| r10.o.lencr.org/ |  23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashb7dbdd91e33b4b40b990affe38907ed8 8c1dc814dfd071e0c4dcfc0f5429eb7c221d609a 842512e65717b866647d52bc726c962cc42c7e2027c53a2b5b79d7b86d2e50fc
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "842512E65717B866647D52BC726C962CC42C7E2027C53A2B5B79D7B86D2E50FC"
Last-Modified: Sun, 30 Jun 2024 13:53:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3207
Expires: Sun, 30 Jun 2024 21:54:21 GMT
Date: Sun, 30 Jun 2024 21:00:54 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf6d043d7b5e98906db1fe2695e98859c 154db889ef567d2839bb7eaa15818cd546495b4f f4fcc79261acda8e1cb81b9fc6524ee560b60740b0cf8107308dc82750dc079a
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F4FCC79261ACDA8E1CB81B9FC6524EE560B60740B0CF8107308DC82750DC079A"
Last-Modified: Sat, 29 Jun 2024 23:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8153
Expires: Sun, 30 Jun 2024 23:16:48 GMT
Date: Sun, 30 Jun 2024 21:00:55 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd7cd114e209a6a2072fa2672372a02f1 3e872420829976f523c9a9b28225e81ad877bfc9 5d0241d467ad619637837f9894f8011e62a08a39bd81dd072cad8091dd58a588
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5D0241D467AD619637837F9894F8011E62A08A39BD81DD072CAD8091DD58A588"
Last-Modified: Sat, 29 Jun 2024 16:18:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12037
Expires: Mon, 01 Jul 2024 00:21:32 GMT
Date: Sun, 30 Jun 2024 21:00:55 GMT
Connection: keep-alive
|
|
| w27.my-cima.net/uploads/custom-logo.png |  104.21.20.102 | 200 OK | 1.7 kB |
URL GET HTTP/3w27.my-cima.net/uploads/custom-logo.png IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 261 x 80, 8-bit/color RGB, non-interlaced Hash3e53d26a827b96ee64d9acd4e9f6ca8c dce6ba3cd6bb744cbf18af7845d6b2b6656d93d2 7528a0ef939cd8a7234300f5f244b8603a65f252beaa4fb4d69c564ba70c01e0
GET /uploads/custom-logo.png HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/png
content-length: 1695
last-modified: Mon, 11 Mar 2024 21:58:09 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XxbiXvXlhfhX6%2FfnoS5bQGvoR7mVWFmDQfAX2UXaqhkViZL4u%2BtJ%2FkjcbpSR0s2MYhj29srDZpYjOsvn1qDotjoDRpvlxrTtisGbtFEOGfDzjG4TLJd3CKZr7%2B4zTu8seLU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116bacc0cbe4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/avatars/avatar795-1.jpg | 104.21.20.102 | 200 OK | 4.8 kB |
URL GET HTTP/3w27.my-cima.net/uploads/avatars/avatar795-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 120x120, components 3 Hash8d40b6ddc977a84433c3df9117e5e5ed b6502d175ff51f1fa47545cbb7dda578e0197349 34d406af254166de7eaf86cd6754a1a74ea12070ed90d1b9390ed0fce2f10f0f
GET /uploads/avatars/avatar795-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 4805
last-modified: Sun, 13 Nov 2022 20:45:32 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 3896
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sUPxcQQClOn31F8zKEqnqhMtcqamsHL02pYGReK151zNK2g1x3aKltLLMVaLuMki6e6CtDXdJs72Ls%2BgbZv8JtxgRp7B%2FWYdCdLLzxx6J4qmMN3%2BW7JW0EWS%2BQwdpva%2BSns%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116badc19be4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/templates/3arbserv/img/pm-avatar.png | 104.21.20.102 | 200 OK | 2.1 kB |
URL GET HTTP/3w27.my-cima.net/templates/3arbserv/img/pm-avatar.png IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 140 x 140, 8-bit colormap, non-interlaced Hashbe7a1517b84d3548fdb863e78c72a3fe 91a88cc99f02e7ed22274fc3a6f42c6a3148ef0d bd2021d52dbb110212c08885e0dab9580282334d6f1d1e50b8da0270ce8c475e
GET /templates/3arbserv/img/pm-avatar.png HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/png
content-length: 2135
last-modified: Tue, 19 Apr 2016 15:56:34 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 6387
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i%2BFvHAuBBk2gS4ned1ObDbICvn5%2FIxdIkTokMh%2FtnHRQ4CSEd3lv0PXjwn%2Fm047TInociZOOAe4%2Fd%2BJ58v57Z%2FqSi8Ux3lAlTPiBJ8TnOV6IxC0e3L14AD3DHCre8bNPRN8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116badc27be4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/avatars/default.gif | 104.21.20.102 | 200 OK | 2.3 kB |
URL GET HTTP/3w27.my-cima.net/uploads/avatars/default.gif IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeGIF image data, version 89a, 66 x 66 Hash09e2544297338b84eee1c2cd0eac23d8 4c07242aef5a58da166e675443bd1808e6b1c44c bc5b030f6f3d3d309ee03d6e75e4391dd2ec1a380390c5d33fe0ea654b5fc968
GET /uploads/avatars/default.gif HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/gif
content-length: 2327
last-modified: Sun, 11 Sep 2022 14:13:11 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 1916
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dijE5LAyrB5VRJwQejw9JhewvKnKmoZOCXEkYP6ajQhqsPPdBxvrQ9kWs4rz2NToQZVSUloE4JGarngREKarHCjNxdDYCUqfb5crA4bMVgHrPBCMAqpgFwezVFxfCCY1MvM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116badc2ebe4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/articles/2a720f04.jpg | 104.21.20.102 | 200 OK | 30 kB |
URL GET HTTP/3w27.my-cima.net/uploads/articles/2a720f04.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 450x640, components 3 Hashc1767e2ef91df74584b5ed5fc3af5004 642c6cb1dd7683e195632aa4dd31a16fa3294f00 41c88a0e0e62a9aecb3c4c2e5f8c823659d44c2c6732922ff97d499d1b985c10
GET /uploads/articles/2a720f04.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 29932
last-modified: Sun, 11 Sep 2022 14:13:19 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zsEaU%2BFgt8LTbjgIIVVl5m5T6r38xy5pOih%2BUDqJ7Jsl%2FQuxX%2Fu1NSxY0Iu5zAUXW4IuqBWvXZ%2FfM5t00FTmTsEpSC6kABh%2B8bDKfn%2Bde6Oz9mlytHv%2FzahNn2yTg%2Bzh4Gg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116badc23be4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| i.ibb.co/QHn7LZh/images.png |  162.19.58.161 | 200 OK | 5.2 kB |
URL GET HTTP/2i.ibb.co/QHn7LZh/images.png IP162.19.58.161:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerLet's Encrypt Subjectibb.co Fingerprint5F:18:DC:78:83:E8:A9:2D:9B:15:95:2F:AC:0C:82:09:04:D5:10:6D ValidityFri, 21 Jun 2024 07:49:37 GMT - Thu, 19 Sep 2024 07:49:36 GMT
File typePNG image data, 348 x 145, 8-bit colormap, non-interlaced Hasha766d8c1a622eaf6f8c61923eb7b2ffa 0451f3b28a9d3ba5e86db5bf84647b2695d281df c4708018079d00eb69f9401ede6757ad56d2debe193c0e2e5490229d5c4db8ea
GET /QHn7LZh/images.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/png
content-length: 5175
last-modified: Mon, 16 Oct 2023 14:16:03 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w27.my-cima.net/uploads/thumbs/dc5756709-1.jpg | 104.21.20.102 | 200 OK | 28 kB |
URL GET HTTP/3w27.my-cima.net/uploads/thumbs/dc5756709-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 720x405, components 3 Hashfb23092d5066827ac8492cd44519fd75 4199b6dc8ad8f3bed5cc5c6cde9b6925f1ec363f 756c4e5aff7233f18d68703798bf7823f5eccaa3c4965c246cf08aefc1bc653c
GET /uploads/thumbs/dc5756709-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 28284
last-modified: Thu, 04 Jan 2024 15:52:03 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 37
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JoNhRXDmFJ3alRr2UGHbR2aRE62eJMR5A3t391u5wam6pWQQ6zrS3%2FL%2FxKtD4mAM9U8a%2Fr1A0%2BTWLk7yq3wqY8qgZw3WRGYk%2BYXEaTBvGM8UJ6BoCX%2Bex3BEMvoQYjPB8gE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116baec3abe4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/thumbs/a7963f373-1.jpg | 104.21.20.102 | 200 OK | 30 kB |
URL GET HTTP/3w27.my-cima.net/uploads/thumbs/a7963f373-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 720x405, components 3 Hash75d81d5317781f47caa408aba0c6a0ae 352af311d1c07c39c4c748f9fa0dcc0d4cb53148 c79fc488163377e3cc9bda6d22bec2ff39d7f99b3fcca80b901d0fa2336f4031
GET /uploads/thumbs/a7963f373-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 30531
last-modified: Thu, 04 Jan 2024 16:12:27 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 261
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XUXn7QpTv%2FGAfu90MDdu%2FETjiLEKJspm43ScWotuebrWYQWOkiUfuRNTirEQv9%2FoxD%2Fnx7dtsgZQGZoRcpjbw7TXjFlIcfDqiChah%2BeI2hT3%2BNwxi94V7bhM5vS410oLmXo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116baec3cbe4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/thumbs/0c5a01869-1.jpg | 104.21.20.102 | 200 OK | 44 kB |
URL GET HTTP/3w27.my-cima.net/uploads/thumbs/0c5a01869-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 851x480, components 3 Hashc2158afeae22672c6c808a996a6ee7c9 2f3b487e72fbf3b37f18006acd9457b51ceca96d 4241965028ddfcc5a70cff912f584f29f24a86b1c33a3c29e7cd099dd04e0a71
GET /uploads/thumbs/0c5a01869-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 43946
last-modified: Sat, 06 Jan 2024 07:19:26 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 7000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v98cBojAyjBVSYR9PZ17FqLARsjDDKpHsk%2F67kWj2WMxJzMtvhIk3ercsSTqwfMZOWZHwnfHdhDGiNhWaR2tXwZi1vMY8IcOG4Y6%2Bib4AWtiskdjXzNOHAN9j1jaNpKDwzw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116baec3ebe4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/thumbs/4137e42c1-1.jpg | 104.21.20.102 | 200 OK | 45 kB |
URL GET HTTP/3w27.my-cima.net/uploads/thumbs/4137e42c1-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 851x480, components 3 Hash686245c9e7bf2950dd34edca12054d38 370c29ee4388d4986d87431129189343ab97f8b8 7bbc001355c9f0c5c6c36560ef0ab392732e25ff2babf313468ec116532b703c
