| guardoserie.bond/wp-content/uploads/2021/02/Guardaserie-3.png |  104.21.87.5 | 200 OK | 15 kB |
URL guardoserie.bond/wp-content/uploads/2021/02/Guardaserie-3.png IP104.21.87.5:0
File typePNG image data, 300 x 130, 8-bit/color RGBA, non-interlaced Hasha973c1cb9f8c2ccccfa0dabf7dc3c5b5 c64c1c1bb58599f30577c9e35caf84dfb9ccc1f2 f8d16208f9233ba9bda1a259d94519f3070161fb8a4cc279e3806c494b66822c
GET /wp-content/uploads/2021/02/Guardaserie-3.png HTTP/1.1
Host: guardoserie.bond
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/episodio/friends-stagione-4-episodio-14/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:05 GMT
content-type: image/png
content-length: 14920
cache-control: public, max-age=31557600
expires: Sun, 07 Dec 2025 00:58:31 GMT
last-modified: Wed, 17 Feb 2021 23:52:31 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 182734
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SKmmkRgcl%2FcvB7p%2BcfIk7gOC7ia6znRahsRHnsKEDsfZAHHOERWnv8RJ%2BiHMMrCw%2FiWkQHMXaHN%2F5XtxysTqeIO2Kv78dIm8EL3SeywKCbjGZ1LUwVhA2FOHONsomEdv%2FdZc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef4879a156c6-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=19392&min_rtt=2305&rtt_var=16687&sent=86&recv=17&lost=0&retrans=0&sent_bytes=85036&recv_bytes=2497&delivery_rate=18345420&cwnd=48000&unsent_bytes=0&cid=5ae93c73349c18ad&ts=624&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| guardoserie.bond/wp-content/themes/Serie/assets/css/img/buttons/btn-overlay-blue.png | 104.21.87.5 | 200 OK | 5.1 kB |
URL guardoserie.bond/wp-content/themes/Serie/assets/css/img/buttons/btn-overlay-blue.png IP104.21.87.5:0
File typePNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced Hashb675b7d9d5df278391d9c4f0f90dd81a fe2c643742b7412ea9122a2fd3636bffab774445 8dcb31923895722a51d7eca3e7db1159ea7aadd3bc9c330d8a1d179f47f73cf5
GET /wp-content/themes/Serie/assets/css/img/buttons/btn-overlay-blue.png HTTP/1.1
Host: guardoserie.bond
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/episodio/friends-stagione-4-episodio-14/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:05 GMT
content-type: image/png
content-length: 5058
cache-control: public, max-age=31557600
expires: Thu, 04 Dec 2025 09:34:08 GMT
last-modified: Fri, 30 Aug 2019 23:11:38 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 410997
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZyUiRoi6Y2EJcbKEla6BC0Q0naZGUhSfW1VzLfrebIAB9sXuWSwPwiXv8PjD72wKkuVgvzUiJaP5nKgOhAiM00h0vg%2FBInmBCexuLFsy8LFmhxMimPkH6Ocq6QPujHJog64K"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef4899ef56c6-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=18526&min_rtt=2305&rtt_var=14248&sent=102&recv=20&lost=0&retrans=0&sent_bytes=101118&recv_bytes=3589&delivery_rate=455274&cwnd=48000&unsent_bytes=0&cid=5ae93c73349c18ad&ts=652&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| guardoserie.bond/wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js?ver=6.5.3 | 104.21.87.5 | 200 OK | 2.6 kB |
URL guardoserie.bond/wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js?ver=6.5.3 IP104.21.87.5:0
File typeJavaScript source, ASCII text, with very long lines (4623) Hashfb09040de1e36049114a1f4e6dd35f5c 8d36f99b17d88a7f6dac59fc7a02edd92a7f9662 ff3d0e8b3eeb7ba127f9a3fa28f85a045e502f1b3740740c8464ee70d65588e1
GET /wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js?ver=6.5.3 HTTP/1.1
Host: guardoserie.bond
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/episodio/friends-stagione-4-episodio-14/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:04 GMT
content-type: text/javascript
cache-control: public, max-age=31557600
expires: Sat, 06 Dec 2025 01:07:49 GMT
last-modified: Thu, 05 Dec 2024 04:36:06 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 268575
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xOFoF%2BwKtOlfK0%2B3jJ7ePw10dhjRybVQH57cWnoNnaOGTK6KD3zmInlklcSWDQAQAO8cgPFX%2B1Qp0ky5HrsA%2FqwRQPMLK%2FXgICZDWgHYMdLRh5%2FvOyIwbocyCfX9ya%2B0VfmC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8eefef46ce6b56c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=27699&min_rtt=13151&rtt_var=15323&sent=15&recv=11&lost=0&retrans=0&sent_bytes=4242&recv_bytes=1673&delivery_rate=45164&cwnd=12000&unsent_bytes=0&cid=5ae93c73349c18ad&ts=362&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2 | 104.17.24.14 | 200 OK | 57 kB |
URL cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2 IP104.17.24.14:0
File typeWeb Open Font Format (Version 2), TrueType, length 56780, version 4.197 Hash97493d3f11c0a3bd5cbd959f5d19b699 1075231650f579955905bb2f6527148a8e2b4b16 aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c
GET /ajax/libs/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://guardoserie.bond
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 08 Dec 2024 21:44:05 GMT
content-type: application/octet-stream
content-length: 56780
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "663bae01-ddcc"
last-modified: Wed, 08 May 2024 16:53:21 GMT
vary: Accept-Encoding
cf-cdnjs-dc: pdx
cf-cdnjs-via: cfworker/origin0
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3951446
expires: Fri, 28 Nov 2025 21:44:05 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D2sqFzXOIaYSremEbvCwNOWjYDKCnjKyEpiazD0okqy0JjYZlEJM8XljALWDCACPp4SNhAOPEss%2BpQvHLt%2FRiOs3L36YaM9wIVfikrchiS%2FoFjX4saapha3yMK2FPgLQITq7Cnft"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8eefef493c1bb4f9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| image.tmdb.org/t/p/w185/74fn3cA3wEVxkgB7Zah37p4ouFz.jpg |  89.187.169.47 | 200 OK | 14 kB |
URL image.tmdb.org/t/p/w185/74fn3cA3wEVxkgB7Zah37p4ouFz.jpg IP89.187.169.47:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 185x267, components 3 Hash032836ca505870c598bd4d1a3631dbfc 642901d73960543387a0b6529f35f151f2caf5bd 2156930babdd4b824e7e7752aa20ef006c180122b5a35ea347eeb09e6ca4953e
GET /t/p/w185/74fn3cA3wEVxkgB7Zah37p4ouFz.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 08 Dec 2024 21:44:05 GMT
content-type: image/jpeg
content-length: 13950
server: BunnyCDN-DE1-756
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "628430f5-367e"
last-modified: Tue, 17 May 2022 23:34:13 GMT
cdn-storageserver: NY-346
cdn-requestpullsuccess: True
cdn-fileserver: 341
perma-cache: HIT
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-cachedat: 12/08/2024 21:44:05
cdn-edgestorageid: 1049
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: d9b0047475613718446bc69958264d4a
cdn-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| guardoserie.bond/episodio/friends-stagione-4-episodio-14/ |  172.67.139.27 | 200 OK | 18 kB |
URL guardoserie.bond/episodio/friends-stagione-4-episodio-14/ IP172.67.139.27:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (56237) Hash5ecbf70a690f14d974495130d56d5414 72f943e1e3d8ce67adc15c1697dcb2f56905b94c f600c6f47fdac819e0d17fa264e93b172a7b9bfb7acd695973e570c22bc6105c
GET /episodio/friends-stagione-4-episodio-14/ HTTP/1.1
Host: guardoserie.bond
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: _lscache_vary=c533e73c28533576bb68ff549feba287
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 08 Dec 2024 21:44:05 GMT
content-type: text/html; charset=UTF-8
link: <https://guardoserie.bond/wp-json/>; rel="https://api.w.org/", <https://guardoserie.bond/?p=55229>; rel=shortlink
x-litespeed-cache: hit
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n4lO0Z018RgJRosIaG2ONINbOEGZfkFvMA4p41IDWtjCqhK9nS4qgSkvanYiKMfF2HYpPfywhXbM71QLCGTcULosftj%2Bdpe6yXynaRnJqRe6GVIHoq65BU1VUZvN0PybjnS4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8eefef4acecd56c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=6599&min_rtt=537&rtt_var=11358&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3287&recv_bytes=1310&delivery_rate=5294332&cwnd=254&unsent_bytes=0&cid=1c448d2b9c69aa69&ts=94&x=0"
X-Firefox-Spdy: h2
|
|
| guardoserie.bond/wp-content/litespeed/js/2800c62b92ef02c1abde1e53b24f9819.js?ver=f43bc | 104.21.87.5 | 200 OK | 4.1 kB |
URL guardoserie.bond/wp-content/litespeed/js/2800c62b92ef02c1abde1e53b24f9819.js?ver=f43bc IP104.21.87.5:0
File typeJavaScript source, ASCII text, with very long lines (9259) Hashf8efd1fb2fc80f450c8a985680a31849 1fda10b621c3169701ebf0409b90ab65088a6e60 dd94169f901a9fc33f030b2d83ce7912b4c2536fe27e5fe1537be9397cc34b5b
GET /wp-content/litespeed/js/2800c62b92ef02c1abde1e53b24f9819.js?ver=f43bc HTTP/1.1
Host: guardoserie.bond
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/episodio/friends-stagione-4-episodio-14/
Cookie: _lscache_vary=c533e73c28533576bb68ff549feba287
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:05 GMT
content-type: text/javascript
cache-control: public, max-age=31557600
expires: Thu, 04 Dec 2025 09:34:09 GMT
last-modified: Wed, 04 Dec 2024 03:33:58 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 410996
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O89ED4p9185Rtgo5hrezobypmaUD96gpMXHqWxsKQEF%2FSC89gn%2BVPLpvKRe%2FX1bQjiiCId8%2BiGxqJsSQtLl7lBvLTYOWlTV26Zgp7ug11zbpcxZOg%2B93asraiqAHkuF8Rj4x"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8eefef4bcc6d56c9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3183&min_rtt=2012&rtt_var=1348&sent=129&recv=17&lost=0&retrans=0&sent_bytes=130923&recv_bytes=5405&delivery_rate=17342161&cwnd=96000&unsent_bytes=0&cid=b48098ae3b5280bd&ts=92&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| guardoserie.bond/wp-content/litespeed/js/4ae89fb0fc480aed384cc1b06bcc36c7.js?ver=44b68 | 104.21.87.5 | 200 OK | 10 kB |
URL guardoserie.bond/wp-content/litespeed/js/4ae89fb0fc480aed384cc1b06bcc36c7.js?ver=44b68 IP104.21.87.5:0
File typeJavaScript source, ASCII text, with very long lines (35783), with CRLF, LF line terminators Hash1f5165973a59c065499cd608856a6886 e015b87b241191d8d2a4c29f76416ee6446e5cf2 276b90dda07395f05cf07c2ffb8a87ccb300a414eaa4c1fca43a11b9b1452d05
GET /wp-content/litespeed/js/4ae89fb0fc480aed384cc1b06bcc36c7.js?ver=44b68 HTTP/1.1
Host: guardoserie.bond
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/episodio/friends-stagione-4-episodio-14/
Cookie: _lscache_vary=c533e73c28533576bb68ff549feba287
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:05 GMT
content-type: text/javascript
cache-control: public, max-age=31557600
expires: Thu, 04 Dec 2025 09:34:09 GMT
last-modified: Wed, 04 Dec 2024 03:33:58 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 410996
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mJH4ZKifw8CzRBmEndJQaH8Mk5tz8QVJH8euzbfAYOdHRXknzfYTQy9a0ckejYRfZYM0A0C6ScCCAwRHFxP6%2FVod6d9JMujK5fciVdu6142us0%2Fy1EUnKUXTe1%2BaEHf7X6ch"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8eefef4bcc6956c9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3183&min_rtt=2012&rtt_var=1348&sent=133&recv=17&lost=0&retrans=0&sent_bytes=135363&recv_bytes=5405&delivery_rate=17342161&cwnd=96000&unsent_bytes=0&cid=b48098ae3b5280bd&ts=93&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js?ver=2.1.3 | 142.250.74.170 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js?ver=2.1.3 IP142.250.74.170:0
