DE207D49C"
Last-Modified: Thu, 12 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3705
Expires: Sat, 14 Jan 2023 22:51:20 GMT
Date: Sat, 14 Jan 2023 21:49:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3063227f59d1935298b0620fa7919145
478e1d8bef04b1f95381cac01829c03b6779d420
619281d3b9753bc6d2845786da75e8566687362769517aacf90f953ffbb8407c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "619281D3B9753BC6D2845786DA75E8566687362769517AACF90F953FFBB8407C"
Last-Modified: Sat, 14 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14041
Expires: Sun, 15 Jan 2023 01:43:36 GMT
Date: Sat, 14 Jan 2023 21:49:35 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 14 Jan 2023 21:42:03 GMT
content-type: application/json
age: 452
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7bd85a261739c122eefb74ffddaec99
e2e059b0740592e8591d432249aafe5fcb8af23c
71bdd130b8d143f228542f678e91c98ab4e5844fb9f47b036e15372660be25fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "71BDD130B8D143F228542F678E91C98AB4E5844FB9F47B036E15372660BE25FD"
Last-Modified: Sat, 14 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5819
Expires: Sat, 14 Jan 2023 23:26:35 GMT
Date: Sat, 14 Jan 2023 21:49:36 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 31da9b772bd767cfb59e69be19a5653e
8dea73edd90982f387d6159a65e50c42657e8a95
ee6449c1cfa3df192bde69903f2e7378ff420883a8ba11ae8398cbf911dc7166
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "EE6449C1CFA3DF192BDE69903F2E7378FF420883A8BA11AE8398CBF911DC7166"
Last-Modified: Thu, 12 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11372
Expires: Sun, 15 Jan 2023 00:59:08 GMT
Date: Sat, 14 Jan 2023 21:49:36 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 1xk2RguTqwwW+ZQSuT1SN9rvemxvJTQbhBVZbzgZms8Zppbb96Ryi4gCXECMUxWstk4aE3OPHR2icBsraHYnLA==
x-amz-request-id: 6WHRVPP0KZ0ST06P
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 14 Jan 2023 21:43:53 GMT
age: 343
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 21:49:36 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 31da9b772bd767cfb59e69be19a5653e
8dea73edd90982f387d6159a65e50c42657e8a95
ee6449c1cfa3df192bde69903f2e7378ff420883a8ba11ae8398cbf911dc7166
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "EE6449C1CFA3DF192BDE69903F2E7378FF420883A8BA11AE8398CBF911DC7166"
Last-Modified: Thu, 12 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11372
Expires: Sun, 15 Jan 2023 00:59:08 GMT
Date: Sat, 14 Jan 2023 21:49:36 GMT
Connection: keep-alive
i.imgur.com/NL3BScm.jpg
200 OK 9.5 kB IP
File type JPEG image data, progressive, precision 8, 442x114, components 3\012- data
Hash ec43e2e5cda2c56fc34289ddd3a5cb26
22fb5c79b2f82ce661e20b3362f44ecefd4ca79d
6cdde1b80c7d2e072eaf2affe8810fc2a1e6524ee7156beff729dafcab72eb21
GET /NL3BScm.jpg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Sun, 17 Apr 2022 00:37:57 GMT
etag: "ec43e2e5cda2c56fc34289ddd3a5cb26"
content-type: image/jpeg
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sat, 14 Jan 2023 21:49:36 GMT
age: 1345223
x-served-by: cache-iad-kcgs7200086-IAD, cache-bma1669-BMA
x-cache: HIT, HIT
x-cache-hits: 13771, 75
x-timer: S1673732976.373511,VS0,VE0
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 9542
X-Firefox-Spdy: h2
i.imgur.com/ouOv3ic.jpeg
200 OK 16 kB IP
File type JPEG image data, baseline, precision 8, 500x200, components 3\012- data
Hash ff7b2570d756dd59ddcaaf70797dadb6
f5eaf438ab4b55c1a3fde26a4922bc7e07cc3c9a
e9813388ecd6650c81ddf9b59ebe1a48a02dad82c20667d43e1fa7383030a293
GET /ouOv3ic.jpeg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Wed, 16 Nov 2022 12:02:44 GMT
etag: "ff7b2570d756dd59ddcaaf70797dadb6"
content-type: image/jpeg
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sat, 14 Jan 2023 21:49:36 GMT
age: 5132812
x-served-by: cache-iad-kiad7000158-IAD, cache-bma1669-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 9
x-timer: S1673732976.375862,VS0,VE0
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 16408
X-Firefox-Spdy: h2
i.imgur.com/DHYXOPq.png
200 OK 23 kB IP
File type PNG image data, 992 x 94, 8-bit/color RGBA, non-interlaced\012- data
Hash af7b20a1f16f44ef50c2b19d2d434842
1cfbe067f01885409e4ff3dfa550a8afb45f52bb
cf0b57000af272d66c7571a312f710e5c0d4a901f4a2d36695c317f58960fe87
GET /DHYXOPq.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Sat, 16 Apr 2022 14:16:56 GMT
etag: "af7b20a1f16f44ef50c2b19d2d434842"
content-type: image/png
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sat, 14 Jan 2023 21:49:36 GMT
age: 1338662
x-served-by: cache-iad-kiad7000101-IAD, cache-bma1669-BMA
x-cache: HIT, HIT
x-cache-hits: 4341, 129
x-timer: S1673732976.381686,VS0,VE0
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 22902
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/LMujaZzNWTM
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/LMujaZzNWTM
IP
Hash a2df8bde5a2d7351353e5a2ddd3978a4
f5e1b83fcb5f01a6e901bf15730eb60cc62384c2
bd4ef5684871315c328b7a11636f80bcc847508759d3c1d27d4f2cd51c9337f2
POST /s/gts1p5/LMujaZzNWTM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 21:49:36 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fc52c452b4176dabdd1a319c5e3fa51
e00b78bd1c6b5d71f2987fd9cdc8975804b668ae
224beac380dd44474b39343d4138c0e5d8a547523eb06a1c6d6c4a893d511e63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 21:49:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/sourcesanspro/v12/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v12/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16112, version 1.0\012- data
Hash 899c8f78ce650d4009d42443897aa723
d2e2faa9780b7fca5a5cb20a853dd7df55b3101e
a9950fa5ca9cf47072770900d259bcf6778aa1119652d2e706d5eb92df254199
GET /s/sourcesanspro/v12/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ww.hitstreams.live
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16112
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 14 Jan 2023 18:09:59 GMT
expires: Sun, 14 Jan 2024 18:09:59 GMT
cache-control: public, max-age=31536000
age: 13177
last-modified: Mon, 25 Mar 2019 20:10:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fc52c452b4176dabdd1a319c5e3fa51
e00b78bd1c6b5d71f2987fd9cdc8975804b668ae
224beac380dd44474b39343d4138c0e5d8a547523eb06a1c6d6c4a893d511e63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 21:49:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdnjs.cloudflare.com/ajax/libs/alpinejs/3.10.2/cdn.js
200 OK 19 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/alpinejs/3.10.2/cdn.js
IP
File type HTML document text\012- HTML document, ASCII text
Hash c848f68903228feec9050ffbe92769a9
e9ae597ddd3daad51f9ef02045c0eccf1854e228
6cb264e0de2033049544813c228420842bfc5bd07e189c318d796eab37f08a68
GET /ajax/libs/alpinejs/3.10.2/cdn.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:36 GMT
content-type: application/javascript; charset=utf-8
content-length: 18473
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "626098ad-4829"
last-modified: Wed, 20 Apr 2022 23:35:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 5486286
expires: Thu, 04 Jan 2024 21:49:36 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z0ah%2F9b2M4K5ejzvAMOHHMJ8mHP0F05CQX%2FonuoAf0rTO9Hje4Gj3SzUF3zsOpBC%2FrRGvGmq6CO8qOz2TEkqmRFBYBGRFO0mXlrF2piwpaMJZepyFS8hWePZeczOklAPjF1pSYMx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7899951f6dadb511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e804586be26c88b95d554afe0ef24d5c
6f99b1fe2330c4661608f17819a4490a92ca296c
38894b7977e8f8e790a71eedf8144799a77ccceb49771e7458392ad7916293db
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 21:49:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/LMujaZzNWTM
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/LMujaZzNWTM
IP
Hash a2df8bde5a2d7351353e5a2ddd3978a4
f5e1b83fcb5f01a6e901bf15730eb60cc62384c2
bd4ef5684871315c328b7a11636f80bcc847508759d3c1d27d4f2cd51c9337f2
POST /s/gts1p5/LMujaZzNWTM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 21:49:36 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-146658170-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-146658170-1
IP
File type ASCII text, with very long lines (1921)
Hash cad6bf375a13761a363c83bb7d48da92
6de74d45822bd30e47570126e234b188f263e1c0
4ee678c754ba17ace579c85763ada9a043cd2b9bdbcfbf065e83de2c16e0afe8
GET /gtag/js?id=UA-146658170-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 14 Jan 2023 21:49:36 GMT
expires: Sat, 14 Jan 2023 21:49:36 GMT
cache-control: private, max-age=900
last-modified: Sat, 14 Jan 2023 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44172
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-145079013-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-145079013-1
IP
File type ASCII text, with very long lines (1921)
Hash 78c628db9647da6db2b1aa1b5b2c7e2a
b91482f4da56895896c9c79429e133c0111b5cc5
834c8b8a31ac9c12f19d69010bf2c5d6d9416a1783408af056992278db4426b9
GET /gtag/js?id=UA-145079013-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://weakstream.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 14 Jan 2023 21:49:36 GMT
expires: Sat, 14 Jan 2023 21:49:36 GMT
cache-control: private, max-age=900
last-modified: Sat, 14 Jan 2023 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44171