GET /uploads/thumbs/4137e42c1-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 45019
last-modified: Sun, 07 Jan 2024 05:49:00 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 37
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QAV4lEXQ8XWULNtkbt95OMSgGj4IWNdrSTzHzB5kI8F0i196CQ6eBrWFvi%2BmkHEV5bbnbfreHGabSvSJ1kyxUZtf6UFofEjiyhKtnIukbDN7AzQnh47hnj%2B8GlBi%2BbPhCwg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116baec4fbe4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/thumbs/849d9654f-1.jpg | 104.21.20.102 | 200 OK | 41 kB |
URL GET HTTP/3w27.my-cima.net/uploads/thumbs/849d9654f-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 851x480, components 3 Hashae04e62a60ab33291563cfa004b4709f 55e00e706fdcc4842bc38e2d880552bb9baaf8b1 24e59410e2aa8cbf929e044d9f116496be57cbbfadbd1b39d5556f12960944b2
GET /uploads/thumbs/849d9654f-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 40808
last-modified: Wed, 03 Jan 2024 18:17:18 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 37
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wv8aQzoDcpa9Z%2FT%2FnIHS%2BiNM1NNiIoQinPACJpytAZ6YlM0MnkmjZo7kQEoPB1CtQQC6sde7G0KIkQi8KyL4EHyhaUAERsC9uLW0V4Y602febpAAPi44ZgVAGfDii%2Ba8SqI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116baec52be4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/thumbs/c6efc4765-1.jpg | 104.21.20.102 | 200 OK | 48 kB |
URL GET HTTP/3w27.my-cima.net/uploads/thumbs/c6efc4765-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 851x480, components 3 Hashbba28a5ff0417076f4d0b20bc6434530 95c489e4cf33f32e18d68657aeb125f44b1eeeb3 b8eb4cb702d78907202ba4906fb8f914dc4bd3b79d0306c37ea1b25559dcd52a
GET /uploads/thumbs/c6efc4765-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 47753
last-modified: Fri, 05 Jan 2024 17:06:28 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 37
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w8dgACttudnBTySYldcdsrZHTx0ZrvE%2BhwLpzy%2Fk4BlIrAALcBRAIYaa3HBtO8hv8m5RYZR6bMpW4t2Sb3O1Oe7fo63a7j0R887u%2FGvuT%2FXO3f6dLVEs1rd6t26yBuw%2FPXM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116bafc55be4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/thumbs/12e1b3cf3-1.jpg | 104.21.20.102 | 200 OK | 26 kB |
URL GET HTTP/3w27.my-cima.net/uploads/thumbs/12e1b3cf3-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 851x480, components 3 Hashce71a19e5b40a0e96e9b081109bf0784 44ec353fe5db43a9b98fc36c6d0f4aad13502061 db2291aba8ba040f18acbe44ebd80e99220c4faa9576edb5b35faccd2f80be3c
GET /uploads/thumbs/12e1b3cf3-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 25762
last-modified: Sat, 06 Jan 2024 08:45:30 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 37
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FtHE8UZTa54nkdhubC5FarGdixH2MDDHgcExCFzInofLCQ51GlXq9WXoWc3HXLKKoKW1%2B184sc76ZV0S9VoMeYjYuvY3C%2FqSnriPlgD%2BPEO5k%2BasO9ogxctPSj5BpwexlYM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116bafc5bbe4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/thumbs/3f6803fd0-1.jpg | 104.21.20.102 | 200 OK | 49 kB |
URL GET HTTP/3w27.my-cima.net/uploads/thumbs/3f6803fd0-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 851x480, components 3 Hash2d77803515e987664d5b5dca89ccb03b 9cf73462f6b4798e2c9e7a3faeef84a2d1392557 c9d72a01598023c459afdf3af2c2852ae49efb0a16a1de6b4f153790f11fb9a3
GET /uploads/thumbs/3f6803fd0-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 48653
last-modified: Fri, 05 Jan 2024 18:17:33 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 37
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YDZXoGJNze4G1hqGCdh23nDx7fd6ZJ9LWz01yI2SW6i9CvAGOzhCJ6a%2FbuQXoqaV2ayzDDXT7fZZ3RKwfwfGvLjGYwb7LKeolWhAnT8wWYNJ3nVxNElr6yyvTEqfWDTV4vk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116bafc5dbe4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/thumbs/a6e3799d9-1.jpg | 104.21.20.102 | 200 OK | 52 kB |
URL GET HTTP/3w27.my-cima.net/uploads/thumbs/a6e3799d9-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 851x480, components 3 Hash7e8e2b93b69a92ccbb6ef69503fc2ee9 12fe274dbb2654582b0089321128bc2c0f5b32fd ff9846ec4eb3462697b3c3b495f27c853ce50bca6185aceacf9c50e782c8fe82
GET /uploads/thumbs/a6e3799d9-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 51683
last-modified: Sat, 06 Jan 2024 08:53:11 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 37
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NnRPfWnleO7t49fWUnuvRK%2FVKB%2FMqyIYMzBY5CDeGNVTlLr9ZcuOqA4ndOqY3vjiXU%2FoBGEOQ1UE6xK45BNJhfpuwW39v6EPh%2BYR6vhvDHJhCWiFSk0rE3AXRRwFZ1KjD5M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116bafc68be4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/thumbs/13e7d0497-1.jpg | 104.21.20.102 | 200 OK | 43 kB |
URL GET HTTP/3w27.my-cima.net/uploads/thumbs/13e7d0497-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 851x480, components 3 Hash35174fa414c678069399ed9943d70f83 195202b0cd5099a49e5e039c2b900bc47227b257 c7d7d0d5a1f2d75e2116d37b9c8f2faa4a1723b24ae952aa34f66f83114cc284
GET /uploads/thumbs/13e7d0497-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 42688
last-modified: Sun, 07 Jan 2024 05:40:11 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 7000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ughy%2Bow7H7JeCiQ9MkEk%2Bxefwj%2BPZCfwcCo5sKdzHT7TYRONHRU4dnuDuDMVNs5bhsCW6c3R0K8DedBiaXq%2FP2tzRvytwcanl4eHN8EHR%2Fpxv99VcOqPHduvQMsL%2B%2FaMSvw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116bafc6bbe4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/thumbs/9fe7b7c15-1.jpg | 104.21.20.102 | 200 OK | 47 kB |
URL GET HTTP/3w27.my-cima.net/uploads/thumbs/9fe7b7c15-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 851x480, components 3 Hash9d07c72cf67b582971c3e0c97ced1170 2ce012a172756b4215978686df4f322b6aa71ba9 75b59e101c34a1b0d049c41881f48016823ceed0179469fea0d7d9bf0d73ac84
GET /uploads/thumbs/9fe7b7c15-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 47237
last-modified: Thu, 11 Jan 2024 10:15:16 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 37
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Aa%2F7YuOkDcYdort5ACahsbYq49jZy05%2FaxOqvzQHtmNqXQzUzgSMmP06t9GjSrJDCDfCAN3PHTE3pzZv732lZea%2BlKVX05PMGn0b%2Bwv%2FX38CLvrw7tubnQQ1a3PMw1MNxac%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116bb0c75be4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/thumbs/7b97f6b78-1.jpg | 104.21.20.102 | 200 OK | 41 kB |
URL GET HTTP/3w27.my-cima.net/uploads/thumbs/7b97f6b78-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 851x480, components 3 Hash15a7153ae2d721d297357616950f51e1 a75f9e2f22795ea7853649ab3416f67a4f642310 f0d53058677b3b6deff0b8bcf4c7fe9cfeb2b71245ee44bff7c7dd9f82b5761f
GET /uploads/thumbs/7b97f6b78-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 41410
last-modified: Fri, 05 Jan 2024 18:13:31 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 5097
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FNm3f%2FR39xGgQekv3hAaD6VskGfNEs4TXGc%2F%2BWPIRYCRT7Ncb%2FXaX3pEvsqwW0sUcejbxIv3sED%2FXBDfbE%2F4JGK62bsdUjsjVsgF%2BP%2FV7vPuNKk5z9PsAnBHMLzHemAb0XQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116bb0c81be4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/thumbs/fcae335a6-1.jpg | 104.21.20.102 | 200 OK | 55 kB |
URL GET HTTP/3w27.my-cima.net/uploads/thumbs/fcae335a6-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 851x480, components 3 Hash7aaa3dca26328ef4e1a3bbef01b6147a 5c20234cdfaebe42b7a88a48e957aa092f4909ae b7a2d731c04c03c63d7a7210deba5cb0f66bd4d10803cf68316ee6817fc64643
GET /uploads/thumbs/fcae335a6-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 54797
last-modified: Sat, 06 Jan 2024 09:23:17 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 7000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XHsyvLiwTubXtZE7swiacHU798ZyY2vGyqEuONegV8lr8uKT0i9MGYjp2gex5vioi3kLVSOzpSHQ17c98MjrT0Dyd1gBdm3rjqLX7749vS9XDvSlUUg3JoBGL5AvfOREGww%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116bb0c8cbe4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/thumbs/02583a4ab-1.jpg | 104.21.20.102 | 200 OK | 35 kB |
URL GET HTTP/3w27.my-cima.net/uploads/thumbs/02583a4ab-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 851x480, components 3 Hashdbb3e90fcd6b3328d025a06ef1a05525 296087bdfb0a79c846d615d6b1df183159a2801f a9b5530388a989b7c2bb288614d0c6f007bf80442f425a87df63ba732f51e98a
GET /uploads/thumbs/02583a4ab-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 34843
last-modified: Fri, 05 Jan 2024 20:47:31 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 36
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UaUQoiRSl6grdTqjOZ%2FIJ6JZXD5GkA7LoPv8%2FWCaFMWZt40nOH%2B8YqSio1pNxrgTqTQCrhPpzzCrswrNzkIOVd7vm0%2FqkqdwCiZ86Rc1pEiWTJgL2IvlVSxSxWjtmrJ6wYI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116bb1c8ebe4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/include/securimage_show.php?sid=90750ca667f6b62a651d463cbb6a1cd6 | 104.21.20.102 | 200 OK | 3.3 kB |
URL GET HTTP/3w27.my-cima.net/include/securimage_show.php?sid=90750ca667f6b62a651d463cbb6a1cd6 IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 158 x 35, 8-bit/color RGB, non-interlaced Hash1996df8b7e97af7fdaa29471d48503d8 49600057be79564bc22a4aa822183b53b7933e51 d18a71c6d1d18515eae75231326676625084dd6d7e6dc923ac83a9fdffb7626f