File typeJavaScript source, ASCII text, with very long lines (32180) Hash32015dd42e9582a80a84736f5d9a44d7 41b4bfbaa96be6d1440db6e78004ade1c134e276 8af93bd675e1cfd9ecc850e862819fdac6e3ad1f5d761f970e409c7d9c63bdc3
GET /ajax/libs/jquery/2.1.3/jquery.min.js?ver=2.1.3 HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29707
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 01:40:39 GMT
expires: Sun, 07 Dec 2025 01:40:39 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 158606
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| guardoserie.bond/wp-content/litespeed/js/04512db0c205ceec6da6701b2b1100bb.js?ver=d82f5 | 104.21.87.5 | 200 OK | 2.1 kB |
URL guardoserie.bond/wp-content/litespeed/js/04512db0c205ceec6da6701b2b1100bb.js?ver=d82f5 IP104.21.87.5:0
File typeJavaScript source, ASCII text, with very long lines (1880) Hash15143905ae64a92deeb6f8bcda8193cb 931e675005b33b37fd64024f195a7e99c8cf5c87 5034b970fa3bf47f6e84912934572c26eaea12e32e5468cc36172d3290fac77e
GET /wp-content/litespeed/js/04512db0c205ceec6da6701b2b1100bb.js?ver=d82f5 HTTP/1.1
Host: guardoserie.bond
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/episodio/friends-stagione-4-episodio-14/
Cookie: _lscache_vary=c533e73c28533576bb68ff549feba287
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:05 GMT
content-type: text/javascript
cache-control: public, max-age=31557600
expires: Thu, 04 Dec 2025 09:34:09 GMT
last-modified: Wed, 04 Dec 2024 03:33:58 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 410996
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9ntsLBo22WTcqyF7NkXoKxzjiKxKFFfiUVtc61Lm3c7bv0aStpaXCGnCf8l%2B5hyddfSyFLVckObSMN%2B4gfg2cU6B295pagp87s9f%2Bgv5bS9HKIqJ9mykmZuSFqEUwqufuZQS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8eefef4bac3656c9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3050&min_rtt=2012&rtt_var=1496&sent=16&recv=11&lost=0&retrans=0&sent_bytes=1999&recv_bytes=3307&delivery_rate=295180&cwnd=12000&unsent_bytes=0&cid=b48098ae3b5280bd&ts=71&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| guardoserie.bond/wp-content/uploads/2021/02/Guardaserie-3.png | 104.21.87.5 | 200 OK | 15 kB |
URL guardoserie.bond/wp-content/uploads/2021/02/Guardaserie-3.png IP104.21.87.5:0
File typePNG image data, 300 x 130, 8-bit/color RGBA, non-interlaced Hasha973c1cb9f8c2ccccfa0dabf7dc3c5b5 c64c1c1bb58599f30577c9e35caf84dfb9ccc1f2 f8d16208f9233ba9bda1a259d94519f3070161fb8a4cc279e3806c494b66822c
GET /wp-content/uploads/2021/02/Guardaserie-3.png HTTP/1.1
Host: guardoserie.bond
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/episodio/friends-stagione-4-episodio-14/
Cookie: _lscache_vary=c533e73c28533576bb68ff549feba287
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:06 GMT
content-type: image/png
content-length: 14920
cache-control: public, max-age=31557600
expires: Sun, 07 Dec 2025 00:58:31 GMT
last-modified: Wed, 17 Feb 2021 23:52:31 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 182735
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rCjIvE8KADaKITAnRtKF%2FQi3izhEK5oZTlJnQlYehYMEcf6tXzy%2FMPYRPCLk2YwwM997vv6bW81frri2ldIfR3YR3YFgyP0vyMAIaxIhwP1Ub1a5sIm4Iyhf5kPSskxC1MiF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef4dc83d56c9-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4577&min_rtt=2012&rtt_var=2963&sent=145&recv=20&lost=0&retrans=0&sent_bytes=147292&recv_bytes=5856&delivery_rate=4962211&cwnd=96000&unsent_bytes=0&cid=b48098ae3b5280bd&ts=415&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| www.google.com/recaptcha/api.js?ver=1.2.5 | 142.250.74.164 | 200 OK | 1.5 kB |
URL www.google.com/recaptcha/api.js?ver=1.2.5 IP142.250.74.164:0
File typegzip compressed data, max compression Hash383f570fc1047be3c4e6afa979711e66 eb5f137b4bf4253a8e49fd6f322e909c45300964 a1aa4535e88442d49137dd81dc1dadd171692851a6aa9e3a8fcb7b00a28fb47c
GET /recaptcha/api.js?ver=1.2.5 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Sun, 08 Dec 2024 21:44:05 GMT
date: Sun, 08 Dec 2024 21:44:05 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| guardoserie.bond/wp-content/themes/Serie/assets/css/img/buttons/btn-overlay-blue.png | 104.21.87.5 | 200 OK | 5.1 kB |
URL guardoserie.bond/wp-content/themes/Serie/assets/css/img/buttons/btn-overlay-blue.png IP104.21.87.5:0
File typePNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced Hashb675b7d9d5df278391d9c4f0f90dd81a fe2c643742b7412ea9122a2fd3636bffab774445 8dcb31923895722a51d7eca3e7db1159ea7aadd3bc9c330d8a1d179f47f73cf5
GET /wp-content/themes/Serie/assets/css/img/buttons/btn-overlay-blue.png HTTP/1.1
Host: guardoserie.bond
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/episodio/friends-stagione-4-episodio-14/
Cookie: _lscache_vary=c533e73c28533576bb68ff549feba287
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:06 GMT
content-type: image/png
content-length: 5058
cache-control: public, max-age=31557600
expires: Thu, 04 Dec 2025 09:34:08 GMT
last-modified: Fri, 30 Aug 2019 23:11:38 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 410998
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fep3apJOxAJa8e7QKypzbXwnO6wU1Sajie5TGesckHLSL%2F2LSKDmHpf9%2FPupgwGPF8rpOPgwxB4ss%2FMzDueacfE4UQCgPEyUIrsAVcRykOmmMub2j0IjZjmwI952SGMJ4rh2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef4de87a56c9-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4541&min_rtt=2012&rtt_var=2294&sent=162&recv=22&lost=0&retrans=0&sent_bytes=165090&recv_bytes=7019&delivery_rate=843653&cwnd=96000&unsent_bytes=0&cid=b48098ae3b5280bd&ts=439&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2 | 104.17.25.14 | 200 OK | 57 kB |
URL cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2 IP104.17.25.14:0
File typeWeb Open Font Format (Version 2), TrueType, length 56780, version 4.197 Hash97493d3f11c0a3bd5cbd959f5d19b699 1075231650f579955905bb2f6527148a8e2b4b16 aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c
GET /ajax/libs/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://guardoserie.bond
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 08 Dec 2024 21:44:06 GMT
content-type: application/octet-stream
content-length: 56780
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "663bae01-ddcc"
last-modified: Wed, 08 May 2024 16:53:21 GMT
vary: Accept-Encoding
cf-cdnjs-dc: pdx
cf-cdnjs-via: cfworker/origin0
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3951447
expires: Fri, 28 Nov 2025 21:44:06 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G%2FcUIsD2djPa%2FDFro1LYEOGrP%2BoDd3ASX1csHiWLxsKSnazY0Pe9GFaLv3ouKkSV84BSK0qkTmZvhAwJIcMSbk6FCPDLGheHRAtUktzigmAfMRgwTcpbuNiqOSqF85MJTZkNbWVU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8eefef4e5fdd56a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| guardoserie.bond/wp-content/plugins/wp-postratings/images/stars_png/rating_over.png | 104.21.87.5 | 200 OK | 605 B |
URL guardoserie.bond/wp-content/plugins/wp-postratings/images/stars_png/rating_over.png IP104.21.87.5:0
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Hashc5c973a40e458bbdf42f3349dcc47b23 a74133588e728917f00975fbb7cb65306038a8a5 e8c45116e54a23e3e851b31c93d45ddd97a7817668ccd5d139c8f40053a709d4
GET /wp-content/plugins/wp-postratings/images/stars_png/rating_over.png HTTP/1.1
Host: guardoserie.bond
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/episodio/friends-stagione-4-episodio-14/
Cookie: _lscache_vary=c533e73c28533576bb68ff549feba287
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:06 GMT
content-type: image/png
content-length: 605
cache-control: public, max-age=31557600
expires: Thu, 04 Dec 2025 09:34:09 GMT
last-modified: Thu, 18 Jul 2024 20:02:30 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 410997
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8vPXyZBVhh4eBYfnvqLX5Fl9XLVuQhMkHFaBKeVuZun5sUox15cbjd9yxaITAN6AMU5nBwnijeMyuz5DCmUNC%2FGP4WcPH%2F8HEOQj0Gw6ECTRh13QQQLS%2F9HnknuzJ6F7Uuvd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef4e597256c9-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4669&min_rtt=2012&rtt_var=1905&sent=174&recv=26&lost=0&retrans=0&sent_bytes=176621&recv_bytes=7901&delivery_rate=813532&cwnd=96000&unsent_bytes=0&cid=b48098ae3b5280bd&ts=511&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| image.tmdb.org/t/p/w185/74fn3cA3wEVxkgB7Zah37p4ouFz.jpg | 89.187.169.47 | 200 OK | 14 kB |
URL image.tmdb.org/t/p/w185/74fn3cA3wEVxkgB7Zah37p4ouFz.jpg IP89.187.169.47:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 185x267, components 3 Hash032836ca505870c598bd4d1a3631dbfc 642901d73960543387a0b6529f35f151f2caf5bd 2156930babdd4b824e7e7752aa20ef006c180122b5a35ea347eeb09e6ca4953e
GET /t/p/w185/74fn3cA3wEVxkgB7Zah37p4ouFz.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 08 Dec 2024 21:44:06 GMT
content-type: image/jpeg
content-length: 13950
server: BunnyCDN-DE1-756
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "628430f5-367e"
last-modified: Tue, 17 May 2022 23:34:13 GMT
cdn-storageserver: NY-346
cdn-requestpullsuccess: True
cdn-fileserver: 341
perma-cache: HIT
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-cachedat: 12/08/2024 21:44:05
cdn-edgestorageid: 1049
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: f25965df79da540cd18a04ec2943b796
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| guardoserie.bond/wp-content/plugins/litespeed-cache/guest.vary.php | 104.21.87.5 | 200 OK | 599 B |
URL guardoserie.bond/wp-content/plugins/litespeed-cache/guest.vary.php IP104.21.87.5:0
Hashe2bb2c7e02e214822b4ffffc314ca27e 2d193e2847595361f1b0ce151dfd28c2f855c510 76fb65f605df2b2d124684c3c4ec3e0c75fdf013b2727af6cdb68b73b5c8a9bb
POST /wp-content/plugins/litespeed-cache/guest.vary.php HTTP/1.1
Host: guardoserie.bond
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://guardoserie.bond/episodio/friends-stagione-4-episodio-14/
Origin: https://guardoserie.bond
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:05 GMT
content-type: text/html; charset=UTF-8
x-robots-tag: noindex
x-litespeed-cache-control: no-cache
set-cookie: _lscache_vary=c533e73c28533576bb68ff549feba287; expires=Tue, 10-Dec-2024 21:44:05 GMT; Max-Age=172800; path=/; HttpOnly; secure
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5TVAhgNGE%2FzPDr1ngh6mraMqK9FmZuVRCVKL9ZrxrfU6nONUs9aJmL%2BUgCuVrkNJawoaaVXF68Z9AYvnwPj90qeoFlB6oSsOLQDjKLT4xdaBHrGVelwU34N9xuCpGuiDtqHL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8eefef48697f56c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14636&min_rtt=1357&rtt_var=14797&sent=114&recv=22&lost=0&retrans=0&sent_bytes=114348&recv_bytes=3680&delivery_rate=4100017&cwnd=48000&unsent_bytes=0&cid=5ae93c73349c18ad&ts=684&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| guardoserie.bond/wp-content/litespeed/js/5b95c62bbf1cd792b3e64a03f7acdf47.js?ver=fa7a3 | 104.21.87.5 | 200 OK | 5.3 kB |
