GET xnhau.sh/static/images/flags/es.svg
200 OK 91 kB URL GET xnhau.sh/static/images/flags/es.svg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type SVG Scalable Vector Graphics image
Hash 50623e6a761b392b5381ce35e8a77f99
ca76a86214554c7540cd3c98d8ceb2d2e22b6238
ab3d438837b7f1c4ebce6980cc9274cd2e6adcc8af9be6f5cfc47ef2c4c464e3
GET /static/images/flags/es.svg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: image/svg+xml
content-encoding: br
last-modified: Mon, 17 Jul 2023 07:34:40 GMT
vary: Accept-Encoding
etag: W/"64b4ef10-162c3"
expires: Mon, 07 Jul 2025 23:26:53 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 720182
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rTb6NVW7tglXMgS49pKe2ELK9mSquqDqtci1ux6YldvBMBKz9lTMJQZrMe0kRkFrx7eag2W2NKUX2UW%2FFWV%2FdunwuED%2BPcWBZVmFSIpPUXeyMudnqRdeCc6D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c9c2edf568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1799&min_rtt=975&rtt_var=650&sent=432&recv=65&lost=0&retrans=0&sent_bytes=463795&recv_bytes=34097&delivery_rate=1234909&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18286&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/contents/laelqdaetfol/theme/logo.png
200 OK 3.3 kB URL GET xnhau.sh/contents/laelqdaetfol/theme/logo.png
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type RIFF (little-endian) data, Web/P image
Hash d4db192e6848ce7c4b9adc97a5a48b24
f080fd25c0de3f1b020934520b2ee9dff19fd6e2
10c61f76cbb6557010688c88dd4bb3a25fa9f782ef8d59812f8950712c388a7e
GET /contents/laelqdaetfol/theme/logo.png HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: image/webp
content-length: 3292
cf-ray: 95454c9c3ef5568b-OSL
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=3707
content-disposition: inline; filename="logo.webp"
vary: Accept
etag: "666447e6-e7b"
last-modified: Sat, 08 Jun 2024 12:00:38 GMT
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 5582
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9h0EDJFVj9lJbJ4GUGjK%2FjH9Y4rBilT3oL0smdQk8y093iwIEksDi0igWiRDbEX0gqJIqQaQeYThLB9OyGI9%2FCOuB5Ok3JhwZz1v%2ByocP8mJJeM%2FbNJI4vRR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1555&min_rtt=895&rtt_var=600&sent=460&recv=71&lost=0&retrans=0&sent_bytes=490048&recv_bytes=35718&delivery_rate=6370760&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18292&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/static/js/app.js
200 OK 1.8 kB URL GET xnhau.sh/static/js/app.js
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type JavaScript source, ASCII text
Hash 11c27523ad8166aff2b6eded3004c2a8
ff15c06efa1e6f4c7661abee54ff3d23750933d5
371c78f52ceb61a27afb9b404d057715a39e088b268ae0f02aca4c1248b0e5c8
GET /static/js/app.js HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: application/javascript
content-encoding: br
last-modified: Thu, 28 Mar 2024 10:27:34 GMT
vary: Accept-Encoding
etag: W/"66054616-737"
expires: Mon, 07 Jul 2025 23:26:52 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1353320
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ENXyU11A9gnsHi1NkqHPx7iYC0kNeR65KCZNuA6dRuf7mv%2Fy%2FLv5txAS63ud2Q7ZXVsrgpR1CjxXGejAbd%2FIibWwz7Z6AzQ5LtuooMOtVKHyENolY8PXh3i8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c9c4f0d568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1595&min_rtt=895&rtt_var=425&sent=468&recv=74&lost=0&retrans=0&sent_bytes=495400&recv_bytes=36527&delivery_rate=1638994&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18304&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/apple-touch-icon.png
200 OK 19 kB URL GET xnhau.sh/apple-touch-icon.png
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type RIFF (little-endian) data, Web/P image
Hash bbab6535e9c6d3da4165c8f7e624854d
51c190dbf26702ad97dbbd04bc8bffde6caae2c7
8c4a2b37b81e0222a4e840163f844eea793ec8dbe5cccaa3fff609def409a563
GET /apple-touch-icon.png HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g1$t1750695485$j42$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:07 GMT
content-type: image/webp
content-length: 18926
cf-ray: 95454ca64bd6568b-OSL
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=28937
content-disposition: inline; filename="apple-touch-icon.webp"
vary: Accept
etag: "6417c9fc-7109"
last-modified: Mon, 20 Mar 2023 02:50:36 GMT
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6PNvpuaqXNBslhiIYv3blUXbbO6%2BnaogDgV8Van9Lc0TscDR%2FggkPae7%2B7lYuAr62Sqa3P5Jik4GuysNjCXSoX8DpAS%2FMgVxm2vJObQJYDNTSVfhPZn5QVIs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2072&min_rtt=719&rtt_var=980&sent=764&recv=112&lost=0&retrans=0&sent_bytes=821504&recv_bytes=52971&delivery_rate=162049&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=20473&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/fa-6.4.2/webfonts/fa-solid-900.woff2
200 OK 150 kB URL GET xnhau.sh/fa-6.4.2/webfonts/fa-solid-900.woff2
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 150020, version 772.1280
Size 150 kB (150020 bytes)
Hash d5e647388e2415268b700d3df2e30a0d
97f0942c6627ddd89fb62170e5cac9a2cbd6c98c
886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9
GET /fa-6.4.2/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xnhau.sh/
DNT: 1
Connection: keep-alive
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:05 GMT
content-type: application/octet-stream
content-length: 150020
cf-ray: 95454c9c1ec2568b-OSL
last-modified: Tue, 01 Aug 2023 10:27:00 GMT
etag: "64c8ddf4-24a04"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YOmHp77SrJmmthXCos%2FhP4r5vhlyboamnaWkeB9%2BORmhjDFwyilp0FB2bGJ4DmIw7wfnjHWKvklMmP1O5FGTSK2OCrIOBKZd9OkNTJC0lzcbR4cGmZLayCyD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1677&min_rtt=895&rtt_var=683&sent=532&recv=77&lost=0&retrans=0&sent_bytes=569340&recv_bytes=36665&delivery_rate=8141228&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18839&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/static/images/flags/tr.svg
200 OK 554 B URL GET xnhau.sh/static/images/flags/tr.svg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type SVG Scalable Vector Graphics image
Hash ed6d5f37779af38911b0b7cb2212e30d
49db5e5e46c496be4f3f7b0565bb415982bb6130
033a416ecc30a516c54c6a0fac2d212a38fb051e5976cda49eb9d22264814a66
GET /static/images/flags/tr.svg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: image/svg+xml
content-encoding: br
last-modified: Mon, 17 Jul 2023 07:34:40 GMT
vary: Accept-Encoding
etag: W/"64b4ef10-22a"
expires: Mon, 07 Jul 2025 23:26:53 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 1353318
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KVnUo9964kQ2EXPRVEUoHST6fsNYmlCWv6pOST5naA5mdjifp6xMfOo8wD8eyaaj0G3qTbGWtRasY6NKqPnj3452pnInZ%2BTjwPNIhMC887BJpZS2U01PonGF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c9c3ef4568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1555&min_rtt=895&rtt_var=600&sent=464&recv=71&lost=0&retrans=0&sent_bytes=494231&recv_bytes=35718&delivery_rate=6370760&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18293&x=1", cfExtPri, cfHdrFlush;dur=0
GET static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
200 OK 20 kB URL GET static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
IP
Certificate IssuerGoogle Trust Services
Subjectcloudflareinsights.com
FingerprintEA:C7:0D:68:3A:45:CB:AD:C5:33:41:B6:DF:F1:60:64:E1:0F:52:6A
ValiditySun, 27 Apr 2025 18:18:02 GMT - Sat, 26 Jul 2025 19:17:55 GMT
File type JavaScript source, ASCII text, with very long lines (19948), with no line terminators
Hash ec18af6d41f6f278b6aed3bdabffa7bc
62c9e2cab76b888829f3c5335e91c320b22329ae
8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f
GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xnhau.sh
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2024.6.1"
last-modified: Thu, 06 Jun 2024 15:52:56 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 95454c9c5a0b569d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
GET xnhau.sh/contents/videos_screenshots/152000/152058/336x189/4.jpg
200 OK 8.1 kB URL GET xnhau.sh/contents/videos_screenshots/152000/152058/336x189/4.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 336x189, Scaling: [none]x[none], YUV color, decoders should clamp
Hash c78a2f5d8d6c6ac7c7ef44de6d462aa5
2544756b305b228b6e9ff6bda0c8fe86cf418163
25ff9311f2f2ff562877a9dcfb41ceb72f16ab0dc06ed7bb9de02d66944ef314
GET /contents/videos_screenshots/152000/152058/336x189/4.jpg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g1$t1750695485$j42$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:06 GMT
content-type: image/jpeg
content-length: 8054
cf-ray: 95454ca90f3d568b-OSL
cf-bgj: imgq:85,h2pri
cf-polished: status=format_not_supported
etag: "6858d355-1f76"
last-modified: Mon, 23 Jun 2025 04:08:53 GMT
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 5025
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h4yz0kR%2FsbKQ8bLqN0DQ3h%2B8nIPVPfp6Witdz9nQff8dVNi6EPNdcJnnx9veRDFBAQdawekBvKTFALhjk5bqq5%2Bo2AfmWkrsWrMPAJss%2BRl%2FhxBN3bbc3XX6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2399&min_rtt=719&rtt_var=2382&sent=744&recv=105&lost=0&retrans=0&sent_bytes=800859&recv_bytes=51911&delivery_rate=1456722&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=20350&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/images/x.png
200 OK 288 B IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type RIFF (little-endian) data, Web/P image
Hash 0cbd5cf8b00c70933e939bee8eb5331b
ac9b5a32b8abe5a654f2403a3ae9632309d8f366
3d8bc5af18ef6f5ab608df36fc7109096e8801cb499ae3a79bf059ceab141651
GET /images/x.png HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: image/webp
content-length: 288
cf-ray: 95454c9c1ecc568b-OSL
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=1388
content-disposition: inline; filename="x.webp"
vary: Accept
etag: "67a8c6f8-56c"
last-modified: Sun, 09 Feb 2025 15:17:12 GMT
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 5582
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q%2FM7akHCIcnXiLxJOirRh9MDL7OOK8gnlvxVOZUDYoyBhT4ex4vvpv93rej4vOC9YvZQN9D1fdgsPdojuXRfYY%2BMQCA7UGMID%2BELGdarjpIwQFJz8dszajOd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1761&min_rtt=975&rtt_var=730&sent=415&recv=57&lost=0&retrans=0&sent_bytes=453255&recv_bytes=30177&delivery_rate=5813&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18272&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/static/js/main.min.js?v=8.4.2
200 OK 208 kB URL GET xnhau.sh/static/js/main.min.js?v=8.4.2
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type JavaScript source, ASCII text, with very long lines (65447)
Size 208 kB (207998 bytes)
Hash e45924a5918fedc674a7245dea83f299
82005f96ac87c6735488da4220b9d51344ae9252
2709a3f142662d2a71ac21801dd2a5f09dd0d3922846dfffce1c013be40cf976
GET /static/js/main.min.js?v=8.4.2 HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: application/javascript
content-encoding: br
last-modified: Wed, 04 Sep 2024 06:51:22 GMT
vary: Accept-Encoding
etag: W/"66d8036a-32c7e"
expires: Mon, 07 Jul 2025 23:26:52 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1353320
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bxj%2FIR0CyDJeNlzJTxL4NRNZmMuqZ26U5xxymwE4yos0zD5JtSN1RuZuOiAz%2FObS8T2GtVQWhX36girGiHQeOTPg3uEVtMpBAFu0t0Rk84zviy4LBEy8doAP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c9c4f08568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1729&min_rtt=895&rtt_var=773&sent=472&recv=76&lost=0&retrans=0&sent_bytes=498049&recv_bytes=36618&delivery_rate=309832&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18321&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/contents/videos_screenshots/151000/151977/336x189/3.jpg
200 OK 1.1 kB URL GET xnhau.sh/contents/videos_screenshots/151000/151977/336x189/3.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 336x189, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 600dcc4375db63c532a4acb3ca3de856
ec0d64658b6b3bebb30a139dfcf863ad08b6eec8
f8c2f8c1dd8411e3922ea555d6eb5bf1be910dd5a89480c2abfa606f782f3ee7
GET /contents/videos_screenshots/151000/151977/336x189/3.jpg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g1$t1750695485$j42$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:06 GMT
content-type: image/jpeg
content-length: 1094
cf-ray: 95454ca91f50568b-OSL
cf-bgj: imgq:85,h2pri
cf-polished: status=format_not_supported
etag: "6858af46-446"
last-modified: Mon, 23 Jun 2025 01:35:02 GMT
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 4974
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FiUkgVIDLr6Oo8IiEMaW399NgyDXtshTcZRGZ3e5IdS8AFZydYpBMLp7t350WknFm%2FWJLR%2BK0RqmRsys%2Fll82mpIZ1pplJ44trRRZuBahc0SyvO81PkSKvMx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2341&min_rtt=719&rtt_var=1617&sent=752&recv=108&lost=0&retrans=0&sent_bytes=809898&recv_bytes=52787&delivery_rate=1543786&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=20370&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/static/images/flags/de.svg
200 OK 213 B URL GET xnhau.sh/static/images/flags/de.svg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type SVG Scalable Vector Graphics image
Hash 3e726c2b6a59e6e4543c0a1534d93796
d43327d97b3e75fd3bd8d8e0103ef182c2f4c93d
226631a8fa9deee07022680ce0461b7a09b416b616c56ebcaf21f50e2b34ea8f
GET /static/images/flags/de.svg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: image/svg+xml
content-encoding: br
last-modified: Mon, 17 Jul 2023 07:34:42 GMT
etag: W/"64b4ef12-d5"
expires: Mon, 07 Jul 2025 23:26:53 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 907139
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HN38w41tuv%2FW7otiDja40ruNdVwitpaVPWAA4kXrpPoe6A2O25rs%2BRuhYLXhsQnl51dGFN%2Bq12%2BqZot%2BhLXBKgcFcXo%2BCYNk30eXcfNjk4u%2BW0%2BEcuYTpUZF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c9c1edb568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1812&min_rtt=975&rtt_var=663&sent=425&recv=62&lost=0&retrans=0&sent_bytes=459212&recv_bytes=33259&delivery_rate=2617327&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18280&x=1", cfExtPri, cfHdrFlush;dur=0
POST xnhau.sh/cdn-cgi/challenge-platform/h/g/flow/ov1/1955987916:1750692544:FD6cEDFZSz5hjBJ1zbS0HcAMtstxCzaJSoM3eZkKnDU/95454c2af8f7568b/op3OIHARAAkVdQgzlbVJU6X..vS5X53xEND27YoZ4ss-1750695466-1.2.1.1-NxzUo801Y.mRy0Ayf2VPGu_a0ZZDA_roxbZ4XUSlZuVz4YKCrkGf3zQweJ40lph.