GET /include/securimage_show.php?sid=90750ca667f6b62a651d463cbb6a1cd6 HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/png
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pjew1lGehoMeVTc%2FYQGbNKUH%2BJznjWCFgtOxRdwIlh15Awzjgs6DL5PraOJhoKbrBO7XktGNAVnSzOHiSmka0UdnYgwX0Q8JKOPawr%2BtrHtxoP2%2BJ%2BYkCJTLvBEPHtWa2L0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116badc2abe4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/thumbs/bef242dba-1.jpg | 104.21.20.102 | 200 OK | 44 kB |
URL GET HTTP/3w27.my-cima.net/uploads/thumbs/bef242dba-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 851x480, components 3 Hash8235dc8fe481176cd6d1c8bbe5005e66 d8046bc44e4e4a2c4c672fce5433e43b93f2c74c 27ede3b4f4986d4a51cccf1121e361bb542a35066aab5d31595ca287729cdbee
GET /uploads/thumbs/bef242dba-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 44080
last-modified: Sat, 06 Jan 2024 08:56:15 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 37
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BHM7g1sIJbEtjndwch9PudHQdKE7lG0qXAtD0hnA1YpaeRMwDwyq9p%2F1rmqJ%2BPQuGKFc3pbOuJIBSyK4nwNjdJ2Ho6gNSAxPf1DwJ3NkalkbIUaIYIrB9ba9uOHSxC5G5qE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116baec32be4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/thumbs/d09c9a350-1.jpg | 104.21.20.102 | 200 OK | 36 kB |
URL GET HTTP/3w27.my-cima.net/uploads/thumbs/d09c9a350-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 851x480, components 3 Hashf80a01f04a1f9cc6b1cb1fe2abe7db1d cfc30d3d9e0addf0647481a6fefa23f919132ec6 ee1d2773f05e371a9ab6ed281f31df880b0c6b4bcfb73359f198d3f5143ca0f7
GET /uploads/thumbs/d09c9a350-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 35941
last-modified: Sun, 07 Jan 2024 02:22:37 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 5087
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SSMISrg9KQ7yTlRZON5hgZXG1%2BBSUwA0WPavfclCaCQqAoFJ7Caj%2BUddg7WgJqdtL245o7ZcHeu6RR6EZxrQqd2DVlLiFMoyyvc%2BGATn7MqkShOprXpN57QDGf2xrFYU2uw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116baec36be4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/thumbs/94d580776-1.jpg | 104.21.20.102 | 200 OK | 51 kB |
URL GET HTTP/3w27.my-cima.net/uploads/thumbs/94d580776-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 851x480, components 3 Hash523b2ca1101f10035317d46ca257ad7a 05eefbec10e15899d3292459270bbeff49e773f7 9d12487cd284de88d4f9d231050cf9cccb1cc698f4cbe19531729e5cac6e4b38
GET /uploads/thumbs/94d580776-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 50594
last-modified: Sun, 07 Jan 2024 05:32:07 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 7000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c7yPvFTOQUCJ0cWufWxnc%2BwTy72UUgdNty%2Bir2kRfZv21e80VnLdMMoMGjEkJAbYXr%2B9wXU7ZCz8B8P3K4i5aDCmEaQdOA0J3cNgy%2FIZl6EukDBk89QLBB2PzftG4vhXD%2Bs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116baec41be4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/thumbs/7634fe382-1.jpg | 104.21.20.102 | 200 OK | 59 kB |
URL GET HTTP/3w27.my-cima.net/uploads/thumbs/7634fe382-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 851x480, components 3 Hash8cf2c51e17c013550aba9d8ba14a72a2 ff2c136f70e54f16ff9cd44628ed3b453b7bfb22 9c36daab304bbcafd7b6d32c0e10325a4904d3e60ef8e84806d25cc6e9970ec2
GET /uploads/thumbs/7634fe382-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 59225
last-modified: Sat, 06 Jan 2024 07:21:01 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 7000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rL%2FxSWo98TDA7JRR1x%2FPlj1yvZoeLIghYQ3Lts%2FwscXtaXzsCcTBpGEnbIJGsOFy1xTA8AAB7UlLZXeJ7qyjCOMkKA8ip68e2vnzsUc5m49WCTZwWgmZOuMRNgRrkeBF0dE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116bafc58be4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/thumbs/94ec7c650-1.jpg | 104.21.20.102 | 200 OK | 46 kB |
URL GET HTTP/3w27.my-cima.net/uploads/thumbs/94ec7c650-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 851x480, components 3 Hashd068aa918e3efbe1b9bba9d46a72d78e 29c0f22d3d583056d83b26d6acf9ebb606b65588 fceb6e83ef27f096ab61fb528969bfea585f38a092936c46d9cda9defa08c349
GET /uploads/thumbs/94ec7c650-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 46066
last-modified: Fri, 05 Jan 2024 14:03:30 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 37
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YJjUROLFUNsxiK8m4ZxSVvbftSmBP3LjxGhvu5HchmS7KrndFEgj8i2I91R7iokZSZCiIji5eiWVtTb3EuubQjqVBbVC24a52i6oCZG2%2BYEVmEmvDpnnJV9w7%2BAS0jaow1Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116bb0c71be4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash43f675ca5c0eae07c03ad9e7be5261aa ceb03ea51bf30f21b03551d1d525ecdcc2964616 68fcf919b75bd790957c07d08abe6a87a0407df663b7e7af20314565949064cb
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "68FCF919B75BD790957C07D08ABE6A87A0407DF663B7E7AF20314565949064CB"
Last-Modified: Sat, 29 Jun 2024 06:02:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16368
Expires: Mon, 01 Jul 2024 01:33:45 GMT
Date: Sun, 30 Jun 2024 21:00:57 GMT
Connection: keep-alive
|
|
| w27.my-cima.net/uploads/thumbs/26be16566-1.jpg | 104.21.20.102 | 200 OK | 43 kB |
URL GET HTTP/3w27.my-cima.net/uploads/thumbs/26be16566-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 720x405, components 3 Hash2412742b84e4fffdd0e17443fcca1693 9452a8156daaa1181593c663380f44078a8e1e14 e1e9d984063c7be7227e9883c4ab6ebcaee3c073a920c1f1dde77dd0644608ec
GET /uploads/thumbs/26be16566-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 42751
last-modified: Thu, 04 Jan 2024 16:27:13 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 5065
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eMt8AnA2kXHKnqCYY%2BA7UWFEny6awumizICIQubN70ShgXE5%2FBXznQelRSsfUdLa9yyYA0GQ0SS7ku3ZE0kh31NZtmoxMVKyUyv3lWWV6KeH8X%2F9ZkdvLDA0I5EdfoBktdU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116bb1c92be4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/uploads/thumbs/ff260b59e-1.jpg | 104.21.20.102 | 200 OK | 15 kB |
URL GET HTTP/3w27.my-cima.net/uploads/thumbs/ff260b59e-1.jpg IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 480x270, components 3 Hashb1ee4829ad8aa4ccda241bccbe3926e8 4a22b71fee7c3b5699b71f4c7f2882315f64c4bf 2bf644dc14269c21a9b03fcd410515a86028a9c634bc6f32b63c766bd5bc6707
GET /uploads/thumbs/ff260b59e-1.jpg HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/jpeg
content-length: 15017
last-modified: Sun, 11 Sep 2022 14:13:14 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 4604
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BjQ5NbB5siKnFrUt5ysHphV%2FyHsYVipZPpflAM4dax378Mnv0Ev9Pnb7u7Le8NXx5D904x62vLeCXTyssK%2BlWutHDOwdoyg7zJPlNJBd%2FBtPUs%2FCeoPsb0%2FRxbi6wQy%2BSew%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116bb1c9ebe4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| nachodusking.com/1clkn/55455 |  23.109.170.33 | 200 OK | 26 B |
URL GET HTTP/1.1nachodusking.com/1clkn/55455 IP23.109.170.33:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerLet's Encrypt Subjectnachodusking.com Fingerprint11:C5:34:88:13:BA:5A:99:FA:D2:59:05:8A:97:88:D8:5E:0D:51:97 ValiditySun, 23 Jun 2024 00:46:11 GMT - Sat, 21 Sep 2024 00:46:10 GMT
File typeASCII text, with no line terminators Hash9082dc37e5e8046929da411544ad071a 41e0e3963ed94e59e8a2f115994c382712411537 b7848d86edc8dc3b5bc6a5c666069f9a31e000cee51575d3b6083951607e1550
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /1clkn/55455 HTTP/1.1
Host: nachodusking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 30 Jun 2024 21:00:57 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Set-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Mon, 01-Jul-2024 21:00:57 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Mon, 01-Jul-2024 21:00:57 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash0c22b10a118098f2cdc4b186e6f8e9a8 cfe8b247d843f42d2205bb16a48cefe38c78526e 1208b1961307dfb3c91a337dfa900f9be57f91cab6a7dd3d7c5e38d2399d5d10
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1208B1961307DFB3C91A337DFA900F9BE57F91CAB6A7DD3D7C5E38D2399D5D10"
Last-Modified: Fri, 28 Jun 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4890
Expires: Sun, 30 Jun 2024 22:22:28 GMT
Date: Sun, 30 Jun 2024 21:00:58 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash0c22b10a118098f2cdc4b186e6f8e9a8 cfe8b247d843f42d2205bb16a48cefe38c78526e 1208b1961307dfb3c91a337dfa900f9be57f91cab6a7dd3d7c5e38d2399d5d10
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1208B1961307DFB3C91A337DFA900F9BE57F91CAB6A7DD3D7C5E38D2399D5D10"
Last-Modified: Fri, 28 Jun 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4868
Expires: Sun, 30 Jun 2024 22:22:06 GMT
Date: Sun, 30 Jun 2024 21:00:58 GMT
Connection: keep-alive
|
|
| w27.my-cima.net/include/securimage_show.php?sid=5429e590fa55e779334b5bee3f4fc229 | 104.21.20.102 | 200 OK | 3.7 kB |
URL GET HTTP/3w27.my-cima.net/include/securimage_show.php?sid=5429e590fa55e779334b5bee3f4fc229 IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 158 x 35, 8-bit/color RGB, non-interlaced Hashf5504e07d49e99cc9d9afaec787a16a9 4046356f8052d89fc00c89df236ee4a23e3120d8 f573f5774816e51035f922bd9c900a59c8ce39cf042e4f0da6b3c6dda85b050d