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/cdnbye@latest/dist/clappr-plugin.min.js
200 OK 1.1 kB URL HTTP/2 cdn.jsdelivr.net/npm/cdnbye@latest/dist/clappr-plugin.min.js
IP
File type ASCII text, with very long lines (3010), with no line terminators
Hash a11054242cca130db5848f4b9d3ffaed
e507f254838103754b661b0ce51b6db68b884fe3
38e2fd24956be6f20f42772000e2d5ee1d5c305b0815a86795f56eee9dd8e8b9
GET /npm/cdnbye@latest/dist/clappr-plugin.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://weakstream.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.20.10
x-jsd-version-type: version
etag: W/"bc2-Zh9Ejh+gezJ0K1G3K4HjkkcIvTg"
content-encoding: gzip
accept-ranges: bytes
date: Sat, 14 Jan 2023 21:49:36 GMT
age: 31366
x-served-by: cache-fra-eddf8230109-FRA, cache-bma1637-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1148
X-Firefox-Spdy: h2
cdn.jsdelivr.net/gh/clappr/clappr-level-selector-plugin@latest/dist/level-selector.min.js
200 OK 10 kB URL HTTP/2 cdn.jsdelivr.net/gh/clappr/clappr-level-selector-plugin@latest/dist/level-selector.min.js
IP
File type HTML document, ASCII text, with very long lines (30387)
Hash 5245fb2ca8b98e72f9b7ae0323d76020
eb6493f5f66936432464d98c47f2f0b200309b5b
75d36b8e1e822c4f74c51fa0a97f24ef4c45afc6059d3df9b0f4cc37acd1f231
GET /gh/clappr/clappr-level-selector-plugin@latest/dist/level-selector.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://weakstream.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 0.3.0
x-jsd-version-type: version
etag: W/"76e2-qotJurjpL/BNF6Wix8Da/EJuL+k"
content-encoding: gzip
accept-ranges: bytes
date: Sat, 14 Jan 2023 21:49:36 GMT
age: 9863
x-served-by: cache-fra-eddf8230096-FRA, cache-bma1637-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10250
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e804586be26c88b95d554afe0ef24d5c
6f99b1fe2330c4661608f17819a4490a92ca296c
38894b7977e8f8e790a71eedf8144799a77ccceb49771e7458392ad7916293db
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 21:49:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.jsdelivr.net/npm/cdnbye@latest/dist/hlsjs-p2p-engine.min.js
200 OK 78 kB URL HTTP/2 cdn.jsdelivr.net/npm/cdnbye@latest/dist/hlsjs-p2p-engine.min.js
IP
Hash 139d46aaa5786b850267769bcc625868
e3df262f02d18b6eb5d6b36bd92c60efc9b7d8d2
d62a004f1e4640b9a7245e12a7ac96a5664b6487750e378ceb3cb9b8cbc8b4da
GET /npm/cdnbye@latest/dist/hlsjs-p2p-engine.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://weakstream.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.20.10
x-jsd-version-type: version
etag: W/"2c0fb-ruOSsSubyzmt5zoQXaHqxXBy6Wo"
content-encoding: gzip
accept-ranges: bytes
date: Sat, 14 Jan 2023 21:49:36 GMT
age: 14454
x-served-by: cache-fra19146-FRA, cache-bma1637-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 47856
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/@clappr/player@0.4.0/dist/clappr.min.js
200 OK 127 kB URL HTTP/2 cdn.jsdelivr.net/npm/@clappr/player@0.4.0/dist/clappr.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 127 kB (126915 bytes)
Hash 4b7a815faadc405c5065e3841dbd57ee
bf8b3aee64ccf6b9055fd0010eea198b1fd1802e
9596eb8c7f96d0b41a7bb291bb51f8105244809e571a56ae36d64d49b42d82f5
GET /npm/@clappr/player@0.4.0/dist/clappr.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://weakstream.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 0.4.0
x-jsd-version-type: version
etag: W/"72005-xDPIgqHJfOeFuHY26QsUErnjK9w"
content-encoding: gzip
accept-ranges: bytes
date: Sat, 14 Jan 2023 21:49:36 GMT
age: 7077883
x-served-by: cache-fra-eddf8230110-FRA, cache-bma1637-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 126915
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 14 Jan 2023 21:17:25 GMT
age: 1931
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
Hash daa5212204026dafe436da50c6fa0918
2bcc8dbc6f4d2e5414730557000b5c7d5996a401
e4ba8372792338995aef65a5e02904a8ea475857ea8038147d62508fe1e872a9
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 21:49:36 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "EA123E3975608A7799C6795B8BD923688747699D"
Expires: Sun, 15 Jan 2023 08:00:00 GMT
Last-Modified: Sat, 14 Jan 2023 20:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 3523
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78999520fc0e1c12-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash c01ec61f7ca77158f474b3ab519c12fa
fc82ae0fcd73a83a980b75709a08e65239894e4a
f533e0fac9b92e79d4fbd6e70b42a83067de95f0a13cc737d7e5fa459baa4c54
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3916
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 21:49:36 GMT
Last-Modified: Sat, 14 Jan 2023 20:44:20 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 471 B IP
Hash 705212eede3c5bebd8cedb31e7f22f25
19d9fa716aa330fdc11d9a579f8ab1e7d1d0d634
2f507c2c665e944a80363a5f71a36db5877a7099e6e2244e51b9fee1103029f7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 21:49:37 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 14 Jan 2023 17:22:25 GMT
Expires: Sat, 21 Jan 2023 17:22:24 GMT
Etag: "19d9fa716aa330fdc11d9a579f8ab1e7d1d0d634"
Cache-Control: max-age=588166,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78999522b81cb50c-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash 2c0494213038dfccf2a0d07eac511013
42fb6046746008b09dc11da8a5ae8caff469daf8
7711f1bfba3700fe87e8c3ba79de1015f16cbe2a75b260268823b75bd3a5400f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 21:49:37 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 14 Jan 2023 06:12:19 GMT
Expires: Sat, 21 Jan 2023 06:12:18 GMT
Etag: "42fb6046746008b09dc11da8a5ae8caff469daf8"
Cache-Control: max-age=547960,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7899952198c31bfe-OSL
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://weakstream.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sat, 14 Jan 2023 20:21:54 GMT
expires: Sat, 14 Jan 2023 22:21:54 GMT
cache-control: public, max-age=7200
age: 5263
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Cfutqo5PXJYCKWFnjxQdJQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: XrsmpgG3cVfgmUQTuGwbk7R/NCM=
st.chatango.com/js/gz/emb.js
200 OK 24 kB URL HTTP/1.1 st.chatango.com/js/gz/emb.js
IP
File type ASCII text, with very long lines (1651)
Hash a543b2d0bd0671737d07034ada375e34
4f8a72210ccd1bbd1c254cf9138b7399503bb654
c237062303aaf130c2f1a7c9f7b71e6ba23e7c6f307c5d1f9ab2858371421cc3
GET /js/gz/emb.js HTTP/1.1
Host: st.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 21:49:37 GMT
Content-Type: application/x-javascript
Content-Length: 23804
Last-Modified: Thu, 01 Dec 2022 15:09:02 GMT
Connection: keep-alive
ETag: "6388c38e-5cfc"
Expires: Sat, 14 Jan 2023 21:49:37 GMT
Cache-Control: max-age=0
Content-Encoding: gzip
Accept-Ranges: bytes
youradexchange.com/script/suurl4.php?r=5026951&cbur=0.8723481054302322&cbiframe=1&cbWidth=750&cbHeight=450&cbtitle=&cbpage=https%3A%2F%2Fww.hitstreams.live%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=celeritascdn.com&aggr=0
200 OK 1.2 kB URL HTTP/2 youradexchange.com/script/suurl4.php?r=5026951&cbur=0.8723481054302322&cbiframe=1&cbWidth=750&cbHeight=450&cbtitle=&cbpage=https%3A%2F%2Fww.hitstreams.live%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=celeritascdn.com&aggr=0
IP
Hash 5f3700d3a69e6d3e3a623ab6bfbd0f52
a81b81f1f16b9d3c60222eda3586d78f48f73afc
179732b0891cb372f7b4ee007ac054281456949e6c6696d18c5c32becd26c39e
GET /script/suurl4.php?r=5026951&cbur=0.8723481054302322&cbiframe=1&cbWidth=750&cbHeight=450&cbtitle=&cbpage=https%3A%2F%2Fww.hitstreams.live%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=celeritascdn.com&aggr=0 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://weakstream.org/
Origin: https://weakstream.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Sat, 14 Jan 2023 21:49:37 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
st.chatango.com/h5/gz/r1201220704/id.html
200 OK 224 kB URL HTTP/1.1 st.chatango.com/h5/gz/r1201220704/id.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (54430), with CRLF, LF line terminators
Size 224 kB (224208 bytes)
Hash 2ff04e3060ebf6d04a895f2af779e79c
4583ade36a3969fe2fc7ddfc754038ed4c35b424
98bfe8760d1b37a21984eae3adfb3dc9fbf7a1375e7f6c2db45bb14a72974c61
GET /h5/gz/r1201220704/id.html HTTP/1.1
Host: st.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 21:49:37 GMT
Content-Type: text/html
Content-Length: 224208
Last-Modified: Thu, 01 Dec 2022 15:09:02 GMT
Connection: keep-alive
ETag: "6388c38e-36bd0"
Expires: Sun, 14 Jan 2024 21:49:37 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
P3P: CP="Chatango does not have a P3P policy. Please see our privacy policy: http://chatango.com/page?full_privacy"
Accept-Ranges: bytes
ww.hitstreams.live/channels/ksi-live-streams.php
200 OK 25 kB URL HTTP/2 ww.hitstreams.live/channels/ksi-live-streams.php
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (53639), with CRLF, LF line terminators
Hash abb081391099e3580d941c4f7744a092
221518e57b17c7ab76ae015b8ce8a9e4881bb7ab
8d15402c6bffdb4d44784f93ad71394da25a33c7f809c46a4bcf060d21548be6
NIDS Severity Alert suricata medium ETPRO HUNTING Observed Unusual Host (ww.)