URL guardoserie.bond/wp-content/litespeed/js/5b95c62bbf1cd792b3e64a03f7acdf47.js?ver=fa7a3 IP104.21.87.5:0
File typeJavaScript source, ASCII text, with very long lines (1983) Hash8789ff33dfce8a4ab20a6f2232a168e0 3764da72f7eb71722ef5d6e564e263edb12600f4 ce7790c7fb135b60fe527caa97e7bdd3ed1c7741bae52b621799fc397be3c30d
GET /wp-content/litespeed/js/5b95c62bbf1cd792b3e64a03f7acdf47.js?ver=fa7a3 HTTP/1.1
Host: guardoserie.bond
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/episodio/friends-stagione-4-episodio-14/
Cookie: _lscache_vary=c533e73c28533576bb68ff549feba287
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:05 GMT
content-type: text/javascript
cache-control: public, max-age=31557600
expires: Fri, 05 Dec 2025 01:31:17 GMT
last-modified: Wed, 04 Dec 2024 19:31:17 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 353568
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VdmGx5TI2nXZHe7mi2j2mOQ6Xb16VUq7wS6hGcZfOQvLBsScfib2uAuwjvfzcKMoDc%2FWHUEBa1RTd13lp4ywCSZfke70y3aH3HvsL10fdHhPeeocU8%2F2qnSEOIGFGF5Rp6Dc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8eefef4bac3f56c9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3050&min_rtt=2012&rtt_var=1496&sent=27&recv=11&lost=0&retrans=0&sent_bytes=13197&recv_bytes=3307&delivery_rate=295180&cwnd=12000&unsent_bytes=0&cid=b48098ae3b5280bd&ts=73&x=1", cfExtPri, cfHdrFlush;dur=6
|
|
| guardoserie.bond/wp-content/litespeed/js/b5b508ca685e94964bdaf21648064333.js?ver=c9f98 | 104.21.87.5 | 200 OK | 221 kB |
URL guardoserie.bond/wp-content/litespeed/js/b5b508ca685e94964bdaf21648064333.js?ver=c9f98 IP104.21.87.5:0
File typeJavaScript source, ASCII text, with very long lines (431) Size221 kB (221027 bytes) Hash9e24524621edf197ded8779666f12586 9abb393155e6cdc5d539d3e3c13c951e97e8a89a 471f6a1b020ddc301e02cce2075aad101b4cc3b84455ace927b7078d904b473f
GET /wp-content/litespeed/js/b5b508ca685e94964bdaf21648064333.js?ver=c9f98 HTTP/1.1
Host: guardoserie.bond
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/episodio/friends-stagione-4-episodio-14/
Cookie: _lscache_vary=c533e73c28533576bb68ff549feba287
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:05 GMT
content-type: text/javascript
cache-control: public, max-age=31557600
expires: Thu, 04 Dec 2025 09:34:09 GMT
last-modified: Wed, 04 Dec 2024 03:33:58 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 410996
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=faqsLXLr0tDxedDleHtRBNqHI7CIOPJ8pHrLYoQWORtsR0mMCEoB21tw275rYgP6poneoQYwdsMrzyYsUmYpQuIpUP0vpcUKXttU4g3RO7nvS1d0YY4bQm3c5GihKFMtl%2BlR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8eefef4bcc6656c9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3183&min_rtt=2012&rtt_var=1348&sent=143&recv=17&lost=0&retrans=0&sent_bytes=146235&recv_bytes=5405&delivery_rate=17342161&cwnd=96000&unsent_bytes=0&cid=b48098ae3b5280bd&ts=93&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| dropload.io/js/dnsads.js?dfp=1&ad_code=2&adsrc=3 | 172.67.71.162 | 200 OK | 38 B |
URL dropload.io/js/dnsads.js?dfp=1&ad_code=2&adsrc=3 IP172.67.71.162:0
File typeASCII text, with CRLF line terminators Hash99eccae6afa72c589ae54b5c3890282a 0f102f8f5b556635de65d16cf70fa8269c6761b4 b74a58316385de04b054737776e71c160cd60d2d01b5440b32c21651fb0ab8d3
GET /js/dnsads.js?dfp=1&ad_code=2&adsrc=3 HTTP/1.1
Host: dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:06 GMT
content-type: application/javascript
content-length: 38
last-modified: Mon, 13 Sep 2021 13:50:14 GMT
etag: "26-5cbe0be937180"
cache-control: max-age=345600
cf-cache-status: HIT
age: 2948
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NLz%2B9GLSQlMJFyBDL92Y1CrQDqAbkb3oibC1K8SItL1Z7sR95EXAzZwIc0r2Ii%2FC%2Fy9dtNgDO7k0sMCpZSmVUqiOSF32yzFey8%2Fpq3poO8k%2BEPhm%2FolAj18Kt132aQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef52aa9f569d-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6587&min_rtt=2233&rtt_var=6076&sent=36&recv=18&lost=0&retrans=0&sent_bytes=21472&recv_bytes=3383&delivery_rate=28515&cwnd=24000&unsent_bytes=0&cid=39e764801c3481b6&ts=261&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| i.dropload.io/buuao4viaa5b_xt.jpg | 172.67.71.162 | 200 OK | 90 kB |
URL i.dropload.io/buuao4viaa5b_xt.jpg IP172.67.71.162:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 800x578, components 3 Hashd87a92518bf7a6ef82de01e5fd4c1efe d6cd3991fc52d63df99e872266006758fc467830 f6d35856f44a47056d9c3c608ccc3525c1e3bff2379600d8592f3691c490f46d
GET /buuao4viaa5b_xt.jpg HTTP/1.1
Host: i.dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:06 GMT
content-type: image/jpeg
content-length: 90036
last-modified: Wed, 04 Dec 2024 11:06:46 GMT
etag: "675037c6-15fb4"
expires: Sun, 15 Dec 2024 09:12:11 GMT
cache-control: max-age=604800
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8bqLmvyxsYLTfGeTHjQrgqVDBdx3yQIP%2FyhYrOxyNczfsOWrYuZ8sm0DQFnYTrTFH8fk8Wx97gMQusu35nFf7S%2BJ8IC44liE5euAh5PgrTXYOXKfBmAuoIfpKekCGAax"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef51c95e569d-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6587&min_rtt=2233&rtt_var=6076&sent=38&recv=20&lost=0&retrans=0&sent_bytes=22239&recv_bytes=3946&delivery_rate=28515&cwnd=24000&unsent_bytes=0&cid=39e764801c3481b6&ts=266&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| dropload.io/css/main.css | 172.67.71.162 | 200 OK | 12 kB |
IP172.67.71.162:0
File typeassembler source, Unicode text, UTF-8 text Hash51d559d2f974e61e564a5f8120a23a9a 9eab84e6bf40cfca88aac7f6d849df54f27ac12d a01ef8569a9021b0315bf38d5d518a928d98efce576f56ac012c30f2b63e1cb6
GET /css/main.css HTTP/1.1
Host: dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:06 GMT
content-type: text/css
last-modified: Sun, 15 May 2022 11:03:54 GMT
etag: W/"c11b-5df0add003a80"
cache-control: max-age=345600
cf-cache-status: REVALIDATED
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yQact%2Fs2AvWSUoqcUACEFIimmr1H9NcEjOvEFP8VyVjCJSpcDxymNXgsQc1uZ0rak%2Fsrw1n8uy0Aq4BurMV8RxBeBEbKpMC5W2lBOYhW2U2x0tzCeK86uvlrE4aqBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef51a92c569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4740&min_rtt=2233&rtt_var=2381&sent=20&recv=11&lost=0&retrans=0&sent_bytes=8721&recv_bytes=1860&delivery_rate=42577&cwnd=12000&unsent_bytes=0&cid=39e764801c3481b6&ts=178&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| ju.punniertoi.com/r6734a57674dbc6734a57674dbe/111561 |  23.109.170.198 | 200 OK | 20 B |
URL ju.punniertoi.com/r6734a57674dbc6734a57674dbe/111561 IP23.109.170.198:0
File typegzip compressed data, from Unix Hash7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /r6734a57674dbc6734a57674dbe/111561 HTTP/1.1
Host: ju.punniertoi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Dec 2024 21:44:06 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://dropload.io
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Mon, 09-Dec-2024 21:44:06 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Mon, 09-Dec-2024 21:44:06 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| dropload.io/js/localstorage-slim.js | 172.67.71.162 | 200 OK | 956 B |
URL dropload.io/js/localstorage-slim.js IP172.67.71.162:0
File typeJavaScript source, ASCII text, with very long lines (2063) Hashba6facacb00551830393d637195804cf 77d2d2802ee44767b33a2d679945cc3efa3619cc 41bb37c8133d8e5c128820cfbe03bcbf63ce256bcbd60a1a76143472d8668e38
GET /js/localstorage-slim.js HTTP/1.1
Host: dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:06 GMT
content-type: application/javascript
last-modified: Tue, 16 Nov 2021 12:32:06 GMT
etag: W/"810-5d0e71cfe3d80"
cache-control: max-age=345600
cf-cache-status: HIT
age: 2948
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QQZdTkF9luGbR1F7CyuyOUiOlqVLPy33DWfMjvkqlGm4OXEIP5QrE925YCsIf80NHZ2ZBpjX%2B40R6DxUJeY%2FWB3vCA7eqz7Dxjd0i0HMYWCD3VmLOMlqB81lcTkqeQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef52aaa9569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6587&min_rtt=2233&rtt_var=6076&sent=48&recv=20&lost=0&retrans=0&sent_bytes=34239&recv_bytes=3946&delivery_rate=28515&cwnd=24000&unsent_bytes=0&cid=39e764801c3481b6&ts=267&x=1", cfExtPri, cfHdrFlush;dur=5
|
|
| dropload.io/e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b | 104.26.7.46 | 200 OK | 7.3 kB |
URL dropload.io/e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b IP104.26.7.46:0
File typeHTML document, ASCII text, with very long lines (4871) Hashc032553a20f65350f81d06405f7c5660 9459ed3d6734ef9fcc506e2f98aba57119375565 bed9dce5b30d4facf6486fa9fec3c71256b56ffe628b59bd11f98f3e9423e086
GET /e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b HTTP/1.1
Host: dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 08 Dec 2024 21:44:06 GMT
content-type: text/html; charset=UTF-8
expires: Sat, 07 Dec 2024 21:44:06 GMT
set-cookie: lang=1; domain=.dropload.io; path=/; HttpOnly
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6tNcnY2sTsJVzIiDpgqGp0T8zfDLvOeVV0tMo8ty3BRvSas6iCJN%2FM35pn6qFb0UJ%2FeMtXdOHfb44aDRKWT9jd%2FKV33OWbsAj%2FoHBY07iHXyDph2trqDUKRdrcoXpw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef4e78cb56ca-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=7174&min_rtt=621&rtt_var=11221&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3198&recv_bytes=1173&delivery_rate=6808777&cwnd=254&unsent_bytes=0&cid=bd21b7aaab51fe3d&ts=427&x=0"
X-Firefox-Spdy: h2
|
|
| POST dropload.io/cdn-cgi/challenge-platform/h/g/jsd/r/8eefef4e78cb56ca | 172.67.71.162 | 200 OK | 0 B |
URL POST HTTP/3dropload.io/cdn-cgi/challenge-platform/h/g/jsd/r/8eefef4e78cb56ca IP172.67.71.162:443
Requested byhttps://dropload.io/e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b CertificateIssuerGoogle Trust Services Subjectdropload.io FingerprintFE:F3:08:0F:79:DE:D3:95:54:46:4C:7B:96:A3:C2:DD:F7:48:0F:92 ValidityThu, 17 Oct 2024 01:28:32 GMT - Wed, 15 Jan 2025 01:28:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/g/jsd/r/8eefef4e78cb56ca HTTP/1.1
Host: dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12199
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:07 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
priority: u=3,i=?0
set-cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.dropload.io; Priority=High; HttpOnly; Secure; SameSite=None