GET /include/securimage_show.php?sid=5429e590fa55e779334b5bee3f4fc229 HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/png
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vGIWj1sls3R31oHaJ5cRT3iq%2Bd4%2BldcMXet2rKkOBArCPQzGJhnNf1s9ZzVJWN0gvgCywSSHxM%2B7BUrmETvX4LiUBLt1aUreN0Hs9Ywn9OOHZSFsxKOq8d0WYNrd5JmzgKQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116bb2ca6be4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash0c22b10a118098f2cdc4b186e6f8e9a8 cfe8b247d843f42d2205bb16a48cefe38c78526e 1208b1961307dfb3c91a337dfa900f9be57f91cab6a7dd3d7c5e38d2399d5d10
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1208B1961307DFB3C91A337DFA900F9BE57F91CAB6A7DD3D7C5E38D2399D5D10"
Last-Modified: Fri, 28 Jun 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4868
Expires: Sun, 30 Jun 2024 22:22:06 GMT
Date: Sun, 30 Jun 2024 21:00:58 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash0c22b10a118098f2cdc4b186e6f8e9a8 cfe8b247d843f42d2205bb16a48cefe38c78526e 1208b1961307dfb3c91a337dfa900f9be57f91cab6a7dd3d7c5e38d2399d5d10
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1208B1961307DFB3C91A337DFA900F9BE57F91CAB6A7DD3D7C5E38D2399D5D10"
Last-Modified: Fri, 28 Jun 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4868
Expires: Sun, 30 Jun 2024 22:22:06 GMT
Date: Sun, 30 Jun 2024 21:00:58 GMT
Connection: keep-alive
|
|
| w27.my-cima.net/templates/3arbserv/img/icon-play-32.png | 104.21.20.102 | 200 OK | 2.4 kB |
URL GET HTTP/3w27.my-cima.net/templates/3arbserv/img/icon-play-32.png IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hash35bd95e97ff446debcc363482550378d 91c8d90e0524e5346aa4f3ae0806893db5d95959 eee224146191f9cc5fabac0a105fe5b9b34750f8afe16823dbb593259d8a1d75
GET /templates/3arbserv/img/icon-play-32.png HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/templates/3arbserv/css/echo.css
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:58 GMT
content-type: image/png
content-length: 2413
last-modified: Sat, 05 Mar 2022 10:18:44 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 7150
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pJtR51t6URft4huuqY%2FDm%2FlJcAtL9p7fKyWsT3a3NTpn6cVFvP%2BTJxiW52HfgmQFA8CO1DPl5B5lCJ%2BrzXPWj%2FTe39piovg5%2BgjYbS3kvSkBpCP8orntbsneVmSmyFVuohI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116beca37be4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| o.pki.goog/wr2 |  142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashfd84c1a26b78850895b35b299c0fa27e 3cc51bf386ba69bdf1616b72742aa52c1cf176ad 9bbb6dacb7ff60dd8d6cf95eb8312cca8871f46b62e344b4bd641884c2f5b7b5
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 30 Jun 2024 21:00:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/ea/droidarabickufi/v6/DroidKufi-Regular.woff2 | 216.58.207.227 | 200 OK | 31 kB |
URL GET HTTP/2fonts.gstatic.com/ea/droidarabickufi/v6/DroidKufi-Regular.woff2 IP216.58.207.227:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintC4:9C:27:09:1C:F7:14:C9:86:F0:B5:42:0B:8A:D2:AE:5E:AE:98:04 ValidityThu, 13 Jun 2024 16:31:03 GMT - Thu, 05 Sep 2024 16:31:02 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 31248, version 1.0 Hash436938da6ed799ca17110e719e4d2e51 b7ef31b6085a9f0963dffe7939abca527724d389 a7b09bb9c8e8e2fb189204e08ed94bd8096c118780b5e926847cf2748ca7c5c2
GET /ea/droidarabickufi/v6/DroidKufi-Regular.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://w27.my-cima.net
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31248
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 28 Jun 2024 01:56:10 GMT
expires: Sat, 28 Jun 2025 01:56:10 GMT
cache-control: public, max-age=31536000
age: 241488
last-modified: Wed, 13 Aug 2014 16:50:04 GMT
content-type: font/woff2
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| netdna.bootstrapcdn.com/font-awesome/4.4.0/fonts/fontawesome-webfont.woff2?v=4.4.0 | 104.18.10.207 | 200 OK | 64 kB |
URL GET HTTP/3netdna.bootstrapcdn.com/font-awesome/4.4.0/fonts/fontawesome-webfont.woff2?v=4.4.0 IP104.18.10.207:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint93:87:98:7E:3F:62:5F:E6:68:1C:1C:8A:E4:9D:FB:A8:C3:72:4F:90 ValiditySat, 25 May 2024 01:51:52 GMT - Fri, 23 Aug 2024 01:51:51 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 64464, version 4.262 Hash4b5a84aaf1c9485e060c503a0ff8cadb 574ea2698c03ae9477db2ea3baf460ee32f1a7ea 3c4a1bb7ce3234407184f0d80cc4dec075e4ad616b44dcc5778e1cfb1bc24019
GET /font-awesome/4.4.0/fonts/fontawesome-webfont.woff2?v=4.4.0 HTTP/1.1
Host: netdna.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://w27.my-cima.net
DNT: 1
Connection: keep-alive
Referer: https://netdna.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:58 GMT
content-type: font/woff2
content-length: 64464
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "4b5a84aaf1c9485e060c503a0ff8cadb"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 10/31/2023 18:51:25
cdn-edgestorageid: 845
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 97f04314335fff49fcbef972a5e9fe28
cdn-cache: HIT
cf-cache-status: HIT
age: 5191164
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 89c116bf1de49300-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/cdn-cgi/challenge-platform/scripts/jsd/main.js | 104.21.20.102 | 302 Found | 0 B |
URL GET HTTP/3w27.my-cima.net/cdn-cgi/challenge-platform/scripts/jsd/main.js IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Sun, 30 Jun 2024 21:00:58 GMT
content-length: 0
cache-control: max-age=300, public
access-control-allow-origin: *
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/d2a97f6b6ec9/main.js
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K7nxdKGpFe1U7fWo7VnJMlta2pEOVvL2R%2B2XEahImjA0PN%2BbknhDYJ2VLkGzNdW%2Bmg%2B3nc0ktxpSC8H5If7dnnG4JQ1xEED6G1OJuiyIQFvuzHsXpBx%2BTvuRSmZXBbyTRWI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116bf9b5dbe4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| code.jquery.com/jquery-migrate-1.2.1.min.js | 151.101.66.137 | 200 OK | 3.1 kB |
URL GET HTTP/2code.jquery.com/jquery-migrate-1.2.1.min.js IP151.101.66.137:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (7085) Hasheb05d8d73b5b13d8d84308a4751ece96 743052320809514fb788fe1d3df37fc87ce90452 1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d
GET /jquery-migrate-1.2.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1c1f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 30 Jun 2024 21:00:58 GMT
age: 24877462
x-served-by: cache-lga21931-LGA, cache-hel1410025-HEL
x-cache: HIT, HIT
x-cache-hits: 5, 310960
x-timer: S1719781258.237946,VS0,VE0
vary: Accept-Encoding
content-length: 3063
X-Firefox-Spdy: h2
|
|
| w27.my-cima.net/js/bootstrap-notify.min.js | 104.21.20.102 | 200 OK | 3.2 kB |
URL GET HTTP/3w27.my-cima.net/js/bootstrap-notify.min.js IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (595) Hash5ba070af9d1b1a2782851940de30879f d33390fc88bf68bd23eb182d7dbc77f5227081b2 a13a07b242c80b57e0cbbacc6cfedb538d4d331ff1f9dff370519ec57407e450
GET /js/bootstrap-notify.min.js HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:58 GMT
content-type: text/javascript
last-modified: Mon, 06 May 2019 13:34:38 GMT
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 4727
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tnKLYReg2Kztpa%2FMrYAh%2Fx6pHQ38dNdJ4uHldYzmKLuTmqJwWpFVrm2zX5d9sDjpH%2B9EUOkaDSThqngAXeuk63rh8LDjiHPr4BdWrmybRQvTA6qGsggd5RXYCSOSRznrQYo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116bf6b1abe4e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash1d7e64f5328a745a624525554e23b60f ea6d952ce6348bed3e1b0659d94c02fef45f6855 c31cb3d75afadec45bc4e8f9b1519a4fe39632734ed07103741d6b792312c15d
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 30 Jun 2024 21:00:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashfd84c1a26b78850895b35b299c0fa27e 3cc51bf386ba69bdf1616b72742aa52c1cf176ad 9bbb6dacb7ff60dd8d6cf95eb8312cca8871f46b62e344b4bd641884c2f5b7b5
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 30 Jun 2024 21:00:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| my.rtmark.net/gid.js?userId=00808be28f8a403effa142e91c3b4292 |  139.45.195.8 | 200 OK | 65 B |
URL GET HTTP/2my.rtmark.net/gid.js?userId=00808be28f8a403effa142e91c3b4292 IP139.45.195.8:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerLet's Encrypt Subjectrtmark.net Fingerprint90:47:5A:A5:5F:5F:FA:E6:7C:6F:AB:D2:06:D1:D9:BD:F3:54:9E:6E ValiditySat, 11 May 2024 20:51:41 GMT - Fri, 09 Aug 2024 20:51:40 GMT
Hash0179b8fdafd910d433ad25c432e5dfaa e24db057cb70b6ddc2b73a6bbbd3c10fc99c1685 ae9217752c5ad8a468eaa3029a5eb554720f2b8bc277e5a5bf5aa60c9653e1a2
GET /gid.js?userId=00808be28f8a403effa142e91c3b4292 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://w27.my-cima.net
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 30 Jun 2024 21:00:58 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://w27.my-cima.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=00808be28f8a403effa142e91c3b4292; expires=Mon, 30 Jun 2025 21:00:58 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js | 142.250.147.95 | 200 OK | 34 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js IP142.250.147.95:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintC7:12:52:3A:BD:E0:73:20:AD:A8:5F:DF:12:DB:C6:DE:AF:63:88:6B ValidityThu, 13 Jun 2024 16:32:33 GMT - Thu, 05 Sep 2024 16:32:32 GMT
