| cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js |  104.17.24.14 | 200 OK | 27 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js IP104.17.24.14:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com FingerprintE6:47:BB:06:9C:32:48:7E:A6:0A:4B:62:53:7B:F0:35:5D:A9:A3:8A ValiditySat, 28 Sep 2024 05:35:05 GMT - Fri, 27 Dec 2024 05:35:04 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash2c872dbe60f4ba70fb85356113d8b35e ee48592d1fff952fcf06ce0b666ed4785493afdc fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a
GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://text.yt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 26 Oct 2024 22:45:08 GMT
content-type: application/javascript; charset=utf-8
content-length: 27446
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64ed75bb-6b36"
last-modified: Tue, 29 Aug 2023 04:36:11 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 239090
expires: Thu, 16 Oct 2025 22:45:08 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nVxC3V9BxrMIBUPWzE%2F293oUuXZM%2B3hG1h01yHkKMc5DkUzgXZw3wtn8%2BSXiSGE6NhxbyeW%2BrOHe%2FbFJcGQFiUReQtMhQZE1FMm%2FTokELYRKqwvjBl%2FwT6XMipbg%2FKiYlVVmRCtv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8d8df99a0b14b511-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.css | 104.17.24.14 | 200 OK | 10 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.css IP104.17.24.14:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com FingerprintE6:47:BB:06:9C:32:48:7E:A6:0A:4B:62:53:7B:F0:35:5D:A9:A3:8A ValiditySat, 28 Sep 2024 05:35:05 GMT - Fri, 27 Dec 2024 05:35:04 GMT
File typeASCII text, with very long lines (59158) Hash74bab4578692993514e7f882cc15c218 b6293bcfd851f963edbe859498570c4c0c7eaae4 d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386
GET /ajax/libs/font-awesome/5.15.3/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 26 Oct 2024 22:45:08 GMT
content-type: text/css; charset=utf-8
content-length: 10482
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6599bda5-28f2"
last-modified: Sat, 06 Jan 2024 21:52:53 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 73200
expires: Thu, 16 Oct 2025 22:45:08 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZT5Ik%2BlhaBHKPiB2VLjSRRHEtnfmWe0wd2IZx69uaKXrtl6flcU2CZIwJrn4%2B%2BhaNSEtVU0PaLKJ54X78aW%2BfCJQil4oy4tEViB%2BEoC8j5%2BWX4q7rjXb33sDp1VpdF8zsasX9zSc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8d8df99a1d087127-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/webfonts/fa-solid-900.woff2 | 104.17.24.14 | 200 OK | 78 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/webfonts/fa-solid-900.woff2 IP104.17.24.14:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com FingerprintE6:47:BB:06:9C:32:48:7E:A6:0A:4B:62:53:7B:F0:35:5D:A9:A3:8A ValiditySat, 28 Sep 2024 05:35:05 GMT - Fri, 27 Dec 2024 05:35:04 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 78196, version 331.-31261 Hashe8a427e15cc502bef99cfd722b37ea98 a9922842a120a7f1eaced667480c5e185a106d69 d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
GET /ajax/libs/font-awesome/5.15.3/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://text.yt
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Oct 2024 22:45:09 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 78196
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "6599bdc3-13174"
last-modified: Sat, 06 Jan 2024 21:53:23 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2528752
expires: Thu, 16 Oct 2025 22:45:09 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cu1749VBpTRu8OnzqcOfrOF7MSMfU6f%2BG2BDU6WGfd%2FhbSd9X1lI26qmUBzBTqCtka4gkrL8eNZa0TDeUhpYkzAWGLC%2FKBlS19MmJ0ygEBnyo383%2FHti9nG6pf651jZiFQbkr9Xw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8d8df99b8d09b511-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| tipsembankment.com/6165e2a40118d87a0813ead22a7dc332/invoke.js |  172.240.108.84 | 200 OK | 11 kB |
URL GET HTTP/1.1tipsembankment.com/6165e2a40118d87a0813ead22a7dc332/invoke.js IP172.240.108.84:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjecttipsembankment.com FingerprintAD:16:0F:29:9F:28:A6:46:3F:1A:22:06:6F:F8:78:C7:AA:E8:EB:B9 ValiditySat, 14 Sep 2024 01:41:23 GMT - Fri, 13 Dec 2024 01:41:22 GMT
File typeJavaScript source, ASCII text, with very long lines (24924), with no line terminators Hashc33eb021929de9b0210c01d1f5dc205f f0edede984f806f963e35a774a9297ac86062662 4b28ca95d0b38d69d06f0079da671bcb87c23436223b719df30508f6a7af04d5
GET /6165e2a40118d87a0813ead22a7dc332/invoke.js HTTP/1.1
Host: tipsembankment.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 26 Oct 2024 22:45:09 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: tipsembankment.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 4d1faa23109352096cb4f98d89a986b8
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| tipsembankment.com/d0702c0b9e86bba4c552e09e78a8dde6/invoke.js | 172.240.108.84 | 200 OK | 10 kB |
URL GET HTTP/1.1tipsembankment.com/d0702c0b9e86bba4c552e09e78a8dde6/invoke.js IP172.240.108.84:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjecttipsembankment.com FingerprintAD:16:0F:29:9F:28:A6:46:3F:1A:22:06:6F:F8:78:C7:AA:E8:EB:B9 ValiditySat, 14 Sep 2024 01:41:23 GMT - Fri, 13 Dec 2024 01:41:22 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (26901), with no line terminators Hashba5c6cbcfde58d706fe77a9d2b42ddc4 2f3f30128c4b11dd536128589c38b19d582b9acc 46836843dcb49863b707e9ba33f2ebdf09ae89678f5e75f6e8bc7232557a84c4
GET /d0702c0b9e86bba4c552e09e78a8dde6/invoke.js HTTP/1.1
Host: tipsembankment.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 26 Oct 2024 22:45:09 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: tipsembankment.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 39ebf406345f5aec96ed5fd763347739
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| text.yt/uploads/save.bz-dg1lrzn.jpg |  46.250.239.67 | 200 OK | 78 kB |
URL GET HTTP/2text.yt/uploads/save.bz-dg1lrzn.jpg IP46.250.239.67:443 ASN#141995 Contabo Asia Private Limited
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjectsave.bz Fingerprint81:6F:98:9E:6A:30:A3:BB:C7:F2:44:D1:F7:9E:97:FB:0E:67:15:C4 ValidityTue, 08 Oct 2024 03:09:03 GMT - Mon, 06 Jan 2025 03:09:02 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 667x948, components 3 Hasheb290966498fc2cde9c17bc8983bd4e9 b19c92c4f6c1207aa491a9417c2c9f06155dd8b9 dd3248f6ce2e042d4a90f5dbb724e36f293cc350d65da4ccf7b411d5f71ed701
GET /uploads/save.bz-dg1lrzn.jpg HTTP/1.1
Host: text.yt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/tag/young-paradise-register-user
Cookie: PHPSESSID=51u8rt8k20ok8drstscg2ni9io
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx-rc
date: Sat, 26 Oct 2024 22:45:08 GMT
content-type: image/jpeg
last-modified: Sun, 13 Oct 2024 02:12:08 GMT
vary: Accept-Encoding
etag: W/"670b2c78-1308c"
expires: Mon, 25 Nov 2024 22:45:08 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.cdn4ads.com/iTg/btZn/frollbar.min.js |  195.181.172.3 | 200 OK | 11 kB |
URL GET HTTP/2www.cdn4ads.com/iTg/btZn/frollbar.min.js IP195.181.172.3:443 ASN#60068 Datacamp Limited
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subject1037973644.rsc.cdn77.org Fingerprint77:D5:DD:D5:5C:34:C7:42:12:F8:A5:3B:F9:2F:16:8B:A2:9B:18:20 ValidityTue, 17 Sep 2024 14:53:49 GMT - Mon, 16 Dec 2024 14:53:48 GMT
File typegzip compressed data, from Unix Hash0ec5f46c13d50470b2e23409bf3baf44 c765cdb3d49cbe08ed37709a354ab7c54a2b11e9 b1c93f568c5bb09e05995d9adbc683e14c9b9d08ba74b056f0acb1dcb48eb92e
GET /iTg/btZn/frollbar.min.js HTTP/1.1
Host: www.cdn4ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://text.yt
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 26 Oct 2024 22:45:09 GMT
content-type: application/x-javascript
popads-node: wb5
expires: Sat, 02 Nov 2024 21:56:46 GMT
access-control-allow-origin: https://text.yt
link: <https://cdn4ads.com/>;rel=preconnect
cache-control: public, max-age=604800
x-77-nzt: EwgBw7WsAQFBDAG5TAoBAffhCAAADAGckiEfAbd2AgAA
x-77-nzt-ray: 47824138dd07fbed1a711d6730205c07
x-77-cache: HIT
x-77-age: 2273
vary: Accept-Encoding, Origin
content-encoding: gzip