cf_clearance=zMd9BC8RUukQNzWSrnmPoMdBoOp14H3vCxaDcbowEds-1733694247-1.2.1.1-yElHfzV8Ykssl0F2GnI8eDhwhyjL7Gu_Ks7nw675Jnzgi6aDdgSy8OgQz1tu6Y.E2bW0inKxD5FbKrgYsD22A0ygDifTt5FhSqvXsMEHTzLh5uYzH2E4JaxxcRM.DTFCJ5FWIMGPBqgHRhJFKWVrxi9dtB_HcQHvpVF4Km96ZvFwJbXvghVvjtiaOvoo21DeF7MMvLKMn4QIcQFemJou3d3q6igRHSmxSOrL483oKHAU4AOCOUT3yhkzi9cN4oB732bgSNhIJXCfV3eMDTVRUFW3_ZI.Ats4IJjKBtF2hakdx8S5j8L4lFS0VbtYURYKj07XdKdNnh5ZRC3OtGj33Q; Path=/; Expires=Mon, 08-Dec-25 21:44:07 GMT; Domain=.dropload.io; Priority=High; HttpOnly; Secure; SameSite=None; Partitioned
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VGju27%2F1rpZnq%2BCbIksLXNkThsCOBrPQFEEONrXTQ%2FYzrcYN%2Bt5oiF0BRWNs5P4I3o72mltQTKnzzTZWTjBjaBCKztFhSjB7R%2FtXsvvK%2B5qwVo%2FZplH8bDSm%2BqEfAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8eefef552e1c569d-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5038&min_rtt=2197&rtt_var=3388&sent=401&recv=42&lost=0&retrans=0&sent_bytes=439720&recv_bytes=18756&delivery_rate=479090&cwnd=326400&unsent_bytes=0&cid=39e764801c3481b6&ts=669&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| dropload.io/player/jw8/jwplayer.js | 172.67.71.162 | 200 OK | 42 kB |
URL dropload.io/player/jw8/jwplayer.js IP172.67.71.162:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65502) Hash2ec2f2895efd49f77a8506208f81bd11 c85898b0175eb070423001241f805af184a093dd dd4465b666f70c8dff541e1d484c816d5bbf5cd076a9dbd4f358df91431754c8
GET /player/jw8/jwplayer.js HTTP/1.1
Host: dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:06 GMT
content-type: application/javascript
last-modified: Thu, 08 Sep 2022 10:33:01 GMT
etag: W/"1cfca-5e827f4253140"
cache-control: max-age=345600
cf-cache-status: HIT
age: 2948
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=efAhrOqcON5xMzcq6EH6BWm%2F%2Favivxyrbjf3EJSMlD502K7SgW4SwVbMHwKKbdr7eGVMcLBpfGdAI1qcKbyGuzgV5wJoL8OOcyaTgMj2mS1is%2BHxpHDL6Vb0opYl4A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef52aaaa569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6319&min_rtt=2233&rtt_var=5091&sent=60&recv=21&lost=0&retrans=0&sent_bytes=47119&recv_bytes=3990&delivery_rate=1118120&cwnd=48000&unsent_bytes=0&cid=39e764801c3481b6&ts=272&x=1", cfExtPri, cfHdrFlush;dur=3
|
|
| 6.adsco.re:2087/ | 104.17.166.186 | 200 OK | 45 B |
IP104.17.166.186:0
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re:2087
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://guardoserie.bond
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 08 Dec 2024 21:44:07 GMT
content-type: text/plain;charset=UTF-8
content-length: 45
access-control-allow-origin: https://guardoserie.bond
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef55dc535687-OSL
alt-svc: h3=":2087"; ma=86400
X-Firefox-Spdy: h2
|
|
| image.tmdb.org/t/p/w185/mnjvHqQ2jt6rNAJsDXvdgkidHTT.jpg | 89.187.169.47 | 200 OK | 11 kB |
URL image.tmdb.org/t/p/w185/mnjvHqQ2jt6rNAJsDXvdgkidHTT.jpg IP89.187.169.47:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 185x278, components 3 Hash45cf9351c63f70038d761b6296921c4d 020e71d589fef6b233fd9860e2af480d21b0b874 d00cc4dcda03bddb86e8ead9c24bd0e3004d7525d3018542299412adc4e74edb
GET /t/p/w185/mnjvHqQ2jt6rNAJsDXvdgkidHTT.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Dec 2024 21:44:07 GMT
content-type: image/jpeg
content-length: 11138
server: BunnyCDN-DE1-756
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "6272c90e-2b82"
last-modified: Wed, 04 May 2022 18:42:22 GMT
cdn-storageserver: NY-266
cdn-requestpullsuccess: True
cdn-fileserver: 266
perma-cache: HIT
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-cachedat: 09/12/2023 20:44:59
cdn-edgestorageid: 1076
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 247668f568347cbc8986457a0b18b61f
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| image.tmdb.org/t/p/w185/k906XXqqFMT93v2WMkIOtUcEAlV.jpg | 89.187.169.47 | 200 OK | 10 kB |
URL image.tmdb.org/t/p/w185/k906XXqqFMT93v2WMkIOtUcEAlV.jpg IP89.187.169.47:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 185x278, components 3 Hash16982c609e714a44eed9e11bf02b4f6c 4a099b64c9122d0b4731c7249744a320bdf26bcf 85e3e11a95b8c03ee39893568c582789a6de64ea3cf8d305a2008ce8ce1d35a6
GET /t/p/w185/k906XXqqFMT93v2WMkIOtUcEAlV.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Dec 2024 21:44:07 GMT
content-type: image/jpeg
content-length: 10166
server: BunnyCDN-DE1-756
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "6272be58-27b6"
last-modified: Wed, 04 May 2022 17:56:40 GMT
cdn-storageserver: NY-268
cdn-requestpullsuccess: True
cdn-fileserver: 341
perma-cache: HIT
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-cachedat: 03/25/2024 22:49:39
cdn-edgestorageid: 1076
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 3e15d700dd8442e4b9db0744dd5ce592
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| image.tmdb.org/t/p/w185/1GY2OOMAW9bzxslhiciyc38LgTf.jpg | 89.187.169.47 | 200 OK | 18 kB |
URL image.tmdb.org/t/p/w185/1GY2OOMAW9bzxslhiciyc38LgTf.jpg IP89.187.169.47:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 185x316, components 3 Hash45ac849b50487e7ef59ab14654671162 3e36934b131be82c6601b6d6aa555ab9bf3d1604 b19de8f341ded8f8d0f32380d873509fe899782fb21be97d0bbb788c822e4de8
GET /t/p/w185/1GY2OOMAW9bzxslhiciyc38LgTf.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Dec 2024 21:44:07 GMT
content-type: image/jpeg
content-length: 17972
server: BunnyCDN-DE1-756
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "6275716e-4634"
last-modified: Fri, 06 May 2022 19:05:18 GMT
cdn-storageserver: NY-267
cdn-requestpullsuccess: True
cdn-fileserver: 266
perma-cache: HIT
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-cachedat: 11/20/2024 11:28:33
cdn-edgestorageid: 1048
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 96211ed1d18b1af1bd90f42fe5d45e3c
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| dropload.io/tag1.js | 172.67.71.162 | 200 OK | 30 kB |
IP172.67.71.162:0
File typeJavaScript source, ASCII text, with very long lines (27985), with no line terminators Hashd0bc070a94901841c512445db0f43bc2 e8156cd545999230be1339b4a949cf778406c722 9d8880b9d1d40bd5a12481e3c59b8ba78afd809c0876432db36d98cc66cda0b8
GET /tag1.js HTTP/1.1
Host: dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:06 GMT
content-type: application/javascript
last-modified: Fri, 25 Oct 2024 14:34:50 GMT
etag: W/"6d51-6254e057cb680"
cache-control: max-age=345600
cf-cache-status: HIT
age: 2948
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xhqhPhiIYacLVy8m%2BxZ%2Bk7R9x1wFlyT97IXXoMtHFi1tudBbjD2v3g2kZVXRYAgwHV4I4L44Xc6PMNC1QiSlv0JZ%2BXhWOn6XdHC8VBSc5FKrW49%2Ffe%2FIZ3HpfAo6jw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef52cad4569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5454&min_rtt=2233&rtt_var=3271&sent=318&recv=25&lost=0&retrans=0&sent_bytes=352726&recv_bytes=5114&delivery_rate=13992684&cwnd=163200&unsent_bytes=0&cid=39e764801c3481b6&ts=288&x=1", cfExtPri, cfHdrFlush;dur=4
|
|
| image.tmdb.org/t/p/w185/bmJkzDE6s0QYBGtpA4i2JLBco0j.jpg | 89.187.169.47 | 200 OK | 9.8 kB |
URL image.tmdb.org/t/p/w185/bmJkzDE6s0QYBGtpA4i2JLBco0j.jpg IP89.187.169.47:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 185x278, components 3 Hasha589e61ca7ed09f2d2f8fbdf9915bec5 aa1cd411b36a6140583f9b98cce21489e9d84f03 6925655253ffe115be27e075d261b3e8d9ff043145726ff3fba98ef110eb1cb6
GET /t/p/w185/bmJkzDE6s0QYBGtpA4i2JLBco0j.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Dec 2024 21:44:07 GMT
content-type: image/jpeg
content-length: 9777
server: BunnyCDN-DE1-756
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "66e8a54b-2631"
last-modified: Mon, 16 Sep 2024 21:38:19 GMT
cdn-storageserver: NY-267
cdn-requestpullsuccess: True
cdn-fileserver: 353
perma-cache: HIT
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-cachedat: 10/05/2024 09:20:59
cdn-edgestorageid: 1053
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 43f521899a4af939a0fe0164e0c552d0
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| d5hpqokschux.l4.adsco.re/ |  185.200.118.62 | 200 OK | 0 B |
URL d5hpqokschux.l4.adsco.re/ IP185.200.118.62:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: d5hpqokschux.l4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://guardoserie.bond
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 08 Dec 2024 21:44:07 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 02 Jun 2023 14:03:32 GMT
etag: "6479f6b4-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| dropload.io/tag2.js | 172.67.71.162 | 200 OK | 13 kB |
IP172.67.71.162:0
File typeJavaScript source, ASCII text, with very long lines (27986), with no line terminators Hashb65a4d30c2dbb72c5be556bb14bc7697 967d2f76f647f6e65e9a09d7d900b684915a2d3c fd6647f7f1746b74ee1db429fa3d26ed54ecaabd26be8c4a276060b43f191874
GET /tag2.js HTTP/1.1
Host: dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:06 GMT
content-type: application/javascript
last-modified: Fri, 25 Oct 2024 14:35:32 GMT
etag: W/"6d52-6254e07fd9500"
cache-control: max-age=345600
cf-cache-status: HIT
age: 2948
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I%2Bf3%2BboR7dTTdICwGCB4mr8%2FgaoTuxrduqk3qaAO4HE8bAen5Wk2SXr4aNyq9%2FUOJ%2F3aKuz13zCOJWEkg%2BtUiVkYGZGTOaeN9qdDIgk%2BLVQ96SVigycSTdt7TG620Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef52bac5569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5840&min_rtt=2233&rtt_var=4778&sent=181&recv=23&lost=0&retrans=0&sent_bytes=189526&recv_bytes=5023&delivery_rate=14911046&cwnd=96000&unsent_bytes=0&cid=39e764801c3481b6&ts=283&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 6.adsco.re/ | 104.17.166.186 | 200 OK | 45 B |
IP104.17.166.186:0
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:07 GMT
content-type: text/plain;charset=UTF-8
content-length: 45
access-control-allow-origin: *
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef571f7ab518-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| adsco.re/p | 162.252.214.5 | 200 OK | 878 B |
IP162.252.214.5:0
File typeASCII text, with very long lines (1106), with no line terminators Hash762b1558dd89084989b8e3795e5121f9 3f4dad82a573705a6dd4f4f0f98f6796982313b3 bc783d580b0c7ea880f0b04b39106c0d5e4b9c3674ef4897aa1de0ea3960b24f
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 1618
Origin: https://guardoserie.bond
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 08 Dec 2024 21:44:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Access-Control-Allow-Origin: https://guardoserie.bond
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
|
|
| dropload.io/cdn-cgi/challenge-platform/scripts/jsd/main.js | 172.67.71.162 | 302 Found | 0 B |
URL dropload.io/cdn-cgi/challenge-platform/scripts/jsd/main.js IP172.67.71.162:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=zMd9BC8RUukQNzWSrnmPoMdBoOp14H3vCxaDcbowEds-1733694247-1.2.1.1-yElHfzV8Ykssl0F2GnI8eDhwhyjL7Gu_Ks7nw675Jnzgi6aDdgSy8OgQz1tu6Y.E2bW0inKxD5FbKrgYsD22A0ygDifTt5FhSqvXsMEHTzLh5uYzH2E4JaxxcRM.DTFCJ5FWIMGPBqgHRhJFKWVrxi9dtB_HcQHvpVF4Km96ZvFwJbXvghVvjtiaOvoo21DeF7MMvLKMn4QIcQFemJou3d3q6igRHSmxSOrL483oKHAU4AOCOUT3yhkzi9cN4oB732bgSNhIJXCfV3eMDTVRUFW3_ZI.Ats4IJjKBtF2hakdx8S5j8L4lFS0VbtYURYKj07XdKdNnh5ZRC3OtGj33Q