GET /channels/ksi-live-streams.php HTTP/1.1
Host: ww.hitstreams.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:36 GMT
content-type: text/html;charset=UTF-8
set-cookie: PHPSESSID=2bc25af57093f97396dd7175b18fb430; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F%2FE28NMgs%2FFiVh0SwSB1MhMlbLnq1g5tRBQTbJjSM7Bjb7qizaR8q33nAM1%2BlPyf2fj1ls1DxSaaYV4GkG4WJgcWPhDDWPOrhpVytOHXW64EMB8S2Ri6TzGE8%2FETLOEORHniIX8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7899951c5b7afabc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/chatango-network/loader.js
200 OK 22 kB URL HTTP/2 cdn.taboola.com/libtrc/chatango-network/loader.js
IP
File type ASCII text, with very long lines (65509)
Hash dd4b1ee72f6d08a33f201db2763621e0
4b5e1a3e31f4ac204d3923876248b2762e7f03e4
70681e6cd95371855164895d7ba1ef004e23a5b05452051222f071be5c27b316
GET /libtrc/chatango-network/loader.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 0YPNWnNPtHv6WuODXakpOBBa/g234eZk8Y6D+nt+HgcU1B6LGNZBMoPXK4osB23t9lWDZsY1+7M=
x-amz-request-id: WKH1H0E4TVG4EQZV
last-modified: Thu, 12 Jan 2023 10:24:13 GMT
etag: "a76c89762c63ee21113f84d8bad89576"
x-amz-version-id: 7GGN0xEiUqjnbzHoNL2zFs31nnTAX90y
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sat, 14 Jan 2023 21:49:38 GMT
via: 1.1 varnish
age: 91
x-served-by: cache-bma1622-BMA
x-cache: HIT
x-cache-hits: 7
x-timer: S1673732978.348460,VS0,VE0
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 84
content-length: 21692
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7943
Expires: Sun, 15 Jan 2023 00:02:01 GMT
Date: Sat, 14 Jan 2023 21:49:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7943
Expires: Sun, 15 Jan 2023 00:02:01 GMT
Date: Sat, 14 Jan 2023 21:49:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7943
Expires: Sun, 15 Jan 2023 00:02:01 GMT
Date: Sat, 14 Jan 2023 21:49:38 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b0d4bc-9eea-491e-9fed-be68e71088e5.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b0d4bc-9eea-491e-9fed-be68e71088e5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 64ba27a2f0a3bc61bd325f1fb317b755
c65c58476b66cbb6269ba1d8412d270a0a003ae3
5f7f03752f8a7c8c08d92512ae93b193ea37f59354503c3129d33fd2910f87e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b0d4bc-9eea-491e-9fed-be68e71088e5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9135
x-amzn-requestid: 2c5e9de0-9244-43ac-b7c4-712cbcf7038c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enAnoG6roAMFzgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf7afd-7fb640b30bab63bc1979a173;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 03:14:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SUGIIWi8jWe9RoRu-3dQXvLAddjwjH05V1ubKzEOEQrFonzVjQdbtw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 03:33:07 GMT
age: 65791
etag: "c65c58476b66cbb6269ba1d8412d270a0a003ae3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F917985a1-aa8d-4c0a-860c-0b16c203387e.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F917985a1-aa8d-4c0a-860c-0b16c203387e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d24ea1f095f492934a1f1c63f5d8590c
dade37148c9b9a941f93a8535d8ddc5de3952623
2d8e3f90eb347eb3479a6c5d20a1c2ca6a0560f335a6c6800948db2640e4c878
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F917985a1-aa8d-4c0a-860c-0b16c203387e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8181
x-amzn-requestid: 7ada8fbd-58e6-4433-a532-b4a4ef93ac9c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0paH-OIAMFg5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce3c-582529522dbb67ee728484f8;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AHjOmYxva5avyA3gt9DvYLas_B2ACimer5QRQOi919HDtSjnKq22lw==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 10:27:20 GMT
age: 40938
etag: "dade37148c9b9a941f93a8535d8ddc5de3952623"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4885191c-7ccc-4801-bef2-6d6bbb61cdb1.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4885191c-7ccc-4801-bef2-6d6bbb61cdb1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d9c918c3f0569cbf09fdcd8998e2fc00
ad06e348d49e8ae0550d922b50bc2a1d4905457a
8f96e49cf0dbbad59d260d0f991d79eb72ea25dcc0caa5ba4480056bd918d07d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4885191c-7ccc-4801-bef2-6d6bbb61cdb1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5371
x-amzn-requestid: fcbafc8b-5b89-49e6-8ebd-157cb3b24a55
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0qnERXoAMFsZQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce43-3eb3b4d84dbf415a3dec1308;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:55 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Vu3VTHD4QBoZs6oBJNaiIzIt-ezpjpjB9CQMv4yzEskJo7W6H2TUeg==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 21:49:01 GMT
age: 37
etag: "ad06e348d49e8ae0550d922b50bc2a1d4905457a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0a5cc8b-8d62-447a-a39c-733e1afdd415.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0a5cc8b-8d62-447a-a39c-733e1afdd415.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2363dbe7bb6a459853d8d19cab50e70b
ded76de1dd453e40dbf6eaa8607cf19fac7f71a4
f96da6354cec52143768014c36ba2b298224a58b0bf38bd2aa5f3bfce69d8670
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0a5cc8b-8d62-447a-a39c-733e1afdd415.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7447
x-amzn-requestid: dd3543b7-4e6b-4605-acea-a21d39af02ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0qSFjAIAMF7HQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce41-56e2ccc63669032d70cba0ba;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JrxiA9BpvO_ZMFnzBedGopRgdHOc_n-_7Ub3PXuJVJYqk-XeMzBuWQ==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 21:49:01 GMT
age: 37
etag: "ded76de1dd453e40dbf6eaa8607cf19fac7f71a4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b55aad-884c-40db-a779-021d0c2305b4.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b55aad-884c-40db-a779-021d0c2305b4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b1378f107c1996ade14a8fe7fd728072
f52d98d9a0d1d343a539689ea14acf99e148cf8c
4be994757ec7ec42929590169de199e927889261334e258903a0929a1055047d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b55aad-884c-40db-a779-021d0c2305b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9154
x-amzn-requestid: fbb1140d-7ec2-4f86-8761-5d04601af70e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enAkCEN2IAMFuMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf7ae6-4baebf1104f9cf2a0ee8a538;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 03:13:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jlRcVyQppaQaPPMKaqadtaEHfdOYXXXbnfrr44l_2E2qaOoh_O0Mog==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 04:10:18 GMT
age: 63560
etag: "f52d98d9a0d1d343a539689ea14acf99e148cf8c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a23d61d610c7b55d943fcb2636a01b65
82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065
28bf3039cc8c1213e64893c71bc150eda573223feb2cc15ad0814a44960d434a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9539
x-amzn-requestid: eb427fd6-c342-4a22-af45-ecc528cf4a8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: epfDqEAZIAMFudQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c0787d-4f61ecd2422081224869da76;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 21:15:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RRMRT2BC5p1x0Vh20ut0Kjbz2mnaNToUIbzIg9oczduvzYCckvFORA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 12:46:14 GMT
age: 32604
etag: "82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/impl.20230112-8-RELEASE.js
200 OK 154 kB URL HTTP/2 cdn.taboola.com/libtrc/impl.20230112-8-RELEASE.js
IP
File type ASCII text, with very long lines (65509)
Size 154 kB (154045 bytes)
Hash 584cf6b1f9c40b934011497fbdbe347c
92ded9f0aaf99975e840046dc387470bb3605e27
b1ce4b7ab4969fcd6bfb65bd78af626d7b176ea9e221b0641ec1e653cfc42984
GET /libtrc/impl.20230112-8-RELEASE.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 5m5H0/znzYJC/hK0naqIeunx8o3qXyfWq4JN2/ujynlKZbBoILzLxgpG/YYeSAhwf6QrxDbxeoM=
x-amz-request-id: H3M93Q5Y5Q82K0BX
last-modified: Thu, 12 Jan 2023 09:57:12 GMT
etag: "584cf6b1f9c40b934011497fbdbe347c"
content-encoding: br
x-amz-version-id: IThJr_V9XE81Pd3O6slzCaXDRmaBsLJT
content-type: application/javascript
accept-ranges: bytes
date: Sat, 14 Jan 2023 21:49:38 GMT
via: 1.1 varnish
age: 13944
x-served-by: cache-bma1622-BMA
x-cache: HIT
x-cache-hits: 8068
x-timer: S1673732979.581458,VS0,VE0
cache-control: private,max-age=31536000
vary: Accept-Encoding
abp: 15
server: AmazonS3-br
content-length: 154045
X-Firefox-Spdy: h2
sb.scorecardresearch.com/b?c1=7&c2=34354936&c3=1&cs_it=b3&cv=3.8.0.210223&ns__t=1673732978786&ns_c=windows-1252&ns_if=1&c7=https%3A%2F%2Fst.chatango.com%2Fh5%2Fgz%2Fr1201220704%2Fid.html&c8=&c9=https%3A%2F%2Fww.hitstreams.live%2F
204 No Content 0 B URL HTTP/2 sb.scorecardresearch.com/b?c1=7&c2=34354936&c3=1&cs_it=b3&cv=3.8.0.210223&ns__t=1673732978786&ns_c=windows-1252&ns_if=1&c7=https%3A%2F%2Fst.chatango.com%2Fh5%2Fgz%2Fr1201220704%2Fid.html&c8=&c9=https%3A%2F%2Fww.hitstreams.live%2F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b?c1=7&c2=34354936&c3=1&cs_it=b3&cv=3.8.0.210223&ns__t=1673732978786&ns_c=windows-1252&ns_if=1&c7=https%3A%2F%2Fst.chatango.com%2Fh5%2Fgz%2Fr1201220704%2Fid.html&c8=&c9=https%3A%2F%2Fww.hitstreams.live%2F HTTP/1.1
Host: sb.scorecardresearch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 14 Jan 2023 21:49:38 GMT
set-cookie: UID=1A77dded38a0c5cfbea12821673732978; domain=.scorecardresearch.com; path=/; max-age=62208000