server: CDN77-Turbo
x-77-pop: amsterdamNL
X-Firefox-Spdy: h2
|
|
| proftrafficcounter.com/stats |  52.28.21.126 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP52.28.21.126:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerAmazon Subjectproftrafficcounter.com Fingerprint40:FD:DA:57:15:28:B1:29:02:3E:E6:2F:38:E5:11:E5:7F:DB:6B:40 ValidityMon, 21 Oct 2024 00:00:00 GMT - Thu, 20 Nov 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash4092fae84563451b2eb54261cfe2f809 25ac5260bbea404062a8969be0056ba5a171c263 02c9eb6e31be8548023318b8366fb4c6cf0e022dd70e63d8b627422e95070cbe
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://text.yt
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 26 Oct 2024 22:45:09 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://text.yt
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=bc690129-1278-4906-a73e-3df5a9b7be1a:3:1; expires=Tue, 24 Oct 2034 22:45:09 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| c.adsco.re/ | 104.17.166.186 | 200 OK | 37 kB |
IP104.17.166.186:0
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash50f3a70feaeff7b4bf1a53c6bc86ef2d ca3514545d1da992b7f22b6e940bd06e7e28d270 dece3ccc0df8a57787d68fb97b042e3932e17d7754395880f0250af474b761ca
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 26 Oct 2024 22:45:09 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Tue, 26 Nov 2024 22:45:09 GMT
etag: W/"cOaB0SIHOpvD9wT7D5aoLQ=="
content-encoding: gzip
cf-cache-status: HIT
age: 436520
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d8df99e5a7a5687-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| text.yt/js/tooltips.js | 46.250.239.67 | 200 OK | 4.1 kB |
IP46.250.239.67:443 ASN#141995 Contabo Asia Private Limited
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjectsave.bz Fingerprint81:6F:98:9E:6A:30:A3:BB:C7:F2:44:D1:F7:9E:97:FB:0E:67:15:C4 ValidityTue, 08 Oct 2024 03:09:03 GMT - Mon, 06 Jan 2025 03:09:02 GMT
File typeASCII text, with very long lines (633), with no line terminators Hash73ad44a3c5e94c3b5ee6da78e216c294 91fa6b70361366c4d448e5b365cab0b0c229acce f76aaf530da307e1069e6734cac1c7e21f957785979ec535b00af337c2685e35
GET /js/tooltips.js HTTP/1.1
Host: text.yt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/tag/young-paradise-register-user
Cookie: PHPSESSID=51u8rt8k20ok8drstscg2ni9io
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx-rc
date: Sat, 26 Oct 2024 22:45:08 GMT
content-type: text/javascript
last-modified: Mon, 07 Oct 2024 08:40:35 GMT
vary: Accept-Encoding
etag: W/"67039e83-279"
expires: Mon, 25 Nov 2024 22:45:08 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
|
|
| text.yt/uploads/save.bz-kqv9hwh.png | 46.250.239.67 | 200 OK | 236 kB |
URL GET HTTP/2text.yt/uploads/save.bz-kqv9hwh.png IP46.250.239.67:443 ASN#141995 Contabo Asia Private Limited
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjectsave.bz Fingerprint81:6F:98:9E:6A:30:A3:BB:C7:F2:44:D1:F7:9E:97:FB:0E:67:15:C4 ValidityTue, 08 Oct 2024 03:09:03 GMT - Mon, 06 Jan 2025 03:09:02 GMT
File typePNG image data, 346 x 411, 8-bit/color RGBA, non-interlaced Size236 kB (236054 bytes) Hash6632fea0b9678bd817c8c0a4ac7c3b24 c293dc37b4d3a5a9583917a6a9c2c614f1f2eadf 092e9267a12c639cea9278b2ee7f814254363a7d744e305abdf5f74aa74cd9e6
GET /uploads/save.bz-kqv9hwh.png HTTP/1.1
Host: text.yt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/tag/young-paradise-register-user
Cookie: PHPSESSID=51u8rt8k20ok8drstscg2ni9io
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx-rc
date: Sat, 26 Oct 2024 22:45:08 GMT
content-type: image/png
last-modified: Sun, 20 Oct 2024 13:39:06 GMT
vary: Accept-Encoding
etag: W/"671507fa-36efe"
expires: Mon, 25 Nov 2024 22:45:08 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
|
|
| roughviolentlounge.com/ntv.json?key=d0702c0b9e86bba4c552e09e78a8dde6&vstc=4 | 172.240.108.76 | 200 OK | 20 kB |
URL GET HTTP/1.1roughviolentlounge.com/ntv.json?key=d0702c0b9e86bba4c552e09e78a8dde6&vstc=4 IP172.240.108.76:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjectroughviolentlounge.com Fingerprint2C:AC:A4:EC:E6:85:CB:C0:0D:E3:B5:0C:8E:14:86:19:DE:B2:5F:C1 ValiditySat, 14 Sep 2024 19:17:48 GMT - Fri, 13 Dec 2024 19:17:47 GMT
Hash662bb6e134a6230b485ffa953717207f ad698c4d6c44c0f91ece8f2a0f0d2d13cf316ff5 eac079197661de075b540638a5186fd39f0ed398c691bf07addcc8e544f0b852
GET /ntv.json?key=d0702c0b9e86bba4c552e09e78a8dde6&vstc=4 HTTP/1.1
Host: roughviolentlounge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://text.yt
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 26 Oct 2024 22:45:09 GMT
Content-Type: application/json
Content-Length: 19510
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://text.yt
Access-Control-Allow-Origin: https://text.yt
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl23057730=1; expires=Sun, 27 Oct 2024 22:45:09 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Sun, 27 Oct 2024 22:45:09 GMT; path=/; secure; SameSite=None
uncs=1; expires=Sun, 27 Oct 2024 22:45:09 GMT; path=/; secure; SameSite=None
pdhtkv49=true; expires=Sun, 27 Oct 2024 22:45:09 GMT; path=/; secure; SameSite=None
uncs49=1; expires=Sun, 27 Oct 2024 22:45:09 GMT; path=/; secure; SameSite=None
nlecd0702c0b9e86bba4c552e09e78a8dde6=[5115178]; expires=Sat, 26 Oct 2024 22:45:14 GMT; path=/; secure; SameSite=None
Host: roughviolentlounge.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 0e839d7b8e4ea628f2d376700f36ba83
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| epochheelbiography.com/watch.714566060795.js?key=6165e2a40118d87a0813ead22a7dc332&kw=%5B%22young%22%2C%22paradise%22%2C%22register%22%2C%22user%22%2C%2228%22%2C%22posts%22%2C%22-%22%2C%22text%22%2C%22yt%22%5D&refer=https%3A%2F%2Ftext.yt%2Ftag%2Fyoung-paradise-register-user&tz=0&dev=e&res=14.2071&rb=&uuid=bc690129-1278-4906-a73e-3df5a9b7be1a%3A3%3A1 | 172.240.108.68 | 307 Temporary Redirect | 0 B |
URL GET HTTP/1.1epochheelbiography.com/watch.714566060795.js?key=6165e2a40118d87a0813ead22a7dc332&kw=%5B%22young%22%2C%22paradise%22%2C%22register%22%2C%22user%22%2C%2228%22%2C%22posts%22%2C%22-%22%2C%22text%22%2C%22yt%22%5D&refer=https%3A%2F%2Ftext.yt%2Ftag%2Fyoung-paradise-register-user&tz=0&dev=e&res=14.2071&rb=&uuid=bc690129-1278-4906-a73e-3df5a9b7be1a%3A3%3A1 IP172.240.108.68:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjectepochheelbiography.com FingerprintD6:7A:2D:47:82:61:13:37:2B:51:5E:FA:D5:35:D1:81:92:B4:1A:85 ValiditySat, 12 Oct 2024 05:58:47 GMT - Fri, 10 Jan 2025 05:58:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.714566060795.js?key=6165e2a40118d87a0813ead22a7dc332&kw=%5B%22young%22%2C%22paradise%22%2C%22register%22%2C%22user%22%2C%2228%22%2C%22posts%22%2C%22-%22%2C%22text%22%2C%22yt%22%5D&refer=https%3A%2F%2Ftext.yt%2Ftag%2Fyoung-paradise-register-user&tz=0&dev=e&res=14.2071&rb=&uuid=bc690129-1278-4906-a73e-3df5a9b7be1a%3A3%3A1 HTTP/1.1
Host: epochheelbiography.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://text.yt
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Sat, 26 Oct 2024 22:45:09 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://text.yt
Access-Control-Allow-Origin: https://text.yt
Access-Control-Allow-Credentials: true
Location: https://epochheelbiography.com/watch.714566060795.js?dev=e&key=6165e2a40118d87a0813ead22a7dc332&kw=%5B%22young%22%2C%22paradise%22%2C%22register%22%2C%22user%22%2C%2228%22%2C%22posts%22%2C%22-%22%2C%22text%22%2C%22yt%22%5D&pst=1729982769&rb=&refer=https%3A%2F%2Ftext.yt%2Ftag%2Fyoung-paradise-register-user&res=14.2071&rmtc=t&shu=332fcc00b802077d943566970b11b0a16eb3a665a00fdf73b22b9886ef8996ecd2ca2ec6f9dde3806f92ec944389bb60e17fe2554472f6ff31e52d249f41123753e072d147a2fa16fddc5ba87c26de460e7e982716fec44d&tz=0&uuid=bc690129-1278-4906-a73e-3df5a9b7be1a%3A3%3A1
Set-Cookie: u_pl23057754=1; expires=Sun, 27 Oct 2024 22:45:09 GMT; path=/; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.4C8Rrsq10mK2VaWnv95uIfifXTKL-Ke7JR5QnYdq0-o; expires=Sat, 26 Oct 2024 22:46:09 GMT; path=/; secure; SameSite=None
Host: epochheelbiography.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 56b58c9194399e0b5f5c3e5478850dc3