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Sun, 08 Dec 2024 21:44:07 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/f9063374b04d/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jugyZTXLfv63JA5N%2BTlnR%2Bud7YBXnpbPGMg3myUlzqnyLynZQ4WPsJZNS%2BygOU6oM3KR0HUr%2FXwjHYi9meXu13BBz0aIfe90xgGChURb7ynEc3B4ujLN3C%2Binn2C5A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef57e96f569d-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4716&min_rtt=2197&rtt_var=3184&sent=413&recv=48&lost=0&retrans=0&sent_bytes=448083&recv_bytes=21936&delivery_rate=33311&cwnd=326400&unsent_bytes=0&cid=39e764801c3481b6&ts=1105&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| dropload.io/e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b | 172.67.71.162 | 200 OK | 0 B |
URL dropload.io/e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b IP172.67.71.162:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b HTTP/1.1
Host: dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b
Cookie: cf_clearance=zMd9BC8RUukQNzWSrnmPoMdBoOp14H3vCxaDcbowEds-1733694247-1.2.1.1-yElHfzV8Ykssl0F2GnI8eDhwhyjL7Gu_Ks7nw675Jnzgi6aDdgSy8OgQz1tu6Y.E2bW0inKxD5FbKrgYsD22A0ygDifTt5FhSqvXsMEHTzLh5uYzH2E4JaxxcRM.DTFCJ5FWIMGPBqgHRhJFKWVrxi9dtB_HcQHvpVF4Km96ZvFwJbXvghVvjtiaOvoo21DeF7MMvLKMn4QIcQFemJou3d3q6igRHSmxSOrL483oKHAU4AOCOUT3yhkzi9cN4oB732bgSNhIJXCfV3eMDTVRUFW3_ZI.Ats4IJjKBtF2hakdx8S5j8L4lFS0VbtYURYKj07XdKdNnh5ZRC3OtGj33Q
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:07 GMT
content-type: text/html; charset=UTF-8
expires: Sat, 07 Dec 2024 21:44:07 GMT
set-cookie: lang=1; domain=.dropload.io; path=/; HttpOnly
cf-cache-status: BYPASS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DMYwLpbtJ%2F5dYUtZ%2BpRji7DBA2l%2B12lvQvjmmAA8XHj1Ia2Pma7QWLf8JEumd7h98NbyNV71w%2BB3hbicYaIrdoQLKqoBKy3TtzOMZLVFxZHPmMfWl85TKKrQfqfsMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef562f35569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4317&min_rtt=2197&rtt_var=2439&sent=488&recv=50&lost=0&retrans=0&sent_bytes=536607&recv_bytes=22027&delivery_rate=295896&cwnd=326400&unsent_bytes=0&cid=39e764801c3481b6&ts=1125&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| image.tmdb.org/t/p/w600_and_h900_bestv2/mTZ6UrAROMWPtcMvWMAjHx6vQz3.jpg | 89.187.169.47 | 200 OK | 63 kB |
URL image.tmdb.org/t/p/w600_and_h900_bestv2/mTZ6UrAROMWPtcMvWMAjHx6vQz3.jpg IP89.187.169.47:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x900, components 3 Hash7223462feca32ebc17a66c95f95387a2 a9a416f9e7aa1c6fefe71dfbd0a690ac000843fe a552e9afa284db8b4c5c4493b8af576b3d373da7f24da37cdc0b14cce746b603
GET /t/p/w600_and_h900_bestv2/mTZ6UrAROMWPtcMvWMAjHx6vQz3.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://guardoserie.bond/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Dec 2024 21:44:07 GMT
content-type: image/jpeg
content-length: 62642
server: BunnyCDN-DE1-756
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "627b86bc-f4b2"
last-modified: Wed, 11 May 2022 09:49:48 GMT
cdn-storageserver: NY-267
cdn-requestpullsuccess: True
cdn-fileserver: 266
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/11/2022 03:48:36
cdn-edgestorageid: 1048
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 5608c59ea48a9bc3a217c0c7e58fcb7a
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| dropload.io/e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b | 172.67.71.162 | 200 OK | 0 B |
URL dropload.io/e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b IP172.67.71.162:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b HTTP/1.1
Host: dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b
Cookie: cf_clearance=zMd9BC8RUukQNzWSrnmPoMdBoOp14H3vCxaDcbowEds-1733694247-1.2.1.1-yElHfzV8Ykssl0F2GnI8eDhwhyjL7Gu_Ks7nw675Jnzgi6aDdgSy8OgQz1tu6Y.E2bW0inKxD5FbKrgYsD22A0ygDifTt5FhSqvXsMEHTzLh5uYzH2E4JaxxcRM.DTFCJ5FWIMGPBqgHRhJFKWVrxi9dtB_HcQHvpVF4Km96ZvFwJbXvghVvjtiaOvoo21DeF7MMvLKMn4QIcQFemJou3d3q6igRHSmxSOrL483oKHAU4AOCOUT3yhkzi9cN4oB732bgSNhIJXCfV3eMDTVRUFW3_ZI.Ats4IJjKBtF2hakdx8S5j8L4lFS0VbtYURYKj07XdKdNnh5ZRC3OtGj33Q
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:07 GMT
content-type: text/html; charset=UTF-8
expires: Sat, 07 Dec 2024 21:44:07 GMT
set-cookie: lang=1; domain=.dropload.io; path=/; HttpOnly
cf-cache-status: BYPASS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zMN3Pa1uEebGPhPNP6jOD3gOQ1fjBj8ZAUq8teg3Sq%2BSyVR3TNRxjzz%2BEMkNdcppA6fBug12wKsHQh43iYPAqzeS6fcaNqmaT5A4YL0cxd944xjUWZtAMf3d8fExDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef567f9b569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6328&min_rtt=2197&rtt_var=5128&sent=495&recv=53&lost=0&retrans=0&sent_bytes=542195&recv_bytes=22710&delivery_rate=370714&cwnd=326400&unsent_bytes=0&cid=39e764801c3481b6&ts=1236&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| dropload.io/player/jw8/p2p-media-loader-hlsjs.min.js | 172.67.71.162 | 200 OK | 48 kB |
URL dropload.io/player/jw8/p2p-media-loader-hlsjs.min.js IP172.67.71.162:0
File typeJavaScript source, ASCII text, with very long lines (34397) Hashfcc85c04d251bbfeacd76c514231fd92 f7a964c9c3657fb3d2d89200f58e992f65e63645 3916d1c4c2157dd68266521e881844f7ecab63dbd79e72aa0468c1dfc464ae6b
GET /player/jw8/p2p-media-loader-hlsjs.min.js HTTP/1.1
Host: dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:06 GMT
content-type: application/javascript
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"27e16-1c5fc537f6900"
cache-control: max-age=345600
cf-cache-status: HIT
age: 4676
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cOoLhEC4E7%2FImI6qyeqpOMa6emdQXYkbx2Abq%2FbCtZfEKyd%2BBtaJGsYLVtY7JRpx6zJEmFr2G7JAicBnWTfV8UZ%2FliPJVuk4%2BB2qK25QGfYdR1bJbkoV65kLdMcTUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef52bab4569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5840&min_rtt=2233&rtt_var=4778&sent=157&recv=23&lost=0&retrans=0&sent_bytes=160805&recv_bytes=5023&delivery_rate=14911046&cwnd=96000&unsent_bytes=0&cid=39e764801c3481b6&ts=277&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| aaknvsnhpci.com/ | 139.45.197.152 | 200 OK | 0 B |
IP139.45.197.152:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: aaknvsnhpci.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: HEAD
Access-Control-Request-Headers: content-type
Referer: https://dropload.io/
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 08 Dec 2024 21:44:07 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://dropload.io
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| aaknvsnhpci.com/ | 139.45.197.152 | 200 OK | 0 B |
IP139.45.197.152:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD / HTTP/1.1
Host: aaknvsnhpci.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Content-Type: text/html
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 08 Dec 2024 21:44:07 GMT
content-type: text/html
x-t12r34a96c71e87-72i64d21: a68b70e912505a4d67a61d4489558f1a
vary: Accept-Encoding, Origin
access-control-allow-origin: https://dropload.io
access-control-expose-headers: Link, X-Application-Token, X-Application-Key, X-Tag, X-Auth-Token, X-DirectionPartner-Id, X-ZoneType-Id, X-Hostname
access-control-allow-credentials: true
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
timing-allow-origin: *
x-application-key: 5hrhv5oid9bysv7S4ltIg5x3833lnb4
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
|
|
| dropload.io/cdn-cgi/challenge-platform/h/g/scripts/jsd/f9063374b04d/main.js? | 172.67.71.162 | 200 OK | 4.1 kB |
URL dropload.io/cdn-cgi/challenge-platform/h/g/scripts/jsd/f9063374b04d/main.js? IP172.67.71.162:0
File typeJavaScript source, ASCII text, with very long lines (8727), with no line terminators Hash60c35c5621820b597ba8ddd4c3fd834a 48280b769a166d54d32e0af9b13a0257dd40ce85 3bef063e004e7278ed813e0a07631766fcfcfedf4bcafadd61397fbd2ba6db95
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/f9063374b04d/main.js? HTTP/1.1
Host: dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=zMd9BC8RUukQNzWSrnmPoMdBoOp14H3vCxaDcbowEds-1733694247-1.2.1.1-yElHfzV8Ykssl0F2GnI8eDhwhyjL7Gu_Ks7nw675Jnzgi6aDdgSy8OgQz1tu6Y.E2bW0inKxD5FbKrgYsD22A0ygDifTt5FhSqvXsMEHTzLh5uYzH2E4JaxxcRM.DTFCJ5FWIMGPBqgHRhJFKWVrxi9dtB_HcQHvpVF4Km96ZvFwJbXvghVvjtiaOvoo21DeF7MMvLKMn4QIcQFemJou3d3q6igRHSmxSOrL483oKHAU4AOCOUT3yhkzi9cN4oB732bgSNhIJXCfV3eMDTVRUFW3_ZI.Ats4IJjKBtF2hakdx8S5j8L4lFS0VbtYURYKj07XdKdNnh5ZRC3OtGj33Q
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:07 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tM5A07rHmcVYxGF7PsUlzHvgF8PIPWD4f9%2Bh2Tzo1iGr5jyQAd8Z63xLLpXTOANDEKqBBhyybkkoiL1fLdv4FIuIyqWPURbIvC5ozWxSKndsEnwO7Bn8C4eJfAQJaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef585a0c569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6539&min_rtt=2197&rtt_var=6274&sent=490&recv=52&lost=0&retrans=0&sent_bytes=537362&recv_bytes=22664&delivery_rate=32946&cwnd=326400&unsent_bytes=0&cid=39e764801c3481b6&ts=1172&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| dropload.io/player/jw8/jwplayer.core.controls.js | 172.67.71.162 | 200 OK | 93 kB |
URL dropload.io/player/jw8/jwplayer.core.controls.js IP172.67.71.162:0
File typeJavaScript source, ASCII text, with very long lines (65143) Hash7c3017f104505723de9018f55489e679 af50d4232ae864a305979ef21f0f26c80f0ffc98 f30c7498f0a29adea41178791b0e8c232148145497b3bfcd90b6974ae8fbd1b9
GET /player/jw8/jwplayer.core.controls.js HTTP/1.1
Host: dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b
Cookie: cf_clearance=zMd9BC8RUukQNzWSrnmPoMdBoOp14H3vCxaDcbowEds-1733694247-1.2.1.1-yElHfzV8Ykssl0F2GnI8eDhwhyjL7Gu_Ks7nw675Jnzgi6aDdgSy8OgQz1tu6Y.E2bW0inKxD5FbKrgYsD22A0ygDifTt5FhSqvXsMEHTzLh5uYzH2E4JaxxcRM.DTFCJ5FWIMGPBqgHRhJFKWVrxi9dtB_HcQHvpVF4Km96ZvFwJbXvghVvjtiaOvoo21DeF7MMvLKMn4QIcQFemJou3d3q6igRHSmxSOrL483oKHAU4AOCOUT3yhkzi9cN4oB732bgSNhIJXCfV3eMDTVRUFW3_ZI.Ats4IJjKBtF2hakdx8S5j8L4lFS0VbtYURYKj07XdKdNnh5ZRC3OtGj33Q
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:07 GMT
content-type: application/javascript
last-modified: Thu, 08 Sep 2022 10:14:05 GMT
etag: W/"4e399-5e827b06f3540"
cache-control: max-age=345600
cf-cache-status: HIT
age: 2844
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=atuXltzbfO6msBTTSuWzgllzCevKcbyz4KSrJYSdRzeICPEDrMYKQTvkDTlWCjTRYsm2aRgSv0frJhJIkzyCbgaPDKkbVk%2BZWqJPPuK7j5qAeL61yGjr17LIVEXmHg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef57d964569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4417&min_rtt=2197&rtt_var=2987&sent=414&recv=49&lost=0&retrans=0&sent_bytes=448813&recv_bytes=21981&delivery_rate=23937&cwnd=326400&unsent_bytes=0&cid=39e764801c3481b6&ts=1109&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| c.adsco.re/ | 104.17.166.186 | 200 OK | 36 kB |