200 OK 4.2 kB URL POST xnhau.sh/cdn-cgi/challenge-platform/h/g/flow/ov1/1955987916:1750692544:FD6cEDFZSz5hjBJ1zbS0HcAMtstxCzaJSoM3eZkKnDU/95454c2af8f7568b/op3OIHARAAkVdQgzlbVJU6X..vS5X53xEND27YoZ4ss-1750695466-1.2.1.1-NxzUo801Y.mRy0Ayf2VPGu_a0ZZDA_roxbZ4XUSlZuVz4YKCrkGf3zQweJ40lph.
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type ASCII text, with very long lines (4168), with no line terminators
Hash 1f93fcdaf13dd93cdccba6c614005c94
55d90d993039a16effa9f12ec79733b8578e1472
c220f7ce9c39e50f510cf4dfc8e353514cf2539375bce3db66ac070bd58d1694
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1955987916:1750692544:FD6cEDFZSz5hjBJ1zbS0HcAMtstxCzaJSoM3eZkKnDU/95454c2af8f7568b/op3OIHARAAkVdQgzlbVJU6X..vS5X53xEND27YoZ4ss-1750695466-1.2.1.1-NxzUo801Y.mRy0Ayf2VPGu_a0ZZDA_roxbZ4XUSlZuVz4YKCrkGf3zQweJ40lph. HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xnhau.sh/
cf-chl: op3OIHARAAkVdQgzlbVJU6X..vS5X53xEND27YoZ4ss-1750695466-1.2.1.1-NxzUo801Y.mRy0Ayf2VPGu_a0ZZDA_roxbZ4XUSlZuVz4YKCrkGf3zQweJ40lph.
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 4375
Origin: https://xnhau.sh
DNT: 1
Connection: keep-alive
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695467$j60$l0$h0; _ga=GA1.1.330979420.1750695467
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:03 GMT
content-type: text/html; charset=UTF-8
content-encoding: br
set-cookie: cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=xnhau.sh; Expires=Tue, 23 Jun 2026 16:18:03 GMT
cf-chl-out-s: f/XeLfapXVh5U4IlICwjd9UmzEphU8u0pLNnniz4wKMlYLLOUq4YxijBMyupQmFBca2E5kv0NXZmyLHxSNcfIFkfLDKlhZVj1ASwKKfZ86w+BHbYOd+OGkFto6klyxKiDKKOEgCnIsSKz9XlpTtWd9/oKiQfIJ435o2FyZ4HIL5lqHY7itEkPUPI8jHpx7AaRmUhBLRSM58bV/0Lwn5YUb2v2G4D2PZRv31G869zncrX/DQpx70nrMjKo7gxCEBG4aPxlSP40n+cMW8JvcmEGnFT+uersEgMZeCXxO2Wn32ey3ehVBZPAw3ZnBBY4e0EhwGumzgZLw9c3FJYzGJDa4v+fTvjaQjFYh1KP+z/yWA=$b90YMI2I2zMMq33PV49KnQ==
cf-chl-out: V9teVxLv/krqhagGZNCSqRyHmeFNHFv+/14EyOGNoYJpAMUp2XTInHOZ+1VPDYsn/tun1Imkoku7k9vK633Ngw==$O92xudZaslLHITIvMcS7Ug==
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=etZZnIXnslYEWHb%2F6Atb2KjLoiW1OxV2KH67j0qRZcrdhGLxcCkCRth9o7nSDWbXPgWBH1y6ARydSxYdfE3ai6q3UqPkOeEMmI1cPEI53oalmHjK60nhzKT%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 95454c95be6b568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2079&min_rtt=1004&rtt_var=1056&sent=346&recv=33&lost=0&retrans=0&sent_bytes=388810&recv_bytes=12610&delivery_rate=590629&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=17300&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/static/images/flags/it.svg
200 OK 292 B URL GET xnhau.sh/static/images/flags/it.svg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type SVG Scalable Vector Graphics image
Hash 8d15de04f5f6e8e89cab4e5eb237f607
01b40cef32d2b471ba6596fbac7b6dcdae637c12
2d46fd7fde3f19c3f278fe9028e6fab6fa997fbdda3e18116fb70e57cfc78598
GET /static/images/flags/it.svg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: image/svg+xml
content-encoding: br
last-modified: Mon, 17 Jul 2023 07:34:38 GMT
vary: Accept-Encoding
etag: W/"64b4ef0e-124"
expires: Mon, 07 Jul 2025 23:26:53 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 1353318
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CiTifUdQQ%2FmK9ACZNM0MnTywScJsUkP77HzCDI10BL6atCPkbnjUZuXEIo6l9f0FEoxEccctpTb1vJQT1OYpUdBc%2FzNa%2BdcvFvPieKHMCCkdI8foA4tG0%2FjJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c9c2ee1568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1725&min_rtt=975&rtt_var=670&sent=430&recv=63&lost=0&retrans=0&sent_bytes=462806&recv_bytes=33305&delivery_rate=839765&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18283&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/contents/videos_screenshots/151000/151879/336x189/2.jpg
200 OK 3.4 kB URL GET xnhau.sh/contents/videos_screenshots/151000/151879/336x189/2.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 336x189, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 01a8345fc11103d9119fa6da1f8b2387
917db06648bb928e0f8046ebf415256baca8a86c
722a32a89b968e357e0c9e8c33313b6ec5e79ce2e170a952fdfae8c2da78b81c
GET /contents/videos_screenshots/151000/151879/336x189/2.jpg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g1$t1750695485$j42$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:07 GMT
content-type: image/jpeg
content-length: 3380
cf-ray: 95454ca92f63568b-OSL
cf-bgj: imgq:85,h2pri
cf-polished: status=format_not_supported
etag: "685849b4-d34"
last-modified: Sun, 22 Jun 2025 18:21:40 GMT
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KUeiK9sF0aa8%2Bz3emmETh61xYTjUOD7hPjlYz3ab5sXuDtcGvGMT3NImyUwfPt5U%2Bh3shovotkn9RcST6yNpEqoqfxef8EUNRmdoCO4eHspfjdHtsx16YG3t"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1992&min_rtt=719&rtt_var=895&sent=782&recv=113&lost=0&retrans=0&sent_bytes=841725&recv_bytes=53017&delivery_rate=6133813&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=20578&x=1", cfExtPri, cfHdrFlush;dur=0
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/384756839:1750692683:l_0OwhZeFcDPOVdlnhXcMeyFVRVgdrINJ-bmZ8SiMLc/95454c32cd9d56b1/aEs578vou_O5Y5JNvvG6e2qHfaxuXOjd5U_GegmmXa8-1750695467-1.2.1.1-k7_2Z4yx1JZDbuXDDZFEnwNro4bLH7J7Yx.8rhaLKFRQM53m4nZRy0FL7o0Q1.Ms
200 OK 30 kB URL POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/384756839:1750692683:l_0OwhZeFcDPOVdlnhXcMeyFVRVgdrINJ-bmZ8SiMLc/95454c32cd9d56b1/aEs578vou_O5Y5JNvvG6e2qHfaxuXOjd5U_GegmmXa8-1750695467-1.2.1.1-k7_2Z4yx1JZDbuXDDZFEnwNro4bLH7J7Yx.8rhaLKFRQM53m4nZRy0FL7o0Q1.Ms
IP
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/naign/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type ASCII text, with very long lines (29680), with no line terminators
Hash e2e2847d5f5cdfc241ef089658595f98
d6abd38251e9f5d48534abed25870ff8474cda2f
8b2dca58bd8967c669be2f6e1e06f49f708932fe89c9c88e8b207584cce93ba4
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/384756839:1750692683:l_0OwhZeFcDPOVdlnhXcMeyFVRVgdrINJ-bmZ8SiMLc/95454c32cd9d56b1/aEs578vou_O5Y5JNvvG6e2qHfaxuXOjd5U_GegmmXa8-1750695467-1.2.1.1-k7_2Z4yx1JZDbuXDDZFEnwNro4bLH7J7Yx.8rhaLKFRQM53m4nZRy0FL7o0Q1.Ms HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/naign/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
cf-chl: aEs578vou_O5Y5JNvvG6e2qHfaxuXOjd5U_GegmmXa8-1750695467-1.2.1.1-k7_2Z4yx1JZDbuXDDZFEnwNro4bLH7J7Yx.8rhaLKFRQM53m4nZRy0FL7o0Q1.Ms
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 35810
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:17:55 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: I74cVPWV0T6MsORY8stgcwiqM22r9tEGfzzk2gFhHCcJR4ctdwG/IIzQEtR6yh1z$AxL6B6L3NlLarDEWvvi/aQ==
priority: u=3,i=?0
server: cloudflare
cf-ray: 95454c5ffe3d56b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET xnhau.sh/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
200 OK 1.2 kB URL GET xnhau.sh/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type JavaScript source, ASCII text, with very long lines (1238)
Hash 9e8f56e8e1806253ba01a95cfc3d392c
a8af90d7482e1e99d03de6bf88fed2315c5dd728
2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: application/javascript
last-modified: Thu, 19 Jun 2025 11:27:45 GMT
etag: W/"6853f431-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0kT2bmH0lYGDIhz4LGUozHI4naBqhIE1HGMjbsbrb3VK63ZdgS3JEVa%2FXQQ39GnVG7xxCLV26%2FChRFeR3qAogyDr%2FtGn%2BHL6v4p%2FhAGyYeUT64qVy2rD%2BKoN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c9c3f01568b-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Wed, 25 Jun 2025 16:18:04 GMT
cache-control: max-age=172800, public
content-encoding: gzip
GET xnhau.sh/static/images/no-avatar.svg
200 OK 2.0 kB URL GET xnhau.sh/static/images/no-avatar.svg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type SVG Scalable Vector Graphics image
Hash bb29dbda801ad9f3b0a4bd031000b0ef
243ec81f45a4aa7cf9a41499d7c370050f8ada89
7d406bdfad1c5932edeba542229dbc91187137dd72fdbd805c3c4ab6fef88a3e
GET /static/images/no-avatar.svg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/static/styles/all-responsive-metal.css?v=1750695306
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g1$t1750695485$j42$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:06 GMT
content-type: image/svg+xml
content-encoding: br
last-modified: Fri, 25 Aug 2023 13:42:41 GMT
vary: Accept-Encoding
etag: W/"64e8afd1-7b6"
expires: Mon, 07 Jul 2025 23:26:53 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 1353320
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TyOihAzAP4nadJuM422hbfaSUhVydphVYR5HDPQwydmyws1Ezc66D4boJXS2zf0yXIgEbZ1sYjhhJ6J3cH9n7mBFd36s8XZCEoEBim66r5opsmMWGP%2FIOFfr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454ca4b9b8568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1645&min_rtt=895&rtt_var=515&sent=716&recv=84&lost=0&retrans=0&sent_bytes=785970&recv_bytes=38445&delivery_rate=1358619&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=19651&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.blog/pc-b52-070225.webm
206 Partial Content 104 kB URL GET xnhau.blog/pc-b52-070225.webm
IP
Certificate IssuerGoogle Trust Services
Subject343b0625.sni.cloudflaressl.com
FingerprintA2:08:FB:F8:F3:02:60:38:2B:E3:6A:99:E2:AE:88:D2:22:BE:E2:FD
ValiditySat, 26 Apr 2025 23:55:51 GMT - Sat, 26 Jul 2025 00:55:43 GMT
Size 104 kB (104489 bytes)
Hash 5053800dad327e41dd23d01e836061a7