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| text.yt/css/grid.css | 46.250.239.67 | 200 OK | 401 B |
IP46.250.239.67:443 ASN#141995 Contabo Asia Private Limited
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjectsave.bz Fingerprint81:6F:98:9E:6A:30:A3:BB:C7:F2:44:D1:F7:9E:97:FB:0E:67:15:C4 ValidityTue, 08 Oct 2024 03:09:03 GMT - Mon, 06 Jan 2025 03:09:02 GMT
Hash8c971ae9979b92d14510dd63da7758a9 2ea5dfbc5be666568681581fc8493b350049c1bc 288ebd1313ce95e7a65db1bf389d3d01a5d799dcf541f146347fad55f5b02eef
GET /css/grid.css HTTP/1.1
Host: text.yt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/tag/young-paradise-register-user
Cookie: PHPSESSID=51u8rt8k20ok8drstscg2ni9io
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx-rc
date: Sat, 26 Oct 2024 22:45:08 GMT
content-type: text/css
last-modified: Mon, 07 Oct 2024 09:33:41 GMT
vary: Accept-Encoding
etag: W/"6703aaf5-379"
expires: Mon, 25 Nov 2024 22:45:08 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
|
|
| 4.adsco.re/ | 162.252.214.5 | 200 OK | 62 B |
IP162.252.214.5:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://text.yt
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Oct 2024 22:45:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://text.yt
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
|
|
| 6.adsco.re/ | 104.17.167.186 | 200 OK | 45 B |
IP104.17.167.186:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://text.yt
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 26 Oct 2024 22:45:10 GMT
content-type: text/plain;charset=UTF-8
content-length: 45
access-control-allow-origin: https://text.yt
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d8df9a1eb4bb512-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 6.adsco.re:2087/ | 104.17.167.186 | 200 OK | 45 B |
IP104.17.167.186:2087
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re:2087
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://text.yt
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 26 Oct 2024 22:45:10 GMT
content-type: text/plain;charset=UTF-8
content-length: 45
access-control-allow-origin: https://text.yt
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d8df9a1e86b56a4-OSL
alt-svc: h3=":2087"; ma=86400
X-Firefox-Spdy: h2
|
|
| 6.adsco.re/ | 104.17.166.186 | 200 OK | 45 B |
IP104.17.166.186:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 26 Oct 2024 22:45:10 GMT
content-type: text/plain;charset=UTF-8
content-length: 45
access-control-allow-origin: *
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d8df9a27d8e56ab-OSL
alt-svc: h3=":443"; ma=86400
|
|
| roughviolentlounge.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz28bRRSebX2iQgLUGwJZ4gIIObu2s7bpoRBKUNWQ9AeI3qrZmbEzeHZnO7PrdXyKiEA9%2BsAFTpvPScOPqqI3DlChTSSEIiHFEocIkX8AThR6RGhNhOFJM%2B97872RvvnefLSdnpAGUnp86W09kkrRhcWaW33xpuddqK7IKB1Wh23%2Flt%2B8UDWDVzt%2BzX2p%2BpZgfb1Qdz3X9VyvuiyN6OrhQklCxvc6Xq3j1pr1mrfYxND8v7apA0sd8MEJeQaSTysHznlIViAKv7okbD%2FR8StvhqmiiTYY8L13o36kswjhHHaNg260d9oNbY%2BWH0JHuzO50IN%2FGwM5Jc73DxFEe6ciEQx2ZjoDBREh4OeQDQoIVUDSAkxvQfIjAjCO1TVE4d1VbTK68Q9LS3ZKKo8fQWZTUvnlPKLw%2FpKSw%2BoNrdJE6shi2M0hhwVkr0Cc7iMZnYHM9sGSDyD5j2Th8QqicGfNKg3J89nbpSwguwWUGINaB2m5pIO06yCNHYT8uMo8z2u5nFG33WGswVsi8Lnr0VbXo57rt5GyUt4YSTwGU2Mws4nYbKIvxzDpd7DrOSx3YJMpca5tYsBzZIIgswQZJcgkQZYQZIN8lytbt%2FldrmwaeKe5fpob%2BUQnvW26q5OeiAioGcPwfEfGt%2B0WWHJ2MuraKxPdtWw7PiFPl545t35aQl8cV7nbcuvMDTqi7QcBbbLFxbpwO6LVpm3OhQ8rc0h7ZmbDSE5J5%2BcOYnl08xsEdB9W7YPJp0BTDzTLQddzjKLPWJrUYhn1wXWOOKkg2XC21Ql5djav1w4eQbDDiw9%2B%2FfD5r6%2F9BmZyxCbH%2B%2FKAoKfuTK7rjOxc15klD9biRIZyRMtZ3khoIs5%2BcUVsZNrwy5fs%2BPPXWUmU8N47wiYrNOIy6lny5ZLkXJhlbZgg316274ngamrXl1ITpfHK1TeWL4exEdZKHRWgckpIcRtMTsm5v%2BLZN33B3oc0BUyaI0wPyWlA6gIs3oSN5%2FqtJjBq3hPEDrI0n5h6MD9UkkCJeU2DHPY%2FdTDHE0PL21Tm2%2FYOeqYCmmwhCnMMTI6BykHVGDZ9YpLE5vDiD5%2BU8SkCVZkEylR2AmXUxzObp2T1yZdL9Ee5%2FQ4rj6utRsOlfmfRa7WoaAXNervre5zSetOv%2Bz5tILHT3nPxn38HAAD%2F%2F221bZSKBAAA | 172.240.108.76 | 200 OK | 7 B |
URL GET HTTP/1.1roughviolentlounge.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz28bRRSebX2iQgLUGwJZ4gIIObu2s7bpoRBKUNWQ9AeI3qrZmbEzeHZnO7PrdXyKiEA9%2BsAFTpvPScOPqqI3DlChTSSEIiHFEocIkX8AThR6RGhNhOFJM%2B97872RvvnefLSdnpAGUnp86W09kkrRhcWaW33xpuddqK7IKB1Wh23%2Flt%2B8UDWDVzt%2BzX2p%2BpZgfb1Qdz3X9VyvuiyN6OrhQklCxvc6Xq3j1pr1mrfYxND8v7apA0sd8MEJeQaSTysHznlIViAKv7okbD%2FR8StvhqmiiTYY8L13o36kswjhHHaNg260d9oNbY%2BWH0JHuzO50IN%2FGwM5Jc73DxFEe6ciEQx2ZjoDBREh4OeQDQoIVUDSAkxvQfIjAjCO1TVE4d1VbTK68Q9LS3ZKKo8fQWZTUvnlPKLw%2FpKSw%2BoNrdJE6shi2M0hhwVkr0Cc7iMZnYHM9sGSDyD5j2Th8QqicGfNKg3J89nbpSwguwWUGINaB2m5pIO06yCNHYT8uMo8z2u5nFG33WGswVsi8Lnr0VbXo57rt5GyUt4YSTwGU2Mws4nYbKIvxzDpd7DrOSx3YJMpca5tYsBzZIIgswQZJcgkQZYQZIN8lytbt%2FldrmwaeKe5fpob%2BUQnvW26q5OeiAioGcPwfEfGt%2B0WWHJ2MuraKxPdtWw7PiFPl545t35aQl8cV7nbcuvMDTqi7QcBbbLFxbpwO6LVpm3OhQ8rc0h7ZmbDSE5J5%2BcOYnl08xsEdB9W7YPJp0BTDzTLQddzjKLPWJrUYhn1wXWOOKkg2XC21Ql5djav1w4eQbDDiw9%2B%2FfD5r6%2F9BmZyxCbH%2B%2FKAoKfuTK7rjOxc15klD9biRIZyRMtZ3khoIs5%2BcUVsZNrwy5fs%2BPPXWUmU8N47wiYrNOIy6lny5ZLkXJhlbZgg316274ngamrXl1ITpfHK1TeWL4exEdZKHRWgckpIcRtMTsm5v%2BLZN33B3oc0BUyaI0wPyWlA6gIs3oSN5%2FqtJjBq3hPEDrI0n5h6MD9UkkCJeU2DHPY%2FdTDHE0PL21Tm2%2FYOeqYCmmwhCnMMTI6BykHVGDZ9YpLE5vDiD5%2BU8SkCVZkEylR2AmXUxzObp2T1yZdL9Ee5%2FQ4rj6utRsOlfmfRa7WoaAXNervre5zSetOv%2Bz5tILHT3nPxn38HAAD%2F%2F221bZSKBAAA IP172.240.108.76:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjectroughviolentlounge.com Fingerprint2C:AC:A4:EC:E6:85:CB:C0:0D:E3:B5:0C:8E:14:86:19:DE:B2:5F:C1 ValiditySat, 14 Sep 2024 19:17:48 GMT - Fri, 13 Dec 2024 19:17:47 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz28bRRSebX2iQgLUGwJZ4gIIObu2s7bpoRBKUNWQ9AeI3qrZmbEzeHZnO7PrdXyKiEA9%2BsAFTpvPScOPqqI3DlChTSSEIiHFEocIkX8AThR6RGhNhOFJM%2B97872RvvnefLSdnpAGUnp86W09kkrRhcWaW33xpuddqK7IKB1Wh23%2Flt%2B8UDWDVzt%2BzX2p%2BpZgfb1Qdz3X9VyvuiyN6OrhQklCxvc6Xq3j1pr1mrfYxND8v7apA0sd8MEJeQaSTysHznlIViAKv7okbD%2FR8StvhqmiiTYY8L13o36kswjhHHaNg260d9oNbY%2BWH0JHuzO50IN%2FGwM5Jc73DxFEe6ciEQx2ZjoDBREh4OeQDQoIVUDSAkxvQfIjAjCO1TVE4d1VbTK68Q9LS3ZKKo8fQWZTUvnlPKLw%2FpKSw%2BoNrdJE6shi2M0hhwVkr0Cc7iMZnYHM9sGSDyD5j2Th8QqicGfNKg3J89nbpSwguwWUGINaB2m5pIO06yCNHYT8uMo8z2u5nFG33WGswVsi8Lnr0VbXo57rt5GyUt4YSTwGU2Mws4nYbKIvxzDpd7DrOSx3YJMpca5tYsBzZIIgswQZJcgkQZYQZIN8lytbt%2FldrmwaeKe5fpob%2BUQnvW26q5OeiAioGcPwfEfGt%2B0WWHJ2MuraKxPdtWw7PiFPl545t35aQl8cV7nbcuvMDTqi7QcBbbLFxbpwO6LVpm3OhQ8rc0h7ZmbDSE5J5%2BcOYnl08xsEdB9W7YPJp0BTDzTLQddzjKLPWJrUYhn1wXWOOKkg2XC21Ql5djav1w4eQbDDiw9%2B%2FfD5r6%2F9BmZyxCbH%2B%2FKAoKfuTK7rjOxc15klD9biRIZyRMtZ3khoIs5%2BcUVsZNrwy5fs%2BPPXWUmU8N47wiYrNOIy6lny5ZLkXJhlbZgg316274ngamrXl1ITpfHK1TeWL4exEdZKHRWgckpIcRtMTsm5v%2BLZN33B3oc0BUyaI0wPyWlA6gIs3oSN5%2FqtJjBq3hPEDrI0n5h6MD9UkkCJeU2DHPY%2FdTDHE0PL21Tm2%2FYOeqYCmmwhCnMMTI6BykHVGDZ9YpLE5vDiD5%2BU8SkCVZkEylR2AmXUxzObp2T1yZdL9Ee5%2FQ4rj6utRsOlfmfRa7WoaAXNervre5zSetOv%2Bz5tILHT3nPxn38HAAD%2F%2F221bZSKBAAA HTTP/1.1
Host: roughviolentlounge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Cookie: u_pl23057730=1; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlecd0702c0b9e86bba4c552e09e78a8dde6=[5115178]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 26 Oct 2024 22:45:10 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: roughviolentlounge.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: dfe687698bb833e56bf1a83091d89a60
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| zddsynndhxux.l4.adsco.re/ | 185.200.118.62 | 200 OK | 0 B |
URL POST HTTP/2zddsynndhxux.l4.adsco.re/ IP185.200.118.62:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subject*.l4.adsco.re FingerprintAD:A8:2F:6D:F2:4F:E7:00:E7:E2:DF:CE:0F:1E:CC:90:57:E7:57:33 ValiditySat, 19 Oct 2024 09:14:24 GMT - Fri, 17 Jan 2025 09:14:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: zddsynndhxux.l4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://text.yt
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Oct 2024 22:45:10 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 02 Jun 2023 14:03:32 GMT
etag: "6479f6b4-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| c.adsco.re/ | 104.17.166.186 | 200 OK | 30 kB |
IP104.17.166.186:0