IP104.17.166.186:0
File typegzip compressed data, max speed, from Unix Hashbf8b53f1a396bd27f40656c382eaf428 439628d0d303da78d7a25870133c132be9ad1760 f5fc0110c5bb3bee4202bf0b5e889390f209f456c9533cbeba3dc1b72ce9f2d0
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:07 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Wed, 08 Jan 2025 21:44:07 GMT
etag: W/"cOaB0SIHOpvD9wT7D5aoLQ=="
content-encoding: gzip
cf-cache-status: HIT
age: 1110973
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
cf-ray: 8eefef55fd99b518-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| POST dropload.io/cdn-cgi/challenge-platform/h/g/jsd/r/8eefef4e78cb56ca | 172.67.71.162 | 200 OK | 0 B |
URL POST HTTP/3dropload.io/cdn-cgi/challenge-platform/h/g/jsd/r/8eefef4e78cb56ca IP172.67.71.162:443
Requested byhttps://dropload.io/e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b CertificateIssuerGoogle Trust Services Subjectdropload.io FingerprintFE:F3:08:0F:79:DE:D3:95:54:46:4C:7B:96:A3:C2:DD:F7:48:0F:92 ValidityThu, 17 Oct 2024 01:28:32 GMT - Wed, 15 Jan 2025 01:28:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/g/jsd/r/8eefef4e78cb56ca HTTP/1.1
Host: dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12197
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/e/buuao4viaa5b?srv13.dropload.io/i/01/00248/buuao4viaa5b
Cookie: cf_clearance=zMd9BC8RUukQNzWSrnmPoMdBoOp14H3vCxaDcbowEds-1733694247-1.2.1.1-yElHfzV8Ykssl0F2GnI8eDhwhyjL7Gu_Ks7nw675Jnzgi6aDdgSy8OgQz1tu6Y.E2bW0inKxD5FbKrgYsD22A0ygDifTt5FhSqvXsMEHTzLh5uYzH2E4JaxxcRM.DTFCJ5FWIMGPBqgHRhJFKWVrxi9dtB_HcQHvpVF4Km96ZvFwJbXvghVvjtiaOvoo21DeF7MMvLKMn4QIcQFemJou3d3q6igRHSmxSOrL483oKHAU4AOCOUT3yhkzi9cN4oB732bgSNhIJXCfV3eMDTVRUFW3_ZI.Ats4IJjKBtF2hakdx8S5j8L4lFS0VbtYURYKj07XdKdNnh5ZRC3OtGj33Q
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:08 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
priority: u=3,i=?0
set-cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.dropload.io; Priority=High; HttpOnly; Secure; SameSite=None
cf_clearance=7s4Th6cvuyZaa.hrMULQtm_LzZqW3FT2CA5Az6D5urg-1733694248-1.2.1.1-LHQFz4aPJJT_aPADoE7VzWea2EYFbjO4SJW0tL8U78y7yF6jOsLTyjH3e0IMrC4Uz75QFI7CPqoJp7kD7zWflhZoY_WcEtB9WRwPls40D4e9Xmmlr7bwQKtMsWqVWJEIn5leyciwREC1BMEGPRpJA_xlr4XI6fwlwK3Ues50tkQaTO9aLpsVCXWIHQDXNh5UG.Q.XAIVFDsBDV6U2ZBQiZA2_XqaZSunQHvsX_KTYJXwc4XrK7lrBUlr650Pniy9CXcKDHRMzT3jd2Kw8GJ7jmUPxppXUIVSObN56PAor94bB5nYXmrsF7o9cB_19nHiEftylBZiuw4ofXE8JTds0A; Path=/; Expires=Mon, 08-Dec-25 21:44:08 GMT; Domain=.dropload.io; Priority=High; HttpOnly; Secure; SameSite=None; Partitioned
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OdqTtC1E826Q5KGkJY%2BoVVfqNmnZ6SvgXEGrFgBmN3c3XtlYbAEoEf%2Fi%2BAjcoYL%2BgIyXjefyCgMoWrfBL9M%2BsUi6W32Oywdr7Jn181CtOxtwH4tPCqtkYzgNOE7vTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8eefef5c2829569d-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7550&min_rtt=2197&rtt_var=5871&sent=510&recv=66&lost=0&retrans=1&sent_bytes=551185&recv_bytes=36703&delivery_rate=29965&cwnd=326400&unsent_bytes=0&cid=39e764801c3481b6&ts=1795&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| aaknvsnhpci.com/ | 139.45.197.152 | 200 OK | 0 B |
IP139.45.197.152:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: aaknvsnhpci.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: HEAD
Access-Control-Request-Headers: content-type
Referer: https://dropload.io/
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 08 Dec 2024 21:44:08 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://dropload.io
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| aaknvsnhpci.com/ | 139.45.197.152 | 200 OK | 0 B |
IP139.45.197.152:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD / HTTP/1.1
Host: aaknvsnhpci.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Content-Type: text/html
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 08 Dec 2024 21:44:08 GMT
content-type: text/html
x-t0r56a71c57e42-58i42d84: a49dab4a01b222ec57d0171758dddabc
vary: Accept-Encoding, Origin
access-control-allow-origin: https://dropload.io
access-control-expose-headers: Link, X-Application-Token, X-Application-Key, X-Tag, X-Auth-Token, X-DirectionPartner-Id, X-ZoneType-Id, X-Hostname
access-control-allow-credentials: true
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
timing-allow-origin: *
x-application-key: yc31r3fynr4t4f3Fxg5V909n41u1xt8
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
|
|
| d5hpqokschux.s4.adsco.re/ |  185.200.116.60 | 200 OK | 0 B |
URL d5hpqokschux.s4.adsco.re/ IP185.200.116.60:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: d5hpqokschux.s4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://guardoserie.bond
DNT: 1
Connection: keep-alive
Referer: https://guardoserie.bond/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 08 Dec 2024 21:44:08 GMT
content-type: text/html
content-length: 0
last-modified: Tue, 03 Oct 2023 13:29:59 GMT
etag: "651c1757-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| my.rtmark.net/gid.js?userId=00812ca3c983488eebaecb2556f192dd | 104.21.27.183 | 200 OK | 69 B |
URL my.rtmark.net/gid.js?userId=00812ca3c983488eebaecb2556f192dd IP104.21.27.183:0
Hash9077e99d1f292fbe0e9ccae7def236e3 3d4bd43c13f4c6ed24569c40ada875fe9716ab86 9c123663f997391cfd07b1ba6cfd09432aa257505bbe8648b6ac751daf5685ca
GET /gid.js?userId=00812ca3c983488eebaecb2556f192dd HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 08 Dec 2024 21:44:08 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://dropload.io
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
timing-allow-origin: *, *
set-cookie: ID=00812ca3c983488eebaecb2556f192dd; expires=Mon, 08 Dec 2025 21:44:08 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6pZ%2FsPFB3skURn1OSM0bkdUatpygwF9FR4i0a6su9%2BUQ0CwAo5AlCuOlRpNs0WWTFRW0ciy6EeTJf5FoQ9MYutcHi8KZ8BJwuUckI4N6aNxmd5ShZ4fXICYJKCWPn6S4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8eefef5e4b5a569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=638&min_rtt=590&rtt_var=159&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3277&recv_bytes=1226&delivery_rate=6928229&cwnd=254&unsent_bytes=0&cid=9aeea90a2e2d7688&ts=73&x=0"
X-Firefox-Spdy: h2
|
|
| oaraiwephoursou.net/5/5455469 | 139.45.197.242 | 200 OK | 33 kB |
URL oaraiwephoursou.net/5/5455469 IP139.45.197.242:0
File typegzip compressed data, max speed, from Unix Hashc68d646d1418810d39f9395ca179aac5 024b55933bcae605ddcbf89038c17c02d9ad0241 7313e7b34bfc3b53105c333ada79eb524bc13640da656b3ba76721ab65297afd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /5/5455469 HTTP/1.1
Host: oaraiwephoursou.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 08 Dec 2024 21:44:08 GMT
content-type: application/javascript
x-trace-id: eeb071e9d2e30a9d00ab36f30db57e97
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=00812ca3c983488eebaecb2556f192dd; expires=Mon, 08 Dec 2025 21:44:08 GMT; path=/; secure; SameSite=None
oaidts=1733694248; expires=Mon, 08 Dec 2025 21:44:08 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| oaraiwephoursou.net/?rb=PLbRGAdkEaNugMLTEzw8iK_-_QWB48I34cWoiWtPNsCHuWGhjHxmXzUcQpSoG6ZMmmouUg87KgKCsuqYzOgsoPAWMXbSjlcQj-Zf1_iW0oTXvPl9Jufpp52xa9L_voMIHY0r6-60pB1CicRaS1Vr8LD6bQqekmPfuoHq3bTj9eu8LfwazBlsvCiD3d_JPhPACH9vD5nBTwMxVMoc9J9_FUzqMGXJN3Hj4LXLKumqNs45g0FFma5i-GcQaKYQ2CkXOnCmfqpCvXaeeynz&request_ab2=0&zoneid=5455469&js_build=iclick-v1.1021.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=500&wiw=1140&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1140&wfc=2&pl=https%3A%2F%2Fdropload.io%2Fe%2Fbuuao4viaa5b%3Fsrv13.dropload.io%2Fi%2F01%2F00248%2Fbuuao4viaa5b&drf=https%3A%2F%2Fguardoserie.bond%2F&np=1&pt=0&nb=1&ng=0&ix=1&nw=1&tb=false&btz=UTC&bto=0&tt=4&wgl=&js_build=iclick-v1.1021.0&navlng=en-US&vsbl=true&pnt=1&pnrc=0&bs=25086ab9-120e-48c2-a179-fa1566060d18&wasm=1&userId=00812ca3c983488eebaecb2556f192dd&m=link | 139.45.197.242 | 202 Accepted | 0 B |
URL oaraiwephoursou.net/?rb=PLbRGAdkEaNugMLTEzw8iK_-_QWB48I34cWoiWtPNsCHuWGhjHxmXzUcQpSoG6ZMmmouUg87KgKCsuqYzOgsoPAWMXbSjlcQj-Zf1_iW0oTXvPl9Jufpp52xa9L_voMIHY0r6-60pB1CicRaS1Vr8LD6bQqekmPfuoHq3bTj9eu8LfwazBlsvCiD3d_JPhPACH9vD5nBTwMxVMoc9J9_FUzqMGXJN3Hj4LXLKumqNs45g0FFma5i-GcQaKYQ2CkXOnCmfqpCvXaeeynz&request_ab2=0&zoneid=5455469&js_build=iclick-v1.1021.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=500&wiw=1140&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1140&wfc=2&pl=https%3A%2F%2Fdropload.io%2Fe%2Fbuuao4viaa5b%3Fsrv13.dropload.io%2Fi%2F01%2F00248%2Fbuuao4viaa5b&drf=https%3A%2F%2Fguardoserie.bond%2F&np=1&pt=0&nb=1&ng=0&ix=1&nw=1&tb=false&btz=UTC&bto=0&tt=4&wgl=&js_build=iclick-v1.1021.0&navlng=en-US&vsbl=true&pnt=1&pnrc=0&bs=25086ab9-120e-48c2-a179-fa1566060d18&wasm=1&userId=00812ca3c983488eebaecb2556f192dd&m=link IP139.45.197.242:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?rb=PLbRGAdkEaNugMLTEzw8iK_-_QWB48I34cWoiWtPNsCHuWGhjHxmXzUcQpSoG6ZMmmouUg87KgKCsuqYzOgsoPAWMXbSjlcQj-Zf1_iW0oTXvPl9Jufpp52xa9L_voMIHY0r6-60pB1CicRaS1Vr8LD6bQqekmPfuoHq3bTj9eu8LfwazBlsvCiD3d_JPhPACH9vD5nBTwMxVMoc9J9_FUzqMGXJN3Hj4LXLKumqNs45g0FFma5i-GcQaKYQ2CkXOnCmfqpCvXaeeynz&request_ab2=0&zoneid=5455469&js_build=iclick-v1.1021.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=500&wiw=1140&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1140&wfc=2&pl=https%3A%2F%2Fdropload.io%2Fe%2Fbuuao4viaa5b%3Fsrv13.dropload.io%2Fi%2F01%2F00248%2Fbuuao4viaa5b&drf=https%3A%2F%2Fguardoserie.bond%2F&np=1&pt=0&nb=1&ng=0&ix=1&nw=1&tb=false&btz=UTC&bto=0&tt=4&wgl=&js_build=iclick-v1.1021.0&navlng=en-US&vsbl=true&pnt=1&pnrc=0&bs=25086ab9-120e-48c2-a179-fa1566060d18&wasm=1&userId=00812ca3c983488eebaecb2556f192dd&m=link HTTP/1.1
Host: oaraiwephoursou.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dropload.io/
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Cookie: OAID=00812c987b174e14e2d3e2f4bfe462fb; oaidts=1733694248
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 202 Accepted
server: nginx
date: Sun, 08 Dec 2024 21:44:08 GMT
content-length: 0
x-trace-id: a2a17b318561df2e286a83217236228b
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://dropload.io
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=00812ca3c983488eebaecb2556f192dd; expires=Mon, 08 Dec 2025 21:44:08 GMT; path=/; secure; SameSite=None
oaidts=1733694248; expires=Mon, 08 Dec 2025 21:44:08 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Sun, 15 Dec 2024 21:44:08 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/master.m3u8?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 | 213.152.183.218 | 200 OK | 387 B |
URL srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/master.m3u8?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 IP213.152.183.218:0 ASN#49453 Global Layer B.V.