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zTpedvOAWC5oFBqA1YOI-WUYIemhrd42_cX6da7mjeX8CjwOdApzFA==
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 2c432ddf3c09643969b5936593a758e9
a778f65d71595297ac10a445249b82bd9bf3dfa8
020992335fc2224fbc13c760c5bef08c6cd02be82be697a444cdc32702d4d71a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2978
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 21:49:38 GMT
Etag: "63c29823-138"
Last-Modified: Sat, 14 Jan 2023 21:00:00 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 312
trc-events.taboola.com/chatango-chatango1/log/2/debug?tim=21%3A49%3A38.978&type=usage&msg=rtus&llvl=2&id=1813&cv=20230112-8-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/chatango-chatango1/log/2/debug?tim=21%3A49%3A38.978&type=usage&msg=rtus&llvl=2&id=1813&cv=20230112-8-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /chatango-chatango1/log/2/debug?tim=21%3A49%3A38.978&type=usage&msg=rtus&llvl=2&id=1813&cv=20230112-8-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 14 Jan 2023 21:49:38 GMT
x-fastly-to-nlb-rtt: 22716
access-control-allow-credentials: true
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48e0ddda7051bbc1bc5e7fc5c1206762
4d4f539572216e8a56c880bd5d2964236b90c7da
c780051c7262b04910c867a484ad14e70b727f4147b3e8bfd5af9af0f4d1830b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C780051C7262B04910C867A484AD14E70B727F4147B3E8BFD5AF9AF0F4D1830B"
Last-Modified: Sat, 14 Jan 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5367
Expires: Sat, 14 Jan 2023 23:19:06 GMT
Date: Sat, 14 Jan 2023 21:49:39 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48e0ddda7051bbc1bc5e7fc5c1206762
4d4f539572216e8a56c880bd5d2964236b90c7da
c780051c7262b04910c867a484ad14e70b727f4147b3e8bfd5af9af0f4d1830b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C780051C7262B04910C867A484AD14E70B727F4147B3E8BFD5AF9AF0F4D1830B"
Last-Modified: Sat, 14 Jan 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5367
Expires: Sat, 14 Jan 2023 23:19:06 GMT
Date: Sat, 14 Jan 2023 21:49:39 GMT
Connection: keep-alive
waufooke.com/tag.min.js
200 OK 24 kB IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash a262d97e6ed7edb63fbb1b4e5cf621df
d261ad46302efa929a539c7435dd862bdf504ced
c48f0b38a9c9d1ab31c6265c577cf4dae2e16f2c43a1a93e82e4e079d2e5228b
Analyzer Verdict Alert quad9 Sinkholed
GET /tag.min.js HTTP/1.1
Host: waufooke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 21:49:39 GMT
content-type: text/javascript; charset=utf-8
content-length: 23586
content-encoding: br
x-trace-id: 24ecace36db44da403c63dfea791e0df
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Fri, 13 Jan 2023 11:12:11 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 8.8 kB URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
File type C source, ASCII text, with very long lines (29462)
Hash 330520ffa88dd80f7a086e5409cd2da3
33815d6bb37811c811843ef2259386192418974f
6a1e84ca6f587544e9e4002fb3733b3492186030af2e9891ff7abcab2a5be07e
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:38 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
server-processing-duration-in-ticks: 422464
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ust.chatango.com/groupinfo/h/i/hitstreamslive/gprofile.xml
200 OK 61 B URL HTTP/1.1 ust.chatango.com/groupinfo/h/i/hitstreamslive/gprofile.xml
IP
File type XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with no line terminators
Hash 234f7e4ce52d4897859daa75685bd909
45ffaaf09bcc721958ebf08406860769c719b352
df27ae89f7f42eb1fee6e4795ec7e9846c61016f1401085ebbf8d3870b61bbd7
GET /groupinfo/h/i/hitstreamslive/gprofile.xml HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://st.chatango.com
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 21:49:39 GMT
Content-Type: text/xml
Content-Length: 61
Last-Modified: Mon, 02 Jan 2023 19:01:09 GMT
Connection: keep-alive
Expires: Sat, 14 Jan 2023 21:49:39 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 15 kB IP
Hash 8213c0cf9367512a339c33725544b2fc
97cf26929e5ed062b130d7eb2fb0a09a4bd020af
70bb15a4063b31be0d1c6110325e03a8b1c736255346d939f3b1fb809bba4517
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1376
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 21:49:39 GMT
Etag: "63c22eaf-139"
Last-Modified: Sat, 14 Jan 2023 21:26:43 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 24ed8ab8a755ada6ed8c1c4f6106f027
1309cf9a8f179ea07cd275cc820664a77c103e15
0443130210f06576a9ce08b80ab9e43257d742890ca8b8915a69a36bdc169e0b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1376
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 21:49:39 GMT
Etag: "63c22eaf-139"
Last-Modified: Sat, 14 Jan 2023 21:26:43 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 313
gem.gbc.criteo.com/newidsd
200 OK 5.1 kB URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
Hash f6340a79195f7bd81bbf0e28fe51c4ec
92aab2141b6e977fa27ee01c63e91d440ea770f7
0c4602f0fced9187e3f61d964628c99ed74ba97c399945b92a85f720a77d975d
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:38 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 118511
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-crto-bundle
Referer: https://st.chatango.com/
Origin: https://st.chatango.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:39 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-headers: X-CRTO-SID, X-CRTO-IDCPY, X-CRTO-OPTOUT, X-CRTO-BUNDLE
access-control-allow-origin: https://st.chatango.com
server-processing-duration-in-ticks: 565231
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8cc52774ab3484d0822a3d82e6f07808
5b04ca320efd8ef0dbd54cc5059b4a20e08559b3
35c1eeeec58bb211b48084a19fbe6c5798eb1e5d2618a0f9d6a1f9105c505dd6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35C1EEEEC58BB211B48084A19FBE6C5798EB1E5D2618A0F9D6A1F9105C505DD6"
Last-Modified: Thu, 12 Jan 2023 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14568
Expires: Sun, 15 Jan 2023 01:52:27 GMT
Date: Sat, 14 Jan 2023 21:49:39 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 74 kB IP
Hash ea2a31e915d4e7673339765f115f191b
9b03fa5f53e2447d3f1de687eb03db8c96ce030a
0811f967d0b5f89b2ddfff577a2c91b2402631898bff1282ba2eefa6eade4a1f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 21:49:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mahimeta.com/networks/tag.js?cache=1673732979
200 OK 24 kB URL HTTP/2 mahimeta.com/networks/tag.js?cache=1673732979
IP
File type ASCII text, with very long lines (429)
Hash 74f86bdff1bb601b644edf2f796f38be
eb4572591062e48a708a736be24788f398dbeca7
7ca52d62ad9816258ab65961863aa22ec10f5c16d29a170d2be7612af4e0e573
GET /networks/tag.js?cache=1673732979 HTTP/1.1
Host: mahimeta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:39 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Fri, 26 Aug 2022 12:40:56 GMT
etag: W/"6308bf58-271a6"
expires: Mon, 13 Feb 2023 21:49:39 GMT
cache-control: public, max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9%2BODMTuZSCAMHfxqINmG8zOxXlr3MYLe9%2BxaegF5eiMpW6Rn9llLHetDlJAqWhFGAfJiYPUU7WZPBRF9UtM5mNOETpBump9qRmdKM0AUf0CMFkiF1%2B9736Hx4a1teZ0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7899952ffd5f1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2f8ae4ab9ee17e2598e9299bdc0f44c0
ab4c7d1750edf513359218ab6d0b81cdd4dcb90c
75e680ab62ee77f0811fdb770d1c913dd41a911e7efb4ca99bc4cfe7fcb432c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 21:49:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2f8ae4ab9ee17e2598e9299bdc0f44c0
ab4c7d1750edf513359218ab6d0b81cdd4dcb90c
75e680ab62ee77f0811fdb770d1c913dd41a911e7efb4ca99bc4cfe7fcb432c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 21:49:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adserve.mahimeta.com/networks/?domain=ww.hitstreams.live&pathname=%2Fchannels%2Fksi-live-streams.php&query=¤tPage=https%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&size=Responsive&placement=inline&adId=mMTag_Responsive_63364182&screenWidth=1280&screenHeight=939&keywordViolation=false&blockedKeywords=&autoBlock=false&timezone=0&currTime=21:49&desktop=300x250&tablet=300x250&mobile=300x250&time_exceeded=false&page_categories=&thin_content_count=100
200 OK 5.6 kB URL HTTP/2 adserve.mahimeta.com/networks/?domain=ww.hitstreams.live&pathname=%2Fchannels%2Fksi-live-streams.php&query=¤tPage=https%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&size=Responsive&placement=inline&adId=mMTag_Responsive_63364182&screenWidth=1280&screenHeight=939&keywordViolation=false&blockedKeywords=&autoBlock=false&timezone=0&currTime=21:49&desktop=300x250&tablet=300x250&mobile=300x250&time_exceeded=false&page_categories=&thin_content_count=100
IP
Hash d0d917ca55b70d99796f81ddc5d44659
cf86ef1ce4a0d9979de70bc6a8f59059a2c10d53
4b573ec0d3ffb774e24705b2ed27c90ee70cf14c17c6ff710d31a83bd90ac7ed
POST /networks/?domain=ww.hitstreams.live&pathname=%2Fchannels%2Fksi-live-streams.php&query=¤tPage=https%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&size=Responsive&placement=inline&adId=mMTag_Responsive_63364182&screenWidth=1280&screenHeight=939&keywordViolation=false&blockedKeywords=&autoBlock=false&timezone=0&currTime=21:49&desktop=300x250&tablet=300x250&mobile=300x250&time_exceeded=false&page_categories=&thin_content_count=100 HTTP/1.1
Host: adserve.mahimeta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1335
Origin: https://ww.hitstreams.live
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:39 GMT
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-Token