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hashdd83b4c56c7bc3e29cd9233c3d9e3f9c 8f39f98f67026d2ab1626888d2c353f8e3bcdbfe be5a2e5b4753e00434b9cdac1a7e6f778053b6e080d6b95270f533ba950e2daf
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 26 Oct 2024 22:45:10 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Tue, 26 Nov 2024 22:45:10 GMT
etag: W/"cOaB0SIHOpvD9wT7D5aoLQ=="
content-encoding: gzip
cf-cache-status: HIT
age: 436521
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d8df9a25d7056ab-OSL
alt-svc: h3=":443"; ma=86400
|
|
| roughviolentlounge.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz28bRRSebX2iQgLUGwJZ4gIIObu2s7bpoRBKUNWQ9AeI3qrZmbEzeHZnO7PrdXyKiEA9%2BsAFTpvPScOPCuiNA1RoEwmhSEixxCFC5B%2BAE4UeEVoTYXjSzHtvvm%2Bkb743H2ynJ6SBlB5felOPpFJ0YbHmVp%2B%2F6XkXqisySofVYdu%2F5TcvVM3g5Y5fc1%2BoviFYXy%2FUXc91PderLksjunq4UIKQ8b2OV%2Bu4tWa95i02MTT%2F723qwFIHfHBCnoLk08qBcx6SFYjCry4J2090%2FNLrYapoog0GfO%2FtqB%2FpLEI4L7vGQTfaO2VD26PlB9DR7kwu9OBfYiCnxPn%2BAYJo71QkgsHOTGegICIE%2FByyQQGhCkhagOktSH5EAMaxuoYovLuqTUY3%2FkFpiU5J5dFDyGxKKr%2BcRxR%2BsaTksHpDqzSROrIYdnPIYQHZKxCn%2B0hGZyCzfbDkPUj%2BI1l4tIIo3FmzSkPyfPZ2KQvIbgElxqDWQVou6SDtOkhjByE%2FrjLP81ouZ9Rtdxhr8JYIfO56tNX1qOf6baSslDdGEo%2FB1BjMbCI2m%2BjLMUz6Hex6Dssd2GRKnGubGPAcmSDILEFGCTJJkCUE2SDf5crWbX6XK5sG3mmun%2BZGPtFJb5vu6qQnIgJqxjA835HxbbsFlpydjLr2ykR3LduOT8iTpWfOrZ%2BW0BfHVe623Dpzg45o%2B0FAm2xxsS7cjmi1aZtz4cPKHNKemdkwklPS%2BbmDWB7d%2FAYB3YdV%2B2DyCdDUA81y0PUco%2BgTlia1WEZ9cJ0jTipINpxtdUKens3rlYM%2FINjhxfu%2Fvv%2Fs19d%2BAzM5YpPjXXlA0FN3Jtd1Rnau68yS%2B2txIkM5ouUsbyQ0EWc%2FuyI2Mm345Ut2%2FOmrrATK8t5bwiYrNOIy6lny%2BZLkXJhlbZgg316274jgamrXl1ITpfHK1deWL4exEdZKHRWgckpIcRtMTsm5v%2BLZN33OfglpCpg0R5gektOA1AVYvAkbz%2FVbTWDUnBPEZ5Gl%2BcTUg%2FmhkgRKzHsa5LD%2F6YN5PTG0vE1lvm3voGcqoMkWojDHwOQYqBxUjWHTxyZJbA4v%2FvBRGR8jUJVJoExlJ1BGfVja%2FHBKVh9%2FcWZ4uf0OK4%2BrrUbDpX5n0Wu1qGgFzXq763uc0nrTr%2Fs%2BbSCx094z8Z9%2FBwAA%2F%2F81Q66%2BigQAAA%3D%3D | 172.240.108.76 | 200 OK | 7 B |
URL GET HTTP/1.1roughviolentlounge.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz28bRRSebX2iQgLUGwJZ4gIIObu2s7bpoRBKUNWQ9AeI3qrZmbEzeHZnO7PrdXyKiEA9%2BsAFTpvPScOPCuiNA1RoEwmhSEixxCFC5B%2BAE4UeEVoTYXjSzHtvvm%2Bkb743H2ynJ6SBlB5felOPpFJ0YbHmVp%2B%2F6XkXqisySofVYdu%2F5TcvVM3g5Y5fc1%2BoviFYXy%2FUXc91PderLksjunq4UIKQ8b2OV%2Bu4tWa95i02MTT%2F723qwFIHfHBCnoLk08qBcx6SFYjCry4J2090%2FNLrYapoog0GfO%2FtqB%2FpLEI4L7vGQTfaO2VD26PlB9DR7kwu9OBfYiCnxPn%2BAYJo71QkgsHOTGegICIE%2FByyQQGhCkhagOktSH5EAMaxuoYovLuqTUY3%2FkFpiU5J5dFDyGxKKr%2BcRxR%2BsaTksHpDqzSROrIYdnPIYQHZKxCn%2B0hGZyCzfbDkPUj%2BI1l4tIIo3FmzSkPyfPZ2KQvIbgElxqDWQVou6SDtOkhjByE%2FrjLP81ouZ9Rtdxhr8JYIfO56tNX1qOf6baSslDdGEo%2FB1BjMbCI2m%2BjLMUz6Hex6Dssd2GRKnGubGPAcmSDILEFGCTJJkCUE2SDf5crWbX6XK5sG3mmun%2BZGPtFJb5vu6qQnIgJqxjA835HxbbsFlpydjLr2ykR3LduOT8iTpWfOrZ%2BW0BfHVe623Dpzg45o%2B0FAm2xxsS7cjmi1aZtz4cPKHNKemdkwklPS%2BbmDWB7d%2FAYB3YdV%2B2DyCdDUA81y0PUco%2BgTlia1WEZ9cJ0jTipINpxtdUKens3rlYM%2FINjhxfu%2Fvv%2Fs19d%2BAzM5YpPjXXlA0FN3Jtd1Rnau68yS%2B2txIkM5ouUsbyQ0EWc%2FuyI2Mm345Ut2%2FOmrrATK8t5bwiYrNOIy6lny%2BZLkXJhlbZgg316274jgamrXl1ITpfHK1deWL4exEdZKHRWgckpIcRtMTsm5v%2BLZN33OfglpCpg0R5gektOA1AVYvAkbz%2FVbTWDUnBPEZ5Gl%2BcTUg%2FmhkgRKzHsa5LD%2F6YN5PTG0vE1lvm3voGcqoMkWojDHwOQYqBxUjWHTxyZJbA4v%2FvBRGR8jUJVJoExlJ1BGfVja%2FHBKVh9%2FcWZ4uf0OK4%2BrrUbDpX5n0Wu1qGgFzXq763uc0nrTr%2Fs%2BbSCx094z8Z9%2FBwAA%2F%2F81Q66%2BigQAAA%3D%3D IP172.240.108.76:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjectroughviolentlounge.com Fingerprint2C:AC:A4:EC:E6:85:CB:C0:0D:E3:B5:0C:8E:14:86:19:DE:B2:5F:C1 ValiditySat, 14 Sep 2024 19:17:48 GMT - Fri, 13 Dec 2024 19:17:47 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz28bRRSebX2iQgLUGwJZ4gIIObu2s7bpoRBKUNWQ9AeI3qrZmbEzeHZnO7PrdXyKiEA9%2BsAFTpvPScOPCuiNA1RoEwmhSEixxCFC5B%2BAE4UeEVoTYXjSzHtvvm%2Bkb743H2ynJ6SBlB5felOPpFJ0YbHmVp%2B%2F6XkXqisySofVYdu%2F5TcvVM3g5Y5fc1%2BoviFYXy%2FUXc91PderLksjunq4UIKQ8b2OV%2Bu4tWa95i02MTT%2F723qwFIHfHBCnoLk08qBcx6SFYjCry4J2090%2FNLrYapoog0GfO%2FtqB%2FpLEI4L7vGQTfaO2VD26PlB9DR7kwu9OBfYiCnxPn%2BAYJo71QkgsHOTGegICIE%2FByyQQGhCkhagOktSH5EAMaxuoYovLuqTUY3%2FkFpiU5J5dFDyGxKKr%2BcRxR%2BsaTksHpDqzSROrIYdnPIYQHZKxCn%2B0hGZyCzfbDkPUj%2BI1l4tIIo3FmzSkPyfPZ2KQvIbgElxqDWQVou6SDtOkhjByE%2FrjLP81ouZ9Rtdxhr8JYIfO56tNX1qOf6baSslDdGEo%2FB1BjMbCI2m%2BjLMUz6Hex6Dssd2GRKnGubGPAcmSDILEFGCTJJkCUE2SDf5crWbX6XK5sG3mmun%2BZGPtFJb5vu6qQnIgJqxjA835HxbbsFlpydjLr2ykR3LduOT8iTpWfOrZ%2BW0BfHVe623Dpzg45o%2B0FAm2xxsS7cjmi1aZtz4cPKHNKemdkwklPS%2BbmDWB7d%2FAYB3YdV%2B2DyCdDUA81y0PUco%2BgTlia1WEZ9cJ0jTipINpxtdUKens3rlYM%2FINjhxfu%2Fvv%2Fs19d%2BAzM5YpPjXXlA0FN3Jtd1Rnau68yS%2B2txIkM5ouUsbyQ0EWc%2FuyI2Mm345Ut2%2FOmrrATK8t5bwiYrNOIy6lny%2BZLkXJhlbZgg316274jgamrXl1ITpfHK1deWL4exEdZKHRWgckpIcRtMTsm5v%2BLZN33OfglpCpg0R5gektOA1AVYvAkbz%2FVbTWDUnBPEZ5Gl%2BcTUg%2FmhkgRKzHsa5LD%2F6YN5PTG0vE1lvm3voGcqoMkWojDHwOQYqBxUjWHTxyZJbA4v%2FvBRGR8jUJVJoExlJ1BGfVja%2FHBKVh9%2FcWZ4uf0OK4%2BrrUbDpX5n0Wu1qGgFzXq763uc0nrTr%2Fs%2BbSCx094z8Z9%2FBwAA%2F%2F81Q66%2BigQAAA%3D%3D HTTP/1.1
Host: roughviolentlounge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Cookie: u_pl23057730=1; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlecd0702c0b9e86bba4c552e09e78a8dde6=[5115178]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 26 Oct 2024 22:45:10 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: roughviolentlounge.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 66c87e363122e7904e40edd72d39559e
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| epochheelbiography.com/watch.714566060795.js?dev=e&key=6165e2a40118d87a0813ead22a7dc332&kw=%5B%22young%22%2C%22paradise%22%2C%22register%22%2C%22user%22%2C%2228%22%2C%22posts%22%2C%22-%22%2C%22text%22%2C%22yt%22%5D&pst=1729982769&rb=&refer=https%3A%2F%2Ftext.yt%2Ftag%2Fyoung-paradise-register-user&res=14.2071&rmtc=t&shu=332fcc00b802077d943566970b11b0a16eb3a665a00fdf73b22b9886ef8996ecd2ca2ec6f9dde3806f92ec944389bb60e17fe2554472f6ff31e52d249f41123753e072d147a2fa16fddc5ba87c26de460e7e982716fec44d&tz=0&uuid=bc690129-1278-4906-a73e-3df5a9b7be1a%3A3%3A1 | 172.240.108.68 | 200 OK | 2.3 kB |
URL GET HTTP/1.1epochheelbiography.com/watch.714566060795.js?dev=e&key=6165e2a40118d87a0813ead22a7dc332&kw=%5B%22young%22%2C%22paradise%22%2C%22register%22%2C%22user%22%2C%2228%22%2C%22posts%22%2C%22-%22%2C%22text%22%2C%22yt%22%5D&pst=1729982769&rb=&refer=https%3A%2F%2Ftext.yt%2Ftag%2Fyoung-paradise-register-user&res=14.2071&rmtc=t&shu=332fcc00b802077d943566970b11b0a16eb3a665a00fdf73b22b9886ef8996ecd2ca2ec6f9dde3806f92ec944389bb60e17fe2554472f6ff31e52d249f41123753e072d147a2fa16fddc5ba87c26de460e7e982716fec44d&tz=0&uuid=bc690129-1278-4906-a73e-3df5a9b7be1a%3A3%3A1 IP172.240.108.68:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjectepochheelbiography.com FingerprintD6:7A:2D:47:82:61:13:37:2B:51:5E:FA:D5:35:D1:81:92:B4:1A:85 ValiditySat, 12 Oct 2024 05:58:47 GMT - Fri, 10 Jan 2025 05:58:46 GMT
File typeJavaScript source, ASCII text, with very long lines (2941) Hash7c7ae34015fbdc09bdc54e93e568058d 3de9115f13f1f48e600908cf4492e6693bbf2d71 8b8cfbd3c9b5434eb9767d0daf6d198a918d0731e1e1fac9bbbf3a89391aa116
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.714566060795.js?dev=e&key=6165e2a40118d87a0813ead22a7dc332&kw=%5B%22young%22%2C%22paradise%22%2C%22register%22%2C%22user%22%2C%2228%22%2C%22posts%22%2C%22-%22%2C%22text%22%2C%22yt%22%5D&pst=1729982769&rb=&refer=https%3A%2F%2Ftext.yt%2Ftag%2Fyoung-paradise-register-user&res=14.2071&rmtc=t&shu=332fcc00b802077d943566970b11b0a16eb3a665a00fdf73b22b9886ef8996ecd2ca2ec6f9dde3806f92ec944389bb60e17fe2554472f6ff31e52d249f41123753e072d147a2fa16fddc5ba87c26de460e7e982716fec44d&tz=0&uuid=bc690129-1278-4906-a73e-3df5a9b7be1a%3A3%3A1 HTTP/1.1
Host: epochheelbiography.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://text.yt
Referer: https://text.yt/
DNT: 1
Connection: keep-alive
Cookie: u_pl23057754=1; ain=eyJhbGciOiJIUzI1NiJ9.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.4C8Rrsq10mK2VaWnv95uIfifXTKL-Ke7JR5QnYdq0-o
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 26 Oct 2024 22:45:10 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://text.yt
Access-Control-Allow-Origin: https://text.yt