File typeJavaScript source, ASCII text, with very long lines (32038) Hashf03e5a3bf534f4a738bc350631fd05bd 37b1db88b57438f1072a8ebc7559c909c9d3a682 aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947
GET /ajax/libs/jquery/1.11.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33507
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 29 Jun 2024 06:47:02 GMT
expires: Sun, 29 Jun 2025 06:47:02 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 137636
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=GA_MEASUREMENT_ID | 142.250.147.97 | 200 OK | 50 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=GA_MEASUREMENT_ID IP142.250.147.97:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintBA:5D:A9:7F:41:46:B0:37:01:9E:05:B0:92:BA:41:C9:31:5B:4B:4A ValidityThu, 13 Jun 2024 15:27:14 GMT - Thu, 05 Sep 2024 15:27:13 GMT
File typeJavaScript source, ASCII text, with very long lines (1995) Hashdf034a69c5985bd2bbaefd08bf9845b2 27669c670cd790220678fa3c044bb1441c0bdd2e ac98bf4c2f238790e505e76fe59ea2c5cc43462b179e86974e7ea883eec6b61a
GET /gtag/js?id=GA_MEASUREMENT_ID HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 30 Jun 2024 21:00:58 GMT
expires: Sun, 30 Jun 2024 21:00:58 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 49549
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash1d7e64f5328a745a624525554e23b60f ea6d952ce6348bed3e1b0659d94c02fef45f6855 c31cb3d75afadec45bc4e8f9b1519a4fe39632734ed07103741d6b792312c15d
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 30 Jun 2024 21:00:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hashd989d166cb70cd587adc13dc38ca7715 ee72eb2899e1610d1903c97254e9bdaa07d9cd38 3916444dc425edc8348873eac1d26ef3342accef35b3c9940f39cf3c428ece5e
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 30 Jun 2024 21:00:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| w27.my-cima.net/favicons/android-icon-192x192.png | 104.21.20.102 | 200 OK | 22 kB |
URL GET HTTP/3w27.my-cima.net/favicons/android-icon-192x192.png IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hashdcf7d645053c0bb7e0edd25960004324 5951f5ffde7d819e499f69540b0d95cc39d0a8bd ce2f656adb31855d7886fbcf54add26d85fe22f49a1712cde1779bc905384700
GET /favicons/android-icon-192x192.png HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz; prefetchAd_6205538=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:58 GMT
content-type: image/png
content-length: 22310
last-modified: Tue, 08 Mar 2022 13:43:52 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 4621
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uvKMrfXeoCE5VWu4oJAZd9qDcZ4FbuaIFYLc%2BNUb8wIa9%2BY6QQxcLHgX63DuoWVYXxdVwftDiz9yoK2jmYdVo61%2BfsP3WGr1SdZSuVt9u2lvbloo2NED7DG7V4oK%2B%2FaIIiI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116c2880abe4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/favicons/favicon-16x16.png | 104.21.20.102 | 200 OK | 1.0 kB |
URL GET HTTP/3w27.my-cima.net/favicons/favicon-16x16.png IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Hash2f9e3795889ec567bbb1124b6b1f73c8 1587f8e10111dda099a9453850224807334ec44b c994effa2226581104a4963c1c0ced8b6009e06a8ac49b4cdb09ce1c84443a65
GET /favicons/favicon-16x16.png HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz; prefetchAd_6205538=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:58 GMT
content-type: image/png
content-length: 1017
last-modified: Tue, 08 Mar 2022 13:44:34 GMT
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 1788
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wqVQex%2FPlPX1CiOgSu5GpZpJHprZA5AaOjqSGljbTVSXU4MtIBBQlwBJqlg6valU%2FaP0aIgNhdTUY9h35tjklkNguBLo65VzSWldtc1lC9Xpri2iSwL02x6EUuH%2FUTKcBKk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116c28810be4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/cdn-cgi/challenge-platform/h/g/jsd/r/89c116ae9ec492fd | 104.21.20.102 | 200 OK | 0 B |
URL POST HTTP/3w27.my-cima.net/cdn-cgi/challenge-platform/h/g/jsd/r/89c116ae9ec492fd IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/g/jsd/r/89c116ae9ec492fd HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12194
Origin: https://w27.my-cima.net
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz; prefetchAd_6205538=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:58 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.my-cima.net; HttpOnly; Secure; SameSite=None
cf_clearance=KYt8YenOe0PicBWaRFP8KWZ2FVSRAl8UgcYlGfPiVBQ-1719781258-1.0.1.1-Zthxw.XbfVu9DdEc8Ikq2eenbbM9mobJ1JGDGR7_FnRAP2JKFzxSC6jKv2BBsMIXAClCzmHmoZ.0qKaCZnmbrw; Path=/; Expires=Mon, 30-Jun-25 21:00:58 GMT; Domain=.my-cima.net; HttpOnly; Secure; SameSite=None; Partitioned
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZYmijExTJIbRz9pKzOaDPKvqHQNniJ5yuOBz5uSZF8X4fweQA8kmdqEaREreyIvz0oBMNuBaQOFwZwyjGsQLvv47t3yaWKxUR7L2gDNUkeY%2FXkRxYRI%2Bvc42QycPaZLHs3I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116c2e8b5be4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| augailou.com/5/6205538 | 139.45.197.243 | 200 OK | 35 kB |
IP139.45.197.243:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerLet's Encrypt Subjectaugailou.com FingerprintF4:CD:C8:E7:5C:75:23:E3:8E:1B:6A:37:1C:85:CB:85:A4:B0:DE:4B ValidityMon, 24 Jun 2024 04:42:20 GMT - Sun, 22 Sep 2024 04:42:19 GMT
File typegzip compressed data, max speed, from Unix Hashd7e99c4e33c8b8b910814f7791bedb0b 1c7e5b6b2533a0bdc82e754bb6091661853d87b6 2e96b19877af5f6ff2fdd62d9d980f8e7f307339033ad0442e45ccbda7e316de
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /5/6205538 HTTP/1.1
Host: augailou.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: application/javascript
x-trace-id: 6add30e9f25905e6774baff20840b328
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=00808be28f8a403effa142e91c3b4292; expires=Mon, 30 Jun 2025 21:00:57 GMT; path=/; secure; SameSite=None
oaidts=1719781257; expires=Mon, 30 Jun 2025 21:00:57 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| w27.my-cima.net/cdn-cgi/challenge-platform/scripts/jsd/main.js | 104.21.20.102 | 302 Found | 0 B |
URL GET HTTP/3w27.my-cima.net/cdn-cgi/challenge-platform/scripts/jsd/main.js IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz; prefetchAd_6205538=true; cf_clearance=KYt8YenOe0PicBWaRFP8KWZ2FVSRAl8UgcYlGfPiVBQ-1719781258-1.0.1.1-Zthxw.XbfVu9DdEc8Ikq2eenbbM9mobJ1JGDGR7_FnRAP2JKFzxSC6jKv2BBsMIXAClCzmHmoZ.0qKaCZnmbrw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Sun, 30 Jun 2024 21:00:58 GMT
content-length: 0
cache-control: max-age=300, public
access-control-allow-origin: *
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/d2a97f6b6ec9/main.js
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CDaEKcCfwo02MOA3yr6M2CmG9YvR0pmaj6HSl7D%2FBcQaNEdP3VA1ftKCQvhNuOAPsRXTyTktOSPHTu0j4v7UbYT0yL%2F%2BmwFd827fD%2FHeMU0PWvy8yaadB5F74R7JOiWrySE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116c3b9d5be4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/templates/3arbserv/js/jquery.plugins.a.js | 104.21.20.102 | 200 OK | 14 kB |
URL GET HTTP/3w27.my-cima.net/templates/3arbserv/js/jquery.plugins.a.js IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (9490), with no line terminators Hash7edd7d96ee453442900875aa72c595c4 a09a3c791e560866562f26d8ac7f9621f369cfa2 d36a4d2e1e3ec14aa6fd41115d053a533999f0337d0f48859de361199f7359cb
GET /templates/3arbserv/js/jquery.plugins.a.js HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:58 GMT
content-type: text/javascript
cf-bgj: minify
cf-polished: origSize=9805
last-modified: Tue, 05 Mar 2019 09:42:54 GMT
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 4727
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M0a6RDPmdI5ArlPxw1QKtJavb5T%2F7Lvpo4hvaJOb6W8PxTJw%2FMPd3AQb4nEAjocqPBfI4P2590f%2B%2BkFXKLC3Pf1tMlWXKzX9Q2D44Pk9FlHs%2BsQ4UaqbXCV0yeMFLZETb%2Fo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116bf6b20be4e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| augailou.com/?rb=cWi8V8gcNTj9XClcz2bsQP9Rc_MIYJ0dD7U6F4RUe2sK9AU4DE5cTIhFo7GFQyMDkzY7FeDRk3ZDWjsyoc7iibnV2Y6jYQV3UivanyHfTs9KgzmA_0sO2n2_Ejxdi62vR2ezux6p-k06eAd6s9e0swkRT4ozNn1yQ_OGyUVESyvwfKK6BDLDh5su1tQQCSHRinUgKAoq96kbNSXDrs_enPObxujhKUO-VPgTXK1XPvZPqZTfbjUootCZvwgrJ3WtVuc3YDnq1vI%3D&request_ab2=0&zoneid=6205538&js_build=iclick-v1.830.6-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=1&pl=https%3A%2F%2Fw27.my-cima.net%2Fwatch.php%3Fvid%3Dff260b59e&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.830.6-auto&navlng=en-US&pnt=0&pnrc=0&bs=90d83d0d-e6bc-4c5a-bae8-d67026c22885&wasm=1&userId=00808be28f8a403effa142e91c3b4292&m=link | 139.45.197.243 | 200 OK | 11 kB |
URL GET HTTP/2augailou.com/?rb=cWi8V8gcNTj9XClcz2bsQP9Rc_MIYJ0dD7U6F4RUe2sK9AU4DE5cTIhFo7GFQyMDkzY7FeDRk3ZDWjsyoc7iibnV2Y6jYQV3UivanyHfTs9KgzmA_0sO2n2_Ejxdi62vR2ezux6p-k06eAd6s9e0swkRT4ozNn1yQ_OGyUVESyvwfKK6BDLDh5su1tQQCSHRinUgKAoq96kbNSXDrs_enPObxujhKUO-VPgTXK1XPvZPqZTfbjUootCZvwgrJ3WtVuc3YDnq1vI%3D&request_ab2=0&zoneid=6205538&js_build=iclick-v1.830.6-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=1&pl=https%3A%2F%2Fw27.my-cima.net%2Fwatch.php%3Fvid%3Dff260b59e&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.830.6-auto&navlng=en-US&pnt=0&pnrc=0&bs=90d83d0d-e6bc-4c5a-bae8-d67026c22885&wasm=1&userId=00808be28f8a403effa142e91c3b4292&m=link IP139.45.197.243:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerLet's Encrypt Subjectaugailou.com FingerprintF4:CD:C8:E7:5C:75:23:E3:8E:1B:6A:37:1C:85:CB:85:A4:B0:DE:4B ValidityMon, 24 Jun 2024 04:42:20 GMT - Sun, 22 Sep 2024 04:42:19 GMT