fb121d8262a09222fb528836566b4ddc6934cecb
3c6dd432110a1b51e7cfa180936037b851e3956faef7e765174df7a36d31c19c
GET /pc-b52-070225.webm HTTP/1.1
Host: xnhau.blog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Mon, 23 Jun 2025 16:18:06 GMT
content-type: video/webm
content-length: 104489
etag: "5053800dad327e41dd23d01e836061a7"
last-modified: Thu, 06 Feb 2025 20:02:12 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5383
content-range: bytes 0-104488/104489
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pCeKqV4gXjac6ZRvJccA94qaSeeGoJPlq8ZB28%2BiEigcCRwI54P2JOMMgwSYq5c4rZhSMxQgMErrpuJE2HExmm5wMHM%2BwWevyGYVAsWZkhVF43Fbx9s%2F9oCA9sGt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 95454ca5db8856ca-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1040&min_rtt=452&rtt_var=203&sent=282&recv=109&lost=0&retrans=0&sent_bytes=377214&recv_bytes=1528&delivery_rate=64850944&cwnd=254&unsent_bytes=0&cid=5f674aad10231c28&ts=242&x=0"
X-Firefox-Spdy: h2
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/95454c32cd9d56b1/1750695468750/yMZFUOnIGCbLU08
200 OK 430 B URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/95454c32cd9d56b1/1750695468750/yMZFUOnIGCbLU08
IP
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/naign/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type PNG image data, 38 x 93, 8-bit/color RGBA, non-interlaced
Hash 088be8e062679904cb771cf8882967d4
3aa793f703f9dd5274c3e3e5d97fe8f4d257db48
567d25b169f42fa13d28ec8e9ba2cd4474b184778650e4fa26d49b2ce55f9ed7
GET /cdn-cgi/challenge-platform/h/g/d/95454c32cd9d56b1/1750695468750/yMZFUOnIGCbLU08 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/naign/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:17:51 GMT
content-type: image/png
content-length: 430
priority: u=4,i=?0
server: cloudflare
cf-ray: 95454c481f7b56b1-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET xnhau.sh/static/images/flags/us.svg
200 OK 4.5 kB URL GET xnhau.sh/static/images/flags/us.svg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type SVG Scalable Vector Graphics image
Hash ae65659236a7e348402799477237e6fa
73305bd6cab9d5e7c535afbb4892020e6cc92fc9
c70ba1cb67cc649da2b1f5dc4a26891437d8bba2cc098c88461e6bfc23949d9e
GET /static/images/flags/us.svg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: image/svg+xml
content-encoding: br
last-modified: Mon, 17 Jul 2023 07:34:40 GMT
vary: Accept-Encoding
etag: W/"64b4ef10-116d"
expires: Mon, 07 Jul 2025 23:26:53 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 1353319
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nKcRmhg%2FYEOMXNaZ6%2FfgHZ1LJHBwNyYLDdiR2FjVZRAYzleAzeWX4%2BccLj2Tn6m%2FZ5t%2BRYKDN1A0iozHqHNJAfME2rqQPzQvQo1ILkFa9T4OU9goYABZx1eR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c9c1eda568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1812&min_rtt=975&rtt_var=663&sent=426&recv=62&lost=0&retrans=0&sent_bytes=460126&recv_bytes=33259&delivery_rate=2617327&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18280&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/contents/videos_screenshots/152000/152120/336x189/5.jpg
200 OK 2.6 kB URL GET xnhau.sh/contents/videos_screenshots/152000/152120/336x189/5.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 336x189, Scaling: [none]x[none], YUV color, decoders should clamp
Hash cc83cba2f2b0355777e507388d29e59c
ad93ceb2fc67e4bce316610ea2f42d3b2ec47bd6
cce20a9a735ea83a5b4f47159909ecb692e5e62701eb17eceb4f4de9c3c4de72
GET /contents/videos_screenshots/152000/152120/336x189/5.jpg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g1$t1750695485$j42$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:06 GMT
content-type: image/jpeg
content-length: 2640
cf-ray: 95454ca90f29568b-OSL
cf-bgj: imgq:85,h2pri
cf-polished: status=format_not_supported
etag: "6858ea1a-a50"
last-modified: Mon, 23 Jun 2025 05:46:02 GMT
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 5301
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ngrBwWBk2%2BLyud4TdfJa4EBtYCgVvBjkh7fKSkTl%2FJT9sJP21YtTvMeHhtzjFCtt%2B3f5QFxl13H%2FoZ5oJEd8UW43w4xz25rfSbEWX6jcOsKivCMU8T2UqeJs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2399&min_rtt=719&rtt_var=2382&sent=741&recv=105&lost=0&retrans=0&sent_bytes=797385&recv_bytes=51911&delivery_rate=1456722&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=20350&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/static/styles/jquery.fancybox-metal.css?v=8.3
200 OK 5.1 kB URL GET xnhau.sh/static/styles/jquery.fancybox-metal.css?v=8.3
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
Hash 000a5f5077bc601ade5c24cfe14b67b1
eb019a128b3eddde8bfac88665c2e68776852527
be11f5c99377ccc3d5d99323669e713f276f6dbb7f75ae56bb9038f52195be2c
GET /static/styles/jquery.fancybox-metal.css?v=8.3 HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: text/css
content-encoding: br
last-modified: Mon, 17 Jul 2023 07:34:44 GMT
vary: Accept-Encoding
etag: W/"64b4ef14-1401"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 5583
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rv7MNrmyX6i1WyeT1P78G26CwxB3JrzFFqWmEsdRYWWliGAw5xYGteMBFynnqqxJ2oOkbYjZo01R2B5AtygrFbpVpNPiqAnyA%2FcVZfz22i0QEN6WNGsX%2BE95"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c9c1ec8568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1761&min_rtt=975&rtt_var=730&sent=416&recv=57&lost=0&retrans=0&sent_bytes=454345&recv_bytes=30177&delivery_rate=5813&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18273&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/static/images/flags/jp.svg
200 OK 474 B URL GET xnhau.sh/static/images/flags/jp.svg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type SVG Scalable Vector Graphics image
Hash 3e72015c537875435192c3b2d832042e
b7006b7f32d7699252179429fe53624a51c82577
e759dccba5bc383814ab190daba0d12ef591ad9f161502a47222c2eacf770606
GET /static/images/flags/jp.svg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: image/svg+xml
content-encoding: br
last-modified: Mon, 17 Jul 2023 07:34:40 GMT
vary: Accept-Encoding
etag: W/"64b4ef10-1da"
expires: Mon, 07 Jul 2025 23:26:53 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 375519
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t2Nx%2Fj2TOb9sslwdPOUiJBtQxAneu3Cr%2FqqyrDPf3QGTK3LaN3U9fZRlVawLDH8Pd1PYS5s9fSr4tPluKzBsK%2FvYMb0V%2FI6TOmrRP3Dwtj55hqGJtbD%2BH6if"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c9c3eee568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1555&min_rtt=895&rtt_var=600&sent=458&recv=71&lost=0&retrans=0&sent_bytes=488929&recv_bytes=35718&delivery_rate=6370760&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18291&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/contents/videos_screenshots/152000/152210/336x189/2.jpg
200 OK 3.5 kB URL GET xnhau.sh/contents/videos_screenshots/152000/152210/336x189/2.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 336x189, Scaling: [none]x[none], YUV color, decoders should clamp
Hash ae37d437d15a815a36157924d5abec64
4a2f0859701431db1b334f964356fae2f273b5d9
5ce822eee1b3dc528ae8476bf245d4a2188fa8fb2629bee458f68c1da70b3283
GET /contents/videos_screenshots/152000/152210/336x189/2.jpg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g1$t1750695485$j42$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:06 GMT
content-type: image/jpeg
content-length: 3512
cf-ray: 95454ca8ff22568b-OSL
cf-bgj: imgq:85,h2pri
cf-polished: status=format_not_supported
etag: "68592edf-db8"
last-modified: Mon, 23 Jun 2025 10:39:27 GMT
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 5359
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O3G3uWBihtFHeuITFYSGQpUYczHQ1uZmcCBmKwPs33gJ1Fr8btQpOp4wyj68Gs3g%2FUcmNHimTn2TWWBR7CozmrYi1l625H09Pc33OUdr%2FCHmQDFYUgHwbyoB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2784&min_rtt=719&rtt_var=3066&sent=735&recv=100&lost=0&retrans=0&sent_bytes=792959&recv_bytes=49466&delivery_rate=6052&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=20340&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/contents/videos_screenshots/152000/152045/336x189/4.jpg
200 OK 4.3 kB URL GET xnhau.sh/contents/videos_screenshots/152000/152045/336x189/4.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 336x189, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 70a29e3f2fe5f1d67f8df4616ee68fd3
3a301996b2cca72c9ba77db673e7c60660c402eb
50e36520247e3ddbe74e875029a5303ed833f354b7bd38d332e9105696ec4694
GET /contents/videos_screenshots/152000/152045/336x189/4.jpg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g1$t1750695485$j42$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:07 GMT
content-type: image/jpeg
content-length: 4308
cf-ray: 95454ca91f42568b-OSL
cf-bgj: imgq:85,h2pri
cf-polished: status=format_not_supported
etag: "6858d1d4-10d4"
last-modified: Mon, 23 Jun 2025 04:02:28 GMT
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D671sM3jsmxHHXzlXVAZIGbC0o5uwNOP%2FB5B4Ta6vMtt%2BjKFrCTNP1ZmvfuoF5cv8m%2BE6XK1mtHo7zBUhyHrOWDMQFG5AXRwb6lOmZ%2Bo45Hd0ytwoHAajjDv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1758&min_rtt=719&rtt_var=767&sent=798&recv=117&lost=0&retrans=0&sent_bytes=858727&recv_bytes=53201&delivery_rate=2077325&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=20981&x=1", cfExtPri, cfHdrFlush;dur=0
POST xnhau.sh/cdn-cgi/rum?