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=bc690129-1278-4906-a73e-3df5a9b7be1a:3:1; expires=Sat, 02 Nov 2024 22:45:10 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Sun, 27 Oct 2024 22:45:10 GMT; path=/; secure; SameSite=None
uncs=1; expires=Sun, 27 Oct 2024 22:45:10 GMT; path=/; secure; SameSite=None
pdhtkv5=true; expires=Sun, 27 Oct 2024 22:45:10 GMT; path=/; secure; SameSite=None
uncs5=1; expires=Sun, 27 Oct 2024 22:45:10 GMT; path=/; secure; SameSite=None
Host: epochheelbiography.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 2715bae007632e37c8b3299ecbcd83a0
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| cdn.storageimagedisplay.com/si/9b/47/fb/9b47fb4316ad611bd932807c02c26cff/1683356991.png | 45.133.44.1 | 200 OK | 139 kB |
URL GET HTTP/2cdn.storageimagedisplay.com/si/9b/47/fb/9b47fb4316ad611bd932807c02c26cff/1683356991.png IP45.133.44.1:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjectcdn.storageimagedisplay.com Fingerprint35:34:7E:96:D3:74:A9:D9:1F:BE:9D:7C:A7:EF:B0:88:78:CB:82:36 ValidityFri, 13 Sep 2024 11:57:48 GMT - Thu, 12 Dec 2024 11:57:47 GMT
File typePNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced Size139 kB (139050 bytes) Hashb5095853b4c6e16acd9d238c51c479ff b7436311ee33f668d8a71e1300a60a4e11ff32e4 b47522a109caa660ee05c5278f3ffc9eecd1d290b4132b6388d5677f9ea372a7
GET /si/9b/47/fb/9b47fb4316ad611bd932807c02c26cff/1683356991.png HTTP/1.1
Host: cdn.storageimagedisplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 26 Oct 2024 22:45:10 GMT
content-type: image/png
content-length: 139050
server: nginx/1.21.6
last-modified: Sat, 06 May 2023 07:10:00 GMT
etag: "6455fd48-21f2a"
expires: Mon, 28 Oct 2024 22:45:10 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
x-cdn-host-id: ah0543
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn.storageimagedisplay.com/si/f5/1a/51/f51a5127fdcd4dba8257a50bc502162f/1683356981.png | 45.133.44.1 | 200 OK | 128 kB |
URL GET HTTP/2cdn.storageimagedisplay.com/si/f5/1a/51/f51a5127fdcd4dba8257a50bc502162f/1683356981.png IP45.133.44.1:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjectcdn.storageimagedisplay.com Fingerprint35:34:7E:96:D3:74:A9:D9:1F:BE:9D:7C:A7:EF:B0:88:78:CB:82:36 ValidityFri, 13 Sep 2024 11:57:48 GMT - Thu, 12 Dec 2024 11:57:47 GMT
File typePNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced Size128 kB (128338 bytes) Hash2e213fca84ea9e780c6bf1c25ec75b61 d8fc9898a7bc1031b1d4c350c0d827ce424e17d5 c4cc2ce592d14c491c0430f3a6263e489a680b75ffecf97f6fde10f96ba6a9dd
GET /si/f5/1a/51/f51a5127fdcd4dba8257a50bc502162f/1683356981.png HTTP/1.1
Host: cdn.storageimagedisplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 26 Oct 2024 22:45:10 GMT
content-type: image/png
content-length: 128338
server: nginx/1.21.6
last-modified: Sat, 06 May 2023 07:09:51 GMT
etag: "6455fd3f-1f552"
expires: Mon, 28 Oct 2024 22:45:10 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
x-cdn-host-id: ah0543
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn.storageimagedisplay.com/si/3c/a6/9a/3ca69a4ec5579fd98f5bf2c32dc4bf0c/1683357000.png | 45.133.44.1 | 200 OK | 156 kB |
URL GET HTTP/2cdn.storageimagedisplay.com/si/3c/a6/9a/3ca69a4ec5579fd98f5bf2c32dc4bf0c/1683357000.png IP45.133.44.1:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjectcdn.storageimagedisplay.com Fingerprint35:34:7E:96:D3:74:A9:D9:1F:BE:9D:7C:A7:EF:B0:88:78:CB:82:36 ValidityFri, 13 Sep 2024 11:57:48 GMT - Thu, 12 Dec 2024 11:57:47 GMT
File typePNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced Size156 kB (155511 bytes) Hash4e4f25622c983e074eb908d4c15724bc 80f165b39dc08ebc204b390db0f7a3718b422a3d 12801ac20be4a4587a27149f756dd3123c9ba5d9555d73792a5c64df90bc4c05
GET /si/3c/a6/9a/3ca69a4ec5579fd98f5bf2c32dc4bf0c/1683357000.png HTTP/1.1
Host: cdn.storageimagedisplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 26 Oct 2024 22:45:10 GMT
content-type: image/png
content-length: 155511
server: nginx/1.21.6
last-modified: Sat, 06 May 2023 07:10:08 GMT
etag: "6455fd50-25f77"
expires: Mon, 28 Oct 2024 22:45:10 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
x-cdn-host-id: ah0543
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| roughviolentlounge.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz28bxR%2BdbX36Vl8JUG8IZIkLIOTs2s7apodCKEFVQ9IfIHqrZmfGzuDZne3MrtfxKSIC9egDFzhtnpOGHwXRGweo0CYSQpGQYolDhMg%2FACcKPSK0boThI60%2B77PvjfTmfeaD7fSENJDS40tv6pFUii4s1tzq8zc970J1RUbpsDps%2B7f85oWqGbzc8WvuC9U3BOvrhbrrua7netVlaURXDxdKEjK%2B1%2FFqHbfWrNe8xSaG5r%2BzTR1Y6oAPTshTkHxaOXDOQ7ICUfjVJWH7iY5fej1MFU20wYDvvR31I51FCOewaxx0o71TNbQ9Wn4AHe3O7EIP%2FhEGckqc7x8giPZOTSIY7Mx8BgoiQsDPIRsUEKqApAWY3oLkRwRgHKtriMK7q9pkdOMxS0t2SiqPHkJmU1L55Tyi8MslJYfVG1qlidSRxbCbQw4LyF6BON1HMjoDme2DJe9B8h%2FJwqMVROHOmlUakuezu0tZQHYLKDEGtQ7S8pMO0q6DNHYQ8uMq8zyv5XJG3XaHsQZvicDnrkdbXY96rt9Gykp7YyTxGEyNwcwmYrOJvhzDpN%2FBruew3IFNpsS5tokBz5EJgswSZJQgkwRZQpAN8l2ubN3md7myaeCd9vppb%2BQTnfS26a5OeiIioGYMw%2FMdGd%2B2W2DJ2cmoa69MdNey7fiEPFlm5tz6aQl9cVzlbsutMzfoiLYfBLTJFhfrwu2IVpu2ORc%2BrMwh7ZlZDCM5JZ2fO4jl0c1vENB9WLUPJp8ATT3QLAddzzGKPmFpUotl1AfXOeKkgmTD2VYn5OnZvl45%2BB2CHV68%2F%2Bv7z3597TcwkyM2Od6VBwQ9dWdyXWdk57rOLLm%2FFicylCNa7vJGQhNx9rMrYiPThl%2B%2BZMefvspKooT33hI2WaERl1HPks%2BXJOfCLGvDBPn2sn1HBFdTu76UmiiNV66%2Btnw5jI2wVuqoAJVTQorbYHJKzv0Vz57pc%2FYLSFPApDnC9JCcFqQuwOJN2Hju32oCo%2BaaIK4gS%2FOJqQfzn0oSKDGfaZDD%2FmsO5nhiaHmaynzb3kHPVECTLURhjoHJMVA5qBrDpv%2BbJLE5vPjDR2V9jEBVJoEylZ1AGfVhGfPDKVn9%2F4sl%2BuNx6lYeV1uNhkv9zqLXalHRCpr1dtf3OKX1pl%2F3fdpAYqe9Z%2BI%2F%2Fw4AAP%2F%2FTLdodYoEAAA%3D | 172.240.253.132 | 200 OK | 7 B |
URL GET HTTP/1.1roughviolentlounge.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz28bxR%2BdbX36Vl8JUG8IZIkLIOTs2s7apodCKEFVQ9IfIHqrZmfGzuDZne3MrtfxKSIC9egDFzhtnpOGHwXRGweo0CYSQpGQYolDhMg%2FACcKPSK0boThI60%2B77PvjfTmfeaD7fSENJDS40tv6pFUii4s1tzq8zc970J1RUbpsDps%2B7f85oWqGbzc8WvuC9U3BOvrhbrrua7netVlaURXDxdKEjK%2B1%2FFqHbfWrNe8xSaG5r%2BzTR1Y6oAPTshTkHxaOXDOQ7ICUfjVJWH7iY5fej1MFU20wYDvvR31I51FCOewaxx0o71TNbQ9Wn4AHe3O7EIP%2FhEGckqc7x8giPZOTSIY7Mx8BgoiQsDPIRsUEKqApAWY3oLkRwRgHKtriMK7q9pkdOMxS0t2SiqPHkJmU1L55Tyi8MslJYfVG1qlidSRxbCbQw4LyF6BON1HMjoDme2DJe9B8h%2FJwqMVROHOmlUakuezu0tZQHYLKDEGtQ7S8pMO0q6DNHYQ8uMq8zyv5XJG3XaHsQZvicDnrkdbXY96rt9Gykp7YyTxGEyNwcwmYrOJvhzDpN%2FBruew3IFNpsS5tokBz5EJgswSZJQgkwRZQpAN8l2ubN3md7myaeCd9vppb%2BQTnfS26a5OeiIioGYMw%2FMdGd%2B2W2DJ2cmoa69MdNey7fiEPFlm5tz6aQl9cVzlbsutMzfoiLYfBLTJFhfrwu2IVpu2ORc%2BrMwh7ZlZDCM5JZ2fO4jl0c1vENB9WLUPJp8ATT3QLAddzzGKPmFpUotl1AfXOeKkgmTD2VYn5OnZvl45%2BB2CHV68%2F%2Bv7z3597TcwkyM2Od6VBwQ9dWdyXWdk57rOLLm%2FFicylCNa7vJGQhNx9rMrYiPThl%2B%2BZMefvspKooT33hI2WaERl1HPks%2BXJOfCLGvDBPn2sn1HBFdTu76UmiiNV66%2Btnw5jI2wVuqoAJVTQorbYHJKzv0Vz57pc%2FYLSFPApDnC9JCcFqQuwOJN2Hju32oCo%2BaaIK4gS%2FOJqQfzn0oSKDGfaZDD%2FmsO5nhiaHmaynzb3kHPVECTLURhjoHJMVA5qBrDpv%2BbJLE5vPjDR2V9jEBVJoEylZ1AGfVhGfPDKVn9%2F4sl%2BuNx6lYeV1uNhkv9zqLXalHRCpr1dtf3OKX1pl%2F3fdpAYqe9Z%2BI%2F%2Fw4AAP%2F%2FTLdodYoEAAA%3D IP172.240.253.132:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjectroughviolentlounge.com Fingerprint2C:AC:A4:EC:E6:85:CB:C0:0D:E3:B5:0C:8E:14:86:19:DE:B2:5F:C1 ValiditySat, 14 Sep 2024 19:17:48 GMT - Fri, 13 Dec 2024 19:17:47 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz28bxR%2BdbX36Vl8JUG8IZIkLIOTs2s7apodCKEFVQ9IfIHqrZmfGzuDZne3MrtfxKSIC9egDFzhtnpOGHwXRGweo0CYSQpGQYolDhMg%2FACcKPSK0boThI60%2B77PvjfTmfeaD7fSENJDS40tv6pFUii4s1tzq8zc970J1RUbpsDps%2B7f85oWqGbzc8WvuC9U3BOvrhbrrua7netVlaURXDxdKEjK%2B1%2FFqHbfWrNe8xSaG5r%2BzTR1Y6oAPTshTkHxaOXDOQ7ICUfjVJWH7iY5fej1MFU20wYDvvR31I51FCOewaxx0o71TNbQ9Wn4AHe3O7EIP%2FhEGckqc7x8giPZOTSIY7Mx8BgoiQsDPIRsUEKqApAWY3oLkRwRgHKtriMK7q9pkdOMxS0t2SiqPHkJmU1L55Tyi8MslJYfVG1qlidSRxbCbQw4LyF6BON1HMjoDme2DJe9B8h%2FJwqMVROHOmlUakuezu0tZQHYLKDEGtQ7S8pMO0q6DNHYQ8uMq8zyv5XJG3XaHsQZvicDnrkdbXY96rt9Gykp7YyTxGEyNwcwmYrOJvhzDpN%2FBruew3IFNpsS5tokBz5EJgswSZJQgkwRZQpAN8l2ubN3md7myaeCd9vppb%2BQTnfS26a5OeiIioGYMw%2FMdGd%2B2W2DJ2cmoa69MdNey7fiEPFlm5tz6aQl9cVzlbsutMzfoiLYfBLTJFhfrwu2IVpu2ORc%2BrMwh7ZlZDCM5JZ2fO4jl0c1vENB9WLUPJp8ATT3QLAddzzGKPmFpUotl1AfXOeKkgmTD2VYn5OnZvl45%2BB2CHV68%2F%2Bv7z3597TcwkyM2Od6VBwQ9dWdyXWdk57rOLLm%2FFicylCNa7vJGQhNx9rMrYiPThl%2B%2BZMefvspKooT33hI2WaERl1HPks%2BXJOfCLGvDBPn2sn1HBFdTu76UmiiNV66%2Btnw5jI2wVuqoAJVTQorbYHJKzv0Vz57pc%2FYLSFPApDnC9JCcFqQuwOJN2Hju32oCo%2BaaIK4gS%2FOJqQfzn0oSKDGfaZDD%2FmsO5nhiaHmaynzb3kHPVECTLURhjoHJMVA5qBrDpv%2BbJLE5vPjDR2V9jEBVJoEylZ1AGfVhGfPDKVn9%2F4sl%2BuNx6lYeV1uNhkv9zqLXalHRCpr1dtf3OKX1pl%2F3fdpAYqe9Z%2BI%2F%2Fw4AAP%2F%2FTLdodYoEAAA%3D HTTP/1.1