File typegzip compressed data, max speed, from Unix Hash85024af702a82a6d1beca2701a672086 955477b91b5f2c05b609b6b04560453f879c78c8 9b64b447bef29210da756f666e003d15d322fefb0e68b041a4853f45fc219919
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?rb=cWi8V8gcNTj9XClcz2bsQP9Rc_MIYJ0dD7U6F4RUe2sK9AU4DE5cTIhFo7GFQyMDkzY7FeDRk3ZDWjsyoc7iibnV2Y6jYQV3UivanyHfTs9KgzmA_0sO2n2_Ejxdi62vR2ezux6p-k06eAd6s9e0swkRT4ozNn1yQ_OGyUVESyvwfKK6BDLDh5su1tQQCSHRinUgKAoq96kbNSXDrs_enPObxujhKUO-VPgTXK1XPvZPqZTfbjUootCZvwgrJ3WtVuc3YDnq1vI%3D&request_ab2=0&zoneid=6205538&js_build=iclick-v1.830.6-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=1&pl=https%3A%2F%2Fw27.my-cima.net%2Fwatch.php%3Fvid%3Dff260b59e&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.830.6-auto&navlng=en-US&pnt=0&pnrc=0&bs=90d83d0d-e6bc-4c5a-bae8-d67026c22885&wasm=1&userId=00808be28f8a403effa142e91c3b4292&m=link HTTP/1.1
Host: augailou.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://w27.my-cima.net/
Origin: https://w27.my-cima.net
DNT: 1
Connection: keep-alive
Cookie: OAID=00808be28f8a403effa142e91c3b4292; oaidts=1719781257
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 30 Jun 2024 21:00:58 GMT
content-type: application/json
x-trace-id: fe0f3e36bd21f53f6b68ce941993358e
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://w27.my-cima.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=00808be28f8a403effa142e91c3b4292; expires=Mon, 30 Jun 2025 21:00:58 GMT; path=/; secure; SameSite=None
oaidts=1719781258; expires=Mon, 30 Jun 2025 21:00:58 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Sun, 07 Jul 2024 21:00:58 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| w27.my-cima.net/js/melody.dev.js | 104.21.20.102 | 200 OK | 7.5 kB |
URL GET HTTP/3w27.my-cima.net/js/melody.dev.js IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (2302) Hashf2bf056198be59f92547935fd4c968f0 cba85174a3d6d68fcff3a2e6238f1d6150b58fce 244926b75ad193faf7a694c602d5819576e2d953dc43849395dedfa841f5ea53
GET /js/melody.dev.js HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:58 GMT
content-type: text/javascript
cf-bgj: minify
cf-polished: origSize=23108
last-modified: Mon, 06 May 2019 13:34:38 GMT
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 4727
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FW17pvaYYtfv%2FF81Zxhx4v1pHM3NYPFQ7V3po9HKFIg7JTHb%2Bd1JGobCXvMMZ%2BsV7AmxSjZGEAqzea%2BrEYF%2B9IV0w51vS3454cfM%2B%2Ff8gT4cuff1%2BxJblbegq6cgOiXpVYQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116bf5b0abe4e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/templates/3arbserv/js/jasny-bootstrap.min.js | 104.21.20.102 | 200 OK | 20 kB |
URL GET HTTP/3w27.my-cima.net/templates/3arbserv/js/jasny-bootstrap.min.js IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (343) Hashf6b6e524d29d54ada53e4172b9d91cf7 427153c7a2d83d2ca800e397779f29b857801ad2 e7ad856551c720cb7c6a24a8bf4a9d6b6b24c24f07109cde96366338e53a4ff8
GET /templates/3arbserv/js/jasny-bootstrap.min.js HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:58 GMT
content-type: text/javascript
last-modified: Wed, 20 Apr 2016 07:26:54 GMT
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 4727
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HipODwLPUf7nqGT6lHN5NOQQUAtqaBM9rmVF87McVDpW3aM2N7ag1NOGcVAEqiN75TVPl7NZ2dKhsGchB7fnrrSZJna2ZxgFhxEzKJV8MvjrM4KfE1EXAHytXhgyLVppf4E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116bf5b07be4e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/cdn-cgi/challenge-platform/h/g/scripts/jsd/d2a97f6b6ec9/main.js | 104.21.20.102 | 200 OK | 7.9 kB |
URL GET HTTP/3w27.my-cima.net/cdn-cgi/challenge-platform/h/g/scripts/jsd/d2a97f6b6ec9/main.js IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (7850), with no line terminators Hash0bd302d5d889cd2cd5be94d3c56d0aa0 9b1c42aefdf2352295e2fbbbb5c94d3d3b58b1f0 ba5b84ef36a13341f868188bbdbf514360b5de645b6368b4b20c70c53ae9ffce
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/d2a97f6b6ec9/main.js HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:58 GMT
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
cache-control: max-age=14400, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SwpxHpVTj2Ff6DORq4%2FdJyvlQ2qe7ZQzfQGO2uVGfVntv1l3as8LXYoLR%2FzZh9swmitqM3RL0aZnAA7T23XFwV8Db5ox%2BXUbN%2Bv8rhrHtvGecLFZwTHCckf2A1pvJZbBNIw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116c0acfcbe4e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| netdna.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css | 104.18.10.207 | 200 OK | 27 kB |
URL GET HTTP/2netdna.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css IP104.18.10.207:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint93:87:98:7E:3F:62:5F:E6:68:1C:1C:8A:E4:9D:FB:A8:C3:72:4F:90 ValiditySat, 25 May 2024 01:51:52 GMT - Fri, 23 Aug 2024 01:51:51 GMT
File typeASCII text, with very long lines (26548) Hash0831cba6a670e405168b84aa20798347 05ea25bc9b3ac48993e1fee322d3bc94b49a6e22 936ffccdc35bc55221e669d0e76034af76ba8c080c1b1149144dbbd3b5311829
GET /font-awesome/4.4.0/css/font-awesome.min.css HTTP/1.1
Host: netdna.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: gzip
etag: W/"0831cba6a670e405168b84aa20798347"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 11/18/2022 06:19:10
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 863
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 617cddf282529eb1891a1067ee3c7115
cdn-cache: HIT
cf-cache-status: HIT
age: 5191242
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 89c116bbea6cabd2-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| w27.my-cima.net/ajax.php?p=stats&do=show&aid=2&at=1 | 104.21.20.102 | 200 OK | 42 B |
URL GET HTTP/3w27.my-cima.net/ajax.php?p=stats&do=show&aid=2&at=1 IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hash9b5e8704c89f018cff215cb5ed3e0128 2a9fa3661b326c503e492b89cdd9130d12ead03d b2c78c910f5ea29e3a9d223dabc203c055c8708b1fe7d83788b490638126db4d
GET /ajax.php?p=stats&do=show&aid=2&at=1 HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/gif
pragma: no-cache
expires: Wed, 5 Feb 1986 06:06:06 GMT
cache-control: must-revalidate
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LJchdusJwkI8QR2apmgekj0Pm1a9VkQGad9GYsdKWf0Gzrp%2BwI6JYeYCcQW4Mdigte%2B7%2B5yuGhS0fbaKNj91kRoQV5KAX0tZ4L%2BVSZhceXpahr7Y8yMkYXcO5xDFsOLtqV4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116bb2cb3be4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/templates/3arbserv/js/jquery.readmore.js | 104.21.20.102 | 200 OK | 3.4 kB |
URL GET HTTP/3w27.my-cima.net/templates/3arbserv/js/jquery.readmore.js IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3525), with no line terminators Hashc6979ecdd1afd6a79e4c9d8b62bfd064 e5e8f421833447bee665616bfc9fda7bc705d78f 8ba9cdb40fceabda5c5ad2269d4546003256e4c0a770687343cee216fe267cb0
GET /templates/3arbserv/js/jquery.readmore.js HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:58 GMT
content-type: text/javascript
cf-bgj: minify
cf-polished: origSize=3430
last-modified: Thu, 29 Oct 2015 08:29:54 GMT
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 4727
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HlMkvKGqDLjRoD9IUzLyapsr17%2BrVDmv3Y%2FyA1dJozYxnX8EXL3BL36S0OJo%2FoaejHEkNSG59TGh0HT1G8MtgGQ4gSSzFq9EVwfo%2B%2BEkuW9Z6435KWdexxQnAA6b5nRJxl8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116bf5afcbe4e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/templates/3arbserv/js/theme.js | 104.21.20.102 | 200 OK | 44 kB |
URL GET HTTP/3w27.my-cima.net/templates/3arbserv/js/theme.js IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /templates/3arbserv/js/theme.js HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:58 GMT
content-type: text/javascript
cf-bgj: minify
cf-polished: origSize=44830
last-modified: Tue, 23 Apr 2019 08:11:54 GMT
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 4727
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1G2Lz380JYLjIOPx8UtU1iv5yQhbnDMhLfs3pZGPJCC6zRRL5CISv5mO5Ws0fr2N42gBA%2F%2FJkgdzBqstPdYHR371NsyH0tPsk4rq9jFtC%2FWk%2B1yPKFrV3YlxyPFEVec1lpc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116bf6b23be4e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/ajax.php?p=stats&do=show&aid=1&at=1 | 104.21.20.102 | 200 OK | 42 B |
URL GET HTTP/3w27.my-cima.net/ajax.php?p=stats&do=show&aid=1&at=1 IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hash9b5e8704c89f018cff215cb5ed3e0128 2a9fa3661b326c503e492b89cdd9130d12ead03d b2c78c910f5ea29e3a9d223dabc203c055c8708b1fe7d83788b490638126db4d
GET /ajax.php?p=stats&do=show&aid=1&at=1 HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/gif
pragma: no-cache
expires: Wed, 5 Feb 1986 06:06:06 GMT
cache-control: must-revalidate
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SOD3Vmr1fXvXI4l7yp%2BmYtXRBxVHKHNb8O%2FKAaunxD%2BQFzF1kBUYYYzcYqIXaljweWSJM1y8r3rCG1um%2BE2ceeMypiI3MhlgM4TTYUaXnQf8F0Uw%2BftfZb%2FrJqdjQ%2FJVrIg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116badc0ebe4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/templates/3arbserv/css/animate.min.css | 104.21.20.102 | 200 OK | 58 kB |