Hashf06ca131a14ab4708f654a85abf9d720 5c8e944006418fc6ee5671288606a3405e73df41 8d53adfe71a97d38318b1d2b75565c1942316bb5273fe7b35b45c542a1d06c38
GET /hls2/01/00248/buuao4viaa5b_h/master.m3u8?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 HTTP/1.1
Host: srv20.dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Dec 2024 21:44:08 GMT
Content-Type: application/vnd.apple.mpegurl
Last-Modified: Sun, 08 Dec 2024 21:44:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Tue, 18 Mar 2025 21:44:08 GMT
Cache-Control: max-age=8640000, public, no-transform
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|
| oaraiwephoursou.net/?rb=PbzZXxbw5vgSzPdFlc-b0JBBu1dZ9s_a6Vf8F7bNQQIoVizfqWN44flzXZ5gAtQs25QF_orVPzbDyb76h5R2ZE6_X8jmfTbBdASn8_DyiV2z7f71ctH3JV32ojeLGd5yLHsFGKoRpEsFDmuxQq7oC0jsBTp0INeKEBzWFssUuybL9bwICBpeBGrLx1VCFRXfx3mcACT84UYTrBb8nce3FnFDXwsPCAgoQjRxSm_ebf3xTQVIKKa5l08IwIYSHwppCo-8iGjJ89PsWBs5&request_ab2=0&zoneid=6023569&js_build=iclick-v1.1021.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=500&wiw=1140&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1140&wfc=2&pl=https%3A%2F%2Fdropload.io%2Fe%2Fbuuao4viaa5b%3Fsrv13.dropload.io%2Fi%2F01%2F00248%2Fbuuao4viaa5b&drf=https%3A%2F%2Fguardoserie.bond%2F&np=1&pt=0&nb=1&ng=0&ix=1&nw=1&tb=false&btz=UTC&bto=0&tt=4&wgl=&js_build=iclick-v1.1021.0&navlng=en-US&vsbl=true&pnt=1&pnrc=0&wasm=-1&bs=f1c80017-294d-4bf4-a118-1b17505bf58d&userId=00812ca3c983488eebaecb2556f192dd&m=link | 139.45.197.242 | 202 Accepted | 0 B |
URL oaraiwephoursou.net/?rb=PbzZXxbw5vgSzPdFlc-b0JBBu1dZ9s_a6Vf8F7bNQQIoVizfqWN44flzXZ5gAtQs25QF_orVPzbDyb76h5R2ZE6_X8jmfTbBdASn8_DyiV2z7f71ctH3JV32ojeLGd5yLHsFGKoRpEsFDmuxQq7oC0jsBTp0INeKEBzWFssUuybL9bwICBpeBGrLx1VCFRXfx3mcACT84UYTrBb8nce3FnFDXwsPCAgoQjRxSm_ebf3xTQVIKKa5l08IwIYSHwppCo-8iGjJ89PsWBs5&request_ab2=0&zoneid=6023569&js_build=iclick-v1.1021.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=500&wiw=1140&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1140&wfc=2&pl=https%3A%2F%2Fdropload.io%2Fe%2Fbuuao4viaa5b%3Fsrv13.dropload.io%2Fi%2F01%2F00248%2Fbuuao4viaa5b&drf=https%3A%2F%2Fguardoserie.bond%2F&np=1&pt=0&nb=1&ng=0&ix=1&nw=1&tb=false&btz=UTC&bto=0&tt=4&wgl=&js_build=iclick-v1.1021.0&navlng=en-US&vsbl=true&pnt=1&pnrc=0&wasm=-1&bs=f1c80017-294d-4bf4-a118-1b17505bf58d&userId=00812ca3c983488eebaecb2556f192dd&m=link IP139.45.197.242:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?rb=PbzZXxbw5vgSzPdFlc-b0JBBu1dZ9s_a6Vf8F7bNQQIoVizfqWN44flzXZ5gAtQs25QF_orVPzbDyb76h5R2ZE6_X8jmfTbBdASn8_DyiV2z7f71ctH3JV32ojeLGd5yLHsFGKoRpEsFDmuxQq7oC0jsBTp0INeKEBzWFssUuybL9bwICBpeBGrLx1VCFRXfx3mcACT84UYTrBb8nce3FnFDXwsPCAgoQjRxSm_ebf3xTQVIKKa5l08IwIYSHwppCo-8iGjJ89PsWBs5&request_ab2=0&zoneid=6023569&js_build=iclick-v1.1021.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=500&wiw=1140&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1140&wfc=2&pl=https%3A%2F%2Fdropload.io%2Fe%2Fbuuao4viaa5b%3Fsrv13.dropload.io%2Fi%2F01%2F00248%2Fbuuao4viaa5b&drf=https%3A%2F%2Fguardoserie.bond%2F&np=1&pt=0&nb=1&ng=0&ix=1&nw=1&tb=false&btz=UTC&bto=0&tt=4&wgl=&js_build=iclick-v1.1021.0&navlng=en-US&vsbl=true&pnt=1&pnrc=0&wasm=-1&bs=f1c80017-294d-4bf4-a118-1b17505bf58d&userId=00812ca3c983488eebaecb2556f192dd&m=link HTTP/1.1
Host: oaraiwephoursou.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dropload.io/
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Cookie: OAID=00812c987b174e14e2d3e2f4bfe462fb; oaidts=1733694248
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 202 Accepted
server: nginx
date: Sun, 08 Dec 2024 21:44:09 GMT
content-length: 0
x-trace-id: a08c134cc5415216347e7f0aed65babe
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://dropload.io
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=00812ca3c983488eebaecb2556f192dd; expires=Mon, 08 Dec 2025 21:44:08 GMT; path=/; secure; SameSite=None
oaidts=1733694248; expires=Mon, 08 Dec 2025 21:44:08 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Sun, 15 Dec 2024 21:44:08 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/index-v1-a1.m3u8?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 | 213.152.183.218 | 200 OK | 1.1 kB |
URL srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/index-v1-a1.m3u8?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 IP213.152.183.218:0 ASN#49453 Global Layer B.V.
Hash25daec439c89243020a2330ddea7584e 7f71b5b499422cfff770a97c19787aa2dbae2bd4 427c11b25c6325786ada793e44b5a9805d364bfcc4714fa079804aabd1b3520f
GET /hls2/01/00248/buuao4viaa5b_h/index-v1-a1.m3u8?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 HTTP/1.1
Host: srv20.dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Dec 2024 21:44:09 GMT
Content-Type: application/vnd.apple.mpegurl
Last-Modified: Sun, 08 Dec 2024 21:44:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Tue, 18 Mar 2025 21:44:09 GMT
Cache-Control: max-age=8640000, public, no-transform
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|
| srv07.dropload.io:8433/ | 134.19.188.182 | 101 Switching Protocols | 0 B |
IP134.19.188.182:0 ASN#49453 Global Layer B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: srv07.dropload.io:8433
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://dropload.io
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: x4r5AsLO31FEfDIFVsfGyQ==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: cf_clearance=7s4Th6cvuyZaa.hrMULQtm_LzZqW3FT2CA5Az6D5urg-1733694248-1.2.1.1-LHQFz4aPJJT_aPADoE7VzWea2EYFbjO4SJW0tL8U78y7yF6jOsLTyjH3e0IMrC4Uz75QFI7CPqoJp7kD7zWflhZoY_WcEtB9WRwPls40D4e9Xmmlr7bwQKtMsWqVWJEIn5leyciwREC1BMEGPRpJA_xlr4XI6fwlwK3Ues50tkQaTO9aLpsVCXWIHQDXNh5UG.Q.XAIVFDsBDV6U2ZBQiZA2_XqaZSunQHvsX_KTYJXwc4XrK7lrBUlr650Pniy9CXcKDHRMzT3jd2Kw8GJ7jmUPxppXUIVSObN56PAor94bB5nYXmrsF7o9cB_19nHiEftylBZiuw4ofXE8JTds0A
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Upgrade: websocket
Connection: Upgrade
Sec-WebSocket-Accept: s9crAuLXMf6G9+MJ2NR3JRr4dh4=
Sec-WebSocket-Extensions: permessage-deflate; client_no_context_takeover
uWebSockets: v0.17
|
|
| srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/index-a1.m3u8?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 | 213.152.183.218 | 200 OK | 758 B |
URL srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/index-a1.m3u8?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 IP213.152.183.218:0 ASN#49453 Global Layer B.V.
Hash129168e0a26689da69774e694d719727 5ff46493a712473d17f72e48519a045ef914f5c2 37d3777605983f1ac91ae4b3b9eec8bca49bf841cf10e7072de998e39ac86c23
GET /hls2/01/00248/buuao4viaa5b_h/index-a1.m3u8?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 HTTP/1.1
Host: srv20.dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Dec 2024 21:44:09 GMT
Content-Type: application/vnd.apple.mpegurl
Last-Modified: Sun, 08 Dec 2024 21:44:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Tue, 18 Mar 2025 21:44:09 GMT
Cache-Control: max-age=8640000, public, no-transform
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|
| srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-1-v1-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 | 213.152.183.218 | 200 OK | 936 kB |
URL srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-1-v1-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 IP213.152.183.218:0 ASN#49453 Global Layer B.V.
File typeMPEG transport stream data Size936 kB (935864 bytes) Hashf954ef2aaeb7f983f57d56baadacd069 3716d36d946210e7c46f23022b6c0d6de5f7f4ef 8450763b4787dd6330bfe89506cd175a93555c32e6c1baf3de242671abf908f6
GET /hls2/01/00248/buuao4viaa5b_h/seg-1-v1-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 HTTP/1.1
Host: srv20.dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Dec 2024 21:44:09 GMT
Content-Type: video/MP2T
Content-Length: 935864
Connection: keep-alive
Expires: Tue, 18 Mar 2025 21:44:09 GMT
ETag: "5f693e80-e47b8"
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Cache-Control: max-age=8640000, public, no-transform
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-1-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 | 213.152.183.218 | 200 OK | 172 kB |
URL srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-1-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 IP213.152.183.218:0 ASN#49453 Global Layer B.V.
File typeMPEG transport stream data Size172 kB (171832 bytes) Hashfce27a2c9e1e4d5c4235942c3c6727bd a962c716982ccaf162d1ae5753c63262900225ca 8457ab043a7c84cba8e18c904312f3c66c2ef2ffb0033ea2df93d0ad6ed76024
GET /hls2/01/00248/buuao4viaa5b_h/seg-1-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 HTTP/1.1
Host: srv20.dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Dec 2024 21:44:10 GMT
Content-Type: video/MP2T
Content-Length: 171832
Connection: keep-alive
Expires: Tue, 18 Mar 2025 21:44:10 GMT
ETag: "5f693e80-29f38"
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Cache-Control: max-age=8640000, public, no-transform
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-2-v1-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 | 213.152.183.218 | 200 OK | 539 kB |
URL srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-2-v1-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 IP213.152.183.218:0 ASN#49453 Global Layer B.V.
File typeMPEG transport stream data Size539 kB (538808 bytes) Hash779062998488e2a30768a19897f5537d 594fcaa3e751ad9023bd9d2eae11335501c0b48a 4b2f76e4d8af8cf9c5bd0b38cac125c3b9827dbde5e3066e881e5807545c6ee4
GET /hls2/01/00248/buuao4viaa5b_h/seg-2-v1-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 HTTP/1.1
Host: srv20.dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Dec 2024 21:44:10 GMT
Content-Type: video/MP2T
Content-Length: 538808
Connection: keep-alive
Expires: Tue, 18 Mar 2025 21:44:10 GMT
ETag: "5f693e80-838b8"
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Cache-Control: max-age=8640000, public, no-transform
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-1-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 | 213.152.183.218 | 200 OK | 172 kB |
URL srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-1-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 IP213.152.183.218:0 ASN#49453 Global Layer B.V.
File typeMPEG transport stream data Size172 kB (171832 bytes) Hashfce27a2c9e1e4d5c4235942c3c6727bd a962c716982ccaf162d1ae5753c63262900225ca 8457ab043a7c84cba8e18c904312f3c66c2ef2ffb0033ea2df93d0ad6ed76024
GET /hls2/01/00248/buuao4viaa5b_h/seg-1-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 HTTP/1.1
Host: srv20.dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Dec 2024 21:44:10 GMT
Content-Type: video/MP2T
Content-Length: 171832
Connection: keep-alive
Expires: Tue, 18 Mar 2025 21:44:10 GMT
ETag: "5f693e80-29f38"
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Cache-Control: max-age=8640000, public, no-transform
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/index-v1-a1.m3u8?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 | 213.152.183.218 | 200 OK | 1.1 kB |
URL srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/index-v1-a1.m3u8?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 IP213.152.183.218:0 ASN#49453 Global Layer B.V.