204 No Content 0 B IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xnhau.sh/
content-type: application/json
Content-Length: 1412
Origin: https://xnhau.sh
DNT: 1
Connection: keep-alive
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695467$j60$l0$h0; _ga=GA1.1.330979420.1750695467
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
date: Mon, 23 Jun 2025 16:17:47 GMT
access-control-allow-origin: https://xnhau.sh
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 95454c2f9ea5568b-OSL
x-frame-options: DENY
x-content-type-options: nosniff
GET xnhau.sh/static/images/flags/cn.svg
200 OK 801 B URL GET xnhau.sh/static/images/flags/cn.svg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type SVG Scalable Vector Graphics image
Hash 02c229de4d98ea1668384d2ed4cc558d
a5abb0bbee89e84c16dbdc42703a7992c41ebb41
e80d714480a795617992d733d0678e5ad5025f8852b35d20a402a78fce4ccaf8
GET /static/images/flags/cn.svg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: image/svg+xml
content-encoding: br
last-modified: Mon, 17 Jul 2023 07:34:42 GMT
vary: Accept-Encoding
etag: W/"64b4ef12-321"
expires: Mon, 07 Jul 2025 23:26:53 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 819360
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=56zsatiQsCF%2FdIMVB%2BE5F32zOFBbHkK5gwAvnHePafiuMsWoG9nKxV9Isl05%2Bj8pf%2F%2BFAHzLD%2FkEVodyZj07L4xv0Dcay%2BaeNQo7cWzZll1P%2BiqsjgDgj4MV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c9c2ee4568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1812&min_rtt=975&rtt_var=663&sent=428&recv=62&lost=0&retrans=0&sent_bytes=461656&recv_bytes=33259&delivery_rate=2617327&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18282&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.blog/pc-b52-120125.webm
206 Partial Content 104 kB URL GET xnhau.blog/pc-b52-120125.webm
IP
Certificate IssuerGoogle Trust Services
Subject343b0625.sni.cloudflaressl.com
FingerprintA2:08:FB:F8:F3:02:60:38:2B:E3:6A:99:E2:AE:88:D2:22:BE:E2:FD
ValiditySat, 26 Apr 2025 23:55:51 GMT - Sat, 26 Jul 2025 00:55:43 GMT
Size 104 kB (104489 bytes)
Hash bb8e8107424b24a30ada967eba9cc263
44bf46d5a0efbbab69a8ce4caf6ed2bb088942b1
a436cfb0b7ace9e72358e18b282e9d16ee3fc3fac800bc74745d38ffc93a561a
GET /pc-b52-120125.webm HTTP/1.1
Host: xnhau.blog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Mon, 23 Jun 2025 16:18:06 GMT
content-type: video/webm
content-length: 104489
etag: "bb8e8107424b24a30ada967eba9cc263"
last-modified: Sun, 12 Jan 2025 03:49:50 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5383
content-range: bytes 0-104488/104489
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RnJW3bZn7eWSxEwpWKu43K7guv5whz0FjsJJwI7NuEpGR40bkvGyIERmhxBh1HNlXj8k1Yox01HXP5SYpkIGuE47Ddk9vZmCT867lt7Hef%2FWMGAwyNDLBq40eB%2FY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 95454ca49a0356ca-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=539&min_rtt=452&rtt_var=166&sent=54&recv=12&lost=0&retrans=0&sent_bytes=67361&recv_bytes=1286&delivery_rate=6995169&cwnd=254&unsent_bytes=31856&cid=5f674aad10231c28&ts=45&x=0"
X-Firefox-Spdy: h2
GET xnhau.sh/?mode=async&action=js_stats&rand=1750695486781
200 OK 43 B URL GET xnhau.sh/?mode=async&action=js_stats&rand=1750695486781
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type GIF image data, version 89a, 1 x 1
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /?mode=async&action=js_stats&rand=1750695486781 HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g1$t1750695485$j42$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:06 GMT
content-type: image/gif
cf-ray: 95454ca86e88568b-OSL
x-frame-options: SAMEORIGIN
set-cookie: kt_is_visited=1; expires=Tue, 24-Jun-2025 16:18:06 GMT; Max-Age=86400; path=/; domain=.xnhau.sh; SameSite=Lax
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nbzc8ESyB8p8SkR6zcP15KTY3So9AoDqFnrSdobHqJsxhIHQADSs4w3mESihux68gg71IoX%2FJTNIBvTZXTT3TGmrO2z8GnoXyC%2Fpgmu2%2FRETg9YoKjG3VvJp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2014&min_rtt=719&rtt_var=1151&sent=761&recv=111&lost=0&retrans=0&sent_bytes=819222&recv_bytes=52925&delivery_rate=3174137&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=20442&x=1", cfExtPri, cfHdrFlush;dur=0
GET static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
200 OK 20 kB URL GET static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
IP
Certificate IssuerGoogle Trust Services
Subjectcloudflareinsights.com
FingerprintEA:C7:0D:68:3A:45:CB:AD:C5:33:41:B6:DF:F1:60:64:E1:0F:52:6A
ValiditySun, 27 Apr 2025 18:18:02 GMT - Sat, 26 Jul 2025 19:17:55 GMT
File type JavaScript source, ASCII text, with very long lines (19948), with no line terminators
Hash ec18af6d41f6f278b6aed3bdabffa7bc
62c9e2cab76b888829f3c5335e91c320b22329ae
8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f
GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xnhau.sh
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:17:46 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2024.6.1"
last-modified: Thu, 06 Jun 2024 15:52:56 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 95454c2c4acc569d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/384756839:1750692683:l_0OwhZeFcDPOVdlnhXcMeyFVRVgdrINJ-bmZ8SiMLc/95454c32cd9d56b1/aEs578vou_O5Y5JNvvG6e2qHfaxuXOjd5U_GegmmXa8-1750695467-1.2.1.1-k7_2Z4yx1JZDbuXDDZFEnwNro4bLH7J7Yx.8rhaLKFRQM53m4nZRy0FL7o0Q1.Ms
200 OK 283 kB URL POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/384756839:1750692683:l_0OwhZeFcDPOVdlnhXcMeyFVRVgdrINJ-bmZ8SiMLc/95454c32cd9d56b1/aEs578vou_O5Y5JNvvG6e2qHfaxuXOjd5U_GegmmXa8-1750695467-1.2.1.1-k7_2Z4yx1JZDbuXDDZFEnwNro4bLH7J7Yx.8rhaLKFRQM53m4nZRy0FL7o0Q1.Ms
IP
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/naign/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 283 kB (283120 bytes)
Hash 4d096677833187f04d57160140fb056d
79baed312fbaec2aad352a448ca5c04dfac41a77
bf4aebd8d016c39ec4ba424f383ebe19f89e00b95f3633dc627b0b428cde2ecf
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/384756839:1750692683:l_0OwhZeFcDPOVdlnhXcMeyFVRVgdrINJ-bmZ8SiMLc/95454c32cd9d56b1/aEs578vou_O5Y5JNvvG6e2qHfaxuXOjd5U_GegmmXa8-1750695467-1.2.1.1-k7_2Z4yx1JZDbuXDDZFEnwNro4bLH7J7Yx.8rhaLKFRQM53m4nZRy0FL7o0Q1.Ms HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/naign/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
cf-chl: aEs578vou_O5Y5JNvvG6e2qHfaxuXOjd5U_GegmmXa8-1750695467-1.2.1.1-k7_2Z4yx1JZDbuXDDZFEnwNro4bLH7J7Yx.8rhaLKFRQM53m4nZRy0FL7o0Q1.Ms
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 4183
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:17:48 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: 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$TQk/1lZki+lx5tLlKktRBQ==
priority: u=3,i=?0
server: cloudflare
cf-ray: 95454c378bf856b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET xnhau.sh/static/images/flags/fr.svg
200 OK 292 B URL GET xnhau.sh/static/images/flags/fr.svg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type SVG Scalable Vector Graphics image
Hash b1156355de9691d768df19a8a2b44da4
e3deb99b897e85df223b6d5d63628ea6d9c762c1
63667b36ddd95d29a9f163e3ab4b9f7000dcd310350c565c19b975a0a2418117
GET /static/images/flags/fr.svg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: image/svg+xml
content-encoding: br
last-modified: Mon, 17 Jul 2023 07:34:38 GMT
vary: Accept-Encoding
etag: W/"64b4ef0e-124"
expires: Mon, 07 Jul 2025 23:26:53 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 1353318
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I2hoqNLQr89FwLh20qqfxqlw0cxFVk9MUHIRfNWieKwXy35B%2B4d7F7V%2FpwvF0mfMubZ1j3dJYEA759MjST%2BFTKdQjm6IW7duVTaI6FJPbn7H2aqcpjW%2Ffq32"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c9c2edd568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1799&min_rtt=975&rtt_var=650&sent=437&recv=65&lost=0&retrans=0&sent_bytes=468847&recv_bytes=34097&delivery_rate=1234909&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18286&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/fa-6.4.2/css/all.min.css
200 OK 102 kB URL GET xnhau.sh/fa-6.4.2/css/all.min.css
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type ASCII text, with very long lines (52276)
Size 102 kB (102217 bytes)
Hash 5222e06b77a1692fa2520a219840e6be
8b4236206a8b86af3761a244277663046d7ff7ee
0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5
GET /fa-6.4.2/css/all.min.css HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g1$t1750695485$j42$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:05 GMT
content-type: text/css
content-encoding: br
last-modified: Tue, 01 Aug 2023 10:27:00 GMT
vary: Accept-Encoding
etag: W/"64c8ddf4-18f49"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 5584
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=McGhgBGE18f1C%2FZqThBi5C3ul4RAePhEZyZP8%2FUVPpw3LFLSkOlkb35qgRsLwBjgXPRdOhUYxlp%2FTsz8Y3P9bMlh4gQfhqoBCdtiOfL4ntYVNi2aU1oUPPS6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454ca2ff6a568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1701&min_rtt=895&rtt_var=541&sent=694&recv=81&lost=0&retrans=0&sent_bytes=761453&recv_bytes=37566&delivery_rate=17990526&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=19377&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/contents/videos_screenshots/151000/151909/336x189/2.jpg
200 OK 2.7 kB URL GET xnhau.sh/contents/videos_screenshots/151000/151909/336x189/2.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 336x189, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 48dd11b3f060e8f3b2dbeae589d9826d
9e3fe445b1ddcf30995a62907ef4e580f2385171
3878c9b59e4c316328edf687ef0b3791b6a8d0e7b1ab4405aecfe086ff2b5ab9
GET /contents/videos_screenshots/151000/151909/336x189/2.jpg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g1$t1750695485$j42$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:06 GMT
content-type: image/jpeg
content-length: 2658
cf-ray: 95454ca92f5e568b-OSL
cf-bgj: imgq:85,h2pri
cf-polished: status=format_not_supported
etag: "685872ce-a62"
last-modified: Sun, 22 Jun 2025 21:17:02 GMT
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 4935
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XnK18I7iYXH7NNsrOQQ%2FbNBzBaZzieNuXpMPK9gZEunl0x4%2F6Znsifqb9Zpb34ock3Mk7P7SLkZa9LFtHkYnLcnG4cTqDoO3kWZFEjmXeJ5oak54aY%2FEdG29"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2182&min_rtt=719&rtt_var=1531&sent=758&recv=109&lost=0&retrans=0&sent_bytes=815731&recv_bytes=52833&delivery_rate=1127745&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=20378&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=95454c2af8f7568b
200 OK 116 kB URL GET xnhau.sh/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=95454c2af8f7568b
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 116 kB (115782 bytes)
Hash 1289c781811ac425329d4ce05a0e1a26
f231a5753af85ae5acaeb19bdc86512aac26b336
e7b058c573cebe4b6bec2b2e5b2ef495542fbe72ace2b4f3cc9f35cc2bbca400
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=95454c2af8f7568b HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xnhau.sh/?__cf_chl_rt_tk=rrYaThaECUHk2dHqWENu.Opekzs.iJIcOh4juKadxsk-1750695466-1.0.1.1-PUzivR0SdVAs7fETUtegxb0VELAutpelGIBqklBxmrI