Host: roughviolentlounge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Cookie: u_pl23057730=1; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlecd0702c0b9e86bba4c552e09e78a8dde6=[5115178]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 26 Oct 2024 22:45:10 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: roughviolentlounge.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 57819ca07c512c2517d1e5f71fd7fdea
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| roughviolentlounge.com/ren.gif?sid=H4sIAAAAAAAC%2F6xTT4wbVxl%2FDouQQIg%2FqrggpClmIwrYnnm2Zzwt0TabxMHqNglJEL1Z759nXz0zb3jvjcfrA4oaVFXi4gOX5TT7ebdpIaJwhwjsiApFQoolDhYiIDhxhEIPnJCdbUIPiAsjzXvfp993%2BP353utH%2BSPUhJysLr6sJjKOSaNdd50vv%2BJ5Lzh7Ms3Hzrjj9%2F3WC44ePR%2F6dfc557JgQ9XArue6nus5XanFQI0baxBkdjf06qFbb%2BG6127BWH%2B4N3kFDKkAHz1CnwXJl1v3K8%2BAZHNIk59eFGZoVfa1S0keE6s0jPidb6XDVBUpJE%2FLga7AIL1zOg3KPOzeA5WebOiCGj0ZpHKJKu%2FeA5reOSUJdHS84UljEClQ%2FgkoRnMQ8RwkmQNTt0HyhwiAcbhyFdLkzStKF%2BTgMUrW6BJtvf8eyGKJtv7wDKTJT3ZjOXZuqDi3UqUGxoMS5HgOMppDli%2FATs6ALBbA7Gsg%2BW9R4%2F09SJPjqyZWIHm50S7lHORgDrGYAjEVyNe%2FrEA%2BqECeVSDhK4d5nhe4nBG3EzLW5IGgPnc9Egw84rl%2BB3K2pjcFm02BxVNg%2BhZk%2BhYM5RR0%2Fksw%2ByUYXgFjl6jyzVsw4iUUAkFhEBQEQSERFBZBMSpPeGywKd%2Fkscmpd3rj07tZzpSNjsiJspFIERA9Bc3LY5l9x9wGZj8ymwzMSzM1MOwoe4Q%2Bs%2Fas0v%2FdLgzFyuFu4GLm0lB0fEpJi7XbWLihCDqkw7nwwcgSpDmzsWEilyj8fQiZfPjKz4GSBZh4AUx%2BGkjuASlKIPslTNK3WG7rmUyHwFUJmd0Ce1A5ih%2Bhz2%2FyuvLJr4BgD1786HPvfvdvZ%2F8KTJeQ6RJelfcRRPEbs%2BuqQMfXVWHQz65mViZyQtZZ3rDECvSjl8RBoTTvXTTTt8%2BzNbAu794Uxu6RlMs0MujHu5JzobtKM4F%2B0TPfFvRabvZ3c53m2d61C91ekmlhjFTpHIhcoo%2FRfwGTS%2FQp%2BsfNmn719V2QegE6X%2Bl9azPzfKORmzpVYzmojw8mjdQeNDJlLCVs2GCxZMOdoTg4N8I1L8Bh2MGBGwZhq%2Bbhmtd02%2BuzE7Y8v%2BYzHLRIU9Rw2G7Vmp6gNeyFotYkhDV92vaJyyDJH%2Bz85vCwRAiBVAtg2ffeqVYvXrpx4Xrv2s3e1SvV6urrN%2FaVnThCO1xa6zBiZKqcgdIOJ1EsI%2BFQleZGaEdFjslEmoqUC8dkMo6ffada3Tt%2F%2FfKlfu%2Fl85cvVaurb3ygkvG0TpJUFPVU2MZAxsI0%2FMBrU45ZKyB80McubvU9t4%2B9vov7Tdz3cF8mJBL1VzMRvVWt9i5sCP7pvxqXCKslMw1DRqIuk2hHjERqz8knoZizVPKa5P8nP8%2FKJDq3YbPdPL%2BNu9u4%2ByGZ27i7EbqNux9I5ZQR%2FD%2Bkvl2t3uzd3Fvbt%2FPF7uLEUVlmZez8%2BbW7bdd15JMAas7jrCKpHS4iJxHaWZw8jkKsI3sWTPYAnX5gFAIdP%2B1pdgaKvJxpTB%2FsfP9zv%2FoLv%2FdriCWCWDwdIrQE8x89fVrPNMlXXwrFoIWZy2oUd3it1SKdWuhzt0Zp08c%2BpgFvezNNZHlk3oBIbwGxtyFNShjpEkZxCSSegsk%2FPrOZ3mzn4eHhD4HGWzMa661jGuv4B0v04v33Ni98Xf1jffwdjFw5QbPpEj9se0FAREBbuDPwPU4IbvnY90kTrFlGX8j%2B%2Be8AAAD%2F%2F80j9OkABwAA | 172.240.253.132 | 200 OK | 7 B |
URL GET HTTP/1.1roughviolentlounge.com/ren.gif?sid=H4sIAAAAAAAC%2F6xTT4wbVxl%2FDouQQIg%2FqrggpClmIwrYnnm2Zzwt0TabxMHqNglJEL1Z759nXz0zb3jvjcfrA4oaVFXi4gOX5TT7ebdpIaJwhwjsiApFQoolDhYiIDhxhEIPnJCdbUIPiAsjzXvfp993%2BP353utH%2BSPUhJysLr6sJjKOSaNdd50vv%2BJ5Lzh7Ms3Hzrjj9%2F3WC44ePR%2F6dfc557JgQ9XArue6nus5XanFQI0baxBkdjf06qFbb%2BG6127BWH%2B4N3kFDKkAHz1CnwXJl1v3K8%2BAZHNIk59eFGZoVfa1S0keE6s0jPidb6XDVBUpJE%2FLga7AIL1zOg3KPOzeA5WebOiCGj0ZpHKJKu%2FeA5reOSUJdHS84UljEClQ%2FgkoRnMQ8RwkmQNTt0HyhwiAcbhyFdLkzStKF%2BTgMUrW6BJtvf8eyGKJtv7wDKTJT3ZjOXZuqDi3UqUGxoMS5HgOMppDli%2FATs6ALBbA7Gsg%2BW9R4%2F09SJPjqyZWIHm50S7lHORgDrGYAjEVyNe%2FrEA%2BqECeVSDhK4d5nhe4nBG3EzLW5IGgPnc9Egw84rl%2BB3K2pjcFm02BxVNg%2BhZk%2BhYM5RR0%2Fksw%2ByUYXgFjl6jyzVsw4iUUAkFhEBQEQSERFBZBMSpPeGywKd%2Fkscmpd3rj07tZzpSNjsiJspFIERA9Bc3LY5l9x9wGZj8ymwzMSzM1MOwoe4Q%2Bs%2Fas0v%2FdLgzFyuFu4GLm0lB0fEpJi7XbWLihCDqkw7nwwcgSpDmzsWEilyj8fQiZfPjKz4GSBZh4AUx%2BGkjuASlKIPslTNK3WG7rmUyHwFUJmd0Ce1A5ih%2Bhz2%2FyuvLJr4BgD1786HPvfvdvZ%2F8KTJeQ6RJelfcRRPEbs%2BuqQMfXVWHQz65mViZyQtZZ3rDECvSjl8RBoTTvXTTTt8%2BzNbAu794Uxu6RlMs0MujHu5JzobtKM4F%2B0TPfFvRabvZ3c53m2d61C91ekmlhjFTpHIhcoo%2FRfwGTS%2FQp%2BsfNmn719V2QegE6X%2Bl9azPzfKORmzpVYzmojw8mjdQeNDJlLCVs2GCxZMOdoTg4N8I1L8Bh2MGBGwZhq%2Bbhmtd02%2BuzE7Y8v%2BYzHLRIU9Rw2G7Vmp6gNeyFotYkhDV92vaJyyDJH%2Bz85vCwRAiBVAtg2ffeqVYvXrpx4Xrv2s3e1SvV6urrN%2FaVnThCO1xa6zBiZKqcgdIOJ1EsI%2BFQleZGaEdFjslEmoqUC8dkMo6ffada3Tt%2F%2FfKlfu%2Fl85cvVaurb3ygkvG0TpJUFPVU2MZAxsI0%2FMBrU45ZKyB80McubvU9t4%2B9vov7Tdz3cF8mJBL1VzMRvVWt9i5sCP7pvxqXCKslMw1DRqIuk2hHjERqz8knoZizVPKa5P8nP8%2FKJDq3YbPdPL%2BNu9u4%2ByGZ27i7EbqNux9I5ZQR%2FD%2Bkvl2t3uzd3Fvbt%2FPF7uLEUVlmZez8%2BbW7bdd15JMAas7jrCKpHS4iJxHaWZw8jkKsI3sWTPYAnX5gFAIdP%2B1pdgaKvJxpTB%2FsfP9zv%2FoLv%2FdriCWCWDwdIrQE8x89fVrPNMlXXwrFoIWZy2oUd3it1SKdWuhzt0Zp08c%2BpgFvezNNZHlk3oBIbwGxtyFNShjpEkZxCSSegsk%2FPrOZ3mzn4eHhD4HGWzMa661jGuv4B0v04v33Ni98Xf1jffwdjFw5QbPpEj9se0FAREBbuDPwPU4IbvnY90kTrFlGX8j%2B%2Be8AAAD%2F%2F80j9OkABwAA IP172.240.253.132:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjectroughviolentlounge.com Fingerprint2C:AC:A4:EC:E6:85:CB:C0:0D:E3:B5:0C:8E:14:86:19:DE:B2:5F:C1 ValiditySat, 14 Sep 2024 19:17:48 GMT - Fri, 13 Dec 2024 19:17:47 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F6xTT4wbVxl%2FDouQQIg%2FqrggpClmIwrYnnm2Zzwt0TabxMHqNglJEL1Z759nXz0zb3jvjcfrA4oaVFXi4gOX5TT7ebdpIaJwhwjsiApFQoolDhYiIDhxhEIPnJCdbUIPiAsjzXvfp993%2BP353utH%2BSPUhJysLr6sJjKOSaNdd50vv%2BJ5Lzh7Ms3Hzrjj9%2F3WC44ePR%2F6dfc557JgQ9XArue6nus5XanFQI0baxBkdjf06qFbb%2BG6127BWH%2B4N3kFDKkAHz1CnwXJl1v3K8%2BAZHNIk59eFGZoVfa1S0keE6s0jPidb6XDVBUpJE%2FLga7AIL1zOg3KPOzeA5WebOiCGj0ZpHKJKu%2FeA5reOSUJdHS84UljEClQ%2FgkoRnMQ8RwkmQNTt0HyhwiAcbhyFdLkzStKF%2BTgMUrW6BJtvf8eyGKJtv7wDKTJT3ZjOXZuqDi3UqUGxoMS5HgOMppDli%2FATs6ALBbA7Gsg%2BW9R4%2F09SJPjqyZWIHm50S7lHORgDrGYAjEVyNe%2FrEA%2BqECeVSDhK4d5nhe4nBG3EzLW5IGgPnc9Egw84rl%2BB3K2pjcFm02BxVNg%2BhZk%2BhYM5RR0%2Fksw%2ByUYXgFjl6jyzVsw4iUUAkFhEBQEQSERFBZBMSpPeGywKd%2Fkscmpd3rj07tZzpSNjsiJspFIERA9Bc3LY5l9x9wGZj8ymwzMSzM1MOwoe4Q%2Bs%2Fas0v%2FdLgzFyuFu4GLm0lB0fEpJi7XbWLihCDqkw7nwwcgSpDmzsWEilyj8fQiZfPjKz4GSBZh4AUx%2BGkjuASlKIPslTNK3WG7rmUyHwFUJmd0Ce1A5ih%2Bhz2%2FyuvLJr4BgD1786HPvfvdvZ%2F8KTJeQ6RJelfcRRPEbs%2BuqQMfXVWHQz65mViZyQtZZ3rDECvSjl8RBoTTvXTTTt8%2BzNbAu794Uxu6RlMs0MujHu5JzobtKM4F%2B0TPfFvRabvZ3c53m2d61C91ekmlhjFTpHIhcoo%2FRfwGTS%2FQp%2BsfNmn719V2QegE6X%2Bl9azPzfKORmzpVYzmojw8mjdQeNDJlLCVs2GCxZMOdoTg4N8I1L8Bh2MGBGwZhq%2Bbhmtd02%2BuzE7Y8v%2BYzHLRIU9Rw2G7Vmp6gNeyFotYkhDV92vaJyyDJH%2Bz85vCwRAiBVAtg2ffeqVYvXrpx4Xrv2s3e1SvV6urrN%2FaVnThCO1xa6zBiZKqcgdIOJ1EsI%2BFQleZGaEdFjslEmoqUC8dkMo6ffada3Tt%2F%2FfKlfu%2Fl85cvVaurb3ygkvG0TpJUFPVU2MZAxsI0%2FMBrU45ZKyB80McubvU9t4%2B9vov7Tdz3cF8mJBL1VzMRvVWt9i5sCP7pvxqXCKslMw1DRqIuk2hHjERqz8knoZizVPKa5P8nP8%2FKJDq3YbPdPL%2BNu9u4%2ByGZ27i7EbqNux9I5ZQR%2FD%2Bkvl2t3uzd3Fvbt%2FPF7uLEUVlmZez8%2BbW7bdd15JMAas7jrCKpHS4iJxHaWZw8jkKsI3sWTPYAnX5gFAIdP%2B1pdgaKvJxpTB%2FsfP9zv%2FoLv%2FdriCWCWDwdIrQE8x89fVrPNMlXXwrFoIWZy2oUd3it1SKdWuhzt0Zp08c%2BpgFvezNNZHlk3oBIbwGxtyFNShjpEkZxCSSegsk%2FPrOZ3mzn4eHhD4HGWzMa661jGuv4B0v04v33Ni98Xf1jffwdjFw5QbPpEj9se0FAREBbuDPwPU4IbvnY90kTrFlGX8j%2B%2Be8AAAD%2F%2F80j9OkABwAA HTTP/1.1
Host: roughviolentlounge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Cookie: u_pl23057730=1; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlecd0702c0b9e86bba4c552e09e78a8dde6=[5115178]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 26 Oct 2024 22:45:10 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: roughviolentlounge.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: db8ecaa23d7b6d1d56d6fef82f5f0c99
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.storageimagedisplay.com/cti/79/07/d3/7907d3ed952513392cee300bc6f8ad4f/1627979066.png | 45.133.44.1 | 200 OK | 166 kB |
URL GET HTTP/2cdn.storageimagedisplay.com/cti/79/07/d3/7907d3ed952513392cee300bc6f8ad4f/1627979066.png IP45.133.44.1:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjectcdn.storageimagedisplay.com Fingerprint35:34:7E:96:D3:74:A9:D9:1F:BE:9D:7C:A7:EF:B0:88:78:CB:82:36 ValidityFri, 13 Sep 2024 11:57:48 GMT - Thu, 12 Dec 2024 11:57:47 GMT
File typePNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced Size166 kB (165898 bytes) Hash2e39c81ce4ae6b75e778515ee4fb89cf 103bdca2ed274a7561c28234f1f7e339af7687e5 288b3a857f9cff99b1425cfc54346aeee3af567185b0001c2acf414897d8b059
GET /cti/79/07/d3/7907d3ed952513392cee300bc6f8ad4f/1627979066.png HTTP/1.1