URL GET HTTP/3w27.my-cima.net/templates/3arbserv/css/animate.min.css IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (319) Hash3d0a26b7c254da8c0d297e753ff23f65 877d0bcad6716a05066d9b6dab07e264f631a5f0 f1f0041c0c62f37ee475d174370f574a62afd842055e79a86dc4c722532de6bb
GET /templates/3arbserv/css/animate.min.css HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: text/css
last-modified: Tue, 16 Apr 2019 08:00:48 GMT
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 1174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1IGMEKJ2G%2B1%2Fia%2FyRr9RLw7ZIJ7LVVgCQibOTbkRqYhYgFsHMlG%2B51rZNqNx1eW%2BLl0MsWcFfC6FoVA%2BLrWOl6cypcj8xp6TsDcV1bXOBRw06568nMHkgflk5D8SGnQ5xSU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116bacbf4be4e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/templates/3arbserv/css/jasny-bootstrap.min.css | 104.21.20.102 | 200 OK | 14 kB |
URL GET HTTP/3w27.my-cima.net/templates/3arbserv/css/jasny-bootstrap.min.css IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (13803), with CRLF line terminators Hash56a224ccaaf1ad3df6ee7dbbc019aeac 2ce1ef76b342a8fafda1e03a62b99be5340812bf 777a9e5bb5d35fd671e5b252c67a0cf462baa8258db145ef6ea7dadf4de4b481
GET /templates/3arbserv/css/jasny-bootstrap.min.css HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: text/css
last-modified: Wed, 20 Apr 2016 09:46:42 GMT
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 1174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pYRHCe7Jn%2F%2BMdk9ZRIAZ6RyUOAgIZgV55F8WHuFhO%2FMu8qrDP%2FVmjJO4nMXiYb4cLZRDwT4xA99Jqmdf03I%2BM1U2KdIJzpgaFRjqBYn2T0uqPS00Nak61g1HXcAG5G2bhtE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116bacbeebe4e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/templates/3arbserv/css/echo.css | 104.21.20.102 | 200 OK | 238 kB |
URL GET HTTP/3w27.my-cima.net/templates/3arbserv/css/echo.css IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size238 kB (238145 bytes) Hashf23c5729ceb0749b7d5b9a4d6d4cbfd3 6fbfed03237339a7fa6921e4013eb5e89a3c5e48 6d2b0c074b62f03fd32e79a124ca7d42b42bfba6f20d85d30e548c5e29ece1d4
GET /templates/3arbserv/css/echo.css HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=329217
last-modified: Mon, 15 Aug 2022 20:37:46 GMT
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 1174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D20eGrFskDyRYsOzT%2Fo3EhbImOxZKZb2uvGqOh22dl9YJrfCClKiyMmORzFhNMeogC9tAqCyvP2wf6BgD2TBTIOtycFnFQIVFYG9dcFzGRAmaYJRDTXJkdtDjX7PkBYDc3E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116bacbf1be4e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/watch.php?vid=ff260b59e | 104.21.20.102 | 200 OK | 115 kB |
URL User Request GET HTTP/2w27.my-cima.net/watch.php?vid=ff260b59e IP104.21.20.102:443
CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Size115 kB (114777 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.php?vid=ff260b59e HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: text/html; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; path=/
watched_video_list=MTkz; expires=Mon, 01-Jul-2024 21:00:56 GMT; Max-Age=86400; path=/
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=REo3WHod8NJD1CKVpXOiX6CQp08x%2BbJw0uAkLrQg750MsC37xY89G7rFWersDmX0gdKCzcxVmTK50Q6E0ORPkjfD4ShXXwtIr5B1TIci6Ah2YIOGKQ2N0dfG8AsE4lLJ%2F08%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116ae9ec492fd-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| goomaphy.com/401/6219621 | 139.45.197.239 | 200 OK | 89 kB |
IP139.45.197.239:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerLet's Encrypt Subjectgoomaphy.com FingerprintC5:05:17:84:C2:C0:36:57:FA:8C:2B:4E:FC:3F:41:74:F8:89:05:50 ValiditySun, 21 Apr 2024 05:07:12 GMT - Sat, 20 Jul 2024 05:07:11 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash5653e831e411df74c196f46b9a3d00d0 39acdc36fbbf44d4a90ec3e43bf731ef13e98821 898244b1859e5a73d4327a42667904a055c0ecb3e0c68c36445d942663538a17
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /401/6219621 HTTP/1.1
Host: goomaphy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 30 Jun 2024 21:00:58 GMT
content-type: application/javascript
x-trace-id: 22e957dcbab0c2e4cbb463d15421a36f
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
set-cookie: OAID=03008b7a31b84138eb91b37b5f8f8c1b; expires=Mon, 30 Jun 2025 21:00:58 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| w27.my-cima.net/templates/3arbserv/js/melody.dev.js | 104.21.20.102 | 200 OK | 5.5 kB |
URL GET HTTP/3w27.my-cima.net/templates/3arbserv/js/melody.dev.js IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (5563), with no line terminators Hashb9e7f1086ce052fb015b62ba9b802cc8 028189983cce5f22f346b9f9a944ee97eb19e9bd b437704f63a38076015a3c20504d59e6fd292e14e7267eec35715621c05c36a9
GET /templates/3arbserv/js/melody.dev.js HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:58 GMT
content-type: text/javascript
cf-bgj: minify
cf-polished: origSize=7961
last-modified: Tue, 23 Apr 2019 08:11:40 GMT
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 4727
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HQKSdyRsbist28rWrxEfEMGCjodzOtxoHkckg6pLmUBeKKYHUx7DKsBJZGHhT0jQMCgTl3BeEuX9HV7F8l%2FtJgEKbepkTu2jMUmRK%2BynxE9M70LcVKdpq3I7v9WLjfkl2ls%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116bf5b09be4e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/templates/3arbserv/css/bootstrap.min.rtl.css | 104.21.20.102 | 200 OK | 26 kB |
URL GET HTTP/3w27.my-cima.net/templates/3arbserv/css/bootstrap.min.rtl.css IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (26153), with no line terminators Hash5c3488d9489fc4d2b0b2be5b79f64b25 038e38e21f485a2ce83c28df73e3c2d25f863028 2cd2ad752ad401367bdefc9379a5ae10d7d5b61241e60bda02bdcd25813577b9
GET /templates/3arbserv/css/bootstrap.min.rtl.css HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=34818
last-modified: Thu, 14 Apr 2016 08:16:52 GMT
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 4726
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gDjPFAeh4Uc%2FrQd%2BNA%2Fp7%2B7PSI5tdog%2FLZJKOHq09AzI6zCmamOWd56IstpIbVriJkmkdO1A0qkHYHdo9YTWKKxLSFrR6Y08VpJ4X67Pdi6BppkZyEukEyRtBkV%2BP%2FVTiNw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116bacbf9be4e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/ajax.php?p=stats&do=show&aid=3&at=1 | 104.21.20.102 | 200 OK | 42 B |
URL GET HTTP/3w27.my-cima.net/ajax.php?p=stats&do=show&aid=3&at=1 IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hash9b5e8704c89f018cff215cb5ed3e0128 2a9fa3661b326c503e492b89cdd9130d12ead03d b2c78c910f5ea29e3a9d223dabc203c055c8708b1fe7d83788b490638126db4d
GET /ajax.php?p=stats&do=show&aid=3&at=1 HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/gif
pragma: no-cache
expires: Wed, 5 Feb 1986 06:06:06 GMT
cache-control: must-revalidate
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=coqlytdQJ4oyRC1pUQHGQHoHP07M5xfNi%2B40%2FQ%2Bg6U99fzGwlSa4xMmlxtshhfmNjGKCrghQ59Vdp83spcl1LiBFmTWKPmDIelX6%2BKK7i2q%2FkkV1kQt%2FDMP2rkl%2BmFwRwR0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116badc16be4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/cdn-cgi/challenge-platform/h/g/scripts/jsd/d2a97f6b6ec9/main.js | 104.21.20.102 | 200 OK | 7.9 kB |
URL GET HTTP/3w27.my-cima.net/cdn-cgi/challenge-platform/h/g/scripts/jsd/d2a97f6b6ec9/main.js IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (7893), with no line terminators Hash2432630aeae8ec2dd91b99ad6e99e7a6 3e70397840ecefe27ec32bbd9db5707fcfd81b96 0bb83991f5a4369e43088ac0044e49ff44984c3e50c1b4b3eba9d42188da254a
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/d2a97f6b6ec9/main.js HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz; prefetchAd_6205538=true; cf_clearance=KYt8YenOe0PicBWaRFP8KWZ2FVSRAl8UgcYlGfPiVBQ-1719781258-1.0.1.1-Zthxw.XbfVu9DdEc8Ikq2eenbbM9mobJ1JGDGR7_FnRAP2JKFzxSC6jKv2BBsMIXAClCzmHmoZ.0qKaCZnmbrw; pm_elastic_player=normal
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:59 GMT
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
cache-control: max-age=14400, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mTR8v1KFNSFWhprdjR%2BHpZ2MyRZIktfaEZ2SUdZ91VU8SJuf%2FR30RCcKtMGzLfXfQ9sGLqEuSCO8FykWOSznaZIujs4LZ6J90JipYK6PmxAApD8DzsxiyU05ud4sERRoC6g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116c55c69be4e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js | 104.21.20.102 | 200 OK | 12 kB |
URL GET HTTP/3w27.my-cima.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (12331) Hash88a769d2fe35899fd45a332a0a032cc0 514c6c1d8475d17e412849a4c90159517d0fa10a ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: application/javascript
last-modified: Wed, 26 Jun 2024 17:43:16 GMT
etag: W/"667c5334-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VOLiDdC6jeGPph2K6YMSP2QDcreEE4pZLXAoow77ifIpVGiQvpiTiF6%2FXX5M%2Bfmg2uaIvZocV38Lhhdx5dGZNljRrhq90FZg63vubxmJjJmiegK1b8hlzJu0P83UmnvTCME%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89c116bb2cb8be4e-CPH
x-frame-options: DENY
x-content-type-options: nosniff
expires: Tue, 02 Jul 2024 21:00:57 GMT
cache-control: max-age=172800, public
content-encoding: gzip
|
|
| w27.my-cima.net/include/securimage_show.php?sid=224c489304647f1bb659907f0fed2193 | 104.21.20.102 | 200 OK | 2.7 kB |