DNT: 1
Connection: keep-alive
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695467$j60$l0$h0; _ga=GA1.1.330979420.1750695467
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:17:47 GMT
content-type: application/javascript; charset=UTF-8
content-encoding: br
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BT9glv5W%2BtaZThG0fVa8pimEkXO5rPJarS7F%2BD1nGm3mdEur2LMSjhwXtWKylQKAJqrSu%2B7GkETzx%2BkNZCRmvEtnmYVGL%2F5lr1%2BRkwC8aIQChA6VBiv49EQ8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c2dcc2e568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3251&min_rtt=1169&rtt_var=1854&sent=149&recv=15&lost=0&retrans=0&sent_bytes=165374&recv_bytes=1957&delivery_rate=27109858&cwnd=91200&unsent_bytes=0&cid=a454f75b976d38e0&ts=628&x=1", cfExtPri, cfHdrFlush;dur=0
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/naign/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
200 OK 26 kB URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/naign/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
IP
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type HTML document, ASCII text, with very long lines (26515), with no line terminators
Hash c4585210b0fb7ca784483a6b2500f025
e17fcc461dfefeb48e52b4cd245f256e4167b7f4
86bd3ca1424867fda76650e9f6fbf8b49335b240a29b3b2afcf7ba5f93d094b3
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/naign/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:17:47 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
content-security-policy: default-src 'none'; script-src 'nonce-dSPchpJutZKECrYV' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
referrer-policy: same-origin
document-policy: js-profiling
priority: u=4,i=?0
server: cloudflare
cf-ray: 95454c32cd9d56b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
200 OK 155 kB IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (7628)
Size 155 kB (155257 bytes)
Hash ea10a98954c2ae0675cb993ad1d594f7
e1cf405e80173b2183b21c69b9d653e210aeb891
2c1ba1db853c1d28c2673d659adf643c1d167306a5f695bc898168ae66ce4f42
POST / HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xnhau.sh/?__cf_chl_tk=rrYaThaECUHk2dHqWENu.Opekzs.iJIcOh4juKadxsk-1750695466-1.0.1.1-PUzivR0SdVAs7fETUtegxb0VELAutpelGIBqklBxmrI
Content-Type: application/x-www-form-urlencoded
Content-Length: 4035
Origin: https://xnhau.sh
DNT: 1
Connection: keep-alive
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695467$j60$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: text/html; charset=utf-8
content-encoding: br
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
set-cookie: PHPSESSID=q2jqmbapjild85rdm10noes2pk; path=/; domain=.xnhau.sh; SameSite=Lax
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=934vKpLmlKVhR4Roc4u%2FPgbhDISuC6pw%2Bff7v0mMXi2ey4Eh8tRlYSAez8Vj610a6z%2B5%2BkDDK%2BSZRJXlEPLV%2FyKmwyMDCLt256jgtHpj2GO4cD2u%2B5hTK57%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c969f7b568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfCacheStatus;desc="DYNAMIC", cfOrigin;dur=745,cfEdge;dur=18, cfL4;desc="?proto=QUIC&rtt=1972&min_rtt=1004&rtt_var=1006&sent=351&recv=38&lost=0&retrans=0&sent_bytes=393585&recv_bytes=17701&delivery_rate=74974&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18153&x=1", cfExtPri, cfHdrFlush;dur=0
GET challenges.cloudflare.com/turnstile/v0/g/180b6a431d85/api.js
200 OK 49 kB URL GET challenges.cloudflare.com/turnstile/v0/g/180b6a431d85/api.js
IP
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type JavaScript source, ASCII text, with very long lines (48827)
Hash 37dbac94aef1db73de816d49652909e2
324ec5206208c2c336cfd6f924c4e19b80cc5706
cad4395e83a0a0d66da04e657e32491d430580ce68aeb4bd59031b3e37ab9c99
GET /turnstile/v0/g/180b6a431d85/api.js HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xnhau.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 16 Jun 2025 16:33:10 GMT
cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
priority: u=3,i=?0
vary: Accept-Encoding
server: cloudflare
cf-ray: 95454c9d1c2e56b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET xnhau.sh/contents/videos_screenshots/152000/152306/336x189/2.jpg
200 OK 4.1 kB URL GET xnhau.sh/contents/videos_screenshots/152000/152306/336x189/2.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 336x189, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 14df32e43848958de001119f00bcf99b
364666a75c35f266310a689c12fee0cb290bca61
7e0f003b411a600b386fb724d9aee18ae435c2822fa600db454b6ec87ed66bcc
GET /contents/videos_screenshots/152000/152306/336x189/2.jpg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g1$t1750695485$j42$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:07 GMT
content-type: image/jpeg
content-length: 4058
cf-ray: 95454ca8ff1c568b-OSL
cf-bgj: imgq:85,h2pri
cf-polished: status=format_not_supported
etag: "68596c90-fda"
last-modified: Mon, 23 Jun 2025 15:02:40 GMT
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ee%2F4sLIGKtgfEtjJM%2FtM939%2BLm2MTbrB7c%2FRnv1rluywhqtdRmrAp3eeourBROPvOz5j6KaI4fOptm3TgSOegthcOvRFadFEnLX%2BMw1nhjcpoMt6YkdBFX6W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1953&min_rtt=719&rtt_var=768&sent=790&recv=115&lost=0&retrans=0&sent_bytes=850299&recv_bytes=53109&delivery_rate=2051875&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=20909&x=1", cfExtPri, cfHdrFlush;dur=0
403 Forbidden 431 kB IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type HTML document, ASCII text, with very long lines (6004), with CRLF, LF line terminators
Size 431 kB (430848 bytes)
Hash 9c029cb19e83b2006d418bdd02379c46
77e5f6c703e6d31d2d58d99eba03621b310a080b
5a95a914a26ef633d2a3344590f3a8711fcfd4f575d69ce257030dfa33390a73
GET / HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Mon, 23 Jun 2025 16:17:46 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Maz2YM05J1bnc6f19d9L2j2vQgT2R6MZjUZWmmecLnhfIQ8Vz0AlnPz%2FYn1kLcvYoXPnt4pgVbSXs7WCqPZ0cPEGXhck%2BA9FBh3ON7qgpSMUhecSsZFOa1C1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c2929707130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: chlray;desc="95454c2929707130", cfOrigin;dur=0,cfEdge;dur=100, cfL4;desc="?proto=TCP&rtt=831&min_rtt=483&rtt_var=627&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3264&recv_bytes=1241&delivery_rate=7313131&cwnd=254&unsent_bytes=0&cid=eef535ac84458b1a&ts=127&x=0"
X-Firefox-Spdy: h2
GET xnhau.sh/images/Telegram_logo.svg
200 OK 1.2 kB URL GET xnhau.sh/images/Telegram_logo.svg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type SVG Scalable Vector Graphics image
Hash 73f9a0ede528882146ea4bfe2ae935b5
6b9013170b87afc220743bd14ace3bc5d5322f5e
27829c103cfc0689ebf915133e6424a0a0bc1f97ddcd7e8784dd916d96f7a4d8
GET /images/Telegram_logo.svg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: image/svg+xml
content-encoding: br
last-modified: Tue, 07 May 2024 12:34:11 GMT
vary: Accept-Encoding
etag: W/"663a1fc3-4d3"
expires: Mon, 07 Jul 2025 23:26:52 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 861171
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CBkG5BQ0wj1V8byjWAR6hxBhtC6GiJh9vXHoIKbVK6cTreqosjLkEJwunrbB8QpZbUWAB%2FibBeihdN2yFuuhZZPe6GQJoftJF9AKu%2BcfvlY2jBwporAmaS5J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c9c1eca568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1761&min_rtt=975&rtt_var=730&sent=421&recv=57&lost=0&retrans=0&sent_bytes=457334&recv_bytes=30177&delivery_rate=5813&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18274&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/static/images/flags/vn.svg
200 OK 494 B URL GET xnhau.sh/static/images/flags/vn.svg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type SVG Scalable Vector Graphics image
Hash 6b3aef51e8b58cf029a85087e87591b5
e87a69c6b6a2f714b5435d8b35c5003b7aef1772
1768f5ce4bad46f4907f598e6097e6e1340500f4d7d75a76266f3e6ab9463d5e
GET /static/images/flags/vn.svg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: image/svg+xml
content-encoding: br
last-modified: Mon, 17 Jul 2023 07:34:42 GMT
vary: Accept-Encoding
etag: W/"64b4ef12-1ee"
expires: Mon, 07 Jul 2025 23:26:53 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 1353319
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jsDeuDfN7z%2BMefMuVS5W3QeqjLwxk60lTOr1qj%2FgDCnx%2B1VuRTQ24Ru%2FqbKcrVwKiBXhdF16uDrrf%2BzlABNlS2qLq4NH7ML8rxc64ED79l4N24L6PVYwzhgq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c9c1ecd568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1761&min_rtt=975&rtt_var=730&sent=420&recv=57&lost=0&retrans=0&sent_bytes=456572&recv_bytes=30177&delivery_rate=5813&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18274&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/static/images/flags/pt.svg
200 OK 8.3 kB URL GET xnhau.sh/static/images/flags/pt.svg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type SVG Scalable Vector Graphics image
Hash b908edaecfb2ef51ac70b6bf7457ef2c
58cc302c5686c4bc14ded4ef8e86f761add3fa86
62137f64b8b37b24510095926415b3120029f0d57e97817209e895f9c50b26dd
GET /static/images/flags/pt.svg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: image/svg+xml
content-encoding: br
last-modified: Mon, 17 Jul 2023 07:34:42 GMT
vary: Accept-Encoding
etag: W/"64b4ef12-2058"
expires: Mon, 07 Jul 2025 23:26:53 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 1353318
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QPOe%2Ba1siwkyZOFjO9LNwkKRN1T38qX7nO%2FHl29CYgjXgsb2T8b6nqB%2Bo6yyNT%2B6roUiCVzYTdxIVUdJ7CpcRig%2BMsH%2BvFI52saeVbsq08pHt2Rn1L9q3Y6g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c9c2ee2568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1799&min_rtt=975&rtt_var=650&sent=432&recv=65&lost=0&retrans=0&sent_bytes=463795&recv_bytes=34097&delivery_rate=1234909&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18286&x=1", cfExtPri, cfHdrFlush;dur=0
GET challenges.cloudflare.com/turnstile/v0/api.js?compat=recaptcha
302 Found 49 kB URL GET challenges.cloudflare.com/turnstile/v0/api.js?compat=recaptcha
IP
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?compat=recaptcha HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Mon, 23 Jun 2025 16:18:04 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/g/180b6a431d85/api.js
priority: u=3,i=?0
vary: Accept-Encoding
server: cloudflare
cf-ray: 95454c9c4b3956b1-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET xnhau.blog/pc-789bet-290525.mp4
206 Partial Content 107 kB URL GET xnhau.blog/pc-789bet-290525.mp4
IP
Certificate IssuerGoogle Trust Services
Subject343b0625.sni.cloudflaressl.com
FingerprintA2:08:FB:F8:F3:02:60:38:2B:E3:6A:99:E2:AE:88:D2:22:BE:E2:FD
ValiditySat, 26 Apr 2025 23:55:51 GMT - Sat, 26 Jul 2025 00:55:43 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Size 107 kB (106804 bytes)
Hash 004a2138380af1b3a5a093bdb089ec6c
5b712bf3a9bc19f90bf79483cfc0b43d851b6694
893140f616d26dea8c0dfb3966ac7757ee2e9bd844f5cf2f2d6433fd7993e2bf
GET /pc-789bet-290525.mp4 HTTP/1.1
Host: xnhau.blog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Mon, 23 Jun 2025 16:18:06 GMT
content-type: video/mp4
content-length: 106804
etag: "004a2138380af1b3a5a093bdb089ec6c"