cache-control: no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qj6H41T35YW%2BpmnMNm7HN0ozYsqClDxDEBG3X2dxXxUfgqunJZR%2FPt4YVtn1ili1usxNEVCirKOGkLwHXpgUPY7JqgSKjB%2BHsSiDX7VNJeEtedJ5Y9jzgkRRyCwiOh%2FBiWHGz7w%2FEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 789995321ade0b59-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?userId=aee8deb7707340bab27ca435824debfb
200 OK 126 kB URL HTTP/2 my.rtmark.net/gid.js?userId=aee8deb7707340bab27ca435824debfb
IP
File type gzip compressed data, max compression\012- data
Size 126 kB (125837 bytes)
Hash d41f9eb373f6d389916d2354e8106f45
92822b81e8af2d74ff91b05dc563155584696144
6a7265e29c29d383677a1a779b58337c684fd85847d7106a1ac46b91eef6ee69
GET /gid.js?userId=aee8deb7707340bab27ca435824debfb HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ww.hitstreams.live
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 21:49:39 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://ww.hitstreams.live
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=aee8deb7707340bab27ca435824debfb; expires=Sun, 14 Jan 2024 21:49:39 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
adserve.mahimeta.com/networks/?domain=ww.hitstreams.live&pathname=%2Fchannels%2Fksi-live-streams.php&query=¤tPage=https%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&size=Responsive&placement=inline&adId=mMTag_Responsive_63364182&screenWidth=1280&screenHeight=939&keywordViolation=false&blockedKeywords=&autoBlock=false&timezone=0&currTime=21:49&desktop=300x250&tablet=300x250&mobile=300x250&time_exceeded=false&page_categories=&thin_content_count=100
200 OK 29 kB URL HTTP/2 adserve.mahimeta.com/networks/?domain=ww.hitstreams.live&pathname=%2Fchannels%2Fksi-live-streams.php&query=¤tPage=https%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&size=Responsive&placement=inline&adId=mMTag_Responsive_63364182&screenWidth=1280&screenHeight=939&keywordViolation=false&blockedKeywords=&autoBlock=false&timezone=0&currTime=21:49&desktop=300x250&tablet=300x250&mobile=300x250&time_exceeded=false&page_categories=&thin_content_count=100
IP
Hash 1ef4cf6d215b1abcbaed4c1998ec489b
6ead92f2202c10cfa9da9e81e793b53663839517
91e4e0bb7aaa7a02b8f9117afecb1ce77c4965528b06099b37bbe2019127ac44
POST /networks/?domain=ww.hitstreams.live&pathname=%2Fchannels%2Fksi-live-streams.php&query=¤tPage=https%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&size=Responsive&placement=inline&adId=mMTag_Responsive_63364182&screenWidth=1280&screenHeight=939&keywordViolation=false&blockedKeywords=&autoBlock=false&timezone=0&currTime=21:49&desktop=300x250&tablet=300x250&mobile=300x250&time_exceeded=false&page_categories=&thin_content_count=100 HTTP/1.1
Host: adserve.mahimeta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1335
Origin: https://ww.hitstreams.live
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:39 GMT
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-Token
cache-control: no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7B0f%2BezCAYSVVJDHD6jqxQPjT%2Bbweh7EZ6PpFY81h9X7%2F6nwFtyMS%2FFDbKbGXrhYn4JhPgD3w8Yw0l5jwnmLgxVWdVFkp7iJwO3XpCdjzoF1Jt2LUID4sTsvXi5v5J4Xvgrc2h56lg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 789995320ad40b59-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 662ecc4450f42fdb779199c625eb025c
ad7e3e9d72f2ae2c6da996ec2cb8738d96df2f9e
f27be3234e1740363aa00eca76318ee4547abf1eb6a6a6c833a641c06a7144d3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 983
Cache-Control: max-age=154278
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 21:49:39 GMT
Etag: "63c2d743-13a"
Expires: Mon, 16 Jan 2023 16:40:57 GMT
Last-Modified: Sat, 14 Jan 2023 16:24:35 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 314
adserve.mahimeta.com/networks/?domain=ww.hitstreams.live&pathname=%2Fchannels%2Fksi-live-streams.php&query=¤tPage=https%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&size=Responsive&placement=inline&adId=mMTag_Responsive_29701060&screenWidth=1280&screenHeight=939&keywordViolation=false&blockedKeywords=&autoBlock=false&timezone=0&currTime=21:49&referrer=ww.hitstreams.live&desktop=728x90&tablet=320x100&mobile=320x100&time_exceeded=false&page_categories=&thin_content_count=100
200 OK 29 kB URL HTTP/2 adserve.mahimeta.com/networks/?domain=ww.hitstreams.live&pathname=%2Fchannels%2Fksi-live-streams.php&query=¤tPage=https%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&size=Responsive&placement=inline&adId=mMTag_Responsive_29701060&screenWidth=1280&screenHeight=939&keywordViolation=false&blockedKeywords=&autoBlock=false&timezone=0&currTime=21:49&referrer=ww.hitstreams.live&desktop=728x90&tablet=320x100&mobile=320x100&time_exceeded=false&page_categories=&thin_content_count=100
IP
Hash 7ba789359c6ae8e5b3f13ba92b74d71d
f5b09521f1f15890e6f0bb07aa11c623688bc4e6
5fd4cd2ba54476b2e1f8ec6012502435f2fa6626102d7db3a5d6d57d32de76b2
POST /networks/?domain=ww.hitstreams.live&pathname=%2Fchannels%2Fksi-live-streams.php&query=¤tPage=https%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&size=Responsive&placement=inline&adId=mMTag_Responsive_29701060&screenWidth=1280&screenHeight=939&keywordViolation=false&blockedKeywords=&autoBlock=false&timezone=0&currTime=21:49&referrer=ww.hitstreams.live&desktop=728x90&tablet=320x100&mobile=320x100&time_exceeded=false&page_categories=&thin_content_count=100 HTTP/1.1
Host: adserve.mahimeta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1335
Origin: https://ww.hitstreams.live
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:39 GMT
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-Token
cache-control: no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LCsONjZBgya6D4DVJPeSCeP6fm5ZKLYMTmjPtRckb4kVtjREo0xT69DFUc3hucA50e9EVeQ2TADAOM39oexGvcaB%2Bvi0%2BKojirRJBgYIGSf3Fpas8R8zAbbEHjrQOG4S9NumuM4H9A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78999531eabc0b59-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
adserve.mahimeta.com/networks/?domain=ww.hitstreams.live&pathname=%2Fchannels%2Fksi-live-streams.php&query=¤tPage=https%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&size=Responsive&placement=floating&adId=mMTag_Responsive_30011235&screenWidth=1280&screenHeight=939&keywordViolation=false&blockedKeywords=&autoBlock=false&timezone=0&currTime=21:49&desktop=970x90&tablet=728x90&mobile=320x100&time_exceeded=false&page_categories=&thin_content_count=100
200 OK 2.2 kB URL HTTP/2 adserve.mahimeta.com/networks/?domain=ww.hitstreams.live&pathname=%2Fchannels%2Fksi-live-streams.php&query=¤tPage=https%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&size=Responsive&placement=floating&adId=mMTag_Responsive_30011235&screenWidth=1280&screenHeight=939&keywordViolation=false&blockedKeywords=&autoBlock=false&timezone=0&currTime=21:49&desktop=970x90&tablet=728x90&mobile=320x100&time_exceeded=false&page_categories=&thin_content_count=100
IP
Hash 061cf8b5c3cc4b317c55396ec4cde37a
18cf05f121a53b66d31ad7d9fa3e4a4bb4a7c37f
39825d2fe299dab1ec7bfcc2fbdae6218ed9dd157ad940b068967f303e308395
POST /networks/?domain=ww.hitstreams.live&pathname=%2Fchannels%2Fksi-live-streams.php&query=¤tPage=https%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&size=Responsive&placement=floating&adId=mMTag_Responsive_30011235&screenWidth=1280&screenHeight=939&keywordViolation=false&blockedKeywords=&autoBlock=false&timezone=0&currTime=21:49&desktop=970x90&tablet=728x90&mobile=320x100&time_exceeded=false&page_categories=&thin_content_count=100 HTTP/1.1
Host: adserve.mahimeta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1335
Origin: https://ww.hitstreams.live
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:39 GMT
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-Token
cache-control: no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7%2Fi7TabcFoP9hRwA4kCLAgq%2FMgHsbkY925pZj8tvECgQtMyxAAjXAuAS4O4gfSQ%2F84k3RRKXaeEEZaByFEYrllNm0X2SjW%2Bc8hoMff7qP6LPrYnofNSN%2Biw6FGzptNHJmlFA8Gx7WQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78999531face0b59-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
csm.nl.eu.criteo.net/iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1
200 OK 164 kB URL HTTP/2 csm.nl.eu.criteo.net/iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1
IP
Size 164 kB (164104 bytes)
Hash 6cb9b1cecf4543a58b776f932ce573de
f0e53ceb989f034995b0ced5c6f7a2f2ad22622d
9baca8152637b81547b6f6c992c0afdb586998d82ae4f4bdb8230bd80d0e2ef8
GET /iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1 HTTP/1.1
Host: csm.nl.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:38 GMT
pragma: no-cache
server: Finatra
expires: 0
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate
content-length: 43
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
waufooke.com/5/5522523/?oo=1&aab=1
200 OK 1.8 kB URL HTTP/2 waufooke.com/5/5522523/?oo=1&aab=1
IP
Hash c169c801cd7657f48f8a50c869e2aab7
194ee03c7d85a73ed5f9ee10f533ed4a96392ba5
9c668ba5ca1887c6dbafde668e2f82b9bca0cf975d32bcd4ca827646c34d2018
Analyzer Verdict Alert quad9 Sinkholed
GET /5/5522523/?oo=1&aab=1 HTTP/1.1
Host: waufooke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ww.hitstreams.live
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 21:49:39 GMT
content-type: application/json
x-trace-id: 06be866d46ee1a5d27eb9ac2264bf61f
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: https://ww.hitstreams.live
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=aee8deb7707340bab27ca435824debfb; expires=Sun, 14 Jan 2024 21:49:39 GMT; path=/; secure; SameSite=None
oaidts=1673732979; expires=Sun, 14 Jan 2024 21:49:39 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2f8ae4ab9ee17e2598e9299bdc0f44c0
ab4c7d1750edf513359218ab6d0b81cdd4dcb90c