Hash25daec439c89243020a2330ddea7584e 7f71b5b499422cfff770a97c19787aa2dbae2bd4 427c11b25c6325786ada793e44b5a9805d364bfcc4714fa079804aabd1b3520f
GET /hls2/01/00248/buuao4viaa5b_h/index-v1-a1.m3u8?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 HTTP/1.1
Host: srv20.dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Dec 2024 21:44:12 GMT
Content-Type: application/vnd.apple.mpegurl
Last-Modified: Sun, 08 Dec 2024 21:44:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Tue, 18 Mar 2025 21:44:12 GMT
Cache-Control: max-age=8640000, public, no-transform
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|
| srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-3-v1-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 | 213.152.183.218 | 200 OK | 656 kB |
URL srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-3-v1-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 IP213.152.183.218:0 ASN#49453 Global Layer B.V.
File typeMPEG transport stream data Size656 kB (656120 bytes) Hashac9c512bdbd10199e3a38464337b5482 f8d8493d033731daccb22660a81cfd33fe397ada 15f7712a405e8baf1c3b050a6e7afd16426cb3bff14656bcaa8adf3e208df005
GET /hls2/01/00248/buuao4viaa5b_h/seg-3-v1-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 HTTP/1.1
Host: srv20.dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Dec 2024 21:44:12 GMT
Content-Type: video/MP2T
Content-Length: 656120
Connection: keep-alive
Expires: Tue, 18 Mar 2025 21:44:12 GMT
ETag: "5f693e80-a02f8"
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Cache-Control: max-age=8640000, public, no-transform
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-1-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 | 213.152.183.218 | 200 OK | 172 kB |
URL srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-1-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 IP213.152.183.218:0 ASN#49453 Global Layer B.V.
File typeMPEG transport stream data Size172 kB (171832 bytes) Hashfce27a2c9e1e4d5c4235942c3c6727bd a962c716982ccaf162d1ae5753c63262900225ca 8457ab043a7c84cba8e18c904312f3c66c2ef2ffb0033ea2df93d0ad6ed76024
GET /hls2/01/00248/buuao4viaa5b_h/seg-1-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 HTTP/1.1
Host: srv20.dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Dec 2024 21:44:13 GMT
Content-Type: video/MP2T
Content-Length: 171832
Connection: keep-alive
Expires: Tue, 18 Mar 2025 21:44:13 GMT
ETag: "5f693e80-29f38"
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Cache-Control: max-age=8640000, public, no-transform
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| oaraiwephoursou.net/5/6023569 | 139.45.197.242 | 200 OK | 44 kB |
URL oaraiwephoursou.net/5/6023569 IP139.45.197.242:0
File typegzip compressed data, max speed, from Unix Hash795a92f9a647a631a622ff74f12c8caa 59211493af501e8501d5284750c98eed24a3e28b 72331a45dfde1748a0b258df42f8fc4288e75103718d41d412f1e7d13f887f25
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /5/6023569 HTTP/1.1
Host: oaraiwephoursou.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 08 Dec 2024 21:44:08 GMT
content-type: application/javascript
x-trace-id: b98cc80da9456a1368ab45165f656d5c
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=00812c987b174e14e2d3e2f4bfe462fb; expires=Mon, 08 Dec 2025 21:44:08 GMT; path=/; secure; SameSite=None
oaidts=1733694248; expires=Mon, 08 Dec 2025 21:44:08 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-2-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 | 213.152.183.218 | 200 OK | 172 kB |
URL srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-2-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 IP213.152.183.218:0 ASN#49453 Global Layer B.V.
File typeMPEG transport stream data Size172 kB (171832 bytes) Hash7710221cade1f3335dfc0ae815ffe0bf a8a8d8e9503c7da8c144208dc7ab78121bfa9344 3addd08eb695e074307f13466f50e0f759a0944046cb033ed2d678e6de62689c
GET /hls2/01/00248/buuao4viaa5b_h/seg-2-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 HTTP/1.1
Host: srv20.dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Dec 2024 21:44:14 GMT
Content-Type: video/MP2T
Content-Length: 171832
Connection: keep-alive
Expires: Tue, 18 Mar 2025 21:44:14 GMT
ETag: "5f693e80-29f38"
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Cache-Control: max-age=8640000, public, no-transform
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-3-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 | 213.152.183.218 | 200 OK | 169 kB |
URL srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-3-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 IP213.152.183.218:0 ASN#49453 Global Layer B.V.
File typeMPEG transport stream data Size169 kB (168824 bytes) Hashd01ecd88f99510700c55005ad210cc4a c9ecd82a3e0569d868f0f71161dd2435144dee82 c7f9fedcb90ccc94532cc5c0c150c5d2d277fcd7a57c31268752ebd489f6f10d
GET /hls2/01/00248/buuao4viaa5b_h/seg-3-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 HTTP/1.1
Host: srv20.dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Dec 2024 21:44:16 GMT
Content-Type: video/MP2T
Content-Length: 168824
Connection: keep-alive
Expires: Tue, 18 Mar 2025 21:44:16 GMT
ETag: "5f693e80-29378"
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Cache-Control: max-age=8640000, public, no-transform
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-2-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 | 213.152.183.218 | 200 OK | 172 kB |
URL srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-2-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 IP213.152.183.218:0 ASN#49453 Global Layer B.V.
File typeMPEG transport stream data Size172 kB (171832 bytes) Hash7710221cade1f3335dfc0ae815ffe0bf a8a8d8e9503c7da8c144208dc7ab78121bfa9344 3addd08eb695e074307f13466f50e0f759a0944046cb033ed2d678e6de62689c
GET /hls2/01/00248/buuao4viaa5b_h/seg-2-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 HTTP/1.1
Host: srv20.dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Dec 2024 21:44:16 GMT
Content-Type: video/MP2T
Content-Length: 171832
Connection: keep-alive
Expires: Tue, 18 Mar 2025 21:44:16 GMT
ETag: "5f693e80-29f38"
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Cache-Control: max-age=8640000, public, no-transform
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/index-v1-a1.m3u8?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 | 213.152.183.218 | 200 OK | 1.1 kB |
URL srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/index-v1-a1.m3u8?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 IP213.152.183.218:0 ASN#49453 Global Layer B.V.
Hash25daec439c89243020a2330ddea7584e 7f71b5b499422cfff770a97c19787aa2dbae2bd4 427c11b25c6325786ada793e44b5a9805d364bfcc4714fa079804aabd1b3520f
GET /hls2/01/00248/buuao4viaa5b_h/index-v1-a1.m3u8?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 HTTP/1.1
Host: srv20.dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Dec 2024 21:44:18 GMT
Content-Type: application/vnd.apple.mpegurl
Last-Modified: Sun, 08 Dec 2024 21:44:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Tue, 18 Mar 2025 21:44:18 GMT
Cache-Control: max-age=8640000, public, no-transform
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|
| srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-1-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 | 213.152.183.218 | 200 OK | 172 kB |
URL srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-1-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 IP213.152.183.218:0 ASN#49453 Global Layer B.V.
File typeMPEG transport stream data Size172 kB (171832 bytes) Hashfce27a2c9e1e4d5c4235942c3c6727bd a962c716982ccaf162d1ae5753c63262900225ca 8457ab043a7c84cba8e18c904312f3c66c2ef2ffb0033ea2df93d0ad6ed76024
GET /hls2/01/00248/buuao4viaa5b_h/seg-1-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 HTTP/1.1
Host: srv20.dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Dec 2024 21:44:18 GMT
Content-Type: video/MP2T
Content-Length: 171832
Connection: keep-alive
Expires: Tue, 18 Mar 2025 21:44:18 GMT
ETag: "5f693e80-29f38"
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Cache-Control: max-age=8640000, public, no-transform
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-2-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 | 213.152.183.218 | 200 OK | 172 kB |
URL srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-2-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 IP213.152.183.218:0 ASN#49453 Global Layer B.V.
File typeMPEG transport stream data Size172 kB (171832 bytes) Hash7710221cade1f3335dfc0ae815ffe0bf a8a8d8e9503c7da8c144208dc7ab78121bfa9344 3addd08eb695e074307f13466f50e0f759a0944046cb033ed2d678e6de62689c
GET /hls2/01/00248/buuao4viaa5b_h/seg-2-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 HTTP/1.1
Host: srv20.dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Dec 2024 21:44:19 GMT
Content-Type: video/MP2T
Content-Length: 171832
Connection: keep-alive
Expires: Tue, 18 Mar 2025 21:44:19 GMT
ETag: "5f693e80-29f38"
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Cache-Control: max-age=8640000, public, no-transform
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-3-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 | 213.152.183.218 | 200 OK | 169 kB |
URL srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-3-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 IP213.152.183.218:0 ASN#49453 Global Layer B.V.
File typeMPEG transport stream data Size169 kB (168824 bytes) Hashd01ecd88f99510700c55005ad210cc4a c9ecd82a3e0569d868f0f71161dd2435144dee82 c7f9fedcb90ccc94532cc5c0c150c5d2d277fcd7a57c31268752ebd489f6f10d
GET /hls2/01/00248/buuao4viaa5b_h/seg-3-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 HTTP/1.1
Host: srv20.dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Dec 2024 21:44:19 GMT
Content-Type: video/MP2T
Content-Length: 168824
Connection: keep-alive
Expires: Tue, 18 Mar 2025 21:44:19 GMT
ETag: "5f693e80-29378"
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Cache-Control: max-age=8640000, public, no-transform
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-2-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 | 213.152.183.218 | 200 OK | 172 kB |
URL srv20.dropload.io/hls2/01/00248/buuao4viaa5b_h/seg-2-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 IP213.152.183.218:0 ASN#49453 Global Layer B.V.
File typeMPEG transport stream data Size172 kB (171832 bytes) Hash7710221cade1f3335dfc0ae815ffe0bf a8a8d8e9503c7da8c144208dc7ab78121bfa9344 3addd08eb695e074307f13466f50e0f759a0944046cb033ed2d678e6de62689c
GET /hls2/01/00248/buuao4viaa5b_h/seg-2-a1.ts?t=A-0agst8_nRONcal1txguDtRxHenf3J43-wcvTVPfAc&s=1733694246&e=14400&f=1242154&i=91.90&sp=0&ii=91.90.42.154 HTTP/1.1
Host: srv20.dropload.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dropload.io
DNT: 1
Connection: keep-alive
Referer: https://dropload.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Dec 2024 21:44:19 GMT
Content-Type: video/MP2T
Content-Length: 171832
Connection: keep-alive
Expires: Tue, 18 Mar 2025 21:44:19 GMT
ETag: "5f693e80-29f38"
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Cache-Control: max-age=8640000, public, no-transform
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| POST guardoserie.bond/wp-admin/admin-ajax.php | 104.21.87.5 | 200 OK | 37 B |
URL POST HTTP/3guardoserie.bond/wp-admin/admin-ajax.php IP104.21.87.5:443
Requested byhttps://guardoserie.bond/episodio/friends-stagione-4-episodio-14/ CertificateIssuerGoogle Trust Services Subjectguardoserie.bond Fingerprint70:DB:D1:3D:E7:38:3C:35:5B:B6:4E:1A:E1:6F:15:C1:C1:09:48:B8 ValidityWed, 04 Dec 2024 00:49:12 GMT - Tue, 04 Mar 2025 00:49:11 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash945d3f73eb26df6c8c023a4aeddc7014 f55959aa7ffa2879a8f87f993ad38553447d0364 012b7b0a6cdb697b2df8cd89e21cd2a95afa7ad56c1ed055a7a5308ed0b4bf64
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: guardoserie.bond
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://guardoserie.bond/episodio/friends-stagione-4-episodio-14/
Content-Type: application/x-www-form-urlencoded
Cache-Control: no-cache
Content-Length: 64
Origin: https://guardoserie.bond
DNT: 1
Connection: keep-alive
Cookie: _lscache_vary=c533e73c28533576bb68ff549feba287
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
HTTP/3 200 OK
date: Sun, 08 Dec 2024 21:44:06 GMT
content-type: application/json; charset=UTF-8
access-control-allow-origin: https://guardoserie.bond
access-control-allow-credentials: true
x-robots-tag: noindex
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
expires: Wed, 11 Jan 1984 05:00:00 GMT
x-litespeed-cache-control: no-cache
cache-control: no-cache, no-store, must-revalidate, max-age=0
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UoTppizESlcx%2Bw7OHb6dPP%2BZi%2ByexHHmwvCPR4sTEK0RB%2B0WeZ%2BoVn2iudOCbD61stMWFX8K7I3JXwwi2yq6qHut%2BPBZ42IbjrDNqmVnzGKyrtCcXNr98pE66ghjVhMWztmn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8eefef4e598556c9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4124&min_rtt=2012&rtt_var=1546&sent=184&recv=30&lost=0&retrans=0&sent_bytes=184708&recv_bytes=8742&delivery_rate=1545291&cwnd=96000&unsent_bytes=0&cid=b48098ae3b5280bd&ts=1036&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
0.0.0.0