last-modified: Thu, 29 May 2025 07:56:30 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5383
content-range: bytes 0-106803/106804
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9EKZVsc2gn3JdxNra6Wx4vKTanbskNjjqapYQyrcFg4UoI6ZFTvrT3Wz%2Fn4iYvDUNTMLvZya5cImm%2Fzus57V6O3juvTaQbvztcfhsODm3mGbDfhV8F1aWVIYXUVr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 95454ca49a0256ca-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=539&min_rtt=452&rtt_var=166&sent=8&recv=12&lost=0&retrans=0&sent_bytes=3233&recv_bytes=1286&delivery_rate=6995169&cwnd=254&unsent_bytes=0&cid=5f674aad10231c28&ts=44&x=0"
X-Firefox-Spdy: h2
GET xnhau.sh/contents/videos_screenshots/152000/152363/336x189/5.jpg
200 OK 3.5 kB URL GET xnhau.sh/contents/videos_screenshots/152000/152363/336x189/5.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 336x189, Scaling: [none]x[none], YUV color, decoders should clamp
Hash b73a0ea9ab121818e0fea53f700ae8c6
3681f1ad5035a1602fa0588264d2c7209d8e40ba
2b4d01ebe16c7dca5024202a24c1c8e4cfc699253e3d1906129ec3b8cfaa410f
GET /contents/videos_screenshots/152000/152363/336x189/5.jpg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g1$t1750695485$j42$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:07 GMT
content-type: image/jpeg
content-length: 3480
cf-ray: 95454ca8ff0e568b-OSL
cf-bgj: imgq:85,h2pri
cf-polished: status=format_not_supported
etag: "6859776e-d98"
last-modified: Mon, 23 Jun 2025 15:49:02 GMT
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QUA%2F9t2aCWsZO45B6xOrc%2FdxXtAkjIuqNcpdJPbfRFifTwxsWZ42qvI%2B1H3rvre4YpESH4f%2FmD8W2hO4wK5gwbmYz2DOdy59pF3XcSw%2F1eNLz1ZAa5ujnStZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2046&min_rtt=719&rtt_var=778&sent=786&recv=114&lost=0&retrans=0&sent_bytes=845959&recv_bytes=53063&delivery_rate=1379355&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=20901&x=1", cfExtPri, cfHdrFlush;dur=0
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
200 OK 86 B URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
IP
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/naign/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced
Hash 70c202196187ab3c11b4e094c20c6de1
9c52b959e74aee9d79cbc9f35d1f9f65a3b8c863
6255b9231d09ebe6aa1ac19ba46bdd81f3df58989c9ef2e11d6cd6e2e7b21643
GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/naign/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:17:48 GMT
content-type: image/png
content-length: 86
priority: u=4,i=?0
server: cloudflare
cf-ray: 95454c338e9056b1-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET xnhau.sh/contents/videos_screenshots/151000/151940/336x189/5.jpg
200 OK 3.1 kB URL GET xnhau.sh/contents/videos_screenshots/151000/151940/336x189/5.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 336x189, Scaling: [none]x[none], YUV color, decoders should clamp
Hash a37ef339eff71d9a279566e22fee6488
39c3bc1b7495f88d6f2c607579d73a01fdf8c83f
7eca3ea3aeac9aab99afb5c00dba519ff2556a477d59e9b99eb10c0d1bfa24b8
GET /contents/videos_screenshots/151000/151940/336x189/5.jpg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g1$t1750695485$j42$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:06 GMT
content-type: image/jpeg
content-length: 3072
cf-ray: 95454ca91f52568b-OSL
cf-bgj: imgq:85,h2pri
cf-polished: status=format_not_supported
etag: "68587f76-c00"
last-modified: Sun, 22 Jun 2025 22:11:02 GMT
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 4948
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HDPDScChtlJktlHY69hFOPAnhMU2eCU4f%2F9wEO2sConj6puY46k4TxhyQgccsXyPsundTLgS60lf4vFQHoY3vMkJsQy5lH87TdFGTaDwjSaq%2FhlKk5HJ8Mjz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2182&min_rtt=719&rtt_var=1531&sent=754&recv=109&lost=0&retrans=0&sent_bytes=811798&recv_bytes=52833&delivery_rate=1127745&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=20377&x=1", cfExtPri, cfHdrFlush;dur=0
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/384756839:1750692683:l_0OwhZeFcDPOVdlnhXcMeyFVRVgdrINJ-bmZ8SiMLc/95454c32cd9d56b1/aEs578vou_O5Y5JNvvG6e2qHfaxuXOjd5U_GegmmXa8-1750695467-1.2.1.1-k7_2Z4yx1JZDbuXDDZFEnwNro4bLH7J7Yx.8rhaLKFRQM53m4nZRy0FL7o0Q1.Ms
200 OK 5.0 kB URL POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/384756839:1750692683:l_0OwhZeFcDPOVdlnhXcMeyFVRVgdrINJ-bmZ8SiMLc/95454c32cd9d56b1/aEs578vou_O5Y5JNvvG6e2qHfaxuXOjd5U_GegmmXa8-1750695467-1.2.1.1-k7_2Z4yx1JZDbuXDDZFEnwNro4bLH7J7Yx.8rhaLKFRQM53m4nZRy0FL7o0Q1.Ms
IP
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/naign/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type ASCII text, with very long lines (4952), with no line terminators
Hash 79599098a5c5212e277150d4e7b4cbdd
4017b4b93c4f74023d72df250cc8cfd15b89f344
ad4ce63c5ce7f1e17a7426395da537763d208286db323b986b8f42f7a69855dc
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/384756839:1750692683:l_0OwhZeFcDPOVdlnhXcMeyFVRVgdrINJ-bmZ8SiMLc/95454c32cd9d56b1/aEs578vou_O5Y5JNvvG6e2qHfaxuXOjd5U_GegmmXa8-1750695467-1.2.1.1-k7_2Z4yx1JZDbuXDDZFEnwNro4bLH7J7Yx.8rhaLKFRQM53m4nZRy0FL7o0Q1.Ms HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/naign/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
cf-chl: aEs578vou_O5Y5JNvvG6e2qHfaxuXOjd5U_GegmmXa8-1750695467-1.2.1.1-k7_2Z4yx1JZDbuXDDZFEnwNro4bLH7J7Yx.8rhaLKFRQM53m4nZRy0FL7o0Q1.Ms
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 45367
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:03 GMT
content-type: text/html; charset=UTF-8
cf-chl-out-s: A21amZFpIhxbX/vOHaZIiO7sM2+Jh/PUUfAgySbJgq2W/HsSpBUtDSwgM1m7DakAD+uG5mI1r69FuJdaqy7ma82044rIRVQIezNvt0uNpk1mNrWbefzKQ+rpzb3ACNZSk5JNJRoUqs2LhD7vGUrAvq2hWqpUMqX2TqKVgjfBnLsGzC6YG9qnGJm4wCTJBtoAA/2S5f2weTyHNi8KaaLn/iUYgM9MoQt/Py7rFoqhM2mePEYSx6jYqXzCRw2Hl+szI0wbizF3WOAJ6gaH4YneUTuUv45lKlY16U+E3q0DMqx+1VIq0gkhLF5arWlxw7OchQ/nMrfPNnTpQAJ/yrvCpy02390TBBuQrlUJ9ur7WfQCKOvEX9xS8pd71Rc5t07jJ/0xW1JZBdKu9Mih6xnMe/FTpROSjWxd5ZL+rLKQx6A/YYdrKe/VOnQyQsSE4VkiUMW+NMKUv+WE1nVWBAsU3lU1VfHdYxfrXEYoVONDkRqeV5bs+roYYA939/M4ILYGAud11O8LZjqe1Ed9Hhg4r1b9z2nHQerB7a5ucAU5SIEf9pN6vhn4dkMT3vaaTpf1nk2E6+8yMN87xJFsZXOb+3S5M0QUtmh2o6z3pnwgpU36ZhBP2V9JuDAy3xXPm6TdIq+a3du1Mcvp0CGBetpnNcXtY+dnKr88cvFd8ukr0kdt7BjsuYQ9avb4/QOZZrPGBIYLS3/C5TS5QyWNp+PwwDK2JsC8stn98J+S1vyD1JzPx3BN6wgX0fMEuqV06YeIITiFpfAvITdcSnIH9uCr5X9WrOzWFqks3JvdfQnKlda/SOetqDXCXbwbF3Nq+eIJql6Hen3xjHAnp+MIXw59Ks+sNNqN1ak5U+K5zY42jiQjeB/F4VdivmEqMP0IiyjfW8ymNB3djPSnruZwnd45lL0edtlFuRPFZTepc5V4IfDL6mZ3yuhiWyjEe6GLf1S7xax2pv3A6U9AZsOE0caW73HWKQlOLPokh3OzksIY1Jg596KHJPL2q3vYt12JyWG2ESsLVXfs+mWMKknDPrAQRiRoc2TmRZqXDtsNQ3pROLrIJw7MxepBCLmoV8jdj+Ul/vLgvAhhv3zUR7jtxSUYNPLU/ws2fAr1TT6w12lCnEWDrxCgxM7fMFTxwKf2echVx0ykG/Glky6Iyjj0xJdR0bRB105OyaVRzf5e3v+GoNE7vzFm3zK2ko0iulV0r4fRbHug4+0z0pmbmmNeizYQESr3O3Ye116rIlg5Aj3XuBk=$imXm9vCgTUjZ6LySCMG0xQ==
cf-chl-out: jiqsF2qAhgqM3NISx1BNHMcMZjidkkrLISPjc2M/sqRyC15Pm63nOHAUvhfDB1X7sRCfhY55CyrqGv6GxFY8HqOYUvPJB0jZeV8DyOSj10o=$vddm6RQKSwvRibufrsENYQ==
priority: u=3,i=?0
server: cloudflare
cf-ray: 95454c93efae56b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET xnhau.sh/favicon-16x16.png
200 OK 650 B URL GET xnhau.sh/favicon-16x16.png
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type RIFF (little-endian) data, Web/P image
Hash 0fd65c0fbeeea2b45ccab7d4fd4f030e
5dcd70fa9e1323633ff9ffa9b83504041f5212eb
c73aefbba682da7729baed30b67a360ccf8520ead119103a9d78eec777c757a1
GET /favicon-16x16.png HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g1$t1750695485$j42$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:07 GMT
content-type: image/webp
content-length: 650
cf-ray: 95454ca64bd9568b-OSL
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=909
content-disposition: inline; filename="favicon-16x16.webp"
vary: Accept
etag: "6417c9fc-38d"
last-modified: Mon, 20 Mar 2023 02:50:36 GMT
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gOOMoFypjCp%2BO2cKMkN7442jE6Dji%2FzHupEyDkhe%2FauckYAdwdjhE%2F5j2PP4jPIFIQHSZn6ZBlAF8oCkscVNJQR02d8Duo800Q4kNiMfL%2BfjbesOcY4HJHcz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2014&min_rtt=719&rtt_var=1151&sent=762&recv=111&lost=0&retrans=0&sent_bytes=820017&recv_bytes=52925&delivery_rate=3174137&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=20451&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/contents/videos_screenshots/152000/152337/336x189/5.jpg
200 OK 2.7 kB URL GET xnhau.sh/contents/videos_screenshots/152000/152337/336x189/5.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 336x189, Scaling: [none]x[none], YUV color, decoders should clamp
Hash ddeff1e5c4dd3cdcda19f4d30625d653
84758e6b2c08b8fff27779d71bd159a4a6275afa
eebf1868c60c7361904df5e51a6627601950cc06edca61a1efd550ba5abd65b1
GET /contents/videos_screenshots/152000/152337/336x189/5.jpg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g1$t1750695485$j42$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:07 GMT
content-type: image/jpeg
content-length: 2652
cf-ray: 95454ca8ff1a568b-OSL
cf-bgj: imgq:85,h2pri
cf-polished: status=format_not_supported
etag: "68597282-a5c"
last-modified: Mon, 23 Jun 2025 15:28:02 GMT
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ip4oGgRch6oXZnDbZTKgiDE%2Fuzv25GEU%2BRE7OS6VAKMYNn0KhfZVxkGJsSUb4lxmsozLk%2FwPyutEeN2v6dtFgnZJJpv1%2B2VOmHo%2BQTm7%2BzVolydVx2YE7nTU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1844&min_rtt=719&rtt_var=794&sent=795&recv=116&lost=0&retrans=0&sent_bytes=855242&recv_bytes=53155&delivery_rate=2781779&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=20924&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/favicon.ico
403 Forbidden 430 kB IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type HTML document, ASCII text, with very long lines (6004), with CRLF, LF line terminators
Size 430 kB (429617 bytes)
Hash 959ef7bb87e54e1289a5f3dd88f76a12
36a7c39770e133c951a359208bb69f4a2608145a
0a9c8807d01272a88c4b4dc5650690e36c4f77716c9ac96c99c05ee3b4ee8353
GET /favicon.ico HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xnhau.sh/?__cf_chl_rt_tk=rrYaThaECUHk2dHqWENu.Opekzs.iJIcOh4juKadxsk-1750695466-1.0.1.1-PUzivR0SdVAs7fETUtegxb0VELAutpelGIBqklBxmrI
DNT: 1
Connection: keep-alive
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695467$j60$l0$h0; _ga=GA1.1.330979420.1750695467
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Mon, 23 Jun 2025 16:17:47 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xcsPSjnFTmtvHkRQvuCY1BGq3nEJLNfPbSrzfJuft8AYsjZ4%2FIKYCc2UTMGmvAofUKzvTczpJk2PxTXtKSwtkaTQJVPyp1TXYj9vRClR9dAqdNViqAEAOIL1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c2e0c88568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: chlray;desc="95454c2e0c88568b", cfL4;desc="?proto=QUIC&rtt=2715&min_rtt=1004&rtt_var=1489&sent=193&recv=19&lost=0&retrans=0&sent_bytes=212475&recv_bytes=2529&delivery_rate=5789790&cwnd=91200&unsent_bytes=0&cid=a454f75b976d38e0&ts=667&x=1", cfExtPri, cfHdrFlush;dur=0
POST xnhau.sh/cdn-cgi/challenge-platform/h/g/flow/ov1/1955987916:1750692544:FD6cEDFZSz5hjBJ1zbS0HcAMtstxCzaJSoM3eZkKnDU/95454c2af8f7568b/op3OIHARAAkVdQgzlbVJU6X..vS5X53xEND27YoZ4ss-1750695466-1.2.1.1-NxzUo801Y.mRy0Ayf2VPGu_a0ZZDA_roxbZ4XUSlZuVz4YKCrkGf3zQweJ40lph.