Host: cdn.storageimagedisplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Oct 2024 22:45:10 GMT
content-type: image/png
content-length: 165898
server: nginx/1.21.6
last-modified: Tue, 03 Aug 2021 08:24:35 GMT
etag: "6108fd43-2880a"
expires: Mon, 28 Oct 2024 22:45:10 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
x-cdn-host-id: ah0543
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| zddsynndhxux.n4.adsco.re/ | 38.132.109.126 | 200 OK | 0 B |
URL POST HTTP/2zddsynndhxux.n4.adsco.re/ IP38.132.109.126:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subject*.n4.adsco.re Fingerprint67:63:3C:A3:5B:C7:7B:23:97:50:7A:2C:54:8C:96:A1:B3:5E:BB:83 ValiditySat, 19 Oct 2024 09:14:09 GMT - Fri, 17 Jan 2025 09:14:08 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: zddsynndhxux.n4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://text.yt
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Oct 2024 22:45:10 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 16 Jun 2023 08:37:42 GMT
etag: "648c1f56-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.google.com/logo.png | 142.250.74.100 | 404 Not Found | 1.6 kB |
IP142.250.74.100:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint89:16:76:18:E5:01:7F:81:3A:FF:98:1C:88:CE:42:2D:C1:01:6B:DF ValidityMon, 07 Oct 2024 08:26:36 GMT - Mon, 30 Dec 2024 08:26:35 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hash96f0cdab9f332fe90fe3bc5bc4a2d782 bb81aaafdf53e301cf3f46e8dd88d6237e970113 05f2efaedee09f1a5f73cf44cf7e08ce67368024dc03236e2115bb3677ecb8a4
GET /logo.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 1569
date: Sat, 26 Oct 2024 22:45:10 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| adsco.re/p | 162.252.214.5 | 200 OK | 878 B |
IP162.252.214.5:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeASCII text, with very long lines (1106), with no line terminators Hashb381c5c4d80f3b8f4149b33f33aac0c3 fcaca8adc375b6d3c5bb54165baae8c8c2cb1ed8 11a574a9fc5aaa8942adaabd6c0e5bb894bd95ac648816cc09319b6dce45223b
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2245
Origin: https://text.yt
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Oct 2024 22:45:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Access-Control-Allow-Origin: https://text.yt
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
|
|
| zddsynndhxux.s4.adsco.re/ |  185.200.116.60 | 200 OK | 0 B |
URL POST HTTP/2zddsynndhxux.s4.adsco.re/ IP185.200.116.60:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subject*.s4.adsco.re Fingerprint14:B6:DB:79:F9:5C:8E:03:93:96:DC:92:DF:57:C8:B6:59:FC:39:B5 ValiditySat, 19 Oct 2024 09:14:19 GMT - Fri, 17 Jan 2025 09:14:18 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: zddsynndhxux.s4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://text.yt
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Oct 2024 22:45:11 GMT
content-type: text/html
content-length: 0
last-modified: Tue, 03 Oct 2023 13:29:59 GMT
etag: "651c1757-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn4ads.com/jfjoangpnek?QOwbvKRk=BQMyAAAAAAAACZUAAgGdUo3dWd2PfRAoy8-1M1BNMS43d4u7B8K_oKl-fJkWhZGFHCqhSfGXRJaTzn1730gJM763NDhoesAQgvY-8Js2vJs9FHSq4jnp_vSUcFiShNLkhFJ4D3-Se6tpc3prFUcRi80SHAzgQgOFadFprJNfSWIyQdRR9mQKSpRtXQPjYIOnBp2bTtYEIQoiPVJAOTEoDEaijtlz-Si-iA-hLaY8WoTnYo28wEVBvxkO9tjsxQTMQ1wdWFa5srceH7sf2EwU74a3g7bqQUISp-H1NhcME61Tp_saICeUWa7xH7RH5W_HsblBgJqjBk-Dt72dHFkKTowS0HP16PanUs5XfVgFmCQLr1MjHuexPgoUc5_WwQhMWaT7sJk1XO4KgIKDvsu0B9eHtNiWvmWvl2uArsOlW00eFyCpClraW9_ti65kN71hzhGOOYcUJk2WdvR5JE-NFILNH3rEVdJ7Ss8hapTMDnhkQVPtnj9jx6UF1Hy47xbDD8xJG3rGd54XQGiOwaCYqAerhiw86GoBAgdgPyZQ9zyq0x4aeUOxrWkYk-9yvQBopx9KwijafZQ0amnUMNvKDVRwr4U2kFkTVoOk15nqQF5GFOuMEEe2xQm0dgtZgh-9zqFqg5YRfKGMNT5SLpvcPjJWUrw4WxHKtjqj_PseVHmqaqSY5HMFiFTcqRvjPNCT5n_97cwXZhTt7zXh5SHzhGcGUtX5pK5MO7evZiTY13fmBvU6ctrUpIS0vhOh2lnt8RV6sFPOBF6L2VDv077NOBNY5hktBJN13jq8-y0tjSJL8qQGo_98w0-InxriiV_YtnV9g1I4B6xe-Q2nCCxvuBsm5qUlAH390x7yQ2A3srEnlKKzkKBI_66ISZREMZWYkc7t_Ibsbcg0YARnPDk_zhNVQEimO0zHuh6x_n63mMTB6QAGnSEsIQIVZp4IyngoZTxK_Unq8JNj9xoctwNBQBxp4VoJ7ICm2iOsQghIyH1792zZCq2PmlTrjJgdG5KIvO_xFg3KotWtj5zjyJVw8Mn-b1srCqSmbMZzLHCrk4IFB5-cJNJs9OogFbeiSzNFxHaJ6KjX8JpphXEgJg&iyvbDeXr=4&LcZJjSbN=5141408&nDuCPVrl=&XVDomxAK=0,0&aNrqobFI=&muKHMtzV=&s=1280,1024,1,1280,1024,0 | 216.59.63.128 | 200 OK | 44 B |
URL GET HTTP/2cdn4ads.com/jfjoangpnek?QOwbvKRk=BQMyAAAAAAAACZUAAgGdUo3dWd2PfRAoy8-1M1BNMS43d4u7B8K_oKl-fJkWhZGFHCqhSfGXRJaTzn1730gJM763NDhoesAQgvY-8Js2vJs9FHSq4jnp_vSUcFiShNLkhFJ4D3-Se6tpc3prFUcRi80SHAzgQgOFadFprJNfSWIyQdRR9mQKSpRtXQPjYIOnBp2bTtYEIQoiPVJAOTEoDEaijtlz-Si-iA-hLaY8WoTnYo28wEVBvxkO9tjsxQTMQ1wdWFa5srceH7sf2EwU74a3g7bqQUISp-H1NhcME61Tp_saICeUWa7xH7RH5W_HsblBgJqjBk-Dt72dHFkKTowS0HP16PanUs5XfVgFmCQLr1MjHuexPgoUc5_WwQhMWaT7sJk1XO4KgIKDvsu0B9eHtNiWvmWvl2uArsOlW00eFyCpClraW9_ti65kN71hzhGOOYcUJk2WdvR5JE-NFILNH3rEVdJ7Ss8hapTMDnhkQVPtnj9jx6UF1Hy47xbDD8xJG3rGd54XQGiOwaCYqAerhiw86GoBAgdgPyZQ9zyq0x4aeUOxrWkYk-9yvQBopx9KwijafZQ0amnUMNvKDVRwr4U2kFkTVoOk15nqQF5GFOuMEEe2xQm0dgtZgh-9zqFqg5YRfKGMNT5SLpvcPjJWUrw4WxHKtjqj_PseVHmqaqSY5HMFiFTcqRvjPNCT5n_97cwXZhTt7zXh5SHzhGcGUtX5pK5MO7evZiTY13fmBvU6ctrUpIS0vhOh2lnt8RV6sFPOBF6L2VDv077NOBNY5hktBJN13jq8-y0tjSJL8qQGo_98w0-InxriiV_YtnV9g1I4B6xe-Q2nCCxvuBsm5qUlAH390x7yQ2A3srEnlKKzkKBI_66ISZREMZWYkc7t_Ibsbcg0YARnPDk_zhNVQEimO0zHuh6x_n63mMTB6QAGnSEsIQIVZp4IyngoZTxK_Unq8JNj9xoctwNBQBxp4VoJ7ICm2iOsQghIyH1792zZCq2PmlTrjJgdG5KIvO_xFg3KotWtj5zjyJVw8Mn-b1srCqSmbMZzLHCrk4IFB5-cJNJs9OogFbeiSzNFxHaJ6KjX8JpphXEgJg&iyvbDeXr=4&LcZJjSbN=5141408&nDuCPVrl=&XVDomxAK=0,0&aNrqobFI=&muKHMtzV=&s=1280,1024,1,1280,1024,0 IP216.59.63.128:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerSectigo Limited Subjectcdn4ads.com Fingerprint57:54:B9:F2:94:39:A5:88:6C:46:58:9B:E7:F0:C7:D1:1C:32:F1:76 ValidityWed, 11 Sep 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hashd5f0a25e4d3522d56d48ce7bc3e518fb 86794caff58f7fee6e684c2ba7195f970a8d6f4c 9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /jfjoangpnek?QOwbvKRk=BQMyAAAAAAAACZUAAgGdUo3dWd2PfRAoy8-1M1BNMS43d4u7B8K_oKl-fJkWhZGFHCqhSfGXRJaTzn1730gJM763NDhoesAQgvY-8Js2vJs9FHSq4jnp_vSUcFiShNLkhFJ4D3-Se6tpc3prFUcRi80SHAzgQgOFadFprJNfSWIyQdRR9mQKSpRtXQPjYIOnBp2bTtYEIQoiPVJAOTEoDEaijtlz-Si-iA-hLaY8WoTnYo28wEVBvxkO9tjsxQTMQ1wdWFa5srceH7sf2EwU74a3g7bqQUISp-H1NhcME61Tp_saICeUWa7xH7RH5W_HsblBgJqjBk-Dt72dHFkKTowS0HP16PanUs5XfVgFmCQLr1MjHuexPgoUc5_WwQhMWaT7sJk1XO4KgIKDvsu0B9eHtNiWvmWvl2uArsOlW00eFyCpClraW9_ti65kN71hzhGOOYcUJk2WdvR5JE-NFILNH3rEVdJ7Ss8hapTMDnhkQVPtnj9jx6UF1Hy47xbDD8xJG3rGd54XQGiOwaCYqAerhiw86GoBAgdgPyZQ9zyq0x4aeUOxrWkYk-9yvQBopx9KwijafZQ0amnUMNvKDVRwr4U2kFkTVoOk15nqQF5GFOuMEEe2xQm0dgtZgh-9zqFqg5YRfKGMNT5SLpvcPjJWUrw4WxHKtjqj_PseVHmqaqSY5HMFiFTcqRvjPNCT5n_97cwXZhTt7zXh5SHzhGcGUtX5pK5MO7evZiTY13fmBvU6ctrUpIS0vhOh2lnt8RV6sFPOBF6L2VDv077NOBNY5hktBJN13jq8-y0tjSJL8qQGo_98w0-InxriiV_YtnV9g1I4B6xe-Q2nCCxvuBsm5qUlAH390x7yQ2A3srEnlKKzkKBI_66ISZREMZWYkc7t_Ibsbcg0YARnPDk_zhNVQEimO0zHuh6x_n63mMTB6QAGnSEsIQIVZp4IyngoZTxK_Unq8JNj9xoctwNBQBxp4VoJ7ICm2iOsQghIyH1792zZCq2PmlTrjJgdG5KIvO_xFg3KotWtj5zjyJVw8Mn-b1srCqSmbMZzLHCrk4IFB5-cJNJs9OogFbeiSzNFxHaJ6KjX8JpphXEgJg&iyvbDeXr=4&LcZJjSbN=5141408&nDuCPVrl=&XVDomxAK=0,0&aNrqobFI=&muKHMtzV=&s=1280,1024,1,1280,1024,0 HTTP/1.1
Host: cdn4ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
popads-node: wb5
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Sat, 26 Oct 2024 22:45:11 GMT
X-Firefox-Spdy: h2
|
|
| text.yt/js/jquery.form.js | 46.250.239.67 | 200 OK | 37 kB |
URL GET HTTP/2text.yt/js/jquery.form.js IP46.250.239.67:443 ASN#141995 Contabo Asia Private Limited
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjectsave.bz Fingerprint81:6F:98:9E:6A:30:A3:BB:C7:F2:44:D1:F7:9E:97:FB:0E:67:15:C4 ValidityTue, 08 Oct 2024 03:09:03 GMT - Mon, 06 Jan 2025 03:09:02 GMT
File typeJavaScript source, ASCII text Hash8f4bab3ff4dd7f8abb2867e7e9815c2d 25d53e7dcba6d82529da36228c3f88441767c35a a06f74a4aeb52c4c3c961aa0cbc4e44fac825940f812a10aa5a605759c53d887
GET /js/jquery.form.js HTTP/1.1
Host: text.yt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/tag/young-paradise-register-user
Cookie: PHPSESSID=51u8rt8k20ok8drstscg2ni9io