75e680ab62ee77f0811fdb770d1c913dd41a911e7efb4ca99bc4cfe7fcb432c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 21:49:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
test.quantcast.mgr.consensu.org/GVL-v2/cmp-list.json
200 OK 2.7 kB URL HTTP/2 test.quantcast.mgr.consensu.org/GVL-v2/cmp-list.json
IP
File type JSON data\012- , ASCII text, with very long lines (10104), with no line terminators
Hash 664484d49a5c84beb75c4216619f5e04
02f6be02bf09fd34eb7fe164b073dadb54fd2812
58ca833bebca57bcd35c125188806a7229afd10ab6d13d91678d4b43c0dab0fd
GET /GVL-v2/cmp-list.json HTTP/1.1
Host: test.quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ww.hitstreams.live
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 86400
cache-control: max-age=172800
date: Sat, 14 Jan 2023 19:52:31 GMT
last-modified: Sat, 14 Jan 2023 19:52:29 GMT
etag: W/"16f9ea1cc7a71cfed1d4482a599ccd27"
x-amz-server-side-encryption: AES256
x-amz-version-id: POuYi4.QbUYhHN4p2tbIMulQrwaf1j8L
server: AmazonS3
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ittZ2eBvaWil79DkJU43PoMlfujVuRcXeMBwXLtbu_VfZuxiF-qeNg==
age: 7029
X-Firefox-Spdy: h2
adserve.mahimeta.com/networks/?domain=ww.hitstreams.live&pathname=%2Fchannels%2Fksi-live-streams.php&query=¤tPage=https%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&size=Responsive&placement=inline&adId=mMTag_Responsive_63364182&screenWidth=1280&screenHeight=939&keywordViolation=false&blockedKeywords=&autoBlock=false&timezone=0&currTime=21:49&desktop=300x250&tablet=300x250&mobile=300x250&time_exceeded=false&page_categories=&thin_content_count=100
200 OK 129 kB URL HTTP/2 adserve.mahimeta.com/networks/?domain=ww.hitstreams.live&pathname=%2Fchannels%2Fksi-live-streams.php&query=¤tPage=https%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&size=Responsive&placement=inline&adId=mMTag_Responsive_63364182&screenWidth=1280&screenHeight=939&keywordViolation=false&blockedKeywords=&autoBlock=false&timezone=0&currTime=21:49&desktop=300x250&tablet=300x250&mobile=300x250&time_exceeded=false&page_categories=&thin_content_count=100
IP
Size 129 kB (129296 bytes)
Hash 35c97739a12966397df39edf3844e03d
5a880b1c4c753a2b38f65867645c55a40aecf6f7
19dc9765c2e46caea93aebba46eb9f75296c2c74eadfec4edd39b62eff8575fd
POST /networks/?domain=ww.hitstreams.live&pathname=%2Fchannels%2Fksi-live-streams.php&query=¤tPage=https%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&size=Responsive&placement=inline&adId=mMTag_Responsive_63364182&screenWidth=1280&screenHeight=939&keywordViolation=false&blockedKeywords=&autoBlock=false&timezone=0&currTime=21:49&desktop=300x250&tablet=300x250&mobile=300x250&time_exceeded=false&page_categories=&thin_content_count=100 HTTP/1.1
Host: adserve.mahimeta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1335
Origin: https://ww.hitstreams.live
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:39 GMT
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-Token
cache-control: no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Td8x10o0wUtsBk5o3dJHtuzBg610538SEX5JjRqUxb4pnfXs7RuO8umS4n78O8wdRT0DKzv28kx9A3IjwdUJE2RSEe5mR9hyj4DgzSFWjnP5AUjeLA2w%2Fbix6fWzO2XwOTFAE2ixfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78999531faca0b59-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s4.histats.com/stats/0.php?2673451&@f16&@g1&@h1&@i1&@j1673732979973&@k0&@l1&@mKSI%20vs%20Faze%20Temperrr%20Live%20Streaming&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-100594802&@b3:1673732980&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&@w
200 OK 52 B URL HTTP/1.1 s4.histats.com/stats/0.php?2673451&@f16&@g1&@h1&@i1&@j1673732979973&@k0&@l1&@mKSI%20vs%20Faze%20Temperrr%20Live%20Streaming&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-100594802&@b3:1673732980&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&@w
IP
File type ASCII text, with no line terminators
Hash 5b8a7fa66b4927cc78ced4151a10eb9f
f7cdd9a24bd9adb7d012699b6130139f2d4f0cfe
ec59cfbd9ebd84ce506f8bcd7fa2971caca08b8e84f9045b2398841f7f0e4035
GET /stats/0.php?2673451&@f16&@g1&@h1&@i1&@j1673732979973&@k0&@l1&@mKSI%20vs%20Faze%20Temperrr%20Live%20Streaming&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-100594802&@b3:1673732980&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 21:49:40 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 52
Connection: close
audit-tcfv2.quantcast.mgr.consensu.org/?log=%7B%22domain%22%3A%22ww.hitstreams.live%22%2C%22publisher%22%3A%22%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.23%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22%22%2C%22clientTimestamp%22%3A1673732980495%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-9khqjtssbgq3g5l9s81i%22%7D
200 OK 2 B URL HTTP/2 audit-tcfv2.quantcast.mgr.consensu.org/?log=%7B%22domain%22%3A%22ww.hitstreams.live%22%2C%22publisher%22%3A%22%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.23%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22%22%2C%22clientTimestamp%22%3A1673732980495%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-9khqjtssbgq3g5l9s81i%22%7D
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /?log=%7B%22domain%22%3A%22ww.hitstreams.live%22%2C%22publisher%22%3A%22%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.23%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22%22%2C%22clientTimestamp%22%3A1673732980495%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-9khqjtssbgq3g5l9s81i%22%7D HTTP/1.1
Host: audit-tcfv2.quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ww.hitstreams.live
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:40 GMT
content-type: text/plain; charset=utf-8
content-length: 2
access-control-allow-origin: *
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/gen_204?id=ama_stats&su=ww.hitstreams.live&doc=complete&pg_h=1810&pg_w=1268&pg_hs=1810&c=6&aa_c=0&av_h=196.667&av_w=483&av_a=75470&s=11&all_s=11&b=365.200&all_b=365.200&d=0.652&all_d=0.652&ard=0.197&all_ard=0.197&dt=d
204 No Content 0 B URL HTTP/2 pagead2.googlesyndication.com/pagead/gen_204?id=ama_stats&su=ww.hitstreams.live&doc=complete&pg_h=1810&pg_w=1268&pg_hs=1810&c=6&aa_c=0&av_h=196.667&av_w=483&av_a=75470&s=11&all_s=11&b=365.200&all_b=365.200&d=0.652&all_d=0.652&ard=0.197&all_ard=0.197&dt=d
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/gen_204?id=ama_stats&su=ww.hitstreams.live&doc=complete&pg_h=1810&pg_w=1268&pg_hs=1810&c=6&aa_c=0&av_h=196.667&av_w=483&av_a=75470&s=11&all_s=11&b=365.200&all_b=365.200&d=0.652&all_d=0.652&ard=0.197&all_ard=0.197&dt=d HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 14 Jan 2023 21:49:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
csi.gstatic.com/csi?v=2&s=pagead&action=csi_pagead&top=1&puid=1~lcwheh7v&c=2038924551790261&e=31071368%2C31071524%2C31061691%2C31061693&ctx=1&met.9=1.3ah~13.3d9~2.3jn&met.3=74.3k0_1~947.3k1_1~43.3k3~947.3k3~6.3k3~91.3k3~947.3k4~95.3k3_2~74.3k5_1~947.3k6~43.3k6_1~947.3k7~6.3k7~91.3k7~947.3k8~95.3k7_2~74.3k9~947.3ka~43.3ka~947.3ka~6.3ka~91.3ka~947.3kb~95.3ka_2~74.3kc_1~947.3kd~43.3kd_1~947.3ke~6.3ke~91.3ke~947.3kf~95.3ke_2~74.3kg_1~947.3kh~43.3kh~947.3kh~6.3kh~91.3kh~947.3ki~95.3kh_1~74.3ki~947.3ki~43.3ki_1~947.3kj~6.3kj~91.3kj~947.3kj~95.3kj_1~947.3kk~86.3kk~947.3kk~86.3kk~947.3kk~1.3kk~947.3kk~6.3kl~91.3kl~947.3kl~86.3kl~947.3kl~86.3kl~947.3kl~86.3kl~947.3kl~86.3kl~947.3kl~86.3kl~947.3kl~86.3kl_1~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~77.3k0_m~94.3kp~724.3kp~724.3kq~724.3kq~724.3kq_1~724.3kr~724.3kr_1~724.3kt~724.3kt~724.3ku~724.3ku~724.3ku~724.3kv~894.3l9~894.3la~894.3la~894.3la~894.3la~894.3la~894.3la~660.3ld~660.3ld~660.3ld~660.3ld~660.3ld~660.3ld~660.3ld~243.3rs_3~947.3rv_1~573.3rw~598.3rw~598.3rw~598.3rw~598.3rw~598.3rw~598.3rw~113.3ri_g~112.3rh_h&met.10=1_11.IKIkEPOlAgj4yQQY_NVIKAE~1_16.IKIkEAAI-MkEGPzVSCgA~1_1.IKIkEPD_Awjw_wMY_NVIKAE~1_2.IKIkEPjJBAj4yQQY_NVIKAE~1_7.IKIkEAAI-MkEGPzVSCgA~1_4.IKIkEISqBQiEqgUY_NVIKAE&met.1=1.lcwhedgf~6.98~7.a9~8.ab~9.ab~10.cp~11.ae~12.cp~13.e6~14.f1~15.et~16.of~17.oz~18.p4~19.2ob~20.2ob~21.2oc~23.of&met.7=CBsQByCcBDi9AcAB9pjQvgo~CBsQByCdBDi8AcABweOTswQ~CBsQBiCdBDj5AcAB-r6ozAY~CBsQBiCeBDiCAsABiKjA6QM~CBsQBiCeBDj7AcAB48rgvAs~CBsQCiCeBDjXCsAB0OH68Q4~CBsQBiCfBDi9AcABueC2Dw~CBsQBSCkBDjDAsAB7MzAuAE~CBsgrAQ4swXAAdGamK8G~CBsQCiD3BDiFAcAB8aP1jw0~CBMYASCYBiiYBjD7BjhjQLEGSLIGULMGWO8GYL0GaPEGcPoGeKOFAYAB8H2IAfB9qgETCg1zb3VyY2VzYW5zcHJvEAwYArABAbgBA8ABn4H-mAg~CBsQDSDqBjg7wAHqmIxf~CBsQBxgBIPQGKPQGMLQIOMABwAGM1djrBA~CBsQByD1BjgswAHrkrXUDA~CBsQByD1BjhIwAH65cT7Cg~CBsQByD1BjhvwAHWy5j4Cg~CBsQBSCZDzidBcABubrG0w8~CBsQDSCbDzi4BcABur6M4gE~CBsQCiCoGzibAcABxNjttws~CBsQCiCoGzi3AcABxNjttws~CBsQCiCqGzi2AcABxNjttws~CBsQCiCrGzi1AcABxNjttws~CBsQCiCsGzi1AcABxNjttws~CBsQCiCsGzi1AcABxNjttws~CBsQCiCtGzibBcAB5IHWtQo~CBsQCiCuGzjbAcAB39DxwAI~CBsQDSCuGzjcAcABxrPnpgs~CBsQCiCKHDjKA8AB2euw8wo~CBsQDSC2HDioAcABrK-a_A4~CBsQCiCbHTgRwAGxyZaHCw~CBsQCiCfHTggwAGxyZaHCw~CBsQCiCiHTgdwAGxyZaHCw~CBsQCiClHTgbwAGxyZaHCw~CBsQCiCtHTgXwAGxyZaHCw~CBsQCiCwHTgUwAGxyZaHCw~CBsQDSDKHTiDAsAB04CVlQo~CBsQDSCGHjh7wAHo2I2jCA~CBsQDSCIHjifAcAB6NiNowg~CBsQDSCJHjiXAcAB6NiNowg~CBsQDSCJHjinAcAB6NiNowg~CBsQDSCLHjh7wAHo2I2jCA~CBsQDSCLHjiVAcAB6NiNowg~CBsQDSCMHjibAcAB3--Atwo~CBsQDSCNHjiTAcABvuG-oAs~CBsQDSCQHjg0wAGJ3arxCA~CBsQDSCQHjg1wAHh9IDnBQ~CBsQCiDUHjhSwAHy7JPBBw~CBsQCiDVHjhQwAHLm8bsDw~CBsQCiDWHjhQwAHTy_-UCg~CDYQChgBINYeKNYeMOYgOJACwAHJ4728BQ~CA0QChgBINYeKNYeMOYgOJACQPAeSPgeUOEfWLsgYO8faMEgcNcgeMjeAYAB9NcBiAGs_gSwAQG4AQPAAeHb5t0L~CDsQChgBIIkfKIkfMOsgOOIBQJAfSJUfUOIfWLwgYOIfaMIgcNkgeMneAYAB9dcBiAGs_gSwAQG4AQPAAeLN6pYJ~CDsQChgBIJIfKJIfMPAgON4BaJIfcO4ggAH11wGIAaz-BLABAbgBAcAB4s3qlgk~CDsQChgBIKYfKKYfMPEgOMsBaKYfcO8ggAH11wGIAaz-BLABAbgBAcAB4s3qlgk~CDsQChgBIKofKKofMPMgOMkBaKofcO8ggAH11wGIAaz-BLABAbgBAcAB4s3qlgk~CDsQChgBINsfKNsfMPQgOJkBaNsfcO8ggAH11wGIAaz-BLABAbgBAcAB4s3qlgk~CDsQChgBIOIfKOIfMPMgOJEBaOIfcO8ggAH11wGIAaz-BLABAbgBAcAB4s3qlgk~CBsQDSCHIDiBAcABgJHyhwg~CBsQDSCnIDhBwAHfwdVP~CBsQCiDpIDjIA8ABuYWKjw0~CBsQDSD_IDgzwAHk3_ndDg~CA4QChgBIKkhKKkhMN8hODZotiFwvyF46pQIgAGfjgiIAZv_F7ABAbgBA8AB-b7YnQQ~CDwQDRgBIKshKKshMNAhOCVouCFw0CF4-weAAUuIAWmwAQG4AQPAAejUr80J~CBsQCiD5ITgXwAGsyPi8Dw~CBsQDSC7IjhEwAHjqP_QBA~CBsQBiCmIzgewAHA4un1Cg~CCgQChgBIJgkKJgkMKkkOBFoniRwpyR4pL8BgAH_uAGIAbX2A7ABAbgBA8ABm-H6cA~CBsQCDiNG8AB6piMXw~CBsQDSD_JDigAcAB8avymgk&ec=dg.bzi5el_3e.1w4w1ni_9s_1s_ku_ci~cc.1qsljd2_15.rn08tm_gk_nw_93_ci