200 OK 19 kB URL POST xnhau.sh/cdn-cgi/challenge-platform/h/g/flow/ov1/1955987916:1750692544:FD6cEDFZSz5hjBJ1zbS0HcAMtstxCzaJSoM3eZkKnDU/95454c2af8f7568b/op3OIHARAAkVdQgzlbVJU6X..vS5X53xEND27YoZ4ss-1750695466-1.2.1.1-NxzUo801Y.mRy0Ayf2VPGu_a0ZZDA_roxbZ4XUSlZuVz4YKCrkGf3zQweJ40lph.
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type ASCII text, with very long lines (19280), with no line terminators
Hash e674d327e46d693d74bad7c0d06dec50
1f50c28753fe417e407477e741dc3a131dde0772
d8c624b2a471da7af33728b219bd9027843b4eb1c81e46d768ac1caeb483b880
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1955987916:1750692544:FD6cEDFZSz5hjBJ1zbS0HcAMtstxCzaJSoM3eZkKnDU/95454c2af8f7568b/op3OIHARAAkVdQgzlbVJU6X..vS5X53xEND27YoZ4ss-1750695466-1.2.1.1-NxzUo801Y.mRy0Ayf2VPGu_a0ZZDA_roxbZ4XUSlZuVz4YKCrkGf3zQweJ40lph. HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xnhau.sh/
cf-chl: op3OIHARAAkVdQgzlbVJU6X..vS5X53xEND27YoZ4ss-1750695466-1.2.1.1-NxzUo801Y.mRy0Ayf2VPGu_a0ZZDA_roxbZ4XUSlZuVz4YKCrkGf3zQweJ40lph.
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 2156
Origin: https://xnhau.sh
DNT: 1
Connection: keep-alive
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695467$j60$l0$h0; _ga=GA1.1.330979420.1750695467
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:17:47 GMT
content-type: text/plain; charset=UTF-8
content-encoding: br
cf-chl-gen: TeHTa7jAJqSl6vlMKfDPBTcg5L7VTgMr0wVTvrlQMVA=$7LJu0nKjdBi3NFhNmGKu+g==
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Eh8diQ3Oa7MRDqnZysorMEecygm5NItn337dHwb%2FAR6fciKlXNZU9TcBwZbZT5iCmjrAv6g30jNMyq6PVMTJaozG%2BUpq5nrOLJ4mvCOCelDIR52S%2BxwukejK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 95454c30e87c568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2182&min_rtt=1004&rtt_var=1132&sent=331&recv=28&lost=0&retrans=0&sent_bytes=373257&recv_bytes=7404&delivery_rate=5391&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=1137&x=1", cfExtPri, cfHdrFlush;dur=0
GET www.googletagmanager.com/gtag/js?id=G-76BW3G48N9
200 OK 399 kB URL GET www.googletagmanager.com/gtag/js?id=G-76BW3G48N9
IP
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
File type JavaScript source, ASCII text, with very long lines (6004)
Size 399 kB (399049 bytes)
Hash 19fd43103e68daeb8ebb41b304ef07b6
9498974963115f3b20f18d2bba2df369cebf09e9
97458238df1587fc4c296c810fc524017e4d9da19b29769999c9a4b8f7b1913c
GET /gtag/js?id=G-76BW3G48N9 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 23 Jun 2025 16:18:05 GMT
expires: Mon, 23 Jun 2025 16:18:05 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 133042
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET xnhau.sh/static/images/fonts/icomoon.ttf?nddhpi&v=1
200 OK 35 kB URL GET xnhau.sh/static/images/fonts/icomoon.ttf?nddhpi&v=1
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon
Hash 3187c717d302bdf327ac139aca774853
9b1b7b2207e3b08eaaca6dfa2b003669e1dcc9f2
7a6afab6aa09a865f0684aa8e15454a1696445f754de73a37b1bb1e44986ad06
GET /static/images/fonts/icomoon.ttf?nddhpi&v=1 HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xnhau.sh/
DNT: 1
Connection: keep-alive
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: application/octet-stream
content-length: 35092
cf-ray: 95454c9c1ec5568b-OSL
last-modified: Mon, 17 Jul 2023 07:34:36 GMT
etag: "64b4ef0c-8914"
expires: Mon, 07 Jul 2025 23:26:56 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 663200
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KOZENVu4D2A67XIGbv097rTnjxyP7PKdIFzf3awbZgqq87kt9ciJLumSfWJsLLFNVz0u3L2PV2bYUhnmupW8YZpoxsL%2ByVI%2BGE%2Fg0BVEYLyesoyhF0LcyENo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1761&min_rtt=975&rtt_var=730&sent=384&recv=57&lost=0&retrans=0&sent_bytes=416538&recv_bytes=30177&delivery_rate=5813&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18270&x=1", cfExtPri, cfHdrFlush;dur=0
GET challenges.cloudflare.com/turnstile/v0/g/180b6a431d85/api.js?onload=ZJgv0&render=explicit
200 OK 49 kB URL GET challenges.cloudflare.com/turnstile/v0/g/180b6a431d85/api.js?onload=ZJgv0&render=explicit
IP
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type JavaScript source, ASCII text, with very long lines (48827)
Hash 37dbac94aef1db73de816d49652909e2
324ec5206208c2c336cfd6f924c4e19b80cc5706
cad4395e83a0a0d66da04e657e32491d430580ce68aeb4bd59031b3e37ab9c99
GET /turnstile/v0/g/180b6a431d85/api.js?onload=ZJgv0&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xnhau.sh
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:17:47 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 16 Jun 2025 16:33:10 GMT
cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 95454c2f28107130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
403 Forbidden 430 kB IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type HTML document, ASCII text, with very long lines (6004), with CRLF, LF line terminators
Size 430 kB (430294 bytes)
Hash 967002d54d453386d32337da33c50c9f
728152362fd9fe14d33e9d6528c1ccb9be69dde3
423ceb1a2efed876ad8e4b528babe6f0c343d9bbd3db44300cf5cbdd090c044f
GET / HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Mon, 23 Jun 2025 16:17:46 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HQ7GJtfeH2Z01JB%2FL%2BB5PcMyqgClzztDlqGk%2FwtCRtK5F4OLgfLvqjDyaGcwlWezMx5q5T1JS%2BeSEhFfiKvENI2Q8IkEZd75DxFm50k0hjKKEyMPlL7r%2FXZ2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c2af8f7568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: chlray;desc="95454c2af8f7568b", cfOrigin;dur=0,cfEdge;dur=51, cfL4;desc="?proto=QUIC&rtt=4872&min_rtt=4860&rtt_var=1847&sent=12&recv=8&lost=0&retrans=0&sent_bytes=4139&recv_bytes=1226&delivery_rate=128801&cwnd=12000&unsent_bytes=0&cid=a454f75b976d38e0&ts=229&x=1", cfExtPri, cfHdrFlush;dur=0
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=95454c32cd9d56b1&lang=auto
200 OK 140 kB URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=95454c32cd9d56b1&lang=auto
IP
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/naign/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 140 kB (140490 bytes)
Hash 9fc3f21196129738f1c0b214168bc484
8a708454485927c8983e9509dfeff7d76d7b73c1
fb343e957500898ca702aea5dfd22b3a1768121e146acb1af8d8be6488923205
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=95454c32cd9d56b1&lang=auto HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/naign/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:17:48 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
priority: u=3,i=?0
server: cloudflare
cf-ray: 95454c33bedb56b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/95454c32cd9d56b1/1750695468749/39b9788d85a72ed565e8af73a7d01e3d4181513945f4cd90c823613c7af888dc/Y2bDIlN3mG0QANk
401 Unauthorized 1 B URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/95454c32cd9d56b1/1750695468749/39b9788d85a72ed565e8af73a7d01e3d4181513945f4cd90c823613c7af888dc/Y2bDIlN3mG0QANk
IP
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/naign/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type very short file (no magic)
Hash ff44570aca8241914870afbc310cdb85
58668e7669fd564d99db5d581fcdb6a5618440b5
6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/g/pat/95454c32cd9d56b1/1750695468749/39b9788d85a72ed565e8af73a7d01e3d4181513945f4cd90c823613c7af888dc/Y2bDIlN3mG0QANk HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/naign/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 401 Unauthorized
date: Mon, 23 Jun 2025 16:17:51 GMT
content-type: text/plain; charset=utf-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gObl4jYWnLtVl6K9zp9AePUGBUTlF9M2QyCNhPHr4iNwAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAscjm_UO_k901rNdCKgLw5bvI4i6M_jDNCIXpfs2LRbtxwLOrUyplqVvML_hVlB5tIDMuj0ihhaOFHose-Y0_UjQnNUGE_vol46VvGgscTMtTjU4xINriap8AMTIygvljEBt6my-nBwkUGhY3U9v5iKC-eWR5bTfvrqFsuIVxafkSfhHqDXB4KLGNjvOOV71GGJ9x4yxA-C2OcULZ1uDDKuvAaMhuiWdF6OzSTXruP9yPg1vmuteavOW1re0YDbCbtK16PhHdSzWym7v_FrvId-2zf26j50FlTd_vl_DcKNDVCgWDoU0uX3cU6V3rSQoVXREEqPr-2ywSGru8ZuXRoQIDAQAB", max-age=20, PrivateToken challenge="AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIDm5eI2Fpy7VZeivc6fQHj1BgVE5RfTNkMgjYTx6-IjcABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsLS4HBnLGydwK-bLQGRCaoyMsrXBRrDgQVmxS06j3UF0nYSd6GdTGCKIu1WV60eg-tJtTttfEVq7wHVQf4vzjYBidmCh88ebzxKv2GB6PESSodf5MsEup9xd5dxpkYScgL1CCJq89kRrOQ_CS61bvkL_oGyZf4ffqG5THgaOsopqj8dFLH6_SMy9yf8EgMYqpyjxfKsD-1_qb1m1DRjJEKPWKIGwmHXIKQJUqsxZFm4_Inwkxx7QMpVP4GyqlTxFVz7stWwJRSkMLHjEM_IWLUYfPhuwIUVqmRjGsY1n8flA1bRfxaWHNDxoi25-M2BKTP9NkNNJBbTKErhrZ9LGywIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIDm5eI2Fpy7VZeivc6fQHj1BgVE5RfTNkMgjYTx6-IjcABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEApfbVKW9jv_cm7VCxn62oVAVC5hFmu-kZjUyoHVY59NkyKyHKMDjFTQQtwRz5WaCrisTztPUBe5IEqngHq_K6n0LVGgP-vP5_EV8Q63SdqECb9NxgQT_jnGDYKP38YIvPHP47CMaQOOm6F4tfy50OTdVLxmir-nwtG4EsjQpjbWt5h0uKnWtYHo0z3T2TGAaak3xueW6uC1Y9XvXRyQ4VLq2YT2Pj5nG5iT9qz95HGc0b9CcuEADcgyRRUmYpFDKa4E7gznEbKSul9XcN8oNCkL49spyNT1stpPVhL9fnQZz0zdIsTIdKR-iKQoy9HKyPEeNpcQhrSF7DgSPJTnR6xwIDAQAB", max-age=20
priority: u=4,i=?0
server: cloudflare
cf-ray: 95454c47bf1156b1-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET xnhau.sh/static/styles/all-responsive-metal.css?v=1750695306
200 OK 225 kB URL GET xnhau.sh/static/styles/all-responsive-metal.css?v=1750695306
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
Size 225 kB (224805 bytes)
Hash 35e3844e394a518aedf865ed1adc03b8
947e94d16b324f8cfdbc976976e737252e602b97
d35009bb094e90bc8bec6347ef0dc84a29f1ea0a92a3b9af55bc4e5d51b5e984
GET /static/styles/all-responsive-metal.css?v=1750695306 HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:05 GMT
content-type: text/css
content-encoding: br
last-modified: Mon, 19 May 2025 02:11:48 GMT
vary: Accept-Encoding
etag: W/"682a9364-36e25"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2UDjxJyhU1JxVVxhvRwUgkArCiDZu06gbEh%2BV64j3jx0FusCZ21cWxOBUgAB8POzBwHwSjxNNM2DVlkCbqdB7Xa9FJhhsVdmnnuKKp9uhqxpPXqQ%2FmGRgwSw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c9c1ec7568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1770&min_rtt=895&rtt_var=698&sent=661&recv=78&lost=0&retrans=0&sent_bytes=723812&recv_bytes=36716&delivery_rate=12345354&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18997&x=1", cfExtPri, cfHdrFlush;dur=0