URL GET HTTP/3w27.my-cima.net/include/securimage_show.php?sid=224c489304647f1bb659907f0fed2193 IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 158 x 35, 8-bit/color RGB, non-interlaced Hash0121134118663f8f862b17c9a6104650 90be299fdbf6831daa1d7170381f9a324fdb8580 ea0b720bc6720423c3eccc28af5be90f8a7d6671584dc63e5aa63d1ac84a2eef
GET /include/securimage_show.php?sid=224c489304647f1bb659907f0fed2193 HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: image/png
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QlZNw35fJoUkOKTn72neOPBkzMlZb0cRVaGl68aA%2FAbxXZw7YIFvsUYysJQQFc09U1rUzrTFtGQc%2Bi8DuIf%2F3C3IOYO4YZSMRGJLRIiE0bcbPOSM4BdXGa3yezSXTnvsANY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116bb1c9cbe4e-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/templates/3arbserv/js/jquery.cropit.js | 104.21.20.102 | 200 OK | 28 kB |
URL GET HTTP/3w27.my-cima.net/templates/3arbserv/js/jquery.cropit.js IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (27266) Hashcd82e0edbcecf087be901e8e7ed0d035 2cedce9f87501152efa36eb1949d95c0ca4ff200 b8a0d09df5a79e5e9494b3061eeff55883870c66714879886348c5095faa7840
GET /templates/3arbserv/js/jquery.cropit.js HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:58 GMT
content-type: text/javascript
cf-bgj: minify
last-modified: Tue, 07 Mar 2017 13:47:48 GMT
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 4727
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eXzCJILWWDpDPimt%2Fs%2FVtdztQpMCQ0nIxEznMjL4qNSLFl99Tn1mT6pMrldzlxEwNS6eAqHBbCI68uyL2Q2CedKVZwKBeV863cA2Q9RSbJPhq%2Fq7H3tEQn%2FOJxmOQX4iN38%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116bf4af3be4e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/templates/3arbserv/js/jquery.plugins.b.js | 104.21.20.102 | 200 OK | 9.1 kB |
URL GET HTTP/3w27.my-cima.net/templates/3arbserv/js/jquery.plugins.b.js IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (9411), with no line terminators Hash1b02a70cc7878be5b5b5452897fc60dc 21fab17c4e5f1732e9346c0a9bd9011fd1d75807 2db3190c81c530ff9b389c56d9d2f8038781b324d63e9ffaf08000872ae6446d
GET /templates/3arbserv/js/jquery.plugins.b.js HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:58 GMT
content-type: text/javascript
cf-bgj: minify
cf-polished: origSize=9535
last-modified: Tue, 05 Mar 2019 09:45:48 GMT
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 4727
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZdoVdaJCCrpod9B94ypPoIn3BXYTV8rwrJaz9TnWDHyvJ3RSBz%2FIvjIAe5r1sO5up7KcQQlJu5oNklM%2BOjLA7E3fzDUxYUP5NvNfnWnMq3e9ZiIoAaPQQNoOOnILiL13XII%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116bf5b03be4e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/templates/3arbserv/js/jquery.readmore.js | 104.21.20.102 | 200 OK | 3.4 kB |
URL GET HTTP/3w27.my-cima.net/templates/3arbserv/js/jquery.readmore.js IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3525), with no line terminators Hashc6979ecdd1afd6a79e4c9d8b62bfd064 e5e8f421833447bee665616bfc9fda7bc705d78f 8ba9cdb40fceabda5c5ad2269d4546003256e4c0a770687343cee216fe267cb0
GET /templates/3arbserv/js/jquery.readmore.js HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz; prefetchAd_6205538=true; cf_clearance=KYt8YenOe0PicBWaRFP8KWZ2FVSRAl8UgcYlGfPiVBQ-1719781258-1.0.1.1-Zthxw.XbfVu9DdEc8Ikq2eenbbM9mobJ1JGDGR7_FnRAP2JKFzxSC6jKv2BBsMIXAClCzmHmoZ.0qKaCZnmbrw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:58 GMT
content-type: text/javascript
cf-bgj: minify
cf-polished: origSize=3430
last-modified: Thu, 29 Oct 2015 08:29:54 GMT
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 4727
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HdK%2F9A32mwXxiifBbVPK3cn0KPYmfl5UePmm5hBmSCwv9%2F%2F39Cz9%2FbZZhC0ao%2Fx%2FTgV%2F5XVVnMHG13uN%2B1v4FEc6RAkhFnG%2FxyOM1rzzID%2F4GPtmRYNZjQd%2BTUlsWNOk4Ss%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116c34951be4e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| netdna.bootstrapcdn.com/bootstrap/3.2.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 32 kB |
URL GET HTTP/3netdna.bootstrapcdn.com/bootstrap/3.2.0/js/bootstrap.min.js IP104.18.10.207:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint93:87:98:7E:3F:62:5F:E6:68:1C:1C:8A:E4:9D:FB:A8:C3:72:4F:90 ValiditySat, 25 May 2024 01:51:52 GMT - Fri, 23 Aug 2024 01:51:51 GMT
File typeJavaScript source, ASCII text, with very long lines (31650) Hashabda843684d022f3bc22bc83927fe05f 26908395e7a9a4eab607d80aa50a81d65f3017cb 24cc29533598f962823c4229bc280487646a27a42a95257c31de1b9b18f3710f
GET /bootstrap/3.2.0/js/bootstrap.min.js HTTP/1.1
Host: netdna.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:58 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: gzip
etag: W/"abda843684d022f3bc22bc83927fe05f"
last-modified: Mon, 25 Jan 2021 22:03:57 GMT
cdn-cachedat: 05/01/2023 21:10:53
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 874
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: c24a1953c54449ff63e28ca06877aa18
cdn-cache: HIT
cf-cache-status: HIT
age: 5202864
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 89c116bf6a2092e5-CPH
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/templates/3arbserv/css/custom2.css?v=1.2 | 104.21.20.102 | 200 OK | 40 kB |
URL GET HTTP/3w27.my-cima.net/templates/3arbserv/css/custom2.css?v=1.2 IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (40055), with no line terminators Hash8be3957194f34e055c0386c64a893c29 11524525f16d4fa8782682bb363fd0101f8c1d54 e076cd912f72f35f14b3ca11c9d01f9abdc11a8242c9a1fb1cea4bd3bd611dc8
GET /templates/3arbserv/css/custom2.css?v=1.2 HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=49288
last-modified: Wed, 22 May 2024 15:00:09 GMT
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fGe34t4MlUF06oCJCbSUHp%2B%2Br6It9a2CS01m%2FO%2FPJOQHbObKcWGx4itgR9x2tUczYTe25XxonIg%2Bio3riiEk2rBAH7MITLhp8MnIa3wBzHuiAWYxhyxI4YlLIVwlyq7s%2BXM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116bacc0bbe4e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/js/jquery.typewatch.js | 104.21.20.102 | 200 OK | 1.4 kB |
URL GET HTTP/3w27.my-cima.net/js/jquery.typewatch.js IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1476), with no line terminators Hashf3989a1b6fad291e198cac5399cb0bd7 4e98f0e4f6c96bef7e8d95be4af3b772895ca1ff d9ee03f77286531633c2ea6bc7dcc3141322ecb2967e57990a280ad719c2d5c8
GET /js/jquery.typewatch.js HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:58 GMT
content-type: text/javascript
cf-bgj: minify
cf-polished: origSize=1745
last-modified: Mon, 06 May 2019 13:34:38 GMT
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 4727
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zV9ZxYvRo8saZNsLv233swEAmR1Vapx5vPqntQnnnO8VI3zsdDPyOWgaUsqmJqM0VUYLBqzZeo7KvT%2BbxVbUEgwnMoDWNycUDfqPsBGrIH2JdXHbaob0dBmcYC5ZTPdbK30%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116bf6b1dbe4e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/templates/3arbserv/css/bootstrap.min.css | 104.21.20.102 | 200 OK | 121 kB |
URL GET HTTP/3w27.my-cima.net/templates/3arbserv/css/bootstrap.min.css IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (65360), with CRLF line terminators Size121 kB (121253 bytes) Hash057c5534becfdb2d50350cbacfb8fa8c aee8eea23cc9ade1f7e3de672f57a9f79e9e1516 00cce1553100d450fad1142957e5a2c793a1c5ba7877f5a119c704eb6acc1313
GET /templates/3arbserv/css/bootstrap.min.css HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: text/css
last-modified: Tue, 16 Apr 2019 09:05:50 GMT
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 1174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EYaxJaaQ%2FyaSiiYl3jIJMKwHEXcDWukuDh255BlyAJ4HXLva2cBPC%2FNa8NL1S1O7F9psg2TN7K%2Fzgyw2hVETH8Y9nQfi3ZaI%2BPqLROMTgJJCS4RDvXI6IbOGrhXTnY9WW2U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116babbecbe4e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| w27.my-cima.net/templates/3arbserv/css/echo.rtl.css | 104.21.20.102 | 200 OK | 17 kB |
URL GET HTTP/3w27.my-cima.net/templates/3arbserv/css/echo.rtl.css IP104.21.20.102:443
Requested byhttps://w27.my-cima.net/watch.php?vid=ff260b59e CertificateIssuerCloudflare, Inc. Subjectmy-cima.net Fingerprint3B:70:88:E7:B5:E8:63:E7:86:2C:EC:15:DB:43:B6:6E:A5:8F:74:32 ValidityThu, 25 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (17280), with no line terminators Hash705451a4e7b20a5ce1a857e4c966066a d13416cd58f896ce1cf8ddae81693fdb03e499e4 ce28ab1f5bb0970aad3173b27526bd8dfa2f4ca8e36582dcef551f74186a8d45
GET /templates/3arbserv/css/echo.rtl.css HTTP/1.1
Host: w27.my-cima.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w27.my-cima.net/watch.php?vid=ff260b59e
Cookie: PHPSESSID=6eb28eba9b61af25f164f2c2e2624c61; watched_video_list=MTkz
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 30 Jun 2024 21:00:57 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=22855
last-modified: Mon, 06 May 2019 06:49:56 GMT
vary: Accept-Encoding,User-Agent
x-frame-options: DENY
cache-control: max-age=432000
cf-cache-status: HIT
age: 4726
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SWnE5v%2FoZNlqwkfBPk4wcNOC%2FsK0Fgfh%2F%2FUQ8JeEaq14wpGoMXz36UsK2LYNm509sOflcqZ5XxW%2B47v9RtMf0O2Tckig9kamCyl3wzDYIGRYbYQ8pzDZC6fjIZncA7u6hEM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89c116bacbfbbe4e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|