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx-rc
date: Sat, 26 Oct 2024 22:45:08 GMT
content-type: text/javascript
last-modified: Mon, 07 Oct 2024 08:40:35 GMT
vary: Accept-Encoding
etag: W/"67039e83-91d4"
expires: Mon, 25 Nov 2024 22:45:08 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
|
|
| text.yt/images/android-icon-192x192.png | 46.250.239.67 | 200 OK | 4.3 kB |
URL GET HTTP/2text.yt/images/android-icon-192x192.png IP46.250.239.67:443 ASN#141995 Contabo Asia Private Limited
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjectsave.bz Fingerprint81:6F:98:9E:6A:30:A3:BB:C7:F2:44:D1:F7:9E:97:FB:0E:67:15:C4 ValidityTue, 08 Oct 2024 03:09:03 GMT - Mon, 06 Jan 2025 03:09:02 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hashb44ecd2a09a080ed31aa964d4ba56eed 12e8a5974be25911b8a891ade1c1f6e5c8fe4b5e 2284b6dadff120bf81dcefbbed6bd8b183092b49834129b6bd25171a50e2a5b9
GET /images/android-icon-192x192.png HTTP/1.1
Host: text.yt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/tag/young-paradise-register-user
Cookie: PHPSESSID=51u8rt8k20ok8drstscg2ni9io; isFTime_6165e2a40118d87a0813ead22a7dc332=true; isFTime_6165e2a40118d87a0813ead22a7dc332_expiry=Sat, 26 Oct 2024 22:45:09 GMT; dom3ic8zudi28v8lr6fgphwffqoz0j6c=bc690129-1278-4906-a73e-3df5a9b7be1a%3A3%3A1; a=NfT8TuqGsOCRHcEyPpUORbNyrB4ZSTsd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx-rc
date: Sat, 26 Oct 2024 22:45:09 GMT
content-type: image/png
last-modified: Mon, 07 Oct 2024 08:57:27 GMT
vary: Accept-Encoding
etag: W/"6703a277-10de"
expires: Mon, 25 Nov 2024 22:45:09 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
|
|
| text.yt/tag/young-paradise-register-user | 46.250.239.67 | 200 OK | 34 kB |
URL User Request GET HTTP/2text.yt/tag/young-paradise-register-user IP46.250.239.67:443 ASN#141995 Contabo Asia Private Limited
CertificateIssuerLet's Encrypt Subjectsave.bz Fingerprint81:6F:98:9E:6A:30:A3:BB:C7:F2:44:D1:F7:9E:97:FB:0E:67:15:C4 ValidityTue, 08 Oct 2024 03:09:03 GMT - Mon, 06 Jan 2025 03:09:02 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (3552), with CRLF, LF line terminators Hash34eb92ee3cfddec8d3369da5520db401 dff8cf1363c3ced64ed34210e75709810d3dc863 ce4cf5e4e75bece5bb0edd3748293a64d471faf6a7b5e5f061ad613ce0719fad
GET /tag/young-paradise-register-user HTTP/1.1
Host: text.yt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx-rc
date: Sat, 26 Oct 2024 22:45:08 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=51u8rt8k20ok8drstscg2ni9io; expires=Mon, 27-Oct-2025 04:33:54 GMT; Max-Age=31556926; path=/
x-frame-options: SAMEORIGIN, SAMEORIGIN
x-xss-protection: 1; mode=block, 1; mode=block
x-content-type-options: nosniff, nosniff
content-encoding: br
X-Firefox-Spdy: h2
|
|
| c.adsco.re/ | 104.17.166.186 | 200 OK | 78 kB |
IP104.17.166.186:443
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (881) Hash70e681d122073a9bc3f704fb0f96a82d 5916b6dea0ea58b5807287ca1cd4faf9c9f3aae5 73bfce45d382df02d75ef2ef688325cc973139931db445ee753c2af8a85f3965
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 26 Oct 2024 22:45:09 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Tue, 26 Nov 2024 22:45:09 GMT
etag: W/"cOaB0SIHOpvD9wT7D5aoLQ=="
content-encoding: gzip
cf-cache-status: HIT
age: 436520
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d8df9a16c6356ab-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 4.adsco.re:2087/ | 162.252.214.5 | 200 OK | 45 B |
IP162.252.214.5:2087
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re:2087
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://text.yt
DNT: 1
Connection: keep-alive
Referer: https://text.yt/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Oct 2024 22:45:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://text.yt
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
|
|
| text.yt/js/clipboard.min.js | 46.250.239.67 | 200 OK | 11 kB |
URL GET HTTP/2text.yt/js/clipboard.min.js IP46.250.239.67:443 ASN#141995 Contabo Asia Private Limited
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjectsave.bz Fingerprint81:6F:98:9E:6A:30:A3:BB:C7:F2:44:D1:F7:9E:97:FB:0E:67:15:C4 ValidityTue, 08 Oct 2024 03:09:03 GMT - Mon, 06 Jan 2025 03:09:02 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/clipboard.min.js HTTP/1.1
Host: text.yt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/tag/young-paradise-register-user
Cookie: PHPSESSID=51u8rt8k20ok8drstscg2ni9io
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx-rc
date: Sat, 26 Oct 2024 22:45:08 GMT
content-type: text/javascript
last-modified: Mon, 07 Oct 2024 08:40:35 GMT
vary: Accept-Encoding
etag: W/"67039e83-29bb"
expires: Mon, 25 Nov 2024 22:45:08 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
|
|
| text.yt/images/favicon-16x16.png | 46.250.239.67 | 200 OK | 936 B |
URL GET HTTP/2text.yt/images/favicon-16x16.png IP46.250.239.67:443 ASN#141995 Contabo Asia Private Limited
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjectsave.bz Fingerprint81:6F:98:9E:6A:30:A3:BB:C7:F2:44:D1:F7:9E:97:FB:0E:67:15:C4 ValidityTue, 08 Oct 2024 03:09:03 GMT - Mon, 06 Jan 2025 03:09:02 GMT
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hash5d74c6dbebec0843b553f02eb16782a7 193a8cd7368973f0921ac5f0817507d375d6a14a 48370a7b82739af051a68feffc533bbf411fb6ebf8fdef5a1397e2566dda9334
GET /images/favicon-16x16.png HTTP/1.1
Host: text.yt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/tag/young-paradise-register-user
Cookie: PHPSESSID=51u8rt8k20ok8drstscg2ni9io; isFTime_6165e2a40118d87a0813ead22a7dc332=true; isFTime_6165e2a40118d87a0813ead22a7dc332_expiry=Sat, 26 Oct 2024 22:45:09 GMT; dom3ic8zudi28v8lr6fgphwffqoz0j6c=bc690129-1278-4906-a73e-3df5a9b7be1a%3A3%3A1; a=NfT8TuqGsOCRHcEyPpUORbNyrB4ZSTsd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx-rc
date: Sat, 26 Oct 2024 22:45:09 GMT
content-type: image/png
last-modified: Mon, 07 Oct 2024 08:57:28 GMT
vary: Accept-Encoding
etag: W/"6703a278-3a8"
expires: Mon, 25 Nov 2024 22:45:09 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
|
|
| text.yt/js/autosaveform.js | 46.250.239.67 | 200 OK | 6.4 kB |
URL GET HTTP/2text.yt/js/autosaveform.js IP46.250.239.67:443 ASN#141995 Contabo Asia Private Limited
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjectsave.bz Fingerprint81:6F:98:9E:6A:30:A3:BB:C7:F2:44:D1:F7:9E:97:FB:0E:67:15:C4 ValidityTue, 08 Oct 2024 03:09:03 GMT - Mon, 06 Jan 2025 03:09:02 GMT
File typeJavaScript source, ASCII text, with very long lines (7008), with no line terminators Hashe0f49d7a80d669e3022c931175a2594b 7f28e027b22b984ec5a7afbd2b42fe36c9e88428 5f04ccf064e57da6b0ea80b1943c0e00bdb30ac2ee4459aef9011e9c48d290c9
GET /js/autosaveform.js HTTP/1.1
Host: text.yt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/tag/young-paradise-register-user
Cookie: PHPSESSID=51u8rt8k20ok8drstscg2ni9io
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx-rc
date: Sat, 26 Oct 2024 22:45:08 GMT
content-type: text/javascript
last-modified: Mon, 07 Oct 2024 08:40:35 GMT
vary: Accept-Encoding
etag: W/"67039e83-18e8"
expires: Mon, 25 Nov 2024 22:45:08 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
|
|
| text.yt/css/style.css | 46.250.239.67 | 200 OK | 20 kB |
IP46.250.239.67:443 ASN#141995 Contabo Asia Private Limited
Requested byhttps://text.yt/tag/young-paradise-register-user CertificateIssuerLet's Encrypt Subjectsave.bz Fingerprint81:6F:98:9E:6A:30:A3:BB:C7:F2:44:D1:F7:9E:97:FB:0E:67:15:C4 ValidityTue, 08 Oct 2024 03:09:03 GMT - Mon, 06 Jan 2025 03:09:02 GMT
Hash0882c258c245a925c1eaad109f4a475c 9d83e616a2eec607cdea9904f917e0acef91f092 ec23bf975420970f2041c3265ca72a6bfb142c59c3ac1b19cb2bf2d6f628b933
GET /css/style.css HTTP/1.1
Host: text.yt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://text.yt/tag/young-paradise-register-user
Cookie: PHPSESSID=51u8rt8k20ok8drstscg2ni9io
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx-rc
date: Sat, 26 Oct 2024 22:45:08 GMT
content-type: text/css
last-modified: Mon, 07 Oct 2024 09:34:26 GMT
vary: Accept-Encoding
etag: W/"6703ab22-4c39"
expires: Mon, 25 Nov 2024 22:45:08 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
|
|