204 No Content 0 B URL HTTP/2 csi.gstatic.com/csi?v=2&s=pagead&action=csi_pagead&top=1&puid=1~lcwheh7v&c=2038924551790261&e=31071368%2C31071524%2C31061691%2C31061693&ctx=1&met.9=1.3ah~13.3d9~2.3jn&met.3=74.3k0_1~947.3k1_1~43.3k3~947.3k3~6.3k3~91.3k3~947.3k4~95.3k3_2~74.3k5_1~947.3k6~43.3k6_1~947.3k7~6.3k7~91.3k7~947.3k8~95.3k7_2~74.3k9~947.3ka~43.3ka~947.3ka~6.3ka~91.3ka~947.3kb~95.3ka_2~74.3kc_1~947.3kd~43.3kd_1~947.3ke~6.3ke~91.3ke~947.3kf~95.3ke_2~74.3kg_1~947.3kh~43.3kh~947.3kh~6.3kh~91.3kh~947.3ki~95.3kh_1~74.3ki~947.3ki~43.3ki_1~947.3kj~6.3kj~91.3kj~947.3kj~95.3kj_1~947.3kk~86.3kk~947.3kk~86.3kk~947.3kk~1.3kk~947.3kk~6.3kl~91.3kl~947.3kl~86.3kl~947.3kl~86.3kl~947.3kl~86.3kl~947.3kl~86.3kl~947.3kl~86.3kl~947.3kl~86.3kl_1~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~77.3k0_m~94.3kp~724.3kp~724.3kq~724.3kq~724.3kq_1~724.3kr~724.3kr_1~724.3kt~724.3kt~724.3ku~724.3ku~724.3ku~724.3kv~894.3l9~894.3la~894.3la~894.3la~894.3la~894.3la~894.3la~660.3ld~660.3ld~660.3ld~660.3ld~660.3ld~660.3ld~660.3ld~243.3rs_3~947.3rv_1~573.3rw~598.3rw~598.3rw~598.3rw~598.3rw~598.3rw~598.3rw~113.3ri_g~112.3rh_h&met.10=1_11.IKIkEPOlAgj4yQQY_NVIKAE~1_16.IKIkEAAI-MkEGPzVSCgA~1_1.IKIkEPD_Awjw_wMY_NVIKAE~1_2.IKIkEPjJBAj4yQQY_NVIKAE~1_7.IKIkEAAI-MkEGPzVSCgA~1_4.IKIkEISqBQiEqgUY_NVIKAE&met.1=1.lcwhedgf~6.98~7.a9~8.ab~9.ab~10.cp~11.ae~12.cp~13.e6~14.f1~15.et~16.of~17.oz~18.p4~19.2ob~20.2ob~21.2oc~23.of&met.7=CBsQByCcBDi9AcAB9pjQvgo~CBsQByCdBDi8AcABweOTswQ~CBsQBiCdBDj5AcAB-r6ozAY~CBsQBiCeBDiCAsABiKjA6QM~CBsQBiCeBDj7AcAB48rgvAs~CBsQCiCeBDjXCsAB0OH68Q4~CBsQBiCfBDi9AcABueC2Dw~CBsQBSCkBDjDAsAB7MzAuAE~CBsgrAQ4swXAAdGamK8G~CBsQCiD3BDiFAcAB8aP1jw0~CBMYASCYBiiYBjD7BjhjQLEGSLIGULMGWO8GYL0GaPEGcPoGeKOFAYAB8H2IAfB9qgETCg1zb3VyY2VzYW5zcHJvEAwYArABAbgBA8ABn4H-mAg~CBsQDSDqBjg7wAHqmIxf~CBsQBxgBIPQGKPQGMLQIOMABwAGM1djrBA~CBsQByD1BjgswAHrkrXUDA~CBsQByD1BjhIwAH65cT7Cg~CBsQByD1BjhvwAHWy5j4Cg~CBsQBSCZDzidBcABubrG0w8~CBsQDSCbDzi4BcABur6M4gE~CBsQCiCoGzibAcABxNjttws~CBsQCiCoGzi3AcABxNjttws~CBsQCiCqGzi2AcABxNjttws~CBsQCiCrGzi1AcABxNjttws~CBsQCiCsGzi1AcABxNjttws~CBsQCiCsGzi1AcABxNjttws~CBsQCiCtGzibBcAB5IHWtQo~CBsQCiCuGzjbAcAB39DxwAI~CBsQDSCuGzjcAcABxrPnpgs~CBsQCiCKHDjKA8AB2euw8wo~CBsQDSC2HDioAcABrK-a_A4~CBsQCiCbHTgRwAGxyZaHCw~CBsQCiCfHTggwAGxyZaHCw~CBsQCiCiHTgdwAGxyZaHCw~CBsQCiClHTgbwAGxyZaHCw~CBsQCiCtHTgXwAGxyZaHCw~CBsQCiCwHTgUwAGxyZaHCw~CBsQDSDKHTiDAsAB04CVlQo~CBsQDSCGHjh7wAHo2I2jCA~CBsQDSCIHjifAcAB6NiNowg~CBsQDSCJHjiXAcAB6NiNowg~CBsQDSCJHjinAcAB6NiNowg~CBsQDSCLHjh7wAHo2I2jCA~CBsQDSCLHjiVAcAB6NiNowg~CBsQDSCMHjibAcAB3--Atwo~CBsQDSCNHjiTAcABvuG-oAs~CBsQDSCQHjg0wAGJ3arxCA~CBsQDSCQHjg1wAHh9IDnBQ~CBsQCiDUHjhSwAHy7JPBBw~CBsQCiDVHjhQwAHLm8bsDw~CBsQCiDWHjhQwAHTy_-UCg~CDYQChgBINYeKNYeMOYgOJACwAHJ4728BQ~CA0QChgBINYeKNYeMOYgOJACQPAeSPgeUOEfWLsgYO8faMEgcNcgeMjeAYAB9NcBiAGs_gSwAQG4AQPAAeHb5t0L~CDsQChgBIIkfKIkfMOsgOOIBQJAfSJUfUOIfWLwgYOIfaMIgcNkgeMneAYAB9dcBiAGs_gSwAQG4AQPAAeLN6pYJ~CDsQChgBIJIfKJIfMPAgON4BaJIfcO4ggAH11wGIAaz-BLABAbgBAcAB4s3qlgk~CDsQChgBIKYfKKYfMPEgOMsBaKYfcO8ggAH11wGIAaz-BLABAbgBAcAB4s3qlgk~CDsQChgBIKofKKofMPMgOMkBaKofcO8ggAH11wGIAaz-BLABAbgBAcAB4s3qlgk~CDsQChgBINsfKNsfMPQgOJkBaNsfcO8ggAH11wGIAaz-BLABAbgBAcAB4s3qlgk~CDsQChgBIOIfKOIfMPMgOJEBaOIfcO8ggAH11wGIAaz-BLABAbgBAcAB4s3qlgk~CBsQDSCHIDiBAcABgJHyhwg~CBsQDSCnIDhBwAHfwdVP~CBsQCiDpIDjIA8ABuYWKjw0~CBsQDSD_IDgzwAHk3_ndDg~CA4QChgBIKkhKKkhMN8hODZotiFwvyF46pQIgAGfjgiIAZv_F7ABAbgBA8AB-b7YnQQ~CDwQDRgBIKshKKshMNAhOCVouCFw0CF4-weAAUuIAWmwAQG4AQPAAejUr80J~CBsQCiD5ITgXwAGsyPi8Dw~CBsQDSC7IjhEwAHjqP_QBA~CBsQBiCmIzgewAHA4un1Cg~CCgQChgBIJgkKJgkMKkkOBFoniRwpyR4pL8BgAH_uAGIAbX2A7ABAbgBA8ABm-H6cA~CBsQCDiNG8AB6piMXw~CBsQDSD_JDigAcAB8avymgk&ec=dg.bzi5el_3e.1w4w1ni_9s_1s_ku_ci~cc.1qsljd2_15.rn08tm_gk_nw_93_ci
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /csi?v=2&s=pagead&action=csi_pagead&top=1&puid=1~lcwheh7v&c=2038924551790261&e=31071368%2C31071524%2C31061691%2C31061693&ctx=1&met.9=1.3ah~13.3d9~2.3jn&met.3=74.3k0_1~947.3k1_1~43.3k3~947.3k3~6.3k3~91.3k3~947.3k4~95.3k3_2~74.3k5_1~947.3k6~43.3k6_1~947.3k7~6.3k7~91.3k7~947.3k8~95.3k7_2~74.3k9~947.3ka~43.3ka~947.3ka~6.3ka~91.3ka~947.3kb~95.3ka_2~74.3kc_1~947.3kd~43.3kd_1~947.3ke~6.3ke~91.3ke~947.3kf~95.3ke_2~74.3kg_1~947.3kh~43.3kh~947.3kh~6.3kh~91.3kh~947.3ki~95.3kh_1~74.3ki~947.3ki~43.3ki_1~947.3kj~6.3kj~91.3kj~947.3kj~95.3kj_1~947.3kk~86.3kk~947.3kk~86.3kk~947.3kk~1.3kk~947.3kk~6.3kl~91.3kl~947.3kl~86.3kl~947.3kl~86.3kl~947.3kl~86.3kl~947.3kl~86.3kl~947.3kl~86.3kl~947.3kl~86.3kl_1~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~947.3km~86.3km~77.3k0_m~94.3kp~724.3kp~724.3kq~724.3kq~724.3kq_1~724.3kr~724.3kr_1~724.3kt~724.3kt~724.3ku~724.3ku~724.3ku~724.3kv~894.3l9~894.3la~894.3la~894.3la~894.3la~894.3la~894.3la~660.3ld~660.3ld~660.3ld~660.3ld~660.3ld~660.3ld~660.3ld~243.3rs_3~947.3rv_1~573.3rw~598.3rw~598.3rw~598.3rw~598.3rw~598.3rw~598.3rw~113.3ri_g~112.3rh_h&met.10=1_11.IKIkEPOlAgj4yQQY_NVIKAE~1_16.IKIkEAAI-MkEGPzVSCgA~1_1.IKIkEPD_Awjw_wMY_NVIKAE~1_2.IKIkEPjJBAj4yQQY_NVIKAE~1_7.IKIkEAAI-MkEGPzVSCgA~1_4.IKIkEISqBQiEqgUY_NVIKAE&met.1=1.lcwhedgf~6.98~7.a9~8.ab~9.ab~10.cp~11.ae~12.cp~13.e6~14.f1~15.et~16.of~17.oz~18.p4~19.2ob~20.2ob~21.2oc~23.of&met.7=CBsQByCcBDi9AcAB9pjQvgo~CBsQByCdBDi8AcABweOTswQ~CBsQBiCdBDj5AcAB-r6ozAY~CBsQBiCeBDiCAsABiKjA6QM~CBsQBiCeBDj7AcAB48rgvAs~CBsQCiCeBDjXCsAB0OH68Q4~CBsQBiCfBDi9AcABueC2Dw~CBsQBSCkBDjDAsAB7MzAuAE~CBsgrAQ4swXAAdGamK8G~CBsQCiD3BDiFAcAB8aP1jw0~CBMYASCYBiiYBjD7BjhjQLEGSLIGULMGWO8GYL0GaPEGcPoGeKOFAYAB8H2IAfB9qgETCg1zb3VyY2VzYW5zcHJvEAwYArABAbgBA8ABn4H-mAg~CBsQDSDqBjg7wAHqmIxf~CBsQBxgBIPQGKPQGMLQIOMABwAGM1djrBA~CBsQByD1BjgswAHrkrXUDA~CBsQByD1BjhIwAH65cT7Cg~CBsQByD1BjhvwAHWy5j4Cg~CBsQBSCZDzidBcABubrG0w8~CBsQDSCbDzi4BcABur6M4gE~CBsQCiCoGzibAcABxNjttws~CBsQCiCoGzi3AcABxNjttws~CBsQCiCqGzi2AcABxNjttws~CBsQCiCrGzi1AcABxNjttws~CBsQCiCsGzi1AcABxNjttws~CBsQCiCsGzi1AcABxNjttws~CBsQCiCtGzibBcAB5IHWtQo~CBsQCiCuGzjbAcAB39DxwAI~CBsQDSCuGzjcAcABxrPnpgs~CBsQCiCKHDjKA8AB2euw8wo~CBsQDSC2HDioAcABrK-a_A4~CBsQCiCbHTgRwAGxyZaHCw~CBsQCiCfHTggwAGxyZaHCw~CBsQCiCiHTgdwAGxyZaHCw~CBsQCiClHTgbwAGxyZaHCw~CBsQCiCtHTgXwAGxyZaHCw~CBsQCiCwHTgUwAGxyZaHCw~CBsQDSDKHTiDAsAB04CVlQo~CBsQDSCGHjh7wAHo2I2jCA~CBsQDSCIHjifAcAB6NiNowg~CBsQDSCJHjiXAcAB6NiNowg~CBsQDSCJHjinAcAB6NiNowg~CBsQDSCLHjh7wAHo2I2jCA~CBsQDSCLHjiVAcAB6NiNowg~CBsQDSCMHjibAcAB3--Atwo~CBsQDSCNHjiTAcABvuG-oAs~CBsQDSCQHjg0wAGJ3arxCA~CBsQDSCQHjg1wAHh9IDnBQ~CBsQCiDUHjhSwAHy7JPBBw~CBsQCiDVHjhQwAHLm8bsDw~CBsQCiDWHjhQwAHTy_-UCg~CDYQChgBINYeKNYeMOYgOJACwAHJ4728BQ~CA0QChgBINYeKNYeMOYgOJACQPAeSPgeUOEfWLsgYO8faMEgcNcgeMjeAYAB9NcBiAGs_gSwAQG4AQPAAeHb5t0L~CDsQChgBIIkfKIkfMOsgOOIBQJAfSJUfUOIfWLwgYOIfaMIgcNkgeMneAYAB9dcBiAGs_gSwAQG4AQPAAeLN6pYJ~CDsQChgBIJIfKJIfMPAgON4BaJIfcO4ggAH11wGIAaz-BLABAbgBAcAB4s3qlgk~CDsQChgBIKYfKKYfMPEgOMsBaKYfcO8ggAH11wGIAaz-BLABAbgBAcAB4s3qlgk~CDsQChgBIKofKKofMPMgOMkBaKofcO8ggAH11wGIAaz-BLABAbgBAcAB4s3qlgk~CDsQChgBINsfKNsfMPQgOJkBaNsfcO8ggAH11wGIAaz-BLABAbgBAcAB4s3qlgk~CDsQChgBIOIfKOIfMPMgOJEBaOIfcO8ggAH11wGIAaz-BLABAbgBAcAB4s3qlgk~CBsQDSCHIDiBAcABgJHyhwg~CBsQDSCnIDhBwAHfwdVP~CBsQCiDpIDjIA8ABuYWKjw0~CBsQDSD_IDgzwAHk3_ndDg~CA4QChgBIKkhKKkhMN8hODZotiFwvyF46pQIgAGfjgiIAZv_F7ABAbgBA8AB-b7YnQQ~CDwQDRgBIKshKKshMNAhOCVouCFw0CF4-weAAUuIAWmwAQG4AQPAAejUr80J~CBsQCiD5ITgXwAGsyPi8Dw~CBsQDSC7IjhEwAHjqP_QBA~CBsQBiCmIzgewAHA4un1Cg~CCgQChgBIJgkKJgkMKkkOBFoniRwpyR4pL8BgAH_uAGIAbX2A7ABAbgBA8ABm-H6cA~CBsQCDiNG8AB6piMXw~CBsQDSD_JDigAcAB8avymgk&ec=dg.bzi5el_3e.1w4w1ni_9s_1s_ku_ci~cc.1qsljd2_15.rn08tm_gk_nw_93_ci HTTP/1.1
Host: csi.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ww.hitstreams.live
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: *
date: Sat, 14 Jan 2023 21:49:41 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Wed, 21 Jan 2004 19:51:30 GMT
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sb.scorecardresearch.com/beacon.js
200 OK 0 B URL HTTP/2 sb.scorecardresearch.com/beacon.js
IP
GET /beacon.js HTTP/1.1
Host: sb.scorecardresearch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sat, 14 Jan 2023 12:11:36 GMT
last-modified: Tue, 28 Jun 2022 13:19:23 GMT
etag: W/"eaf85c1c6758e84acfe134efd70e9373"
x-amz-server-side-encryption: AES256
cache-control: max-age=86400
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JGlC9ZGBJsVTur8zyYefHyCsYlVl0RzSLe-VQYARprgl9o0ysSDkpw==
age: 34682
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=rtus&topUrl=ww.hitstreams.live
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=rtus&topUrl=ww.hitstreams.live
IP
GET /syncframe?origin=rtus&topUrl=ww.hitstreams.live HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:38 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=fbe409a1-25d7-4a2a-8882-ea20612e53f5; expires=Thu, 08 Feb 2024 21:49:38 GMT; domain=.criteo.com; path=/; secure; samesite=none
optout=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=.criteo.com; path=/
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 844365
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:38 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 75392