301 Moved Permanently 430 kB IP
Size 430 kB (430294 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Mon, 23 Jun 2025 16:17:46 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 23 Jun 2025 17:17:46 GMT
Location: https://xnhau.sh/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fCpp9ujg%2F%2BEutBBvNCPGp6yNZXyE9MzhALIyZK5Ol8rQOzAkl5dJf3KDpi5dYl7jyLDWxv5L5UL%2B0G17XZabmgdovI2h80cTp4m6JCqa9QGnAgp%2BC6XcVKZM"}],"group":"cf-nel","max_age":604800}
Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Speculation-Rules: "/cdn-cgi/speculation"
Server: cloudflare
Cf-Ray: 95454c2acf1d5689-OSL
alt-svc: h2=":443"; ma=60
Server-Timing: cfOrigin;dur=0,cfEdge;dur=25, cfL4;desc="?proto=TCP&rtt=472&min_rtt=472&rtt_var=236&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=393&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
GET xnhau.sh/contents/videos_screenshots/152000/152128/336x189/5.jpg
200 OK 3.8 kB URL GET xnhau.sh/contents/videos_screenshots/152000/152128/336x189/5.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 336x189, Scaling: [none]x[none], YUV color, decoders should clamp
Hash fc963628f4dc28026236148b3fc53e50
da95b21a7dbf9c1bcd62237e9065973d8eede6ea
dd39338e0fcbfb6bf50d1bb60ceba2a34c6dd53d4656c9bc5e5648d758bd36f3
GET /contents/videos_screenshots/152000/152128/336x189/5.jpg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g1$t1750695485$j42$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:06 GMT
content-type: image/jpeg
content-length: 3834
cf-ray: 95454ca90f26568b-OSL
cf-bgj: imgq:85,h2pri
cf-polished: status=format_not_supported
etag: "6858ebbe-efa"
last-modified: Mon, 23 Jun 2025 05:53:02 GMT
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 5301
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ikM8E6i05ZyYMGnPY9xVSqTFkqgixMnxWat7ybg2b8oO4AV1MXY6rCBjwoJ8Hxft4Sp1BW8TV35ME6bKlsf871Sxl6yZDnTUwjmG0jM%2BJGdzT8m7HuaiXnoS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2784&min_rtt=719&rtt_var=3066&sent=731&recv=100&lost=0&retrans=0&sent_bytes=788269&recv_bytes=49466&delivery_rate=6052&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=20339&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.blog/pc-hit-220325.mp4
206 Partial Content 88 kB URL GET xnhau.blog/pc-hit-220325.mp4
IP
Certificate IssuerGoogle Trust Services
Subject343b0625.sni.cloudflaressl.com
FingerprintA2:08:FB:F8:F3:02:60:38:2B:E3:6A:99:E2:AE:88:D2:22:BE:E2:FD
ValiditySat, 26 Apr 2025 23:55:51 GMT - Sat, 26 Jul 2025 00:55:43 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Hash 9688f0ea475ce38ae0484896774140e3
009f5a9fe8b6eb22c06bd291913a5a35df9a400b
3f46927374ec0640bc12fa981e56489b0bcc887271b85eaf97a2c1ed432da8c5
GET /pc-hit-220325.mp4 HTTP/1.1
Host: xnhau.blog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Mon, 23 Jun 2025 16:18:06 GMT
content-type: video/mp4
content-length: 88521
etag: "9688f0ea475ce38ae0484896774140e3"
last-modified: Fri, 21 Mar 2025 23:28:03 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5384
content-range: bytes 0-88520/88521
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tP0rQghFUs2BmBEOkku1azcD0eOTArfs73pe%2BD%2FsaAEsb4RdIuGxnvFk7lAbfejOS%2BZMcM5e5%2BuIz17JTJdn2ZgK9oEC%2BFwbMOJ6FaTF4J39URrUipeHyGMgyQkL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 95454ca5db8656ca-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=863&min_rtt=452&rtt_var=57&sent=217&recv=77&lost=0&retrans=0&sent_bytes=287915&recv_bytes=1528&delivery_rate=48173577&cwnd=254&unsent_bytes=0&cid=5f674aad10231c28&ts=238&x=0"
X-Firefox-Spdy: h2
GET xnhau.blog/pc-kbet-160425.mp4
206 Partial Content 70 kB URL GET xnhau.blog/pc-kbet-160425.mp4
IP
Certificate IssuerGoogle Trust Services
Subject343b0625.sni.cloudflaressl.com
FingerprintA2:08:FB:F8:F3:02:60:38:2B:E3:6A:99:E2:AE:88:D2:22:BE:E2:FD
ValiditySat, 26 Apr 2025 23:55:51 GMT - Sat, 26 Jul 2025 00:55:43 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Hash 38bc6ddcd62d5d873782605d45d8ec18
30382fa2c54e3386849703879f99914c4c6f0afb
3a568000450978c2874c77e49749a6d0544637644bd18a49dd6277de2b4f1c5c
GET /pc-kbet-160425.mp4 HTTP/1.1
Host: xnhau.blog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Mon, 23 Jun 2025 16:18:06 GMT
content-type: video/mp4
content-length: 69512
etag: "38bc6ddcd62d5d873782605d45d8ec18"
last-modified: Wed, 16 Apr 2025 06:34:48 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5383
content-range: bytes 0-69511/69512
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2YIUcOXBAWtfejfGrZc5%2BFXq8onxyAxqau2vxlB3CKzKIyUoQkFP5urqeHEIhExzdAF27zubjhMszN2Uex2r6Rti0WZPSpZ7kkdxoHG5VByDonaLCar6%2FrtUvMuz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 95454ca4aa0e56ca-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=631&min_rtt=452&rtt_var=103&sent=108&recv=24&lost=0&retrans=0&sent_bytes=137281&recv_bytes=1286&delivery_rate=30430823&cwnd=254&unsent_bytes=31856&cid=5f674aad10231c28&ts=48&x=0"
X-Firefox-Spdy: h2
GET xnhau.blog/pc-lu88-190625.mp4
206 Partial Content 94 kB URL GET xnhau.blog/pc-lu88-190625.mp4
IP
Certificate IssuerGoogle Trust Services
Subject343b0625.sni.cloudflaressl.com
FingerprintA2:08:FB:F8:F3:02:60:38:2B:E3:6A:99:E2:AE:88:D2:22:BE:E2:FD
ValiditySat, 26 Apr 2025 23:55:51 GMT - Sat, 26 Jul 2025 00:55:43 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Hash 757f74c0c4fb41013fdfac8104d690ad
d65bc80338045163ac163eca29f11867531af3b9
39299a220d0452e64e60fd3b9f828946cce3469a7eb33b3e6a88d746107a1e4e
GET /pc-lu88-190625.mp4 HTTP/1.1
Host: xnhau.blog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Mon, 23 Jun 2025 16:18:06 GMT
content-type: video/mp4
content-length: 93966
etag: "757f74c0c4fb41013fdfac8104d690ad"
last-modified: Thu, 19 Jun 2025 09:31:10 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5383
content-range: bytes 0-93965/93966
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RancSTAU6wQfC6SIA1MBVdYHAbM7sXDDu8vUXyKZPtpe1m3uRA3L%2BToFJTJ1SyYKJce4XURJFjsq%2F2z5Nn1N6APoT4XnfVwUz4d%2BuBEXgyLftwWiA33uIbO9dNyJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 95454ca5db8c56ca-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=929&min_rtt=452&rtt_var=60&sent=359&recv=131&lost=0&retrans=0&sent_bytes=482517&recv_bytes=1528&delivery_rate=64850944&cwnd=254&unsent_bytes=0&cid=5f674aad10231c28&ts=244&x=0"
X-Firefox-Spdy: h2
GET xnhau.sh/static/js/scroll.js
200 OK 1.9 kB URL GET xnhau.sh/static/js/scroll.js
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
Hash 4ad9358b4c48efbc24d58124ba41758a
39bd675f17e6204034f13ad9db11a714daf54446
cc6e47e5418c7daba13045f5938848a59ac946bbfa13e7fec8101e5fb3c468cc
GET /static/js/scroll.js HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: application/javascript
content-encoding: br
last-modified: Fri, 24 May 2024 10:26:23 GMT
vary: Accept-Encoding
etag: W/"66506b4f-799"
expires: Mon, 07 Jul 2025 23:26:52 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 819360
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aHBbjb3sWLfFYwWfrZ%2BAJDSFe7Awood4g3FIJ1zH5leww8hMWoRSL%2BjPX7iU4aO%2F0yPsCDlOLufO0paC0vVqn0Unc%2FIm1o80nR35CC4sNT4DTRZT3f3N1KEo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c9c5f1b568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1519&min_rtt=895&rtt_var=470&sent=470&recv=75&lost=0&retrans=0&sent_bytes=496814&recv_bytes=36572&delivery_rate=211870&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18315&x=1", cfExtPri, cfHdrFlush;dur=0
GET xnhau.sh/static/images/flags/ru.svg
200 OK 286 B URL GET xnhau.sh/static/images/flags/ru.svg
IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
File type SVG Scalable Vector Graphics image
Hash 0cacf46e6f473fa88781120f370d6107
077a34f40e6d166e06180c2e5abd5b322a8de6af
5b51b57f63cf58e451abddeaee39a8c7b133cb3d58c6ef1a903883bda7c346b0
GET /static/images/flags/ru.svg HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g0$t1750695483$j44$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:18:04 GMT
content-type: image/svg+xml
content-encoding: br
last-modified: Mon, 17 Jul 2023 07:34:36 GMT
vary: Accept-Encoding
etag: W/"64b4ef0c-11e"
expires: Tue, 08 Jul 2025 06:00:18 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 375519
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BbNi9jq0yXgfWKRo6ioKyxKQPHcpkVJ4jpvxbnNDHVm1kNwwxIBG5BZ%2FaDIjDSLqm5L2vkyvXJ8AKDhkP%2FYS1TGGq2r6AReNsHN1KWHx5lE%2Bh11VfWDDJob7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95454c9c3ef2568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1555&min_rtt=895&rtt_var=600&sent=457&recv=71&lost=0&retrans=0&sent_bytes=487970&recv_bytes=35718&delivery_rate=6370760&cwnd=182400&unsent_bytes=0&cid=a454f75b976d38e0&ts=18291&x=1", cfExtPri, cfHdrFlush;dur=0
POST xnhau.sh/cdn-cgi/rum?
204 No Content 0 B IP
Certificate IssuerGoogle Trust Services
Subjectxnhau.sh
FingerprintDC:76:5A:5E:14:0D:01:96:65:C4:9D:4E:16:6C:A6:98:64:84:38:75
ValidityWed, 11 Jun 2025 16:23:50 GMT - Tue, 09 Sep 2025 17:23:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: xnhau.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1548
Origin: https://xnhau.sh
DNT: 1
Connection: keep-alive
Referer: https://xnhau.sh/
Cookie: _ga_76BW3G48N9=GS2.1.s1750695467$o1$g1$t1750695485$j42$l0$h0; _ga=GA1.1.330979420.1750695467; cf_clearance=jB7RLLNsaJiyFDX2Frktk0wRW_qppUlopbsyWcC0vpU-1750695483-1.2.1.1-IMdhEFSn1WTbR3Ze7dO.4sS19yaU5mPzWzSRa766aYpWvVrQv1L0qvbmoZ9dkFdK4kYuwlOWt5QCvIhNGqrCBkbF0wQ00iNRH54bPnyHqpmnvmC2a20mygppuziCnGbSVsdTTPankRfcq5YKt.tk6mjkQk31Z3zaUGZUtZvR0m8G7sGGoyW0cKT.XgBWpk9nGKPEdjxUPDV6cGxdykTNQbOMvZ3MzMdT509z58FPMh_NwBcqG.Ij.iz4c0SyRNqtnQ_wVN41W1VeJRWhgN99C5DH3JA7qezHpJbhF5273fX3tLbeUKFbxk6oqvlu3JMjnpHzYzem2qlkLpvDMvFtsU4FaQhC.f7ZHHia7yvWPsGOXOQOv9.zr37P2bmi3ojU; PHPSESSID=q2jqmbapjild85rdm10noes2pk; kt_tcookie=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
date: Mon, 23 Jun 2025 16:18:06 GMT
access-control-allow-origin: https://xnhau.sh
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 95454ca8def7568b-OSL
x-frame-options: DENY
x-content-type-options: nosniff
104.26.10.112
142.250.74.168
0.0.0.0