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
adserve2.mahimeta.com/networks/time/?domain=ww.hitstreams.live&pathname=%2Fchannels%2Fksi-live-streams.php&query=¤tPage=https%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&screenWidth=1280&screenHeight=939&landed=true&ping=false
200 OK 0 B URL HTTP/2 adserve2.mahimeta.com/networks/time/?domain=ww.hitstreams.live&pathname=%2Fchannels%2Fksi-live-streams.php&query=¤tPage=https%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&screenWidth=1280&screenHeight=939&landed=true&ping=false
IP
POST /networks/time/?domain=ww.hitstreams.live&pathname=%2Fchannels%2Fksi-live-streams.php&query=¤tPage=https%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&screenWidth=1280&screenHeight=939&landed=true&ping=false HTTP/1.1
Host: adserve2.mahimeta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1335
Origin: https://ww.hitstreams.live
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:39 GMT
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-Token
cache-control: no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lnYmg6%2Bz3%2FaYhbGmTs0y9uYiJOPqIsRPLB0IaEkdCBlvIGGUKTbTdTQ1MauCFmy7JGao07Y6A%2BR%2BCAzJuDV3P8PB16qYslvpmPaQpUHCdRfxfGsOh5ydE8XsMk5jKLix3VxMoXP5N4s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 789995323af20b59-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
services.vlitag.com/adv1/?q=95f595bd422b750bf5952e338919e7b1
200 OK 0 B URL HTTP/2 services.vlitag.com/adv1/?q=95f595bd422b750bf5952e338919e7b1
IP
GET /adv1/?q=95f595bd422b750bf5952e338919e7b1 HTTP/1.1
Host: services.vlitag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:36 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=900, stale-while-revalidate=3600
cf-bgj: minify
cf-polished: origSize=548524
etag: W/"95f595bd422b750bf5952e338919e7b1 2023-01-10T23:50:52 v1 default"
vary: Accept-Encoding
x-robots-tag: noindex, nofollow, noarchive, nosnippet
cf-cache-status: HIT
age: 702
server: cloudflare
cf-ray: 7899951f6fccb500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
celeritascdn.com/script/bootstrap.js
200 OK 0 B URL HTTP/2 celeritascdn.com/script/bootstrap.js
IP
GET /script/bootstrap.js HTTP/1.1
Host: celeritascdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://weakstream.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:36 GMT
content-type: application/javascript
x-guploader-uploadid: ADPycdvliWf_5qMp8qk6lWAxsWh-L-MbMnn-RUZXYqqfH8vObxPsO2bhL0XxMWThXxsQaNWG8rwno9f-iDv4kOMwm68A0A
x-goog-generation: 1670939553826085
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 100623
x-goog-hash: crc32c=AsVyBQ==, md5=QW9pKNjz2NZmVavAl7rKAw==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Sun, 15 Jan 2023 01:49:36 GMT
cache-control: public, max-age=14400
last-modified: Tue, 13 Dec 2022 13:52:33 GMT
etag: W/"416f6928d8f3d8d66655abc097baca03"
cf-cache-status: HIT
age: 2735
vary: Accept-Encoding
server: cloudflare
cf-ray: 7899951fce15b527-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=rtus&domain=st.chatango.com&sn=FirefoxSyncframe&so=0&topUrl=ww.hitstreams.live&info=QlENpF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czNiTFNMZG1DRW9lVEdlcFNQR3ZteEIwMWlOdWVXTEp6aG9wclBENW9raCUyQg&idsd=1043341200,-634317532&rtusCallerId=72&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=rtus&domain=st.chatango.com&sn=FirefoxSyncframe&so=0&topUrl=ww.hitstreams.live&info=QlENpF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czNiTFNMZG1DRW9lVEdlcFNQR3ZteEIwMWlOdWVXTEp6aG9wclBENW9raCUyQg&idsd=1043341200,-634317532&rtusCallerId=72&lsw=1
IP
GET /sid/json?origin=rtus&domain=st.chatango.com&sn=FirefoxSyncframe&so=0&topUrl=ww.hitstreams.live&info=QlENpF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czNiTFNMZG1DRW9lVEdlcFNQR3ZteEIwMWlOdWVXTEp6aG9wclBENW9raCUyQg&idsd=1043341200,-634317532&rtusCallerId=72&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=rtus&topUrl=ww.hitstreams.live
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:38 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1465318
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
quantcast.mgr.consensu.org/GVL-v2/vendor-list.json
200 OK 0 B URL HTTP/2 quantcast.mgr.consensu.org/GVL-v2/vendor-list.json
IP
GET /GVL-v2/vendor-list.json HTTP/1.1
Host: quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ww.hitstreams.live
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 3000
cache-control: max-age=172800
date: Sat, 14 Jan 2023 03:00:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
last-modified: Sat, 14 Jan 2023 03:00:33 GMT
etag: W/"c86f10ce2b09eb75954171484adb1704"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8YFSw4Rgb6WWLX6sArn0blB_N1ipHmC703vBsP7KgC04Jv2bjkcceg==
age: 67736
X-Firefox-Spdy: h2
adserve.mahimeta.com/networks/?domain=ww.hitstreams.live&pathname=%2Fchannels%2Fksi-live-streams.php&query=¤tPage=https%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&size=Responsive&placement=inline&adId=mMTag_Responsive_63364182&screenWidth=1280&screenHeight=939&keywordViolation=false&blockedKeywords=&autoBlock=false&timezone=0&currTime=21:49&desktop=300x250&tablet=300x250&mobile=300x250&time_exceeded=false&page_categories=&thin_content_count=100
200 OK 0 B URL HTTP/2 adserve.mahimeta.com/networks/?domain=ww.hitstreams.live&pathname=%2Fchannels%2Fksi-live-streams.php&query=¤tPage=https%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&size=Responsive&placement=inline&adId=mMTag_Responsive_63364182&screenWidth=1280&screenHeight=939&keywordViolation=false&blockedKeywords=&autoBlock=false&timezone=0&currTime=21:49&desktop=300x250&tablet=300x250&mobile=300x250&time_exceeded=false&page_categories=&thin_content_count=100
IP
POST /networks/?domain=ww.hitstreams.live&pathname=%2Fchannels%2Fksi-live-streams.php&query=¤tPage=https%3A%2F%2Fww.hitstreams.live%2Fchannels%2Fksi-live-streams.php&size=Responsive&placement=inline&adId=mMTag_Responsive_63364182&screenWidth=1280&screenHeight=939&keywordViolation=false&blockedKeywords=&autoBlock=false&timezone=0&currTime=21:49&desktop=300x250&tablet=300x250&mobile=300x250&time_exceeded=false&page_categories=&thin_content_count=100 HTTP/1.1
Host: adserve.mahimeta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1335
Origin: https://ww.hitstreams.live
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:39 GMT
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-Token
cache-control: no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=27sbOH%2Bay1%2BpjvyNehssDHYRMzrIGeeWKy4EuJe48kaCCuQmTWla87D9PIIfDaoiLwmpbBtzeq3B48aAVZCz1qJosnFRAHxCkIqhQqk0mEcszsJ0dVP9AHuHkT6evYNJULnUaaPRIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 789995322aea0b59-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=kM1SE180M0RITmhlJTJCZkMwOUJGQlhaMUN2czNiTFNMZG1DRW9lVEdlcFNQR3ZteENvWGI2aWh0YXd0RUtrV0Q5NXl5bDE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:38 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=QlENpF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czNiTFNMZG1DRW9lVEdlcFNQR3ZteEIwMWlOdWVXTEp6aG9wclBENW9raCUyQg; expires=Thu, 08 Feb 2024 21:49:39 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 276245
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
celeritascdn.com/script/ut.js?cb=1673732977166
200 OK 0 B URL HTTP/2 celeritascdn.com/script/ut.js?cb=1673732977166
IP
GET /script/ut.js?cb=1673732977166 HTTP/1.1
Host: celeritascdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://weakstream.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:37 GMT
content-type: application/javascript
x-guploader-uploadid: ADPycdtD7leACZrcvA-YUX93pIYQIu-y8ZrBEFgHr6XyEmBCTkq9Rvj8OoKGgyLN83hSnDESnMIGwWkaE_DeNnCmwKILBw
x-goog-generation: 1670939749168345
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 71395
x-goog-hash: crc32c=aFnw8A==, md5=1ZA8yu2VHCgNZ/QYhUjh6Q==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Sun, 15 Jan 2023 01:49:37 GMT
cache-control: public, max-age=14400
last-modified: Tue, 13 Dec 2022 13:55:49 GMT
etag: W/"d5903ccaed951c280d67f4188548e1e9"
cf-cache-status: HIT
age: 3512
vary: Accept-Encoding
server: cloudflare
cf-ray: 789995226911b527-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
adserve2.mahimeta.com/ip/
200 OK 0 B URL HTTP/2 adserve2.mahimeta.com/ip/
IP
GET /ip/ HTTP/1.1
Host: adserve2.mahimeta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ww.hitstreams.live
Connection: keep-alive
Referer: https://ww.hitstreams.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:39 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-Token
cache-control: no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BeVYtpUfZSaAOooG65ApYs4E8zV8j6T2l6A0xBCrS%2BmsU64rA7lyVOK62nr5KNIs2Jhp0gocvwGmLBs%2FpxFMSNeg8T2T6iOHrAuQIwGXMm5hw%2FWBmmGUe%2FinDuuW20RedwTUt9uPhnU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 789995322af00b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://st.chatango.com/
x-crto-bundle: oZ8fzF85Y3IxVnJDUE53enMxT255a2RicG5PYWtsZlljYXRMUk42RjI4R1ZLb1RtNE5TdVRYNlM5TDluUncyZmM3M2JoUHh3TXJ3M2hMeTBCTmZFc0JZQ1U5NVclMkJOb0QlMkYwVkFoaG9uV1FGVGJxNGxBR2hIOTg3JTJGeHJhdDZlN2NlWGs3eFZ5RlNKM0NpWEVYWURFRU12VGp5UVElM0QlM0Q
Origin: https://st.chatango.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 21:49:39 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-origin: https://st.chatango.com
server-processing-duration-in-ticks: 2140663
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
104.21.41.19
52.58.102.196
23.36.77.32
34.160.144.191
178.250.2.150
151.101.84.193
188.114.96.1
139.45.197.238
141.226.228.48
54.39.156.32